last executing test programs: 2m0.015446369s ago: executing program 2 (id=11008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, "341517c1b7df60c7"}}}}}, 0x0) 1m59.913949373s ago: executing program 2 (id=11010): sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 1m59.77682119s ago: executing program 2 (id=11012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x10, @mcast1, 0xb}, 0x1c) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x7}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8f, 0x100}}}}}}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1m59.467419755s ago: executing program 2 (id=11013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)=""/27, 0x27, 0x1b, 0x1, 0x4}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x3}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x44}}, 0x0) 1m59.176339613s ago: executing program 2 (id=11017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3cfe2400000000000200000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1m55.09218021s ago: executing program 2 (id=11024): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000043"], 0x30}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006000000"], 0x14}, 0x1, 0x300000000000000, 0x0, 0x400c801}, 0x4008090) 1m39.65720924s ago: executing program 32 (id=11024): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000043"], 0x30}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006000000"], 0x14}, 0x1, 0x300000000000000, 0x0, 0x400c801}, 0x4008090) 56.324848932s ago: executing program 5 (id=11449): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) bind$ax25(r0, &(0x7f0000000a40)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000680)="4605043d3037cb12e666efea21272b711b2185870828d7f394fdf0f44a1d94a22d0869d9cfa21453eec3d94a66cd066dea1fedbf5dfbe2c8ea1e7a0b63ce5f0827966a8fae434492eda14a62881a35768745f35a39ed435aca92ff804895a95220412bef6cb99612598922558574655df67c953b48cc69e41ccac4555238a5b1a8245c6f13ed8ab5c996f432f13dd5784ccdcba7522dcd87607d5e8e8f5f4c3d5f73c82c4e6f2dd0af823647d8d053803ded0539941836bfcd2c802eb6b5f0f5fe", &(0x7f0000000180)=""/90, &(0x7f0000000780)="51d8b5ec0d0d1ec1ef7664b069506415486e7ef951944b8ac7c98eed2de3413cdf9bc3cf30c14a3602422481a2f81636fdc2a51d853031ddf7f37d82d92b1fe8a472c1704f21936683b756c328b69bde1a1f0bfafa125a011cecc698ec3dd1650ca6ca593670a39cd79aea0f361cd0be6df1e148bad11c3a0b6e196b360bf67ef0150ad3807115db15110e5b79f021e5b9441109afd47b95cc55bd9bfc30595310f97ca9b733050060a0cd40d1a6ddd05a24c6a60bd136f4e2710ba94c38975a095f66234975e4abef3b7a290e2f0b93247228db", &(0x7f0000000940)="dd7075f90400af3fd704268b3ada738e982685a76e7012d5051233386fcb8a63c5d257873a25e17d5160d85fe1e42c5c1ad7d08f30281cce268c92c5d177e08bd5e532272b47b1f833aa8375e25e894f3c9b409b3194abd8662492a3ec344bc8", 0x9, r1, 0x4}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01980400206000003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffffe000000114000300f7"], 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xfeab, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d605596e3d582a1c9322827787f4befc77fb80946a5bfccb7f13ed319ab96cbe2ff25f4a5efa691026d5ebd147fcd4a69476e1f2decbb48b2d7fe", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.139478172s ago: executing program 5 (id=11454): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x400, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {0xfff2}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0x2d92050b8d6f7024, 0x8}}}}]}, 0x40}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x3, 0xdc2, 0x2}) connect$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x3, @empty, 0x200, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x8, @private0, 0x7}}, 0x101, 0x7}, &(0x7f00000002c0)=0x90) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'wg1\x00', 0x1000}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x1, 0xf4, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x880) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e24, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}]}, 0x110) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r6, 0x12c, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf570}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 55.898680164s ago: executing program 5 (id=11459): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='l2tp\x00', 0x202080, &(0x7f0000000040)={@align=0xcb8, {0x6, 0x1, 0x6, 0x800}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x9}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x80d0}, 0x40000) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004ab77f84"], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xd, 0x3}, {0xa}, {0xd, 0x3}, {0x1, 0x5}, {0x1, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000180)=""/14, 0x7f, 0xe, 0x1, 0x4}, 0x28) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 55.66289716s ago: executing program 5 (id=11463): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) (async) r6 = socket(0x15, 0x3, 0x200) (async) connect$bt_rfcomm(r5, 0x0, 0x0) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) connect$packet(r6, &(0x7f0000000100)={0x11, 0xf8, r7, 0x1, 0x5, 