last executing test programs: 1m37.263865254s ago: executing program 0 (id=10680): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@private1}, 0x14) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x5e6f, 0x42, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x6, 0x7}}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, r1}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_OBJ_USERDATA={0xd1, 0x8, "0338bd4a914a7a649725ec57f329cbae22bfddfe59df3de96240dfe9d7a7c0480e5bb9acf8ac8c943471ef7ae12eb154a6a6efdb4a58827524667b6a76c006c21b568664014a094e0f9401be0934c9ee80eac43f7f45a0256773e423aa0a9c75361025a5150e9ab5846228606f90ca25f5febb1edbe244cc4e035509b3aec5fbbb4a05820797e576f4bd7724e1660ab83cc23a6f9748870ef614cea0df8753487553fdebaed6fee25f89e6c424de518d9ca0682f1ce1071ba52605134a639dd365edef5a26b1279b0b06ec04f8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000842}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000004c0)={0x1, 0x10}, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x24, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x0, 0x4, 0xa, 0x5, 0xffffffffffffffc0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x10, 0xc9, &(0x7f0000000680)=""/201, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x6, 0x90}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x1, 0x1, 0xffffffffffffffff, r2], &(0x7f0000000840)=[{0x0, 0x3, 0x0, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r4, 0x2b, 0x1, 0x7ff, &(0x7f0000000940)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x76ad, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map=r7, 0xffffffffffffffff, 0x17, 0x10, r5, @void, @value, @void, @void, r6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r9, &(0x7f0000000b80)="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", 0xfc, 0x810, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000c80)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @empty, 0x7f, 0x4, 0x401, 0x400, 0x8, 0x40100010, r1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x9c, r11, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40084}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r12, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r13, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r5, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0], 0x0, 0xa4, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x42, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001040)={@ifindex=r1, r5, 0xf, 0x20, 0x0, @void, @void, @void, @value=r14, r6}, 0x20) socket$inet6(0xa, 0xa, 0xfffff818) 1m36.961176063s ago: executing program 0 (id=10684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24040400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xc8, 0x0, 0x1, 0x80000000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000300)={0x2, 0x0, [0xd, 0x3c, 0x8, 0x8], &(0x7f00000001c0)}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x7, 0x3a}, {@loopback, 0x4e24, 0x4, 0xfffffff7, 0x12d60, 0x12d5c}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071104d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m36.858375101s ago: executing program 0 (id=10687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0xfffffffffffffff2}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70, 0x22eb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc9, 0xfffe, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e24, 0xb5, 0x0, @opaque="a919d545b74f8746e6de2d19c67818823ca7e01cef8e410d1060a398ecf094457a7e0c037533e7944c0e9a14d8ecaf08632cf5810ad9f5c134404c8d4d5ff144e6f307c6e594f047069a357dc355e3ed2423210b062001ac851e7319ea8ea47209587e62c2dec0efe5c050579ffaea1943ce8bb9f1147ae3ce0a5ccef2195c49097a322e6bbc902b08b48d61091dd8b441e88524ee42bfdda124fc7f4eb9bab0103d977f4dcdbbe6a7033c27fc"}}}}}}, 0xdb) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3fa, 0x4, 0x70bd27, 0x25dfdbfd, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1m36.210727858s ago: executing program 0 (id=10697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000002200)=0xc0100100) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x6004}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x3, "ce"}, @fastopen={0x22, 0xd, "5e3f86f04c053c8d6ef98c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x3]}, @exp_fastopen={0xfe, 0xa, 0xf989, "a5714473fbe7"}]}}}}}}}}, 0x66) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b150c001900017f000000000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRESOCT=r5], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0xc0814) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x26}, 0x10) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0xffffffffffffff60, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xaeb}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 1m35.838496816s ago: executing program 0 (id=10701): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffff8, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a40)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0xffffffffffffff00) getsockopt(r2, 0x2, 0x1, &(0x7f0000000080)=""/44, &(0x7f0000000180)=0x2c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, 0x0, 0x8, 0x0, 0xfffffffd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x80) (async, rerun: 32) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014001b00e3de3d7b4cd07ec3ee777de774fc7987cca4198908"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x20, 0x0, [{@broadcast}, {@private}]}}) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 1m35.460729628s ago: executing program 0 (id=10705): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES64=r0], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 1m34.991178546s ago: executing program 32 (id=10705): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES64=r0], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 6.567645526s ago: executing program 4 (id=11634): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r3, &(0x7f0000001580)={&(0x7f0000001100)={0xa, 0x4e21, 0x18000000, @empty, 0x9}, 0x1c, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x4}, 0x20) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r3, &(0x7f0000002ac0)={&(0x7f0000002800)={0xa, 0x4e21, 0x157, @loopback, 0x79e}, 0x1c, 0x0}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 6.253861308s ago: executing program 4 (id=11637): r0 = socket(0x10, 0xa, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x891d, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0xffffffffffffff8e, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000) 6.047066778s ago: executing program 4 (id=11638): mmap(&(0x7f00008d9000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, 0x0, 0x0, 0x40000c1) connect$tipc(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x5, 0x7) listen(r5, 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0xc0000) setsockopt(r6, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) unshare(0x62040200) mmap(&(0x7f0000a3d000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)=0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901000000008095000000000000001801000020207525aa453659e62238075e3400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000002500f4fff0ffffffbf91000000000000b7020000030000008500000085000000b70000000000402c22c82cdda8a488da115d68a445f779af495ce69a46d0b9473dec62e4711f4381f326a3b29d670200f7"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, 0x0, 0x0) 3.7043437s ago: executing program 5 (id=11645): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000041) readv(0xffffffffffffffff, 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x80000041, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c79c6763fdcb88306000000bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd409823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a00", 0xdd}, {&(0x7f00000012c0)="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", 0xf23}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=@mpls_getroute={0x188, 0x1a, 0x1, 0x70bd27, 0x25dfdbff, {0x1c, 0x14, 0x0, 0x3, 0xfd, 0x3, 0x1e6395e008c4df88, 0x3, 0x1100}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_VIA={0x14, 0x12, {0x26, "b11564cdfb58fb9195e438a86cdb"}}, @RTA_NEWDST={0x84, 0x13, [{0xff, 0x0, 0x1}, {0x7ff}, {0x9, 0x0, 0x1}, {0x9}, {0x9}, {0x1}, {0x4}, {0x3, 0x0, 0x1}, {0x3efc, 0x0, 0x1}, {0x4}, {0x8}, {0x7}, {0x1000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xffffe}, {0xa, 0x0, 0x1}, {0x4}, {0x861}, {0x8001}, {0x4}, {0x1}, {0x15f1, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0xe9, 0x0, 0x1}, {0x2}, {0x7}, {0x81, 0x0, 0x1}, {0x9, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1, 0xd, r4}}, @RTA_VIA={0x14, 0x12, {0x21, "db45dde8c2adda55cb9c80b99cbb"}}, @RTA_VIA={0x14, 0x12, {0x18, "802c80def5115df65af783867545"}}, @RTA_NEWDST={0x84, 0x13, [{0x7, 0x0, 0x1}, {0x2}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x9}, {0x6, 0x0, 0x1}, {0x1}, {0x3211, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x401}, {0x81, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xc}, {0xfff}, {0x1}, {0xc48e}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8}, {0x100, 0x0, 0x1}, {}, {0x5, 0x0, 0x1}, {0x2}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5}, {0x6b1}, {0x0, 0x0, 0x1}, {0xfde72, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x1f, "c0f8d65e4b29549a65c3c8b135b9"}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x80}]}}]}, 0x150}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x0, 0x0, 0x8000}, 0x50) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x44e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd60d5b33204180000fc000000000000000000000000000000000000000000000000000000000000006253000000000000050200030502000706cc09bf801dc6719ffdcfff23c1667314a2b063736265ab4a7e2e609e98c51c93acdbf11f789062e208bdc6dff340b3fc4ee58d1d9c4af654730b716e3747319eb5f4aa7d6c213136807fe816423f3f3f33016c80d4b9d0c39f6b8ab438bb2dacb429ca0845a308882e5fcff98082a47aac1e7a268ff2603a5edce7f3f812a0db70c2e3696c96c8f0c7ba5b5924fe1359e053551c3eb861c28f7e9de69498dae86bd83be96841421707ec3eea00b8f41b0e85eeff0b8ddb04b6363a9eb587af6e22371e894a1bf4f694bdcc2f98c204"], 0x0) 2.978874167s ago: executing program 1 (id=11651): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r7, @ANYRESDEC=r2], 0x2c}}, 0x80) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) readv(r13, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) (async) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000040)={0x1000, 0x7fff, 0x3, 0x2}, 0x10) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) 2.874722099s ago: executing program 5 (id=11653): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x1, 0xffff}, {0xe}}}, 0xfffffffffffffd69}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="700200003f0007010000000000000000017c00000400fe80580201"], 0x270}, 0x1, 0x0, 0x0, 0x800}, 0xc010) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x168}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r8, 0x0, 0x0, 0x80000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x4}, 0x0, 0x0) shutdown(r2, 0x0) 2.805568098s ago: executing program 1 (id=11654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000ac0)={0xec, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0xf8, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf, 0x1e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e05}, @NL80211_ATTR_IE={0xa2, 0x2a, [@preq={0x82, 0x51, {{0x1, 0x1}, 0xac, 0xf, 0x3, @broadcast, 0x7ff, @void, 0xe1, 0x3, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x26b380de}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{0x1}, @device_a, 0x6}, {{}, @device_b}, {{0x1, 0x0, 0x1}, @device_b, 0xa1f}]}}, @supported_rates={0x1, 0x8, [{0x4}, {0x30, 0x1}, {0xb, 0x1}, {0x12}, {0x1b}, {0x6, 0x1}, {0x48}, {0x9}]}, @prep={0x83, 0x1f, {{}, 0xd5, 0xe, @broadcast, 0xaa3, @void, 0x7, 0xffffffff, @device_a, 0x9}}, @ibss={0x6, 0x2, 0x2}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x3ff, 0x3, 0x0, 0x3e8}, 0x401, 0x8}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10000000}, 0x8804) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x6c, r10, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r12, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r12, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) (async) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x300, r15, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e6301423e37ff4a286545a6aaf8c5ad0eb47c26f52215a4e0c727c3a41c28898b1728c72"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @local, 0xd090}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9810}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x402}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1317}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4aa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa712a060}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x454}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) 2.578134378s ago: executing program 1 (id=11658): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) listen(r0, 0x80000001) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000180)={@pptp={0x18, 0x2, {0x1, @broadcast}}, {&(0x7f0000000080)=""/168, 0xa8}, &(0x7f0000000140)}, 0xa0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000240)=0x40, &(0x7f0000000280)=0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000002c0)={'caif0\x00', {0x2, 0x4e23, @private=0xa010100}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000300)={0x2, 'veth1_to_hsr\x00', {0x2}, 0x1ff}) r3 = socket(0xf, 0x3, 0x9) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x2, 0x6, 0x0, 0x11, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bb1, 0x1800000, {0x6, 0x33, 0x7, 0xca, 0x0, 0x1, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x5, @private2, 0x40}, @in={0x2, 0x4e20, @broadcast}}]}, 0x88}}, 0x40000) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000480)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f00000004c0)={'full', 0x20, 0x800, 0x20, 0x7}, 0x2f) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43, 0x3, 0x1}, 0x10) ioctl$sock_ifreq(r2, 0x891b, &(0x7f0000000580)={'veth0_virt_wifi\x00', @ifru_data=&(0x7f0000000540)="f13f8646e2386ed433f1a1086fe12b9898ec79417f37333cb8d24aca695ddd84"}) connect$inet6(r3, &(0x7f00000005c0)={0xa, 0x4e22, 0xa8, @private0, 0x6b8}, 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) r5 = socket(0x1e, 0x3, 0x101) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) sendmsg$sock(r0, &(0x7f0000001800)={&(0x7f0000000680)=@generic={0x9, "bf2636c96e1d6f0f5b9ff63011b7b5817a608373190fe433b6cd65036caf3263de349520551eba62b61db1f0e91cfcb74652bbc428a90ff953fb25b29d584a3138b2aaa32d5d7393a1d706d8d024cc989f790f011ffaa51e95821224bb01556107b21caf3d2518407e0ff95a48c0bc41037d9f60506032d318841f4f586e"}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000700)="0fb7343c63e704f0f6ec423939dca5ee6927444bec562085ab299f2f08fcbcbecf71df1f577aecc057ab7d79f386310d6c653a132b8ae0c1ee104a7e0e992a96a6e955f6ebffae1d1198d0af6b8c3823d54adecc4fc388e84fbd0396e7be4b0c0f08ae676462d7f976de7bd6283c00663f93337a43992698b62e4694a7a7d21e188409d6783f8298229d61751195f4784a68a8c9b6e5af787dd9bc5e281e44f8c6b9545bc30ae021894a806308a95516574e5973965aaa2465", 0xb9}, {&(0x7f00000007c0)="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", 0x1000}], 0x2}, 0x20000090) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001840)={r1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001880), &(0x7f00000018c0)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001900)={0x3, 'pimreg1\x00', {0x4d}, 0x590}) connect$vsock_stream(r3, &(0x7f0000001940)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r8 = openat$cgroup(r7, &(0x7f0000001980)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f00000019c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, r9, 0x200, 0x70bd26, 0x6, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040010) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x9c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x97bd}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x9c}}, 0x8000) 2.490192479s ago: executing program 4 (id=11661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2a}, 0x28) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000000140)=""/238, 0xee}, 0x40010002) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x27b1, 0x62, 0x0, 0xc0}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x38, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="01ac0000c5c6000008002e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c010) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 2.396938694s ago: executing program 3 (id=11662): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x20, 0x7, 0xb, 0x2, {{0x27, 0x4, 0x2, 0x21, 0x9c, 0x68, 0x0, 0xc6, 0x4, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x27, 0x21, [@multicast2, @local, @empty, @broadcast, @loopback, @empty, @local, @loopback, @local]}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x0, [{@broadcast}]}, @timestamp_prespec={0x44, 0x54, 0xe3, 0x3, 0x9, [{@rand_addr=0x64010102, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0x4}, {@loopback, 0x5}, {@empty, 0x2}, {@private=0xa010102, 0x7}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xa}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@multicast1, 0x9}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0xffffffffffffffe5, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x80}, [@RTA_OIF={0x0, 0x4, r2}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 2.354832358s ago: executing program 1 (id=11663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x6a040000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000380)={0x10003, 0x9372, 0x5, 0x2efc, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc}}) unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)={0x3, "bebda6"}, 0x4) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xffffffffffffff8b, r8, 0x8, 0x70bd2b, 0x25dfd3ff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000884}, 0x14) 2.147993055s ago: executing program 2 (id=11664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a80140007000003040000001400020000000000000000ff01000000000108000a0001"], 0x4c}}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x9, 0x16, 0x5, 0x100, 0x0, 0x80000000}) 2.104020464s ago: executing program 4 (id=11665): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801d000380140001007465616d300000000000000000000000080007"], 0xd8}}, 0x20000000) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x11, @local, 'ip_vti0\x00'}}, 0x1e) close(0x4) 1.911056835s ago: executing program 2 (id=11666): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) close(0x4) 1.910430471s ago: executing program 5 (id=11667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a01000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000400000000000000000200"/112], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff}}}, 0xb8}}, 0x80) 1.899858762s ago: executing program 4 (id=11668): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'ip6erspan0\x00'}) r1 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40085}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x5) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000300)=""/229, &(0x7f0000000080)=0xe5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xb8, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000900), &(0x7f0000000940)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032cbd7000fedbdf25000000001400020077673100000000000000000100010000ba445c9d9f7693f0f9b0a739cc7db018fade9a8b00858b41cb62f6e0d6b79924"], 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3bbd5d81c57524fa343c6da6548000000", @ANYRES16=r10, @ANYRES8=r6, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=r1, @ANYBLOB="0c000200ffff00400000000009000a00aaaaaaaaaa000000"], 0x48}}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x7fffd, 0x12) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000005, 0x4010, r4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0x66, "bf21232c4e85408685a2bf864241125f4bed33a38271b8bb686f9865ceaf31b492f00a6ff3e592f44722f7f2ed02f5b1420a13da2e86761bd6f3de547ffb4dd0af000fb9575f18569aece5d164a3e1d8d0dac68a09b56f890b5f0d0ca91d3273b6d81a28554f3c1ed38665227ffca01945f2780e3249f0039f6d0f649a9390e15e7fc0d15c5879699228c4b88364873743461c887a871c9018b496f581bab151b089965d787f9f3cd2d986abe04b182c92c980359b4df39582cf"}, &(0x7f0000000180)=0xc2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="b701ad21df227842dfa2a9e01f5d71fb53ed24ff94901e1c4e18e0a408112c171526e81f21fb87e341798a42d000166e1b70bd9f008fe390f23636130578ff43fd75b422b82cea04f178c656eebcc178d76c67645c160edea50ef9", @ANYRES16=r8, @ANYBLOB="080028bd7000fcdbdf254500000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40010) 