last executing test programs: 23m4.260064435s ago: executing program 2 (id=75): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xdc, 0x6, @local}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000080000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x56}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 23m3.913226401s ago: executing program 2 (id=79): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) write(r1, &(0x7f00000002c0)="18c2cc8a54927ce13e1be6a4dc316e6af3f912fcd3856d5012686a4302fb8d3d45b8ded2bf707e50510c79d1db98b12da4e2da02ddcda8856feb643f6d202f15ef3b2db908aa4af07df108c1d27a4c60a148d744bd7a134eaea23df10e4369cdd05236ad29d8f55daa539a20b2f94a18784702", 0x73) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000e6946a00010027bd7000fbdbdf250a0000000000000008000100000000005bfc3e9e01001fea64e506ecc2bcaf86b286eb446838d750da3a402018da6b96757ae7b814a87da70ec0da104b2ec04d27544f67bb2cb882dfb767f8749e7725ec1d27c89b88274b5aa6e3f7104aba6f8444534b01417e6a136ea766a62a17d3dff1"], 0x20}}, 0x20008000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000006d00080027bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="280d0100912d88eb34002b8008000100", @ANYRES32=r1, @ANYBLOB="0800030001000000080003000500000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300050000001a1009511057"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23m3.597732436s ago: executing program 2 (id=83): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="5e5400ea170f0b9edcedf8bc017c62bc39bef7dbf5e0cc002b12682daedfbfe4292229e23cc4bb63c621e336d8020e0ba3a4a439d58f83b32cead3eb93b531f66342020449f480d626114076d9961b954bba1de6a59171b3b6138f267aea044b2bf749a532a7bf6a2069b4866c9d4627ed2b3281f4ffb979d6fd32f1e574b4b3d3eeb6f48217b5299ff0ae47f89574950f1b01572524ca5b1ab96172251740266cbcc9a0cbc279d2", 0xa8}}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) sendto$inet6(r0, &(0x7f0000000200)="66675c2d328421b8cb05f9226884ccf6a36345906002c6c60e995cc50298b1a75d7c88a22d87e0e01acbcc6ac23d32fee9f0eec5b461581c1c2977ca99dd8951f597db220fa0e9dff78e46ac3168ead2f4061ce01fab0733a11f73723e462933e097d444f8605fa2c834f01a3005911fe26723fde43f718004196700636c4565f57ad59da5fe5b159c11241262b8b7cf03b67769c9059ecf46e5b99049b06b2b8ae08fcdbb4695246eac8755d29ff255c9c9fd07d49d34f416c8e86a0a56f0d7db09d2b7d929a7873580d51ab133ee17074fffb3", 0xd4, 0x4, &(0x7f0000000080)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) 23m3.277950313s ago: executing program 2 (id=86): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x40c4) 23m3.151727432s ago: executing program 2 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000805, 0x0) syz_init_net_socket$x25(0x9, 0x2, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)=""/19, &(0x7f0000000140)=0x13) sendto$inet(r1, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x8d4}, 0xc000) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f00000008c0)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000400)=0x2, 0x4) connect$netrom(r4, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005c3b397c4fec31090000000000000037a7bb", @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf25010000000800070004000000"], 0x1c}}, 0x4008881) 23m2.693037475s ago: executing program 2 (id=96): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000005c0)={r4, 0x6}, 0x8) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r0, 0x0, r0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="18000000a878edb3944a78cf60f3f21b06399c93a3d6a2db4b7152ecc972898a2c8982f77679c5093309e6a361913111058f3570186e13a3e6d9020f1aa3193a79f27d3838480502423dd84267e19696ce9791cd5f0342c70bae60921339d0d7fd662282c88cbf377bf783841f7bd9b7e1cdf89ad53ddfcdf82d79bc395e66f89bdb5dabddf0b918693d68235dde2a2404fd95c0c3d2560f08f1c869ae2d602e97e6ab9812c66e4e72c05119adee75e9cb993edbe679988fca65e6", @ANYRES16=r10, @ANYBLOB="e3792cbd7000fddbdf250a00000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) r11 = accept4$netrom(r8, &(0x7f0000000100)={{0x3, @rose}, [@bcast, @default, @rose, @netrom, @default, @bcast, @bcast, @netrom]}, &(0x7f0000000240)=0x48, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000480), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r12, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r13, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x20004884}, 0x800) close(r11) 22m47.546442262s ago: executing program 32 (id=96): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000005c0)={r4, 0x6}, 0x8) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r0, 0x0, r0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="18000000a878edb3944a78cf60f3f21b06399c93a3d6a2db4b7152ecc972898a2c8982f77679c5093309e6a361913111058f3570186e13a3e6d9020f1aa3193a79f27d3838480502423dd84267e19696ce9791cd5f0342c70bae60921339d0d7fd662282c88cbf377bf783841f7bd9b7e1cdf89ad53ddfcdf82d79bc395e66f89bdb5dabddf0b918693d68235dde2a2404fd95c0c3d2560f08f1c869ae2d602e97e6ab9812c66e4e72c05119adee75e9cb993edbe679988fca65e6", @ANYRES16=r10, @ANYBLOB="e3792cbd7000fddbdf250a00000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) r11 = accept4$netrom(r8, &(0x7f0000000100)={{0x3, @rose}, [@bcast, @default, @rose, @netrom, @default, @bcast, @bcast, @netrom]}, &(0x7f0000000240)=0x48, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000480), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r12, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r13, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x20004884}, 0x800) close(r11) 27.273474518s ago: executing program 0 (id=11940): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0x13, 0x14, 0x7, 0x2}, 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000380)={@local, @mcast2}) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a00)={0x168, 0x2e, 0x1, 0x70bd29, 0x25dfdbfc, {0x4}, [@generic="426fe82748ea89c7b4e13a156f6acc5c637edd3ba347d10202b4c6ab7602990149388c0de0cf5a10e40f2d0149c9b2301c83b5a11eb5682b26496a242e5aa80b83d127268dbbd62cadd334f27f389c6a8db03a0272d4c9971beec4368899f61e2ef6bf693daada94ed42daba8fd471d83cb4becc561aecc3692da1a2a319f55f4b300c52f4da698171af678cabee6b8ad13fb4f904009e9241b3bec68f0f993f05dd016dc5c440e90cfbb44746d9ee66e89f85c4536dc4ce0f112d4d464a0d7f6aece60feb3a6e33c2c58f7c2171cf0f6e2aa82ab96e34a293dccdc7dc61ba8015407653a42d1de52d98b7cec13402c23e", @generic="3c778eccea5606522b91269b4404726e4e8cc7466e1938442c6f2acc4aa476529517e7737769b7ca8034908ca8ed5ba2b18c05560100d4a1b6e76a3985a8bc5dedf77190e1fe1646f71caee3564df5b34e1a1927f27d060114bcf38eeba80496b5c7d8"]}, 0x168}, 0x1, 0x0, 0x0, 0x2400000d}, 0x20000015) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "8742fe4687d86e5da82e41ef2302058dc3b5674f7389ec494011ccec4f7d012c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd5279600538f", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb6eb691496126a2d28d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000cc0)={0x0, 0x74, &(0x7f0000000840)=[@in6={0xa, 0x4e24, 0x82, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x849}, @in6={0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa7f4}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000000d00)=0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)={0xd4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x28}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4a8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x461}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendto$inet6(r1, &(0x7f0000000780)="f4cf6d11c42d38bcc5104c95d6e157f66e23455c2bb51dd0928c808672c8a762cd8c734b77835f3ccbcd01a88db853e8f491d889f823ebd39a2025585fff9290483283c363bc25a83ff58cad1c7e49c24680822a0dd07015b8e60959548f4b2f8c256567e05c94a9421165778d7804cc3f36d085195e87fb59bf4cd51fbce9f902813288586b11c8a6940b0b48c63adf1bf6d100919a9d3a15d1be1e", 0x9c, 0x4000000, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) r7 = epoll_create(0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000005600200025bd7000fddb8b17f060c0172e6bc48b02000000"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="e03f0300c1000b05d25a806c8c6394f90324fc60120000000a000200053582c137153e3704cd3080fc5409000c00", 0x2e}, {&(0x7f00000005c0)="02378e13c4d2e21566f537cde06ba366c3d6869b2c6473086a0accd2b5b3c2e217d89c0ee3cfc6dee40574402cf6632c6c0bb3557b5bf66d75b3f63153e90893147f32146d480251529c6185", 0x4c}, {&(0x7f00000006c0)}], 0x3}, 0x20040040) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f00000003c0)={0x200, 0x4}) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r4, &(0x7f0000000000)={0x20002000}) 26.87618272s ago: executing program 0 (id=11944): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000700)=@x25, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000780)="60a354adbf9a69fe6d833b169777cd5a9dd37e03af81e2154ae8a77d54bb1feab79d62f9a4a5d7348980387069bf6656883ec473391c39284fa8cca4c1c52d48e9f58d95c484414d373657878424c215d431734ae7846003e67701b00fb4b7d4679280096815ddca8565f081820ff1", 0x6f}, {&(0x7f0000000800)="94fef26ea6fafc336fe338d4efdcfdffa70e68d8ca68b9714100c199b41381146763347a705126417ad760cd680ff15a78d0bed76b6fc600df1e0671935a43bf05c6077b5b94713d4d749f2414b3", 0x4e}, {&(0x7f0000000880)="12e6e61ffd2883d6a5c511c3b9942bf24a1deffa0d0cfc37f334522f414e1a8f724f07e717ac3940472f50a6d4b25c4902ce13ff278d40fb0ca60c96cb3d0bba702676cf20d1265ba3b846fc07f757c531a38b00956b522944d83a57a3888cced4b34a44d6368a15eeec5a1d6502b41af15069ba4a3bf8", 0x77}, {&(0x7f0000000900)="14d53e11f4917728fe492c3a2a95996d7fb0e27ef329fe1514851aae18dd74e9b6a472d662e4f6a608bfdf447817f4a8c24ebe6cdf56bc29a773cb26c7f35e054febca9283f028fed6e62fd6e9a8c13180fccec97368bf63ac35b1762e2ef0d689043dec60c7f95040ba4904de39ad0168ac5cbb696fabb1f95533ef0521d069", 0x80}, {&(0x7f0000000980)="09392b979ad3cb72082bc8dcb631620081591372c6826f43cb122c4e2c8ffd87664f2eae7f2177532280b7b1a51b45aba552f2827125e9228c19aa55c7580a7dca6a9a51c23853f1fbe9873e26f425cf2a7d1b9b5523c21e80de6335454cc8560e2f5e0657cac4643b9c7ada2525a2fcf775033d973d9d7fbfc0668cc3a35719dada1264", 0x84}, {&(0x7f0000000200)="4400b0775a1030e5c9b9", 0xa}, {&(0x7f0000000a40)="f0d1a8e7450484abc61aee1185d3a0e8997f12f29eea2e74ebb711414554669477881d09c8ebf66cb0c8ad065ccfd8fb6200dbfc4b5f385c1e6ca6730956f6294438fe36d8a28e69865ec8e6c356092c43a5f96de8cdb5b314989ed96e60aaae7eb144a0c1058f4861b93c14ee3b72d8c08ec4da98e086a4e05bd8c2d29d371e0541cdc7a5770f00b1a50d600029677c4b90eb29b50d13ede8e0a27e9ccdb26229f0729d959d58187e0d2a36051e22b15adc94af226c37b0c75ab34e3ccf31a2", 0xc0}], 0x7, &(0x7f0000000b80)=[{0xa0, 0x84, 0x101, "02827520eaa25683294708065d8101797bf652d7d0617290ae2c5466f01686e852447f544ab9ff0895dd6a77097523dde17743af9885fbbc1d67a7fc23d474a35436c0f2790ea0a73df2c321e6694a0544749a157d45c82e06ae435b99ce132919debc5f5394dddae2c6cd2db0ba76c128641d4b16f557bcb871f3aab7679acd1f288e6539616d3bfbe9374147d9ec55"}, {0x80, 0x11, 0x2, "b90a753c535650b63e908819d8f9370bb077a9f345f89b7f345aeaa28b3e8cf4cb266a46c3c536f4eb70a3b04e394080ad73d7d468e8cb2881426157e4fde976ed1d8edf64c703a2e439777cce4a59812b6ae59f75cad4aaaf0f84b4443da17c7bdebc876866cc759890"}, {0x68, 0x11, 0x5, "84f2b9ecfdcea5b0b845906dadafaff99d6da6fa51192336ca71000c42090859772da1e1636355cfeee8e7427410759f19cb35aa810c3ae3118c7726a0f010f977f9df725772d6ec8abb193015c7515c0f38fe501abf"}, {0xd8, 0x114, 0x0, "567c3b1e14fa6a9e851ee7078acddb06b06f614bc76cb1cce857bd63ea965abef0d076aa3de5190215d848c61b7ad5ef9e53bb5d92b33a2e577bfa50caa2e7cdd9d44758740f44a9ffb9b6d479cc405a9c5a31a54adae85cf89a3f30c13ced0a6ef22149463eb8c09f4993372ddd952b7022ee2a2f0d97128215c68cee891345b4e784fa7c0b17ac12be3f5921124d8b636e89a8643be81dfd553eb15abf876c0d435f364d00f7d6b866273c52716060e76f1b6ef910bc8e905bc32d3b6012d8ea"}, {0x40, 0x104, 0x7f, "65ba63350cdcc44e9b131d2aa1362411a5b242bde69163f3df339e1eb93d48c831f2926e98e382c9db9b1d"}], 0x2a0}}], 0x1, 0x40199) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x2c, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x7ffe}, 0x90) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001a0001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0x42f, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="f3ade86a8c19"}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 26.488727683s ago: executing program 0 (id=11946): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt(r1, 0x20, 0x200, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28000000111401000000ec000000000008004a00020000000800011000000000080003000000000022198ca7d699320a2a00acac1488a871b4ceacbcba951e9517f4a382a0012614330f3bcc2870163c7c2f65467e209a282735b2b4ab6cfeb9e928123697441d07c2c14ae9634c5a5ea4696dc1a4b4e5fd6a88644cff7ff65f0901521e3252b3965e335208328349ca7fd575655d4f50e9425f08f3e3992962955cfa8eed320f86cc8b5e874acf7901ce4ed838e626fedd2afb1f33e7d9e925b144e0277e3dda1aa04d00310388d649c1ef8644221d10fa777f3458655bae1b7da0b17e630d615518de4088"], 0x28}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) close(0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x43c, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0x100, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x2fd}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0x1, 0x2004c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x80800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 25.281753535s ago: executing program 0 (id=11954): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r3 = socket(0x14, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f00000000c0), 0x10) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000280)=""/182, 0xb6, 0x40010102, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 23.013138106s ago: executing program 0 (id=11959): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xf9a3d000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02ddf21295b88228879d5b4a567d1f7bdfe9e2e942976ef3786a49fc8f1cefe4310fbf5599ec6d99", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250400000014002000200100000000000000000000000000010c00160009000000000000000500070002000000080019000a0101010500210000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000010}, 0x4004) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="674cac6f1f4039d3f95c312167055c73ed8d277c01f4f0c378b9d8e6e8637c2296ea367f836a8b9a76660161638bd31e2b5bb0ba395af73379882cde7d07cb553bdb2536855dbe2ba3012297adbf5c6bff3b4dc89a7ec5dd3af9df3702a3ebf436b6e57b37154b44eea11ccc9c00bd9e3bc9f0e47292", 0x76}, {&(0x7f00000000c0)="522ee8c520e3cd81bb42eeb4e2604079d78cfb5d112b4368cc624aed6f270be6daedd68a56a5ba7b303ddfda4dea47541b889f89a9941219cf5abf5ecc84aea1f5179873face4a97518eab9cf228b581f3d891b5eb5b9ac0e4d9609d48d9840fa0e777fa9d0ddbf03e5832d337632559c8f3cfdd952f64d803", 0x79}], 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000012c0)=0xe) accept4(r3, 0x0, 0x0, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r6, 0x80044944, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x800, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @empty, 0x9}, 0x1c) 22.762483035s ago: executing program 0 (id=11962): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000000125bd7000fd9bdf250f0100001400cd00fe800000000000000000022800000000"], 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x4044000) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x90) r6 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000140)) 19.070079366s ago: executing program 1 (id=11996): syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021002973a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d00001100fe8000000000000000000000000000aa000000000000000000000000000000008700051968000000002f000000000000050200000103000000009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa37105020000008c65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c05538cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e00338b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe000100c20400000000983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe0901, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="07000000000000000000000000000000b5057f9e628546fb840cad591ac3456fa7e7487e8465fa628fb08761b48a860ade9d7ecb099561a3a86d792e3d16b92240c850f119b0cbe6c7cc61d00c2d", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000004acede967c288ef4"], 0x20000408}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 18.586284285s ago: executing program 1 (id=11999): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001080)="c9", 0x1}, {0x0}, {0x0}], 0x3}}], 0x2, 0x4000000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 18.515200396s ago: executing program 1 (id=12002): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffff6, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={r1, 0x3, 0x4, 0xcf1}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x9, 0xfff}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r4, 0xc6}, &(0x7f0000000180)=0x8) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020303000000ffffffffffffffff000000"], 0x1c}}, 0x0) sendmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000600)=@ethernet={0x6, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="c3e6e5a18104b02978be57ebf111879d588320db108bbfc64ba69b", 0x1b}, {&(0x7f0000000680)="16743be4ecdf01c0d1386e501ebda906f0cb8d6a8ed6e3b351639645bc6c0f4b293ebd50a433fac16912579f82d98342acaf9fd76644400b8707570f0332a90b80ed3f69826ce93b355ff7ad9cf3e9771a675772b9bda460688caf85d03458f58d8a5ceb17f167613f259a68d39c39db2dfe9cac24827b05116f734a85c798d42e7f3f28525872f48c7d1d917cd558fd4ccc6f5501382559c7e943ad753ca91ccf72b637ce0b46793430227a415172abfcdf6a2c06b04202b2c78a4d", 0xbc}, {&(0x7f0000000740)="a370c74525caf337ba97196afcae8e3f2d4633ace7f588fc815d7b896178c0e8e2df5415cad4240997e7fa26e19d90d2bd098d358bd72c0d9c43f5ccdad492c24c2a9e1492836202b2c0143caa27574562b1d4943844b076cd81ed74c1cefeeb6a0c87714d853f4551f544ed177f5fd9ff8b6b3ff114ed86f72547786766ff7ec67c6376f999109b1f2c34f31b7832136fa0f93c0b2f58fb744d7f189344707654b912b50f9a83d56d1cbc311d760aba9df0c16bc3e6962c1f2cfa9b45ab17200d320c223dedf12fec2caaaf35f72aa34e097e1e", 0xd4}], 0x3, &(0x7f0000000c00)=[{0x58, 0x29, 0x0, "8548772e46c45c863f535db569fa9088fef841664b9a1e9349bbc9c3bba7ec7bac73eb99995099a58ed5d6fc32844037f173b6e00792cf54b8cae41b51f0f1cdb39dc1a3"}, {0x50, 0x107, 0x7, "471adcc5e183c1897f9fe0ac9bec38d65d16c8207a5cc1d2518eb6f85fdea40962fe737e6e2c71a8383d3e4da161f40c1ed704bf925873fc33a22272"}, {0x80, 0x119, 0x0, "f0611408364bf9808a351b4f52259295f137219d05d05358110664d5e797d5aa9b5ae578da8e97b0ef29e3dbde29eb3119cdacbcd03751ee776620477c43e57d3727d0b302ee898555e3dcad1110f7e058953284991e1e2e5acdbdd2e389812efcb6f383b9b267a035243c48e8a1d3"}, {0xc8, 0x10f, 0xd65c, "3f051b8faf500c0b0f87b5abf784ed7315e9a9c78abfb9fc1c58039ee9a58828d1f6669fabbf0df0149c6ed160047f6044cc29d49410ece6349f3c189ebc6023b5d6e7fcaf81d77c8d5d0da482affe52aad128fdf5b9a21a21fd0d9834b5c843ced0bc5f7499dcdb360c338115d0a7233d72a5e708c1a23aecdce08e3b3fcabffa478fd9d077bd039b3295c594b42d063d13d107d85b3aead3dccb3d94c350da2a52a032342cee78da6215a53ba579676bfad75c5c6f"}, {0x28, 0x116, 0x6, "23d961fe9aba207e9e353c5883ee919401832bce"}, {0x1010, 0xff, 0x71, "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"}], 0x1228}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)="80892e3b64d783bbbd386dc557abda177573f473468b533eee77c1feeaa40e362e71bd14b4cea699e3130d6859e19e23efb0571cce6e28e98adebccc1c65bc778260c20e337b72c3cc2b33bc94d4d2daef4a3470161c6e0d68dd0600ec9b74dc5aaf5d61fb7faa14ca41af8c6838057d5c8324e0f4ee", 0x76}, {&(0x7f0000000980)="8c253f56b5d0df07df8e3e39778c99de89f42296ed8100e6829a47a436e550146cb5bdf9122ce289392f79b7bc1a5c567c616d5c2209732a0314416f1aaabb4c7cd75191fcb344b1f03989ae51c5aaf217770a61251cc0d131b904b8e19ced3bb974461f851152ee0d464e046db8c7ee6d91208ff171eea93540371a4b691972a4f57e74eba3417299d895eb88642835", 0x90}, {&(0x7f0000000a40)="1f4290521611eeac65ed4b99b201b256eb18192e9f", 0x15}], 0x3}}, {{&(0x7f0000000ac0)=@x25, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001e40)="9e4623a3208c5314eb13587bea6eac541b0b688e46a24456e8ac8d76ecd6ce5bcc1133f947c9803b9c7a5fd9e61ac6365a21f16704b625170382d65af4409b08694925dbd0e9925cc77cb202f721110526994b803bd7d86550f671bd54ac4d6db4e005b3e8a08c113972886a1c495c677ee3d2027508802d2f61ae401e8c8609", 0x80}], 0x1, &(0x7f0000001ec0)=[{0x1010, 0x10e, 0x3, "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"}, {0x70, 0x114, 0x325, "1a2a0a600466501e666a4ee771dcd4b9edebbec78e27411829a600c16a7afc492d551080bdf20e789ed020adb4f5cfbadf2feda6f47090e4344f43369999e1c2ddd45bd788574915c9d40569e616a566a0eb52aaaeb07264f525e0936e41"}], 0x1080}}], 0x3, 0x4000041) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002008300000008000340000000000800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a320000000000000000000000000a"], 0x94}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000081030108000000000000000002000040"], 0x14}}, 0x44) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r8], 0x80}}, 0x0) 18.334199925s ago: executing program 3 (id=12003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018008000280040011800000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 18.118074554s ago: executing program 3 (id=12004): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 18.077926137s ago: executing program 5 (id=12005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x47, 0x38}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1e5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x48}}, 0x24048080) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r9, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r10, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan1\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '802.15.4 MAC\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '!^[*'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000804) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r7, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000080) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000980), r9) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r13, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r14, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL80211_CMD_LEAVE_IBSS(r14, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r7, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x43}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x8c685a37cc74b2a0) r15 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000cc0)={'vxcan1\x00', 0x0}) bind$can_raw(r15, &(0x7f0000000d00)={0x1d, r16}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e40)={@fallback=r14, 0x5, 0x0, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket(0x28, 0x800, 0xc534) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r14, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1d, 0x15}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000) 17.966271728s ago: executing program 5 (id=12006): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001980)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32, @ANYRES64=0x0], 0xa) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a00)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0xfff3, 0x10}, {0x9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) recvfrom$l2tp(r1, &(0x7f0000000980)=""/4096, 0x1000, 0x12163, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x9a, 0x0, &(0x7f00000003c0)="37bad1c3c425e2a8ef3dac559c4a992c100a7aefff57f339c7d20b24ec61cc553b0efc201031c39cdecfe41b1d38828523fa2161e5dd5ef8432ff73ea9359eeb68b2747a6e059b6a9d2a97821ba3d31b96f6ac12f8d903a5a0c79b9dd75f3314711bad63814f907a88200c88ba6f61965fce766252806b11d757418423e840a64180fc98acf0efd3ad5cd3e81d18ae3257d7aab6e32d64a6c438", 0x0, 0xffff0811, 0x0, 0xa2, 0x0, &(0x7f0000000540)="f3a78169e1028eff3f4f6049753aac3f21ba5fb8c4aec89bbc73fb9b492ed8a8905b660a60f539f676cad6ed2c3087d1596ad69055e0d24eeaae239c831198449d39110c49fabcbe643983702d25b730eb44084747148e38d5ef648ee0fb684e2ab5fea9fd371552289b8ece9abff5b80aaecd22d8cd9fe36bc032c1d5aaa967395492653bce629b8ec87cbff63f70991d7cffd602b537a1e67374622759d61de887", &(0x7f0000000640), 0x2, 0x0, 0x8}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000)=0x8, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000007e3cbbab2100000008000300", @ANYRES32=0x0, @ANYBLOB="04002a"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x6e, [0xfa, 0xf, 0x5, 0x9, 0x3, 0x81], 0x0, &(0x7f0000000240), &(0x7f00000002c0)=""/110}, &(0x7f0000000100)=0x78) 17.88223139s ago: executing program 3 (id=12007): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {}, {}, {0x0, @struct}}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) 17.512977334s ago: executing program 1 (id=12009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(r0) 17.397533926s ago: executing program 4 (id=12010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x40, 0x1c}, 0xc) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f00000002c0)='^\x00', 0x80, &(0x7f0000000440)={@_ha_fsid={[0xf0000000, 0x5]}, {0x152, 0x1, 0x5}}, 0xffffffff, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x6}, {[0x40, 0x1, 0x7, 0x4]}, 0x7, 0x86, &(0x7f0000000500)=""/134}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000680)={0x0, 0x8, 0xb, 0x3}, &(0x7f00000006c0)=0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000700)={r4, 0x7ff, 0x8}, 0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r6, &(0x7f0000000700)="ab12bb69", 0x4, 0x20008851, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000007c0)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x4) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000080)=0xd, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x400}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) getsockopt$rose(r2, 0x104, 0x7, 0x0, &(0x7f00000001c0)=0xfffffffffffffe3e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x35c}, 0x1, 0x0, 0x0, 0x10042004}, 0x8000) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f00000000c0)='@.\x15-/*\x00', 0x218381, &(0x7f0000000140)={@align=0x8, {0xa3, 0x6f39, 0x4e1, 0xfff}}, 0xffffffff, &(0x7f00000003c0), &(0x7f0000000240)=0xfffffff8}) 17.157060484s ago: executing program 1 (id=12011): unshare(0x20000400) unshare(0x10000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000002000100000e400058"}}}]}, 0x48}}, 0x20008080) 17.09886853s ago: executing program 5 (id=12012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x4) 17.001425214s ago: executing program 4 (id=12013): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r7, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x3c}}, 0x20000000) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\xc4{{+\xeb,:*.'}]}, 0x24}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010100, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xbffffffe}]}]}, 0x13c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x8000}, 0x1c) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 16.969052496s ago: executing program 1 (id=12014): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x61f0, &(0x7f0000000140)) 16.842725539s ago: executing program 5 (id=12015): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001100)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000000)="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", 0xea, 0x0, &(0x7f0000001000)="8702d9db19f441c295110117ae7e00dc326843b4a4a7627e5e4c4a56d687045fc81698547228ecd0a172ffe7c50fa00aaea26cd5a8c82f624ab3fffba729862ac1452caf3737799d467099fe77847984639d8d4ee6643197bed569add9ec04b167890bdd2463b9a40e031cd5018d8a136a1a90f5782e29efb35ec2a8c63e2bda5a93dc97d15a807bf075924f0fe6f6133ac61e4d1dce96d022a8faa2ee0b8cddd5bc76f5c4572f7617cbe1a4a32e6f19bdf7ac9f38bab1c6fe7801e9c9ba14033270168b6ac6ba38efd4aca39c424d26a82f4e26e1ce69e03f6930d7f553a5a9bcfc774878f22e752217"}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000001180)={0x0, 0x6, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001200)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000001300)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000019c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001340)={0x624, 0x26, 0x100, 0x70bd28, 0x25dfdbfe, {0x12}, [@typed={0xda, 0x143, 0x0, 0x0, @binary="ac5b7fb2dce61f471b3473e451a13a141e2078165fba78f43f70757f0c242e98e2068350906c53804813e566d5315bd9e64299557e6dc2783356e65797fee602c0e79a3baa3f0fcd6ec51e907d3e35caa76c73457a6d28e628cc5d7eda674a49c84d270537f24e66814fa56ef14072382fd696e97705ae72fa43411b7a9cc29e8bfd92f96f16201395332a3ee90c6c0fcf1423ad411e855ffa2a9a17e2daecaa20dac5d2ecbd8ee2979a73cd7eafb996624966880105986d6cffdf95f7f01ddcb0ebaf829516fb99ad60c0f001c23d26261eea7334b1"}, @generic="1f4b14261644e32a02a9aefd33ed4ffac17d7a694a42ad7e71714cacf57aa27b9a99d86d5d8e07b05bb4b35608802962487cbad5d593218e52e795c2b3f0dd3b14b3eced1419c7a29d897bbd21eea8acf9aa6a9f31e07d07c914d0f00e96f9", @generic="f03142931b865a2fd54b83107a4a103b0dea1f96e828c5bdaa2a5e633d4db96cf2938d4f33b17054c8bcc3bf9db7ff5657c0dc185c0efc4a2c1584cf6c7405c2631b32d2c4a27654db6be8f007994af1b38d802fa0c06989d317c0346ce4efaf0ae410b9ddddc14451f57585", @typed={0x8, 0xba, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xf8, 0x0, 0x0, @uid=r3}, @nested={0x1ca, 0x3a, 0x0, 0x1, [@nested={0x4, 0x124}, @nested={0x4, 0x50}, @generic="d762fe96797067ce51958c57bc2136cfa11b95918772a8a72fa56bea2ef543591fa05ba250af8d424f91ccc2ea2ba1e56924e5d5615f9fd686c999e48ef3276e629251f3969e325113210ec796eee2ce15c4b98029616ceb70709a9f0201bd6c27637312b9459e48c50fe505c55ed1488eeef48110b30566926be849072c383faadc2eee3ac65f68ed7a4fcb74286a3541a6609b4a5dcc27421038cd0ec1cf479e9731f473751b6b4a00785742dcdec5ea232579b15183ff57", @nested={0x4, 0x1e}, @generic="6e78e70dd62c6e83aa971ff85d23b6bfdc1dbcd727cff26d850b9e31d2dc73fc0c8059ee9ef185c81afa9570de96592a1fc3632a792fe74985edfbe2f233a57c6e809d45edd237871b94f9c2d7f0d0572df9c3bb00ccc69238714272222b3c46a105988fb5335ae2dd82c86e99017601f13e0d5a880105b5380beba543c9d8307796187b42222fdf0dbb3ed84bb0c2856ebbbd10915e68af9d27deb7681d472524f1a7822b20b4a41e49e74d672c9bada5a8b8b63b0c5c41dae196297ba8041ce7a66af6d4e5385447cd201b446732014b40d90b22b4cdae9691dede79528272e684501e3c1a58daa41b130a5e443008aaa3b5a51a2b7e5715", @typed={0x8, 0xbf, 0x0, 0x0, @uid=0xee00}]}, @nested={0x289, 0x79, 0x0, 0x1, [@typed={0x103, 0x65, 0x0, 0x0, @binary="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"}, @generic="68ecbcf192cc31239519ff10d2d7a909d6f57d574bd79489a8391c93be5412001f5345a706ae83508e4ea50843c9f5d80bed2ea21f68a455c38708f3c230c93b88872fb3b42d9636b856b750fa99d59a0647253f153f449e8501ea05232b634b183db03afd403daa1c49dfd0bb9ecd1b9755474020368b222a7f057e17f7d467fdf06da2a0c37049029577f474499fe6ddc0a6c5b2708396bbb29cde63b7a8e29c1e362d9e920fdd927606b8b0", @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x11a}, @typed={0x6b, 0x1d, 0x0, 0x0, @binary="1110e70eb96bb12e3f089c15d3abc8deedd1f8bec6263d934be9f5546f4fe8b56c3388ff6011a70db05eae00d575e907445a53549ea5cf1cba6a8723aa0f9de89b72f65628c846f04d58fc66ea9ee7ec6a253d6109b81a4bd29dbcbeb585d5c4be521beab82e37"}, @typed={0x4b, 0x3e, 0x0, 0x0, @binary="2e7fb5d3b9609a7af788f2b8efc2eb429f8379c661096029cc12711846e7d5476bf1a69b1ee50dfc4b8cf8d9a17d4bd1d7b6db71584b53677b497c24d3bd6145a92f292dfa0319"}, @nested={0x4, 0xd2}]}]}, 0x624}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001a40)=@filter={'filter\x00', 0xe, 0x4, 0x588, 0xffffffff, 0x148, 0x4b8, 0x288, 0xffffffff, 0xffffffff, 0x4b8, 0x4b8, 0x4b8, 0xffffffff, 0x4, &(0x7f0000001a00), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x379f2355, 0x2, 0x1, [0x8, 0x3, 0x1, 0x7, 0x7e, 0x9, 0xff, 0x1000, 0x9, 0x7, 0x9, 0x6, 0x5, 0x3, 0x6, 0xffa2], 0xc}}, @common=@srh={{0x30}, {0x6c, 0x5, 0x3, 0x8, 0x5, 0x4, 0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x1, 0x88, 0x69}}, @common=@dst={{0x48}, {0x6, 0x3, 0x0, [0x101, 0x5, 0x200, 0x9, 0x909, 0x7f, 0x0, 0x7ff, 0x800, 0xf, 0x0, 0x9e, 0x9, 0x7, 0x0, 0x6], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x12, 0xe36], 0x749d, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, @loopback, @remote, @private0, @mcast2, @mcast1], 0x7}}, @common=@unspec=@pkttype={{0x28}, {0x101, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002080), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8020004}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4e}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_SECRET={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x20000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000002180)={@remote, @local, @empty, 0x10001, 0x7, 0x6000, 0x400, 0x3626, 0xd8c9dc3405583921, r2}) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x38, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xae8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x17}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200404}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)=@ipv6_getroute={0x78, 0x1a, 0x4, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80, 0x0, 0xb, 0xff, 0x2, 0xfd, 0x1, 0x4b00}, [@RTA_GATEWAY={0x14, 0x5, @local}, @RTA_PREF={0x5, 0x14, 0x6d}, @RTA_MULTIPATH={0xc, 0x9, {0x400, 0x22, 0x2, r2}}, @RTA_UID={0x8, 0x19, r3}, @RTA_MARK={0x8, 0x10, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @RTA_UID={0x8, 0x19, r3}, @RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_IIF={0x8, 0x3, r2}]}, 0x78}}, 0x801) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000002480)={0xde, 0x30, 0x201, 0xb9da, 0xe0000, 0x2, 0x7, 0x205, 0x0}, &(0x7f00000024c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000002540)={r8, 0x10, &(0x7f0000002500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}]}, &(0x7f0000002580)=0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000002700)={'nat\x00', 0x0, 0x4, 0xca, [0x9, 0x8, 0xffffffff, 0x0, 0x4, 0x7], 0x1, &(0x7f00000025c0)=[{}], &(0x7f0000002600)=""/202}, &(0x7f0000002780)=0x78) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000002800)={0x2, &(0x7f00000027c0)=[{0x800, 0xd, 0x5, 0x401}, {0x8001, 0xd3, 0x2, 0xfffffff9}]}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x100010, 0xffffffffffffffff, 0xa6649000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002880), r7) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x1c, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000002980)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, [@null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000002ac0)={0x0, 0x9, 0xb4, &(0x7f0000002a00)=""/180}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b00)) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000002b40)=0x3, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r11, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) syz_genetlink_get_family_id$wireguard(&(0x7f0000002c80), r7) 16.840965887s ago: executing program 4 (id=12016): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r3], 0x2c}}, 0x4000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="1b0507000000ffdbdf25190000002000018008000300040000001400020076657468305f746f5f62726964676500"], 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000001) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 16.609907948s ago: executing program 5 (id=12017): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0xfffffffc, &(0x7f00000000c0)={[0x200]}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0x80000) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES32, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x405c}, 0x400c084) 16.559869267s ago: executing program 3 (id=12018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x7, '\x00', r5, 0xffffffffffffffff, 0x3, 0xe, 0x4}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000e9ffffff00"/28], 0x96) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, 0x0, 0x5c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = socket(0x1, 0x80802, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r12, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) sendmsg$kcm(r3, &(0x7f0000000ac0)={&(0x7f00000006c0)=@l2={0x1f, 0xffff, @any, 0x85}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)="cccc2e1d6626dc50773c3a7bad3b355101d8b22f61366429ea5e8c0eadd1f12ceb4244340e6f32bdcf2e866a60ac45ae7d7c21672d779c6eec641a0334bea7f0f313", 0x42}, {&(0x7f0000000840)="184465fbd04897a9e905bd606a5d103af4b95d8d10e42e", 0x17}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000980)="2298eab9d150129cecca3ca01a47abed3eee08f954112c0bf71e4a669c6cb5169e0ff7a73f304f46ec9aded4ddadfe2b904c48143bc96fb4e448b5f3fdc1c8062925f07f46720d365a66acc1a020467d276feb51d0374b61f470258659aa77fded2fb525d70d9aeab192b57a9b98b0fce43e590c25cfe23ada7fdd99058f7104d40e992a4fb1e1e54d21fa0b99282edea882201516cea92d89c537501d5c252b104276543df2afbda9bc7f5ff7609178561ab2b3731ccbb921480ba4879a", 0xbe}, {&(0x7f0000000880)="44d8561acfa13125dbfd5f15b96ee39768750daa152dc29a3226588aa7055be2c4647821a9395229b16031e9", 0x2c}, {&(0x7f00000008c0)="f76e2cd8ac07a4bf3a0343c5780d95c1e92c3cb6a4db86d2b8b9571fdc7ba37e86bad6b36e1b", 0x26}, {&(0x7f0000002300)="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", 0x1000}], 0x7}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x86}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x65, &(0x7f0000000c00)=""/101, 0x41000, 0x4, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x0, 0x7, 0x56b}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r1, r0, r7, r13], &(0x7f0000000580)=[{0x1, 0x5, 0xe, 0x8}, {0x0, 0x1, 0xc, 0x6}, {0x5, 0x2, 0x2, 0x7}], 0x10, 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) ioctl$sock_inet_sctp_SIOCINQ(r14, 0x541b, 0x0) sendmsg$nl_route(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800200a26bd7000ffdbdf251c200046ff04fd0a0000000005001a00060000000c000900fe000551", @ANYRES32=r5, @ANYBLOB="080000a7b520795d4cf80d15ed124522e0f66e9e3c05000400", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 16.501856461s ago: executing program 4 (id=12019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) write$tun(r0, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080000000200b7e71400020045b00fc0006801"], 0xfce) 16.277281497s ago: executing program 4 (id=12020): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) listen(r0, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xe27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}}], 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000008c0)=ANY=[@ANYBLOB='`'], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) 16.197056659s ago: executing program 3 (id=12021): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001980)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32, @ANYRES64=0x0], 0xa) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a00)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0xfff3, 0x10}, {0x9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) recvfrom$l2tp(r1, &(0x7f0000000980)=""/4096, 0x1000, 0x12163, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x9a, 0x0, &(0x7f00000003c0)="37bad1c3c425e2a8ef3dac559c4a992c100a7aefff57f339c7d20b24ec61cc553b0efc201031c39cdecfe41b1d38828523fa2161e5dd5ef8432ff73ea9359eeb68b2747a6e059b6a9d2a97821ba3d31b96f6ac12f8d903a5a0c79b9dd75f3314711bad63814f907a88200c88ba6f61965fce766252806b11d757418423e840a64180fc98acf0efd3ad5cd3e81d18ae3257d7aab6e32d64a6c438", 0x0, 0xffff0811, 0x0, 0xa2, 0x0, &(0x7f0000000540)="f3a78169e1028eff3f4f6049753aac3f21ba5fb8c4aec89bbc73fb9b492ed8a8905b660a60f539f676cad6ed2c3087d1596ad69055e0d24eeaae239c831198449d39110c49fabcbe643983702d25b730eb44084747148e38d5ef648ee0fb684e2ab5fea9fd371552289b8ece9abff5b80aaecd22d8cd9fe36bc032c1d5aaa967395492653bce629b8ec87cbff63f70991d7cffd602b537a1e67374622759d61de887", &(0x7f0000000640), 0x2, 0x0, 0x8}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000)=0x8, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000007e3cbbab2100000008000300", @ANYRES32=0x0, @ANYBLOB="04002a"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x6e, [0xfa, 0xf, 0x5, 0x9, 0x3, 0x81], 0x0, &(0x7f0000000240), &(0x7f00000002c0)=""/110}, &(0x7f0000000100)=0x78) 16.079973443s ago: executing program 4 (id=12022): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0xa4, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x90, 0x1, [@m_tunnel_key={0x8c, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xf, 0x6, "dd7d00b0fb47b17716e35f"}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x1, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000280)={0x4, 0xfff, 0x11, 0x3, 0xeecc}) 15.641435489s ago: executing program 5 (id=12023): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={r3, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r3, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e1d, 0xd, @empty, 0x10001}]}, &(0x7f0000000080)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x10, 0x80002, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) (async) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x4, 0x6, 0x80000001}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x191080, 0x0) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r13, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x13, 0x8b, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000040)={'bond_slave_1\x00'}) (rerun: 32) 15.31356562s ago: executing program 3 (id=12024): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000100)={r1, &(0x7f0000000000)='-\x84:])\x00', 0x4000, &(0x7f0000000040)={@align=0x1, {0x9, 0x6, 0x8e, 0xffff}}, 0xfffffff2, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x408, 0x220, 0x110, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev={0xac, 0x14, 0x14, 0x3d}, @local, 0x8}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3d}, @remote, 0xffffffff, 0xff000000, 0xa, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x3, 0x4, 0x6, 0x1, 0x9, 0x81, 'vlan0\x00', 'veth1\x00', {0xff}, {0xff}, 0x0, 0x146}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback, 0x8, 0x1}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 0x7, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0xf001, 0x200, 0x400, 0x4, 0x0, 'wlan0\x00', 'wg0\x00', {0xff}, {0xff}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0x2f, {0x240000}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeab}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x90}}, 0x8050) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x3ff, 0x4, 0x0, 0x5, 0x170, 0x2, 0x10001, {0x0, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0xffff}}, 0x70, 0x1, 0x3ff, 0x1, 0x3}}, &(0x7f0000000840)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000880)={r5, 0x3}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt(r1, 0x3, 0x1, &(0x7f00000008c0)="fb035ee2ffb5d5d52cddebbe9816283bed4d47a8df8e87c568ae43c6bfb7ad778ea00191f81c40a4985f30b21a29a98dc20ffdb6d83bc8cf3fce2a0aca2742c74ebd6ee73689a23e2be62cd6d46e1859df7788a9d01c468aeffef9f7fd5674f91ae455c2598f0e16b5fa410f28049e47ea936b0d547d5838b4ae2531a2fb585b1bffe2c90624", 0x86) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xac, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0xac}}, 0x40810) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r4) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r7, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x20004800) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000c40)={0x18, 0x0, {0x0, @broadcast, 'wg2\x00'}}, 0x1e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xec}]}, 0x64}, 0x1, 0x0, 0x0, 