0x6, @broadcast}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) listen(r1, 0x3) (async) listen(r1, 0x0) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRES32=r8], 0x58}}, 0x4000) 55.511277286s ago: executing program 5 (id=11466): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020081000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0xfff3, 0x5}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x3}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x44}}, 0x0) sendto$rxrpc(r1, &(0x7f0000000080)="ec37968101a4ad7dd283ead96e7dc0c667b9769805e000599fc41dba7a29b1749e13fe23935412c2a01dd04ebea1c3a7b9912fb6013bc3ca", 0x38, 0x40044800, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6449df7a729fc71d400ac4672d82f323056aad", @ANYRES16=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x48085}, 0x44084) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000007000000000a0000010900010073797a3100000000200004801c000180090001006d617371000000000c000280080003400000000006000740bee100000900020073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f00000002c0)={r11, 0x9}, 0x8) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 54.579480614s ago: executing program 5 (id=11480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x20, r4, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004455}, 0x2404c080) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x3) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000001280)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x300, 0x3000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb7}}, 0x24) r7 = accept4(r0, 0x0, &(0x7f00000002c0), 0x800) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000300)={'veth1_to_bridge\x00', {0x2, 0x0, @multicast2}}) bind$rxrpc(r6, &(0x7f00000004c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @local, 0x1}}, 0x24) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x20000800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r8, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42, 0xb}, [@exit, @call={0xb7, 0x0, 0x0, 0x4000000}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4004, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 39.304031173s ago: executing program 33 (id=11480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x20, r4, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004455}, 0x2404c080) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x3) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000001280)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x300, 0x3000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb7}}, 0x24) r7 = accept4(r0, 0x0, &(0x7f00000002c0), 0x800) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000300)={'veth1_to_bridge\x00', {0x2, 0x0, @multicast2}}) bind$rxrpc(r6, &(0x7f00000004c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @local, 0x1}}, 0x24) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000260001032bbd3000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x20000800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r8, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42, 0xb}, [@exit, @call={0xb7, 0x0, 0x0, 0x4000000}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4004, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 29.639996968s ago: executing program 3 (id=11700): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2001) recvmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x1}, 0x2}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="e7afb9d8fac17dd1b9a6051251d617522279d63f5e93eeb69038f91f770af1c6d4819f3a2cc39531b3a09676a971a3ab115aee8febf6995014bcf5048234b0cda42e8d17246e3496e6265e802c7b0b9478d528083a", 0x55}, 0x1, 0x0, 0x0, 0x48800}, 0x2000c895) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000020601027ed00000000000000700000805000100070000000900020073797a30000000000c00078008001200000000000500050002000000050004000100000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) 29.639406931s ago: executing program 3 (id=11701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afdff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x4040) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r0) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0x10, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005d80)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040060}, 0x11) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x3e, 0x61, 0x5f, 0x30, 0x2e]}}, 0x0, 0x56, 0x0, 0x1, 0x3}, 0x28) 27.47558863s ago: executing program 3 (id=11710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x2e}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d2c0012802800081c903e01006c617374000000001800028008000140fffffe000c000240fffffffffffffff8080003400000011014"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) 3.899360084s ago: executing program 1 (id=11783): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @private=0xa010100}]}}]}, 0x50}}, 