1.863648795s ago: executing program 2 (id=11669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xf4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}]}, &(0x7f0000000180)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.822210605s ago: executing program 5 (id=11670): accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) (async) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000200)=0x5, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) unshare(0x0) (async) unshare(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e", 0x19}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.459037716s ago: executing program 5 (id=11671): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000580)={r3, 0x7}, &(0x7f0000000600)=0x8) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) 1.232531791s ago: executing program 3 (id=11673): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r2, &(0x7f0000003980)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003940)=[{&(0x7f0000000080)={0x28, 0x27, 0x200, 0x70bd28, 0x25dfdbfe, "", [@nested={0xc, 0x93, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0x4, 0x147}]}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0xfff}]}, 0x28}, {&(0x7f0000000140)={0x2414, 0x40, 0x20, 0x70bd2d, 0x25dfdbff, "", [@typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}, @nested={0x107, 0x132, 0x0, 0x1, [@nested={0x4, 0x24}, @nested={0x4, 0xf9}, @generic="b140fdc8cf3646482f2cf0a4b23de7997ea5ad535b5dc3f09ec8a9b117cd3d979374b674ebc9db15698d277158fa1b74f62ab899af3ba95ad5a23c74dcc236b92a3964db41149258b7df24298b0f5705ae2439b1f7760bb038057651e0a0c64867c6c4ae55529fc5261ac11fdb802cb1fec1fe0e962cd9cea25e93ffc1521b8534ef51d95a422038c08ad615106612b2ea1ccaca64e087e7e1d115d2e72c39d8ed757d0250406a04d6d009a5af3f70788cf24acf6fb378db65feebb75f764056e68321f4d6069220909e4234b387adddaba646793b2dda61dfb5d8b6461dadee2bb76d89e6b56cbba6e405721c579cf5551769f0e6d6e5", @nested={0x4, 0x86}]}, @generic="6be76d1c062645684892ce4f8e963fcf9db4935c013909dba89a9e8aa86d83dbe409ea1d8fa10be81da668ebc71e66a5baa1a2e1a0ba0bad568bb10bb59b6734a2505c555055b9a9a5a4e7db992524dfa6f94cf209fbdc33107fa2f922cc724b973323200cf0fbe38ddfc4359d3707c63d4a5d61d0cbe0d0196f5e7b472eadae236091e7d6a0136aecae11b6001489811804275c475afd54973837f9241e1255c1", @generic="747fb6dccafed1dc1b191e300f0f507236936175f833f8f1386754140cd3598331dbc03999c2a0af0635b54dbb6250ccfd83590f801004d23fcfb01cf961a990", @generic="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", @nested={0xf0, 0x117, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="8ea08a328bf047083f760183f5c874e7c45a0d770614e65acb7159adda38a40ced3c3a5bf4790bbd", @typed={0x8, 0x66, 0x0, 0x0, @pid=r3}, @generic="47acb22d88bfd2f8a4cbdc0b981f2aad22528ef315d2962e5c428632beb59296096f88c59017a4d443b193c587883cec60a6e9e8ce4fbec71f9b06cde0d44aebc1cc616a70c143d4f78842228cabfee456a32b5410bb9d8e3c34575583b920393893eb3757491e91eff4096de58de44d5e8195baca64c22be69393bff2d194dc88ff927cc19cf3ee39329498e9ce0eab6ee901734a801daead45762e3e42feabc251708a2b9368d2c822bb7a01f96df2", @typed={0x4, 0x59}, @nested={0x4, 0x6b}]}, @generic="6b25eb66352dc64d39ff0fc45fd06f8d499ad52c5dce70d444910a4f4b11232975315d2a939fe1540b02a63238b3304bc39e76f819c1dbb8f01dc13e4e9d742b4c5d600ecf0730775df025e5dd3b707d8b1a6e7f4ce9a6a505bc7ed191717e01da74fd72459ffa65872db24288c4ce134a98e5b506c7fd70de60f504dbfbf1c086dc0d27a6f041d173d7ec9a1b5a6da72c13e2d78b4e9619ad614ebc4124be3e8daa36840fccaaabd5be13908747abae59658be60207c52583f9e9508cafec7166a56e98fbcb9d1505e6501fbf28ad3b74760a43adc337025b75c357d4a9a0", @nested={0x37, 0x81, 0x0, 0x1, [@generic="888029bd883a9ecfc93c3ac8d4ca4d6bfc49cc3c0b03fd60df16d258ea37b69833a3083c9e672abfc88fa4480977912ebd659f"]}, @generic="416d33ed2feb0e86a6838622c19db3bd604630ac097b4e4c2a56024a2f686030206a224055af3931762b15b57ee85155d746a678e1e6ed59c4ffca8b03208266a7b518feb396b6769e5ebb3b3669767d020810d7e17d2aea0eac4f3dbcb501910989a517be95144ee0baa207328e3ab066c23a753fb3f7333b841aca7fa2d5ed5ee5c576f0e8807bf6b75448fd33fb1527707eef8651d9170f84980e004f73b451c68c451fffb63061f9d7323306d909bc0f720c8e2973ab6a26919218a15f536861c63f90cd18da8dcada4a289f21d4fed6b8a0696e0f191664771c0ad059992dfe66ae685d0d5dcedda9c50a9579217b0ac0911dcc4f8102b2b4ab87699e0a48ad52f54eedbf6cff634af1d07175bd4ea940fb0fea650f8014767c83a0d2bcca09c3e1aef1e19f5e2ee67734fddabe749f03e4602afc564456963aa1e51e7f1b257fa687a645bec9524965612f7e51d67cfaaa0903e2c79ac7d4ec9961fc165f5714137e13b5dd1b5a70edb4b5cec26dc27ac2d8fde3b1c20b070067405d41e1dd202a9a249133a3b9103538feeebf9303eb81f4c17af2faf891c9456f789b0f8cf7aba1c9d99de623ce31f4b5553bb2c1a5ed3a23dbb222217fb33f5badc94a8d8249f92944ce181253a574ef2cadea820e288e4d0e3d98cc578481acafed7eaaab76b4f9f656c5c4bedda8f0d2615e52825f97b8eabc493f444e34a39145bf900fa7e23d8b772e3d262ab6ca1661414b09c8b8a5c2690d11f8ffdb4d272ee4ff1ea59d4372e6393e9cb01a52690ff692de8e2f1aee2a6b9a39ea7594dcf090cd8a3b9af85e9f5f81f4fe6561adae23632ef738b663aa5df8d14b50f4eac0bf0a692a95178a884b20ea96894c1e5d5d90041d8fcd60e0331ea49f5615e6ef2d9002d071112e5addd7c186e8b896358788550111887e55336e441356bb649675ac029e18ab381851b534c732bced7ba32064d928ccb4e84a35608be6f5475fc457d864824e72bb6dc529b241790b138b8502c2fdf15c7f5333ddd2474add8b92b0f8fe100fc805f4ed1455b77dc1d65dfc9932c78d1005da5dd3be2c1ba52327eb97a25f4ee84cb6217178550dac4d54329d9ed055e8f69ec0d03ecc151e7fc3078a9995d1804f33e85c209efc2226049c9f8814ac5c884ab05aa68174eb970d5d4046eb3c77bc0814604480efb558fa515ea807ea7a6051142d7b67036bf65b76587de5f723630ea8eaa2bdc6b2396aff067814fa270a9cc29c6d365c09e8672071b30e706cbe0e1a95d99c30d35a8e307463fa6d6873b07412636b0737b15b062edda7564748a87cd3a543d40c3b126f560ba1fb72d2df25a1ce282fd24cd2b833e3eddea9cf43ba221540b5b8b4223f1ab161660034c774c590f29fbaecf0acb09de68f240039636815d13609718e7d32edc08a01c3fe86b65ac42f18d16355a83bfca12af628a98ec774825658e5cdd9d1c63a010b6e35d4b1d302d7f7dbd77c96c714230108f265452ef9c30801d12f18e7a40e181b8b6cddcd4de9a0d1b01253810a03214d098d029753d54aea90bdd8fed6f9c1fb4d6394e7113474e90af840e59362a89e783fe3467e65ac41643e1023a760307506a7c5f0e5f4963888a5a3bc87e060483973b7c0a06b007a45aea1cdfd9bd85947050b6d79216427186c0f5b580dc7f4a47277c419b55b158afe67930b01a44079c824992e94cc467b99eb232c83bef2cabc2b1b478c2fdcd7d5c2b04dbeddede859792a26a4e544250f8cc290c0dd0c89faae4989d5417546aec12665e5576e7d77bed135cc7e1d901c4a98f8a25278334ee816b1aabcf2c72ed107b08a752b893474bcbbe21bb0be315c2038f66ed097e8162bde16637dde99798724947634e5c5ad8f0b8456b8fad03f27b0aa030530e0245b8f24479d6ae3dae0920fdd7e20c8ba1e3c77fd3682331c27e723afe26dc5b8a2945f89a786a9c896cd8900696eb60bf864fd28b3ccfed3e2a3f69418d22746c1120bf932d811b95018102b11a3dff42bac37795dbb8c9ade44b9a3ecba8c85fb23d21cb586c074f9d6b85fdc2120da7a301011d16d07e35eb66f0f4d2b1c86ea4b67fecb4cf4aee64a3620808e37f287242ff3504e8ae4331d0ccdf883c1f6a9fd813316b8880afa2b0370511eed66b5813a3048a32355176dad8dd44223ba92de71deee749bbe450bcb82781a017617e9fe7d7426ab1bafb17fce2f4e9f7429746f045bca6f93c2206dbee39628dbb6e6cb060f2d7c8009ab24ceda9cfb96e3987c12d4eae791ca2973a889bc8aa4537360879c45a6df7c0b8938870ce73c3c75955cca0f54f95728f392e5b71f98bb798c3a60231d70ddbace92f2ceb3e405bb6cfffae3e4e578f1bc121f85aff494abb2dca9452b92c3533a5d359fa6774700f6220a1a948a71d705b4f14f4e74963098bb26adc7a6075b7e57d71b046658dfdd52750f7e2a8abfe7e415f4f00c6bdfe2a08770f0b035c7ab7f5af345f893f324aa39ffef57e1cef56514fd8e2e6fca61a84c82c7e46307f3f715c495b2806bdc50ba470ab7611912ee079c66bde827aab75a875fbeeac9c9bd4d34451dbea418da5449e95c686e8e6cb688c7c99bce5ab42a6b56322382fd7a48de4472648b28404dbdeea2e5ee03934b525bcdccaf169aa3f0357f896c7bebdcd7a5a156fe2f534fcb16ae8f0680b5c2bb81a4f71e90451afc6b74324d97c429cdce4a77d1dc0a19fa9da49572310378b87b43f0891225f9ca220c9522f4c243ffa90a83b8f24f478c200b24d231b87efd59c4b4befd2da43d37bb729587e822b608f008f5b93f42d0755d73905ce8c58d26fdcb5607901e74e361cd815300b63d3ab21f77d81578982940c846f3bc223ae870a4cb6c8265c59acd9c9a72e21fa182895242e6162e0df6c1ba1c67cf19359e10e2917daebdc22a696ed0285f1923225109502576044e36460921ea4a4c8527cd41ed986929df2e1c79743b86f0777f71c71c01706cb375515d26f34f993545f9f49ebc71e471130610927bd7d56e0cedab3d8e050e3eae7b8a55eff406de4ebd8a547ca479fae6c65f0fd4af036130ab196723eb0f89902e959f0c7a5a52a9843043d8eb37957aa650b9400b9f744e5fdb6d9ce610e05bec3509cb7e7ecea4fd7ee43f8f95ee6c9c17ad0bb8c566399539491ac83cf9378ee465276d9f414fc36995301a625f41531742224fb679722cb937550174035a5b528a9473866631ce5ed154825aa42aed9402a4285bc9b12f709bed769cfa500ba5a24f63316e1518baeafd0dc4f5b3fd1c39733eea1d9cf7efbfe3f2bd3cecb52956b53e530a308d31ebf1ace6f4ff6c0db4a0443e917dbac06698d26818360feb6fda50847ea6ef3c29c54df23498d958501e09132ee7c565d1ee77b8ef28741f228183733c2cf51456f5e98c6dfd994554123c284cfb0c61a32fd0ee62564f35ee7c8b38cb2bcc79731b4d5666bbb3b0921955599ec50d10598425a826386094534d8c5dfa411b0ef2073fd6455fe559b1f4a756236ffafcae378f5aac9cfca39762cd74470a31b3ca8e35c5a86d69dc7b29513b6d8bc694469f4914ff04d6c549459b0732bc63b5cb5d4ecc9610ef7d474cd7722f71b58751219b0f7bb04fbfc5bb2225b58e65ee6ec892b4d3b6c2a02c8a721a395e1d0e73293fdd3a53268e782139cc111b674df7500167a09eba377d566b7b8ebc4f05090069451035c8b20071c37e260222852de8fe9702e5d3aa5d51faf10608f9312340f45be9f553f5c01f373eb23fca56e27fac39e259974548819aa6968e35463accf937c2b307ba2f9f5ec250193cfafa0d58af1c7fd0c471756c03b83cf2e87be38800ccb719daa4e2b28a9e98b9acccca6896bc2d48f3102b23fb6ae8ed599df7157e85c1ea3b49a5fa85a4e0fa4f7852b0894172fc0c7847662fa5f22498d6b69ebf55d60308e8f683a3e4f2bc0a6c31d7df8ea555900554e50f559198d052b16d2e288346f848c5caa5172def99c7e0b68a7b17c7fccb7e81895f4ac7ae0936058beb629a28c89a2ab369fdc8b33f8d8b9e1f8d6b69b1c7d8b23f3dd49fa3f9c405c1fcf044cbf0dcd2ac5d1b21598c5b0e70fdc9cb5629cd8d305673bd73a485f8e80e8b75f9c18368061fc2e32e3004ea0ee7128d68fe0955dbaa2f893ad53ce9269882edfa86d4a4d724bf2037e7b3ee362fc1bb5b74ddf03f0adaa392cc7571e62b6a3f9ec2f9ebaaa7791badc9d6bc98a51069f8adf5e17264fd8a9b448258bf304d6a74939f602760fd434e8684837b1e063e4d86ce4680b1429e7f484013df90a8ea880380315a716c97b4240d057a088696223d4f2268f102158e91dafd17ee3aa8dd91b2df5070a08ad79188b38e0eddf7edf01bee1512299dd0563a622678bb5e5f99f2c89490fe923d3efbadf9543e165219d5973f30910e5389a18aa3f553b4ae4cce0b6fa2f3a0fcf1c65b15b1793790a2630c4362e46c42f59bd6bebfbd8f86794e821b9544e186065858aeabaeb7ff6bdbbcc7242e360c6e0e3e3d35758aafa2cb1b7042f826da3c3cdd88e1cfff44660262612629c921a12cc424ffe1c22c1ff304f26190088b90647857b9d6c89099b3fff4a3d89c5ca124c0b2ec9bd18830eca8213cbbe009487e65b1577695eb0e3a35ee5ca6371048be473783d935ddac481e60bdac3dabd7f85c92b054195ff507386e4d59e77b3c25dabd93e32b78d5c8edba229dcfdff728962a60e14ad4018c1dc83ec93e82ec0f0d747849279de875c0cf0f61a1f081df7bd5228433a6c5c997bbb829d548dcfd5083fc5d270dd5bdb98afb3afd402a68302ff8865809945b249d077245516a20eedf5baac2fd5b487a3a33fbac4cf97f17ee85bc890d0803aecce3444e188b9143bb49d37652291f45b98fd86dc4970d2ecca89e265287540a5845e19b1f9f41fed978269aef2039afbf7c4782557caf9dc1eeca38ebf9ac235a661f04ac10884d86e22fd0891301ba1eb78607cd608b32a7c47904d09285c75250c6f5b64631a4fd3344711cbfb21159ae7dde1fc337f576f83e35aabb9c88283b613e0a2148df88fdeff3db58e0b1dfe76907b052f9be7fcefddbd96db73b52b8ac3814624fe8c777ca55dd7361b47dc58118c406708b2c7ab797ad6b2ff67212ade0ea3095bf0c7d0c0d3726f724092750def956e278590a927f655cf825ab8c11c98f1a28801f69a163eabb73ac953d914ad6da1daffdbc5398b2184a5d8c63d1cc02875ca690a9e41c2200d0973eca75828c14398b98f95f259027c15e754b9d2bf66522b0231f5d4d722193c4ad4be5de8de6fa57af53b0b63d532d7c11a4e88a77f1526d5c7f7d51b23a7bc8b89f47a60a046937f8359a2f3b65d0c8df4ced9275db9fc9671d4f28a69badf6094a76a131f324ba85cd3388d71e22143783789e804c875bf457ba6b559dbf8feab943eccf6f999f995ec57f8d8f57d554b783c5a9d412acaa1b9f850cc516d8780d98b68192c7013f3d0db56418a84f1024fd9161834da70e06b09543f68990b41e4f59b8e38d276f61976c023e5e6671630ecb1b1e309f0c3c360b552e4ab248495cf1c0b7b153e000b4756477d93bea5f7b1436e6e7922747e4f18028d9196dee05c14ee20332c814dc8ae1eb988b4f689fbe5e8a65bc88f5216cfb4de14b5ab048de565f9651a8a97866e1ce4530cb1f913748add4dab35915ad1286cd67b00c503584f70941f319098b59b5e848abfded60329c482480cbacec585baa8a58b8bab12a8209"]}, 0x2414}, {&(0x7f0000002580)={0x1384, 0x11, 0x100, 0x70bd25, 0x25dfdbfd, "", [@nested={0x10b5, 0x2, 0x0, 0x1, [@nested={0x4, 0x100}, @typed={0x4, 0xde}, @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, @generic="031c559878c3a04d3c5a51e07eb2cb155c5a7a01c215245f5572c4e3ef3e4ddb6abf1d14dcb06e09180f790c699c6af582705310a078cbab5692e8c62b56016b77401aa771140ddfde925cb01f4b2b1bceeff2e3a210b0d52213b1d90fa1b39f4699144003bec71b7587c9f3738cd86c79d8f87fe0b5bb490d6322557adb6e5d6a6711665cd29607f1c8c65ce4", @nested={0x4, 0xda}, @typed={0x1004, 0xb0, 0x0, 0x0, @binary="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"}]}, @nested={0xc3, 0xa1, 0x0, 0x1, [@generic="669a344ee92789ee4e96d22fdae7ddfec8af0f0ec97f93ad9274cd41ce297f57c2ff362f71b7bf95a770c238f906fda94bc14302c525e9480fc44cef3f308605f52c0e89eef1d416ae32fce18d6384aa65ff48ffcc4f915db1240622477a0d092f8ec49816ff17cfa08ba8bcdfd13824191cd9898bfb1c31037005b43eb5c3593d66a9da330929f37bb1ab9e3e2cc23053df46879e73539f1f82b5a440c85f8dedfb97af3651a7fc90825845d458dc8c3dbfce", @typed={0xc, 0xb4, 0x0, 0x0, @u64=0xee9a}]}, @generic="8b1a2ed9d570e42979c7b5faadbdb695d8b5d2ff5e6457629e2681f82c4aac2f95640e0683bd4221a4bb59b543418e75dbb620db6d454ab15ee33d7af798634c1e6f9ebb38dbe3fae66db0b5afd9ca05076089795c04c3b4ae1ec6201006e1bb3c383833ab5c00cb4e411f2aa006bebd6b1bb232c77e1dd1fe85eb8852ee627d94be2e1edc069460abf06b97ac4966bdd8b63a4f71f337c427d76839697c333fd602f120b59eb011", @generic="bba0f641b139b4e424ee0b8a53fb4bdcf84b77153d89d6994b3ce45feec50cd30676c17bb615af0ce244a40bb32123e7b4af938a5131950f2dfa10f39ae9533a050aec570fab96219467962a186a792b4067568f37e65069175cfc8e07374fb2f55b9254ef1bb362738b856b16d87c1edc2338325cbedd52c4f83bf70fa5c0cd229a870fd904aee69dd2515298d1cc1e3701e7f6ce79cb7ce1f415d7a4d76c09d01a3c3bf0ab90d89470c737a522209a63aa9dad1dad", @nested={0x7d, 0x50, 0x0, 0x1, [@generic="d147ab101bb4c9a7d3c74244a007888177e4ec219803832dfdadd0ab92e853e9340c31fa59626cc52d1e4efa863ec7873044bba0664a5e3a72ca71ba4b357a38a6b3979902274f26556fa6a5ba78f39afd3e5b84752726b330749c0a1028e78aa79b437e02a8d42bd53404733ecfe70325ff617aae55e110f4"]}, @nested={0x4, 0xb4}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x1384}], 0x3, 0x0, 0x0, 0x8041}, 0x0) r4 = socket(0xb, 0x80000, 0x34) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000003a40)={'ip6_vti0\x00', &(0x7f00000039c0)={'syztnl1\x00', r1, 0x29, 0x1, 0x0, 0xffff, 0x10, @private0, @remote, 0x8, 0x700, 0x0, 0xf95a}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003ac0)={&(0x7f0000003a80)='ext4_fc_track_range\x00', r0, 0x0, 0x5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003b40), 0xffffffffffffffff) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000003b80)={@broadcast, @remote, 0x0}, &(0x7f0000003bc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003c80)={'syztnl2\x00', &(0x7f0000003c00)={'syztnl2\x00', r5, 0x0, 0x5, 0x1, 0xffff2ce8, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80}}) getsockname$packet(r4, &(0x7f0000003cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003d00)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000003fc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003d40)={0x228, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x24000084}, 0x20000000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) pwrite64(r11, &(0x7f0000004000)="b8e0344a4adbcc7eb11bebe3ddf3aa9f4c4bf720f26b978d836918eb723f9c0432f7e653d966186b2b066598c98bff98b00b81aeaa4eabf44aeeb7f03d42c74f1895ca4abd5e1668fadcf68ddc5a3c5b13263e160418c854465003ffd2c794ca39d5899e0d6b0312d58f1c3af980a92dd29d9c36eccb0beb9ee82a73c1759a27c0e4644efe4612be6cdac74056b30da17610071e8fc88433fa94f4bbf7bbca0dc557948214892bffd1bd0ba0a860d79e417a0d7d2b46af195e17ce0504acfd1d0942", 0xc2, 0x7) r12 = socket$inet6(0xa, 0xa, 0x3) listen(r12, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000004100), &(0x7f0000004140)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000004180)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000041c0)={0x1d, r13}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000004200), &(0x7f0000004240)=0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000004280)=@req={0x9, 0x401, 0x2, 0x3}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004300), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000004340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000004480)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004440)={&(0x7f0000004380)={0x94, r14, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "bd1f95ecb5b4d1735d336b857ade8cce"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1e78014e6169151522396192045d3083"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xd}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "40bdd895f0ce6576b3476310787da042"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x81}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x28000}, 0x40030) syz_emit_ethernet(0x32, &(0x7f00000044c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x3, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3f7e5d9720c2", @local, @empty, @dev={0xac, 0x14, 0x14, 0x38}}}}}, &(0x7f0000004500)={0x0, 0x2, [0x32c, 0x82a, 0x84a, 0xe95]}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004580), r6) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000004680)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004640)={&(0x7f00000045c0)={0x48, r16, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1325}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0xe7b1, 0x8, 0xd, 0x0, 0x80, 0x7, 0x81, 0x814, 0x1, 0x7f]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x4, 0x4, 0x81]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb78}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000044) 638.824255ms ago: executing program 3 (id=11674): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0x1}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4095, 0x1f}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/214}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/32}], 0x0, &(0x7f00000009c0)=""/126}}], 0x40000000000024a, 0x40002002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0xfffffffe}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0xb}], 0x10}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'team_slave_1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="980252468154338b7e0c3d0000120000082bbd7000fbdbdf250ac306064e204e2401000000070000000e0000006709000005000000080000", @ANYRES32=r2, @ANYBLOB="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"], 0x298}}, 0x50) 551.135934ms ago: executing program 2 (id=11675): epoll_create(0x4) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) 525.35852ms ago: executing program 1 (id=11676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001280)=@delchain={0x24, 0x65, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0xfff1, 0xb}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0xc081) write$tun(0xffffffffffffffff, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001280)=@delchain={0x24, 0x65, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0xfff1, 0xb}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0xc081) (async) write$tun(0xffffffffffffffff, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) (async) 481.803919ms ago: executing program 5 (id=11677): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0007023f3201"], 0x138) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002340)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000044) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = epoll_create(0x201) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000140001002bbd7000ffdbdf2502180000", @ANYRES32=r1, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="00100000000000003400128009000100626f6e6400000000240002800500010004000000080018"], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x400c89c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) sendfile(r8, r8, &(0x7f0000000440)=0x9400, 0x7ffff000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) unshare(0x600) sendmsg$NFT_BATCH(r5, 0x0, 0x48841) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r9, &(0x7f0000000b80)=@generic={0x1e, "f1a9eaa09fe4addac736111372298cd407881f49aabd0c8f7947531825d435f8343d07d2dcd297f85baa9955b393562e5533c13e8232cf1eb0e7ff1d797c788b6bf7d359b8e165eb04670c6976a6522898f69e832fb33f929733e5feeb84ebf4cb5de980510a14fa37a02f498d753c2c2a640dd43d9de0076a84b7bf5f00"}, 