0x440088c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000e00)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)=@newneigh={0x64, 0x1c, 0x100, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x88, 0x2}, [@NDA_IFINDEX={0x8, 0x8, r10}, @NDA_LINK_NETNSID={0x8, 0xa, 0x10}, @NDA_PROTOCOL={0x5, 0xc, 0x4}, @NDA_LLADDR={0xa, 0x2, @random="65cbdeccbc10"}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000001040)) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) close(r6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000001080)={0x1, 'wg1\x00', {}, 0x3}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000010c0)="4271eec6d827e40e385f84ce83832dc9", 0x10) setsockopt(r11, 0xffffffff, 0xa, &(0x7f0000001100)="1cbfc54d73c1e8982f8f6db9967c9f635dc202ade0471b12fd0f03d358", 0x1d) 1.261288757s ago: executing program 33 (id=12014): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x61f0, &(0x7f0000000140)) 208.415177ms ago: executing program 34 (id=12023): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={r3, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r3, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e1d, 0xd, @empty, 0x10001}]}, &(0x7f0000000080)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x10, 0x80002, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) (async) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="500000002100200029bd7000fbdbdf25ac1414bb000000f7ffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x4, 0x6, 0x80000001}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x191080, 0x0) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r13, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x13, 0x8b, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000040)={'bond_slave_1\x00'}) (rerun: 32) 115.0635ms ago: executing program 35 (id=12024): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000100)={r1, &(0x7f0000000000)='-\x84:])\x00', 0x4000, &(0x7f0000000040)={@align=0x1, {0x9, 0x6, 0x8e, 0xffff}}, 0xfffffff2, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x408, 0x220, 0x110, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev={0xac, 0x14, 0x14, 0x3d}, @local, 0x8}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3d}, @remote, 0xffffffff, 0xff000000, 0xa, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x3, 0x4, 0x6, 0x1, 0x9, 0x81, 'vlan0\x00', 'veth1\x00', {0xff}, {0xff}, 0x0, 0x146}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback, 0x8, 0x1}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 0x7, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0xf001, 0x200, 0x400, 0x4, 0x0, 'wlan0\x00', 'wg0\x00', {0xff}, {0xff}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0x2f, {0x240000}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeab}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x90}}, 0x8050) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x3ff, 0x4, 0x0, 0x5, 0x170, 0x2, 0x10001, {0x0, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0xffff}}, 0x70, 0x1, 0x3ff, 0x1, 0x3}}, &(0x7f0000000840)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000880)={r5, 0x3}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt(r1, 0x3, 0x1, &(0x7f00000008c0)="fb035ee2ffb5d5d52cddebbe9816283bed4d47a8df8e87c568ae43c6bfb7ad778ea00191f81c40a4985f30b21a29a98dc20ffdb6d83bc8cf3fce2a0aca2742c74ebd6ee73689a23e2be62cd6d46e1859df7788a9d01c468aeffef9f7fd5674f91ae455c2598f0e16b5fa410f28049e47ea936b0d547d5838b4ae2531a2fb585b1bffe2c90624", 0x86) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xac, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:tmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0xac}}, 0x40810) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r4) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r7, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x20004800) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000c40)={0x18, 0x0, {0x0, @broadcast, 'wg2\x00'}}, 0x1e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xec}]}, 0x64}, 0x1, 0x0, 0x0, 0x440088c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000e00)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)=@newneigh={0x64, 0x1c, 0x100, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x88, 0x2}, [@NDA_IFINDEX={0x8, 0x8, r10}, @NDA_LINK_NETNSID={0x8, 0xa, 0x10}, @NDA_PROTOCOL={0x5, 0xc, 0x4}, @NDA_LLADDR={0xa, 0x2, @random="65cbdeccbc10"}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000001040)) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) close(r6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000001080)={0x1, 'wg1\x00', {}, 0x3}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000010c0)="4271eec6d827e40e385f84ce83832dc9", 0x10) setsockopt(r11, 0xffffffff, 0xa, &(0x7f0000001100)="1cbfc54d73c1e8982f8f6db9967c9f635dc202ade0471b12fd0f03d358", 0x1d) 0s ago: executing program 36 (id=12022): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0xa4, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x90, 0x1, [@m_tunnel_key={0x8c, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xf, 0x6, "dd7d00b0fb47b17716e35f"}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x1, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000280)={0x4, 0xfff, 0x11, 0x3, 0xeecc}) kernel console output (not intermixed with test programs): ribute type 1 has an invalid length. [ 1309.234734][T12119] netlink: 124 bytes leftover after parsing attributes in process `syz.5.10269'. [ 1309.289579][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1310.020542][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.906484][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1311.047307][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.066799][T12133] netlink: 'syz.0.10272': attribute type 1 has an invalid length. [ 1311.142173][T12143] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1311.154003][T12143] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:0 [ 1311.231782][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10274'. [ 1311.278714][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10272'. [ 1311.339926][T12139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1311.351168][T12139] bond3: (slave bond4): making interface the new active one [ 1311.364234][T12139] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1311.428021][T12145] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1311.465116][T12169] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10277'. [ 1311.502158][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10280'. [ 1311.546254][T12133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1311.565229][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10272'. [ 1311.572663][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1311.728315][T12182] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1311.756876][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1311.879404][T12189] netlink: 'syz.0.10284': attribute type 16 has an invalid length. [ 1311.891604][T12189] netlink: 'syz.0.10284': attribute type 17 has an invalid length. [ 1311.969748][T12189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.985560][T12189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.126721][T12204] netlink: 'syz.3.10291': attribute type 11 has an invalid length. [ 1312.162764][T12206] lo speed is unknown, defaulting to 1000 [ 1312.185643][T12206] ip6_vti0 speed is unknown, defaulting to 1000 [ 1312.410865][T12212] netlink: 'syz.4.10294': attribute type 2 has an invalid length. [ 1313.019547][T12251] netlink: 'syz.0.10305': attribute type 11 has an invalid length. [ 1313.039061][T12251] netlink: 'syz.0.10305': attribute type 4 has an invalid length. [ 1313.071177][T12251] netlink: 'syz.0.10305': attribute type 5 has an invalid length. [ 1313.105600][T12251] netlink: 'syz.0.10305': attribute type 6 has an invalid length. [ 1313.144817][T12251] __nla_validate_parse: 3 callbacks suppressed [ 1313.144840][T12251] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.10305'. [ 1313.225958][T12264] pimreg: entered allmulticast mode [ 1313.348160][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10308'. [ 1313.938336][T27475] net_ratelimit: 24 callbacks suppressed [ 1313.938358][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1314.093757][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10319'. [ 1314.098210][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1314.177085][ T1420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.201666][ T1431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.226361][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1314.347350][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1314.526358][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1314.658430][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1314.674688][T12333] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1314.709506][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10331'. [ 1314.749347][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10330'. [ 1314.780014][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1314.863397][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.899783][T12340] tipc: Enabling of bearer rejected, media not registered [ 1315.107280][T12358] xt_HMARK: spi-set and port-set can't be combined [ 1315.171857][T12361] netlink: 512 bytes leftover after parsing attributes in process `syz.1.10340'. [ 1315.331594][T12373] netlink: 492 bytes leftover after parsing attributes in process `syz.0.10342'. [ 1315.401260][T12380] netlink: 'syz.1.10345': attribute type 1 has an invalid length. [ 1315.684930][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1315.712369][T12396] xt_hashlimit: invalid interval [ 1315.720832][T12397] xt_hashlimit: invalid interval [ 1315.740902][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1315.812488][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1315.962882][T12410] netlink: 'syz.1.10356': attribute type 2 has an invalid length. [ 1315.983506][T12410] xt_hashlimit: size too large, truncated to 1048576 [ 1316.018504][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10357'. [ 1316.128316][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10359'. [ 1316.226815][T12419] bridge_slave_1: left allmulticast mode [ 1316.232760][T12419] bridge_slave_1: left promiscuous mode [ 1316.256585][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.341568][T12419] bridge_slave_0: left allmulticast mode [ 1316.349224][T12419] bridge_slave_0: left promiscuous mode [ 1316.358801][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.664578][T12442] netlink: 'syz.1.10364': attribute type 1 has an invalid length. [ 1316.708157][T12442] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10364'. [ 1316.739893][T12440] netlink: 'syz.1.10364': attribute type 5 has an invalid length. [ 1316.928802][T12463] netlink: 'syz.1.10370': attribute type 29 has an invalid length. [ 1317.414419][T12486] veth0_macvtap: left promiscuous mode [ 1317.717297][T12505] 8021q: VLANs not supported on sit0 [ 1317.911422][T12508] syzkaller0: entered promiscuous mode [ 1317.925179][T12508] syzkaller0: entered allmulticast mode [ 1317.989526][T12508] geneve2: entered promiscuous mode [ 1318.333983][T12532] __nla_validate_parse: 5 callbacks suppressed [ 1318.334005][T12532] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10390'. [ 1318.611681][T12545] syzkaller0: entered promiscuous mode [ 1318.626776][T12545] syzkaller0: entered allmulticast mode [ 1318.701487][T12552] lo: Caught tx_queue_len zero misconfig [ 1318.880344][T12563] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1318.933502][T12565] tipc: Failed to obtain node identity [ 1318.941599][T12565] tipc: Enabling of bearer rejected, failed to enable media [ 1318.973745][T12567] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10401'. [ 1318.985157][T12570] tipc: Failed to obtain node identity [ 1318.992419][T12570] tipc: Enabling of bearer rejected, failed to enable media [ 1319.006912][ T4843] net_ratelimit: 234 callbacks suppressed [ 1319.006933][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1319.146959][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1319.198032][T12581] netlink: 'syz.4.10404': attribute type 1 has an invalid length. [ 1319.279383][T12581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1319.297183][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1319.367020][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.392397][T12586] netlink: 'syz.4.10404': attribute type 1 has an invalid length. [ 1319.414837][T12585] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1319.425748][T12586] netlink: 'syz.4.10404': attribute type 2 has an invalid length. [ 1319.458200][T12581] bond3: (slave veth0_to_bond): making interface the new active one [ 1319.469402][T12581] veth0_to_bond: entered promiscuous mode [ 1319.478525][T12581] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1319.528333][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1319.543309][T11557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.577692][T12588] mac80211_hwsim hwsim110 syzkaller0: entered promiscuous mode [ 1319.592368][T12588] mac80211_hwsim hwsim110 syzkaller0: entered allmulticast mode [ 1319.607238][T11557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.686233][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1319.794698][T12599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10410'. [ 1319.806748][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1319.926820][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1320.035646][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10415'. [ 1320.189605][T12627] syzkaller0: entered promiscuous mode [ 1320.213303][T12627] syzkaller0: entered allmulticast mode [ 1320.315388][ T4843] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.358142][ T4843] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 45637 - 0 [ 1320.479725][T12646] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10423'. [ 1320.550695][T12649] tipc: Started in network mode [ 1320.557542][T12649] tipc: Node identity 080211000001, cluster identity 4711 [ 1320.565326][T12649] tipc: Enabled bearer , priority 0 [ 1320.637677][T12649] netlink: 836 bytes leftover after parsing attributes in process `syz.3.10424'. [ 1320.705303][T12657] syzkaller0: entered promiscuous mode [ 1320.716130][T12657] syzkaller0: entered allmulticast mode [ 1320.992299][T12668] : renamed from bond0 (while UP) [ 1321.205484][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10429'. [ 1321.247358][T12679] netlink: 'syz.5.10429': attribute type 4 has an invalid length. [ 1321.288854][T12651] lec:lec_atm_send: lec0: change_mtu to 64 failed [ 1321.342177][T12684] netlink: 116 bytes leftover after parsing attributes in process `syz.1.10432'. [ 1321.368759][T12684] netlink: 116 bytes leftover after parsing attributes in process `syz.1.10432'. [ 1321.630332][T12650] lec:lec_atm_close: lec0: Shut down! [ 1321.687850][ T1414] tipc: Node number set to 134418688 [ 1321.960229][T12709] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10441'. [ 1322.855931][T12756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.868485][T12756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45637 - 0 [ 1322.965332][T12756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.977500][T12756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45637 - 0 [ 1323.138870][T12756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.213684][T12756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45637 - 0 [ 1323.450105][T12792] netlink: 'syz.4.10463': attribute type 1 has an invalid length. [ 1323.522927][T12792] bond4: (slave gretap1): making interface the new active one [ 1323.532639][T12792] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1323.545081][T12796] __nla_validate_parse: 5 callbacks suppressed [ 1323.545100][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10462'. [ 1323.654142][T12799] netlink: 'syz.5.10464': attribute type 6 has an invalid length. [ 1323.695137][T12799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10464'. [ 1323.794678][T27475] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 45637 - 0 [ 1323.803502][T27475] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1323.828683][T27475] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 45637 - 0 [ 1323.838112][T27475] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1323.866930][T27475] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 45637 - 0 [ 1323.875422][T27475] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1323.895677][T27475] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 45637 - 0 [ 1323.936350][T27475] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1324.083701][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10470'. [ 1324.122436][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10471'. [ 1324.177240][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10470'. [ 1324.236399][T27484] net_ratelimit: 46 callbacks suppressed [ 1324.236421][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1324.397514][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1324.528342][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1324.567180][ T1420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.655185][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1324.672571][T12854] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 1324.761594][T12861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10482'. [ 1324.806622][T11557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.815227][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1324.934840][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10486'. [ 1324.959058][T12875] tunl0: Caught tx_queue_len zero misconfig [ 1324.979722][T12873] xfrm0: entered allmulticast mode [ 1325.130538][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1325.181231][T12888] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10490'. [ 1325.277291][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1325.932644][ T1810] block nbd4: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 90 seconds [ 1325.944384][ T1810] block nbd4: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 90 seconds [ 1325.955862][ T1810] block nbd4: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 90 seconds [ 1325.975606][T12934] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10499'. [ 1325.983977][ T1810] block nbd4: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 90 seconds [ 1326.193148][T12950] dvmrp0: entered allmulticast mode [ 1326.671308][T12977] lo: entered promiscuous mode [ 1326.680672][T12977] netlink: 'syz.5.10513': attribute type 2 has an invalid length. [ 1326.783543][T12981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10515'. [ 1326.935336][T12989] netlink: 'syz.4.10518': attribute type 1 has an invalid length. [ 1326.967162][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 1326.975280][ C1] lec:lec_tx_timeout: lec0 [ 1327.058069][T12960] netlink: 'syz.0.10507': attribute type 1 has an invalid length. [ 1327.216249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1327.664484][T13036] netlink: 'syz.5.10526': attribute type 7 has an invalid length. [ 1327.755025][T13031] bond1 (unregistering): Released all slaves [ 1327.870428][T13049] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20001 [ 1327.890629][T13023] tipc: Failed to obtain node identity [ 1327.906872][T13023] tipc: Enabling of bearer rejected, failed to enable media [ 1328.318969][T13053] gretap2: entered promiscuous mode [ 1328.324372][T13053] gretap2: entered allmulticast mode [ 1328.362313][T13021] delete_channel: no stack [ 1328.440570][T13078] netlink: 'syz.3.10537': attribute type 1 has an invalid length. [ 1328.554013][T13083] __nla_validate_parse: 8 callbacks suppressed [ 1328.554037][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10538'. [ 1328.613954][T13087] syzkaller0: entered promiscuous mode [ 1328.622931][T13087] syzkaller0: entered allmulticast mode [ 1328.718982][T13095] netlink: 'syz.4.10542': attribute type 30 has an invalid length. [ 1328.736337][T13093] 8021q: VLANs not supported on ip_vti0 [ 1328.743539][T13093] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10544'. [ 1328.787794][T13095] bond5: option arp_missed_max: invalid value (0) [ 1328.794409][T13095] bond5: option arp_missed_max: allowed values 1 - 255 [ 1328.824447][T13095] bond5 (unregistering): Released all slaves [ 1328.931071][T13093]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.957880][T13093]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.969811][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10547'. [ 1328.981525][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10547'. [ 1328.997264][T13093]  (unregistering): Released all slaves [ 1329.014435][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10547'. [ 1329.030918][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10547'. [ 1329.034282][T13105] lo: Caught tx_queue_len zero misconfig [ 1329.060362][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10547'. [ 1329.096574][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10547'. [ 1329.220524][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10550'. [ 1329.288068][ T4843] net_ratelimit: 39 callbacks suppressed [ 1329.288091][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1329.417324][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1329.452015][T13131] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10554'. [ 