0x20004811) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b0000000000000000000000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000400000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x41040989}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x180}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe7d5}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000280), &(0x7f0000000340)=r8}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r10, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x1886, &(0x7f0000003580)=ANY=[], 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000001000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 3.575457132s ago: executing program 1 (id=11786): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.26162247s ago: executing program 1 (id=11787): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="7800000016002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r4 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="756b7f8e7f864c7df6e77aa869978baec69555744bd48aefcb634b7e59888e623289e240a6d8ea5593f3d6389f35961bd860955d0c3c91dcbe5776cb5565fe6affc0a49b1a6079a490a9bda3d0862f2ddcd6623b4eae5665049e23ec7ef2d8140789fc5250fd0956b7d0", 0x6a) r5 = accept$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) getsockopt$inet_int(r5, 0x0, 0x27, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca0af"], 0x64}}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x2113, r6, 0xc2c5b000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x32001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ifreq(r8, 0x8927, &(0x7f0000000e80)={'macvlan1\x00', @ifru_map={0x6b, 0x7fffffff, 0x800, 0xe, 0x3, 0x53}}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 3.091389758s ago: executing program 6 (id=11789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000038c0)=""/4037, 0xfc5}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="67a267c19d8cfd6731f36eb61d35029f8efde6de5f8792c26b6c33e87d27b6b4c5453dec4bb319d1e0f9dc2c5c00e9a07a42397013e93e0fde081323a8ca9ec6377534498b19961b9905b7ba32fa81fbc72d8c2775c5d66a5a10c86b52ee", 0x5e}, {&(0x7f0000000900)="7cb540e9a40b493aaca651cc270a97dc82367197302375769b57a2221d6e545f8b5dfcf3846f287ecbc09331af7efc711578e07d8eaf2714f546db1f1c7f7a4e3fdc001691d670271d5307c95bcdb3fc20c437ecb4924136d283eea527563db4ac2fee5909d81b172a7aa4c87020290403ba5bc9d3c687074c30420db7028d1ce5e008df5e8d53253a9023ee1a74a4eeb8fab5f1f99250ed24261e09e74fe82aab7f1a968d1ff3f9a551d5c2c740055a179d4cbf47d03add4d724c97c099f9625d8c70ba010ebe86687880c5ec79e2b96ca7e2e63419e615e713dafbdbd32c3f568da433f50ffedce6b728ea70caec650e98716fcdce3033c5944e7f76237c3e3986c53200089e0e75244bb188884e5241c929f6a23f88c3bb7c2fe5b7ff7c376f711766092e53555e02d467ea2a68486b8ec2ae3103577bea35c93a5d7ad80050e6a768fbe9991dc9cd6c52adf039398743232fcf0918c6ddf9fb902701d1fea9440331a650aff0ff4903c56efd65712a3de2bdebbce5b9fa19fc2d4b4b677feb82d4e9aba05eca87078fcde44753a9c72281137ba224e15e7247892167ced818046317c78f4555f4927ddc9d171396a93cc4c1185fd7ca93a054ba4a53402453d2e6bff844596fc331e0c221b399a8bec4ccfe6db823dfa8358483edca1eb71668ed0a28edab5d2e6058a01643520fb50a631f293b94cba3d95aee51cf328fcccf35fe6d34ff24a27cb2848216b2792417e64dc4c3730b425ea273683c4e948f2d15dc10732082a0e7d92fcf587abf70e08500a4190c5c6981ab9e06b062dd7db519dc444c9c5c32a467c3bb5942058c775b6c3e6543a9e5341f5aa1a3b5b5efc72cc73a1944c56d2fc6239abedd54341bdb33541bc64a47a26b2134c25cf1ce2731662d133ab1798e4bacac47bd7df7ccff6298d3b453106226ab4d5f959286c83813eaecca4134663ba357d463ef9c4ff117a909c518d9e238a532dacbbfc59795cd9a337602453868c5db745743deaf9cb986804ba5a0063e97c4afcf7f88c7a32a8cc0dd5e6fcb249ff791b8d6b2cc5ae69d78dbcf834d6a40efff6efe8ecfa1f13e1c343a1d789c222f562a492c198e7ccea7124d96ee13731e7b790f0695d2e85b8349dc83c3238eec4af5ba3c721449f6f68807957ae3b503fc97d04c15147a10a3f5f313926c1c69f3167075ef25e6aa758062f18123dee738977b8c52aa5c75dc74b9ce31e6a8e3f0f5f67f18bece07c3dc00429d157e2217f64dc54c82e561a771254d1c0a564b9d0bc87f91d66269848f24e643c9a92784480e639f34fb4c32f07d217db5d49b86991dd5a9f8071d03b3a83b2ff663a429d20d339f81986758f9c561dca8a6a2984cf6fca855808a7fed701c4265b31042f343c6b298475ae44ad2ac2fd323df185896a10adb1fcdb0a13bd0b6554506c669d0db15e32176e3cdcf62012a07570295173a5391b95015e7c8da7232e7756f7b7d1c13d887c02817d57e77b13426b72438d3d2943fa07f62f112074611580b020c23297d3c37a254b768ee1bfaf9560b4cdbb0343eb6a56e99cc6e80beeb9b82e240abed921baa9922dea305a5f599b1bc93739f6f1fe9e8b71770a54ee53185852494f5cf4227467de71ccce5d69dd6662e4a4d26fe6e03dba7f9ba1006ad7a897d986e1aaf06e1c2c94e078503698ad485bf0b726190dbd6b241d75777513c88e40271322161c920d802529121827d07290fd3d5b42ea24168cdfddd68ff891b1e2e0e8394c43167ff67ee12fbcec0ea0fc615301a0f375b35d3db208275aadf5fd91ec60b98f2d5a20c5aac196ab60520cd2c8d2a3cfba7b29aa75ce223c25bafcf202bedc6172c0043370d5bcdb3592cb8cd5e070ccdb7dbbd0e76e4f536ad0077fd21007dddd2bd36a63da211e1b4d97d101ab41272d804d22f0af967549a1c7da1725aeadf8c126991af1415e5affcce27bc3a2ef73011f11724216fa8b851665bfbf368c56b7a3bff9198dbecc1f738ddecc5cb2fdbf8cad1d0e16e6e227c43c55dc9f461176d131524031c1df078a27f19903068d243ed2deebd9ae51727301b814fd649a90798e9ba486c47bba0a3d178f6fe610bbded8075a917d04253abf4347d2654f05d7223487a74c709acf491780824e917aac810159743dc238944c162630b8d59d8eaa777a71c92808957e13bc9bf402e05986fffd6ec78e9a5a16594e524015c845a4049f52e1abf030550ababda37336e66f748504e11790cc400274