last executing test programs: 1m42.767602875s ago: executing program 3 (id=3372): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2], 0x1a0}}, 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000850000007a000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000850000007a000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000101000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500000099"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@broadcast, 0x4e20, 0x0, 0x4e22, 0x6, 0x2, 0x20, 0x80, 0x3b}, {0x0, 0x5, 0x2, 0x3, 0x5, 0x9, 0xffffffffffffffff, 0x7}, {0x2, 0x9, 0x7, 0x9f}, 0xfffffff7, 0x6e6bb2, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d2, 0x33}, 0xa, @in6=@local, 0x0, 0x0, 0x0, 0x89, 0x2, 0x6, 0x55d}}, 0xe8) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0xfffffffffffffffc, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0xfffffffffffffffc, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3801000010000100feffffff00010000ff0100000000000000000000000000010a010100000000000000000000000000000107144e230005000000002b000000", @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d4ac14143a000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f0000000004000002000000000000000200000007000000000000002abd7000053500000a0001002000000000000000480003006465666c617465000000008acd00"/240], 0x138}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3801000010000100feffffff00010000ff0100000000000000000000000000010a010100000000000000000000000000000107144e230005000000002b000000", @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d4ac14143a000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f0000000004000002000000000000000200000007000000000000002abd7000053500000a0001002000000000000000480003006465666c617465000000008acd00"/240], 0x138}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) 1m41.679789655s ago: executing program 3 (id=3374): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x4, 0x0, 0x25ce1832, {}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "125f627744144f70"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840) close(0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1, 0x9}, {0x35, 0x0, 0x0, 0xffffffff}, {0x6, 0xff}]}, 0x10) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000001a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4c041}, 0x57472c729dea8b8c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="580005000000100028bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="0c00018005000300030000000c00018005000600010000000c0001800800010014000200100001800c00048008000100050000000c000180060002000e000000"], 0x58}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r5, @ANYRES32=r6, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000017000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0055090100000000009500000000800000bf91000000000000b7020000020000008500000085070000b70000000000000095000000000000000000000000004c0dfc6046352b0a942de95d7ff3330cc75c2192fc891cdbfbc50b9da36619488fa852d8df4d8d3bb685b42f483f3b806b810026c810e60231e24e4d"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r9 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000006c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x401, 0x6, 0x210ef38b, 0x2, 0x3, 0x1000, 0x7, 0xdf, 0x7f, 0x1000009, 0x80000000, 0x2dd9, 0x80000001, 0x8, 0x8, 0x756c, 0x0, 0x5, 0x7, 0xb, 0xd5c, 0x8000001, 0x9, 0x10, 0x7, 0x8000, 0xc6be, 0x0, 0x7, 0x7, 0x9, 0x9, 0x81, 0xc0, 0x9, 0x7fffffff, 0xc, 0x7, 0x1000, 0xa0, 0xfff, 0x3, 0xfffffffa, 0x5, 0x2, 0x7, 0x81, 0x9, 0x10, 0x4, 0xc, 0x800, 0x1, 0x9, 0x4b9e5199, 0x246d5d8f, 0x6, 0x4, 0x1, 0x3, 0x7fff, 0x8, 0x3a261042, 0x27, 0x6, 0xdc, 0xd, 0x9, 0x9, 0x7fffffff, 0x3, 0x7, 0x1, 0xa8, 0x4, 0x4, 0x1, 0x7, 0xd, 0xfffffffd, 0x3, 0x4, 0x2, 0x8, 0x0, 0x5, 0x9, 0x7, 0x7, 0x0, 0xffffffff, 0x4, 0xffffffff, 0x6, 0xd7, 0x6, 0x5, 0x0, 0x0, 0xff80000, 0x4, 0x0, 0x0, 0xffffffff, 0x76, 0x5, 0x7, 0x3, 0x5, 0x9, 0x40, 0xab, 0x7ff, 0x2, 0x7, 0x1, 0x4, 0x19072ffc, 0x6, 0x1ff, 0x20e7, 0x3, 0x9, 0x5, 0x5, 0xb4, 0xfffffff4, 0x2c61]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040000) 1m40.219653254s ago: executing program 0 (id=3381): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8720000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be08f8ff000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5, @ANYRES32=r6, @ANYRES64=r1, @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x24008840}, 0x40) 1m37.406160113s ago: executing program 4 (id=3384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r3, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x14880}, 0x1004c810) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000013c0)={{r4, 0x40000000b, 0x2, 0xa, 0x17, 0x6, 0x2, 0x800, 0x1, 0x3, 0x3e, 0xb121, 0x7, 0x7, 0x44d}}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r5, 0x101, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) 1m37.065006742s ago: executing program 0 (id=3387): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xff, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40, 0x10}, 0xe) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x6, 0x6, &(0x7f00000004c0)=""/6, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000000)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x48010) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x187c6cff, 0x0, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000200)=@raw=[@alu={0x4, 0x0, 0x7, 0xa, 0x9, 0xf6331de37773ac62, 0x8}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000240)='GPL\x00', 0x1, 0xb, &(0x7f0000000280)=""/11, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x0, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r6, r7, r8], 0x0, 0x10, 0x7}, 0x94) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xff, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40, 0x10}, 0xe) (async) shutdown(r0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x6, 0x6, &(0x7f00000004c0)=""/6, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000000)=0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'bond0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x48010) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x187c6cff, 0x0, r0, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000200)=@raw=[@alu={0x4, 0x0, 0x7, 0xa, 0x9, 0xf6331de37773ac62, 0x8}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000240)='GPL\x00', 0x1, 0xb, &(0x7f0000000280)=""/11, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x0, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r6, r7, r8], 0x0, 0x10, 0x7}, 0x94) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) (async) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) (async) 1m36.896206595s ago: executing program 4 (id=3388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) poll(&(0x7f0000000200)=[{r3, 0x1210}], 0x1, 0x1ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) mmap(0x0, 0x0, 0x3, 0x10010, 0xffffffffffffffff, 0x7f4c4000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x168, 0x9, 0x0, 0xb, 0x248, 0x250, 0x250, 0x248, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x100, 0x148, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@ipcomp={{0x30}, {[], 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000000100f3547e0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000200ffff0000000000000c0004000200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socket$inet6(0xa, 0x6, 0x3ff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) unshare(0x6a060200) r6 = socket(0x28, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2a0942, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000180)={0x9da2f7991aa65289, &(0x7f0000000100)=[{0x20, 0x83, 0xfd, 0xfffff036}, {0x40, 0x4, 0x3, 0x7ff}, {0x8, 0x8, 0x7, 0x8}]}) ioctl$TUNGETVNETLE(r7, 0x40107447, &(0x7f0000000180)) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) listen(r6, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) 1m36.42704829s ago: executing program 3 (id=3389): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x80000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000840)=0x4) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x4, 0x0, 0x1, 0x800}, 0x48) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x2, @mcast2}, 0x1c) (rerun: 64) 1m34.261028052s ago: executing program 2 (id=3399): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0xf, 0x5, 0xfffffffd, &(0x7f0000000080)={0x0, 0x0}) close(r1) r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000180)=""/93, 0x5d, 0x8) 1m34.077468991s ago: executing program 2 (id=3400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x24048084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) 1m32.892975377s ago: executing program 1 (id=3402): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007912d800080000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x20040080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000017bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8, r7}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r9, 0x2ea}, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000ff0200084000000001140000001100010000000000000000000900000a6fc2bc59f538244f6a54af4ba433fa8f02c5784d8bc5d18809dea9"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x98, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x16, 0x8, "3ba01c18563bed57cc44f9061c298550c849"}, @NFTA_OBJ_USERDATA={0x40, 0x8, "d9527ed44500d4ff2e347389f977ca9601c12b1e7496e393e03dae2fb85a2e49a99ca711fcd785e61910b1dd64d6e7dfd9cd47511730cc93ff15ce95"}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f00000001c0), 0x37) listen(r10, 0x0) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000040), 0x4) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800002018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70300000800000085000000a50000009500000000000000e67c010e0beef065e5bc34798f621a002068b9f6042f61cfe4960a311caa1ad8775ebc0575ab2f1c6866c39ee20a951af37c1da8c5f035cca274d6a84f669a8a3d1fd41aa324ca3111b7549dad778009875f5a72477e006b98aecf74551830ef4ec1f23e26678dbd7a704d2a2d7b63b92eb35d2236be49f41dc46196519aea65bc8ac4c0"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 1m32.221028319s ago: executing program 0 (id=3403): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3b000300010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x50, r4, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 1m30.72147533s ago: executing program 4 (id=3404): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000010000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@alu={0x7, 0x1, 0x2, 0x9, 0x9, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r5, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) openat$cgroup_int(r2, &(0x7f0000000040)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) 1m30.70397589s ago: executing program 1 (id=3405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008024) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c20000119078000000000000000000014e20000c90780100"/46], 0x0) unshare(0x8000c00) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x2c}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/4096, 0x1000, 0x1, &(0x7f0000002180)=""/185, 0xb9}, &(0x7f0000002280)=0x40) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1m30.50392554s ago: executing program 4 (id=3406): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1830000000000000000050000000800030027b5"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYRESOCT=r5], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="190000000400000004000100024418e936c8b5bd2c0c5e3c3627cf211537ecaad5d6bed11c1cf052a53cd84cb74e625a92c75beb9faadb43cc630600000000000000cb59d98997010bc588e3da7ab77c00d34d49bab8909d566d28ab334ac58e346506e882eab1c4b9dcef7c1f1713a758a6f5c8f2ac7f1dd6192faf0b0caf3e9bb524a02059b8a59843f425c5e12a3568a13bb6eb5ce6769800000000bbbee364b30000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000340), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r9, &(0x7f00000000c0)="0bcaf46ea8", &(0x7f00000001c0)=""/43}, 0x20) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) (async) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r10, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="00020000", @ANYBLOB="c78a3c8d28e8662fc0e8a8baf326b794e63764e79eedf5e9fba78318141ae668556f5eb25343089d4be15ed02680d085f3a5b47a24d06978761a37d29a5a7562cef660f42d7a1b3c0b3a4723dd89c3dcdfcb373ab58e9206fb33cbbce322c50d4faad24e1fbaed87a61de2b51c941e47174357a7b5a0def7f7b3a9823c9e1de657d09324f47da9e940f0af30e7ec599d0e1b1a45e149e03afc3268ded524ae6cfa02b1eea145bcf5bb85739d4413f2f31aa4c1750660ccf078bcd9645a9fa9398eed5c8de7785c6a435c9b0c4230a308e449ce160c1a17998f20510ad78ab887ceb37af395d8", @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff1, 0xa}, {0xfff1, 0xb}, {0x2, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1m30.389260005s ago: executing program 3 (id=3407): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r5, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r11 = socket$netlink(0x10, 0x3, 0x13) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') unshare(0x22020600) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000a6637621c6a0e01bff7ec37948fc01059be202cb573d", @ANYRES16=r12, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r13, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r14 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @dev}, &(0x7f0000000100)=0xc) 1m29.434944496s ago: executing program 0 (id=3408): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008060}, 0x20000804) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="1a9e0000000000000000ffff02000fe5", 0x10}], 0x2) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44984}, 0x8005) getsockopt(r3, 0x0, 0xc, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) 1m27.042548035s ago: executing program 1 (id=3409): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.numa_stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xf, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x54, '\x00', r0, @fallback=0x27, r1, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0xfffffff8, 0x3}, 0x10, 0xffffffffffffffff, r2}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x8, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/148, 0x2a, 0x94, 0x1, 0x8, 0x10000, @value=r2}, 0x28) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000400)={0x0, 0x2, 0x5b42, 0x8, 0x1000, 0xfffffffd}) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="3fe748a19402e115c9e02142043422e2c0c416aa290b82ec85ae7b6c792fef2a701453b3cb40ff6b0a5d63be2e0f78da8d97392a6abf2b7cffd83fd7d8fc0569fc4f185763c545601d5e04386d3a8e18f58b3322ecb6e3996d08310ffa241d2075ed8c421d2bd3ea090f08f79f391a94741d75961667e1e37db012ad0fdb7c55322702238ec907a0aab417c41c108cc74fe3b87ad94f960bf51f919b637b92aa15d44064986025a7c46e8916694d", 0xae}, {&(0x7f0000000500)="1866fe", 0x3}, {&(0x7f0000000540)="ba1e863deec3c65b8c189729c6caac88d2e3a7f2e14da9464cbb6606ed7e40e625aa3f97f912faf52396bfe681f5d61cdddb4d3d8190dcafd09ec14774f73bb4dd22b2ff1e7b47cf0b3e10188c55225b00a1f5b451850bf704342d79d7f826d4b6c1797a916d648376d174420af78fc622728591b86a6b964387fc1e644908df46dcbc03f06b9d5f7886e1f121931dff51f36b2ea9fb8b850157ea5e7894058b37298f267feef54fbf554cf319f8c7edd516ea301f1656ab8f8cda0d0e02f4e57592318a5c46d5a62fbe75afb45bad3850be1f3787ec7b58c4d877eb736eb23fb5650de1a3b56afd05fce7d8ed07", 0xee}], 0x3, &(0x7f0000000680)=[{0xb0, 0x199, 0x6f0f, "074d7de673aadf4cc16e423ba5dfbbc7b700a2297448d662e1ea73f1a0517b55a6fb16f22008907cafd055a0c0a0d306690cb15c8cc7b796fd96154d71c97e28fe7263eec9f71d91bed648e368b6705bc3e298b7a210cacf509324ab546e419fde86050b9740859a050c0397a2061b818cf1619575903357be8643bebf66ff02c509e9d0d402f01d7ed51e00ed617d0c5faa07f71bddb699f52bdeb606a8"}, {0x1010, 0x0, 0x6, "1b55184ad22bb311d80f846cf71c247ab473839257aa4e06801ba4e08ed84f015fefd2f6f0b86cbeaf34c7f8a01a73862a3828fdf60f84f2e55514f1ce4e39b4135d1469464edd4482f2902f0ac5a4ea9e8668918b5dcd99c3d2cd0214ed1efb4347186d63e3d822e2f203e840f6b4a352c0ecb78ccaa33455d550776b652be98a1ea6b716986532c265d5d88269cc46db4bc0513b3681fcb7c630cd2c50f6233edabcfbdfe875f57166062ff691b2ac916669a5a434211e6fb14fcbd7957cd8650752474f8e4924d3c0729d2d04daec32aed639ff2e7c8115f8555c12292ddb631e0cfce78fde75d988921c77e75833b340b2ed80f9532eb54607346a0cbb502c7fabbbf9aea423586ef2627784194f2cdcce93dc3f8f3787aa83c676eeabea9d26f8144ac215e5490818c344d8e12f483cacd6e65c56cb363615b919343872d81da356a7f29a0af33c3f736a6353c4ec3cec3ae834442d04d83f8448028c92c0b57099b0a2b3782950adda1017e10370d579a2c9a9b97e51a068b39d9ca4edf310df233f7846fcf92e4c3beada186b9ef02c875acc026238be4daec6896fe4a63bc822fbb7d9dfdc2d9700bf54a8342ba3450199e736f3dbe410e67cb8fff5e83645246d5c34c348e3f9262db97ff0ca0559ce9cf6895f16f3c8021addd4308cf24ea940693a2ddda2bf0cf20fbf4329d5e88b25e5014263a380afad36bea1161cf6234843dbebe65857d204bb9fe0fc80eeec5bd834aa2eefae77fc7c911de7cee2ea156831f1ccfd3ab71d3575efa95c8df71610cbffb61e0b08e0c3adff2f369d29e245075ec35214cc520e5f1628dfc6ccf0d345d5cfdcdbcb66e5d96e190587be669b461c3c884436a16d7c40054347c844ffa83494cd303cb35f1841f343cb695b356868b2199908ce1023ce251c0ed633c36a2b510d201b89238e2bc8b35972d638118455c8ed57736a740d6a0fcc547fc8509cb1a92faceedd4fec7b4410a9e5720918e6dfcd51dd315b52b5d4edd2ee10918999995a658b58a20a0e70bd6f6602294bc5ebcb4a6ce623b07c4d4489e0c266f2f30d6fec5de833fe1de5d0c7739bdb72a86ad3774060e34f077fc19b576a624a9c35232e68809404e74fc83e7ba4fc076aa08ddc7cd769c3cbbd08e21892ea46e921594ce04b11d80db6597587f585a588483a82f039f6613fe2241d223574bda4cb867ed80e5e8b96d49ac07b95f69e43c13f524f8035064be79964fef6d2cdc7c04ebb244d581967fe58928a5ae5f23cad907514948f617d9f1ab2c6b1019f9fc8d2b23c0683fbecc972b6c8cece5e6791808a7fdde77a67b5ee41a71a65155d944c365a00fc34c3dba97cf6334179ed5f843fc3d0e1c0c1f4e6d9529ef05bb94e926aed811e4f6295f82d4b350c8ab8e5d5443fa3c441fa3af8183c6865610a139a91d4dbcbcaec446f3f41b9a1421f8b0e2f40051c5ea163e76aaea98fb657b851502f4055cb864da32ff88b2daa2d955c51e7e7705e0a411d6434050413fb32a3a8b95108f5b51a67484c53bfc8e8a92e4b5ca08e3aaef5417e5a8837e94808f8e8b8aeda0d7d36056d61fd215a15fc9d8a3978ee5b0c84c1f698b03f258df2393bcfe09e1cd52ed1aecc2fe79fca01776cf19a3c0176f5f56ea255599b1047b57139c294be971ac8fdf8cd0fc4f1b39425c19c1dabdbb29663890ea39d3b425ce76f584c0180ef7354dded37a29da2caeda3d74102770ba3ed7b9f67d6471e9b389fdc11d4048d5e410fbb06a3745257607b1050446b716c2bf1b6605e98d8015f68cdce8cf453adce504dedba29f76a0dfc49e936d9b898ef08915653ec4e38fc0d90f198a2b10cccdcb8c27596240a2e818b920ba07420923f8915c74488fae7a98af27fcfc7b083675d51c9ffc67d0f8edd018443faa3480bb245b3d658958b338f9eac207ebdb41a36fbe0531b7f39489bfee28c3fd25cd7c348bd90382a050bcd7cd6aad4c23c9a94b8a9c61bcfb51338a46adadd10ea41b775d1c0234e58b8027249b7cf6a7d6428fae1e44acaa5aa2f23d3a0bc38ea336c8ab48f78316d342028b480767211f880ace75f7a95ac68a45e97e91953714ab0bbfe62eb5def3bfbf1a900cf9e2d476092a483d893b0cd2e3e8f741e4024f3105aa56b47049467fe0c3c0dde2735fabf14c7ef1962803c50483641e29554e9b6624a4f762ec50ef97dad1182348f23490b43b2718efccdee51b38c898b5f6acc137bc4298ef7b09fdbf5a099a16bc74c14cdad19cd3a8a6ecbecb9c8dfedecccbe5bdd995852eb5aa7edc8b239e401acf4643fe587d69150ee401007e86c5ea9ec5298a56caf799e67842f306ecae8056e7653ec8912ed7c2c8617c739f6429ea8b3dc6ac389061b2e5a8442265d3d007f5e7aee6fabf8473c213ff84ec5059c1143eadd338354853da10aa62999e854c6a0b02d036ae5237b3538416c0ac137a63ad998b6658d07c133c6bac820a1324f8500da584f8977fc679ef63e4183a1fca2ec3949cc7261edd6aa3c1b38f202d44c59006cc63084aae7efa341b0439d5d500a4b01d2d98951c826b53672412159ffec1a64d19c4ffbf5b8b570b02f8a2053614ea92ed8dec35541eacb9a1a717087cd1b8a0a0700e346660cc5922127aaada5ae78350759fabf406696303ad987e75348a7559bd49081a661a2417658ffe1b277e2956682e891f11cd3c424201f8276a2d3ed3b0ca908f950c3ae54fdccb2fe4ed3339ddffbfc4ec84ba0549368a7795a7a5266089f7154288a310f82b456b6107aa33b97f35c9ffdad68fb017c655f6a167b1f5267c9e1dc02015c301256d8db320e3862fa250afb7e069f79e16c55a84ec99e31719b11d6a509d716030fa94f331051fcc1b4360873a3697d82e1edb7def4fc96358d92e2274fa47db764c48a6ea1e659382a5e62b43a31f084bccba0f8697738203ae179278122fc1fbceb4a0a9fcc8df8fbc556e3b711c12fa32bf5fe775c166d3774810fbeab7517dcced2aff108143df1248d42bf5236ef9ac6082fb58550903ca2d5bb80e69d24d65e810db54e1981a204daf1c58b829bb2524173af83b736751b7d7b3d91379be4ac059a838d16024aa19abb8bfb69ca79cbcb885ea168cbb4c42db5376d12ef4540d2ad65ac0ef668248e0d8cdd04e7f33b3ee60bf329d70364886a0b12e853150acb19901a86d797fa4fa7eb06caa7654362ed1f8a64e911ed43f2c0a5472cbed6183155e5cd8bf5dd3834e20a57757dfe18fb2b578e1e00ac85cd793f7bc16dbe203a327939374033bc7c10a36b1d6791c8f554c4618e716bca6d7672d72b5e5581058571396ce6f5a99ac8b37182209644999416c9f597f1039766580e641bdc75c271d84aec187390b901c180c170dd3b99e076b2fc2c95663e865caf86fae6c7db093ed718b6f2d848fda1409d10f0c352a905490e3a57748b2150abd5fc00fc6f4c8d470d7760e61796af01bf69ff3610a284705c6857662dddb2a5167028440090b89c280b1b5b5df011f4fa438de827483a3c909ccac7cf83e4dde5996b1dd34d8edcbbc920374c8e2b326bcab7deb8549dc38ed1e7bdfefce9d37da5b316968aff856037da38e446540defa618516a985e843ee01d68694364bead2c8e78bc36c34bebbdfe59edc97abce020d7d49c5985e003181d36bdd941b5c2f642c4d72db7be87986dead10cf053438006a44ba4b7e2d47dbd9ab271dfb7812c70ca54eb91d87d2c9f64a701e4dbef51d2bb69be070ed87ffa9bdf5e7f79e486fa4bdc7f3aafdd5a8e4aa06f76e16b519ade3153415f11fa30195a6bfac1fc885afa621f37fe45d3913b2c9de2804f01f2ff73cc63fb7e81f96fa5c20bc6de8e3caf2718b6c16281f699257f13a240dc7958f986e048d9cae1d6db448e35cb58c49b9e7561bcde9577bb8c5b067f8f38dbdfcc5705c452d6469c75dec6c61617d05262456b9f0e306ba248f965b44c48703c7538f3ca3a25659070515943533079c5b617a655ed636e2af447484bb2e86a7483b0609b4e4f45686400b1ced1ebebf165b6e05d78fe68c422c3a4e81b055830e46192a0d074dc60ab76541c111a9938fa307143d8b2b5f27dbcc955357f456bf6ac79afd92ab16ddee77ca548ad720deee3f83f4e0b3b77ab82c99ce0754eefa0a0e0c9214924fbc01246a13fc1d3a064a28cad4607a4cae20edd7ce193cdf48e79e82c9536d729a185ab479b2c76b4704b165013f211b2716742cc36bbc9d5909dcbb2eef7e8351f822e9a9c26a45561385df9ffcba229d37c842b46bc1b1745a3bf6ff6360a03dddd07dc7c90344a2c5a9e123cb2bc5e3224e08530164de0f4e6b6c70865969980fb9f7b24758c71cc2dd41bd65680c28182465386e118a00ef05337f1b72a3eaed8242ee51d063ec1118d1c646f8792f790321c9989c9a446027a6e2e5fbc67c10b97218dcf1cefbbe3e7f3d8aaadc0a7ff8344c32a6b04d058b5b023f61a1f35e27b7681c3f801a2b9f7646cd7839f3658a35dc620820f6674c4fc586b42f850ec388b93233a251d575f68618f33f508b0668a2246651e441b85612b04a2563cc2c55ea9525d21df20516558359b7e2a86609a986ee7e0737759eecf0e8df011f0e027533107a554ca4da80c7c4188a496649aec3704d6a8a3986ff330e5fd94cd3d80b4a1b77e367ca20443877136a0c05d57dd6e8fa7178f551c94352262203debbe136cc674f9aba81949feffbc18939edf589ecd86f7ac76ade5b82c5b070fb812ac4b7cb7166fac32cc6973b799b558b466c1fdd296c6d5dff2aa0bfc71bd5749336adb2ce9b1a1899e9a02056026bfe369fe0b9127aeae22183d3b1d120043d7743cf0221b77ada21391210f677d2e2d5feb377bb1025446b3b240e89fe8277448b211e7c546d13cfbc13064bcf4d45390ec541e87aff72fdc3eefde6b5dcd78a5bc7f5f4fb65e5d13e1f61f130517fbdeeebd53cd58cf2a8f09a27a66a72ca9480b7cd6c36bb7a8fa0b863973da8dc09da121a74635946ef13178029beb37a45bbfd768793450de7697fbc80b714a1f13819646f71ea9383b1ab113bb4b07f9835422fff32de0690fa5e893c9630a227add425612c45d961031341e3e472e3b05fdf32ebf54a6767988e200d78c3afecec762c15bd6dfa368d66c5094a191d4449a0b292c34d91292af083d215143875f804acf12a078a9ee35338201ffa2e458f670d8bffbca84789800bc9f5954cab88dddfe136fae9f593ecfd0e78bab144b652af98c3e1eb9b53a453779d204c0fd125657e940b5009bb728f17053166222acdb0f016fa2cfda89fe97ddefa191a311c050b8046681532e002c018f7c98bed6f05f0dc4bd3c0213a9d9d20904f2c9ca1ae24a87680f133d04d626ab6520e4d7c73effa69df5fd252680b202765aeac1de1c83fe957ce319ee378ad1d0f47171a275664984016dd799db991ce6a0686b3495774d1cb0789c96f984a98a5d5381839721606c6a1352bad8b4a3e11a720ad39cd157c499a65e8576ce140ceea08546993efddb232bda0c0c10f2f86f43d34223b982516d48b411297b0c1057f426f5447bbbb9c2a8edf14c169fdffb82267d678535a9af3da5f407cc576b00153544f46ec0a17b08ccf56985404012d54938c0c0621e1163c037b6f5d01c382ad93e40088bc9549b9ebd88182f377f602d3e02beaf91ba0d16a7119721c615ce9333dcc765a67913743d67aa2fbddb84f651a262610a70ee42fc49c1fa7e4da4dab2e0291cc363d044"}, {0x60, 0x111, 0x2, "eef6d57a34ed0392dd807a1b166a212dd2e25ca95dda38023da2cdaee22ec470ce3574130b0f51ff83c5c52fabe441f7012ef517bbfed60ad4116a28ff7529cacdb5ce5e9b8b5455c4ec473dda4a73"}, {0x48, 0x10c, 0x1000, "207036cb3eb8e735163ddcedc85817eb7bc366d3355099ec60133148da8d852f8a34377c0808d851caf3dc0c309344dbe5f87655"}, {0xd8, 0x1, 0x1157, "78f69fcb4e630a51741c8a0b171484ade17264f49975b0c06cfe580838587cb975a851e08135b889cf20be88bb139076d105fdfe88340a530dd2466aeceb7fa3ac92474c7604ffb8e34425f355440941aef0dee0811ac0ab3479751bc6ba7b60fa319c20df1d5f1bf8351214e15d20a3e847f6bf90c6b0033384e1817f111e2cd7bad9323864b0d85e063a91b93b8b84d38ed1358b717627b5e9240988b88efac5c78b7e6a3e0954c0d5fcb53a324effc7b328706babcc83c20b07583a4632ffb966f64c669f1a54"}, {0x1010, 0x112, 0x5, "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"}, {0xe0, 0x10d, 0x7, "1c76c39c2c781afbc23785412ae4affc369d15ce43138a61ec9c15124e4ba040f340a6e8fa42bf34afbf0f47bc0a1044805d3688284007215f63875d7c81759ee3ee931609127c9719da4ddbe6c13a234830fb6c122e7ac25afcbd3109ed2c6e9eb58a86044549506051da63e1cba4e7d0e47b00d88bd421c4366aa78faa33ff7286b87949a2f9144258999ef2632f7a0b35e06fb5227ad65613324bb8e8d09e7ef66ef1f6044c632de643f8bea22722dcd4a3594ad8f3d6b2227eff43eb61d575d3b5ac0af9d7463946"}], 0x2330}, 0x4000090) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40014a}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0x98, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x156}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1b381fef}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002c00)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000002d00)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000002f40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d40)=@updsa={0x188, 0x1a, 0x4, 0x70bd26, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x0, 0x4e20, 0x8f2f, 0xa, 0x80, 0xa0, 0x2c, r6, r7}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x33}, @in6=@empty, {0x1, 0x4, 0x2, 0x7, 0x3ff, 0x9, 0x1, 0x6}, {0x200, 0x7, 0x7, 0xab38}, {0x7f, 0x2, 0x7}, 0x70bd28, 0x3504, 0x2, 0x4, 0x5, 0xd8}, [@proto={0x5, 0x19, 0x33}, @policy_type={0xa, 0x10, {0x1}}, @etimer_thresh={0x8, 0xc, 0xa}, @algo_auth={0x79, 0x1, {{'sha224-ni\x00'}, 0x188, "97462d138418d9805e80249293168b63db41d43c2a7a92445ea2fcdeb7fad1f62ef75d521caaa9780058dd284f8d66c712"}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) bind$bt_hci(r2, &(0x7f0000002f80)={0x1f, 0x4, 0x3}, 0x6) r8 = accept4(r5, &(0x7f0000002fc0)=@xdp, &(0x7f0000003040)=0x80, 0xc0800) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000003140)={r5, r8, 0x9, 0xb4, &(0x7f0000003080)="5c4234897827eef94dc7bdfb0d97084b079dbe4353a6e57fcf6d73c92aedc80989e9bcb97fb114fbe860df358a142a9f53ff99e5e279e87c7bd60bac7430566341888e6f5b672a8bb66769ed353242e3c8ea29d7cd0d73efb4a6e03cd4b7752adf9ab20d2813b6d16ec8c9d9fa031fc1e607f3d8b66ce0b1b84a4ee11de9b1e7585d10e8f4b3d86408131bfbfd8a13eda9ebe5dc055fe83de7f27bfc4e3f7b74f9605d4f7fb32f0bca13bb4faa9b9795c2bd9a8c", 0x1, 0xb, 0x5, 0x1, 0x4, 0x3, 0xfff, 'syz1\x00'}) r9 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x28, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000003300)={@rand_addr=0x64010102, @empty, r0}, 0xc) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003340)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r10, 0x40085875) sendmsg$nl_generic(r2, &(0x7f00000035c0)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x1b4, 0x1d, 0x20, 0x70bd2b, 0x25dfdbfd, {0x5}, [@generic="462d133a0174f2a7a1644a6d0120f77a779ad42b2afc7efdab15c363464aea97882800e338d02a547f98ad74", @typed={0x4, 0x68}, @nested={0x67, 0x2f, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @pid}, @generic="02eca2ce49c6dc5f20093174aeff5b59059fa7e50c1cdd9925e17c38f91b8c0affbd4fe171022ee3c3e6637afbaf8e9e45efea3574745f27ab98d3ea244c1c93c7b4aacc13974ce96ed0e51de8fc366d08c186765d657954856a0d"]}, @generic="262a4ca10af57d25dc3e49779f90dec3a7f4ea5c705523864329f6c7842da235d9712bcb1f6ee28a4e270893ce2892311ca40e3002c2439a87cd4ef1524b33e46b34cff4832b52f9a9638f6795d14229ebde6364c4410f0c5c9d9055c290e44e0ecbf000d46a0d2dacb97d9c1554d44c0b1f0478092687be4efd52df7deade526835691b3c1a4e0e1f2be56d2a5851b7284a239fdffacc7274156d4707f4bc", @generic="23e889a14187521e4adfe09e106062d4e0b63c41d8ae6084a66d0f5daad9b8ceb3b01fd82c44c17811fbb6b61861abe6ec9b2e4664562d776ecdf6affaca924ee51822fb9548b712f9d920ac0b57de039eb145c1f8c9c5d33cff41a9f7ec9e403c8ce46999e838135a"]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000088) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003640), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000003780)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003740)={&(0x7f0000003680)={0xbc, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x8}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x122}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000037c0)={0x0, 0x0}, &(0x7f0000003800)=0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003840)={{{@in6=@local, @in6=@mcast1, 0x4e23, 0x0, 0x4e23, 0xd3c, 0xa, 0x80, 0x20, 0x2c, r6, r12}, {0x2, 0x7, 0x7, 0x2, 0x0, 0x1, 0x80, 0x80}, {0x0, 0x5, 0x10, 0xb}, 0x200, 0x6e6bbb, 0x2, 0x1, 0x3, 0x1}, {{@in=@remote, 0x4d4, 0x3c}, 0x2, @in6=@private0, 0x3506, 0x0, 0x2, 0x0, 0x3, 0x6, 0x43}}, 0xe8) ioctl$FICLONE(r2, 0x40049409, r3) shutdown(r9, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000003940)=0x1) socket(0x1, 0x6, 0xffff) 1m26.753557754s ago: executing program 0 (id=3410): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000001400)={0x5, 0x3}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000013c0)={0x6, &(0x7f0000000280)=[{0x8, 0x7, 0xf7, 0x6}, {0x8, 0x5, 0x8, 0x5}, {0xa, 0xd5, 0x4, 0x800}, {0x0, 0xf0, 0x1, 0x9}, {0x8a7, 0xb, 0x0, 0x8}, {0x7, 0x2, 0x0, 0x38}]}) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000340)={r4, 0x1000, "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"}, &(0x7f0000001380)=0x1008) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c07b4189ab186e953ec7da2bc", @ANYRESHEX=r5, @ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES32=r5, @ANYRESHEX=r5], 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x800) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x5) 1m26.681401127s ago: executing program 3 (id=3411): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b'], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4000880) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000100001002bbd7000fddbdf25fe880000000000000000000000000001ac141429000000000000000000000000000107144e230005000000803c", @ANYRES32=0x0, @ANYBLOB="ac141417"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000180), 0x0}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.482543728s ago: executing program 4 (id=3412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESOCT=r1], 0x44}}, 0x4040800) listen(0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x8, 0x22, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) epoll_create1(0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async) r5 = socket(0x2, 0x3, 0x6) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="f5dfddffffff00000000b7030000ffffff1f850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffee}, 0x44) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802021100000000000000000000000000640001000006020202020202010882848b960c12182400"/54], 0x36) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x15}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e21, 0x1, 0xcd, 0x4}}, 0x44) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88d1}, 0x4000080) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) (async) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x9, 0x6b, "7131eb75e2baa80dc9ad3fd28cfa88e343c62a56021d5c090056cff7081144333fa1fde0dbe4366d2fbdd66e2e8c7d83afc3dd392c31caf1a5394b64f8c1be", 0x3a}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x59}, 0x800) (async) close(r3) (async) r9 = socket$kcm(0x1e, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001, 0x0, 0x40000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) (async) sendmsg$kcm(r9, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) 1m26.481640311s ago: executing program 2 (id=3413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000440)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x6}}, 0x18) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbff}, 0x206c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c801) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@lsrr={0x83, 0xf, 0xd9, [@loopback, @multicast2, @loopback]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x2, [0x0, 0x0, 0x0]}, @ssrr={0x89, 0x3, 0xfa}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6af}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 1m26.470601215s ago: executing program 1 (id=3414): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x17c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1caebb04}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private1, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8001, @mcast2, 0x1}}}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7a8f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000011) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r1, 0x12) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000340)={r4, 0x0, 0xb, 0x0, 0x401, 0x4, [0x7, 0x7, 0xa71, 0x8, 0x7, 0x8344]}) socket$kcm(0x29, 0x5, 0x0) r5 = accept4$llc(r3, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000400)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'pim6reg1\x00'}) getsockname(r3, &(0x7f0000000480)=@ax25={{0x3, @null}, [@rose, @bcast, @rose, @default, @null, @default, @default, @bcast]}, &(0x7f0000000500)=0x80) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0xe, @mcast2, 0x1add}, @in6={0xa, 0x4e21, 0x5552, @mcast1, 0x8}, @in6={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd27f}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x84) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd74}}, 0x6, 0x9}, &(0x7f0000000700)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000740)={0x2, 0xfff5, 0x8201, 0x2, 0x3, 0xa, 0x0, 0x8, r7}, &(0x7f0000000780)=0x20) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f00000007c0)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000840)=""/43, &(0x7f0000000880)=0x2b) recvmsg$can_bcm(r3, &(0x7f0000000c00)={&(0x7f00000008c0)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/91, 0x5b}, {&(0x7f0000000a80)=""/143, 0x8f}], 0x3, &(0x7f0000000b80)=""/119, 0x77}, 0x40) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000c40)={r7, 0x2}, 0x8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000c80)={r8, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x8}, 0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000d40)={r8, 0x0, 0x5}, 0x8) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000d80)={0x2a3, 0xfffffffc, 0xffffffff}, 0x10) getpid() getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000dc0)={r7, 0x5}, &(0x7f0000000e00)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000e40)=@assoc_value={r11, 0x3}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="74116aac626a9bb211626afe7c093dc1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="65d45f86af2694510baa702f94980c592178c1f53f9db2f833151bceb784e9ed"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4840}, 0x4040004) 1m26.110310041s ago: executing program 3 (id=3415): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4004081) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0xa4e0, @local, 0x80000003}, 0x1c) sendmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x400c011) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x240408c4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3, 0x4}, {0x0, 0xfff3}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0x1, 0x74bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa}, {0x3}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) unshare(0x2a060400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 1m26.035845612s ago: executing program 1 (id=3416): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x8, @private1, 0x4}, {0xa, 0x4e22, 0xdb2a, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20000000}, 0x1, {[0x3, 0x3, 0x8, 0x845b, 0x0, 0x6, 0x6, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x3}, 0x1c) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r8, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001240)="7b62945da65d934746c62127fe5f8dea297500d531af3d82a6660c404efb3d6218b5705af0b3cf2f446282ea5a43626f311c3caac11af2273194a7c9792a95245285c1b081d57c759398e010e28c3ff1ad6a39397eb54c7bd56354a5655fa08b143dd80e1ffd976335fdba870f53439b6b75c24eb44b44c28fb21a922d23ac3acee7955767f0ede9e6d818fa8b9f7b0042c00afd311a964b8aeec39c5a6ff0589ba532823880b47da1c86d22c0fb882b70e5cd3e59954a2b699ee1a4dab4139a11ab8a2c071c01aa7ee90d0153ff81185d437d4aa3700d9a73", 0xfdef}, {0x0}], 0x3) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x37df697b}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 1m25.661287506s ago: executing program 2 (id=3417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00%\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES16], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2400c0d4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000006c00010023bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1a0000000028000004003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0x5, 0x1, {{0x11, 0x4, 0x3, 0x5, 0x44, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @remote, {[@rr={0x7, 0xb, 0xec, [@loopback, @dev={0xac, 0x14, 0x14, 0xe}]}, @generic={0x7, 0x8, "36c0be1de42f"}, @rr={0x7, 0x1b, 0xf2, [@rand_addr=0x64010101, @private=0xa010102, @multicast1, @private=0xa010100, @local, @loopback]}]}}}}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0xb}], &(0x7f0000000200)='syzkaller\x00', 0x1ff, 0x89, &(0x7f0000000240)=""/137, 0x41100, 