1329.537259][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1329.647097][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1329.691791][T13141] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1329.756708][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1329.770248][T27479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.779468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.788408][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.867343][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1329.976435][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1330.234294][T13152] pim6reg: entered allmulticast mode [ 1330.305284][T13154] x_tables: unsorted entry at hook 1 [ 1330.318676][T13152] bridge0: left allmulticast mode [ 1330.323964][T13152] pim6reg: left allmulticast mode [ 1330.508449][ T4843] veth0_to_bond: left promiscuous mode [ 1330.919246][T13184] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1331.034931][T13190] SET target dimension over the limit! [ 1331.294282][T13203] IPv6: sit2: Disabled Multicast RS [ 1331.310113][T13203] sit2: entered allmulticast mode [ 1331.731455][T13233] netlink: 'syz.5.10587': attribute type 83 has an invalid length. [ 1331.902672][T13238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.933459][T13239] netlink: 'syz.4.10590': attribute type 3 has an invalid length. [ 1332.012973][T13243] team0: Port device team_slave_0 removed [ 1332.519994][T13265] veth1: Caught tx_queue_len zero misconfig [ 1332.538505][T13270] syzkaller0: entered promiscuous mode [ 1332.563237][T13270] syzkaller0: entered allmulticast mode [ 1332.654028][T13267] netlink: 'syz.5.10599': attribute type 2 has an invalid length. [ 1332.665583][T13267] netlink: 'syz.5.10599': attribute type 2 has an invalid length. [ 1332.960925][T13287] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 1333.622948][T13285] lec:lec_atm_close: lec0: Shut down! [ 1333.877904][T13349] __nla_validate_parse: 16 callbacks suppressed [ 1333.877926][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10622'. [ 1333.949645][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10622'. [ 1333.991907][T13353] syzkaller0: entered promiscuous mode [ 1334.017658][T13353] syzkaller0: entered allmulticast mode [ 1334.263304][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10625'. [ 1334.313529][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10625'. [ 1334.374698][T13358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10624'. [ 1334.413903][T13358] bond0: entered promiscuous mode [ 1334.413911][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10626'. [ 1334.451762][T13358] gretap0: entered promiscuous mode [ 1334.459404][T13358] debugfs: 'hsr1' already exists in 'hsr' [ 1334.465316][T13358] Cannot create hsr debugfs directory [ 1334.487882][T13358] hsr1: entered promiscuous mode [ 1334.527874][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.540512][T27476] net_ratelimit: 39 callbacks suppressed [ 1334.540532][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1334.571349][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.600204][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.660880][T13368] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1334.679413][T13375] tipc: Enabling not permitted [ 1334.692856][T13375] tipc: Enabling of bearer rejected, failed to enable media [ 1334.731206][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.740660][T13377] netlink: 'syz.0.10628': attribute type 2 has an invalid length. [ 1334.760162][T13377] netlink: 'syz.0.10628': attribute type 5 has an invalid length. [ 1334.777272][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1334.785623][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.826551][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.857884][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.865809][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.899208][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.909766][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1334.923528][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.933552][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.953479][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1334.967945][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.976756][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10631'. [ 1334.994211][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1335.015693][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1335.027208][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10632'. [ 1335.036478][T13383] netlink: 'syz.3.10632': attribute type 7 has an invalid length. [ 1335.038906][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1335.044342][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10632'. [ 1335.078347][T13368] wlan0 speed is unknown, defaulting to 1000 [ 1335.094183][T13383] erspan0: entered promiscuous mode [ 1335.104839][T13383] erspan0: left promiscuous mode [ 1335.177040][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1335.296669][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1335.407021][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1335.478019][T13401] bridge2: entered promiscuous mode [ 1335.483371][T13401] bridge2: entered allmulticast mode [ 1335.492703][T13401] team0: Port device bridge2 added [ 1335.517871][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1335.525887][T13401] bridge0: port 1(team0) entered blocking state [ 1335.537104][T27476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.554959][T13401] bridge0: port 1(team0) entered disabled state [ 1335.570333][T13401] team0: entered allmulticast mode [ 1335.580082][T13401] team_slave_0: entered allmulticast mode [ 1335.585865][T13401] team_slave_1: entered allmulticast mode [ 1335.618428][T13401] dummy0: entered allmulticast mode [ 1335.628797][T13401] team0: entered promiscuous mode [ 1335.633897][T13401] team_slave_0: entered promiscuous mode [ 1335.647825][T13401] team_slave_1: entered promiscuous mode [ 1335.653768][T13401] dummy0: entered promiscuous mode [ 1336.234703][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10650'. [ 1336.861018][T13471] macvlan0: entered promiscuous mode [ 1336.975411][T13474] pim6reg: entered allmulticast mode [ 1338.688755][T13538] netlink: 'syz.5.10679': attribute type 1 has an invalid length. [ 1338.742503][T13537] netlink: 'syz.5.10679': attribute type 1 has an invalid length. [ 1338.944124][T13541] netlink: 'syz.0.10680': attribute type 1 has an invalid length. [ 1338.976130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 1338.984330][ C1] lec:lec_tx_timeout: lec0 [ 1338.995361][T13545] __nla_validate_parse: 6 callbacks suppressed [ 1338.995380][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10680'. [ 1339.089094][T13541] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1339.109732][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10681'. [ 1339.146528][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10681'. [ 1339.166674][T13545] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1339.234032][T13545] bond6: entered allmulticast mode [ 1339.309010][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10682'. [ 1339.343581][T13546] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1339.375548][T13541] lo speed is unknown, defaulting to 1000 [ 1339.384190][T13541] ip6_vti0 speed is unknown, defaulting to 1000 [ 1339.564174][T13565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10685'. [ 1339.594803][T13565] xt_hashlimit: invalid interval [ 1339.610809][T27476] net_ratelimit: 32 callbacks suppressed [ 1339.610830][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1339.726400][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1339.842166][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1339.880456][T13574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.943008][T13582] x_tables: duplicate underflow at hook 4 [ 1339.977610][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1340.011949][T13541] wlan0 speed is unknown, defaulting to 1000 [ 1340.023372][T13585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.227622][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1340.336919][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.355436][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1340.478851][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1340.617177][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1340.652574][T13598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10692'. [ 1340.710433][T13598] netlink: 252 bytes leftover after parsing attributes in process `syz.4.10692'. [ 1340.826225][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1340.842026][T27475] tipc: Subscription rejected, illegal request [ 1341.078170][T13612] pimreg: entered allmulticast mode [ 1341.267653][T13621] netlink: 284 bytes leftover after parsing attributes in process `syz.4.10701'. [ 1341.349002][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1341.396564][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1341.738919][T13647] dvmrp6: entered allmulticast mode [ 1342.020487][T13665] bond1: (slave vlan0): Opening slave failed [ 1342.168684][T13673] bond0 (unregistering): Released all slaves [ 1342.223684][T13681] veth1_macvtap: left promiscuous mode [ 1342.229993][T13681] macsec0: entered promiscuous mode [ 1342.235245][T13681] macsec0: entered allmulticast mode [ 1342.788448][T13702] syzkaller1: entered promiscuous mode [ 1342.794468][T13702] syzkaller1: entered allmulticast mode [ 1342.960957][T13720] hsr_slave_0: left promiscuous mode [ 1342.973111][T13720] hsr_slave_1: left promiscuous mode [ 1343.682931][T13759] dvmrp1: entered allmulticast mode [ 1344.686699][T27479] net_ratelimit: 41 callbacks suppressed [ 1344.686722][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1344.806877][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1344.916738][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1345.026491][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1345.136207][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1345.256845][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1345.366958][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1345.476629][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1345.586995][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1345.606534][ T1420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.778537][T13716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1346.000167][T13778] __nla_validate_parse: 7 callbacks suppressed [ 1346.000188][T13778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10743'. [ 1346.017398][T13780] netlink: 'syz.1.10744': attribute type 1 has an invalid length. [ 1346.061346][T13780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.130881][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10745'. [ 1346.173221][T13787] netlink: 'syz.5.10746': attribute type 1 has an invalid length. [ 1346.193127][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10744'. [ 1346.209789][T13788] netlink: 'syz.1.10744': attribute type 1 has an invalid length. [ 1346.248130][T13780] bond0: (slave veth7): Enslaving as an active interface with a down link [ 1346.401195][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10749'. [ 1346.451824][T13795] netlink: 308 bytes leftover after parsing attributes in process `syz.1.10748'. [ 1346.467868][T13799] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10749'. [ 1346.480431][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10749'. [ 1346.495836][T13799] s5ÿÿø: renamed from vlan1 [ 1346.613642][T13801] lo speed is unknown, defaulting to 1000 [ 1346.639637][T13794] syzkaller1: entered promiscuous mode [ 1346.663624][T13794] syzkaller1: entered allmulticast mode [ 1346.701192][T13801] ip6_vti0 speed is unknown, defaulting to 1000 [ 1346.731877][T13810] lo speed is unknown, defaulting to 1000 [ 1347.005443][T13819] bond5: Removing last ns target with arp_interval on [ 1347.275042][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1347.507661][T13843] Only authenc() type AEADs are supported by ESSIV [ 1347.674933][T13850] vlan1: entered allmulticast mode [ 1347.686716][T13850] veth0_vlan: entered allmulticast mode [ 1347.745666][T13810] ip6_vti0 speed is unknown, defaulting to 1000 [ 1347.745697][T13801] wlan0 speed is unknown, defaulting to 1000 [ 1348.009771][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10763'. [ 1348.125059][T13872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10767'. [ 1348.292322][T13874] bond2 (unregistering): Released all slaves [ 1348.623749][T13896] netlink: 'syz.0.10770': attribute type 10 has an invalid length. [ 1348.665185][T13810] wlan0 speed is unknown, defaulting to 1000 [ 1348.755826][T13896] bridge_slave_1: left allmulticast mode [ 1348.765842][T13896] bridge_slave_1: left promiscuous mode [ 1348.772213][T13896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.835163][T13896] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1349.487073][T13919] netlink: 'syz.5.10775': attribute type 29 has an invalid length. [ 1349.507430][T13924] netlink: 'syz.5.10775': attribute type 29 has an invalid length. [ 1349.603752][T13935] netlink: 'syz.5.10775': attribute type 29 has an invalid length. [ 1349.663934][T13945] syzkaller0: entered promiscuous mode [ 1349.671759][T13945] syzkaller0: entered allmulticast mode [ 1349.680737][T13935] netlink: 'syz.5.10775': attribute type 29 has an invalid length. [ 1349.779124][ T1414] net_ratelimit: 20 callbacks suppressed [ 1349.779145][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.903539][T13954] IPv6: NLM_F_CREATE should be specified when creating new route [ 1350.811826][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.524353][T13935] netlink: 'syz.5.10775': attribute type 29 has an invalid length. [ 1351.663244][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1351.727355][T13969] __nla_validate_parse: 1 callbacks suppressed [ 1351.727376][T13969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10782'. [ 1351.849873][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.863509][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1351.953596][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10785'. [ 1351.999474][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1352.089254][T27475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.097676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.136992][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1352.197101][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10788'. [ 1352.241834][T13995] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1352.278854][T13995] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1352.297030][T13995] gretap1: entered promiscuous mode [ 1352.317175][T13995] gretap1: entered allmulticast mode [ 1352.363914][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10791'. [ 1352.391754][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10791'. [ 1352.401842][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1352.420757][T14009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10792'. [ 1352.438509][T14003] netlink: 'syz.3.10791': attribute type 1 has an invalid length. [ 1352.455877][T14003] netlink: 'syz.3.10791': attribute type 3 has an invalid length. [ 1352.473388][T14003] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10791'. [ 1352.485178][T14006] lo speed is unknown, defaulting to 1000 [ 1352.510507][T14006] ip6_vti0 speed is unknown, defaulting to 1000 [ 1352.519028][T14003] NCSI netlink: No device for ifindex 813332851 [ 1352.763038][T14017] syzkaller1: entered promiscuous mode [ 1352.793505][T14017] syzkaller1: entered allmulticast mode [ 1352.848794][T14023] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10794'. [ 1353.032667][T14006] wlan0 speed is unknown, defaulting to 1000 [ 1353.038137][T14032] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10797'. [ 1353.048365][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10798'. [ 1353.671538][ T51] Bluetooth: hci3: link tx timeout [ 1353.678233][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.692160][ T51] Bluetooth: hci3: link tx timeout [ 1353.697764][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1354.550110][T14100] netlink: 'syz.0.10817': attribute type 9 has an invalid length. [ 1354.563732][T14100] netlink: 'syz.0.10817': attribute type 11 has an invalid length. [ 1354.602307][T14100] netlink: 'syz.0.10817': attribute type 12 has an invalid length. [ 1354.816531][T27475] net_ratelimit: 16 callbacks suppressed [ 1354.816553][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1354.877438][T14116] lo: entered allmulticast mode [ 1354.891974][T14116] lo: left allmulticast mode [ 1354.970080][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.978226][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1355.086528][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1355.206550][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1355.326813][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1355.449709][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1355.656228][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1355.767382][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1355.931770][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1356.010773][T11556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.029466][ T1810] block nbd4: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 120 seconds [ 1356.045778][ T1810] block nbd4: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 120 seconds [ 1356.062644][ T1810] block nbd4: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 120 seconds [ 1356.074249][ T1810] block nbd4: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 120 seconds [ 1356.425098][T14198] netlink: 'syz.5.10839': attribute type 83 has an invalid length. [ 1356.436507][T14198] netlink: 'syz.5.10839': attribute type 1 has an invalid length. [ 1356.532437][T14200] syzkaller0: entered promiscuous mode [ 1356.550720][T14200] syzkaller0: entered allmulticast mode [ 1356.771252][T14221] __nla_validate_parse: 15 callbacks suppressed [ 1356.771276][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1357.392121][T14252] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1357.411260][T14252] syzkaller1: linktype set to 823 [ 1357.422137][T14252] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 1357.593990][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10856'. [ 1357.625095][T14268] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10856'. [ 1357.672109][T14271] netlink: 'syz.0.10857': attribute type 21 has an invalid length. [ 1357.680835][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10857'. [ 1357.691181][T14271] netlink: 'syz.0.10857': attribute type 21 has an invalid length. [ 1357.699737][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10857'. [ 1357.973092][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10861'. [ 1358.078290][T14287] bond0: entered promiscuous mode [ 1358.094124][T14287] bond_slave_0: entered promiscuous mode [ 1358.107510][T14287] bond_slave_1: entered promiscuous mode [ 1358.118013][T14287] bridge_slave_1: entered promiscuous mode [ 1358.137578][T14287] mac80211_hwsim hwsim107 wlan1: entered promiscuous mode [ 1358.183334][T14287] debugfs: 'hsr0' already exists in 'hsr' [ 1358.217236][T14287] Cannot create hsr debugfs directory [ 1358.229141][T14287] hsr0: entered promiscuous mode [ 1358.259114][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10864'. [ 1358.303015][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10864'. [ 1358.517931][T14308] syzkaller0: entered promiscuous mode [ 1358.523514][T14308] syzkaller0: entered allmulticast mode [ 1358.588427][T14314] netlink: 'syz.3.10866': attribute type 1 has an invalid length. [ 1358.651714][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10866'. [ 1358.693930][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10866'. [ 1358.718544][T14302] syzkaller1: entered promiscuous mode [ 1358.724170][T14302] syzkaller1: entered allmulticast mode [ 1359.122512][T14308] PF_CAN: dropped non conform CAN FD skbuff: dev type 780, len 65487 [ 1359.311855][T10051] lec:lec_start_xmit: lec0:No lecd attached [ 1359.394427][T14335] syzkaller0: entered promiscuous mode [ 1359.416391][T14335] syzkaller0: entered allmulticast mode [ 1359.434546][T14344] ip6tnl0: Caught tx_queue_len zero misconfig [ 1359.453600][T14346] SET target dimension over the limit! [ 1359.722600][T14365] netlink: 'syz.4.10883': attribute type 33 has an invalid length. [ 1360.179689][ T1414] net_ratelimit: 22 callbacks suppressed [ 1360.179712][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.206939][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.397252][T14365] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1361.401270][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1361.564404][T14379] netlink: 'syz.3.10885': attribute type 15 has an invalid length. [ 1361.584858][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1361.592671][T14379] netlink: 'syz.3.10885': attribute type 15 has an invalid length. [ 1361.653002][T27475] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1361.664733][T27475] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1361.675435][T14379] openvswitch: netlink: Invalid VLAN frame [ 