352de7ae7afe1ed8e3c8cd8b8db97cad1a2b9ae89137bad040ce1bdcabc9e86fe82e2d4d92ed9860d8e7f8eedae36f18842b2bafe4550061f909201c2d556e8e4510476a7c2263ddb46a87c8ae5a5fc7b555ad773c04c589c9ae80fea7575158e1a8397ca13c4ca27edbb49d2b0817b03388d2e86edd100bf86ff5d9b66359bc32a524676499223876f57788ac79f3a6a378d611aace7cfeccdf26c4f957213a03c7b49278ad257127f7efe8da1d2f3a38001fbe918832af6f4fd44a11b0f407ee9e6b366b24d137f211862e295b622f23ee13f9ab0421fc8e3a47682fa8a029d92df1830582a918153f4a1f978771ac388656a298137a9497f4938ed1188e56fdd41369b5d78f3171039203f22f51b367bad144dc2d06462391cebb1d6a2a362c4785bbbe3c09517ba12028af64ac9c2f92a946e808bbbaacfea2e5e0eda24b7a06fb3fe3653acd4d2e9bfba8f335ef4b209e033b6380a3212f3a8f48706a6795827180d1afeee697e4fc18dfb902a2700f28769f91ebe327b87d8c77323db66e3c4a098179de616a535fb2cc3236fc9ba5b63388d6db4923027a8dee6c392a32fa3079c193e7fabd88ee9a52d8137dfcf187314f95bb4c580a2fa4152ff9be705986e0ffe3c874713e576e72134a071e6bc2aa093a00bae64383f92fe1606f83ce8e8d8846a8a8c0f9f441953728000fe9e9d06b0ced3a85296484dedadf4411779c3dd4dcab21d1089f62d7e8a900959f4ecfeac731036f334c26401845826c4d486fff5397780f5b9a54392126c62a3f27df42be2968290a4b7a4f08b30edc456aeeeafca81eac48eed33afb986feeed3dd19f57ea4fae54cf683bab777b1d32cf08f14a4c747bfebac848c52d8483307b02b89c702fa4b3b197e2c818ead0ad4ccb642802b4db10a7586fe65ab1e199ec3e5e91ebc76a9a7f8d183ac08c1cd3103265eca49fb3aadb28e84e23ee8fe0716c7e871db1a93e8795e1a420f526266e387d9c482a181ca75abc3ce02d475331e5ce1fffc0d467181dd1cbcf7cac32c327433b7287a06ddc3073138813e859d0295bf5457577e7cefda8b6713bd7b48c628d908e053265123e91fe05075421362db6077c0a61a552a113cbf087af00c5b9e4cc0f2314f5517581b23769707036e364114015b246b3c9fcd95affe42bc23d51fbc64e976319d301b0b4fb9532f80302658130134fd7cffbc95296340246f3b92e995b434068c1879d5eef25ee87ab25f79060063ab9c82262fb59dc08fc394eb1edfbd0c4dc610c8f64487d79e434d42fe2afb37e0698361221c4b8dcc9cf93895f28f6068618705e2a0bacaad64b95e69fd5ceee3a23a952a5c9610161430c6d6da5a6a547674ef456a1044ead0dca597f6fe295991e9ce9e34e59915cc36f9c816a243429e44008c85b2252765c0e2e74959a1afbca9cac4dcb1e28d391bd43fff30e568211c5bc346e2d6ef5cbf848dcd61f5219376e8bbc8560db1226118e7bed48c903c4b45dc30ef361aadef3f576f576a8fe8156f221cb280f0dcf3a1cba011fa69858f124e95ae9de0c2d3a3f265b67fbe7e8bdd104c6732160ccdfad875238a2a2bfa894d9f83582d231caea22089e9f76b8d9dd1fcb2c6e5e76fecd7f9fbb909ee2f95929258903d83ee7681a06f61c4f1b69bf8e308dd868df217c4e8ef8a2414193de7210b1f6be59278dc90d8db57ec1c3f7c9374e7bb3d795d25b1bc489b672e8c6d738f9ec1419ef8c8d1259683d3a2f57df274e410a0135dd1e4a8099edf8f4e7abd4d835cfbb554b63fbf493b1422f0094d53e3284dc48b2ce28407543e408c08acdab8f854218db05a93195ec73b5f6b16a849b9763583062f4f2c6bcc5645eb8f3d8a2c0d036015f505460d6d59073da7f41c698ee0a668d175352d961a4ef161a24f82869b47f8221e8de94311f7250b11f664089cdc84468c08a3a89d6b2e858f7a94f26c45bb7f8f78b53c67ba92c78f90b3cb70dca1d46fdf004f87b1136904b6351b2883ed321e67f5a9bcc44491d514b313a3abda6b17a0fff40dc1ebb137375db6b34a2bc51ded0624d0ae674b61308fa6787b0e91c4de676f65f22d6ef25c616e9df264261568e41e8d5e410b331f62552dbcd786de735c939b993904c913275ee31187cc1b88722241b26bc64a1a2055344a47459f28abc3190491c4180048e2ac2d8889d167a98ed36be99fbdf1cd291af8670ac4e78fd2b680ca7b5a9319961ccd7a0558a8be549bf579d02853566207cb76b83848e5516ee58df0cd1b812970c8efc17325f1d761de2ba2432f899e5adb47280887ae069ed53e08e10152238d2aaae63cad9b199159348493409df60b5403900b20b5008244ea82feaa3da20bc74cf93effc816bfa9cec6e9f59228bdf424ff2c87ed85bb0a5af22fb5d787b7951091ead51f8ad21d0e52e44e442bb08cc04f4f481801ad1e4deaa38e54ab551a9b987bbb49f50c36efe034d743d05a74ec60df1e5614b320f19a9b71a251cbaf5d46e8a265132f947d42e24fa01a75a7fa7756409c8b6028d377e5b500b2ce11db1f21f714c802959805abd33dc23fd1df45d16cced81b41de793e7e336b21e3c98da047ba32c833733e606b332df3edb2220ff7884da316b2c754854e0bb6be0a3602735c07427832e0d4f66845b49cab73c8c7633263698b055a3c84aa2b0a35da42664eea650aebe7519b7888a79459f912a77af25e7ce8710fbf4ea057214909d7198e0e08c0ecdf9e67381d487499c22e6c95e264b00b70166b7b2e70b617438d16caff7de0166be893be73633bdc9d998d7ebdf601a39dcd7941b0706c0b50c8048480bb40e6dc7a575ac488f6ee0b777b0ad0a6209ff39669f36c5448a70ac8d5c712d8f7b1c6ae4e8545fca61a74e7e79772d51a45b47a40065465a16c17645d646d3ac77434a7745b782edca39ffd896679bb30038a610d42dab5a4f7f4adb68b5c375c4c1298a0d36028f969a801fddb56cb01373d5288c9163e7bbacdaa811ac9000edcfde274db8256fd04aa5eae36750cd33c4be01cd814733c267cdb7256369e4d0948f628669ea39315fac1d139046b2f85467a6b3194562299b2a1d0fb16e7d84d11c56521566ccdd98252bc6afdf395b0b9fa2090a9e538350de72043f7c08f524fa09f0ad609b7de1fca3c1c68d4bbe8f86c3bb74b9d0d22184a35a70f162a8636dd6a6f4c0574fc17707d0507c5a6c2e486b7f9668bd4f02d0a3f91ca7a74e789e82992b1607948d491b55b831d33eae07b86d53cdb0d37054a07726990e36d2902be6bb6e025f0bc5f7d5e128c87b218c3fb20b093c9741e5a477e73b0aa103762a5dd9c4fa104d71304ca3e7c28f6e7833bf19f0f8540524a66100aea48441a8df2a23fbd39f2110e470d7bf2d385c2b2e227a994311c26a17276390aa4d8e71f1ede18e65282f7e9a94b71777dc647c6299488826d20b5417c040137df6ee5b2ae9824820844a8aa291e9f2c9aa0a1961371d8147704dbf5aec4ad", 0x1000}, {&(0x7f0000000180)="84af6366444690acfed54a53a7614c95ad8b244a36e13f91208618268272c0a33a93e4c45fdff70634bfc527068bff9c95f52c0bc66e4f7ed330ff8c0ec7b185614cbfd542da25961f99a022f67a85e5fdf46457026778bcd5ea5bb5d864339ed37339f93878b7aad193c8c4686a33803aa3446fdc23", 