0x8, '\x00', r4, 0x25, r2, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xd, 0x1d6b26b7, 0x202}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r2, r5], &(0x7f00000004c0)=[{0x2, 0x2, 0xa, 0x2}, {0x4, 0x2, 0x2, 0x2}], 0x10, 0x8}, 0x94) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000080)) 1m25.526306186s ago: executing program 0 (id=3418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) socket(0x2, 0x80805, 0x400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) unshare(0x22020400) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x5, 0x0, @void}, 0x10) close(0x4) close(r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x340, 0xa, 0x148, 0x0, 0x60, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, {0x3}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d0) 1m25.290888446s ago: executing program 2 (id=3419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200c8) (async) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt(r2, 0x1, 0xf, &(0x7f00000002c0)=""/213, &(0x7f0000000100)=0xd5) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000030303"], 0x1c}}, 0x0) 1m25.048711432s ago: executing program 2 (id=3420): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1004}], 0x1, 0x40001102, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) 1m25.032268635s ago: executing program 4 (id=3421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000180)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, '_'}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0x14) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 1m24.859027982s ago: executing program 1 (id=3422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r4 = socket$inet(0xa, 0x1, 0x84) (rerun: 32) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000000c0)) (async) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) (async) recvmmsg(r6, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x1, 0x0) (async, rerun: 32) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff8, @mcast1}, 0x1c) (async, rerun: 32) close(r5) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 0s ago: executing program 32 (id=3418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) socket(0x2, 0x80805, 0x400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) unshare(0x22020400) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x5, 0x0, @void}, 0x10) close(0x4) close(r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x340, 0xa, 0x148, 0x0, 0x60, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, {0x3}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d0) kernel console output (not intermixed with test programs): addr_subst_dest: Unknown node [ 387.746890][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 387.856701][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 388.138221][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.138749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.139556][ T8070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.141511][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.165596][ T59] bond4: (slave bridge3): failed to get link speed/duplex [ 388.192967][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.530369][T16054] netlink: 'syz.4.2450': attribute type 4 has an invalid length. [ 388.532380][T16056] netlink: 'syz.4.2450': attribute type 4 has an invalid length. [ 389.137336][T16077] netlink: 'syz.3.2453': attribute type 25 has an invalid length. [ 389.221561][T16066] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 389.223465][T16061] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 389.358243][T16066] __nla_validate_parse: 6 callbacks suppressed [ 389.358265][T16066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2449'. [ 389.797922][T16104] tipc: Enabling of bearer rejected, already enabled [ 389.899647][T16104] tipc: Resetting bearer [ 389.947099][T16107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 390.212121][T16123] netlink: 'syz.2.2463': attribute type 2 has an invalid length. [ 390.212150][T16123] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2463'. [ 390.263465][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2463'. [ 390.311344][T16130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 390.466171][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'. [ 390.687019][T16144] wg2 speed is unknown, defaulting to 1000 [ 390.759739][T16149] bond1: option mode: unable to set because the bond device has slaves [ 390.762557][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 390.762580][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 390.859898][T16150] bond1 (unregistering): (slave macvlan3): Releasing active interface [ 390.861485][T16150] bond1 (unregistering): Released all slaves [ 391.158561][T16159] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2476'. [ 391.332164][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2477'. [ 391.462514][T16166] macvlan3: entered allmulticast mode [ 391.462541][T16166] erspan0: entered allmulticast mode [ 392.635519][ T7156] net_ratelimit: 43 callbacks suppressed [ 392.635543][ T7156] bond4: (slave bridge3): failed to get link speed/duplex [ 392.756933][T13412] bond4: (slave bridge3): failed to get link speed/duplex [ 392.844389][T16218] wg2 speed is unknown, defaulting to 1000 [ 392.959328][T16221] bridge9: entered promiscuous mode [ 392.986115][ T7156] bond4: (slave bridge3): failed to get link speed/duplex [ 393.110080][T16226] netlink: 'syz.3.2493': attribute type 21 has an invalid length. [ 393.278150][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.285433][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 393.369803][T16230] netlink: 'syz.1.2492': attribute type 1 has an invalid length. [ 393.557146][ T43] bond4: (slave bridge3): failed to get link speed/duplex [ 393.725646][ T7156] bond4: (slave bridge3): failed to get link speed/duplex [ 393.838969][T13412] bond4: (slave bridge3): failed to get link speed/duplex [ 393.901520][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.901760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.155361][T16266] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2497'. [ 394.401717][T16280] netlink: 'syz.0.2501': attribute type 8 has an invalid length. [ 394.401742][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'. [ 394.430001][T16280] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 394.461474][T16282] syzkaller0: entered promiscuous mode [ 394.461501][T16282] syzkaller0: entered allmulticast mode [ 394.600362][T16280] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 394.600389][T16280] syzkaller1: Linktype set failed because interface is up [ 394.655773][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2504'. [ 394.655941][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2504'. [ 395.377973][T16310] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 395.440946][T16296] bond0: Removing last ns target with arp_interval on [ 395.924519][T16332] IPVS: set_ctl: invalid protocol: 107 224.0.0.1:20001 [ 395.951020][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 396.208340][T16337] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 396.274712][T16347] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.330332][T16351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.710418][T16368] Cannot find set identified by id 2 to match [ 396.736562][T16373] netlink: 'syz.4.2523': attribute type 7 has an invalid length. [ 396.736586][T16373] netlink: 'syz.4.2523': attribute type 3 has an invalid length. [ 396.736601][T16373] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2523'. [ 396.804579][T16373] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 396.804603][T16373] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2523'. [ 397.522450][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'. [ 397.522486][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2534'. [ 397.630230][T16416] netlink: 614 bytes leftover after parsing attributes in process `syz.0.2535'. [ 397.630487][T16417] netlink: 614 bytes leftover after parsing attributes in process `syz.0.2535'. [ 397.696919][ T59] net_ratelimit: 27 callbacks suppressed [ 397.696942][ T59] bond4: (slave bridge3): failed to get link speed/duplex [ 397.787128][T16423] pim6reg0: tun_chr_ioctl cmd 35111 [ 397.806619][T13412] bond4: (slave bridge3): failed to get link speed/duplex [ 397.894912][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.900153][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.905737][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.926220][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 397.946747][T16437] netlink: NAT attribute has 4 unknown bytes [ 397.946786][T16437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.952520][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.952757][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.445891][ T1153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.445967][ T1153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.446008][ T1153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.520151][T16458] SET target dimension over the limit! [ 398.819793][T16465] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 399.379614][T16495] netlink: 'syz.1.2558': attribute type 10 has an invalid length. [ 400.038902][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.038932][T16517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.040307][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.040330][T16517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.041334][T16517] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 400.041354][T16517] batman_adv: batadv0: Removing interface: ipvlan2 [ 400.042506][T16517] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 400.042525][T16517] batman_adv: batadv0: Removing interface: ipvlan3 [ 400.600031][T16541] netlink: 'syz.2.2573': attribute type 12 has an invalid length. [ 400.735031][T16541] syzkaller0: entered promiscuous mode [ 400.735058][T16541] syzkaller0: entered allmulticast mode [ 400.882588][T16554] __nla_validate_parse: 7 callbacks suppressed [ 400.882609][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 400.883636][T16550] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2575'. [ 400.883687][T16550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2575'. [ 400.971327][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 401.175652][T16565] netlink: 'syz.0.2579': attribute type 16 has an invalid length. [ 401.175677][T16565] netlink: 'syz.0.2579': attribute type 17 has an invalid length. [ 404.012166][T16565] lo: left promiscuous mode [ 404.012184][T16565] lo: left allmulticast mode [ 404.030605][T16565] gretap0: left allmulticast mode [ 404.066603][T16565] bridge0: left promiscuous mode [ 404.066630][T16565] bridge0: left allmulticast mode [ 404.071971][T16565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.073983][T16565] dummy0: left promiscuous mode [ 404.093372][T16565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.122381][T16565] net_ratelimit: 38 callbacks suppressed [ 404.122417][T16565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 404.205756][ T59] bond4: (slave bridge3): failed to get link speed/duplex [ 404.223317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.224142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.263720][T16586] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 404.363798][T16586] 8021q: adding VLAN 0 to HW filter on device bond15 [ 404.413397][T16590] bond15: (slave veth11): Enslaving as an active interface with a down link [ 404.444293][T16590] batman_adv: batadv0: Removing interface: dummy0 [ 404.466761][T16590] bond15: (slave dummy0): making interface the new active one [ 404.469510][T16590] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 404.474629][T16586] netlink: 'syz.4.2586': attribute type 10 has an invalid length. [ 404.474653][T16586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2586'. [ 404.474786][T16586] dummy0: entered promiscuous mode [ 404.521725][T16586] bond15: (slave dummy0): Releasing active interface [ 404.669320][T16577] syzkaller1: entered promiscuous mode [ 404.669346][T16577] syzkaller1: entered allmulticast mode [ 404.679213][T13412] bond4: (slave bridge3): failed to get link speed/duplex [ 404.694356][T16577] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 404.694412][T16577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2583'. [ 404.782304][T16602] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2589'. [ 404.810372][T16601] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.815532][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 404.831326][T16602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.831586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.880545][T16594] syzkaller0: entered promiscuous mode [ 404.880573][T16594] syzkaller0: entered allmulticast mode [ 404.964399][T16605] xt_hashlimit: size too large, truncated to 1048576 [ 405.038311][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 405.421154][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.421370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.787128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.404023][T16619] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2592'. [ 407.440908][T16619] block nbd0: reconnected socket [ 407.451930][ T5627] block nbd0: Receive control failed (result -32) [ 407.581052][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 407.582264][T16629] block nbd1: server does not support multiple connections per device. [ 407.582739][T16629] block nbd1: shutting down sockets [ 407.705609][T16632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2596'. [ 407.878756][T16632] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 407.907038][T16646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2600'. [ 408.050822][T16644] syzkaller0: entered promiscuous mode [ 408.050849][T16644] syzkaller0: entered allmulticast mode [ 408.116915][T16639] tipc: Enabling of bearer rejected, already enabled [ 408.123953][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2598'. [ 409.502524][ T8486] net_ratelimit: 58 callbacks suppressed [ 409.502548][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.138194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.138706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.580441][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 410.706962][T16681] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 410.726610][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 410.835348][ T7156] bond4: (slave bridge3): failed to get link speed/duplex [ 410.838010][T16687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2607'. [ 410.942823][T16689] dvmrp0: entered allmulticast mode [ 410.955342][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 410.987311][T16689] dvmrp0: left allmulticast mode [ 411.095665][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 411.158896][T16693] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2610'. [ 411.207112][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 411.340156][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 411.495954][ T8786] page_pool_release_retry() stalled pool shutdown: id 121, 1 inflight 60 sec [ 411.743180][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'. [ 411.743207][T16724] netlink: 'syz.2.2617': attribute type 1 has an invalid length. [ 411.965771][T16736] netlink: 'syz.3.2619': attribute type 13 has an invalid length. [ 412.354156][T16750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2624'. [ 412.483573][T16758] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2624'. [ 412.649906][T16766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2629'. [ 413.640763][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'. [ 414.195458][T16832] wg2 speed is unknown, defaulting to 1000 [ 414.293449][T16840] siw: device registration error -23 [ 414.303095][T16840] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2647'. [ 414.472965][T16845] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 414.770253][T16845] bond1 (unregistering): Released all slaves [ 414.944870][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.944992][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.945091][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.969827][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.969941][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.970035][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.970128][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.999725][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.999843][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.999940][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.000035][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.000128][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.000219][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.000312][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.055731][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.055817][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.055895][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.055959][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056024][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056086][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056148][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056211][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056274][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056346][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056409][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056472][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056534][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056596][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056725][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056802][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056865][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056927][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.056995][T16859] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.145672][ T8070] net_ratelimit: 19 callbacks suppressed [ 415.145732][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 415.340567][T16871] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 415.447572][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 416.959676][T16871] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 416.981136][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2657'. [ 417.086764][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 417.135516][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 417.245305][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 