1361.707868][T14382] vxcan6: entered allmulticast mode [ 1361.738978][T14389] vxcan6: entered allmulticast mode [ 1361.753856][T27475] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1361.769146][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1361.786885][T27475] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1361.806896][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1361.898929][T14392] __nla_validate_parse: 8 callbacks suppressed [ 1361.898950][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10886'. [ 1361.928991][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1361.946567][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10886'. [ 1361.971403][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10893'. [ 1362.107676][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1362.194865][T14412] nbd: nbd1 already in use [ 1362.227353][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1362.247964][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.367754][T14420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10899'. [ 1362.404793][T14423] syzkaller0: entered promiscuous mode [ 1362.413273][T14423] syzkaller0: entered allmulticast mode [ 1362.688692][T14435] netlink: 'syz.4.10906': attribute type 18 has an invalid length. [ 1362.704320][T14435] IPv6: NLM_F_CREATE should be specified when creating new route [ 1362.922998][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10910'. [ 1363.382844][T14480] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10921'. [ 1363.535261][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10921'. [ 1363.553816][T14487] tipc: Enabling of bearer rejected, failed to enable media [ 1363.566235][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10922'. [ 1363.794774][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1363.915740][T14512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1364.170733][T14528] netlink: 'syz.0.10932': attribute type 10 has an invalid length. [ 1364.661334][T14553] syzkaller1: entered promiscuous mode [ 1364.702212][T14553] syzkaller1: entered allmulticast mode [ 1364.874355][T14562] xt_hashlimit: overflow, rate too high: 0 [ 1364.925152][T14565] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1364.966217][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 1364.974355][ C1] lec:lec_tx_timeout: lec0 [ 1364.979400][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1365.247538][ T4843] net_ratelimit: 38 callbacks suppressed [ 1365.247561][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1365.367777][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1365.376488][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.489451][ T4843] bond3: (slave bridge1): failed to get link speed/duplex [ 1365.568926][T14611] netlink: 'syz.5.10955': attribute type 1 has an invalid length. [ 1365.595678][T14611] netlink: 'syz.5.10955': attribute type 4 has an invalid length. [ 1365.617877][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1365.750019][T27482] bond3: (slave bridge1): failed to get link speed/duplex [ 1365.761164][T14621] bond_slave_1: entered allmulticast mode [ 1365.787977][T14620] tipc: Enabling of bearer rejected, failed to enable media [ 1365.867042][T27482] bond3: (slave bridge1): failed to get link speed/duplex [ 1365.977007][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1366.116301][T27482] bond3: (slave bridge1): failed to get link speed/duplex [ 1366.214920][T14649] pim6reg: left allmulticast mode [ 1366.251698][T27475] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1366.260544][T27484] bond3: (slave bridge1): failed to get link speed/duplex [ 1366.269631][T27475] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1366.281961][T27475] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1366.292524][T27475] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1366.390993][T14659] netlink: 'syz.1.10970': attribute type 11 has an invalid length. [ 1366.414950][T14659] xt_hashlimit: size too large, truncated to 1048576 [ 1366.428882][T14656] lo speed is unknown, defaulting to 1000 [ 1366.457738][T14656] ip6_vti0 speed is unknown, defaulting to 1000 [ 1366.653033][T14669] chnl_net:caif_netlink_parms(): no params data found [ 1366.857348][T14656] wlan0 speed is unknown, defaulting to 1000 [ 1366.933813][T14673] netlink: 'syz.4.10974': attribute type 12 has an invalid length. [ 1366.947777][T14673] veth0_to_bond: entered allmulticast mode [ 1366.974957][T27479] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1367.013745][T14677] ip6tnl2: entered allmulticast mode [ 1367.279643][T27475] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 1367.307527][T27475] bond3: now running without any active interface! [ 1367.489373][T14702] netlink: 'syz.5.10984': attribute type 21 has an invalid length. [ 1367.567215][T14702] __nla_validate_parse: 19 callbacks suppressed [ 1367.567235][T14702] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10984'. [ 1367.597708][T14702] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10984'. [ 1368.133957][ T1420] IPVS: starting estimator thread 0... [ 1368.246570][T14745] IPVS: using max 25 ests per chain, 60000 per kthread [ 1368.292929][T14750] IPv6: sit1: Disabled Multicast RS [ 1368.481422][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11002'. [ 1368.512564][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11003'. [ 1368.662135][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11005'. [ 1368.829806][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11009'. [ 1369.130930][T14800] netlink: 'syz.3.11011': attribute type 9 has an invalid length. [ 1369.212086][T14778] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11007'. [ 1369.481522][T14819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11017'. [ 1369.495734][T14819] lo: Caught tx_queue_len zero misconfig [ 1369.708474][T14834] netlink: 'syz.3.11021': attribute type 1 has an invalid length. [ 1369.777694][T14834] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1370.017479][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 1370.025544][ C1] lec:lec_tx_timeout: lec0 [ 1370.267071][T27475] net_ratelimit: 37 callbacks suppressed [ 1370.267095][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1370.397368][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1370.507119][T27475] bond3: (slave bridge1): failed to get link speed/duplex [ 1370.566745][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.616875][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1370.727390][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1370.837561][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1370.946337][T27476] bond3: (slave bridge1): failed to get link speed/duplex [ 1371.056540][T27482] bond3: (slave bridge1): failed to get link speed/duplex [ 1371.167187][T27482] bond3: (slave bridge1): failed to get link speed/duplex [ 1371.727714][T14782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1371.756719][T14849] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11026'. [ 1371.942590][T14885] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11028'. [ 1372.289185][T14925] hid-generic 0005:04F3:0000.0003: item fetching failed at offset 0/1 [ 1372.345481][T14925] hid-generic 0005:04F3:0000.0003: probe with driver hid-generic failed with error -22 [ 1372.824476][T14969] netlink: 'syz.4.11045': attribute type 21 has an invalid length. [ 1373.037611][T14969] __nla_validate_parse: 2 callbacks suppressed [ 1373.037633][T14969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11045'. [ 1373.170457][T14977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11048'. [ 1373.352261][T14989] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1373.371869][T14989] bond6: (slave lo): Enslaving as an active interface with an up link [ 1373.470742][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11053'. [ 1373.613451][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11053'. [ 1373.653198][T15005] bond7: (slave bond_slave_1): Device is not our slave [ 1373.660528][T15005] bond7: option active_slave: invalid value (bond_slave_1) [ 1373.671342][T15005] bond7 (unregistering): Released all slaves [ 1373.877140][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1374.023593][T15026] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.11064'. [ 1374.037060][T15026] netlink: 'syz.0.11064': attribute type 10 has an invalid length. [ 1374.149046][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11066'. [ 1374.352106][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1374.481132][T15057] netlink: 'syz.4.11073': attribute type 3 has an invalid length. [ 1374.759367][T15070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.875101][T15069] syzkaller0: entered promiscuous mode [ 1374.885860][T15069] syzkaller0: entered allmulticast mode [ 1375.027345][T15091] netlink: 'syz.4.11085': attribute type 1 has an invalid length. [ 1375.036496][T15091] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11085'. [ 1375.088327][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11086'. [ 1375.191833][T15097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1375.199206][T15097] IPv6: NLM_F_CREATE should be set when creating new route [ 1375.361563][T27478] net_ratelimit: 40 callbacks suppressed [ 1375.361584][T27478] bond3: (slave bridge1): failed to get link speed/duplex [ 1375.778936][ T1420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.811982][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.780068][T27478] bond3: (slave bridge1): failed to get link speed/duplex [ 1377.907442][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.061751][T14925] wlan0 speed is unknown, defaulting to 1000 [ 1378.080462][T14925] syz1: Port: 1 Link DOWN [ 1378.296869][T27478] bond3: (slave bridge1): failed to get link speed/duplex [ 1378.413209][T14936] bond3: (slave bridge1): failed to get link speed/duplex [ 1378.461906][T15182] __nla_validate_parse: 6 callbacks suppressed [ 1378.461927][T15182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11105'. [ 1378.501381][T15182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11105'. [ 1378.525090][T15182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.549644][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1378.676338][T27478] bond3: (slave bridge1): failed to get link speed/duplex [ 1378.779770][T15193] xt_l2tp: unknown flags: 10 [ 1378.878411][T15189] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1378.913216][T15189] bond3 (unregistering): Released all slaves [ 1379.223209][T15222] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1379.291013][T15225] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11118'. [ 1379.462456][T15236] syzkaller0: entered promiscuous mode [ 1379.489970][T15236] syzkaller0: entered allmulticast mode [ 1379.537628][T15241] tap0: tun_chr_ioctl cmd 1074025676 [ 1379.548006][T15241] tap0: owner set to 0 [ 1379.961726][T15268] netlink: 260 bytes leftover after parsing attributes in process `syz.4.11128'. [ 1380.172166][T15275] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11130'. [ 1380.187075][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11130'. [ 1380.396952][T27479] net_ratelimit: 17 callbacks suppressed [ 1380.396974][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1380.548075][T14936] bond3: (slave bridge1): failed to get link speed/duplex [ 1380.676869][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1380.758859][T15303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11135'. [ 1380.786220][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1380.919571][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1381.002602][T15312] bond5: Unable to set up delay as MII monitoring is disabled [ 1381.030214][T15312] bond5 (unregistering): Released all slaves [ 1381.059209][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.130365][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1381.138106][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1381.148798][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11140'. [ 1381.288889][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1381.417030][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11144'. [ 1381.433263][T14936] bond3: (slave bridge1): failed to get link speed/duplex [ 1381.577593][T27478] bond3: (slave bridge1): failed to get link speed/duplex [ 1381.813591][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1381.972965][T15370] netlink: 'syz.0.11152': attribute type 5 has an invalid length. [ 1382.024107][T15373] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1382.067071][T15373] bond3 (unregistering): Released all slaves [ 1382.181562][T15379] netlink: 'syz.0.11154': attribute type 29 has an invalid length. [ 1382.192308][T15377] netlink: 'syz.0.11154': attribute type 29 has an invalid length. [ 1383.109348][T15427] syzkaller0: entered promiscuous mode [ 1383.123938][T15427] syzkaller0: entered allmulticast mode [ 1383.158816][T15430] syzkaller0: entered promiscuous mode [ 1383.480252][T15449] __nla_validate_parse: 10 callbacks suppressed [ 1383.480275][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11169'. [ 1383.530777][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11169'. [ 1383.602002][T15449] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11169'. [ 1384.023815][T15488] netlink: 'syz.5.11181': attribute type 1 has an invalid length. [ 1384.035027][T15478] bond7: entered allmulticast mode [ 1384.185810][T15489] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1384.556665][T15518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11187'. [ 1384.581537][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11187'. [ 1384.841079][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11191'. [ 1384.959079][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11193'. [ 1385.074450][T15546] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11195'. [ 1385.090643][T15551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11194'. [ 1385.109930][T15551] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11194'. [ 1385.138779][T15551] netlink: 'syz.4.11194': attribute type 5 has an invalid length. [ 1385.448790][T27478] net_ratelimit: 34 callbacks suppressed [ 1385.448811][T27478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.462938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.481873][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1385.611180][T15579] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1385.650563][T15579] bond8: (slave lo): Enslaving as an active interface with an up link [ 1385.683668][T15579] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1385.736918][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1385.848556][T27478] bond3: (slave bridge1): failed to get link speed/duplex [ 1385.964464][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1386.015589][T15593] : renamed from bond0 (while UP) [ 1386.086619][ T1810] block nbd4: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 150 seconds [ 1386.098512][ T1810] block nbd4: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 150 seconds [ 1386.109877][ T1810] block nbd4: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 150 seconds [ 1386.121184][ T1810] block nbd4: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 150 seconds [ 1386.137238][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1386.250439][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1386.258075][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.667214][T15619] netlink: 'syz.0.11212': attribute type 10 has an invalid length. [ 1386.776680][T15622] sit0: Caught tx_queue_len zero misconfig [ 1387.336375][T15651] netlink: 'syz.5.11222': attribute type 4 has an invalid length. [ 1387.564097][T15667] netlink: 'syz.5.11226': attribute type 39 has an invalid length. [ 1388.519531][T15728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1388.563172][T15720] __nla_validate_parse: 6 callbacks suppressed [ 1388.563197][T15720] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11239'. [ 1388.599557][T15734] sctp: [Deprecated]: syz.5.11241 (pid 15734) Use of int in max_burst socket option. [ 1388.599557][T15734] Use struct sctp_assoc_value instead [ 1389.123706][T15765] x_tables: duplicate underflow at hook 1 [ 1389.181359][T15767] netlink: 516 bytes leftover after parsing attributes in process `syz.1.11249'. [ 1389.277824][T15764] vcan1: entered promiscuous mode [ 1389.283450][T15764] vcan1: entered allmulticast mode [ 1389.316551][T27479] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.340925][T27479] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.539776][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11254'. [ 1389.586731][T15786] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11254'. [ 1390.030935][T15813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11260'. [ 1390.284313][T15824] syzkaller0: entered allmulticast mode [ 1390.569935][T14936] net_ratelimit: 40 callbacks suppressed [ 1390.569959][T14936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.584263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.640544][T14936] bond3: (slave bridge1): failed to get link speed/duplex [ 1390.724789][T15852] netlink: 'syz.4.11265': attribute type 3 has an invalid length. [ 1390.766231][T14936] bond3: (slave bridge1): failed to get link speed/duplex [ 1390.800890][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11265'. [ 1390.906728][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1390.951378][T15864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11270'. [ 1390.990208][T15867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11271'. [ 1391.034949][T15868] siw: device registration error -23 [ 1391.047689][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1391.189502][T15759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.282352][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11275'. [ 1391.369849][T15759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.412854][T15885] syzkaller1: entered promiscuous mode [ 1391.422171][T15885] syzkaller1: entered allmulticast mode [ 1391.451270][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.533407][T15887] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.11276'. [ 1391.567664][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1391.758390][T14937] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.770123][T14937] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.815555][T14937] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.857560][T14936] bond3: (slave bridge1): failed to get link speed/duplex [ 1391.982509][T27479] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1392.026997][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1392.346270][T15909] lo speed is unknown, defaulting to 1000 [ 1392.393352][T15909] ip6_vti0 speed is unknown, defaulting to 1000 [ 1392.845033][T15940] sit0: entered promiscuous mode [ 1392.880586][T15940] netlink: 'syz.0.11287': attribute type 1 has an invalid length. [ 1392.893918][T15943] IPv6: NLM_F_CREATE should be specified when creating new route [ 1392.964992][T15942] gre1: entered promiscuous mode [ 1393.017374][T15942] gre1: entered allmulticast mode [ 1393.201516][T15957] netlink: 'syz.0.11291': attribute type 4 has an invalid length. [ 1393.345230][T15956] tunl0: entered promiscuous mode [ 1393.351213][T15956] netlink: 'syz.0.11291': attribute type 3 has an invalid length. [ 1393.365050][T15909] wlan0 speed is unknown, defaulting to 1000 [ 1393.431503][T15970] netlink: 'syz.5.11294': attribute type 1 has an invalid length. [ 1393.645549][T15979] tipc: Enabling of bearer rejected, media not registered [ 1393.670788][T15984] tipc: Enabling of bearer rejected, media not registered [ 1393.764593][T15990] netlink: 'syz.1.11299': attribute type 6 has an invalid length. [ 1394.339757][T16019] lo speed is unknown, defaulting to 1000 [ 1394.464380][T16021] __nla_validate_parse: 13 callbacks suppressed [ 1394.464403][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1394.584384][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1394.596324][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1394.605598][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1394.615589][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11308'. [ 1394.733730][T16038] bond6: entered promiscuous mode [ 1394.739453][T16038] bond6: entered allmulticast mode [ 1394.745206][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11314'. [ 1394.755460][T16038] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1394.893793][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11316'. [ 1394.928059][T16059] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1395.028444][T16062] can: request_module (can-proto-5) failed. [ 1395.217940][T16071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11321'. [ 1395.601654][T14932] net_ratelimit: 29 callbacks suppressed [ 1395.601675][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1395.619426][ T1421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.665268][T16098] --map-set only usable from mangle table [ 1395.726882][T14937] bond3: (slave bridge1): failed to get link speed/duplex [ 1395.772812][T16101] syz.0.11330: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1395.796301][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.0.11330 Not tainted syzkaller #0 PREEMPT(full) [ 