0x80) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r7], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES64=r10, @ANYRES8=r0, @ANYRES16, @ANYRESDEC=r6, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r11}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x0, r11}, 0xd) 362.82991ms ago: executing program 3 (id=11678): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x1411, 0x2, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48010) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x3c}}, 0x4) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'veth0_to_bridge\x00'}}, 0x1e) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$rds(r8, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000300)="823c5f16", 0x4, 0x10, &(0x7f0000000180)={0x11, 0x8100, r10, 0x1, 0x84, 0x6, @random="00f5c63894c9"}, 0x14) close(0x4) 352.767225ms ago: executing program 2 (id=11679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x1800000, r2, 0x4}, 0x38) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000400)=@name={0x1e, 0x2, 0x1, {{0x1}, 0xf3}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000012300000000000000000700000a34000000060a0b040000000000000000b01f68bc0200000008000940000000030904020073797a32000000000000020073797a3200000000b6991400000011000100"/96], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 237.580746ms ago: executing program 2 (id=11680): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000070000000c00024000000000000000010900010073797a30000000002c000000020a03000000000000000000020000030900010073797a31000000000c0004400001000000000003140000001100010000000000000000000000000a"], 0x80}}, 0x48814) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r4, @ANYRESOCT=r1], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 153.926179ms ago: executing program 1 (id=11681): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f00000009c0)=0x63) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@call={0x85, 0x0, 0x0, 0x94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 78.919451ms ago: executing program 3 (id=11682): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) unshare(0x22020600) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x4040001) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r3}, 0x20) setsockopt$inet_opts(r1, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff7f0000000000003d09000018110000", @ANYRES32=r4, @ANYRES64=r4], &(0x7f00000001c0)='syzkaller\x00', 0x86, 0xa, &(0x7f0000000500)=""/10, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe2d}, 0x94) 0s ago: executing program 3 (id=11683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20040804) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) r6 = openat$cgroup_ro(r2, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r8, r6, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008c00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffc}, 0x94) kernel console output (not intermixed with test programs): ess `syz.2.9923'. [ 1221.868598][T12550] netlink: 'syz.2.9924': attribute type 29 has an invalid length. [ 1221.894235][T12549] netlink: 'syz.2.9924': attribute type 29 has an invalid length. [ 1221.909022][T12550] netlink: 'syz.2.9924': attribute type 29 has an invalid length. [ 1221.956429][T12549] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9924'. [ 1222.284902][T12561] mac80211_hwsim hwsim118 wlan0: entered promiscuous mode [ 1222.295573][T12561] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1222.546092][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9930'. [ 1222.757846][T12589] netlink: 'syz.3.9933': attribute type 28 has an invalid length. [ 1222.768171][T12589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9933'. [ 1222.854576][T12594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9936'. [ 1222.859104][T12587] tipc: Enabled bearer , priority 0 [ 1222.917600][T12587] netlink: 'syz.2.9934': attribute type 3 has an invalid length. [ 1222.950356][T12587] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9934'. [ 1223.005570][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9934'. [ 1223.028166][T12586] tipc: Disabling bearer [ 1223.108139][T12601] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9938'. [ 1223.161128][T12609] 8021q: VLANs not supported on vxcan1 [ 1223.353204][T12619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9945'. [ 1223.364677][T12609] syzkaller0 speed is unknown, defaulting to 1000 [ 1223.365445][T12619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9945'. [ 1223.647431][T12637] netlink: 'syz.4.9949': attribute type 1 has an invalid length. [ 1223.755661][T12643] netlink: 'syz.1.9950': attribute type 21 has an invalid length. [ 1223.815111][T12637] bond3: entered promiscuous mode [ 1223.862908][T12637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1224.144168][T12664] netlink: 'syz.1.9955': attribute type 6 has an invalid length. [ 1224.433689][T12690] pim6reg1: entered promiscuous mode [ 1224.439026][T12690] pim6reg1: entered allmulticast mode [ 1225.086778][T12723] syzkaller0 speed is unknown, defaulting to 1000 [ 1225.348923][T12737] macsec1: entered promiscuous mode [ 1225.368226][T12737] mac80211_hwsim hwsim114 wlan1: entered promiscuous mode [ 1225.483829][T12743] syzkaller0 speed is unknown, defaulting to 1000 [ 1225.805209][T12762] bridge0: entered promiscuous mode [ 1225.838846][T12762] bridge0: entered allmulticast mode [ 1225.879210][T12771] netlink: 'syz.0.9982': attribute type 11 has an invalid length. [ 1225.884194][T12762] team0: Port device bridge0 added [ 1225.916189][T12771] netlink: 'syz.0.9982': attribute type 11 has an invalid length. [ 1226.040907][T12783] validate_nla: 1 callbacks suppressed [ 1226.040926][T12783] netlink: 'syz.2.9985': attribute type 1 has an invalid length. [ 1226.157548][T12783] bond3: entered promiscuous mode [ 1226.164011][T12783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1226.218343][T12791] bond4 (unregistering): Released all slaves [ 1226.338600][T12800] netlink: 'syz.1.9990': attribute type 10 has an invalid length. [ 1226.447363][T12800] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1226.456864][T12800] team0: Failed to send options change via netlink (err -105) [ 1226.464428][T12800] team0: Port device dummy0 added [ 1226.778164][T12828] __nla_validate_parse: 17 callbacks suppressed [ 1226.778265][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10000'. [ 1226.826403][T12828] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10000'. [ 1226.953817][T12832] bond6: option resend_igmp: invalid value (2878) [ 1226.962267][T12832] bond6: option resend_igmp: allowed values 0 - 255 [ 1226.980776][T12832] bond6 (unregistering): Released all slaves [ 1227.166557][T12847] netlink: 'syz.1.10006': attribute type 16 has an invalid length. [ 1227.177910][T12803] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1227.178525][T12847] netlink: 'syz.1.10006': attribute type 17 has an invalid length. [ 1227.247997][T12847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.258669][T12847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.268411][T12847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1227.344138][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10009'. [ 1228.017673][T12876] netlink: 'syz.3.10014': attribute type 303 has an invalid length. [ 1228.022081][ T55] block nbd0: Possible stuck request ffff888024ca7000: control (read@0,1024B). Runtime 1140 seconds [ 1228.037745][ T55] block nbd0: Possible stuck request ffff888024ca71c0: control (read@1024,1024B). Runtime 1140 seconds [ 1228.049463][ T55] block nbd0: Possible stuck request ffff888024ca7380: control (read@2048,1024B). Runtime 1140 seconds [ 1228.061520][ T55] block nbd0: Possible stuck request ffff888024ca7540: control (read@3072,1024B). Runtime 1140 seconds [ 1228.072321][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10014'. [ 1230.071625][T12870] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1230.081853][T12870] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1230.095893][T12870] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1230.227859][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1230.238944][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1230.379244][T12898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1230.547311][T12908] netlink: 'syz.3.10023': attribute type 13 has an invalid length. [ 1230.565759][T12897] bond3: option all_slaves_active: invalid value (10) [ 1230.584238][T12897] bond3 (unregistering): Released all slaves [ 1230.599406][T12913] netlink: 'syz.2.10016': attribute type 1 has an invalid length. [ 1230.612409][T12913] netlink: 'syz.2.10016': attribute type 1 has an invalid length. [ 1230.625858][T12913] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10016'. [ 1230.733211][ T7841] Bluetooth: hci3: command 0x0406 tx timeout [ 1230.785195][T12898] Set syz1 is full, maxelem 6117 reached [ 1231.113006][T12919] sctp: [Deprecated]: syz.2.10025 (pid 12919) Use of int in max_burst socket option deprecated. [ 1231.113006][T12919] Use struct sctp_assoc_value instead [ 1231.647260][T12908] mac80211_hwsim hwsim115 wlan0: left allmulticast mode [ 1231.715023][T12907] syzkaller0 speed is unknown, defaulting to 1000 [ 1231.754598][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10025'. [ 1231.821335][ T2405] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.861206][ T2405] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1231.909403][ T2405] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.929072][ T2405] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1231.959540][ T2405] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.978736][ T2405] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1232.004023][T12941] netlink: 'syz.2.10031': attribute type 1 has an invalid length. [ 1232.022805][ T2405] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.037434][ T2405] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1232.110413][ T30] audit: type=1804 audit(1759590124.082:15): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10031" name="cgroup.controllers" dev="tmpfs" ino=970 res=1 errno=0 [ 1232.132886][ T30] audit: type=1800 audit(1759590124.092:16): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10031" name="cgroup.controllers" dev="tmpfs" ino=970 res=0 errno=0 [ 1232.163844][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10031'. [ 1232.189720][T12953] bond4: (slave geneve2): making interface the new active one [ 1232.199717][T12953] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1232.218474][T12941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1232.239467][ T2420] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1232.249609][ T2420] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1232.334179][ T2420] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1232.354949][ T2420] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1232.417695][T12958] ip6gretap0: entered promiscuous mode [ 1232.435146][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10034'. [ 1232.446893][T12958] macsec1: entered allmulticast mode [ 1232.454914][T12958] ip6gretap0: entered allmulticast mode [ 1232.466514][T12958] ip6gretap0: left allmulticast mode [ 1232.472652][T12958] ip6gretap0: left promiscuous mode [ 1232.999207][T12984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10043'. [ 1233.015773][T12984] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10043'. [ 1233.025782][T12984] netlink: 'syz.4.10043': attribute type 5 has an invalid length. [ 1233.040990][T12984] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10043'. [ 1233.141944][T12984] syzkaller0 speed is unknown, defaulting to 1000 [ 1233.157364][T12987] netlink: 192 bytes leftover after parsing attributes in process `syz.4.10043'. [ 1233.372227][T12993] syzkaller0 speed is unknown, defaulting to 1000 [ 1233.613945][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10049'. [ 1233.853711][T13023] lo speed is unknown, defaulting to 1000 [ 1233.885204][T13023] lo speed is unknown, defaulting to 1000 [ 1233.967722][T13023] lo speed is unknown, defaulting to 1000 [ 1233.978049][T13029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10054'. [ 1234.846548][T13023] infiniband syz0: set active [ 1234.877652][T13023] infiniband syz0: added lo [ 1234.885308][T14082] lo speed is unknown, defaulting to 1000 [ 1234.888329][T13023] syz0: rxe_create_cq: returned err = -12 [ 1234.907026][T13023] infiniband syz0: Couldn't create ib_mad CQ [ 1234.914400][T13023] infiniband syz0: Couldn't open port 1 [ 1235.001904][T13023] RDS/IB: syz0: added [ 1235.028107][T13023] lo speed is unknown, defaulting to 1000 [ 1235.037452][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10066'. [ 1235.059208][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10066'. [ 1235.114792][T13091] netlink: 'syz.4.10067': attribute type 1 has an invalid length. [ 1235.527569][T13110] netlink: 'syz.4.10071': attribute type 1 has an invalid length. [ 1235.653753][T13023] lo speed is unknown, defaulting to 1000 [ 1235.765035][T13120] nbd: must specify at least one socket [ 1236.204453][T13023] lo speed is unknown, defaulting to 1000 [ 1236.387056][T13143] netlink: 'syz.4.10081': attribute type 8 has an invalid length. [ 1236.428114][T13143] bond0: entered promiscuous mode [ 1236.470061][T13143] bond_slave_0: entered promiscuous mode [ 1236.475989][T13143] bond_slave_1: entered promiscuous mode [ 1236.538270][T13143] veth1_to_bridge: entered promiscuous mode [ 1236.547699][T13143] ip6gretap0: entered promiscuous mode [ 1236.571753][T13143] debugfs: 'hsr1' already exists in 'hsr' [ 1236.590193][T13143] Cannot create hsr debugfs directory [ 1236.595811][T13143] hsr1: entered promiscuous mode [ 1236.745088][T13149] vlan3: entered promiscuous mode [ 1236.770394][T13149] bond0: entered promiscuous mode [ 1236.782043][T13149] bond_slave_0: entered promiscuous mode [ 1236.809707][T13149] bond_slave_1: entered promiscuous mode [ 1236.839322][T13146] syzkaller0 speed is unknown, defaulting to 1000 [ 1236.897659][T13023] lo speed is unknown, defaulting to 1000 [ 1236.950781][T13164] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1236.983477][T14081] IPVS: starting estimator thread 0... [ 1237.080852][T13167] IPVS: using max 26 ests per chain, 62400 per kthread [ 1237.179565][T13179] netlink: 'syz.4.10088': attribute type 1 has an invalid length. [ 1237.220300][T13179] netlink: 'syz.4.10088': attribute type 1 has an invalid length. [ 1237.232042][T13179] netlink: 'syz.4.10088': attribute type 2 has an invalid length. [ 1237.498347][T13146] lo speed is unknown, defaulting to 1000 [ 1237.552894][T13192] syzkaller0 speed is unknown, defaulting to 1000 [ 1237.553194][T13194] __nla_validate_parse: 6 callbacks suppressed [ 1237.553216][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10093'. [ 1237.584394][T13195] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10092'. [ 1237.600275][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10092'. [ 1237.862577][T13023] lo speed is unknown, defaulting to 1000 [ 1238.334971][T13215] syzkaller0 speed is unknown, defaulting to 1000 [ 1238.462083][T13192] lo speed is unknown, defaulting to 1000 [ 1238.689016][T13023] lo speed is unknown, defaulting to 1000 [ 1238.899725][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1239.114116][T13023] lo speed is unknown, defaulting to 1000 [ 1239.449281][T13251] netlink: ct family unspecified [ 1239.453423][T13023] lo speed is unknown, defaulting to 1000 [ 1239.460025][T13251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1239.822789][T13023] lo speed is unknown, defaulting to 1000 [ 1240.006501][T13271] bond6: Removing last arp target with arp_interval on [ 1240.117123][T13023] lo speed is unknown, defaulting to 1000 [ 1240.193337][T13279] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10116'. [ 1240.301750][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10117'. [ 1240.386371][T13023] lo speed is unknown, defaulting to 1000 [ 1240.550089][T13023] lo speed is unknown, defaulting to 1000 [ 1240.692498][T13023] lo speed is unknown, defaulting to 1000 [ 1241.099740][T13253] syzkaller0 speed is unknown, defaulting to 1000 [ 1241.136995][ T30] audit: type=1800 audit(1759590133.122:17): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10121" name="memory.events" dev="tmpfs" ino=1331 res=0 errno=0 [ 1241.920415][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1241.959561][T13325] tipc: Enabled bearer , priority 0 [ 1242.102239][T13326] vlan2: entered promiscuous mode [ 1242.107450][T13326] bond0: entered promiscuous mode [ 1242.113153][T13326] bond_slave_0: entered promiscuous mode [ 1242.119336][T13326] bond_slave_1: entered promiscuous mode [ 1242.125866][T13326] syz_tun: entered promiscuous mode [ 1242.231789][T13325] tipc: Resetting bearer [ 1242.311973][T13327] syzkaller0: entered promiscuous mode [ 1242.320417][T13327] syzkaller0: entered allmulticast mode [ 1242.328682][T13317] tipc: Resetting bearer [ 1242.380910][T13317] tipc: Disabling bearer [ 1242.633150][T13347] netlink: 'syz.1.10134': attribute type 1 has an invalid length. [ 1242.657329][T13342] syzkaller0 speed is unknown, defaulting to 1000 [ 1242.699312][T13347] bond4: entered promiscuous mode [ 1242.699525][T13349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1242.706691][T13347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1242.724734][T13342] lo speed is unknown, defaulting to 1000 [ 1242.827023][T13354] netlink: 'syz.2.10136': attribute type 1 has an invalid length. [ 1242.844133][T13349] netlink: 'syz.3.10132': attribute type 10 has an invalid length. [ 1242.850490][T13351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1242.852718][T13349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1242.881014][T13351] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 1242.913531][T13351] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1242.944322][T13351] bond4: (slave gre1): making interface the new active one [ 1242.952352][T13351] gre1: entered promiscuous mode [ 1242.974190][T13351] bond4: (slave gre1): Enslaving as an active interface with an up link [ 1243.007592][T13349] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1243.027452][T13361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10137'. [ 1243.035574][T13349] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.120875][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10138'. [ 1243.130707][T13349] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1243.146722][T13359] tc_dump_action: action bad kind [ 1243.168368][T13363] IPv6: sit1: Disabled Multicast RS [ 1243.203709][T13363] sit1: entered allmulticast mode [ 1243.289707][T13368] dvmrp8: entered allmulticast mode [ 1243.439261][T13369] syzkaller0 speed is unknown, defaulting to 1000 [ 1243.448414][T13369] lo speed is unknown, defaulting to 1000 [ 1243.992273][T13408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10146'. [ 1244.243603][T13420] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10152'. [ 1244.307108][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10153'. [ 1244.316862][T13422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10151'. [ 1244.638185][T13437] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10157'. [ 1244.647556][T13443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10157'. [ 1245.247697][T13470] vxcan1: entered allmulticast mode [ 1245.258058][T13470] vxcan1: left allmulticast mode [ 1245.294124][T13472] netlink: 'syz.2.10166': attribute type 4 has an invalid length. [ 1245.840988][T14082] IPVS: starting estimator thread 0... [ 1245.932069][T13502] IPVS: using max 25 ests per chain, 60000 per kthread [ 1246.457968][T13512] bridge0: port 3(batadv0) entered disabled state [ 1246.495964][T13512] bridge_slave_1: left allmulticast mode [ 1246.516313][T13512] bridge_slave_1: left promiscuous mode [ 1246.530641][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.546320][T13512] bridge_slave_0: left allmulticast mode [ 1246.552693][T13512] bridge_slave_0: left promiscuous mode [ 1246.558570][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.740472][T13529] syzkaller0 speed is unknown, defaulting to 1000 [ 1246.777576][T13533] blkio.reset_stats is deprecated [ 1246.799439][T13529] lo speed is unknown, defaulting to 1000 [ 1246.844453][T13537] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 1246.958281][T13546] netlink: 'syz.4.10181': attribute type 6 has an invalid length. [ 1246.983235][T13543] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1247.371689][T13545] syzkaller0 speed is unknown, defaulting to 1000 [ 