417.300213][T16889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2661'. [ 417.397923][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 417.460921][T16898] netlink: 'syz.3.2664': attribute type 1 has an invalid length. [ 417.632067][T16898] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.726726][T16901] bond10: (slave geneve3): making interface the new active one [ 417.729634][T16901] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 417.881940][T16917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2671'. [ 417.881976][T16917] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 417.911825][ T7156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.912623][ T7156] bond4: (slave bridge3): failed to get link speed/duplex [ 417.912684][ T7156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.912724][ T7156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.036033][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 418.170979][ T1153] tipc: Subscription rejected, illegal request [ 418.186056][T16937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2669'. [ 418.297151][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 418.324776][T16941] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 418.456854][T16941] bond1: entered promiscuous mode [ 418.457443][T16941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.512552][T16950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.512999][T16950] bond1: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 418.513019][T16950] bond1: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 418.556231][T16950] bond1: (slave ip6gre3): making interface the new active one [ 418.556257][T16950] ip6gre3: entered promiscuous mode [ 418.557697][T16950] bond1: (slave ip6gre3): Enslaving as an active interface with an up link [ 418.725368][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 418.875640][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 419.369572][T16995] sit0: left promiscuous mode [ 419.463678][T17001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2690'. [ 419.923772][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 420.319289][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2697'. [ 422.115114][T17017] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 422.119350][T17027] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 422.119399][T17027] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 422.119422][T17027] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 422.184917][T17031] macvlan4: entered allmulticast mode [ 422.195837][ T8070] net_ratelimit: 9 callbacks suppressed [ 422.195859][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 422.306184][ T7156] bond4: (slave bridge3): failed to get link speed/duplex [ 422.476363][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 422.647106][T13412] bond4: (slave bridge3): failed to get link speed/duplex [ 422.652698][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 422.865852][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 422.888067][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 422.977344][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 423.089651][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 423.172821][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'. [ 423.199215][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 423.305948][ T7156] bond4: (slave bridge3): failed to get link speed/duplex [ 423.348404][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 423.452835][T17092] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2712'. [ 423.455089][T17092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2712'. [ 423.859348][T17087] syzkaller0: entered promiscuous mode [ 423.859376][T17087] syzkaller0: entered allmulticast mode [ 423.878415][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 424.250301][T17118] netlink: 'syz.0.2720': attribute type 2 has an invalid length. [ 424.278796][T17124] netlink: 'syz.3.2721': attribute type 39 has an invalid length. [ 424.332989][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 424.441218][T17127] netlink: 'syz.2.2722': attribute type 1 has an invalid length. [ 424.619210][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 424.619247][T17143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2723'. [ 424.641000][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 424.641090][T17144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2723'. [ 424.982287][T17153] nbd: illegal input index 805699556 [ 425.172233][T17167] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 425.438390][T13413] tipc: Subscription rejected, illegal request [ 425.777101][T17200] nbd: must specify at least one socket [ 426.389465][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.394953][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.411175][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.412228][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.447504][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.960441][T13412] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 426.960481][T13412] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 14336 - 0 [ 426.960510][T13412] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.126588][T13412] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 427.126629][T13412] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 14336 - 0 [ 427.126658][T13412] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.220473][T13412] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 427.220513][T13412] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 14336 - 0 [ 427.220543][T13412] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.376130][ T8070] net_ratelimit: 29 callbacks suppressed [ 427.376154][ T8070] bond4: (slave bridge3): failed to get link speed/duplex [ 427.513904][T13412] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 427.513932][T13412] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 14336 - 0 [ 427.513953][T13412] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.606469][ T1153] bond4: (slave bridge3): failed to get link speed/duplex [ 427.661635][T17236] wg2 speed is unknown, defaulting to 1000 [ 427.793078][T17286] syzkaller1: entered promiscuous mode [ 427.793102][T17286] syzkaller1: entered allmulticast mode [ 427.795365][T13413] bond4: (slave bridge3): failed to get link speed/duplex [ 427.880280][T17294] netlink: zone id is out of range [ 427.880297][T17294] netlink: zone id is out of range [ 427.880306][T17294] netlink: zone id is out of range [ 427.880315][T17294] netlink: zone id is out of range [ 427.880324][T17294] netlink: zone id is out of range [ 427.880332][T17294] netlink: zone id is out of range [ 427.880342][T17294] netlink: zone id is out of range [ 428.191644][T13412] veth1: left allmulticast mode [ 428.191679][T13412] veth1: left promiscuous mode [ 428.193547][T13412] bridge0: port 3(veth1) entered disabled state [ 428.209614][T13412] bridge_slave_1: left allmulticast mode [ 428.209686][T13412] bridge_slave_1: left promiscuous mode [ 428.210379][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.228222][T13412] bridge_slave_0: left allmulticast mode [ 428.228250][T13412] bridge_slave_0: left promiscuous mode [ 428.230927][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.537102][ T5623] Bluetooth: hci5: command tx timeout [ 428.879358][T13412] bond10 (unregistering): (slave vti0): Releasing backup interface [ 428.879422][T13412] vti0 (unregistering): left promiscuous mode [ 428.919892][T13412] erspan0 (unregistering): left allmulticast mode [ 429.084586][T13412] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 429.153788][T13412] bond5 (unregistering): (slave ipip1): Releasing backup interface [ 429.248644][T13412] bond4 (unregistering): (slave bridge3): Removing an active aggregator [ 429.249147][T13412] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 429.302644][T13412] bond0 (unregistering): Released all slaves [ 429.312719][T13412] bond1 (unregistering): Released all slaves [ 429.328884][T13412] bond2 (unregistering): Released all slaves [ 429.346514][T13412] bond3 (unregistering): Released all slaves [ 429.372980][T13412] bond4 (unregistering): Released all slaves [ 429.400075][T13412] bond5 (unregistering): Released all slaves [ 429.448378][T13412] bond6 (unregistering): Released all slaves [ 429.467667][T13412] bond7 (unregistering): (slave veth7): Releasing active interface [ 429.467692][T13412] batadv1: entered promiscuous mode [ 429.472823][T13412] bond7 (unregistering): (slave batadv1): Releasing active interface [ 429.472858][T13412] batadv1: left promiscuous mode [ 429.490878][T13412] bond7 (unregistering): Released all slaves [ 429.516723][T13412] bond8 (unregistering): Released all slaves [ 429.531761][T13412] bond9 (unregistering): Released all slaves [ 429.540951][T17337] syz.1.2769: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 429.541051][T17337] CPU: 1 UID: 0 PID: 17337 Comm: syz.1.2769 Not tainted syzkaller #0 PREEMPT(full) [ 429.541086][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.541105][T17337] Call Trace: [ 429.541118][T17337] [ 429.541129][T17337] dump_stack_lvl+0xe8/0x150 [ 429.541168][T17337] warn_alloc+0x24d/0x270 [ 429.541193][T17337] ? kasan_save_track+0x4f/0x80 [ 429.541217][T17337] ? kasan_save_track+0x3e/0x80 [ 429.541243][T17337] ? __pfx_warn_alloc+0x10/0x10 [ 429.541263][T17337] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 429.541293][T17337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.541339][T17337] __vmalloc_node_range_noprof+0x127/0x1540 [ 429.541399][T17337] ? rcu_is_watching+0x16/0xb0 [ 429.541434][T17337] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 429.541468][T17337] ? __kmalloc_cache_noprof+0x321/0x600 [ 429.541491][T17337] ? __kmalloc_cache_noprof+0x14d/0x600 [ 429.541514][T17337] ? xskq_create+0x56/0x220 [ 429.541541][T17337] xskq_create+0x148/0x220 [ 429.541563][T17337] ? xsk_init_queue+0x8a/0xe0 [ 429.541601][T17337] xsk_init_queue+0x8a/0xe0 [ 429.541639][T17337] xsk_setsockopt+0x52a/0x960 [ 429.541676][T17337] ? __pfx_xsk_setsockopt+0x10/0x10 [ 429.541711][T17337] ? __pfx_aa_sk_perm+0x10/0x10 [ 429.541750][T17337] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 429.541779][T17337] ? __pfx_xsk_setsockopt+0x10/0x10 [ 429.541815][T17337] do_sock_setsockopt+0x17c/0x1b0 [ 429.541849][T17337] __x64_sys_setsockopt+0x13d/0x1b0 [ 429.541883][T17337] do_syscall_64+0x166/0x520 [ 429.541908][T17337] ? trace_irq_disable+0x3b/0x140 [ 429.541930][T17337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.541954][T17337] ? clear_bhb_loop+0x70/0xc0 [ 429.541983][T17337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.542006][T17337] RIP: 0033:0x7fcb0739e159 [ 429.542028][T17337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.542048][T17337] RSP: 002b:00007fcb082ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.542079][T17337] RAX: ffffffffffffffda RBX: 00007fcb07626180 RCX: 00007fcb0739e159 [ 429.542097][T17337] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 429.542112][T17337] RBP: 00007fcb0743503b R08: 0000000000000004 R09: 0000000000000000 [ 429.542126][T17337] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.542142][T17337] R13: 00007fcb07626218 R14: 00007fcb07626180 R15: 00007fff02c26678 [ 429.542179][T17337] [ 429.542208][T17337] Mem-Info: [ 429.542219][T17337] active_anon:6028 inactive_anon:4 isolated_anon:0 [ 429.542219][T17337] active_file:384 inactive_file:42983 isolated_file:0 [ 429.542219][T17337] unevictable:0 dirty:87 writeback:0 [ 429.542219][T17337] slab_reclaimable:11630 slab_unreclaimable:109862 [ 429.542219][T17337] mapped:29578 shmem:743 pagetables:1212 [ 429.542219][T17337] sec_pagetables:0 bounce:0 [ 429.542219][T17337] kernel_misc_reclaimable:0 [ 429.542219][T17337] free:1239669 free_pcp:10539 free_cma:0 [ 429.542288][T17337] Node 0 active_anon:24112kB inactive_anon:16kB active_file:1536kB inactive_file:171744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118312kB dirty:348kB writeback:0kB shmem:2972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16092kB pagetables:4712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 429.542352][T17337] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 429.542414][T17337] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.542479][T17337] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 429.542557][T17337] Node 0 DMA32 free:1004400kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24112kB inactive_anon:16kB active_file:1536kB inactive_file:171744kB unevictable:0kB writepending:348kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:41404kB local_pcp:20896kB free_cma:0kB [ 429.542629][T17337] lowmem_reserve[]: 0 0 0 0 0 [ 429.542671][T17337] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.542734][T17337] lowmem_reserve[]: 0 0 0 0 0 [ 429.542776][T17337] Node 1 Normal free:3938916kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 429.542843][T17337] lowmem_reserve[]: 0 0 0 0 0 [ 429.542884][T17337] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 429.543024][T17337] Node 0 DMA32: 1266*4kB (UME) 323*8kB (UME) 123*16kB (UM) 715*32kB (UM) 1218*64kB (UM) 490*128kB (UME) 195*256kB (UM) 66*512kB (UME) 12*1024kB (UME) 7*2048kB (UM) 176*4096kB (UM) = 1004400kB [ 429.543221][T17337] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 429.543337][T17337] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938916kB [ 429.543523][T17337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.543541][T17337] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 429.543567][T17337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.543586][T17337] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 429.543604][T17337] 44106 total pagecache pages [ 429.543631][T17337] 0 pages in swap cache [ 429.543639][T17337] Free swap = 124996kB [ 429.543648][T17337] Total swap = 124996kB [ 429.543657][T17337] 2097051 pages RAM [ 429.543665][T17337] 0 pages HighMem/MovableOnly [ 429.543674][T17337] 428780 pages reserved [ 429.543682][T17337] 0 pages cma reserved [ 429.619469][T13412] bond10 (unregistering): Released all slaves [ 429.680353][T13412] bond11 (unregistering): Released all slaves [ 429.759315][T13412] bond12 (unregistering): Released all slaves [ 429.888769][T13412] bond13 (unregistering): Released all slaves [ 429.984397][T13412] bond14 (unregistering): Released all slaves [ 430.128531][T13412] bond15 (unregistering): (slave veth11): Releasing active interface [ 430.177903][T13412] bond15 (unregistering): Released all slaves [ 430.266941][T17311] vlan4: entered allmulticast mode [ 430.266967][T17311] bond0: entered allmulticast mode [ 430.266982][T17311] bond_slave_0: entered allmulticast mode [ 430.419182][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 430.477063][T17335] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 430.477415][T17336] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 430.477442][T17336] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 430.615799][ T5623] Bluetooth: hci5: command tx timeout [ 430.649640][ T8788] wg2 speed is unknown, defaulting to 1000 [ 430.649684][ T8788] syz2: Port: 1 Link DOWN [ 430.654018][T13412] tipc: Disabling bearer [ 430.654379][T13412] tipc: Disabling bearer [ 430.689251][T13412] tipc: Left network mode [ 430.764424][T13412] IPVS: stopping backup sync thread 8739 ... [ 430.889995][ T1153] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 431.141760][T17348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.789255][ T31] audit: type=1107 audit(1789335535.614:12): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='B' [ 431.865845][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.865958][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.866126][T17236] bridge_slave_0: entered allmulticast mode [ 431.873603][T17236] bridge_slave_0: entered promiscuous mode [ 431.984274][T17236] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.984389][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.984558][T17236] bridge_slave_1: entered allmulticast mode [ 432.008500][T17236] bridge_slave_1: entered promiscuous mode [ 432.013755][T17391] IPVS: Unknown mcast interface: dvmrp0 [ 432.094732][T17403] __nla_validate_parse: 12 callbacks suppressed [ 432.094753][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 432.354120][T17390] wg2 speed is unknown, defaulting to 1000 [ 432.398973][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.434889][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 432.477756][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.695452][ T5623] Bluetooth: hci5: command tx timeout [ 432.762788][T17428] net_ratelimit: 4 callbacks suppressed [ 432.762810][T17428] ip_tables: iptables: counters copy to user failed while replacing table [ 432.881272][T17236] team0: Port device team_slave_0 added [ 432.884812][T17236] team0: Port device team_slave_1 added [ 433.081499][T13412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.081554][T13412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.084157][T13412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.084179][T13412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.088065][T17438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2788'. [ 433.139981][T13412] vlan0: left allmulticast mode [ 433.140004][T13412] veth0_vlan: left allmulticast mode [ 433.140048][T13412] vlan0: left promiscuous mode [ 433.143187][T13412] veth1_macvtap: left promiscuous mode [ 433.143365][T13412] veth1_vlan: left promiscuous mode [ 433.143519][T13412] veth0_vlan: left promiscuous mode [ 433.211640][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 433.211668][T17442] netlink: 'syz.0.2790': attribute type 2 has an invalid length. [ 433.211682][T17442] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 433.752056][T13412] team0 (unregistering): Port device team_slave_1 removed [ 433.783440][T13412] team0 (unregistering): Port device team_slave_0 removed [ 433.858073][ T3380] smbdirect: ib_dev[syz2] removed [ 433.969994][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.970015][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.970044][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.051560][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.051581][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.051611][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.251854][T17455] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2792'. [ 434.313669][T17236] hsr_slave_0: entered promiscuous mode [ 434.317272][T17460] siw: device registration error -23 [ 434.333941][T17236] hsr_slave_1: entered promiscuous mode [ 434.368157][T17455] gretap0: entered promiscuous mode [ 434.424826][T17455] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2792'. [ 434.567828][T17463] bridge9: entered promiscuous mode [ 