0x76}, {&(0x7f0000000500)="c0e4fd195372642c6f1ebfa8a782d4ec9965172594509ea7a1551132e5f6accdacda16a3352deea5360980ee452afa2739e1d9e52530fdbe5a934607e02a50576e72b5484266082d360e5a558637d11aaf08ec31690e2f3af561f994bcde4730ad740582cdc48f5ee89a8abc81ec1521b21cd3d0036f1cc06d7cc4d7a03dd6ef2ac4f21ead099782167296c8d6192163892c24d180b17256a18878d9816c0d87712b81f2f46a948cd6f2c3edc9f63953f2bf1c92b1f8071d", 0xb8}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="aaa705bbdc0fded91061fa1782779447d1d0909bfc7fa3776b8081dc69ba7a10327d3fdc97e386ccd4859dff3a60ba4697871106c48a944d2b0b0e2a8597469ad0f5063ad8db93f16a5ea5129074502003e636c6ebc3c01557ebe469844b7c97afdf2c2b2f92997bd986d0340672ac2dca3d83075e33d6200e", 0x79}, {&(0x7f0000000340)="455cfb7d2f442fab4b6ac892", 0xc}, {&(0x7f00000005c0)="c64a272dd1e6b0d5cd8541cff47ecc2857bfee1efb552c612e7c9cdc7a4691e0d3fe4835c1b65a3477b382aac4ac1399d93a9a42c13e5f88c327bd18478aa9b310bc8211934ee437383fe5f233cb4a643d1b2afaf33fc3d600652f755999917580a05e2c0463f731bc9cf96fbab25bb66a7a465aeaac7ad0f6c15472", 0x7c}], 0x8, &(0x7f00000006c0)=[{0x90, 0x103, 0xf77d, "7ba7756cf097ee9823c77f544871a619fc1be3e821af4b270f07c89384f82f1c7a60a9e7351b9f4b661e9f3888374b3787beefd389658f4ccf8fbb2e4063da2f865f8ab0d8ffc4cef434e5c2d4b3744677a3aabaab5e7012b6497f4e22aa177e79ceeb28366eeb6802b49938e0c26775f381a32544bd14a64ec20cf314b69d"}], 0x90}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x1, {@ip4=@remote, 0x800}}}]}, 0x38}}, 0x0) 2.909407845s ago: executing program 6 (id=11791): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001880)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r2, 0x511, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_GROUP={0x8, 0x1b, 0xd}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) 2.779281849s ago: executing program 6 (id=11792): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0x9, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 2.420499523s ago: executing program 6 (id=11794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x1ff, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x48, &(0x7f00000000c0)=r3, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x402, 0x9, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x0, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x40}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.164093513s ago: executing program 1 (id=11796): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x4008001) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x20000000) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x18, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff0000000000020000000000000000000000ffff008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r3, 0x6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r3, 0xcd9, 0xade}, 0x8) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/171, 0xab, 0x100, &(0x7f00000000c0)={0xa, 0x4e24, 0xca5c, @mcast1, 0x8}, 0x1c) 1.829897339s ago: executing program 6 (id=11800): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0100002c00010000000000fcdbdf250a01f28004001800140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x1200}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) sendmmsg$inet6(r2, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d) sendfile(r3, r2, &(0x7f0000000380)=0xfffffffffffffff9, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x8}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0xfffffffd}}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, 0x0, 0x5a, 0x0, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x800) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x8084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3a}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.510603887s ago: executing program 0 (id=11802): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14040}, 0x4040811) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118300000000008510000002000000850000000500000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 1.439159863s ago: executing program 4 (id=11803): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x38}}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 1.318450736s ago: executing program 0 (id=11804): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) (async) r0 = socket$inet(0x2, 0x80001, 0x84) (async, rerun: 32) r1 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r1, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) (async) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) (async) socket$unix(0x1, 0x5, 0x0) (async) unshare(0x22020400) getpid() (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x40, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x7, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x200d, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x20000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x0, 0x109, 0x5, 0x4, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x64, 0x0, 0x2, 0x4, 0x0, @broadcast, @private=0xa010100, {[@noop, @rr={0x7, 0x2b, 