1395.796332][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1395.796347][T16101] Call Trace: [ 1395.796357][T16101] [ 1395.796366][T16101] dump_stack_lvl+0xe8/0x150 [ 1395.796404][T16101] warn_alloc+0x249/0x340 [ 1395.796431][T16101] ? stack_trace_save+0xa9/0x100 [ 1395.796459][T16101] ? __pfx_warn_alloc+0x10/0x10 [ 1395.796492][T16101] ? kasan_save_track+0x4f/0x80 [ 1395.796514][T16101] ? kasan_save_track+0x3e/0x80 [ 1395.796535][T16101] ? __kasan_kmalloc+0x93/0xb0 [ 1395.796559][T16101] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1395.796581][T16101] ? xskq_create+0x56/0x170 [ 1395.796612][T16101] ? xsk_setsockopt+0x54c/0x990 [ 1395.796638][T16101] ? do_sock_setsockopt+0x17c/0x1b0 [ 1395.796682][T16101] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1395.796714][T16101] ? do_syscall_64+0x14d/0xf80 [ 1395.796738][T16101] __vmalloc_node_range_noprof+0x132/0x1730 [ 1395.796796][T16101] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1395.796829][T16101] ? __kasan_kmalloc+0x93/0xb0 [ 1395.796861][T16101] vmalloc_user_noprof+0xad/0xe0 [ 1395.796885][T16101] ? xskq_create+0xbf/0x170 [ 1395.796917][T16101] xskq_create+0xbf/0x170 [ 1395.796951][T16101] xsk_init_queue+0x8a/0xe0 [ 1395.796984][T16101] xsk_setsockopt+0x54c/0x990 [ 1395.797016][T16101] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1395.797046][T16101] ? __pfx_aa_sk_perm+0x10/0x10 [ 1395.797079][T16101] ? aa_sock_opt_perm+0xff/0x1a0 [ 1395.797111][T16101] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1395.797137][T16101] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1395.797168][T16101] do_sock_setsockopt+0x17c/0x1b0 [ 1395.797207][T16101] __x64_sys_setsockopt+0x13d/0x1b0 [ 1395.797247][T16101] do_syscall_64+0x14d/0xf80 [ 1395.797267][T16101] ? trace_irq_disable+0x3b/0x150 [ 1395.797316][T16101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.797339][T16101] ? clear_bhb_loop+0x40/0x90 [ 1395.797370][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.797393][T16101] RIP: 0033:0x7f234bf9c799 [ 1395.797417][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.797437][T16101] RSP: 002b:00007f234ce7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1395.797463][T16101] RAX: ffffffffffffffda RBX: 00007f234c215fa0 RCX: 00007f234bf9c799 [ 1395.797480][T16101] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1395.797494][T16101] RBP: 00007f234c032c99 R08: 0000000000000004 R09: 0000000000000000 [ 1395.797509][T16101] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1395.797536][T16101] R13: 00007f234c216038 R14: 00007f234c215fa0 R15: 00007ffe3b27a228 [ 1395.797572][T16101] [ 1395.797583][T16101] Mem-Info: [ 1395.866414][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1396.097332][T16101] active_anon:7905 inactive_anon:0 isolated_anon:0 [ 1396.097332][T16101] active_file:2825 inactive_file:40863 isolated_file:0 [ 1396.097332][T16101] unevictable:768 dirty:123 writeback:0 [ 1396.097332][T16101] slab_reclaimable:15226 slab_unreclaimable:152753 [ 1396.097332][T16101] mapped:30574 shmem:2403 pagetables:1549 [ 1396.097332][T16101] sec_pagetables:0 bounce:0 [ 1396.097332][T16101] kernel_misc_reclaimable:0 [ 1396.097332][T16101] free:1239725 free_pcp:27052 free_cma:0 [ 1396.170428][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11333'. [ 1396.188600][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11333'. [ 1396.206953][T27479] bond3: (slave bridge1): failed to get link speed/duplex [ 1396.216444][T16101] Node 0 active_anon:34020kB inactive_anon:0kB active_file:11300kB inactive_file:163248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:26192kB dirty:192kB writeback:100kB shmem:10176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19080kB pagetables:6156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1396.294076][T16101] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1396.327551][T27479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.335942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.356129][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1396.425192][T16114] tipc: Failed to remove unknown binding: 66,0,0/373859062:3942763403/3942763405 [ 1396.434831][T16101] Node 0 DMA free:11172kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:48kB free_cma:0kB [ 1396.481867][T16114] tipc: Failed to remove unknown binding: 66,0,0/373859062:3942763403/3942763404 [ 1396.497239][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1396.505774][T16114] tipc: Failed to remove unknown binding: 66,0,0/373859062:3942763403/3942763405 [ 1396.542028][T16114] tipc: Failed to remove unknown binding: 66,0,0/373859062:3942763403/3942763404 [ 1396.596416][T16101] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1396.616731][T14936] bond3: (slave bridge1): failed to get link speed/duplex [ 1396.628441][T16101] Node 0 DMA32 free:1277900kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39820kB inactive_anon:0kB active_file:11300kB inactive_file:163248kB unevictable:1536kB writepending:192kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:47456kB local_pcp:26664kB free_cma:0kB [ 1396.746536][T16101] lowmem_reserve[]: 0 0 0 0 0 [ 1396.780613][T16101] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1396.783233][T16131] tipc: New replicast peer: 255.255.255.255 [ 1396.831743][T16131] tipc: Enabled bearer , priority 10 [ 1396.886500][T16101] lowmem_reserve[]: 0 0 0 0 0 [ 1396.891500][T16101] Node 1 Normal free:3661312kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60248kB local_pcp:31380kB free_cma:0kB [ 1396.947233][T16101] lowmem_reserve[]: 0 0 0 0 0 [ 1396.952042][T16101] Node 0 DMA: 1*4kB (U) 0*8kB 2*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11172kB [ 1396.986509][T16101] Node 0 DMA32: 12806*4kB (UM) 6892*8kB (UME) 5080*16kB (UME) 202*32kB (UME) 128*64kB (UME) 62*128kB (UME) 678*256kB (UME) 506*512kB (UME) 356*1024kB (UME) 133*2048kB (UM) 0*4096kB = 1279800kB [ 1397.048566][T16101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1397.080362][T16101] Node 1 Normal: 9*4kB (UM) 14*8kB (UM) 18*16kB (UM) 8*32kB (UM) 14*64kB (UM) 14*128kB (UM) 9*256kB (UM) 8*512kB (UM) 8*1024kB (UM) 7*2048kB (U) 886*4096kB (UM) = 3661364kB [ 1397.107289][T16101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1397.117718][T16101] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1397.131797][T16101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1397.159888][T16143] xt_TCPMSS: Only works on TCP SYN packets [ 1397.161858][T16101] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1397.176259][T16101] 45128 total pagecache pages [ 1397.181084][T16101] 0 pages in swap cache [ 1397.185488][T16101] Free swap = 124996kB [ 1397.266104][T16101] Total swap = 124996kB [ 1397.270408][T16101] 2097051 pages RAM [ 1397.274735][T16101] 0 pages HighMem/MovableOnly [ 1397.309163][T16101] 427026 pages reserved [ 1397.313403][T16101] 0 pages cma reserved [ 1397.671934][T16147] lec:lec_atm_close: lec0: Shut down! [ 1400.290573][T16153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1400.533427][T16218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1400.613955][T16219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1400.646807][T27478] net_ratelimit: 39 callbacks suppressed [ 1400.646829][T27478] bond3: (slave bridge1): failed to get link speed/duplex [ 1400.786788][T14937] bond3: (slave bridge1): failed to get link speed/duplex [ 1400.819709][ T1414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.896628][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1400.968852][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abc4e800: rx timeout, send abort [ 1401.006884][T14937] bond3: (slave bridge1): failed to get link speed/duplex [ 1401.034636][T16214] lec:lec_atm_close: lec0: Shut down! [ 1401.127762][T14932] bond3: (slave bridge1): failed to get link speed/duplex [ 1401.257004][T27480] bond3: (slave bridge1): failed to get link speed/duplex [ 1401.366840][T14937] bond3: (slave bridge1): failed to get link speed/duplex [ 1401.401543][T16252] __nla_validate_parse: 7 callbacks suppressed [ 1401.401558][T16252] netlink: 830 bytes leftover after parsing attributes in process `syz.5.11370'. [ 1401.448563][T14932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.457755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.468983][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abc4e400: rx timeout, send abort [ 1401.477380][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abc4e800: abort rx timeout. Force session deactivation [ 1401.490546][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11372'. [ 1401.632754][T16264] nbd: nbd5 already in use [ 1401.643880][T16266] block nbd5: NBD_DISCONNECT [ 1401.659519][T16266] block nbd5: Send disconnect failed -32 [ 1401.671230][T16266] block nbd5: shutting down sockets [ 1401.723484][T14932] bridge_slave_1: left allmulticast mode [ 1401.735521][T14932] bridge_slave_1: left promiscuous mode [ 1401.752255][T14932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.833477][T14932] bridge_slave_0: left allmulticast mode [ 1401.867833][T14932] bridge_slave_0: left promiscuous mode [ 1401.874214][T16279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11377'. [ 1401.900767][T14932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.918487][T16279] netlink: 75 bytes leftover after parsing attributes in process `syz.0.11377'. [ 1401.952679][T14932] tipc: Resetting bearer [ 1401.977306][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abc4e400: abort rx timeout. Force session deactivation [ 1402.300949][T14932] tipc: Disabling bearer [ 1402.582856][T14932] bond3 (unregistering): (slave bridge1): Removing an active aggregator [ 1402.604078][T14932] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1402.812994][T14932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.829010][T16312] netlink: 'syz.1.11383': attribute type 1 has an invalid length. [ 1402.829296][T14932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.851051][T14932] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1402.868061][T14932] bond0 (unregistering): Released all slaves [ 1402.881296][T14932] bond1 (unregistering): Released all slaves [ 1402.905941][T14932] bond2 (unregistering): Released all slaves [ 1402.940049][T14932] bond3 (unregistering): Released all slaves [ 1402.970195][T14932] bond4 (unregistering): Released all slaves [ 1402.988305][T14932] bond5 (unregistering): Released all slaves [ 1403.207641][T14932] tipc: Left network mode [ 1403.473753][T16332] xt_cgroup: invalid path, errno=-2 [ 1403.879299][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11397'. [ 1403.902480][T16348] nbd: must specify a size in bytes for the device [ 1404.158966][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11399'. [ 1404.414556][T14932] hsr_slave_0: left promiscuous mode [ 1404.441823][T14932] hsr_slave_1: left promiscuous mode [ 1404.457003][T14932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.496949][T14932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.515991][T14932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.546627][T14932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.719527][T16384] netlink: 'syz.0.11400': attribute type 19 has an invalid length. [ 1404.751139][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11400'. [ 1404.801928][T14932] pim6reg (unregistering): left allmulticast mode [ 1404.838360][T16393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11405'. [ 1404.860536][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11405'. [ 1405.141734][T16377] macsec3: entered promiscuous mode [ 1405.147714][T16377] veth1_macvtap: entered promiscuous mode [ 1405.162902][T16377] veth1_macvtap: left promiscuous mode [ 1405.613842][T14932] IPVS: stop unused estimator thread 0... [ 1405.660118][T16422] netlink: 'syz.4.11413': attribute type 1 has an invalid length. [ 1405.681835][T16424] sctp: [Deprecated]: syz.4.11413 (pid 16424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1405.681835][T16424] Use struct sctp_sack_info instead [ 1406.036075][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1406.044208][ C1] lec:lec_tx_timeout: lec0 [ 1406.550863][T16447] netlink: 'syz.4.11418': attribute type 7 has an invalid length. [ 1406.560607][T16447] netlink: 'syz.4.11418': attribute type 7 has an invalid length. [ 1406.814007][T16454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1407.648928][T16464] net_ratelimit: 1 callbacks suppressed [ 1407.648949][T16464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1407.707836][T16467] tipc: Started in network mode [ 1407.712793][T16467] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1407.724728][T16467] tipc: Enabled bearer , priority 24 [ 1407.745461][T16468] netlink: 'syz.1.11424': attribute type 12 has an invalid length. [ 1408.140790][T16473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1408.318340][T16497] netlink: 'syz.0.11433': attribute type 11 has an invalid length. [ 1408.341903][T16497] netlink: 'syz.0.11433': attribute type 11 has an invalid length. [ 1408.361830][T16497] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11433'. [ 1408.839772][T14917] tipc: Node number set to 10005162 [ 1409.372803][T16550] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11444'. [ 1409.462566][T16550] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11444'. [ 1409.654970][T16564] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11448'. [ 1410.330626][T16598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11459'. [ 1410.539373][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11462'. [ 1410.649149][T16612] netlink: 'syz.0.11461': attribute type 1 has an invalid length. [ 1410.659265][T16608] vlan1 (unregistering): left allmulticast mode [ 1410.665573][T16608] veth0_vlan (unregistering): left allmulticast mode [ 1410.847237][T16613] netlink: 'syz.5.11463': attribute type 1 has an invalid length. [ 1410.857808][T16612] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1411.066876][T16644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11471'. [ 1411.082138][T16645] netlink: 'syz.0.11470': attribute type 15 has an invalid length. [ 1411.098747][T16645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11470'. [ 1411.301996][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11474'. [ 1411.329658][T16655] netlink: 232 bytes leftover after parsing attributes in process `syz.0.11474'. [ 1413.586246][T16700] netlink: 'syz.5.11487': attribute type 2 has an invalid length. [ 1413.594114][T16700] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11487'. [ 1413.644886][T16700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.696289][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11488'. [ 1413.786080][T16709] sctp: [Deprecated]: syz.4.11490 (pid 16709) Use of int in max_burst socket option. [ 1413.786080][T16709] Use struct sctp_assoc_value instead [ 1414.098416][T16734] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1414.127082][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11497'. [ 1414.465661][T16748] rdma_rxe: rxe_newlink: failed to add lo [ 1414.588099][T16761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11503'. [ 1414.599798][T16762] sctp: [Deprecated]: syz.1.11502 (pid 16762) Use of int in maxseg socket option. [ 1414.599798][T16762] Use struct sctp_assoc_value instead [ 1415.035712][T16786] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.11509'. [ 1415.054678][T16790] nbd: couldn't find a device at index 0 [ 1415.314462][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11514'. [ 1415.335004][T16806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11514'. [ 1415.425175][T16808] bond7: Unable to set down delay as MII monitoring is disabled [ 1415.481860][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11519'. [ 1415.499393][T16808] bond7 (unregistering): Released all slaves [ 1415.519608][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11517'. [ 1415.534415][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11517'. [ 1415.568359][T16813] netlink: 'syz.0.11517': attribute type 1 has an invalid length. [ 1415.577303][T16814] netlink: 'syz.0.11517': attribute type 1 has an invalid length. [ 1415.859876][T16837] gtp1: entered promiscuous mode [ 1415.864914][T16837] gtp1: entered allmulticast mode [ 1416.169508][T16860] netlink: 'syz.5.11530': attribute type 4 has an invalid length. [ 1416.174282][ T1810] block nbd4: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 180 seconds [ 1416.189264][ T1810] block nbd4: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 180 seconds [ 1416.200408][ T1810] block nbd4: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 180 seconds [ 1416.212007][ T1810] block nbd4: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 180 seconds [ 1416.565420][T16891] ip6tnl0: Caught tx_queue_len zero misconfig [ 1416.771336][T16902] netlink: 'syz.3.11541': attribute type 29 has an invalid length. [ 1416.780677][T16902] netlink: 'syz.3.11541': attribute type 29 has an invalid length. [ 1416.790251][T16902] netlink: 'syz.3.11541': attribute type 29 has an invalid length. [ 1416.798877][T16902] netlink: 'syz.3.11541': attribute type 29 has an invalid length. [ 1416.820381][T16902] netlink: 'syz.3.11541': attribute type 29 has an invalid length. [ 1416.882335][T16906] vlan0: Caught tx_queue_len zero misconfig [ 1416.975450][T16902] netlink: 'syz.3.11541': attribute type 29 has an invalid length. [ 1417.068847][T16902] netlink: 'syz.3.11541': attribute type 29 has an invalid length. [ 1417.144687][T16910] lo speed is unknown, defaulting to 1000 [ 1417.200668][T16910] ip6_vti0 speed is unknown, defaulting to 1000 [ 1417.727934][T16921] syzkaller0: entered promiscuous mode [ 1417.733679][T16921] syzkaller0: entered allmulticast mode [ 1418.074603][T16910] wlan0 speed is unknown, defaulting to 1000 [ 1418.144715][T16937] netlink: 'syz.1.11553': attribute type 1 has an invalid length. [ 1418.462045][T16952] syzkaller0: entered allmulticast mode [ 1418.512854][T16958] netlink: 'syz.4.11557': attribute type 1 has an invalid length. [ 1418.624538][T16960] openvswitch: netlink: EtherType 50a is less than min 600 [ 1419.105100][T16961] lec:lec_atm_close: lec0: Shut down! [ 1419.414709][T17002] nft_compat: unsupported protocol 0 [ 1419.742862][T27468] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.753534][T27468] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.772455][T27468] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.831548][T17026] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1419.878856][T27468] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.890450][T17031] __nla_validate_parse: 8 callbacks suppressed [ 1419.890469][T17031] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.11579'. [ 1419.977995][T17033] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1420.539052][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11589'. [ 1420.619041][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11589'. [ 1420.897884][T17086] syzkaller0: entered promiscuous mode [ 1420.909435][T17086] syzkaller0: entered allmulticast mode [ 1420.948325][T17086] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11596'. [ 1421.416190][T17121] validate_nla: 4 callbacks suppressed [ 1421.416209][T17121] netlink: 'syz.1.11605': attribute type 1 has an invalid length. [ 1421.459525][T17121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11605'. [ 1421.502439][T17127] geneve1: Caught tx_queue_len zero misconfig [ 1421.948258][T17146] tipc: Resetting bearer [ 1421.953844][T17146] bond11: (slave vlan0): Opening slave failed [ 1421.962963][T17146] tipc: Resetting bearer [ 1421.962962][T32147] Bluetooth: hci3: link tx timeout [ 1421.974558][T32147] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1422.297565][T17128] lec:lec_atm_close: lec0: Shut down! [ 1422.578920][T17169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11617'. [ 1422.611156][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11618'. [ 1422.647779][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11618'. [ 1422.755906][T17176] netlink: 'syz.0.11621': attribute type 1 has an invalid length. [ 1422.826338][T17180] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11621'. [ 1422.850490][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11622'. [ 1422.951816][T17191] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20000 [ 1423.280159][ T5195] udevd[5195]: worker [9074] /devices/virtual/block/nbd4 timeout; kill it [ 1423.317365][T17216] openvswitch: netlink: Flow actions attr not present in new flow. [ 1423.328526][ T5195] udevd[5195]: seq 42819 '/devices/virtual/block/nbd4' killed [ 1423.356367][T17219] openvswitch: netlink: Flow actions attr not present in new flow. [ 1423.663131][T17230] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.821054][T17230] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.882266][T17244] openvswitch: netlink: Key type 42 is out of range max 32 [ 1423.949114][T17230] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.971606][T17244] netlink: 'syz.4.11640': attribute type 1 has an invalid length. [ 1424.011466][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1424.239710][T17230] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.740964][T17273] vlan2: entered promiscuous mode [ 1425.100087][T17282] IPVS: set_ctl: invalid protocol: 224 127.0.0.1:20004 [ 1425.259269][T17287] __nla_validate_parse: 38 callbacks suppressed [ 1425.259294][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11649'. [ 