434.582763][T17455] 0ªî{X¹¦: renamed from gretap0 [ 434.602812][T17455] 0ªî{X¹¦: left promiscuous mode [ 434.602839][T17455] 0ªî{X¹¦: entered allmulticast mode [ 434.616782][T17455] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 434.776357][ T5623] Bluetooth: hci5: command tx timeout [ 434.869017][T17475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2797'. [ 434.983360][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'. [ 435.301787][T13412] IPVS: stop unused estimator thread 0... [ 435.533593][T17503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'. [ 435.538022][T17503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'. [ 435.754368][T17510] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2801'. [ 436.203643][T17528] ip6gretap1: entered allmulticast mode [ 436.215770][T17528] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 436.216480][T17528] batman_adv: batadv0: Adding interface: ip6gretap1 [ 436.216497][T17528] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.218371][T17528] batman_adv: batadv0: Interface activated: ip6gretap1 [ 436.255001][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 436.389276][T17540] netlink: 'syz.1.2806': attribute type 8 has an invalid length. [ 436.522400][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.523082][T17540] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.729467][T17552] netlink: 'syz.2.2808': attribute type 6 has an invalid length. [ 436.757752][T17549] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.876047][T17558] nbd1: detected capacity change from 0 to 63 [ 436.880827][T17558] block nbd1: NBD_DISCONNECT [ 436.902170][T17558] block nbd1: Disconnected due to user request. [ 436.910865][ T1703] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 436.911297][ T1703] Buffer I/O error on dev nbd1, logical block 1, async page read [ 436.911531][ T1703] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 436.911582][ T1703] Buffer I/O error on dev nbd1, logical block 2, async page read [ 436.911600][ T1703] Buffer I/O error on dev nbd1, logical block 3, async page read [ 436.959619][T17558] block nbd1: shutting down sockets [ 436.979379][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 436.979521][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 436.996067][ T1703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 436.996159][ T1703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 436.996211][ T1703] Buffer I/O error on dev nbd1, logical block 1, async page read [ 436.996261][ T1703] Buffer I/O error on dev nbd1, logical block 2, async page read [ 436.996297][ T1703] Buffer I/O error on dev nbd1, logical block 3, async page read [ 437.001867][ T1703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 437.001969][ T1703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 437.002023][ T1703] Buffer I/O error on dev nbd1, logical block 1, async page read [ 437.002747][ T1703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 437.003126][ T1703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.004089][ T1703] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.004448][ T1703] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.004763][ T1703] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.010493][T14675] ldm_validate_partition_table(): Disk read failed. [ 437.058804][T17558] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 437.070313][T14675] Dev nbd1: unable to read RDB block 0 [ 437.081794][T14675] nbd1: unable to read partition table [ 437.169067][T14675] ldm_validate_partition_table(): Disk read failed. [ 437.172459][T14675] Dev nbd1: unable to read RDB block 0 [ 437.174766][T14675] nbd1: unable to read partition table [ 437.230877][T17563] __nla_validate_parse: 5 callbacks suppressed [ 437.230901][T17563] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2811'. [ 437.230952][T17563] netlink: 'syz.1.2811': attribute type 9 has an invalid length. [ 437.230969][T17563] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2811'. [ 437.230985][T17563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2811'. [ 437.573554][T17568] netlink: 'syz.0.2812': attribute type 1 has an invalid length. [ 437.611373][T17558] 8021q: adding VLAN 0 to HW filter on device bond10 [ 437.649101][T17571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2813'. [ 437.666984][T17562] bond10: (slave veth9): Enslaving as an active interface with a down link [ 437.695981][T17573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2812'. [ 437.742242][T17571] netlink: Failed to add filter helper -22 [ 437.742304][T17571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.913225][T17569] bond8: (slave geneve4): making interface the new active one [ 437.927367][T17569] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 437.931294][T17582] sctp: [Deprecated]: syz.2.2815 (pid 17582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.931294][T17582] Use struct sctp_sack_info instead [ 437.934046][T17573] 8021q: adding VLAN 0 to HW filter on device bond8 [ 437.969675][T13413] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 437.971252][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 437.971694][ T1153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 437.971740][ T1153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 438.639090][T17606] netlink: 'syz.2.2819': attribute type 10 has an invalid length. [ 438.830687][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2820'. [ 438.830728][T17614] netlink: 'syz.0.2820': attribute type 30 has an invalid length. [ 438.883613][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2820'. [ 438.883652][T17615] netlink: 'syz.0.2820': attribute type 30 has an invalid length. [ 438.921675][T17606] team0 (unregistering): Port device team_slave_1 removed [ 438.958253][T17614] vxlan2: entered promiscuous mode [ 438.958278][T17614] vxlan2: entered allmulticast mode [ 439.025896][T13412] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.166002][T13412] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.167130][T13412] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.167177][T13412] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.168570][T17236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.173818][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.174712][T17236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 439.198418][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.257842][T17236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 439.281124][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.282154][T17236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.303537][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.305378][T17621] tipc: Enabling of bearer rejected, already enabled [ 439.532627][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532627][T17636] Use struct sctp_assoc_value instead [ 439.532687][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532687][T17636] Use struct sctp_assoc_value instead [ 439.532732][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532732][T17636] Use struct sctp_assoc_value instead [ 439.532776][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532776][T17636] Use struct sctp_assoc_value instead [ 439.532820][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532820][T17636] Use struct sctp_assoc_value instead [ 439.532864][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532864][T17636] Use struct sctp_assoc_value instead [ 439.532907][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532907][T17636] Use struct sctp_assoc_value instead [ 439.532950][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532950][T17636] Use struct sctp_assoc_value instead [ 439.532994][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.532994][T17636] Use struct sctp_assoc_value instead [ 439.533037][T17636] sctp: [Deprecated]: syz.0.2822 (pid 17636) Use of int in max_burst socket option deprecated. [ 439.533037][T17636] Use struct sctp_assoc_value instead [ 439.964174][T17236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.977121][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.078474][T17236] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.078959][T17653] §: renamed from sit0 [ 440.114091][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.114192][T13412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.146429][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.146527][T13412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.263881][T17652] 8021q: adding VLAN 0 to HW filter on device bond16 [ 440.672760][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'. [ 440.913002][T17692] netlink: 'syz.3.2830': attribute type 21 has an invalid length. [ 440.941825][T17692] macsec0: entered promiscuous mode [ 440.952699][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2830'. [ 440.970016][T17692] macsec0 (unregistering): left promiscuous mode [ 441.013889][T17701] netlink: 'syz.0.2832': attribute type 1 has an invalid length. [ 441.117765][T17701] bond9: entered promiscuous mode [ 441.118303][T17701] 8021q: adding VLAN 0 to HW filter on device bond9 [ 441.122631][T17703] batman_adv: batadv0: Adding interface: syzkaller0 [ 441.122652][T17703] batman_adv: batadv0: Interface activated: syzkaller0 [ 441.213379][T17704] ipvlan2: entered allmulticast mode [ 441.213404][T17704] bond9: entered allmulticast mode [ 441.278070][T17701] ipvlan3: entered allmulticast mode [ 441.346466][T17704] bond9: (slave bridge3): making interface the new active one [ 441.346494][T17704] bridge3: entered promiscuous mode [ 441.346717][T17704] bridge3: entered allmulticast mode [ 441.350008][T17704] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 441.473440][T17694] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 441.555088][T17694] batman_adv: batadv0: Removing interface: syzkaller0 [ 441.932646][T17734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'. [ 441.973501][T17740] netlink: 'syz.2.2835': attribute type 1 has an invalid length. [ 441.996247][T17738] netlink: 'syz.3.2837': attribute type 1 has an invalid length. [ 442.138802][T17738] 8021q: adding VLAN 0 to HW filter on device bond11 [ 442.173682][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.221638][T17751] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 442.437517][T17751] xt_CT: No such helper "netbios-ns" [ 442.513175][T17763] __nla_validate_parse: 1 callbacks suppressed [ 442.513199][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 442.525933][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2840'. [ 443.096719][T17782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2844'. [ 443.174181][T17796] netlink: 'syz.2.2845': attribute type 34 has an invalid length. [ 443.174206][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 443.338683][T17796] bond17: option lacp_strict: invalid value (64) [ 443.389922][T17796] bond17 (unregistering): Released all slaves [ 443.682300][T17236] veth0_vlan: entered promiscuous mode [ 443.718136][T17236] veth1_vlan: entered promiscuous mode [ 443.772483][T17813] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 443.848748][T17236] veth0_macvtap: entered promiscuous mode [ 443.879917][T17236] veth1_macvtap: entered promiscuous mode [ 443.982392][T17236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.021766][T17236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.071047][T17818] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 444.076384][T13413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.220764][T13413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.220937][T13413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.220977][T13413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.537210][T17819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2850'. [ 444.537985][T17819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2850'. [ 444.787101][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'. [ 444.858084][T13412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.858110][T13412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.994113][T13412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.994138][T13412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.095553][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 446.135513][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 488.169502][T17841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2855'. [ 488.190722][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 488.190751][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'. [ 488.251368][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 488.251396][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'. [ 488.358509][T17849] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2858'. [ 488.840279][T17865] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2863'. [ 488.946891][T17870] netlink: 'syz.0.2865': attribute type 1 has an invalid length. [ 489.020506][T17870] bond10: option mode: invalid value (7) [ 489.022110][T17870] bond10 (unregistering): Released all slaves [ 489.051642][T17873] netlink: 'syz.0.2865': attribute type 10 has an invalid length. [ 489.051669][T17873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2865'. [ 489.054304][T17878] netlink: 'syz.0.2865': attribute type 10 has an invalid length. [ 489.054328][T17878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2865'. [ 489.108352][T17873] dummy0: entered promiscuous mode [ 489.249707][T17885] netlink: 'syz.0.2867': attribute type 21 has an invalid length. [ 489.249735][T17885] netlink: 'syz.0.2867': attribute type 1 has an invalid length. [ 489.649189][T17898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2871'. [ 489.649228][T17898] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 490.174898][T17927] macsec0: entered promiscuous mode [ 490.193275][T17927] macsec0 (unregistering): left promiscuous mode [ 490.356590][T17927] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 490.605043][T17938] netlink: 'syz.1.2882': attribute type 10 has an invalid length. [ 490.742659][T17938] team0: Device wg2 is of different type [ 490.903576][T17950] ip_tables: iptables: counters copy to user failed while replacing table [ 490.904998][T17950] syzkaller0: left promiscuous mode [ 490.905020][T17950] syzkaller0: left allmulticast mode [ 491.216839][T17968] netlink: 'syz.2.2886': attribute type 1 has an invalid length. [ 491.243218][T17969] erspan2: entered allmulticast mode [ 491.354815][T17968] bond17: entered promiscuous mode [ 491.354884][T17968] bond17: entered allmulticast mode [ 491.355903][T17968] 8021q: adding VLAN 0 to HW filter on device bond17 [ 491.449061][T17974] netlink: zone id is out of range [ 491.449080][T17974] netlink: zone id is out of range [ 491.449090][T17974] netlink: zone id is out of range [ 491.449100][T17974] netlink: zone id is out of range [ 491.449108][T17974] netlink: zone id is out of range [ 491.449118][T17974] netlink: zone id is out of range [ 491.449492][T17974] netlink: zone id is out of range [ 491.449505][T17974] netlink: zone id is out of range [ 492.072252][T18005] netlink: 'syz.0.2898': attribute type 5 has an invalid length. [ 492.429991][T18016] can: request_module (can-proto-0) failed. [ 492.883330][T18037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.899860][T18037] bond_slave_0: left allmulticast mode [ 492.900350][T18037] bond0 (unregistering): Released all slaves [ 493.202632][T18051] netlink: 'syz.3.2911': attribute type 1 has an invalid length. [ 493.264362][T18053] netlink: 'syz.1.2910': attribute type 4 has an invalid length. [ 493.356343][T18051] bond0: (slave bridge10): making interface the new active one [ 493.358126][T18051] bond0: (slave bridge10): Enslaving as an active interface with an up link [ 494.336365][T18085] validate_nla: 2 callbacks suppressed [ 494.336390][T18085] netlink: 'syz.3.2916': attribute type 10 has an invalid length. [ 494.399752][T18087] __nla_validate_parse: 9 callbacks suppressed [ 494.399777][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 494.841521][T18096] team0: Device xfrm0 is of different type [ 494.933231][T18106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'. [ 495.184169][T18111] netlink: 'syz.2.2922': attribute type 1 has an invalid length. [ 495.229603][T18111] veth9: entered allmulticast mode [ 495.233485][T18111] bond18: (slave veth9): Enslaving as an active interface with a down link [ 495.300850][T18115] netlink: 'syz.2.2923': attribute type 1 has an invalid length. [ 496.295777][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 496.334725][T18064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.653691][T18136] Bluetooth: hci0: unsupported parameter 5135 [ 496.653716][T18136] Bluetooth: hci0: invalid length 1, exp 2 for type 11 [ 496.767394][T18145] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 496.786167][T18141] team0: entered promiscuous mode [ 496.786191][T18141] team_slave_0: entered promiscuous mode [ 496.786395][T18141] team_slave_1: entered promiscuous mode [ 496.786574][T18141] team0: entered allmulticast mode [ 496.786588][T18141] team_slave_0: entered allmulticast mode [ 496.786604][T18141] team_slave_1: entered allmulticast mode [ 497.122162][T18162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2936'. [ 497.122201][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 497.194905][T18163] netlink: 'syz.2.2933': attribute type 6 has an invalid length. [ 497.194933][T18163] netlink: 'syz.2.2933': attribute type 7 has an invalid length. [ 497.194948][T18163] netlink: 'syz.2.2933': attribute type 8 has an invalid length. [ 497.242483][T18163] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2933'. [ 497.342335][T18168] net_ratelimit: 151 callbacks suppressed [ 497.342357][T18168] openvswitch: netlink: IP tunnel dst address not specified [ 497.342694][T18170] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2933'. [ 497.654761][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.654903][T18169] bridge0: port 2(bridge_slave_1) entered listening state [ 497.655262][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.655691][T18169] bridge0: port 1(bridge_slave_0) entered listening state [ 497.695840][T18169] bridge0: port 4() entered blocking state [ 497.696024][T18169] bridge0: port 4() entered listening state [ 498.015003][T18184] openvswitch: netlink: IP tunnel dst address not specified [ 498.168494][T18190] netlink: 'syz.4.2944': attribute type 1 has an invalid length. [ 498.197951][T18191] syzkaller0: entered promiscuous mode [ 498.197979][T18191] syzkaller0: entered allmulticast mode [ 498.237848][T18190] macvlan2: entered promiscuous mode [ 498.237875][T18190] macvlan2: entered allmulticast mode [ 498.242592][ T8497] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 