1247.773756][ T7841] Bluetooth: hci1: command 0x0405 tx timeout [ 1247.903120][T13545] lo speed is unknown, defaulting to 1000 [ 1247.903575][T13592] netlink: 'syz.3.10195': attribute type 3 has an invalid length. [ 1247.917593][T13592] netlink: 'syz.3.10195': attribute type 3 has an invalid length. [ 1247.948873][T13596] __nla_validate_parse: 4 callbacks suppressed [ 1247.948891][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10197'. [ 1247.972447][T13596] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10197'. [ 1248.002892][T13592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10195'. [ 1248.029582][T13598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10198'. [ 1248.271402][T13605] netlink: 'syz.2.10199': attribute type 1 has an invalid length. [ 1248.280367][T13605] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10199'. [ 1248.441145][T13610] nbd: device at index 2 is going down [ 1248.498407][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10202'. [ 1248.757539][T13625] netlink: 'syz.2.10204': attribute type 1 has an invalid length. [ 1248.888170][T13628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10205'. [ 1248.929272][T13628] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1249.245405][T13627] syzkaller0 speed is unknown, defaulting to 1000 [ 1249.290943][T13627] lo speed is unknown, defaulting to 1000 [ 1249.459122][T13642] netlink: 'syz.3.10208': attribute type 1 has an invalid length. [ 1249.480446][T13642] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1249.504938][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1250.084124][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10211'. [ 1250.381909][T13659] tipc: Enabling of bearer rejected, failed to enable media [ 1250.959696][T13687] tun0: tun_chr_ioctl cmd 1074025675 [ 1250.967056][T13687] tun0: persist enabled [ 1251.012882][T13687] tun0: tun_chr_ioctl cmd 1074025675 [ 1251.018480][T13687] tun0: persist disabled [ 1251.387888][T13720] netlink: 'syz.4.10229': attribute type 14 has an invalid length. [ 1251.409526][T13720] netlink: 'syz.4.10229': attribute type 11 has an invalid length. [ 1251.527752][T13724] openvswitch: netlink: Flow actions attr not present in new flow. [ 1251.895269][T13732] bond5: option arp_validate: invalid value (18446744073491447809) [ 1251.928335][T13732] bond5 (unregistering): Released all slaves [ 1252.183700][T13757] netlink: 'syz.2.10241': attribute type 83 has an invalid length. [ 1252.237003][T13759] tipc: Enabled bearer , priority 0 [ 1252.246055][T13759] veth1: entered promiscuous mode [ 1252.263419][T13759] veth1: entered allmulticast mode [ 1252.326936][T13759] syzkaller0 speed is unknown, defaulting to 1000 [ 1252.337070][T13759] lo speed is unknown, defaulting to 1000 [ 1253.317252][T13790] syzkaller0 speed is unknown, defaulting to 1000 [ 1253.350870][ T980] tipc: Node number set to 3412318273 [ 1253.378172][T13800] syzkaller0 speed is unknown, defaulting to 1000 [ 1253.406616][T13752] tipc: Disabling bearer [ 1253.485468][T13800] lo speed is unknown, defaulting to 1000 [ 1253.604894][T13806] __nla_validate_parse: 6 callbacks suppressed [ 1253.604914][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10253'. [ 1254.046278][T13811] syzkaller0 speed is unknown, defaulting to 1000 [ 1254.250110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.611489][T13790] lo speed is unknown, defaulting to 1000 [ 1255.056776][T13811] lo speed is unknown, defaulting to 1000 [ 1255.967450][T13820] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10255'. [ 1256.162028][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10255'. [ 1256.267759][T13822] syzkaller0 speed is unknown, defaulting to 1000 [ 1256.295992][T13822] lo speed is unknown, defaulting to 1000 [ 1257.012098][T13831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10258'. [ 1257.426474][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10259'. [ 1257.438049][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10259'. [ 1257.478199][T13842] bond0: option all_slaves_active: invalid value (7) [ 1257.521632][T13838] netlink: 276 bytes leftover after parsing attributes in process `syz.3.10259'. [ 1257.996363][T13858] syzkaller0 speed is unknown, defaulting to 1000 [ 1258.026216][T13858] lo speed is unknown, defaulting to 1000 [ 1258.092000][ T55] block nbd0: Possible stuck request ffff888024ca7000: control (read@0,1024B). Runtime 1170 seconds [ 1258.103850][ T55] block nbd0: Possible stuck request ffff888024ca71c0: control (read@1024,1024B). Runtime 1170 seconds [ 1258.116211][ T55] block nbd0: Possible stuck request ffff888024ca7380: control (read@2048,1024B). Runtime 1170 seconds [ 1258.128992][ T55] block nbd0: Possible stuck request ffff888024ca7540: control (read@3072,1024B). Runtime 1170 seconds [ 1258.364406][T13869] netlink: 'syz.3.10269': attribute type 83 has an invalid length. [ 1258.949520][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10271'. [ 1258.990075][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10271'. [ 1259.050627][T13880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10273'. [ 1259.474048][T13896] netlink: 'syz.1.10277': attribute type 1 has an invalid length. [ 1259.482599][T13896] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10277'. [ 1259.501391][T13898] batadv0: left allmulticast mode [ 1259.508217][T13898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10278'. [ 1259.746701][T13907] syzkaller0 speed is unknown, defaulting to 1000 [ 1259.756386][T13907] lo speed is unknown, defaulting to 1000 [ 1259.819229][T13919] netlink: 'syz.2.10285': attribute type 322 has an invalid length. [ 1259.971168][T13925] tipc: Enabled bearer , priority 0 [ 1260.008207][T13925] syzkaller0: entered promiscuous mode [ 1260.041209][T13925] syzkaller0: entered allmulticast mode [ 1260.068994][T13927] syzkaller1: entered promiscuous mode [ 1260.074703][T13927] syzkaller1: entered allmulticast mode [ 1260.173380][T13932] netlink: 'syz.4.10289': attribute type 4 has an invalid length. [ 1260.203913][T13933] tipc: Resetting bearer [ 1260.266633][T13924] tipc: Resetting bearer [ 1260.341647][T13924] tipc: Disabling bearer [ 1260.480348][ T30] audit: type=1800 audit(1759590152.452:18): pid=13944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10292" name="memory.events" dev="tmpfs" ino=1523 res=0 errno=0 [ 1260.534982][T13940] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10292'. [ 1260.601182][T13940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10292'. [ 1260.626496][T13940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10292'. [ 1260.638826][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10292'. [ 1260.812421][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10297'. [ 1260.824793][T13959] syzkaller0 speed is unknown, defaulting to 1000 [ 1260.833603][T13962] syzkaller0 speed is unknown, defaulting to 1000 [ 1260.843570][T13962] lo speed is unknown, defaulting to 1000 [ 1261.160817][T13959] lo speed is unknown, defaulting to 1000 [ 1261.168434][T13977] openvswitch: netlink: Flow actions attr not present in new flow. [ 1261.536867][T13979] batadv_slave_1: entered promiscuous mode [ 1261.669028][T13986] syzkaller1: entered promiscuous mode [ 1261.675268][T13986] syzkaller1: entered allmulticast mode [ 1261.735799][T13978] batadv_slave_1: left promiscuous mode [ 1262.405143][T14021] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1262.975731][T14045] bridge0: entered allmulticast mode [ 1263.004596][T14048] netlink: 'syz.0.10320': attribute type 4 has an invalid length. [ 1263.032342][T14045] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1263.358058][T14060] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003 [ 1263.705564][T14087] netlink: 'syz.4.10329': attribute type 2 has an invalid length. [ 1263.955128][T14094] netlink: 'syz.4.10332': attribute type 1 has an invalid length. [ 1264.105591][T14095] syzkaller0 speed is unknown, defaulting to 1000 [ 1264.135781][T14095] lo speed is unknown, defaulting to 1000 [ 1264.261168][T14101] syzkaller1: entered promiscuous mode [ 1264.267492][T14101] syzkaller1: entered allmulticast mode [ 1264.696243][T14112] syzkaller0 speed is unknown, defaulting to 1000 [ 1264.791221][T14112] lo speed is unknown, defaulting to 1000 [ 1265.231236][T14132] __nla_validate_parse: 15 callbacks suppressed [ 1265.231257][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10341'. [ 1265.326163][T14134] syzkaller0 speed is unknown, defaulting to 1000 [ 1265.549445][T14134] lo speed is unknown, defaulting to 1000 [ 1265.611474][ T5854] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1265.619546][ T5854] Bluetooth: hci2: command 0x0401 tx timeout [ 1266.543962][T14160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10348'. [ 1266.600272][T14160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10348'. [ 1266.620448][T14160] netlink: 'syz.2.10348': attribute type 4 has an invalid length. [ 1267.038288][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10351'. [ 1267.483683][T14168] hsr_slave_1 (unregistering): left promiscuous mode [ 1267.510970][T14187] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1267.540590][T14187] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1267.563676][T14187] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1267.699076][T14201] netlink: 'syz.2.10357': attribute type 12 has an invalid length. [ 1267.710447][T14197] syzkaller0 speed is unknown, defaulting to 1000 [ 1267.727908][T14201] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.10357'. [ 1267.733307][T14197] lo speed is unknown, defaulting to 1000 [ 1267.857172][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10359'. [ 1267.877203][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10359'. [ 1267.935798][T14208] syzkaller0 speed is unknown, defaulting to 1000 [ 1267.981635][T14213] netlink: 'syz.0.10362': attribute type 1 has an invalid length. [ 1267.989673][T14213] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1268.061236][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1268.227383][T14208] lo speed is unknown, defaulting to 1000 [ 1268.545157][T14227] netlink: 'syz.1.10364': attribute type 1 has an invalid length. [ 1268.681061][T14231] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.10365'. [ 1269.133417][T14248] netlink: 'syz.1.10371': attribute type 10 has an invalid length. [ 1269.302554][T14259] delete_channel: no stack [ 1269.311880][T14258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.319466][T14258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.331975][T14258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.339524][T14258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.749596][T14267] syzkaller0 speed is unknown, defaulting to 1000 [ 1269.758890][T14267] lo speed is unknown, defaulting to 1000 [ 1269.978906][T14275] pim6reg: entered allmulticast mode [ 1269.996407][T14275] pim6reg: left allmulticast mode [ 1270.194829][T14292] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1270.281222][T14293] can: request_module (can-proto-0) failed. [ 1270.336550][T14289] syzkaller0 speed is unknown, defaulting to 1000 [ 1270.402880][T14289] lo speed is unknown, defaulting to 1000 [ 1271.690557][ T7841] Bluetooth: hci2: command 0x0401 tx timeout [ 1272.336907][T14362] __nla_validate_parse: 7 callbacks suppressed [ 1272.336927][T14362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10403'. [ 1272.391056][T14362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10403'. [ 1272.539685][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1272.564925][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1272.580001][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10403'. [ 1272.598740][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1272.618019][T14360] syzkaller0 speed is unknown, defaulting to 1000 [ 1272.626750][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1272.638329][T14371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10406'. [ 1272.655986][T14360] lo speed is unknown, defaulting to 1000 [ 1272.734133][T14377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10406'. [ 1272.784611][T14378] dvmrp8: entered allmulticast mode [ 1272.945142][T14385] dvmrp8: left allmulticast mode [ 1273.069273][T14379] syzkaller0 speed is unknown, defaulting to 1000 [ 1273.079661][T14379] lo speed is unknown, defaulting to 1000 [ 1273.289352][T14391] syzkaller0 speed is unknown, defaulting to 1000 [ 1273.432085][T14398] netlink: 'syz.2.10411': attribute type 10 has an invalid length. [ 1273.511456][T14391] lo speed is unknown, defaulting to 1000 [ 1273.904569][T14413] syzkaller0: entered promiscuous mode [ 1273.910964][T14413] syzkaller0: entered allmulticast mode [ 1276.506424][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10429'. [ 1276.536977][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10429'. [ 1276.615656][ T2418] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.630833][ T5854] Bluetooth: hci1: link tx timeout [ 1276.638022][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1276.647754][ T7841] Bluetooth: hci1: link tx timeout [ 1276.658483][ T2418] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.660474][ T7841] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1276.727528][ T2418] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.754245][ T2418] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.880486][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10432'. [ 1276.895788][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10432'. [ 1276.906985][T14458] netlink: 'syz.4.10432': attribute type 1 has an invalid length. [ 1276.917242][T14458] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10432'. [ 1277.354026][T14480] tun0: tun_chr_ioctl cmd 2147767521 [ 1277.504078][T14487] __nla_validate_parse: 5 callbacks suppressed [ 1277.504098][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1277.958424][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10450'. [ 1278.406297][T14536] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10457'. [ 1278.420927][T14533] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10457'. [ 1278.472881][T14539] syzkaller0: entered promiscuous mode [ 1278.478526][T14539] syzkaller0: entered allmulticast mode [ 1278.498267][T14539] pim6reg: entered allmulticast mode [ 1278.585745][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10458'. [ 1278.729960][ T5854] Bluetooth: hci1: command 0x0405 tx timeout [ 1278.912751][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10461'. [ 1278.940985][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10461'. [ 1278.941283][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10462'. [ 1278.965597][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10461'. [ 1278.978620][T14554] netlink: 'syz.0.10461': attribute type 5 has an invalid length. [ 1279.050479][T14554] netlink: 'syz.0.10461': attribute type 6 has an invalid length. [ 1279.139407][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10464'. [ 1279.424649][T14581] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 1279.459367][T14580] syzkaller0 speed is unknown, defaulting to 1000 [ 1279.507737][T14580] lo speed is unknown, defaulting to 1000 [ 1280.631520][T14600] syzkaller0 speed is unknown, defaulting to 1000 [ 1280.642334][T14600] lo speed is unknown, defaulting to 1000 [ 1280.842389][T14618] 0ªX¹¦À: renamed from caif0 [ 1280.864425][T14618] 0ªX¹¦À: entered allmulticast mode [ 1280.869671][T14618] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1281.507552][T14634] netlink: 'syz.3.10487': attribute type 1 has an invalid length. [ 1281.541829][T14636] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1281.901770][T14646] ipvlan0: entered promiscuous mode [ 1282.285685][T14666] netlink: 'syz.3.10496': attribute type 13 has an invalid length. [ 1282.418798][T14665] syzkaller0 speed is unknown, defaulting to 1000 [ 1282.492373][T14665] lo speed is unknown, defaulting to 1000 [ 1282.516769][T14680] !: renamed from dummy0 (while UP) [ 1282.551672][T14680] __nla_validate_parse: 13 callbacks suppressed [ 1282.551693][T14680] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10500'. [ 1283.955712][T14712] team0: Port device team_slave_0 removed [ 1284.038330][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10508'. [ 1284.318491][T14737] netlink: 'syz.2.10511': attribute type 13 has an invalid length. [ 1284.347384][T14738] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20003 [ 1284.388240][T14737] netlink: 'syz.2.10511': attribute type 16 has an invalid length. [ 1284.411522][T14737] netlink: 'syz.2.10511': attribute type 17 has an invalid length. [ 1284.778395][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10515'. [ 1284.921234][T14737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.945410][T14737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.992167][T14763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10518'. [ 1285.163025][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10511'. [ 1285.200552][ T2422] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.209468][ T2422] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.255351][ T2422] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1285.267642][ T2422] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.277740][ T2422] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.324273][ T2422] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1285.354846][ T2422] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.363975][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10520'. [ 1285.380787][ T2422] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.391584][ T2422] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1285.402792][ T2422] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.413300][ T2422] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.424583][ T2422] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1285.434882][T14769] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10520'. [ 1285.504174][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10522'. [ 1285.717609][T14783] syz_tun (unregistering): left allmulticast mode [ 1285.783265][T14783] bond0: (slave syz_tun): Releasing backup interface [ 1285.792958][T14790] openvswitch: netlink: Duplicate key (type 32). [ 1285.898118][T14783] syz_tun (unregistering): left promiscuous mode [ 1285.898453][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10525'. [ 1285.929883][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10525'. [ 1286.451022][T14821] bridge0: port 1(erspan0) entered blocking state [ 1286.457574][T14821] bridge0: port 1(erspan0) entered disabled state [ 1286.520561][T14821] erspan0: entered allmulticast mode [ 1286.527682][T14821] erspan0: entered promiscuous mode [ 1286.612271][T14814] erspan0: left allmulticast mode [ 1286.617508][T14814] erspan0: left promiscuous mode [ 1286.629012][T14814] bridge0: port 1(erspan0) entered disabled state [ 1286.672645][T14827] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1287.218717][T14883] netlink: 'syz.2.10545': attribute type 13 has an invalid length. [ 1287.256778][T14883] netlink: 'syz.2.10545': attribute type 17 has an invalid length. [ 1287.267283][T14888] netlink: 'syz.1.10546': attribute type 11 has an invalid length. [ 1287.413222][T14897] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.422557][T14894] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.431918][T14897] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.440798][T14894] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.449113][T14897] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.459066][T14894] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.468015][T14897] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.478983][T14894] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.505656][T14897] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.523355][T14894] netlink: 'syz.2.10549': attribute type 29 has an invalid length. [ 1287.892004][T14921] delete_channel: no stack [ 1287.994947][T14919] syzkaller0 speed is unknown, defaulting to 1000 [ 1288.007046][T14936] __nla_validate_parse: 7 callbacks suppressed [ 1288.007067][T14936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10560'. [ 1288.049532][T14919] lo speed is unknown, defaulting to 1000 [ 1288.167469][T14939] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10561'. [ 1288.182961][ T55] block nbd0: Possible stuck request ffff888024ca7000: control (read@0,1024B). Runtime 1200 seconds [ 1288.194955][ T55] block nbd0: Possible stuck request ffff888024ca71c0: control (read@1024,1024B). Runtime 1200 seconds [ 1288.207473][ T55] block nbd0: Possible stuck request ffff888024ca7380: control (read@2048,1024B). Runtime 1200 seconds [ 1288.221337][ T55] block nbd0: Possible stuck request ffff888024ca7540: control (read@3072,1024B). Runtime 1200 seconds [ 1288.295360][T14949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10564'. [ 1288.419458][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10564'. [ 1288.517685][T14954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1288.574543][T14954] syzkaller1: entered promiscuous mode [ 1288.587510][T14954] syzkaller1: entered allmulticast mode [ 1288.641193][T24765] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1288.761526][T14960] syzkaller0 speed is unknown, defaulting to 1000 [ 1288.797384][T14960] lo speed is unknown, defaulting to 1000 [ 1289.229517][T14966] syzkaller0 speed is unknown, defaulting to 1000 [ 1289.322974][T14966] lo speed is unknown, defaulting to 1000 [ 1290.494234][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10574'. [ 1290.742744][T15004] syzkaller0 speed is unknown, defaulting to 1000 [ 1290.755267][T15003] syzkaller0 speed is unknown, defaulting to 1000 [ 1290.781561][T15004] lo speed is unknown, defaulting to 1000 [ 1290.810560][T15012] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1290.831495][T15012] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1290.851575][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10579'. [ 1291.123943][T15003] lo speed is unknown, defaulting to 1000 [ 1291.241081][T15027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10584'. [ 1292.085678][T15055] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10591'. [ 1292.111252][T15055] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1292.167845][T15056] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1292.287350][T15062] sctp: [Deprecated]: syz.0.10593 (pid 15062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1292.287350][T15062] Use struct sctp_sack_info instead [ 1292.409974][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1292.421259][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10594'. [ 1292.446598][T15065] validate_nla: 24 callbacks suppressed [ 1292.446616][T15065] netlink: 'syz.1.10594': attribute type 14 has an invalid length. [ 1292.487637][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10594'. [ 1292.521706][T15065] netlink: 'syz.1.10594': attribute type 14 has an invalid length. [ 1292.665198][T21136] lo speed is unknown, defaulting to 1000 [ 1292.680372][T21136] syz0: Port: 1 Link DOWN [ 1292.815226][T15093] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1292.908430][T15103] siw: device registration error -23 [ 1292.947715][T15093] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1293.069115][T15093] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1293.180317][T15093] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1293.382892][ T2414] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1293.394368][ T2414] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1293.415402][ T2405] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1293.483857][ T2405] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1293.714669][T15144] __nla_validate_parse: 2 callbacks suppressed [ 1293.714698][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10610'. [ 1293.801827][T15148] syzkaller0 speed is unknown, defaulting to 1000 [ 1293.823785][T15148] lo speed is unknown, defaulting to 1000 [ 1294.162660][T15162] netlink: 'syz.3.10613': attribute type 12 has an invalid length. [ 1294.178364][T15160] netlink: 136 bytes leftover after parsing attributes in process `syz.1.10614'. [ 1294.188497][T15162] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.10613'. [ 1294.203136][T15159] Can't find ip_set type hash:ip$mec [ 1294.293349][T15155] syzkaller0 speed is unknown, defaulting to 1000 [ 1294.314756][T15167] syzkaller0 speed is unknown, defaulting to 1000 [ 1294.398496][T15155] lo speed is unknown, defaulting to 1000 [ 1294.414573][T15171] can: request_module (can-proto-0) failed. [ 1294.808147][T15167] lo speed is unknown, defaulting to 1000 [ 1295.040458][T15195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10623'. [ 1295.066245][T15195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10623'. [ 1295.139674][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10624'. [ 1295.152569][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10624'. [ 1295.171573][T15200] geneve2: entered promiscuous mode [ 1295.186141][T15200] geneve2: entered allmulticast mode [ 1295.662109][T15216] syzkaller0 speed is unknown, defaulting to 1000 [ 1295.807777][T15216] lo speed is unknown, defaulting to 1000 [ 1295.917397][T15239] netlink: 112 bytes leftover after parsing attributes in process `syz.4.10632'. [ 1296.436777][T15250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10634'. [ 1297.186892][T15280] netlink: 'syz.0.10642': attribute type 16 has an invalid length. [ 1297.211985][T15280] netlink: 'syz.0.10642': attribute type 17 has an invalid length. [ 1297.260731][T15277] tipc: Enabled bearer , priority 0 [ 1297.279121][T15277] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10641'. [ 1297.580993][T15280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.588816][T15280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.819278][T15280] tipc: Resetting bearer [ 1298.061241][T15277] syzkaller0: entered promiscuous mode [ 1298.074934][T15277] syzkaller0: entered allmulticast mode [ 1298.150829][T15296] tipc: Resetting bearer [ 1298.174958][T15276] tipc: Resetting bearer [ 1298.217757][T15276] tipc: Disabling bearer [ 1298.229704][ T2405] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.239369][ T2405] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.249118][ T2405] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.258640][ T2405] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.285014][ T2405] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.320641][ T2405] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.335917][ T2405] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.346191][ T2405] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.838687][T15343] netlink: 'syz.4.10655': attribute type 13 has an invalid length. [ 1298.862705][T15343] netlink: 'syz.4.10655': attribute type 17 has an invalid length. [ 1298.871759][T15345] __nla_validate_parse: 5 callbacks suppressed [ 1298.871780][T15345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10658'. [ 1298.911174][T15345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10658'. [ 1298.931267][T15345] netlink: 'syz.0.10658': attribute type 7 has an invalid length. [ 1298.948024][T15345] netlink: 'syz.0.10658': attribute type 8 has an invalid length. [ 1298.975148][T15351] netlink: 'syz.0.10658': attribute type 1 has an invalid length. [ 1298.983790][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10658'. [ 1298.993418][T15351] netlink: 204 bytes leftover after parsing attributes in process `syz.0.10658'. [ 1299.004004][T15351] netlink: 'syz.0.10658': attribute type 1 has an invalid length. [ 1299.052285][T15343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.062615][T15343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.132590][T15338] syzkaller0 speed is unknown, defaulting to 1000 [ 1299.174089][T15338] lo speed is unknown, defaulting to 1000 [ 1299.244562][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10662'. [ 1299.719504][T15385] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10668'. [ 1300.039190][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10671'. [ 1300.330069][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1300.339432][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.766860][T15438] tipc: Enabled bearer , priority 0 [ 1300.774925][T15435] tipc: Enabling of bearer rejected, already enabled [ 1300.787790][T15438] syzkaller0: entered promiscuous mode [ 1300.799560][T15438] syzkaller0: entered allmulticast mode [ 1300.859448][T15440] bond7: Removing last arp target with arp_interval on [ 1300.874366][T15440] bond7: entered promiscuous mode [ 1300.887533][T15440] bond7: entered allmulticast mode [ 1300.912807][T15440] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1300.973723][T15435] tipc: Resetting bearer [ 1301.064870][T15432] tipc: Resetting bearer [ 1301.176318][T15432] tipc: Disabling bearer [ 1301.176903][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10687'. [ 1301.528988][T15484] syzkaller0 speed is unknown, defaulting to 1000 [ 1301.544796][T15484] lo speed is unknown, defaulting to 1000 [ 1301.782296][T15508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10697'. [ 1301.802611][T15509] netlink: 'syz.1.10695': attribute type 7 has an invalid length. [ 1301.809425][T15502] syzkaller0 speed is unknown, defaulting to 1000 [ 1301.811683][T15509] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10695'. [ 1302.032847][T15469] lec:lec_atm_close: lec0: Shut down! [ 1302.197831][T15502] lo speed is unknown, defaulting to 1000 [ 1302.414601][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 1303.234317][T15548] netlink: 'syz.2.10709': attribute type 10 has an invalid length. [ 1303.627209][ T2420] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1303.636332][ T2420] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1303.686988][T15555] tipc: Enabled bearer , priority 0 [ 1303.695331][T15555] syzkaller0: entered promiscuous mode [ 1303.701696][T15555] syzkaller0: entered allmulticast mode [ 1303.716451][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1303.737162][T24765] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1303.739273][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1303.762265][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1303.762360][T15554] tipc: Resetting bearer [ 1303.779279][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1303.789691][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1303.827547][T15554] tipc: Disabling bearer [ 1303.884135][ T2414] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 1303.894236][ T2422] bridge_slave_1: left allmulticast mode [ 1303.900666][ T2422] bridge_slave_1: left promiscuous mode [ 1303.906465][ T2422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.946586][ T2422] bridge_slave_0: left allmulticast mode [ 1303.963949][ T2422] bridge_slave_0: left promiscuous mode [ 1303.971546][ T2422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.995615][T15567] __nla_validate_parse: 1 callbacks suppressed [ 1303.995636][T15567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10715'. [ 1304.654991][ T2422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.665037][ T2422] bond_slave_0: left promiscuous mode [ 1304.673158][ T2422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.684846][ T2422] bond_slave_1: left promiscuous mode [ 1304.692098][ T2422] bond0 (unregistering): Released all slaves [ 1304.851270][ T2422] bond1 (unregistering): (slave veth3): Releasing active interface [ 1304.861308][ T2422] bond1 (unregistering): Released all slaves [ 1304.999358][ T2422] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 1305.008067][ T2422] wireguard0: left promiscuous mode [ 1305.015279][ T2422] bond2 (unregistering): Released all slaves [ 1305.148719][T15559] syzkaller0 speed is unknown, defaulting to 1000 [ 1305.235741][ T2422] tipc: Disabling bearer [ 1305.259709][ T2422] tipc: Disabling bearer [ 1305.273404][ T2422] tipc: Left network mode [ 1305.328569][T15559] lo speed is unknown, defaulting to 1000 [ 1305.425393][T15583] netlink: 'syz.3.10719': attribute type 1 has an invalid length. [ 1305.624818][T15588] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1305.657957][T15588] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1305.856987][T21971] Bluetooth: hci1: command tx timeout [ 1305.859993][T15588] vlan2: entered allmulticast mode [ 1305.868052][T15588] bridge0: entered allmulticast mode [ 1305.876188][T15588] bond8: (slave vlan2): Opening slave failed [ 1305.942023][T15594] macvtap1: entered allmulticast mode [ 1305.947616][T15594] veth1_vlan: entered allmulticast mode [ 1305.958710][T15594] veth1_vlan: left allmulticast mode [ 1306.152648][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10722'. [ 1306.366871][ T2422] hsr_slave_0: left promiscuous mode [ 1306.374015][ T2422] hsr_slave_1: left promiscuous mode [ 1307.005454][ T2422] team0 (unregistering): Port device team_slave_1 removed [ 1307.063782][ T2422] team0 (unregistering): Port device team_slave_0 removed [ 1307.752238][T15628] tipc: Enabled bearer , priority 0 [ 1307.947248][T21971] Bluetooth: hci1: command tx timeout [ 1308.019687][T15652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10733'. [ 1308.076590][T15629] syzkaller0: entered promiscuous mode [ 1308.082739][T15629] syzkaller0: entered allmulticast mode [ 1308.359558][T15659] netlink: 348 bytes leftover after parsing attributes in process `syz.3.10737'. [ 1308.393649][T15625] tipc: Resetting bearer [ 1308.472299][T15625] tipc: Disabling bearer [ 1308.548884][T15559] chnl_net:caif_netlink_parms(): no params data found [ 1309.098398][T15660] sctp: [Deprecated]: syz.1.10735 (pid 15660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1309.098398][T15660] Use struct sctp_sack_info instead [ 1309.308336][T15684] xt_time: unknown flags 0xf4 [ 1309.326474][T15687] netlink: 'syz.3.10743': attribute type 1 has an invalid length. [ 1309.338920][T15687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10743'. [ 1309.629636][T15559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.654146][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.670914][T15559] bridge_slave_0: entered allmulticast mode [ 1309.689570][T15559] bridge_slave_0: entered promiscuous mode [ 1309.725735][T15559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.741255][T15559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.748685][T15559] bridge_slave_1: entered allmulticast mode [ 1309.761368][T15559] bridge_slave_1: entered promiscuous mode [ 1309.937383][T15559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.021851][T21971] Bluetooth: hci1: command tx timeout [ 1311.621057][T15704] mac80211_hwsim hwsim114 wlan1: left promiscuous mode [ 1311.667497][T15559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.695978][ T2414] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.712776][ T2414] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.778870][ T2414] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.802055][ T2414] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.814921][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10752'. [ 1311.848628][T15559] team0: Port device team_slave_0 added [ 1311.866165][T15559] team0: Port device team_slave_1 added [ 1311.935915][T15559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.943934][T15559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.970658][T15559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.038299][T15559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.046519][T15559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.081732][T15559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.093704][T21971] Bluetooth: hci1: command tx timeout [ 1312.190586][ T2422] IPVS: stop unused estimator thread 0... [ 1312.207036][T15559] hsr_slave_0: entered promiscuous mode [ 1312.241701][T15559] hsr_slave_1: entered promiscuous mode [ 1312.251055][T15559] debugfs: 'hsr0' already exists in 'hsr' [ 1312.256815][T15559] Cannot create hsr debugfs directory [ 1312.499401][T15559] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1312.509918][T15559] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1312.552556][T15559] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1312.567658][T15559] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1312.936661][T15559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.988825][T15559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.005581][ T2405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.012934][ T2405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.068735][ T2422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.075942][ T2422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.176313][T15559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1313.241482][ T30] audit: type=1800 audit(1759590205.222:19): pid=15800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10769" name="memory.events" dev="tmpfs" ino=1287 res=0 errno=0 [ 1313.504050][T15559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.547993][T15817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1313.578791][T15817] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1313.776063][T15559] veth0_vlan: entered promiscuous mode [ 1313.798041][T15559] veth1_vlan: entered promiscuous mode [ 1313.829124][T15559] veth0_macvtap: entered promiscuous mode [ 1313.838597][T15559] veth1_macvtap: entered promiscuous mode [ 1313.862409][T15559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.877863][T15559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.896043][ T2414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.905793][ T2414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.916187][ T2414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.925940][ T2414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.178456][ T2420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.190846][ T2420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.232414][T15842] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10777'. [ 1314.248167][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10777'. [ 1314.542752][ T2420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.552316][ T2420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.614892][T15854] syzkaller0 speed is unknown, defaulting to 1000 [ 1314.757637][T15862] netlink: 'syz.2.10780': attribute type 1 has an invalid length. [ 1314.769465][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10781'. [ 1314.780972][T15862] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10780'. [ 1314.790950][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10780'. [ 1314.818624][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10780'. [ 1314.934125][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10780'. [ 1314.997070][T15874] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10782'. [ 1315.055756][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1315.118941][T15871] syzkaller0 speed is unknown, defaulting to 1000 [ 1315.191778][T15878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10784'. [ 1315.443471][T15892] tipc: Enabled bearer , priority 0 [ 1315.485138][T15890] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10786'. [ 1315.653674][T15900] netlink: 'syz.5.10789': attribute type 4 has an invalid length. [ 1315.751266][T15894] tipc: Disabling bearer [ 1316.017489][T15903] syzkaller0 speed is unknown, defaulting to 1000 [ 1316.246988][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10795'. [ 1316.337517][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10796'. [ 1316.369507][T15921] bridge_slave_1: left allmulticast mode [ 1316.397201][T15921] bridge_slave_1: left promiscuous mode [ 1316.421709][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.496452][T15921] bridge_slave_0: left allmulticast mode [ 1316.502920][T15921] bridge_slave_0: left promiscuous mode [ 1316.508892][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.052894][T15946] syzkaller0 speed is unknown, defaulting to 1000 [ 1317.278265][ T7549] hid-generic 0005:0007:0008.0004: unknown main item tag 0x0 [ 1317.301103][ T5854] Bluetooth: hci1: command 0x0405 tx timeout [ 1317.320513][ T7549] hid-generic 0005:0007:0008.0004: item fetching failed at offset 1/2 [ 1317.329367][ T7549] hid-generic 0005:0007:0008.0004: probe with driver hid-generic failed with error -22 [ 1317.707430][T15970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 1318.004558][T15983] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.063892][T15983] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.087612][T15985] netlink: 'syz.5.10812': attribute type 21 has an invalid length. [ 1318.186895][T15983] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.251217][ T55] block nbd0: Possible stuck request ffff888024ca7000: control (read@0,1024B). Runtime 1230 seconds [ 1318.263720][ T55] block nbd0: Possible stuck request ffff888024ca71c0: control (read@1024,1024B). Runtime 1230 seconds [ 1318.277934][ T55] block nbd0: Possible stuck request ffff888024ca7380: control (read@2048,1024B). Runtime 1230 seconds [ 1318.289640][ T55] block nbd0: Possible stuck request ffff888024ca7540: control (read@3072,1024B). Runtime 1230 seconds [ 1318.374717][T15999] syzkaller0 speed is unknown, defaulting to 1000 [ 1318.405731][T15983] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.422441][T16000] Bluetooth: MGMT ver 1.23 [ 1318.692841][T16015] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1318.706323][T16015] batman_adv: batadv0: Adding interface: gretap1 [ 1318.713791][T16015] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.746557][T16015] batman_adv: batadv0: Interface activated: gretap1 [ 1318.776302][T16000] syzkaller0 speed is unknown, defaulting to 1000 [ 1318.825451][ T2405] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.938610][ T2407] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1319.051442][T16031] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1319.063819][T16031] bond5 (unregistering): Released all slaves [ 1319.112739][ T2407] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1319.193626][ T2407] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1319.299082][T16044] nbd: must specify a size in bytes for the device [ 1319.594098][T16042] syzkaller0 speed is unknown, defaulting to 1000 [ 1320.568922][T16104] netlink: 'syz.5.10841': attribute type 13 has an invalid length. [ 1320.593769][T16104] netlink: 'syz.5.10841': attribute type 17 has an invalid length. [ 1320.759196][T16112] netlink: 'syz.2.10843': attribute type 1 has an invalid length. [ 1320.796776][T16112] __nla_validate_parse: 6 callbacks suppressed [ 1320.796797][T16112] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10843'. [ 1320.922758][T16104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1321.316039][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10847'. [ 1321.460620][T16143] nbd: device at index 2 is going down [ 1321.990696][T16157] netlink: 'syz.1.10854': attribute type 3 has an invalid length. [ 1322.161523][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10857'. [ 1322.193912][T16143] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1322.320432][T16170] netlink: 'syz.4.10858': attribute type 4 has an invalid length. [ 1322.353216][T16168] netlink: 756 bytes leftover after parsing attributes in process `syz.5.10857'. [ 1322.658671][T16188] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10863'. [ 1323.462273][T16212] syzkaller0 speed is unknown, defaulting to 1000 [ 1323.589117][T16224] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10873'. [ 1323.601591][T16221] netlink: 'syz.2.10870': attribute type 10 has an invalid length. [ 1323.609535][T16221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10870'. [ 1323.614448][T21971] Bluetooth: hci4: command 0x0406 tx timeout [ 1323.662387][T16231] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10875'. [ 1324.004351][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10879'. [ 1324.168863][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10882'. [ 1324.284842][T16264] netlink: 'syz.5.10884': attribute type 6 has an invalid length. [ 1324.323779][ T2418] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.343110][ T2418] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.368960][ T2418] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.406506][ T2418] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.799211][T16290] netlink: 'syz.3.10891': attribute type 13 has an invalid length. [ 1324.808195][T16290] netlink: 'syz.3.10891': attribute type 17 has an invalid length. [ 1324.929027][T16299] syzkaller0 speed is unknown, defaulting to 1000 [ 1325.128323][T16305] netlink: 'syz.4.10895': attribute type 3 has an invalid length. [ 1325.143730][T16305] ip6gre0: left allmulticast mode [ 1325.149435][T16305] dvmrp8: left allmulticast mode [ 1325.224412][T16307] siw: device registration error -23 [ 1325.754512][T16333] validate_nla: 4 callbacks suppressed [ 1325.754530][T16333] netlink: 'syz.5.10904': attribute type 7 has an invalid length. [ 1325.776458][T16342] sch_fq: defrate 4294967293 ignored. [ 1325.841042][T16333] __nla_validate_parse: 14 callbacks suppressed [ 1325.841063][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10904'. [ 1325.872211][T16348] batadv_slave_1: entered promiscuous mode [ 1325.904980][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10904'. [ 1325.914917][T16333] netlink: 'syz.5.10904': attribute type 7 has an invalid length. [ 1325.941864][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10909'. [ 1326.053211][T16353] netlink: 'syz.1.10909': attribute type 1 has an invalid length. [ 1326.197810][T16347] batadv_slave_1: left promiscuous mode [ 1326.288772][T16365] syzkaller0 speed is unknown, defaulting to 1000 [ 1326.601795][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10914'. [ 1326.611742][T16379] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10914'. [ 1326.661543][T16349] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1327.137011][T16398] tipc: Enabled bearer , priority 0 [ 1327.145059][T16398] syzkaller0: entered promiscuous mode [ 1327.151343][T16398] syzkaller0: entered allmulticast mode [ 1327.198430][T16398] tipc: Resetting bearer [ 1327.207846][T16393] tipc: Resetting bearer [ 1327.247022][T16393] tipc: Disabling bearer [ 1327.515799][T16422] netlink: 4664 bytes leftover after parsing attributes in process `syz.5.10929'. [ 1327.644524][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10932'. [ 1327.763511][T16439] netlink: 'syz.5.10934': attribute type 1 has an invalid length. [ 1327.910543][T16449] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1327.922537][T16449] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1327.966286][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10937'. [ 1327.966520][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10939'. [ 1328.006021][T16439] bond1: (slave bridge0): Enslaving as an active interface with a down link [ 1328.029245][T16451] openvswitch: netlink: Message has 8 unknown bytes. [ 1328.052600][T16457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10939'. [ 1328.066918][T16449] bond1: (slave gretap1): making interface the new active one [ 1328.111867][T16449] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1328.146978][T16439] macvlan2: entered promiscuous mode [ 1328.156701][T16439] macvlan2: entered allmulticast mode [ 1328.170938][T16439] bond1: entered promiscuous mode [ 1328.176051][T16439] gretap1: entered promiscuous mode [ 1328.182304][T16439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1328.198042][T16439] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1328.227467][T16439] bond1: left promiscuous mode [ 1328.233092][T16439] gretap1: left promiscuous mode [ 1328.302072][T16459] bridge5: entered allmulticast mode [ 1328.843161][T16511] tipc: Enabled bearer , priority 0 [ 1328.891884][T16511] syzkaller0: entered promiscuous mode [ 1328.897408][T16511] syzkaller0: entered allmulticast mode [ 1329.044907][T16519] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1329.087412][T16520] tc_dump_action: action bad kind [ 1329.095881][T16515] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1329.144248][T16515] tap0: tun_chr_ioctl cmd 1074025676 [ 1329.156776][T16515] tap0: owner set to 0 [ 1329.188675][T16523] tipc: Enabled bearer , priority 0 [ 1329.207558][T16523] syzkaller0: entered promiscuous mode [ 1329.244342][T16523] syzkaller0: entered allmulticast mode [ 1329.358677][T16530] netlink: 'syz.2.10959': attribute type 4 has an invalid length. [ 1329.368051][T16523] tipc: Resetting bearer [ 1329.492554][T16536] tipc: Enabling of bearer rejected, failed to enable media [ 1329.579242][T16518] tipc: Resetting bearer [ 1329.612194][T16518] tipc: Disabling bearer [ 1329.640526][T16531] syzkaller0 speed is unknown, defaulting to 1000 [ 1329.706044][T16503] tipc: Resetting bearer [ 1329.755864][T16503] tipc: Disabling bearer [ 1330.231572][T16563] syzkaller0 speed is unknown, defaulting to 1000 [ 1330.549262][T16584] vlan1: entered allmulticast mode [ 1330.555382][T16584] bridge_slave_0: entered allmulticast mode [ 1330.816272][T16581] netlink: 'syz.1.10972': attribute type 4 has an invalid length. [ 1331.003734][T16591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1331.090665][T16596] netlink: 'syz.1.10977': attribute type 1 has an invalid length. [ 1331.109784][T16596] __nla_validate_parse: 8 callbacks suppressed [ 1331.109803][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10977'. [ 1331.212183][T16601] syzkaller0: entered promiscuous mode [ 1331.220524][T16601] syzkaller0: entered allmulticast mode [ 1331.417616][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10981'. [ 1331.591729][T16615] netlink: 5444 bytes leftover after parsing attributes in process `syz.4.10984'. [ 1331.620325][T16615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1331.733565][T16607] team0: Port device bridge0 removed [ 1331.865839][T16619] syzkaller0 speed is unknown, defaulting to 1000 [ 1332.212609][T16646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10991'. [ 1332.293217][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10992'. [ 1332.404520][T16648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10991'. [ 1332.519168][T16662] tap0: tun_chr_ioctl cmd 1074025676 [ 1332.525450][T16662] tap0: owner set to 0 [ 1332.545365][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10993'. [ 1332.564374][T16664] netlink: 'syz.3.10994': attribute type 96 has an invalid length. [ 1332.746655][T16676] netlink: 'syz.4.10996': attribute type 11 has an invalid length. [ 1332.746658][T16671] netlink: 'syz.4.10996': attribute type 11 has an invalid length. [ 1332.775818][T16669] syzkaller0: entered promiscuous mode [ 1332.782532][T16669] syzkaller0: entered allmulticast mode [ 1332.791380][T16669] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1332.803516][T16669] netlink: 'syz.4.10996': attribute type 1 has an invalid length. [ 1332.835075][T16671] netlink: 'syz.4.10996': attribute type 1 has an invalid length. [ 1332.878863][T16684] nbd: must specify at least one socket [ 1333.535049][T16724] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11010'. [ 1333.630973][T16727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11012'. [ 1333.773673][T16743] tipc: Enabling of bearer rejected, failed to enable media [ 1333.830742][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11012'. [ 1333.861306][T16743] netlink: 'syz.4.11012': attribute type 20 has an invalid length. [ 1333.886113][T16743] netlink: 'syz.4.11012': attribute type 21 has an invalid length. [ 1333.923539][T16748] IPVS: length: 4096 != 24 [ 1334.087372][T16763] vlan2: entered allmulticast mode [ 1334.096241][T16763] bridge_slave_0: entered allmulticast mode [ 1334.167439][T16769] netlink: 'syz.1.11024': attribute type 3 has an invalid length. [ 1334.609671][T16788] syzkaller0 speed is unknown, defaulting to 1000 [ 1334.923085][T16798] syzkaller0 speed is unknown, defaulting to 1000 [ 1335.042306][T16812] syzkaller0 speed is unknown, defaulting to 1000 [ 1335.153986][T16806] syzkaller0 speed is unknown, defaulting to 1000 [ 1335.334481][T16831] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1335.487503][T16840] erspan0: entered allmulticast mode [ 1335.548549][T16840] bond9: (slave erspan0): making interface the new active one [ 1335.616633][T16840] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 1335.686827][T16831] bond9: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1335.991970][T16865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1335.999280][T16865] IPv6: NLM_F_CREATE should be set when creating new route [ 1336.006643][T16865] IPv6: NLM_F_CREATE should be set when creating new route [ 1336.293276][T16871] __nla_validate_parse: 7 callbacks suppressed [ 1336.293295][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11050'. [ 1336.311387][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11050'. [ 1336.340685][T16875] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1336.360841][T16875] validate_nla: 2 callbacks suppressed [ 1336.360863][T16875] netlink: 'syz.4.11053': attribute type 1 has an invalid length. [ 1336.467243][T16883] bond5: (slave gretap3): making interface the new active one [ 1336.477201][T16883] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 1336.493872][T16871] netlink: 'syz.1.11050': attribute type 10 has an invalid length. [ 1336.501134][T16875] vlan3: entered allmulticast mode [ 1336.502403][T16871] netlink: 124 bytes leftover after parsing attributes in process `syz.1.11050'. [ 1336.506955][T16875] bond5: entered allmulticast mode [ 1336.522818][T16875] gretap3: entered allmulticast mode [ 1336.531143][T16875] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1336.646527][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11056'. [ 1336.836161][T16895] tipc: Enabled bearer , priority 0 [ 1336.852017][T16892] netlink: 'syz.3.11056': attribute type 4 has an invalid length. [ 1337.055055][T16897] syzkaller0: entered promiscuous mode [ 1337.061282][T16897] syzkaller0: entered allmulticast mode [ 1337.067795][T16897] tipc: Resetting bearer [ 1337.080830][T16869] tipc: Resetting bearer [ 1337.214292][T16918] netlink: 284 bytes leftover after parsing attributes in process `syz.3.11060'. [ 1337.226128][T16918] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11060'. [ 1337.285404][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11060'. [ 1337.675436][T16929] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11061'. [ 1339.182813][T16869] tipc: Disabling bearer [ 1339.212015][T16905] syzkaller0 speed is unknown, defaulting to 1000 [ 1339.280784][T16926] syzkaller0: entered promiscuous mode [ 1339.286294][T16926] syzkaller0: entered allmulticast mode [ 1339.409081][T16944] netlink: 'syz.1.11064': attribute type 1 has an invalid length. [ 1339.418199][T16933] syzkaller0 speed is unknown, defaulting to 1000 [ 1339.843577][T16958] netlink: 'syz.5.11067': attribute type 3 has an invalid length. [ 1340.007671][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11068'. [ 1340.020833][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11068'. [ 1340.109585][T16968] atomic_op ffff88807ae90998 conn xmit_atomic 0000000000000000 [ 1340.279470][T16975] syzkaller0 speed is unknown, defaulting to 1000 [ 1340.661418][T16985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1340.832484][T16988] netlink: 'syz.1.11074': attribute type 1 has an invalid length. [ 1340.873974][T16990] netlink: 'syz.1.11074': attribute type 1 has an invalid length. [ 1340.901715][T16976] syzkaller0 speed is unknown, defaulting to 1000 [ 1341.049304][T16997] netlink: 'syz.1.11076': attribute type 7 has an invalid length. [ 1341.342422][T17004] sit0: entered promiscuous mode [ 1341.392802][T17004] netlink: 'syz.1.11078': attribute type 1 has an invalid length. [ 1341.450700][T17004] __nla_validate_parse: 5 callbacks suppressed [ 1341.450721][T17004] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11078'. [ 1341.658986][T17022] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11080'. [ 1341.849250][T17024] netlink: 'syz.1.11081': attribute type 13 has an invalid length. [ 1341.890633][T17024] netlink: 'syz.1.11081': attribute type 17 has an invalid length. [ 1341.953988][T17024] erspan0: left allmulticast mode [ 1341.996887][T17024] sit0: left promiscuous mode [ 1342.109044][T17024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1342.180718][T17045] netlink: 'syz.2.11085': attribute type 1 has an invalid length. [ 1342.274400][T17045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1342.318523][T17027] syzkaller0 speed is unknown, defaulting to 1000 [ 1342.685358][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11088'. [ 1342.777259][T17050] syzkaller0 speed is unknown, defaulting to 1000 [ 1342.912129][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11089'. [ 1343.426520][T17086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11095'. [ 1343.441803][T17085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11095'. [ 1343.683968][T17101] netlink: 'syz.5.11101': attribute type 15 has an invalid length. [ 1343.762211][T17099] syzkaller0 speed is unknown, defaulting to 1000 [ 1343.850617][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1344.518335][T17136] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 1344.663070][T17140] geneve3: entered promiscuous mode [ 1344.675847][T17141] tipc: Enabled bearer , priority 0 [ 1344.685239][T17138] syzkaller0: entered promiscuous mode [ 1344.691772][T17138] syzkaller0: entered allmulticast mode [ 1344.754922][T17138] tipc: Resetting bearer [ 1344.808322][T17137] tipc: Resetting bearer [ 1344.893733][T17137] tipc: Disabling bearer [ 1345.197627][T17165] netlink: 'syz.2.11115': attribute type 1 has an invalid length. [ 1345.240581][T17165] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11115'. [ 1345.304885][T17165] netlink: 'syz.2.11115': attribute type 1 has an invalid length. [ 1345.332230][T17165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1345.403817][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11120'. [ 1345.448488][T17173] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1345.457541][T17173] bridge0: port 1(bond10) entered blocking state [ 1345.471850][T17173] bridge0: port 1(bond10) entered disabled state [ 1345.486266][T17173] bond10: entered allmulticast mode [ 1345.499578][T17173] bond10: entered promiscuous mode [ 1345.507006][T17173] bridge0: port 1(bond10) entered blocking state [ 1345.513525][T17173] bridge0: port 1(bond10) entered forwarding state [ 1345.615300][T17184] vlan0: entered promiscuous mode [ 1345.621065][T17184] team0: entered promiscuous mode [ 1345.650376][T17184] team_slave_1: entered promiscuous mode [ 1345.656761][T17184] geneve0: entered promiscuous mode [ 1345.678857][T17192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1345.831525][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11126'. [ 1346.236648][T17215] vlan0: entered promiscuous mode [ 1346.244546][T17215] geneve1: entered promiscuous mode [ 1346.259439][T17215] vlan0: entered allmulticast mode [ 1346.265676][T17215] geneve1: entered allmulticast mode [ 1346.349208][ T2405] bridge0: port 1(bond10) entered disabled state [ 1346.375116][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11131'. [ 1346.525261][T17228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.553003][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11133'. [ 1346.606562][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11136'. [ 1346.631113][T17238] veth0_to_bond: entered allmulticast mode [ 1346.648828][T17238] tipc: Enabled bearer , priority 0 [ 1346.668985][T17238] syzkaller0: entered promiscuous mode [ 1346.680403][T17238] syzkaller0: entered allmulticast mode [ 1346.685803][T17240] netlink: 'syz.5.11135': attribute type 10 has an invalid length. [ 1346.712855][T17240] netlink: 2 bytes leftover after parsing attributes in process `syz.5.11135'. [ 1346.755344][T17240] batadv_slave_1: entered promiscuous mode [ 1346.762717][T17240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.770648][T17240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.781641][T17238] tipc: Resetting bearer [ 1346.804807][T17234] tipc: Resetting bearer [ 1346.853291][T17234] tipc: Disabling bearer [ 1346.887983][T17244] syzkaller0 speed is unknown, defaulting to 1000 [ 1346.949366][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11139'. [ 1346.982861][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11140'. [ 1346.993073][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11140'. [ 1347.002726][T17254] netlink: 'syz.3.11140': attribute type 19 has an invalid length. [ 1347.011450][T17254] netlink: 'syz.3.11140': attribute type 20 has an invalid length. [ 1347.496131][T17260] syzkaller0 speed is unknown, defaulting to 1000 [ 1347.539920][T17280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11146'. [ 1347.550416][T17280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11146'. [ 1347.678088][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11148'. [ 1347.973665][T17294] vxcan1: entered allmulticast mode [ 1347.998444][T17294] vxcan1: left allmulticast mode [ 1348.248386][T17313] bridge0: entered promiscuous mode [ 1348.261706][T17301] syzkaller0 speed is unknown, defaulting to 1000 [ 1348.332644][ T55] block nbd0: Possible stuck request ffff888024ca7000: control (read@0,1024B). Runtime 1260 seconds [ 1348.344509][ T55] block nbd0: Possible stuck request ffff888024ca71c0: control (read@1024,1024B). Runtime 1260 seconds [ 1348.356779][ T55] block nbd0: Possible stuck request ffff888024ca7380: control (read@2048,1024B). Runtime 1260 seconds [ 1348.372738][ T55] block nbd0: Possible stuck request ffff888024ca7540: control (read@3072,1024B). Runtime 1260 seconds [ 1348.492914][T17319] bond0: (slave bond_slave_0): Releasing backup interface [ 1348.504776][T17319] bond_slave_0: left promiscuous mode [ 1348.512849][T17319] bond0: (slave bond_slave_1): Releasing backup interface [ 1348.524378][T17319] bond_slave_1: left promiscuous mode [ 1348.535252][T17319] team_slave_1: left promiscuous mode [ 1348.546062][T17319] team0: Port device team_slave_1 removed [ 1348.553284][T17319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.561602][T17319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.571649][T17319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1348.766993][T17335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.784297][T17333] netlink: 'syz.1.11162': attribute type 1 has an invalid length. [ 1348.808983][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11161'. [ 1348.874646][T17333] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1348.956670][T17333] bond10: left allmulticast mode [ 1348.977486][T17333] bond10: left promiscuous mode [ 1348.995935][T17333] bridge0: port 1(bond10) entered disabled state [ 1349.108357][T21971] Bluetooth: hci1: link tx timeout [ 1349.117052][T21971] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1349.128035][ T5854] Bluetooth: hci1: link tx timeout [ 1349.140433][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1349.152252][ T5854] Bluetooth: hci1: link tx timeout [ 1349.157778][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1349.167116][ T5854] Bluetooth: hci1: link tx timeout [ 1349.173864][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1349.206643][T17353] syzkaller0 speed is unknown, defaulting to 1000 [ 1349.404936][T17368] syzkaller0 speed is unknown, defaulting to 1000 [ 1349.496439][T17372] syzkaller0 speed is unknown, defaulting to 1000 [ 1350.658078][T17412] vlan1: entered promiscuous mode [ 1350.785312][T17412] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1351.210320][T21971] Bluetooth: hci1: command 0x0405 tx timeout [ 1351.607794][T17466] __nla_validate_parse: 3 callbacks suppressed [ 1351.607813][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11194'. [ 1351.637007][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11194'. [ 1351.653189][T17468] netlink: 'syz.2.11195': attribute type 1 has an invalid length. [ 1351.674304][T17468] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11195'. [ 1351.693384][T17468] NCSI netlink: No device for ifindex 0 [ 1351.701183][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11197'. [ 1351.754297][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11197'. [ 1351.795651][T17475] syzkaller0 speed is unknown, defaulting to 1000 [ 1351.832515][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11198'. [ 1351.955284][T17484] syzkaller0 speed is unknown, defaulting to 1000 [ 1351.999500][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11199'. [ 1352.109287][T17479] netlink: 'syz.2.11199': attribute type 1 has an invalid length. [ 1352.112027][T17489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1352.728682][T17508] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1352.841711][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11204'. [ 1353.359592][T17541] netlink: 14212 bytes leftover after parsing attributes in process `syz.5.11212'. [ 1353.441136][T17511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1353.451952][T17511] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1353.464093][T17511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1353.470990][T17511] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1353.484083][T17511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1353.492588][T17511] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1353.505663][T17511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1353.512897][T17511] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1353.936568][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11219'. [ 1353.988106][T17559] netlink: 'syz.2.11219': attribute type 10 has an invalid length. [ 1354.257974][T17568] syzkaller0: entered promiscuous mode [ 1354.264158][T17568] syzkaller0: entered allmulticast mode [ 1357.053338][T17576] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1357.054415][T17577] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1357.063525][T17583] __nla_validate_parse: 3 callbacks suppressed [ 1357.063545][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11225'. [ 1357.362127][T17632] macsec0: entered allmulticast mode [ 1357.472377][T17632] veth1_macvtap: entered allmulticast mode [ 1357.502160][T17632] macsec0: left allmulticast mode [ 1357.508212][T17632] veth1_macvtap: left allmulticast mode [ 1357.525720][T17616] syzkaller0 speed is unknown, defaulting to 1000 [ 1357.663042][T17632] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11236'. [ 1357.708067][T17641] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11236'. [ 1357.948101][T17654] netlink: 'syz.4.11240': attribute type 1 has an invalid length. [ 1357.972284][T17654] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11240'. [ 1357.988711][T17654] netlink: 97 bytes leftover after parsing attributes in process `syz.4.11240'. [ 1358.315895][T17669] syzkaller0 speed is unknown, defaulting to 1000 [ 1359.161741][T17712] netlink: 'syz.2.11258': attribute type 2 has an invalid length. [ 1359.613419][T17715] veth1: left promiscuous mode [ 1359.618747][T17715] veth1: left allmulticast mode [ 1359.646639][T17715] bond2: left promiscuous mode [ 1359.654286][T17715] bond4: left promiscuous mode [ 1359.659243][T17715] gre1: left promiscuous mode [ 1359.672940][T17715] sit1: left allmulticast mode [ 1359.790094][ T2414] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1359.860736][ T2414] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1359.994839][ T2414] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1360.005912][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11259'. [ 1360.034261][ T2414] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1360.237881][T17739] syzkaller0 speed is unknown, defaulting to 1000 [ 1360.316364][T17750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11261'. [ 1360.326556][T17750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11261'. [ 1360.365623][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11262'. [ 1360.612890][T17769] syzkaller0 speed is unknown, defaulting to 1000 [ 1360.656557][T17772] siw: device registration error -23 [ 1360.846746][T17774] syzkaller0 speed is unknown, defaulting to 1000 [ 1361.447006][T17776] syzkaller0 speed is unknown, defaulting to 1000 [ 1361.484335][T17810] atomic_op ffff88805fb3e198 conn xmit_atomic 0000000000000000 [ 1361.636938][T17813] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1361.684169][T17813] bond9 (unregistering): Released all slaves [ 1361.738790][T17817] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11277'. [ 1361.790899][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1362.211526][T17858] __nla_validate_parse: 2 callbacks suppressed [ 1362.211545][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11287'. [ 1362.239512][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11287'. [ 1362.302677][T17858] netlink: 'syz.4.11287': attribute type 19 has an invalid length. [ 1362.320688][T17858] netlink: 'syz.4.11287': attribute type 20 has an invalid length. [ 1362.404160][T17861] netlink: 'syz.5.11289': attribute type 4 has an invalid length. [ 1362.433264][T17863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11290'. [ 1362.488856][T17861] vlan2: entered allmulticast mode [ 1362.501253][T17861] bridge_slave_0: entered allmulticast mode [ 1362.608158][T17863] syzkaller0 speed is unknown, defaulting to 1000 [ 1363.000766][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11296'. [ 1363.200488][T17907] netlink: 'syz.4.11300': attribute type 3 has an invalid length. [ 1363.208454][T17907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11300'. [ 1363.320949][T17919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11305'. [ 1363.341357][T17917] syzkaller1: entered promiscuous mode [ 1363.351468][T17917] syzkaller1: entered allmulticast mode [ 1363.516259][T17931] syzkaller1: entered promiscuous mode [ 1363.522458][T17931] syzkaller1: entered allmulticast mode [ 1363.597309][T17922] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11307'. [ 1363.626368][T17922] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11307'. [ 1364.399676][T17975] netlink: 'syz.4.11317': attribute type 46 has an invalid length. [ 1364.436125][T17975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11317'. [ 1364.491811][T17980] atomic_op ffff888054896198 conn xmit_atomic 0000000000000000 [ 1364.837907][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11324'. [ 1364.995143][T18009] ip6gre1: entered allmulticast mode [ 1365.093553][T18018] atomic_op ffff8880543fa198 conn xmit_atomic 0000000000000000 [ 1365.367937][T18039] netlink: 'syz.4.11338': attribute type 3 has an invalid length. [ 1365.381065][T18039] netlink: 'syz.4.11338': attribute type 3 has an invalid length. [ 1365.509592][T18044] netlink: 'syz.3.11339': attribute type 10 has an invalid length. [ 1365.548230][T18044] team0: Device ipvlan1 failed to register rx_handler [ 1365.798919][T18069] atomic_op ffff888069b1c998 conn xmit_atomic 0000000000000000 [ 1366.035620][T18082] netlink: 'syz.4.11349': attribute type 1 has an invalid length. [ 1366.101575][T18080] netdevsim0: mtu greater than device maximum [ 1366.194221][T18073] syzkaller0 speed is unknown, defaulting to 1000 [ 1366.350802][T18093] : renamed from veth0_vlan (while UP) [ 1366.434785][T18087] syzkaller0 speed is unknown, defaulting to 1000 [ 1366.485784][T18102] netlink: 'syz.1.11354': attribute type 7 has an invalid length. [ 1366.521650][T18101] geneve6: entered promiscuous mode [ 1366.574343][ T2420] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1366.610337][T18093] syzkaller0 speed is unknown, defaulting to 1000 [ 1366.728502][ T2420] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1366.743418][ T2420] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1366.752322][ T2420] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1366.914013][T18109] syzkaller0 speed is unknown, defaulting to 1000 [ 1367.408718][T18154] __nla_validate_parse: 4 callbacks suppressed [ 1367.408736][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11369'. [ 1367.615213][T18151] syzkaller0 speed is unknown, defaulting to 1000 [ 1367.776021][T18166] netlink: 'syz.4.11372': attribute type 10 has an invalid length. [ 1367.815833][T18166] team0: Port device 0! added [ 1367.834935][T18167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11372'. [ 1367.888061][T18169] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11373'. [ 1367.898746][T18169] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11373'. [ 1367.933946][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11373'. [ 1368.240715][T18193] netlink: 'syz.1.11378': attribute type 1 has an invalid length. [ 1368.274019][T18193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11378'. [ 1368.298563][T18194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1368.402776][T18197] syzkaller0 speed is unknown, defaulting to 1000 [ 1368.406589][T18199] veth0: entered promiscuous mode [ 1368.428833][T18192] syzkaller0 speed is unknown, defaulting to 1000 [ 1368.667150][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11386'. [ 1368.694728][T18199] veth0: left promiscuous mode [ 1368.855255][T18225] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11388'. [ 1368.937256][T18228] macsec1: entered promiscuous mode [ 1368.943504][T18228] bridge0: entered promiscuous mode [ 1368.962875][T18228] bridge0: port 1(macsec1) entered blocking state [ 1368.981801][T18228] bridge0: port 1(macsec1) entered disabled state [ 1368.988816][T18228] macsec1: entered allmulticast mode [ 1369.014193][T18228] macsec1: left allmulticast mode [ 1369.032489][T18228] bridge0: left promiscuous mode [ 1369.171720][T18241] netlink: 'syz.3.11392': attribute type 16 has an invalid length. [ 1369.192352][T18241] netlink: 'syz.3.11392': attribute type 17 has an invalid length. [ 1369.271080][T18241] erspan0: left promiscuous mode [ 1369.324263][T18246] netlink: 'syz.5.11394': attribute type 1 has an invalid length. [ 1369.335832][T18241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.349264][T18241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.364469][T18241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1369.393750][T18232] syzkaller1: entered promiscuous mode [ 1369.410838][T18232] syzkaller1: entered allmulticast mode [ 1369.560513][T15297] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1369.612761][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11397'. [ 1369.623032][T15298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1369.807681][T18272] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1369.833380][T18272] bond6 (unregistering): Released all slaves [ 1369.903060][T18265] syzkaller0 speed is unknown, defaulting to 1000 [ 1369.970653][ T2418] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1370.319360][T18282] syzkaller0 speed is unknown, defaulting to 1000 [ 1370.467944][T18295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11405'. [ 1370.716159][T18309] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1370.805044][T18301] syzkaller0 speed is unknown, defaulting to 1000 [ 1370.965806][T18312] syzkaller0 speed is unknown, defaulting to 1000 [ 1371.065090][ T2418] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1371.082781][ T2418] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1371.678449][T18346] syzkaller1: entered allmulticast mode [ 1371.737220][T18355] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1371.930552][T15298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1371.954964][T18370] netlink: 'syz.4.11420': attribute type 4 has an invalid length. [ 1372.126359][T18375] syzkaller0 speed is unknown, defaulting to 1000 [ 1372.867267][T18415] netlink: 'syz.1.11431': attribute type 10 has an invalid length. [ 1372.883247][T18416] nbd: socks must be embedded in a SOCK_ITEM attr [ 1373.040413][T18415] tipc: Enabled bearer , priority 0 [ 1373.047730][T18415] bond_slave_1: entered allmulticast mode [ 1373.102994][T18415] tipc: Resetting bearer [ 1373.139539][T18413] tipc: Disabling bearer [ 1373.400758][T18437] __nla_validate_parse: 5 callbacks suppressed [ 1373.400780][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11436'. [ 1373.500329][T18444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11439'. [ 1373.596090][T18444] netlink: 'syz.3.11439': attribute type 10 has an invalid length. [ 1373.606961][T18448] syzkaller0: entered promiscuous mode [ 1373.621217][T18448] syzkaller0: entered allmulticast mode [ 1373.637917][T18444] bond0: (slave wlan1): Opening slave failed [ 1373.676110][T18455] mac80211_hwsim hwsim116 wlan1: entered allmulticast mode [ 1373.836258][T18461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11446'. [ 1374.057640][T18472] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11448'. [ 1374.166819][T18474] netlink: 'syz.5.11450': attribute type 4 has an invalid length. [ 1374.224607][T18474] netlink: 'syz.5.11450': attribute type 4 has an invalid length. [ 1374.266943][T18481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1374.427478][T18484] netlink: 120 bytes leftover after parsing attributes in process `syz.5.11453'. [ 1374.585447][T18494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11456'. [ 1374.653415][T18494] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11456'. [ 1374.680321][T18494] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11456'. [ 1374.696286][T18494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11456'. [ 1374.751780][T18494] syz.3.11456: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1374.770749][T18494] CPU: 1 UID: 0 PID: 18494 Comm: syz.3.11456 Not tainted syzkaller #0 PREEMPT(full) [ 1374.770776][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1374.770788][T18494] Call Trace: [ 1374.770796][T18494] [ 1374.770804][T18494] dump_stack_lvl+0x189/0x250 [ 1374.770837][T18494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1374.770860][T18494] ? __pfx__printk+0x10/0x10 [ 1374.770889][T18494] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1374.770916][T18494] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1374.770944][T18494] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1374.770974][T18494] warn_alloc+0x214/0x310 [ 1374.771008][T18494] ? __pfx_warn_alloc+0x10/0x10 [ 1374.771043][T18494] ? __get_vm_area_node+0x28f/0x300 [ 1374.771067][T18494] ? xskq_create+0xbf/0x170 [ 1374.771098][T18494] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1374.771153][T18494] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1374.771184][T18494] ? __kasan_kmalloc+0x93/0xb0 [ 1374.771210][T18494] vmalloc_user_noprof+0xad/0xf0 [ 1374.771234][T18494] ? xskq_create+0xbf/0x170 [ 1374.771262][T18494] xskq_create+0xbf/0x170 [ 1374.771294][T18494] xsk_init_queue+0xb0/0x110 [ 1374.771326][T18494] xsk_setsockopt+0x57b/0x8d0 [ 1374.771356][T18494] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1374.771382][T18494] ? __pfx_aa_sk_perm+0x10/0x10 [ 1374.771411][T18494] ? __fget_files+0x2a/0x420 [ 1374.771435][T18494] ? aa_sock_opt_perm+0xff/0x1b0 [ 1374.771465][T18494] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1374.771494][T18494] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1374.771524][T18494] do_sock_setsockopt+0x179/0x1b0 [ 1374.771551][T18494] __x64_sys_setsockopt+0x13f/0x1b0 [ 1374.771578][T18494] do_syscall_64+0xfa/0x3b0 [ 1374.771596][T18494] ? lockdep_hardirqs_on+0x9c/0x150 [ 1374.771633][T18494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.771652][T18494] ? clear_bhb_loop+0x60/0xb0 [ 1374.771676][T18494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.771694][T18494] RIP: 0033:0x7f297f58eec9 [ 1374.771713][T18494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.771730][T18494] RSP: 002b:00007f298044c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1374.771750][T18494] RAX: ffffffffffffffda RBX: 00007f297f7e5fa0 RCX: 00007f297f58eec9 [ 1374.771764][T18494] RDX: 0000000000000002 RSI: 000000000000011b RDI: 00000000000000a1 [ 1374.771776][T18494] RBP: 00007f297f611f91 R08: 0000000000000004 R09: 0000000000000000 [ 1374.771789][T18494] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1374.771801][T18494] R13: 00007f297f7e6038 R14: 00007f297f7e5fa0 R15: 00007ffeea3e57f8 [ 1374.771835][T18494] [ 1374.771843][T18494] Mem-Info: [ 1374.820216][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1374.826927][T18494] active_anon:6604 inactive_anon:0 isolated_anon:0 [ 1374.826927][T18494] active_file:3473 inactive_file:40388 isolated_file:0 [ 1374.826927][T18494] unevictable:768 dirty:111 writeback:0 [ 1374.826927][T18494] slab_reclaimable:15011 slab_unreclaimable:272789 [ 1374.826927][T18494] mapped:29603 shmem:1360 pagetables:1106 [ 1374.826927][T18494] sec_pagetables:0 bounce:0 [ 1374.826927][T18494] kernel_misc_reclaimable:0 [ 1374.826927][T18494] free:1131322 free_pcp:16367 free_cma:0 [ 1374.842522][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11459'. [ 1374.844597][T18494] Node 0 active_anon:26416kB inactive_anon:0kB active_file:13892kB inactive_file:161352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118412kB dirty:444kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18580kB pagetables:4176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1375.149015][T18494] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1375.179421][T18494] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.208782][T18494] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1375.215506][T18494] Node 0 DMA32 free:613116kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26472kB inactive_anon:0kB active_file:13892kB inactive_file:161024kB unevictable:1536kB writepending:432kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:47996kB local_pcp:17276kB free_cma:0kB [ 1375.250956][T18494] lowmem_reserve[]: 0 0 0 0 0 [ 1375.255711][T18494] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.287635][T18494] lowmem_reserve[]: 0 0 0 0 0 [ 1375.295026][T18494] Node 1 Normal free:3898412kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15648kB local_pcp:11296kB free_cma:0kB [ 1375.345486][T18494] lowmem_reserve[]: 0 0 0 0 0 [ 1375.353287][ T7549] IPVS: starting estimator thread 0... [ 1375.353544][T18494] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1375.375356][T18494] Node 0 DMA32: 1711*4kB (UME) 303*8kB (UM) 383*16kB (UM) 832*32kB (UM) 818*64kB (UME) 249*128kB (UME) 50*256kB (UM) 12*512kB (UME) 13*1024kB (UME) 8*2048kB (UME) 107*4096kB (UM) = 613156kB [ 1375.395557][T18494] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1375.407748][T18494] Node 1 Normal: 215*4kB (UE) 62*8kB (UME) 56*16kB (UME) 127*32kB (UME) 42*64kB (UME) 10*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3898412kB [ 1375.426966][T18494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.450246][T18511] IPVS: using max 38 ests per chain, 91200 per kthread [ 1375.469325][T18494] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1375.500729][T18494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.515196][T18494] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.532020][T18494] 45219 total pagecache pages [ 1375.537079][T18494] 0 pages in swap cache [ 1375.550946][T18494] Free swap = 124996kB [ 1375.555232][T18494] Total swap = 124996kB [ 1375.560430][T18494] 2097051 pages RAM [ 1375.564352][T18494] 0 pages HighMem/MovableOnly [ 1375.569387][T18494] 423781 pages reserved [ 1375.573830][T18494] 0 pages cma reserved [ 1376.004271][T18549] dvmrp0: entered allmulticast mode [ 1376.432768][T18577] netlink: 'syz.2.11480': attribute type 29 has an invalid length. [ 1376.442161][T18577] netlink: 'syz.2.11480': attribute type 29 has an invalid length. [ 1376.452275][T18577] netlink: 'syz.2.11480': attribute type 39 has an invalid length. [ 1376.516408][T18582] veth1: entered promiscuous mode [ 1376.819475][T18601] netlink: 'syz.3.11485': attribute type 1 has an invalid length. [ 1377.309079][T18632] netlink: 'syz.1.11488': attribute type 2 has an invalid length. [ 1377.429471][T18634] netlink: 'syz.2.11490': attribute type 9 has an invalid length. [ 1377.759147][T18651] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1377.765681][T18651] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1378.074608][T18662] syzkaller0 speed is unknown, defaulting to 1000 [ 1378.410839][ T55] block nbd0: Possible stuck request ffff888024ca7000: control (read@0,1024B). Runtime 1290 seconds [ 1378.423009][ T55] block nbd0: Possible stuck request ffff888024ca71c0: control (read@1024,1024B). Runtime 1290 seconds [ 1378.434776][ T55] block nbd0: Possible stuck request ffff888024ca7380: control (read@2048,1024B). Runtime 1290 seconds [ 1378.446324][ T55] block nbd0: Possible stuck request ffff888024ca7540: control (read@3072,1024B). Runtime 1290 seconds [ 1378.568562][T18682] __nla_validate_parse: 11 callbacks suppressed [ 1378.568584][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11504'. [ 1379.115314][T18702] netlink: 'syz.3.11507': attribute type 7 has an invalid length. [ 1379.145829][T18702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11507'. [ 1379.684585][T18733] tipc: Enabled bearer , priority 0 [ 1379.754564][T18733] syzkaller0: entered promiscuous mode [ 1379.760841][T18733] syzkaller0: entered allmulticast mode [ 1379.773750][T18735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11516'. [ 1379.787480][T18733] tipc: Resetting bearer [ 1379.801416][T18732] tipc: Resetting bearer [ 1381.783778][T18732] tipc: Disabling bearer [ 1381.792539][T18747] netlink: 'syz.4.11519': attribute type 12 has an invalid length. [ 1381.934247][T18759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11524'. [ 1381.940437][T18753] syzkaller0 speed is unknown, defaulting to 1000 [ 1381.983068][T18765] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11523'. [ 1382.031836][T18763] netlink: 'syz.2.11525': attribute type 7 has an invalid length. [ 1382.249904][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1382.414858][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11528'. [ 1382.427552][T18780] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11528'. [ 1382.438283][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11528'. [ 1382.458365][T18780] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11528'. [ 1382.691831][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11530'. [ 1382.969308][T18799] syzkaller0 speed is unknown, defaulting to 1000 [ 1383.275906][T18814] veth1: left promiscuous mode [ 1383.283062][T18814] veth0_to_bond: left allmulticast mode [ 1383.295553][T18814] mac80211_hwsim hwsim116 wlan1: left allmulticast mode [ 1383.304354][T18814] bond2: left promiscuous mode [ 1383.309151][T18814] bond3: left promiscuous mode [ 1383.315373][T18814] bridge1: left allmulticast mode [ 1383.321388][T18814] geneve2: left promiscuous mode [ 1383.326440][T18814] ipvlan2: left promiscuous mode [ 1383.332468][T18814] geneve3: left promiscuous mode [ 1383.337426][T18814] geneve3: left allmulticast mode [ 1383.358061][T18814] bond7: left promiscuous mode [ 1383.363695][T18814] bond7: left allmulticast mode [ 1383.371387][T18814] batman_adv: batadv0: Interface deactivated: gretap1 [ 1383.390856][T18814] geneve6: left promiscuous mode [ 1383.612726][ T2414] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1383.632499][ T2414] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1383.647216][ T2414] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1383.655870][ T2414] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1383.747984][ T2414] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1383.768556][ T2414] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1383.781177][ T2414] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1383.790855][ T2414] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1383.926395][T18843] __nla_validate_parse: 3 callbacks suppressed [ 1383.926414][T18843] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11544'. [ 1384.065162][T18849] syzkaller0 speed is unknown, defaulting to 1000 [ 1384.114754][T18861] netlink: 'syz.1.11549': attribute type 2 has an invalid length. [ 1384.124202][T18856] netlink: 'syz.1.11549': attribute type 3 has an invalid length. [ 1384.132988][T18856] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11549'. [ 1384.162825][T18859] veth0: entered promiscuous mode [ 1384.182836][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11548'. [ 1384.338124][T18876] netlink: 'syz.5.11554': attribute type 21 has an invalid length. [ 1384.382075][T18859] veth0 (unregistering): left promiscuous mode [ 1384.615723][T18876] netlink: 'syz.5.11554': attribute type 1 has an invalid length. [ 1384.628745][T18876] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11554'. [ 1384.639169][T18881] 8021q: VLANs not supported on caif0 [ 1384.776013][T18902] netlink: 'syz.4.11559': attribute type 1 has an invalid length. [ 1384.982510][T18922] tipc: Enabled bearer , priority 0 [ 1385.073591][T18926] openvswitch: netlink: Actions may not be safe on all matching packets [ 1385.104935][T18922] tipc: Disabling bearer [ 1385.404658][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11569'. [ 1385.413876][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11569'. [ 1385.588568][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11572'. [ 1385.637501][T18951] syzkaller0 speed is unknown, defaulting to 1000 [ 1386.175402][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11578'. [ 1386.181908][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11580'. [ 1386.326419][T18988] dvmrp0: entered allmulticast mode [ 1386.477681][T18994] syzkaller0 speed is unknown, defaulting to 1000 [ 1386.544088][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11584'. [ 1386.774288][T19001] team0: Port device team_slave_0 removed [ 1387.597448][T19036] sctp: [Deprecated]: syz.2.11596 (pid 19036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1387.597448][T19036] Use struct sctp_sack_info instead [ 1387.754028][T19045] netlink: 'syz.5.11599': attribute type 1 has an invalid length. [ 1388.234568][T19053] bond_slave_1: left allmulticast mode [ 1388.645998][T19062] sctp: [Deprecated]: syz.2.11604 (pid 19062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1388.645998][T19062] Use struct sctp_sack_info instead [ 1388.901953][T19067] bond9: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1388.939279][T19067] bond9: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1388.976501][T19067] bond9: entered promiscuous mode [ 1388.992504][T19067] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1389.024665][T19074] netlink: 'syz.1.11606': attribute type 13 has an invalid length. [ 1389.289175][T19084] __nla_validate_parse: 6 callbacks suppressed [ 1389.289193][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11610'. [ 1389.724934][T19112] netlink: 'syz.3.11617': attribute type 1 has an invalid length. [ 1389.734023][T19110] netlink: 'syz.1.11619': attribute type 4 has an invalid length. [ 1391.087112][T19161] pim6reg99999999: entered allmulticast mode [ 1391.158148][T19169] netlink: 'syz.3.11632': attribute type 3 has an invalid length. [ 1391.166683][T19169] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11632'. [ 1391.241138][T19174] syz_tun: left promiscuous mode [ 1391.261816][T19174] batadv0: left promiscuous mode [ 1391.351553][T19174] mac80211_hwsim hwsim118 wlan0: left promiscuous mode [ 1391.379212][T19174] gretap1: left promiscuous mode [ 1391.402626][T19174] bond3: left promiscuous mode [ 1391.428557][T19174] vlan3: left promiscuous mode [ 1391.442259][T19174] vlan0: left promiscuous mode [ 1391.452728][T19174] geneve1: left promiscuous mode [ 1391.639270][T19190] netlink: 'syz.2.11635': attribute type 7 has an invalid length. [ 1391.670184][T19190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11635'. [ 1391.770597][T19192] syzkaller0: entered promiscuous mode [ 1391.776321][T19192] syzkaller0: entered allmulticast mode [ 1394.552850][T19229] bridge_slave_0: entered promiscuous mode [ 1394.611606][T19212] syzkaller0 speed is unknown, defaulting to 1000 [ 1394.655958][T19241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11648'. [ 1394.708795][T19241] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1394.718653][T19245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11648'. [ 1394.743152][T19228] syzkaller0 speed is unknown, defaulting to 1000 [ 1394.789032][T19242] syzkaller0 speed is unknown, defaulting to 1000 [ 1395.077252][T19269] netlink: zone id is out of range [ 1395.083380][T19269] netlink: zone id is out of range [ 1395.090726][T19269] netlink: set zone limit has 8 unknown bytes [ 1395.146513][T19272] netlink: 'syz.1.11654': attribute type 1 has an invalid length. [ 1395.159140][T19272] netlink: 'syz.1.11654': attribute type 11 has an invalid length. [ 1395.170362][T19272] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11654'. [ 1395.225109][T19277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11656'. [ 1395.244380][T19274] batadv_slave_1: entered promiscuous mode [ 1395.290993][T19271] batadv_slave_1: left promiscuous mode [ 1395.507057][T19294] syzkaller1: entered promiscuous mode [ 1395.533590][T19294] syzkaller1: entered allmulticast mode [ 1395.547708][T19294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11660'. [ 1395.575986][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11661'. [ 1395.583029][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11663'. [ 1395.588750][T19293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11661'. [ 1395.594784][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11663'. [ 1395.614577][T19293] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11661'. [ 1395.632258][T19293] netlink: 'syz.4.11661': attribute type 6 has an invalid length. [ 1395.641112][T19293] netlink: 'syz.4.11661': attribute type 5 has an invalid length. [ 1395.849525][T19299] syzkaller0 speed is unknown, defaulting to 1000 [ 1396.113246][T19301] syzkaller0 speed is unknown, defaulting to 1000 [ 1397.234142][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1397.253280][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1397.265058][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1397.283722][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1397.300699][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1397.365663][T21971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1397.373958][T21971] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1397.384904][T21971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1397.396342][T21971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1397.406292][T21971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1397.765906][T19346] syzkaller0 speed is unknown, defaulting to 1000 [ 1397.809435][T19369] syzkaller0 speed is unknown, defaulting to 1000 [ 1398.004259][ T2420] ------------[ cut here ]------------ [ 1398.010646][ T2420] ida_free called for id=3252 which is not allocated. [ 1398.020527][T19377] netlink: 'syz.3.11683': attribute type 58 has an invalid length. [ 1398.030705][ T2420] WARNING: CPU: 1 PID: 2420 at lib/idr.c:592 ida_free+0x280/0x310 [ 1398.038677][ T2420] Modules linked in: [ 1398.043312][ T2420] CPU: 1 UID: 0 PID: 2420 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1398.053013][ T2420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1398.063403][ T2420] Workqueue: netns cleanup_net [ 1398.068205][ T2420] RIP: 0010:ida_free+0x280/0x310 [ 1398.074282][ T2420] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 1398.095441][ T2420] RSP: 0018:ffffc900030e73a0 EFLAGS: 00010246 [ 1398.101875][ T2420] RAX: 3510e15757fa2f00 RBX: 0000000000000a06 RCX: ffff88804f561e40 [ 1398.110872][ T2420] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1398.118960][ T2420] RBP: ffffc900030e7498 R08: 0000000000000003 R09: 0000000000000004 [ 1398.128050][ T2420] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff9200061ce78 [ 1398.137125][ T2420] R13: dffffc0000000000 R14: ffff888033443900 R15: 0000000000000cb4 [ 1398.145935][ T2420] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 1398.155999][ T2420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1398.163322][ T2420] CR2: 000000110c36de4c CR3: 00000000425f0000 CR4: 00000000003526f0 [ 1398.172087][ T2420] Call Trace: [ 1398.175388][ T2420] [ 1398.178334][ T2420] ? __pfx_ida_free+0x10/0x10 [ 1398.183928][ T2420] pde_put+0x7e/0x1b0 [ 1398.187938][ T2420] remove_proc_subtree+0x3e8/0x530 [ 1398.193612][ T2420] snmp6_unregister_dev+0xae/0xf0 [ 1398.198660][ T2420] addrconf_ifdown+0x240/0x1880 [ 1398.204070][ T2420] ? tls_dev_event+0x717/0xec0 [ 1398.208865][ T2420] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1398.214972][ T2420] addrconf_notify+0x1bc/0x1010 [ 1398.220382][ T2420] notifier_call_chain+0x1b6/0x3e0 [ 1398.225536][ T2420] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 1398.232487][ T2420] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1398.239295][ T2420] ? net_generic+0x1e/0x240 [ 1398.244526][ T2420] ? net_generic+0x1e/0x240 [ 1398.249068][ T2420] ops_undo_list+0x3dc/0x990 [ 1398.254556][ T2420] ? __pfx_ops_undo_list+0x10/0x10 [ 1398.260282][ T2420] ? do_raw_spin_unlock+0x122/0x240 [ 1398.265519][ T2420] cleanup_net+0x4d8/0x820 [ 1398.270723][ T2420] ? __pfx_cleanup_net+0x10/0x10 [ 1398.275688][ T2420] ? _raw_spin_unlock_irq+0x23/0x50 [ 1398.281431][ T2420] ? process_scheduled_works+0x9ef/0x17b0 [ 1398.287167][ T2420] ? process_scheduled_works+0x9ef/0x17b0 [ 1398.293455][ T2420] process_scheduled_works+0xade/0x17b0 [ 1398.299059][ T2420] ? __pfx_process_scheduled_works+0x10/0x10 [ 1398.305891][ T2420] worker_thread+0x8a0/0xda0 [ 1398.311029][ T2420] kthread+0x711/0x8a0 [ 1398.315131][ T2420] ? __pfx_worker_thread+0x10/0x10 [ 1398.320727][ T2420] ? __pfx_kthread+0x10/0x10 [ 1398.325345][ T2420] ? _raw_spin_unlock_irq+0x23/0x50 [ 1398.331498][ T2420] ? lockdep_hardirqs_on+0x9c/0x150 [ 1398.336766][ T2420] ? __pfx_kthread+0x10/0x10 [ 1398.341896][ T2420] ret_from_fork+0x436/0x7d0 [ 1398.346519][ T2420] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.351925][ T2420] ? __switch_to_asm+0x39/0x70 [ 1398.356714][ T2420] ? __switch_to_asm+0x33/0x70 [ 1398.361838][ T2420] ? __pfx_kthread+0x10/0x10 [ 1398.366581][ T2420] ret_from_fork_asm+0x1a/0x30 [ 1398.371476][ T2420] [ 1398.374513][ T2420] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1398.381815][ T2420] CPU: 1 UID: 0 PID: 2420 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(full) [ 1398.391363][ T2420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1398.401428][ T2420] Workqueue: netns cleanup_net [ 1398.406216][ T2420] Call Trace: [ 1398.409493][ T2420] [ 1398.412423][ T2420] dump_stack_lvl+0x99/0x250 [ 1398.417010][ T2420] ? __asan_memcpy+0x40/0x70 [ 1398.421599][ T2420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1398.426793][ T2420] ? __pfx__printk+0x10/0x10 [ 1398.431409][ T2420] vpanic+0x281/0x750 [ 1398.435387][ T2420] ? __pfx__printk+0x10/0x10 [ 1398.439976][ T2420] ? __pfx_vpanic+0x10/0x10 [ 1398.444476][ T2420] ? is_bpf_text_address+0x26/0x2b0 [ 1398.449673][ T2420] panic+0xb9/0xc0 [ 1398.453392][ T2420] ? __pfx_panic+0x10/0x10 [ 1398.457818][ T2420] __warn+0x31b/0x4b0 [ 1398.461900][ T2420] ? ida_free+0x280/0x310 [ 1398.466222][ T2420] ? ida_free+0x280/0x310 [ 1398.470540][ T2420] report_bug+0x2be/0x4f0 [ 1398.474878][ T2420] ? ida_free+0x280/0x310 [ 1398.479198][ T2420] ? ida_free+0x280/0x310 [ 1398.483559][ T2420] ? ida_free+0x282/0x310 [ 1398.487880][ T2420] handle_bug+0x84/0x160 [ 1398.492128][ T2420] exc_invalid_op+0x1a/0x50 [ 1398.496655][ T2420] asm_exc_invalid_op+0x1a/0x20 [ 1398.501495][ T2420] RIP: 0010:ida_free+0x280/0x310 [ 1398.506423][ T2420] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 1398.526017][ T2420] RSP: 0018:ffffc900030e73a0 EFLAGS: 00010246 [ 1398.532085][ T2420] RAX: 3510e15757fa2f00 RBX: 0000000000000a06 RCX: ffff88804f561e40 [ 1398.540052][ T2420] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1398.548013][ T2420] RBP: ffffc900030e7498 R08: 0000000000000003 R09: 0000000000000004 [ 1398.555977][ T2420] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff9200061ce78 [ 1398.563938][ T2420] R13: dffffc0000000000 R14: ffff888033443900 R15: 0000000000000cb4 [ 1398.571927][ T2420] ? __pfx_ida_free+0x10/0x10 [ 1398.576620][ T2420] pde_put+0x7e/0x1b0 [ 1398.580601][ T2420] remove_proc_subtree+0x3e8/0x530 [ 1398.585719][ T2420] snmp6_unregister_dev+0xae/0xf0 [ 1398.590737][ T2420] addrconf_ifdown+0x240/0x1880 [ 1398.595596][ T2420] ? tls_dev_event+0x717/0xec0 [ 1398.600355][ T2420] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1398.605649][ T2420] addrconf_notify+0x1bc/0x1010 [ 1398.610500][ T2420] notifier_call_chain+0x1b6/0x3e0 [ 1398.615610][ T2420] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 1398.622034][ T2420] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1398.628798][ T2420] ? net_generic+0x1e/0x240 [ 1398.633297][ T2420] ? net_generic+0x1e/0x240 [ 1398.637808][ T2420] ops_undo_list+0x3dc/0x990 [ 1398.642398][ T2420] ? __pfx_ops_undo_list+0x10/0x10 [ 1398.647501][ T2420] ? do_raw_spin_unlock+0x122/0x240 [ 1398.652703][ T2420] cleanup_net+0x4d8/0x820 [ 1398.657118][ T2420] ? __pfx_cleanup_net+0x10/0x10 [ 1398.662046][ T2420] ? _raw_spin_unlock_irq+0x23/0x50 [ 1398.667241][ T2420] ? process_scheduled_works+0x9ef/0x17b0 [ 1398.673045][ T2420] ? process_scheduled_works+0x9ef/0x17b0 [ 1398.678758][ T2420] process_scheduled_works+0xade/0x17b0 [ 1398.684324][ T2420] ? __pfx_process_scheduled_works+0x10/0x10 [ 1398.690315][ T2420] worker_thread+0x8a0/0xda0 [ 1398.694924][ T2420] kthread+0x711/0x8a0 [ 1398.698993][ T2420] ? __pfx_worker_thread+0x10/0x10 [ 1398.704097][ T2420] ? __pfx_kthread+0x10/0x10 [ 1398.708687][ T2420] ? _raw_spin_unlock_irq+0x23/0x50 [ 1398.713901][ T2420] ? lockdep_hardirqs_on+0x9c/0x150 [ 1398.719098][ T2420] ? __pfx_kthread+0x10/0x10 [ 1398.723717][ T2420] ret_from_fork+0x436/0x7d0 [ 1398.728307][ T2420] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.733416][ T2420] ? __switch_to_asm+0x39/0x70 [ 1398.738184][ T2420] ? __switch_to_asm+0x33/0x70 [ 1398.742942][ T2420] ? __pfx_kthread+0x10/0x10 [ 1398.747537][ T2420] ret_from_fork_asm+0x1a/0x30 [ 1398.752315][ T2420] [ 1398.755583][ T2420] Kernel Offset: disabled [ 1398.759901][ T2420] Rebooting in 86400 seconds..