1425.537433][T17298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11653'. [ 1425.649553][T17298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11653'. [ 1425.753801][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11654'. [ 1425.790398][T17308] syzkaller0: entered promiscuous mode [ 1425.796156][T17308] syzkaller0: entered allmulticast mode [ 1426.223955][T17313] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11656'. [ 1426.398256][T17326] netlink: 13 bytes leftover after parsing attributes in process `syz.0.11659'. [ 1426.432230][T17326] bridge10: entered promiscuous mode [ 1426.451245][T17326] bridge10: entered allmulticast mode [ 1426.831225][T17340] dvmrp0: left allmulticast mode [ 1426.838031][T17340] pimreg: left allmulticast mode [ 1427.134684][T17362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11666'. [ 1427.245058][T17370] netlink: 'syz.0.11667': attribute type 1 has an invalid length. [ 1427.264796][T17370] netlink: 'syz.0.11667': attribute type 2 has an invalid length. [ 1427.300176][T17370] netlink: 'syz.0.11667': attribute type 1 has an invalid length. [ 1427.560105][T17384] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11671'. [ 1427.727758][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11675'. [ 1427.762368][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11675'. [ 1428.006254][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 1428.014340][ C1] lec:lec_tx_timeout: lec0 [ 1428.020428][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1428.447261][T17423] lo: entered allmulticast mode [ 1428.462415][T17423] lo: left allmulticast mode [ 1428.888576][T17436] syzkaller0: entered promiscuous mode [ 1428.894866][T17436] syzkaller0: entered allmulticast mode [ 1429.161206][T17465] netlink: 'syz.1.11689': attribute type 1 has an invalid length. [ 1429.225603][T17470] netlink: 'syz.0.11691': attribute type 1 has an invalid length. [ 1431.175815][T17451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.271442][T17451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.448876][T17470] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1431.766988][T17528] __nla_validate_parse: 10 callbacks suppressed [ 1431.767009][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11700'. [ 1431.812316][T17523] bond0: entered promiscuous mode [ 1431.819087][T17536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11699'. [ 1431.862910][T17523] batadv0: entered promiscuous mode [ 1431.903698][T17523] batadv0: left promiscuous mode [ 1431.938037][T17523] bond0: left promiscuous mode [ 1432.163240][T17552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.240828][T17555] erspan0: entered promiscuous mode [ 1432.262513][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11703'. [ 1433.036705][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1433.044807][ C1] lec:lec_tx_timeout: lec0 [ 1433.052352][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1433.325341][T17590] FAULT_INJECTION: forcing a failure. [ 1433.325341][T17590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.340791][T17590] CPU: 0 UID: 0 PID: 17590 Comm: syz.5.11706 Not tainted syzkaller #0 PREEMPT(full) [ 1433.340821][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1433.340835][T17590] Call Trace: [ 1433.340854][T17590] [ 1433.340863][T17590] dump_stack_lvl+0xe8/0x150 [ 1433.340900][T17590] should_fail_ex+0x412/0x560 [ 1433.340935][T17590] _copy_from_user+0x2d/0xb0 [ 1433.340971][T17590] ___sys_sendmsg+0x1c6/0x360 [ 1433.341003][T17590] ? __pfx____sys_sendmsg+0x10/0x10 [ 1433.341066][T17590] ? __fget_files+0x2a/0x420 [ 1433.341099][T17590] ? __fget_files+0x3a0/0x420 [ 1433.341143][T17590] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1433.341169][T17590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1433.341203][T17590] ? __pfx_ksys_write+0x10/0x10 [ 1433.341239][T17590] do_syscall_64+0x14d/0xf80 [ 1433.341261][T17590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.341284][T17590] ? clear_bhb_loop+0x40/0x90 [ 1433.341312][T17590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.341334][T17590] RIP: 0033:0x7f960f99c799 [ 1433.341355][T17590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.341374][T17590] RSP: 002b:00007f96108f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.341397][T17590] RAX: ffffffffffffffda RBX: 00007f960fc16180 RCX: 00007f960f99c799 [ 1433.341414][T17590] RDX: 0000000000000801 RSI: 0000200000000040 RDI: 0000000000000009 [ 1433.341428][T17590] RBP: 00007f96108f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.341441][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.341454][T17590] R13: 00007f960fc16218 R14: 00007f960fc16180 R15: 00007fff67672438 [ 1433.341490][T17590] [ 1433.341870][T17573] lec:lec_atm_close: lec0: Shut down! [ 1433.447806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1434.682349][T17518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1435.318874][T17645] x_tables: duplicate underflow at hook 1 [ 1435.330996][T17645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1435.558407][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11724'. [ 1435.748267][T17661] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11725'. [ 1435.769499][T17661] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11725'. [ 1435.799852][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11725'. [ 1435.821400][T17637] FAULT_INJECTION: forcing a failure. [ 1435.821400][T17637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1435.856928][T17637] CPU: 0 UID: 0 PID: 17637 Comm: syz.4.11718 Not tainted syzkaller #0 PREEMPT(full) [ 1435.856954][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1435.856967][T17637] Call Trace: [ 1435.856975][T17637] [ 1435.856983][T17637] dump_stack_lvl+0xe8/0x150 [ 1435.857016][T17637] should_fail_ex+0x412/0x560 [ 1435.857049][T17637] _copy_to_user+0x31/0xb0 [ 1435.857070][T17637] simple_read_from_buffer+0xe1/0x170 [ 1435.857105][T17637] proc_fail_nth_read+0x1bb/0x230 [ 1435.857145][T17637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1435.857177][T17637] ? rw_verify_area+0x2a6/0x4d0 [ 1435.857198][T17637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1435.857229][T17637] vfs_read+0x20c/0xa70 [ 1435.857248][T17637] ? fdget_pos+0x246/0x320 [ 1435.857284][T17637] ? __pfx___mutex_lock+0x10/0x10 [ 1435.857305][T17637] ? __pfx_vfs_read+0x10/0x10 [ 1435.857328][T17637] ? __fget_files+0x2a/0x420 [ 1435.857360][T17637] ? __fget_files+0x3a0/0x420 [ 1435.857389][T17637] ? __fget_files+0x2a/0x420 [ 1435.857427][T17637] ksys_read+0x150/0x270 [ 1435.857451][T17637] ? __pfx_ksys_read+0x10/0x10 [ 1435.857484][T17637] do_syscall_64+0x14d/0xf80 [ 1435.857520][T17637] ? trace_irq_disable+0x3b/0x150 [ 1435.857549][T17637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.857571][T17637] ? clear_bhb_loop+0x40/0x90 [ 1435.857598][T17637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.857619][T17637] RIP: 0033:0x7f3cba95cfce [ 1435.857639][T17637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1435.857659][T17637] RSP: 002b:00007f3cbb884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1435.857681][T17637] RAX: ffffffffffffffda RBX: 00007f3cbb8856c0 RCX: 00007f3cba95cfce [ 1435.857697][T17637] RDX: 000000000000000f RSI: 00007f3cbb8850a0 RDI: 000000000000000a [ 1435.857711][T17637] RBP: 00007f3cbb885090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.857724][T17637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1435.857736][T17637] R13: 00007f3cbac16128 R14: 00007f3cbac16090 R15: 00007fff4a4f41a8 [ 1435.857771][T17637] [ 1436.124353][T17668] syzkaller1: entered promiscuous mode [ 1436.130776][T17668] syzkaller1: entered allmulticast mode [ 1436.148024][T17664] lec:lec_atm_close: lec0: Shut down! [ 1436.149033][T17673] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11725'. [ 1436.165441][T17676] netlink: 'syz.1.11728': attribute type 1 has an invalid length. [ 1436.182267][T17676] nbd: error processing sock list [ 1436.378613][T17685] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1436.389349][T17685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1436.510116][T17685] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1436.551302][T17685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1436.824912][T17707] syzkaller0: entered promiscuous mode [ 1436.830572][T17707] syzkaller0: entered allmulticast mode [ 1436.935552][T17710] netlink: 'syz.5.11737': attribute type 10 has an invalid length. [ 1436.959599][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11738'. [ 1437.552191][T17740] netlink: 'syz.0.11745': attribute type 5 has an invalid length. [ 1438.111133][T17784] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11757'. [ 1438.157162][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11758'. [ 1438.849674][T17815] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1438.883692][T17815] gtp1: entered promiscuous mode [ 1438.926258][T17815] gtp1: entered allmulticast mode [ 1439.073258][T17824] netlink: 'syz.1.11770': attribute type 15 has an invalid length. [ 1439.094506][T17824] Unsupported ieee802154 address type: 0 [ 1439.293231][T17838] 8021q: VLANs not supported on ip_vti0 [ 1439.311921][T17833] x_tables: duplicate underflow at hook 3 [ 1439.330756][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11775'. [ 1439.341483][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11775'. [ 1440.319662][T17874] netem: change failed [ 1440.348545][T17876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11784'. [ 1440.362580][T17878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11786'. [ 1440.366554][T17851] lec:lec_atm_close: lec0: Shut down! [ 1440.494178][T17878] xt_socket: unknown flags 0x50 [ 1440.788462][T17896] block nbd0: NBD_DISCONNECT [ 1440.831823][T17894] netlink: 'syz.5.11790': attribute type 11 has an invalid length. [ 1440.846716][T17894] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.11790'. [ 1440.960518][T17901] bond7: ARP target 1.0.0.0 is already present [ 1440.970546][T17901] bond7: option arp_ip_target: invalid value (1) [ 1440.986666][T17901] bond7 (unregistering): Released all slaves [ 1441.020940][T17913] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11793'. [ 1441.318111][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11795'. [ 1442.165180][T17939] lec:lec_atm_close: lec0: Shut down! [ 1442.495708][T17981] syzkaller0: entered promiscuous mode [ 1442.635208][T17977] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11812'. [ 1442.904889][T17988] nbd: nbd3 already in use [ 1442.912388][T17988] block nbd3: NBD_DISCONNECT [ 1442.918160][T17988] block nbd3: Send disconnect failed -32 [ 1442.924029][T17988] block nbd3: shutting down sockets [ 1443.504640][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11821'. [ 1443.515698][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11821'. [ 1444.934650][T18028] No such timeout policy "syz0" [ 1445.411875][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11831'. [ 1445.580639][T18059] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11833'. [ 1445.714321][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11834'. [ 1445.740053][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11836'. [ 1445.742543][T18069] netlink: 'syz.0.11834': attribute type 3 has an invalid length. [ 1445.788510][T18070] bond7: Invalid ad_actor_system MAC address. [ 1445.798811][T18070] bond7: option ad_actor_system: invalid value (1) [ 1445.812482][T18070] bond7 (unregistering): Released all slaves [ 1446.202475][T18097] mac80211_hwsim hwsim110 syzkaller0: left promiscuous mode [ 1446.235741][T18097] mac80211_hwsim hwsim110 syzkaller0: left allmulticast mode [ 1446.249324][ T1810] block nbd4: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 210 seconds [ 1446.261250][ T1810] block nbd4: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 210 seconds [ 1446.272486][ T1810] block nbd4: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 210 seconds [ 1446.284315][ T1810] block nbd4: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 210 seconds [ 1446.892636][T18099] lec:lec_atm_close: lec0: Shut down! [ 1446.946672][T18118] can: request_module (can-proto-0) failed. [ 1447.057735][T18118] can: request_module (can-proto-0) failed. [ 1447.150721][T18118] can: request_module (can-proto-0) failed. [ 1447.305307][T18118] can: request_module (can-proto-0) failed. [ 1447.323160][T18137] xt_TCPMSS: Only works on TCP SYN packets [ 1447.493574][T18154] netlink: 'syz.5.11858': attribute type 28 has an invalid length. [ 1447.516628][T18154] netlink: 'syz.5.11858': attribute type 3 has an invalid length. [ 1447.524742][T18154] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11858'. [ 1447.541414][T18157] netlink: 512 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1447.561444][T18156] netlink: 512 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1447.579836][T18153] macsec3: entered promiscuous mode [ 1447.585099][T18153] veth1_macvtap: entered promiscuous mode [ 1447.604456][T18153] veth1_macvtap: left promiscuous mode [ 1447.636345][T18162] netlink: 'syz.5.11858': attribute type 28 has an invalid length. [ 1447.644307][T18162] netlink: 'syz.5.11858': attribute type 3 has an invalid length. [ 1447.657030][T18162] __nla_validate_parse: 1 callbacks suppressed [ 1447.657047][T18162] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11858'. [ 1447.823636][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11861'. [ 1447.877197][T18179] bridge0: port 3(bond0) entered blocking state [ 1447.920475][T18179] bridge0: port 3(bond0) entered disabled state [ 1447.932282][T18179] bond0: entered allmulticast mode [ 1447.938309][T18179] bond_slave_0: entered allmulticast mode [ 1447.944309][T18179] bond_slave_1: entered allmulticast mode [ 1447.950804][T18179] batadv0: entered allmulticast mode [ 1448.030969][T18179] bond0: entered promiscuous mode [ 1448.048778][T18179] bond_slave_0: entered promiscuous mode [ 1448.054855][T18179] bond_slave_1: entered promiscuous mode [ 1448.061651][T18179] batadv0: entered promiscuous mode [ 1448.080878][T18170] hsr_slave_0: left promiscuous mode [ 1448.095682][T18170] hsr_slave_1: left promiscuous mode [ 1448.126330][T18186] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11867'. [ 1448.537338][T14947] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1448.547439][T14947] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1448.588988][T18172] lec:lec_atm_close: lec0: Shut down! [ 1448.701960][T18209] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11872'. [ 1448.774422][T18209] xt_recent: Unsupported userspace flags (000000b1) [ 1449.038865][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11876'. [ 1449.144142][T18231] syzkaller0: entered promiscuous mode [ 1449.150728][T18231] syzkaller0: entered allmulticast mode [ 1449.415114][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11880'. [ 1449.462562][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11883'. [ 1449.477988][T18245] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11882'. [ 1449.498702][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11883'. [ 1449.524650][T18248] bond6: (slave vlan0): Enslaving as a backup interface with an up link [ 1449.537559][T18249] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11882'. [ 1450.058059][T18274] netlink: 'syz.5.11891': attribute type 64 has an invalid length. [ 1450.277973][T18286] erspan0: entered promiscuous mode [ 1450.428655][T18253] lec:lec_atm_close: lec0: Shut down! [ 1450.474232][T18292] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1450.934255][T17609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1450.945985][T17609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1450.956850][T17609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1450.966532][T17609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1450.974186][T17609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1451.098969][T18312] bond_slave_1: left allmulticast mode [ 1451.150584][T18312] veth3: left allmulticast mode [ 1451.187179][T18312] bond1: left allmulticast mode [ 1451.193195][T18312] ip6gre1: left allmulticast mode [ 1451.224523][T18312] xfrm0: left allmulticast mode [ 1451.264238][T18312] bond6: left allmulticast mode [ 1451.302073][T18312] ip6tnl2: left allmulticast mode [ 1451.315165][T18314] No such timeout policy "syz0" [ 1451.320566][T18312] bond7: left allmulticast mode [ 1451.331905][T18312] gtp1: left allmulticast mode [ 1451.350263][T18312] bridge10: left allmulticast mode [ 1451.425869][T18324] xt_hashlimit: size too large, truncated to 1048576 [ 1451.494133][T18305] lo speed is unknown, defaulting to 1000 [ 1451.519244][T18305] ip6_vti0 speed is unknown, defaulting to 1000 [ 1451.679949][T18333] openvswitch: netlink: Message has 4 unknown bytes. [ 1451.710689][T18334] openvswitch: netlink: Message has 4 unknown bytes. [ 1452.096106][T18305] wlan0 speed is unknown, defaulting to 1000 [ 1452.269598][T18359] netlink: 'syz.1.11914': attribute type 33 has an invalid length. [ 1452.324499][T18359] dummy0 (unregistering): left promiscuous mode [ 1452.341693][T18359] dummy0 (unregistering): left allmulticast mode [ 1452.359918][T18359] team0: Port device dummy0 removed [ 1452.398839][T18360] lo speed is unknown, defaulting to 1000 [ 1452.416568][T18363] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1452.438375][T18360] ip6_vti0 speed is unknown, defaulting to 1000 [ 1452.611542][T18372] tipc: Enabling of bearer rejected, failed to enable media [ 1452.715543][T18305] chnl_net:caif_netlink_parms(): no params data found [ 1452.843158][T18360] wlan0 speed is unknown, defaulting to 1000 [ 1453.028464][T18386] sctp: [Deprecated]: syz.5.11920 (pid 18386) Use of int in max_burst socket option. [ 1453.028464][T18386] Use struct sctp_assoc_value instead [ 1453.056157][T32147] Bluetooth: hci0: command tx timeout [ 1453.159880][T18305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.176162][T18305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.183549][T18305] bridge_slave_0: entered allmulticast mode [ 1453.210646][T18305] bridge_slave_0: entered promiscuous mode [ 1453.237772][T18391] tipc: Enabling not permitted [ 1453.247748][T18391] tipc: Enabling of bearer rejected, failed to enable media [ 1453.274549][T18305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.288693][T18391] Bluetooth: MGMT ver 1.23 [ 1453.296853][T18305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.304194][T18305] bridge_slave_1: entered allmulticast mode [ 1453.318962][T18305] bridge_slave_1: entered promiscuous mode [ 1453.419450][T18393] ±ÿ: renamed from team_slave_1 [ 1453.541561][T18401] ip6gre1: entered allmulticast mode [ 1453.619591][T18305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.720657][T18305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.733078][T18370] __nla_validate_parse: 262 callbacks suppressed [ 1453.733099][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11918'. [ 1453.979937][T18305] team0: Port device team_slave_0 added [ 1454.005151][T18305] team0: Port device team_slave_1 added [ 1454.205349][T18305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.214166][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.244596][T18423] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11929'. [ 1454.284954][T18305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.322083][T18305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.336835][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.380608][T18305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.503482][T18305] hsr_slave_0: entered promiscuous mode [ 1454.518602][T18305] hsr_slave_1: entered promiscuous mode [ 1454.525099][T18305] debugfs: 'hsr0' already exists in 'hsr' [ 1454.566728][T18305] Cannot create hsr debugfs directory [ 1454.995983][T18305] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1455.049567][T18305] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1455.081879][T18305] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45637 - 0 [ 1455.126783][T18305] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1455.138393][T32147] Bluetooth: hci0: command tx timeout [ 1455.227949][T18453] bond0: (slave gre0): refused to change device type [ 1455.243397][T18453] syzkaller0: entered promiscuous mode [ 1455.266302][T18453] syzkaller0: entered allmulticast mode [ 1455.326228][T18305] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1455.348535][T18305] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1455.370832][T18305] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45637 - 0 [ 1455.392599][T18305] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1455.578512][T18468] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11939'. [ 1455.592725][T18305] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1455.627145][T18305] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1455.640656][T18305] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45637 - 0 [ 1455.653745][T18305] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1455.708573][T18473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11940'. [ 1455.722052][T18473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11940'. [ 1455.733111][T18479] sctp: [Deprecated]: syz.4.11942 (pid 18479) Use of int in max_burst socket option deprecated. [ 1455.733111][T18479] Use struct sctp_assoc_value instead [ 1455.751111][T18480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11941'. [ 