498.250420][T18190] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 498.301662][T18190] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 498.315055][T18190] team0: Port device macvlan2 added [ 498.584622][T18215] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2949'. [ 498.923581][T18226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2952'. [ 499.043259][T18231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2954'. [ 499.160662][T18241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2956'. [ 499.160705][T18241] netlink: 'syz.0.2956': attribute type 7 has an invalid length. [ 499.160721][T18241] netlink: 'syz.0.2956': attribute type 8 has an invalid length. [ 499.247593][T18243] xt_check_target_common: 55 callbacks suppressed [ 499.247622][T18243] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 499.606159][T18253] __nla_validate_parse: 2 callbacks suppressed [ 499.606181][T18253] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2958'. [ 499.737378][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.743788][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.764963][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.781631][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.795891][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.814003][T18265] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2960'. [ 499.865452][T18266] netlink: 'syz.0.2959': attribute type 10 has an invalid length. [ 500.017345][ T5618] bond0: (slave syz_tun): Releasing backup interface [ 500.258220][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2961'. [ 500.258263][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 500.258615][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2961'. [ 500.258640][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 501.420220][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.502359][T18333] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2975'. [ 501.502433][T18333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2975'. [ 501.528041][T18335] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 501.734869][T18342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2977'. [ 501.896223][ T5627] Bluetooth: hci1: command tx timeout [ 501.921444][T18261] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.924804][T18261] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.924996][T18261] bridge_slave_0: entered allmulticast mode [ 501.950788][T18261] bridge_slave_0: entered promiscuous mode [ 501.963970][T18261] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.966035][T18261] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.966213][T18261] bridge_slave_1: entered allmulticast mode [ 501.998752][T18261] bridge_slave_1: entered promiscuous mode [ 502.118694][T18261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.149446][T18261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.236336][T18364] netlink: 'syz.4.2980': attribute type 1 has an invalid length. [ 502.378740][T18261] team0: Port device team_slave_0 added [ 502.413274][T18364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2980'. [ 502.477419][T18367] veth3: entered allmulticast mode [ 502.538561][T18367] bond1: (slave veth3): Enslaving as an active interface with a down link [ 502.587680][T18358] bond1: (slave veth0_to_bond): making interface the new active one [ 502.588806][T18358] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 502.614768][T18261] team0: Port device team_slave_1 added [ 502.728765][T18261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.728786][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.728814][T18261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.808335][T18261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.808355][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.808385][T18261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.989577][T18261] hsr_slave_0: entered promiscuous mode [ 502.990674][T18261] hsr_slave_1: entered promiscuous mode [ 503.009395][T18261] debugfs: 'hsr0' already exists in 'hsr' [ 503.009420][T18261] Cannot create hsr debugfs directory [ 503.694686][T18261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.694728][T18261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.760060][T18409] netlink: 'syz.2.2989': attribute type 4 has an invalid length. [ 503.821009][T18410] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 503.854343][T18412] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.920340][T18261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.920379][T18261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.956209][T18206] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.956250][T18206] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.956600][T18206] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.956631][T18206] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.956669][T18206] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.956698][T18206] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.956735][T18206] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.956764][T18206] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.992180][ T5627] Bluetooth: hci1: command tx timeout [ 504.152069][T18261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.152111][T18261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.302070][T18261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.302111][T18261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.533138][T18432] netlink: 'syz.2.2996': attribute type 62 has an invalid length. [ 504.996520][T18455] __nla_validate_parse: 4 callbacks suppressed [ 504.996542][T18455] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3003'. [ 505.117738][T18457] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3001'. [ 505.161411][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 505.161447][T18461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3002'. [ 505.248373][T18261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.280752][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.330416][T18261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.351451][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.352419][T18261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.380924][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.382640][T18261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.404463][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.984761][T18261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.028641][T18501] syzkaller0: entered promiscuous mode [ 506.028666][T18501] syzkaller0: entered allmulticast mode [ 506.052878][T18261] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.055709][ T5627] Bluetooth: hci1: command tx timeout [ 506.081861][T18206] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.081973][T18206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.151785][T18206] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.151889][T18206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.193743][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3014'. [ 506.290419][T18510] netlink: zone id is out of range [ 506.290438][T18510] netlink: zone id is out of range [ 506.290448][T18510] netlink: zone id is out of range [ 506.893917][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3019'. [ 506.919550][T18535] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 507.659605][T18261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.995811][T18261] veth0_vlan: entered promiscuous mode [ 508.135925][ T5627] Bluetooth: hci1: command tx timeout [ 508.189782][T18261] veth1_vlan: entered promiscuous mode [ 508.270053][T18261] veth0_macvtap: entered promiscuous mode [ 508.287007][T18261] veth1_macvtap: entered promiscuous mode [ 508.322783][T18261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.342016][T18261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.406524][T18596] netlink: 'syz.4.3034': attribute type 83 has an invalid length. [ 508.433480][T18602] netlink: 'syz.4.3034': attribute type 83 has an invalid length. [ 508.466358][T18207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.466642][T18207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.466955][T18207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.466994][T18207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.663276][T18202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.663301][T18202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.769752][T18203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.769778][T18203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.032017][T18613] netlink: 720 bytes leftover after parsing attributes in process `syz.1.2957'. [ 509.537593][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.544673][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.560565][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 509.574219][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 509.574912][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 509.819729][T18634] syzkaller0: entered promiscuous mode [ 509.819750][T18634] syzkaller0: entered allmulticast mode [ 510.085910][T18645] netlink: 'syz.4.3047': attribute type 1 has an invalid length. [ 510.357191][T18654] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3049'. [ 511.672117][ T5623] Bluetooth: hci3: command tx timeout [ 512.761772][T18656] syzkaller1: entered promiscuous mode [ 512.761795][T18656] syzkaller1: entered allmulticast mode [ 512.935345][ C1] bridge0: port 4() entered learning state [ 512.935561][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 512.937534][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 513.280082][T18668] syzkaller0: entered promiscuous mode [ 513.280109][T18668] syzkaller0: entered allmulticast mode [ 513.552502][T18692] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3056'. [ 513.554402][T18691] Bluetooth: MGMT ver 1.23 [ 513.571777][T18691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3056'. [ 513.746167][ T5623] Bluetooth: hci3: command tx timeout [ 513.877794][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'. [ 513.897742][T18702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3058'. [ 513.982356][T18702] hsr_slave_1 (unregistering): left promiscuous mode [ 514.535041][T18732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3065'. [ 514.608394][T18736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3066'. [ 514.669978][T18732] sch_tbf: burst 21990 is lower than device erspan0 mtu (32783) ! [ 514.711867][T18738] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 514.712146][T18627] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.713900][T18627] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.714152][T18627] bridge_slave_0: entered allmulticast mode [ 514.727586][T18627] bridge_slave_0: entered promiscuous mode [ 514.740234][T18627] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.742836][T18627] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.743996][T18627] bridge_slave_1: entered allmulticast mode [ 514.798939][T18627] bridge_slave_1: entered promiscuous mode [ 515.010442][T18627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.033361][T18627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.262337][T18627] team0: Port device team_slave_0 added [ 515.273389][T18627] team0: Port device team_slave_1 added [ 515.420873][T18627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.420894][T18627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.420922][T18627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.423524][T18627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.423542][T18627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.423602][T18627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.707282][T18627] hsr_slave_0: entered promiscuous mode [ 515.709648][T18627] hsr_slave_1: entered promiscuous mode [ 515.711236][T18627] debugfs: 'hsr0' already exists in 'hsr' [ 515.711261][T18627] Cannot create hsr debugfs directory [ 515.753196][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3075'. [ 515.815476][ T5623] Bluetooth: hci3: command tx timeout [ 516.129221][T18778] ieee802154 phy0 wpan0: encryption failed: -90 [ 516.359292][T18627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.359738][T18627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.493831][T18627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.493869][T18627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.617958][T18783] pim6reg0: tun_chr_ioctl cmd 35111 [ 516.719105][T18627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.720684][T18627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.831142][T18794] netlink: 'syz.1.3081': attribute type 6 has an invalid length. [ 516.860115][T18794] xt_hashlimit: size too large, truncated to 1048576 [ 517.043010][T18800] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 517.802772][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 517.895836][ T5623] Bluetooth: hci3: command tx timeout [ 517.930718][T18627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.971998][T18627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.973201][T18627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.035297][T18627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.036293][T18627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.063222][T18627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.072610][T18627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.100871][T18627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.142500][T18823] xt_policy: output policy not valid in PREROUTING and INPUT [ 518.153114][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'. [ 518.272317][T18627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.314672][T18627] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.440555][T18203] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.440667][T18203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.475597][T18203] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.475710][T18203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.590100][T18844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3092'. [ 518.590663][T18844] openvswitch: netlink: IP tunnel dst address not specified [ 518.593628][T18627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.251310][T18862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.333127][T18862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.398455][T18202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.403009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.481687][T18862] bond_slave_0: entered promiscuous mode [ 519.592992][T18862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.634647][T18862] veth1_vlan: left promiscuous mode [ 519.650988][T18862] veth0_vlan: left promiscuous mode [ 519.664807][T18862] veth0_vlan: entered promiscuous mode [ 519.673365][T18862] veth1_vlan: entered promiscuous mode [ 519.704746][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3097'. [ 519.722092][T18862] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 519.771575][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3098'. [ 519.786045][T18862] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 519.793952][T18862] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 519.881887][T18862] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 519.886125][T18204] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.886224][T18204] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.887635][ T263] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.887718][ T263] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.887822][ T263] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.887894][ T263] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.887996][ T263] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.888060][ T263] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.338498][T18889] netlink: 'syz.0.3100': attribute type 49 has an invalid length. [ 520.373220][T18880] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 520.393730][T18880] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 520.580928][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041d6e800: rx timeout, send abort [ 520.664462][T18627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.844114][T18627] veth0_vlan: entered promiscuous mode [ 520.892433][T18627] veth1_vlan: entered promiscuous mode [ 521.031753][T18627] veth0_macvtap: entered promiscuous mode [ 521.046085][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 521.046109][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3103'. [ 521.066151][T18627] veth1_macvtap: entered promiscuous mode [ 521.082138][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041d6e800: abort rx timeout. Force session deactivation [ 521.083796][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041d6e400: rx timeout, send abort [ 521.177031][T18627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.207395][T18902] xt_TCPMSS: Only works on TCP SYN packets [ 521.210971][T18902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3104'. [ 521.211077][T18902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3104'. [ 521.227185][T18627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.316543][T18204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.317867][T18204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.338260][T18204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.338403][T18204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.383126][T18905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3107'. [ 521.403164][T18905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3107'. [ 521.568260][T18905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3107'. [ 521.588264][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041d6e400: abort rx timeout. Force session deactivation [ 521.626527][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3107'. [ 521.934138][T18205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.934163][T18205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.358123][T18202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.358147][T18202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.552499][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 522.894697][T18941] netlink: 'syz.1.3111': attribute type 23 has an invalid length. [ 522.948210][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3108'. [ 523.490782][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.505417][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 523.506398][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 523.508632][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 