0xe0, [@local, @broadcast, @local, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @loopback, @remote, @rand_addr=0x64010101, @empty, @empty]}, @timestamp={0x44, 0xc, 0xcb, 0x0, 0x1, [0x80000001, 0x5]}]}}}}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000)="01e817652b9e95f0cfc98dcb55dfe75c2288ee0d246c29949fe7e7cbd86454fdd4ddbe92ebf9c7fd6ca646ae50", 0x7, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) (async) accept4(r2, &(0x7f00000002c0)=@isdn, &(0x7f0000000340)=0x80, 0x800) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd608a37f200142c01fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (rerun: 32) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, 0x0, 0x4000) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRESDEC=r3, @ANYRES64=r3], 0x48) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002cc0)=@deltfilter={0x15f4, 0x2d, 0x101, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0x1}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x3}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @filter_kind_options=@f_route={{0xa}, {0xc0, 0x2, [@TCA_ROUTE4_ACT={0xbc, 0x6, [@m_csum={0xb8, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x89, 0x6, "7a9cb40ce645a8302d733c1299129eb446117f8bb2353462910f3c32cd5e32c5578aff162a9d519011214c6d7da45c2da466ae605113a2bc644fa003fc00b418e906f987fccfa5af4a62beed49d33b4cf882e2ef11382d47553f89eeddbb0f1915c3fca3231da1c4905b616c7d72fff92cfd0a71fba82c9e959099574eb6c91f4a8d0b7bf4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x1494, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xa}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x5}}, @TCA_ROUTE4_ACT={0x1468, 0x6, [@m_xt={0x1144, 0x17, 0x0, 0x0, {{0x7}, {0x11c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xce, 0x6, {0x1, 'raw\x00', 0x2, 0x9, "87079daf9a75a23dd4e8aa3511a98f712d32c6f8a7568ffb744500cef98682d480fb167b52cdc7e0e7381f7b81fd05b0ff6476cbcf98bf5a2a3cd8e516f4e3987b6e9c81b559938b7416216a877d254f0cba7ddb8eca4baee96f1cf3dc3df4872a6d4466e435ff49653d842d2db417304db2486c5c55c456d9e9cf2d1668f0d54071d9c27b61f67ed1d402ab79471e8b21fc2fc5d65e57f7906bb4d2518e6bea72c8507e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x1002, 0x6, "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"}, {0xc, 0x7, {0xeef0cc7d03ccd940}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x60, 0x1b, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xe, 0x2, 0x0, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x7, 0x401, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1f0, 0xf, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x3, 0x800, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x400, 0xffffffffffffffff, 0x6, 0x7fffffff}, 0xfff0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x1, 0x5, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x2, 0x2, 0xfffff8ee, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x800, 0x4, 0x80}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x6, 0x4, 0xfffffff9, 0xf113}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1f5, 0xf47, 0x3, 0x4, 0x8}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x6f5e, 0x1, 0x5, 0x269}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x7, 0x2, 0x1}, 0x2}}]}, {0xc3, 0x6, "a39dfb527435ec2bb8a68fa4f0c473c0f042dd3ba1b959e7f04810f6d21bdff5e9c38f40a35569f38171b39ac5f9bedbc14dc63e668a06e4195637197c69e1ddcdb3edee23d785130caa9f272d2183c1656a9ed3a78f1f4aa8108c8e03e2198719c47269c8382bdf01a02c1d23b71064585b4cb4b1e7a2ead7c15d2e474d13394119b36833be0bf1269f1d3a2db099b44938ad2a38c0e50ec7b75e5ace488d464eafa185b8f610956e4385213ed217952fb1d8266a02755c2bca9eb39171cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xd0, 0xc, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x96, 0x6, "237c2571af30eae5119d729d8a87f59c43545bf864dca01d92cb1f6cf05529a0f11a03a73b7e871dcec46a85d1e6e271090b104130b933ffa51cdb41c8f32d32d43a88a3076bcf67d50b440a4b0f886a31dbc467fae650a57718305693b285a4b869064205f13ff26ad83de8c02f2695d29254d1380a02c814f6cb596de292c209e8dda2d61b06de3d992de56b89547329a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xff, 0xa}}]}, 0x15f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) socket$nl_route(0x10, 0x3, 0x0) 1.2660536s ago: executing program 3 (id=11712): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x6b, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0xffffffff, 0x1}, 0xc) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000890}, 0x40050) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe8, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x40}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0xc3, 0x2a, [@random={0xd, 0xa1, "91666fe9278cd989ce2e8d28fb29be3f46c7abcc96b0fba977fb3c5b37aba4c22572e5df3a49ae40f7cfea68157687b77172288c734036d38f7f12a8533b8178015dded94029f691a1fa7ff811b403d46b35a2f5dfbeef74936f0ad7aa564157beb77f5a9e18238802e646e615860f2d7d40e7cd3536626c6f1c6eaa4c1c44bd3c33f1126f94928c3c9e9f215d9b3a71065370ab299580e195cf123a33b54d98e1"}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0x1, 0x52, 0x0, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x8}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r4 = socket$kcm(0x29, 0x0, 0x0) (async) r5 = accept$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt(r6, 0x10000000, 0x2, &(0x7f0000000440)="ba78509bc3ba23707a7cf43c615af3849ab0c5c2349f309de00cdc1cbacf7c88353cadfdb8ced3ee476b791e321d7ce418fb511ef595eaa9e865a1c284d487d1830b0a6def", 0x45) (async) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000004c0)) (async) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000500)={0x6ec1c0b0, 0x4, 0x0, 0x6, 0x9, 0xb, 0x2, 0x1000}, &(0x7f0000000540)={0xf, 0x100000000, 0xf598, 0x0, 0x4, 0xfe64, 0xffffffff, 0x9}, &(0x7f0000000580)={0x7, 0x3, 0x980, 0x1000, 0x5, 0x8636, 0x6, 0x400}, &(0x7f0000000600)={r7, r8+60000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0x8000000000000000]}, 0x8}) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xff}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2c}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8001}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x3c}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x7d}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8810}, 0x810) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000880)='erspan0\x00') (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000008c0), &(0x7f0000000900)=0x8) (async) recvfrom$inet(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x100, &(0x7f0000001940)={0x2, 0x4e22, @multicast2}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001980), r10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r0) (async) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000001a00)="ce1fdda193f1990ccd010afed2f6c6a26d14fe85225f663c230d746ed113acd2686f46fea5185138b5bb8e82095e3e6c7ffe432175951d693d1841b7d13f0efbb384273f12922a99856581d4c00650df59e919a4b0938178ca3b42e167f88f4ec376f333afe2c82beac74e820df699255b250c0acb59abbc1832fd02d6992c0b7d5f8eb4fdc5e6f3954364cb0a5170ca025c93f56e3315ca", 0x98) (async) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000001ac0)={0x4}, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001b00)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000001f00)={r11, 0x7, 0x8000000000000001}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000002300), &(0x7f0000002340)=0x30) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002380)={'wlan1\x00'}) 1.164206271s ago: executing program 4 (id=11805): socket$igmp(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f2d0000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x0, 0x3}, 0x6) 1.158802727s ago: executing program 1 (id=11806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c0024000000000084ffffff00000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.14503018s ago: executing program 0 (id=11807): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x458, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0x42c, 0x12, 0x0, 0x1, [{0x428, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x414, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "6736917714f22d17dc8fa916362e42335a45d885a9b7e00660dc83bea5cf04e32aa9"}, @NFTA_DATA_VALUE={0x11, 0x1, "18dddbe811c5ffa5e1fbfe5357"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "9c34567066362f76ebfc5d78426d9f921638ae3f57a48433bcab16711fcadd5a75069a381e43ee1a84b193dc1240adf77b1c8e0da5e4c8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DATA={0x2b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x16, 0x1, "d2e2fadb3ebadbe1e14d24b9dc6c86600242"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x61, 0x1, "b565a3ebb6df9ce84ef4d205e53a5a92c345ce0fd2560bb3393b2b1e780707d848109fba40f6c5bc5a64d9526fde36f1b842e4f6f2fc4bf91f3ad10a84b9877b74b9d1f88e008586a54de982393c60d49a65e5b23027c87f555c4c870c"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "9a068e1f1a4fb86262b3ea6cd5821a67bae87b08f1f3a4b2d833d1da78e9203a3589c6972b0fbb8dd56b5948ad7c417e4c20c2a95226f49eacd55a21f9cfcaa48c203cb103b44e054f633895c1db0fc95336ff706ad7bc5c50fc6d20f6668a7500d456c072f2fa6bf756751ab7474b97b683c7b4061dc8b98777c0047da96c270e52d30fed5e7cda1af813f62d267a7cbcc640bb6e470373ded739355da46544cd5a141fb623f8b17f409ca7b758b831e329c03e"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "536ba073a03bc4f92d053aedcc965ad846ad17febebf6dd07424b31b95fa43d37df3b1f8c0b02392f1a61cec30c0ad602cdfed895d158d9da935cb63232775cb8d09c4dcff57aa6b1b5bbbc946a1bfb23fa23385dadf71af5cab0e93a74a8023c9b8e4fa0fac350686c411a5c03ab822c994fbf9c80e61528e167413371a2905b5e0b837b965441e987c662b25eb44dd49553a6cc6d9ffc395c6319be65ef690e0ebbe5970efa17daf68fb634204ea315601bfba297d95"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x52, 0x1, "16e340484d53aac2bc8a2180849d8d633eaa19f18286836c461bfd3701e43b8abe5c4b152f57c12faeddb7dfcd5088968a5d59b68532b6f579fe59289da0de91cd288bb890b7fbd0f9aa58687f7d"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x819bf5595237d99, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x2a, 0x6, "91fd0bff8c92bb77ac98f0e72a6bb00383b11d9dc20ebff4f0e0e8fdbc3f52cd3d6855712a92"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x43, 0x6, "2b4b05fb394afb2d6f86146f1e2126d09fc4276da3d5b3b748fb015a53a4f91961f4f6655aa67c78a19d46b2969fde126f0ee0d601cb55941097ff34b256c8"}]}, @NFT_MSG_NEWSET={0x138, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8000}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_USERDATA={0xc, 