1455.764319][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11941'. [ 1455.787276][T18305] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1455.797344][T18305] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1455.839981][T18482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11941'. [ 1455.862697][T18305] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45637 - 0 [ 1455.878591][T18305] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1455.921510][T18484] bond14 (unregistering): Released all slaves [ 1455.954411][T18485] veth0: entered promiscuous mode [ 1455.969076][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11943'. [ 1456.004074][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11944'. [ 1456.016130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 1456.024211][ C1] lec:lec_tx_timeout: lec0 [ 1456.213159][T18305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1456.249359][T18305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1456.280002][T18305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1456.321370][T18305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1456.609034][T18305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.691627][T18305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.730570][T14947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.737807][T14947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.756037][T27483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.763325][T27483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.921939][T18305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1456.932560][T18305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1457.216815][T32147] Bluetooth: hci0: command tx timeout [ 1457.586932][T18536] tipc: Failed to remove unknown binding: 66,1,1/0:2236234303/2236234305 [ 1459.291312][T32147] Bluetooth: hci0: command tx timeout [ 1459.355140][T18513] mpoa:mpoad_close: () going down [ 1459.368247][T18548] lec0: mtu less than device minimum [ 1459.373600][T18548] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 1459.408759][T18305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.425825][T18548] lec:lec_atm_close: lec0: Shut down! [ 1459.605115][T18305] veth0_vlan: entered promiscuous mode [ 1459.635440][T18305] veth1_vlan: entered promiscuous mode [ 1459.739720][T18305] veth0_macvtap: entered promiscuous mode [ 1459.773294][T18305] veth1_macvtap: entered promiscuous mode [ 1459.785250][T18558] tipc: Failed to remove unknown binding: 66,0,0/0:3830317557/3830317559 [ 1459.795811][T18558] tipc: Failed to remove unknown binding: 66,0,0/0:3830317557/3830317558 [ 1459.808418][T18558] tipc: Failed to remove unknown binding: 66,0,0/0:3830317557/3830317559 [ 1459.828813][T18558] tipc: Failed to remove unknown binding: 66,0,0/0:3830317557/3830317558 [ 1459.864735][T18305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.899800][T18305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.960423][T14947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.012489][T14947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.024401][T14947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.041912][T14947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.461355][T18577] __nla_validate_parse: 4 callbacks suppressed [ 1460.461390][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11964'. [ 1460.494553][T14938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.514689][T14938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.704883][T14937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.736732][T14937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.990335][T18597] tipc: Started in network mode [ 1461.005353][T18597] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1461.052088][T18597] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1461.118216][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11897'. [ 1461.140910][T18597] tipc: Enabled bearer , priority 10 [ 1461.180937][T18599] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1461.222466][T18599] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1461.774367][T17609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1461.792116][T17609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1461.802453][T17609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1461.824732][T17609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1461.825715][T18634] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11976'. [ 1461.844434][T17609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1461.914868][T18629] lo speed is unknown, defaulting to 1000 [ 1461.923279][T18629] ip6_vti0 speed is unknown, defaulting to 1000 [ 1461.947619][T18634] netlink: 43 bytes leftover after parsing attributes in process `syz.3.11976'. [ 1461.994972][T18634] netlink: 'syz.3.11976': attribute type 6 has an invalid length. [ 1462.037902][T18634] netlink: 'syz.3.11976': attribute type 5 has an invalid length. [ 1462.078957][T18634] netlink: 43 bytes leftover after parsing attributes in process `syz.3.11976'. [ 1462.279836][T27632] tipc: Node number set to 1 [ 1462.469504][T18614] lec:lec_atm_close: lec0: Shut down! [ 1462.617471][T18629] wlan0 speed is unknown, defaulting to 1000 [ 1462.698894][T18661] netlink: 596 bytes leftover after parsing attributes in process `syz.1.11983'. [ 1462.704217][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11982'. [ 1462.747406][T18663] netlink: 596 bytes leftover after parsing attributes in process `syz.1.11983'. [ 1462.756868][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11982'. [ 1463.148784][T18629] chnl_net:caif_netlink_parms(): no params data found [ 1463.178686][T18682] syzkaller0: entered promiscuous mode [ 1463.185296][T18682] syzkaller0: entered allmulticast mode [ 1463.324776][T18690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11990'. [ 1463.406421][T18689] ve: renamed from macvlan0 [ 1463.628752][T18629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.638580][T18629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.650905][T18629] bridge_slave_0: entered allmulticast mode [ 1463.672423][T18629] bridge_slave_0: entered promiscuous mode [ 1463.689396][T18699] netlink: 'syz.3.11992': attribute type 7 has an invalid length. [ 1463.709378][T18629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.736151][T18629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.758275][T18629] bridge_slave_1: entered allmulticast mode [ 1463.773117][T18629] bridge_slave_1: entered promiscuous mode [ 1463.889298][T18629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.911311][T18629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.929172][T32147] Bluetooth: hci5: command tx timeout [ 1463.965623][T18629] team0: Port device team_slave_0 added [ 1463.989016][T18629] team0: Port device team_slave_1 added [ 1464.023648][T18629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.032093][T18629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.062433][T18629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.110251][T18629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.118505][T18629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.164720][T18629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.340983][T18629] hsr_slave_0: entered promiscuous mode [ 1464.355541][T18629] hsr_slave_1: entered promiscuous mode [ 1464.364314][T18629] debugfs: 'hsr0' already exists in 'hsr' [ 1464.371398][T18629] Cannot create hsr debugfs directory [ 1464.533961][T18736] openvswitch: netlink: Flow actions attr not present in new flow. [ 1465.081627][T18629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1465.122603][T18629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1465.151283][T18629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1465.171316][T18629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1465.414940][T18762] pim6reg1: entered promiscuous mode [ 1465.426307][T18762] pim6reg1: entered allmulticast mode [ 1465.602220][T18629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.644883][T18629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.731790][T14937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.739080][T14937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.815753][T27476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.822997][T27476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.006562][T32147] Bluetooth: hci5: command tx timeout [ 1466.385897][T18629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.519562][T18629] veth0_vlan: entered promiscuous mode [ 1466.539268][T18802] __nla_validate_parse: 6 callbacks suppressed [ 1466.539290][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12020'. [ 1466.571491][T18629] veth1_vlan: entered promiscuous mode [ 1466.672583][T18629] veth0_macvtap: entered promiscuous mode [ 1466.719593][T18629] veth1_macvtap: entered promiscuous mode [ 1466.772942][T18629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.792213][T18629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.948136][T18813] Cannot find del_set index 49151 as target [ 1467.460530][T18822] x_tables: duplicate underflow at hook 1 [ 1468.086191][T32147] Bluetooth: hci5: command tx timeout [ 1470.166171][T32147] Bluetooth: hci5: command tx timeout [ 1481.659890][T17609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1481.670061][T17609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1481.678684][T17609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1481.687057][T17609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1481.694626][T17609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1482.916019][T32147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1482.934747][T32147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1482.943106][T32147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1482.952194][T32147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1482.962731][T32147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1483.118375][T17609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1483.132945][T17609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1483.142417][T17609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1483.156186][T17609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1483.163858][T17609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1483.232515][T32147] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1483.242947][T32147] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1483.251424][T32147] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1483.266632][T32147] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1483.275161][T32147] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1483.767085][T32147] Bluetooth: hci4: command tx timeout [ 1484.669506][ T1302] ================================================================== [ 1484.677623][ T1302] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x580 [ 1484.685559][ T1302] Read of size 8 at addr ffff88808c807940 by task aoe_tx0/1302 [ 1484.693121][ T1302] [ 1484.695470][ T1302] CPU: 1 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1484.695495][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1484.695509][ T1302] Call Trace: [ 1484.695520][ T1302] [ 1484.695530][ T1302] dump_stack_lvl+0xe8/0x150 [ 1484.695563][ T1302] print_report+0xba/0x230 [ 1484.695587][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1484.695612][ T1302] kasan_report+0x117/0x150 [ 1484.695636][ T1302] ? lock_acquire+0xf0/0x2e0 [ 1484.695663][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1484.695693][ T1302] sock_def_readable+0x1cb/0x580 [ 1484.695717][ T1302] ? sock_def_readable+0xae/0x580 [ 1484.695742][ T1302] ? send_to_lecd+0x26d/0x830 [ 1484.695771][ T1302] send_to_lecd+0x3e7/0x830 [ 1484.695804][ T1302] lec_start_xmit+0xe52/0x2890 [ 1484.695840][ T1302] dev_hard_start_xmit+0x2d8/0x870 [ 1484.695873][ T1302] sch_direct_xmit+0x251/0x4c0 [ 1484.695912][ T1302] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1484.695939][ T1302] ? __dev_queue_xmit+0x277/0x3890 [ 1484.695965][ T1302] __dev_queue_xmit+0x1550/0x3890 [ 1484.695992][ T1302] ? __dev_queue_xmit+0x277/0x3890 [ 1484.696018][ T1302] ? __lock_acquire+0x6b5/0x2cf0 [ 1484.696047][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1484.696074][ T1302] ? ref_tracker_free+0x693/0x840 [ 1484.696118][ T1302] ? _raw_spin_unlock_irq+0x23/0x50 [ 1484.696150][ T1302] tx+0x6b/0x190 [ 1484.696168][ T1302] ? __pfx_tx+0x10/0x10 [ 1484.696186][ T1302] kthread+0x1e0/0x3f0 [ 1484.696220][ T1302] ? __pfx_kthread+0x10/0x10 [ 1484.696248][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 1484.696280][ T1302] ? __kthread_parkme+0x7a/0x1f0 [ 1484.696315][ T1302] kthread+0x388/0x470 [ 1484.696352][ T1302] ? __pfx_kthread+0x10/0x10 [ 1484.696379][ T1302] ? __pfx_kthread+0x10/0x10 [ 1484.696400][ T1302] ret_from_fork+0x51e/0xb90 [ 1484.696430][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 1484.696456][ T1302] ? __switch_to+0xc7d/0x1450 [ 1484.696481][ T1302] ? __pfx_kthread+0x10/0x10 [ 1484.696502][ T1302] ret_from_fork_asm+0x1a/0x30 [ 1484.696543][ T1302] [ 1484.696551][ T1302] [ 1484.894843][ T1302] Allocated by task 18702: [ 1484.899281][ T1302] kasan_save_track+0x3e/0x80 [ 1484.903991][ T1302] __kasan_slab_alloc+0x6c/0x80 [ 1484.908866][ T1302] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 1484.914698][ T1302] sock_alloc_inode+0x28/0xc0 [ 1484.919408][ T1302] alloc_inode+0x6a/0x1b0 [ 1484.923768][ T1302] __sock_create+0x12d/0x9d0 [ 1484.928425][ T1302] __sys_socket+0xd6/0x1b0 [ 1484.932876][ T1302] __x64_sys_socket+0x7a/0x90 [ 1484.937591][ T1302] do_syscall_64+0x14d/0xf80 [ 1484.942207][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.948132][ T1302] [ 1484.950475][ T1302] Freed by task 18701: [ 1484.954558][ T1302] kasan_save_track+0x3e/0x80 [ 1484.959260][ T1302] kasan_save_free_info+0x46/0x50 [ 1484.964341][ T1302] __kasan_slab_free+0x5c/0x80 [ 1484.969135][ T1302] kmem_cache_free+0x187/0x630 [ 1484.973922][ T1302] rcu_core+0x7cd/0x1070 [ 1484.978195][ T1302] handle_softirqs+0x22a/0x870 [ 1484.982996][ T1302] __irq_exit_rcu+0x5f/0x150 [ 1484.987623][ T1302] irq_exit_rcu+0x9/0x30 [ 1484.991899][ T1302] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1484.997570][ T1302] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1485.003572][ T1302] [ 1485.005913][ T1302] Last potentially related work creation: [ 1485.011649][ T1302] kasan_save_stack+0x3e/0x60 [ 1485.016353][ T1302] kasan_record_aux_stack+0xbd/0xd0 [ 1485.021590][ T1302] call_rcu+0xee/0x890 [ 1485.025694][ T1302] evict+0x95b/0xb10 [ 1485.029612][ T1302] __dentry_kill+0x1a2/0x5e0 [ 1485.034235][ T1302] finish_dput+0xc9/0x480 [ 1485.038601][ T1302] __fput+0x691/0xa70 [ 1485.042619][ T1302] task_work_run+0x1d9/0x270 [ 1485.047234][ T1302] exit_to_user_mode_loop+0xed/0x480 [ 1485.052548][ T1302] do_syscall_64+0x32d/0xf80 [ 1485.057168][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.063093][ T1302] [ 1485.065441][ T1302] The buggy address belongs to the object at ffff88808c8078c0 [ 1485.065441][ T1302] which belongs to the cache sock_inode_cache of size 1344 [ 1485.080063][ T1302] The buggy address is located 128 bytes inside of [ 1485.080063][ T1302] freed 1344-byte region [ffff88808c8078c0, ffff88808c807e00) [ 1485.094077][ T1302] [ 1485.096423][ T1302] The buggy address belongs to the physical page: [ 1485.102950][ T1302] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88808c806d40 pfn:0x8c800 [ 1485.113056][ T1302] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1485.121574][ T1302] memcg:ffff88808c807e81 [ 1485.125834][ T1302] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1485.134360][ T1302] page_type: f5(slab) [ 1485.138372][ T1302] raw: 00fff00000000240 ffff888140413dc0 ffffea000167c610 ffffea0001928a10 [ 1485.147063][ T1302] raw: ffff88808c806d40 0000000800160011 00000000f5000000 ffff88808c807e81 [ 1485.155676][ T1302] head: 00fff00000000240 ffff888140413dc0 ffffea000167c610 ffffea0001928a10 [ 1485.164379][ T1302] head: ffff88808c806d40 0000000800160011 00000000f5000000 ffff88808c807e81 [ 1485.173082][ T1302] head: 00fff00000000003 ffffea0002320001 00000000ffffffff 00000000ffffffff [ 1485.181780][ T1302] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1485.190475][ T1302] page dumped because: kasan: bad access detected [ 1485.196936][ T1302] page_owner tracks the page as allocated [ 1485.202670][ T1302] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 237552177847, free_ts 237230883395 [ 1485.225969][ T1302] post_alloc_hook+0x231/0x280 [ 1485.230765][ T1302] get_page_from_freelist+0x24dc/0x2580 [ 1485.236342][ T1302] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1485.242176][ T1302] allocate_slab+0x77/0x660 [ 1485.246712][ T1302] refill_objects+0x331/0x3c0 [ 1485.251419][ T1302] __pcs_replace_empty_main+0x2f9/0x5e0 [ 1485.257001][ T1302] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 1485.262854][ T1302] sock_alloc_inode+0x28/0xc0 [ 1485.267566][ T1302] alloc_inode+0x6a/0x1b0 [ 1485.271927][ T1302] __sock_create+0x12d/0x9d0 [ 1485.276548][ T1302] __sys_socket+0xd6/0x1b0 [ 1485.280992][ T1302] __x64_sys_socket+0x7a/0x90 [ 1485.285694][ T1302] do_syscall_64+0x14d/0xf80 [ 1485.290309][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.296227][ T1302] page last free pid 11258 tgid 11258 stack trace: [ 1485.302746][ T1302] __free_frozen_pages+0xc2b/0xdb0 [ 1485.307891][ T1302] __slab_free+0x263/0x2b0 [ 1485.312342][ T1302] qlist_free_all+0x97/0x100 [ 1485.316955][ T1302] kasan_quarantine_reduce+0x148/0x160 [ 1485.322441][ T1302] __kasan_slab_alloc+0x22/0x80 [ 1485.327319][ T1302] __kmalloc_node_track_caller_noprof+0x493/0x7b0 [ 1485.333759][ T1302] kmemdup_array+0x3f/0x80 [ 1485.338208][ T1302] bpf_prepare_filter+0xd6d/0x12d0 [ 1485.343354][ T1302] bpf_prog_create_from_user+0x2c8/0x440 [ 1485.349013][ T1302] do_seccomp+0x79f/0xdd0 [ 1485.353390][ T1302] __se_sys_prctl+0x382/0x1a60 [ 1485.358199][ T1302] do_syscall_64+0x14d/0xf80 [ 1485.362810][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.368726][ T1302] [ 1485.371068][ T1302] Memory state around the buggy address: [ 1485.376734][ T1302] ffff88808c807800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1485.384818][ T1302] ffff88808c807880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1485.392896][ T1302] >ffff88808c807900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1485.400978][ T1302] ^ [ 1485.407148][ T1302] ffff88808c807980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1485.415233][ T1302] ffff88808c807a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1485.423314][ T1302] ================================================================== [ 1485.431407][ T1302] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1485.438627][ T1302] CPU: 1 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1485.447673][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1485.457759][ T1302] Call Trace: [ 1485.461065][ T1302] [ 1485.464114][ T1302] vpanic+0x56c/0xa60 [ 1485.468148][ T1302] ? __pfx_vpanic+0x10/0x10 [ 1485.472725][ T1302] panic+0xc5/0xd0 [ 1485.476495][ T1302] ? __pfx_panic+0x10/0x10 [ 1485.480992][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1485.486144][ T1302] ? rcu_is_watching+0x15/0xb0 [ 1485.490969][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1485.496121][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1485.501270][ T1302] check_panic_on_warn+0x89/0xb0 [ 1485.506274][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1485.511438][ T1302] end_report+0x73/0x180 [ 1485.515710][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1485.520867][ T1302] kasan_report+0x128/0x150 [ 1485.525416][ T1302] ? lock_acquire+0xf0/0x2e0 [ 1485.530051][ T1302] ? sock_def_readable+0x1cb/0x580 [ 1485.535197][ T1302] sock_def_readable+0x1cb/0x580 [ 1485.540173][ T1302] ? sock_def_readable+0xae/0x580 [ 1485.545328][ T1302] ? send_to_lecd+0x26d/0x830 [ 1485.550050][ T1302] send_to_lecd+0x3e7/0x830 [ 1485.554600][ T1302] lec_start_xmit+0xe52/0x2890 [ 1485.559419][ T1302] dev_hard_start_xmit+0x2d8/0x870 [ 1485.564569][ T1302] sch_direct_xmit+0x251/0x4c0 [ 1485.569370][ T1302] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1485.574684][ T1302] ? __dev_queue_xmit+0x277/0x3890 [ 1485.579827][ T1302] __dev_queue_xmit+0x1550/0x3890 [ 1485.585020][ T1302] ? __dev_queue_xmit+0x277/0x3890 [ 1485.590173][ T1302] ? __lock_acquire+0x6b5/0x2cf0 [ 1485.595170][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1485.600595][ T1302] ? ref_tracker_free+0x693/0x840 [ 1485.605670][ T1302] ? _raw_spin_unlock_irq+0x23/0x50 [ 1485.610905][ T1302] tx+0x6b/0x190 [ 1485.614494][ T1302] ? __pfx_tx+0x10/0x10 [ 1485.618675][ T1302] kthread+0x1e0/0x3f0 [ 1485.622784][ T1302] ? __pfx_kthread+0x10/0x10 [ 1485.627406][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 1485.633242][ T1302] ? __kthread_parkme+0x7a/0x1f0 [ 1485.638218][ T1302] kthread+0x388/0x470 [ 1485.642320][ T1302] ? __pfx_kthread+0x10/0x10 [ 1485.646971][ T1302] ? __pfx_kthread+0x10/0x10 [ 1485.651591][ T1302] ret_from_fork+0x51e/0xb90 [ 1485.656261][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 1485.661401][ T1302] ? __switch_to+0xc7d/0x1450 [ 1485.666113][ T1302] ? __pfx_kthread+0x10/0x10 [ 1485.670755][ T1302] ret_from_fork_asm+0x1a/0x30 [ 1485.675577][ T1302] [ 1485.679227][ T1302] Kernel Offset: disabled [ 1485.683562][ T1302] Rebooting in 86400 seconds..