523.511335][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.707118][T18957] netlink: 'syz.3.3115': attribute type 1 has an invalid length. [ 523.908799][T18960] bridge1: entered promiscuous mode [ 525.096799][T18202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.101309][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.103337][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.106578][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.301832][T19005] netlink: 'syz.4.3123': attribute type 11 has an invalid length. [ 525.395727][T19008] netlink: 'syz.3.3124': attribute type 26 has an invalid length. [ 525.400274][T19009] netlink: 'syz.3.3124': attribute type 26 has an invalid length. [ 525.575413][ T5623] Bluetooth: hci2: command tx timeout [ 526.066387][T19019] __nla_validate_parse: 5 callbacks suppressed [ 526.066410][T19019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3127'. [ 526.341391][T19023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.623689][T18950] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.623873][T18950] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.624023][T18950] bridge_slave_0: entered allmulticast mode [ 526.653972][T18950] bridge_slave_0: entered promiscuous mode [ 526.664530][T18950] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.664703][T18950] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.664856][T18950] bridge_slave_1: entered allmulticast mode [ 526.693837][T18950] bridge_slave_1: entered promiscuous mode [ 526.764056][T19043] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3131'. [ 526.819340][T18950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.822993][T18950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.883732][T18950] team0: Port device team_slave_0 added [ 526.894360][T18950] team0: Port device team_slave_1 added [ 526.936890][T18950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.936910][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.936939][T18950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.940170][T18950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.940188][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.940217][T18950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.092011][T18950] hsr_slave_0: entered promiscuous mode [ 527.093682][T18950] hsr_slave_1: entered promiscuous mode [ 527.094494][T18950] debugfs: 'hsr0' already exists in 'hsr' [ 527.094514][T18950] Cannot create hsr debugfs directory [ 527.450770][T19051] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.657614][ T5623] Bluetooth: hci2: command tx timeout [ 527.722713][T18950] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.722759][T18950] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.034241][T18950] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.034281][T18950] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.233445][T18950] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.233488][T18950] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.295235][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.295261][ C1] bridge0: topology change detected, propagating [ 528.295575][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.295593][ C1] bridge0: topology change detected, propagating [ 528.295775][ C1] bridge0: port 4() entered forwarding state [ 528.295819][ C1] bridge0: topology change detected, propagating [ 528.367008][T18950] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.367044][T18950] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.788358][T19081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3138'. [ 528.865681][T19074] syzkaller0: entered promiscuous mode [ 528.865709][T19074] syzkaller0: entered allmulticast mode [ 528.868717][T19082] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3138'. [ 528.920019][T19084] sctp: [Deprecated]: syz.3.3139 (pid 19084) Use of int in maxseg socket option. [ 528.920019][T19084] Use struct sctp_assoc_value instead [ 529.740116][ T5623] Bluetooth: hci2: command tx timeout [ 529.811622][T19101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3144'. [ 529.811651][T19101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3144'. [ 530.000264][T19101] netlink: 'syz.2.3144': attribute type 1 has an invalid length. [ 530.063686][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 531.818550][ T5623] Bluetooth: hci2: command tx timeout [ 533.472372][T19081] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3138'. [ 533.902466][T18950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.943200][T18950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.944146][T18950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.969854][T18950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.971011][T18950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.996022][T18950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.001733][T18950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.050478][T18950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.310465][T19162] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 534.463088][T19166] netlink: 'syz.2.3152': attribute type 8 has an invalid length. [ 534.513849][T19162] bond19: option mode: invalid value (41) [ 534.524609][T19162] bond19 (unregistering): Released all slaves [ 534.644883][T19174] batman_adv: batadv0: Adding interface: gretap1 [ 534.644906][T19174] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.644944][T19174] batman_adv: batadv0: Interface activated: gretap1 [ 534.710025][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.781522][T18950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.863347][T18950] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.893071][T18205] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.893187][T18205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.938661][T18205] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.938785][T18205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.215341][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 535.327178][T19190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3161'. [ 535.823690][T19232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3168'. [ 536.176918][T19248] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.3169'. [ 536.260675][T18950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.586326][T18950] veth0_vlan: entered promiscuous mode [ 536.612793][T18950] veth1_vlan: entered promiscuous mode [ 536.741530][T18950] veth0_macvtap: entered promiscuous mode [ 536.760129][T18950] veth1_macvtap: entered promiscuous mode [ 536.810546][T18950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.829805][T18950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.885510][T18204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.885600][T18204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.885649][T18204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.885688][T18204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.892830][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 536.892855][T19257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3172'. [ 537.193742][T19260] IPVS: Scheduler module ip_vs_sip not found [ 537.233283][T18207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.233308][T18207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.282070][T19264] netlink: 'syz.2.3174': attribute type 9 has an invalid length. [ 537.369449][T18203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.369474][T18203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.534919][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 537.534987][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 537.592686][T19269] netlink: 'syz.0.3112': attribute type 6 has an invalid length. [ 537.759089][T19285] lo: entered promiscuous mode [ 537.777529][T19285] tunl0: entered promiscuous mode [ 537.783562][T19285] gre0: entered promiscuous mode [ 537.812944][T19285] gretap0: entered promiscuous mode [ 537.834686][T19285] erspan0: entered promiscuous mode [ 537.853515][T19285] ip_vti0: entered promiscuous mode [ 537.874498][T19285] ip6_vti0: entered promiscuous mode [ 537.916213][T19285] sit0: entered promiscuous mode [ 537.948246][T19285] ip6tnl0: entered promiscuous mode [ 537.973416][T19285] ip6gre0: entered promiscuous mode [ 538.016209][T19285] syz_tun: entered promiscuous mode [ 538.034614][T19285] ip6gretap0: entered promiscuous mode [ 538.051016][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.051701][T19285] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.071926][T19285] bridge0: entered promiscuous mode [ 538.335907][T19295] netlink: 'syz.0.3182': attribute type 23 has an invalid length. [ 538.337682][T19295] netlink: 'syz.0.3182': attribute type 21 has an invalid length. [ 538.337707][T19295] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.746762][T19304] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 538.747038][T19304] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 538.747237][T19304] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 538.751413][T19304] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 538.751667][T19304] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 538.751873][T19304] netlink: 'syz.3.3184': attribute type 11 has an invalid length. [ 539.116870][T19316] mac80211_hwsim hwsim37 ..ãc¤±ì: renamed from wlan1 (while UP) [ 539.227742][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.233502][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.253787][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.255058][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.273023][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.493620][T19317] tipc: Started in network mode [ 539.493656][T19317] tipc: Node identity f6f28f05dcdd, cluster identity 4711 [ 539.493824][T19317] tipc: Enabled bearer , priority 0 [ 539.629246][T19317] syzkaller0: entered promiscuous mode [ 539.629273][T19317] syzkaller0: entered allmulticast mode [ 539.630164][T19317] tipc: Resetting bearer [ 539.691049][T19315] tipc: Resetting bearer [ 540.884551][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'. [ 540.916506][ T5623] block nbd1: Receive control failed (result -107) [ 541.337775][ T5623] Bluetooth: hci4: command tx timeout [ 542.984488][T19315] tipc: Disabling bearer [ 543.030015][ T8490] tipc: Node number set to 707759877 [ 543.319412][T19373] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 543.331993][T19373] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 543.428673][ T5623] Bluetooth: hci4: command tx timeout [ 544.092310][T19405] validate_nla: 27 callbacks suppressed [ 544.092332][T19405] netlink: 'syz.1.3205': attribute type 13 has an invalid length. [ 544.113825][T19405] netlink: 'syz.1.3205': attribute type 20 has an invalid length. [ 544.307503][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.390452][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 544.478613][T19415] ip_tables: iptables: counters copy to user failed while replacing table [ 544.566175][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 544.602727][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 544.624989][T19421] ip_tables: iptables: counters copy to user failed while replacing table [ 544.740441][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 544.809597][T19428] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3210'. [ 545.286320][T19318] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.288447][T19318] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.288617][T19318] bridge_slave_0: entered allmulticast mode [ 545.292360][T19318] bridge_slave_0: entered promiscuous mode [ 545.327462][T19318] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.327623][T19318] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.327789][T19318] bridge_slave_1: entered allmulticast mode [ 545.346692][T19318] bridge_slave_1: entered promiscuous mode [ 545.496154][ T5627] Bluetooth: hci4: command tx timeout [ 545.529062][T19318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.546284][T19318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.597553][T19318] team0: Port device team_slave_0 added [ 545.601364][T19318] team0: Port device team_slave_1 added [ 545.634088][T19472] Cannot find del_set index 2 as target [ 545.647290][T19472] nbd2: detected capacity change from 0 to 127 [ 545.711521][T19318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.711542][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.711575][T19318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.744927][T19318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.744989][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.745085][T19318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.750301][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 545.847959][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 545.848882][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 545.950402][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 545.967457][T19486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3224'. [ 545.967482][T19486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3224'. [ 545.995989][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 546.026505][T19318] hsr_slave_0: entered promiscuous mode [ 546.028691][T19318] hsr_slave_1: entered promiscuous mode [ 546.029469][T19318] debugfs: 'hsr0' already exists in 'hsr' [ 546.029490][T19318] Cannot create hsr debugfs directory [ 546.095701][T19492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3223'. [ 546.188213][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 546.375523][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'. [ 546.426794][ T5623] block nbd2: Receive control failed (result -104) [ 546.526874][T19318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.741305][T19318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.789759][T19523] netlink: 'syz.1.3231': attribute type 1 has an invalid length. [ 546.814694][T19520] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3231'. [ 546.989811][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'. [ 547.245426][T19318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.566827][T19538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 547.622483][T19538] netlink: 'syz.3.3236': attribute type 25 has an invalid length. [ 547.670826][T18207] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.686176][T18205] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.701876][T18206] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.702029][T18206] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.927972][ T31] audit: type=1804 audit(1789335651.754:13): pid=19540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3237" name="/newroot/83/cgroup.controllers" dev="tmpfs" ino=444 res=1 errno=0 [ 547.928690][ T31] audit: type=1800 audit(1789335651.754:14): pid=19540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3237" name="cgroup.controllers" dev="tmpfs" ino=444 res=0 errno=0 [ 548.939609][ T2080] block nbd2: Connection timed out, retrying (0/1 alive) [ 548.940881][ T2080] block nbd2: Connection timed out, retrying (0/1 alive) [ 548.940937][ T2080] block nbd2: Connection timed out, retrying (0/1 alive) [ 548.940985][ T2080] block nbd2: Connection timed out, retrying (0/1 alive) [ 548.941417][ T2080] block nbd2: Dead connection, failed to find a fallback [ 548.941439][ T2080] block nbd2: shutting down sockets [ 548.941453][ T2080] blk_print_req_error: 106 callbacks suppressed [ 548.941468][ T2080] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 548.941499][ T2080] buffer_io_error: 138 callbacks suppressed [ 548.941511][ T2080] Buffer I/O error on dev nbd2, logical block 3, async page read [ 548.941577][ T2080] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 548.941603][ T2080] Buffer I/O error on dev nbd2, logical block 2, async page read [ 548.941627][ T2080] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 548.941653][ T2080] Buffer I/O error on dev nbd2, logical block 1, async page read [ 548.941676][ T2080] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 548.941700][ T2080] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.970680][ T2080] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 548.970718][ T2080] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.970738][ T2080] Buffer I/O error on dev nbd2, logical block 1, async page read [ 548.970755][ T2080] Buffer I/O error on dev nbd2, logical block 2, async page read [ 548.970772][ T2080] Buffer I/O error on dev nbd2, logical block 3, async page read [ 548.970947][ T2080] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 548.970975][ T2080] Buffer I/O error on dev nbd2, logical block 0, async page read [ 548.970993][ T2080] Buffer I/O error on dev nbd2, logical block 1, async page read [ 548.986882][ T2080] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 548.999430][ T2080] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 548.999659][ T2080] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 549.032026][ T2080] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 549.062792][T19131] ldm_validate_partition_table(): Disk read failed. [ 549.113309][T19131] Dev nbd2: unable to read RDB block 0 [ 549.183463][T19131] nbd2: unable to read partition table [ 549.547242][T19131] ldm_validate_partition_table(): Disk read failed. [ 549.553466][T19131] Dev nbd2: unable to read RDB block 0 [ 549.586516][T19131] nbd2: unable to read partition table [ 549.655798][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 550.383356][T19573] netlink: 'syz.1.3244': attribute type 10 has an invalid length. [ 550.557267][T19573] team0 (unregistering): Port device team_slave_0 removed [ 550.664620][T19573] team0 (unregistering): Port device team_slave_1 removed [ 551.220053][T19592] __nla_validate_parse: 4 callbacks suppressed [ 551.220074][T19592] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3247'. [ 552.725038][T19605] netlink: 'syz.0.3251': attribute type 3 has an invalid length. [ 552.725063][T19605] netlink: 'syz.0.3251': attribute type 1 has an invalid length. [ 552.725077][T19605] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3251'. [ 552.759711][T19605] NCSI netlink: No device for ifindex 4294967295 [ 553.352711][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 553.814719][T19318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 553.838996][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.840290][T19318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 553.864802][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.876849][T19318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 553.907292][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.993648][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.006388][T19318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 554.056301][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.081125][T19619] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 554.081156][T19619] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 554.291443][T19318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.335687][T19318] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.364980][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.365179][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.403627][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.403749][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.893827][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'. [ 555.218858][T19641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.994738][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 556.061680][T19647] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 556.693954][T19318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.886366][T19685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.110509][T19687] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 558.110540][T19687] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 558.139634][T19689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3265'. [ 558.156756][T19318] veth0_vlan: entered promiscuous mode [ 558.202021][T19689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.254979][T19318] veth1_vlan: entered promiscuous mode [ 558.349853][T19318] veth0_macvtap: entered promiscuous mode [ 558.367835][T19318] veth1_macvtap: entered promiscuous mode [ 558.422431][T19318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.452351][T19318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.512305][T19694] netlink: 'syz.1.3266': attribute type 3 has an invalid length. [ 558.581144][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.586526][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.586581][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.586623][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.823703][T18206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.823734][T18206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.971185][ T263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.971210][ T263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.350346][T19698] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3183'. [ 560.398794][T19719] netlink: 'syz.4.3270': attribute type 2 has an invalid length. [ 560.398826][T19719] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3270'. [ 560.719708][T19724] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 560.762382][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 560.808843][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 560.811499][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 561.115554][ T5623] Bluetooth: hci3: link tx timeout [ 561.115800][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 562.194282][T19747] netlink: 'syz.2.3280': attribute type 3 has an invalid length. [ 562.362064][T19749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3281'. [ 562.362708][T19749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3281'. [ 562.363862][T19749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3281'. [ 562.364261][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 562.928900][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.191916][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 563.478479][T19767] unsupported nlmsg_type 40 [ 564.785149][ C1] sched: DL replenish lagged too much [ 564.844354][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880378b9c00: rx timeout, send abort [ 564.857365][T19777] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3287'. [ 564.857394][T19777] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3287'. [ 564.864676][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3287'. [ 564.935031][T19779] nft_compat: unsupported protocol 0 [ 565.344412][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880378b9c00: abort rx timeout. Force session deactivation [ 565.694090][T19799] netlink: 'syz.3.3292': attribute type 1 has an invalid length. [ 565.877777][T19799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.938870][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.240492][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3294'. [ 566.241912][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3294'. [ 567.371617][T19811] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 567.508679][T19812] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 567.559272][T19813] vlan2: entered promiscuous mode [ 567.559296][T19813] hsr0: entered promiscuous mode [ 567.559684][T19813] vlan2: entered allmulticast mode [ 567.559700][T19813] hsr0: entered allmulticast mode [ 567.559713][T19813] hsr_slave_0: entered allmulticast mode [ 567.559729][T19813] hsr_slave_1: entered allmulticast mode [ 568.270557][T19835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.310489][T19855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3302'. [ 570.354957][T19861] netlink: 'syz.3.3303': attribute type 1 has an invalid length. [ 570.547631][T19866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3303'. [ 570.694810][T19863] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 571.267796][ T79] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.269083][ T79] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.269132][ T79] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.269169][ T79] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.269493][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 571.354667][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 571.510193][T19877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3307'. [ 571.626850][T18202] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.626916][T18202] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.626956][T18202] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.627006][T18202] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.701550][T19886] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3309'. [ 572.193668][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 572.228208][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 572.969474][T19915] sock: sock_timestamping_bind_phc: sock not bind to device [ 573.966558][T19928] vlan2: entered allmulticast mode [ 573.966584][T19928] dummy0: entered allmulticast mode [ 575.055799][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.752632][T19950] netlink: 'syz.2.3328': attribute type 9 has an invalid length. [ 575.752663][T19950] netlink: 'syz.2.3328': attribute type 7 has an invalid length. [ 575.752679][T19950] netlink: 'syz.2.3328': attribute type 8 has an invalid length. [ 577.608449][T19981] Bluetooth: MGMT ver 1.23 [ 577.661522][T19985] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 577.661548][T19985] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3339'. [ 577.706887][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3338'. [ 577.707025][T19981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.877121][T19981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.458212][T19994] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3343'. [ 578.600169][T19996] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 579.491144][T20010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3347'. [ 580.048675][T20021] syzkaller0: entered promiscuous mode [ 580.048700][T20021] syzkaller0: entered allmulticast mode [ 580.401969][T20032] netlink: 'syz.3.3351': attribute type 2 has an invalid length. [ 581.499907][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3353'. [ 581.914781][T20052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.988765][T20051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3355'. [ 582.426616][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426637][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426649][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426660][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426671][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426682][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426693][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426704][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426716][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426727][T20059] tc action pedit offset must be on 32 bit boundaries [ 582.426751][T20059] 0: reclassify loop, rule prio 0, protocol 800 [ 583.963587][T20069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3360'. [ 584.814638][T20089] netlink: 'syz.0.3364': attribute type 4 has an invalid length. [ 585.085761][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 585.995284][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.730788][T20109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3369'. [ 586.730818][T20109] openvswitch: netlink: Flow actions attr not present in new flow. [ 587.140086][T20121] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3372'. [ 587.254477][T20122] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3372'. [ 587.267117][T20125] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3372'. [ 588.572933][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 588.951145][T20153] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3378'. [ 589.045422][T20153] netlink: 'syz.1.3378': attribute type 1 has an invalid length. [ 589.340685][T20153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 592.040675][T20158] bond3: (slave ip6gretap0): making interface the new active one [ 592.057205][T20158] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 592.754162][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 592.754198][T20186] netlink: 'syz.1.3386': attribute type 5 has an invalid length. [ 592.881569][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'. [ 592.881608][T20189] netlink: 'syz.1.3386': attribute type 5 has an invalid length. [ 592.925388][T18205] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.258207][T13415] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.258584][ T8075] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.258631][ T8075] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.264052][T20204] Cannot find del_set index 2 as target [ 593.336373][T20204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3388'. [ 593.336404][T20204] nbd: must specify at least one socket [ 594.366574][T20228] macvlan0: entered promiscuous mode [ 594.367269][T20228] netlink: 'syz.1.3393': attribute type 1 has an invalid length. [ 594.367291][T20228] netlink: 'syz.1.3393': attribute type 2 has an invalid length. [ 595.008616][T13415] IPVS: starting estimator thread 0... [ 595.116052][T20252] IPVS: using max 27 ests per chain, 64800 per kthread [ 595.498024][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.836814][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 597.000033][T20268] sctp: [Deprecated]: syz.1.3402 (pid 20268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.000033][T20268] Use struct sctp_sack_info instead [ 597.046702][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 599.128992][T20282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3406'. [ 599.149938][T20283] netlink: 'syz.4.3406': attribute type 3 has an invalid length. [ 599.149963][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3406'. [ 602.371744][T20280] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3406'. [ 602.372277][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'. [ 602.432823][T20282] bond_slave_0: entered promiscuous mode [ 602.490138][T20292] batman_adv: batadv0: Adding interface: dummy0 [ 602.490157][T20292] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.490192][T20292] batman_adv: batadv0: Interface activated: dummy0 [ 602.604355][T20293] batadv0: mtu less than device minimum [ 602.605942][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.607484][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.608995][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.610474][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.611944][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.613461][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.614982][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.616487][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 602.617972][T20293] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 603.427811][T18204] IPVS: starting estimator thread 0... [ 603.428088][T20316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.536000][T20322] IPVS: using max 24 ests per chain, 57600 per kthread [ 603.642293][T20312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3412'. [ 603.642653][T20312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3412'. [ 604.436510][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 624.458847][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.864455][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 637.938398][ T9] net_ratelimit: 11 callbacks suppressed [ 637.938422][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.062888][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.879681][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 3669 jiffies old. [ 688.791585][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.798882][ T8497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.424886][T13407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.047593][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 6686 jiffies old. [ 708.538856][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.139043][T18630] Bluetooth: hci2: command tx timeout [ 720.815662][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.933959][T20349] Bluetooth: hci4: command 0x0419 tx timeout [ 724.571628][T20349] Bluetooth: hci4: command 0x0419 tx timeout [ 739.552400][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.888766][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.470614][T13406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.420750][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 762.307888][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.645038][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 764.660114][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19318/1:b..l [ 764.668161][ C0] rcu: (detected by 0, t=10504 jiffies, g=109017, q=466979 ncpus=2) [ 764.676272][ C0] task:syz-executor state:R running task stack:22344 pid:19318 tgid:19318 ppid:19300 task_flags:0x400140 flags:0x00080000 [ 764.689902][ C0] Call Trace: [ 764.693218][ C0] [ 764.696375][ C0] __schedule+0x17db/0x58f0 [ 764.701038][ C0] ? __lock_acquire+0x747/0x2de0 [ 764.706036][ C0] ? __lock_acquire+0x747/0x2de0 [ 764.711022][ C0] ? __pfx___schedule+0x10/0x10 [ 764.715929][ C0] ? __lock_acquire+0x747/0x2de0 [ 764.720923][ C0] preempt_schedule_irq+0x4b/0x90 [ 764.725991][ C0] irqentry_exit+0x14f/0x910 [ 764.730617][ C0] ? trace_irq_disable+0x3b/0x140 [ 764.735731][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.741757][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 764.747084][ C0] Code: ff ff ff e8 f0 09 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 c5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d c7 3f da [ 764.766732][ C0] RSP: 0018:ffffc9000368f420 EFLAGS: 00000292 [ 764.772842][ C0] RAX: 7a6dbecad851e300 RBX: 0000000000000000 RCX: 0000000000000046 [ 764.780851][ C0] RDX: 000000000eea5268 RSI: ffffffff8e6fe025 RDI: ffffffff8c6d9c80 [ 764.788865][ C0] RBP: ffff888076dbddc0 R08: ffffffff8177f1df R09: 0000000000000000 [ 764.796873][ C0] R10: ffffc9000368f558 R11: ffffffff81b285f0 R12: ffffffff8ed5c8a0 [ 764.804890][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 764.813081][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 764.819286][ C0] ? unwind_next_frame+0x8f/0x2550 [ 764.824454][ C0] ? __kmalloc_noprof+0x307/0x720 [ 764.829517][ C0] ? unwind_next_frame+0x8f/0x2550 [ 764.834705][ C0] unwind_next_frame+0xac/0x2550 [ 764.839692][ C0] ? unwind_next_frame+0x8f/0x2550 [ 764.844848][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 764.849942][ C0] ? unwind_next_frame+0x8f/0x2550 [ 764.855097][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 764.861380][ C0] arch_stack_walk+0x11b/0x150 [ 764.866196][ C0] ? __kmalloc_noprof+0x307/0x720 [ 764.871294][ C0] stack_trace_save+0xa9/0x100 [ 764.876115][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 764.881553][ C0] save_stack+0x122/0x230 [ 764.885933][ C0] ? __pfx_save_stack+0x10/0x10 [ 764.890824][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 764.896153][ C0] ? __slab_free+0x274/0x2c0 [ 764.900775][ C0] ? qlist_free_all+0x99/0x100 [ 764.905570][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 764.911235][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 764.916329][ C0] ? __kmalloc_noprof+0x307/0x720 [ 764.921403][ C0] ? page_ext_put+0x97/0xc0 [ 764.925952][ C0] __reset_page_owner+0x71/0x1f0 [ 764.930946][ C0] __free_frozen_pages+0xc93/0xd90 [ 764.936120][ C0] __slab_free+0x274/0x2c0 [ 764.940588][ C0] qlist_free_all+0x99/0x100 [ 764.945228][ C0] kasan_quarantine_reduce+0x148/0x160 [ 764.950729][ C0] __kasan_slab_alloc+0x22/0x80 [ 764.955629][ C0] __kmalloc_noprof+0x307/0x720 [ 764.960523][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 764.965582][ C0] ? tomoyo_encode+0x2ad/0x570 [ 764.970392][ C0] ? tomoyo_encode+0x2ad/0x570 [ 764.975205][ C0] tomoyo_encode+0x2ad/0x570 [ 764.979843][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 764.985706][ C0] tomoyo_path_perm+0x283/0x560 [ 764.990607][ C0] ? tomoyo_path_perm+0x251/0x560 [ 764.995773][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 765.001188][ C0] ? __x64_sys_openat+0x138/0x170 [ 765.006319][ C0] security_inode_getattr+0x12b/0x310 [ 765.011747][ C0] __x64_sys_newfstat+0x133/0x270 [ 765.016822][ C0] ? do_sys_openat2+0x14e/0x200 [ 765.021720][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 765.027363][ C0] ? rcu_is_watching+0x16/0xb0 [ 765.032185][ C0] do_syscall_64+0x166/0x520 [ 765.036820][ C0] ? trace_irq_disable+0x3b/0x140 [ 765.041885][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.047991][ C0] ? clear_bhb_loop+0x70/0xc0 [ 765.052716][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.058651][ C0] RIP: 0033:0x7fe53c99c767 [ 765.063105][ C0] RSP: 002b:00007ffdf79957b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 765.071554][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe53c99c767 [ 765.079596][ C0] RDX: 0000000000000000 RSI: 00007ffdf79957c0 RDI: 0000000000000003 [ 765.087606][ C0] RBP: 00007ffdf79958bc R08: 0000000000000000 R09: 0000000000000000 [ 765.095624][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000026 [ 765.103639][ C0] R13: 0000000000000000 R14: 0000000000093a53 R15: 00007ffdf7995910 [ 765.111671][ C0]