0xd, 0x1, 0x0, "af4761483d42646e"}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0xc2, 0xd, 0x1, 0x0, "3cce52f8cefb03790a696f51c214137224e2685358773cf2df0e7645bb0bb56719a9333190da6c046ad358a7838f75ebd4cc3c9617ad6e44c67bb5f18dbef7f87496d1644f3a38f33867fd7dc21cc2bf6cfd4decfd628cce8240f3841c2eebe3584ec3d1463ddc2b0e9bc16ae5e18c6617f55bdd7b97c04041d7d59e39f6bb322d575b135f2397f70238290bd5594b0dfcb6994b36484fefd55cc54a228502c8aa12f7af654bf06badfc81cf6bb8c6fe9d7e9b495df81f4658349527c605"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6e4}, 0x1, 0x0, 0x0, 0x14}, 0x40000000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r2, 0x0) accept(r2, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x40040) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4bb7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) (async) syz_init_net_socket$x25(0x9, 0x5, 0x18) 935.391514ms ago: executing program 3 (id=11808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_delroute={0x24, 0x19, 0x8, 0x70bd2d, 0x25dfdbfb, {0x80, 0x20, 0x14, 0x3, 0x0, 0x2, 0x0, 0x8}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x9], 0x3, 0x8, 0x3}}, @common=@inet=@multiport={{0x50}, {0x1, 0x3, [0x4e23, 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e24, 0x4e21, 0x4e21], [0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1, 0x7a84, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffb37b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) 779.650278ms ago: executing program 0 (id=11809): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e24, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400000}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 700.848467ms ago: executing program 4 (id=11810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000b40)={0x1, 0x0, 0x1000, 0x4a, &(0x7f00000000c0)="2dba3f6dae20faf6bd5c9ca48bfa3780aadfff62c6b071907fba667b815f19c802ba7e991f3389f7bfbde05d3f27492b899ef303a3220952c404c8e46b9ae34d6e0a0bf1d7be10a4e58f", 0xec, 0x0, &(0x7f0000000a40)="bccb7ec8bfd04558702d19aa7a69763b711753c648cd0b5811564f0207e40c510f7e51ebf754a47cff34202acc20d740912c8c0cef38fe6118ebb398289e1ee139df2a22f0fb7ea45278e9db96f2880d85356b8e40e69844c8838d07b16bac981d81cc7c8062cc97923b2b2f1e5d2ce8cdbd17ba052a766d7f0231ea885f89a59d9b41f0027312440206081d31355b4e0c99a696108c9e1efc20ce28cb641b775158f79f60607a6d6beb7775c641b46db1ecfb4ade469025028214795ab9c245776eb46871d6eacdc5114fabcd827f6dfdc36d10aa913aa01daf0c17ccac51791b886b3c1b18404d567480db"}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0xfffffeff, 0x0, 0xd1f8, 0x2, 0x7ffffffe}, &(0x7f00000002c0)=0x98) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) (async) socket$netlink(0x10, 0x3, 0x8) r3 = getuid() (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x2) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r7], 0x1c}}, 0x0) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001780)={r9, 0x0, 0x0}, 0x10) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000940)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="86d73483aeaa79229c6cf8ed49e2799c0f028ac4436bcecf298fd93efdc3cfa2b8e7fa9057532f4194515c171337ce7e955c4679f64d0e782a07b0c0e3557bfb5c827ea47512b93070610fd698b5f081836bd0bacfc2bff4f173a3ba36fb8e0fe441ce49e6e569822d05e38de90a26681eded1651800c93b88c80b1325c64adf3f63597b1cd77108002300", @ANYRES32=r3, @ANYBLOB="7d0087006f7cc6290c04790a0067e99a3fb81dd27230a38d53d3530435d94016ee5b920e2f6511e13579af30d0bdbcc13fe5b10a7641dc2f12bb36a58b018bec3fa8e25d3689e21c4f87ec34ac4564a8c44caf0b6b67540b3c7d877bd0455bcffb1938a5950c041dbd72c6be55b64a1a53aad4a64809069e61b7901c500000000400e0800000000800c500ffffffff9602988008001b00", @ANYRES32=r10, @ANYBLOB="040038807c95c65efb0c66293dec8ab2207d9ccde262faf84b0ceea38251b4f36d77d59d8a3c93ef34d007ec1c3c39507d4bfe4f7894b6093f5a88a9c5a6b7ff8b454451931a07f4b1f002cdc7661df81f3512c2818d6e5dff02107144ea006ba7801fe02b3dd9b87e5158800e70e70c2bbdbe1f71e8501183ff57c2ed53bd572fa167491d15b1a2339d8c173c10a86a952d5cec576a5af3997e1966fee662e916777efa6818129b39afa08f0a2d55230b5924b87866919e9d607d181af3331c167f76fffbd2bb78ef018c82f53e4c0347482b06a85c251726032c95c2358fb23997a5704488f1c39cd60343633a7e3dfa78c90357b98a9e63f788bc02872b705fe0688992682b7e29f6977b047f22040045800400bd008ecefa9da3c6cc86f86e9fa7090b4c0ebd4469085ac3765517b9a9e78649722baed3c120ea829afb2836e545ef5e3735dcfd0a55797125c85a51844d59e7c35891c2e13b5899b0b704561d1fb999e7f46a38b1352c3c8808b795d52b7cd75019e0b899dcdbae38169717a4fa42aa4e4a2e5e880de8476cd11d9bd72678d8720a8d29cd2af3d0b25ed01763f00b2e2fba42c1b0599722a31b7f1f5bbe62d33585b4d7c877edc12e3ba2f5c793f7377210b1314345c093f6498765bd4fc857cfa3aa8d02fab882f28c4d5eb6e452e44281cfa1b8711bbab4cbbd464f312c85e97345c24211da08b6c9dbc38d02a20fee96a271b8448adb07284ba55c7283b78cbcb500c4e77ddfd6cd95a3c41938b6262dc7df5fb128ffb1e5638f0e9c5d4db7fd9335151dca35abc498b2927145a74399201bf7e8c33814c198656cfa05183ff802a0865fc94bac0577bad0bc60e3cd56d17029a19dd340906e9c0597376cffefba7487c532cd5e4dd4b6c21ca2adfbbf8d8dcc0000d500c48004009f8008002800e80f0000c0081b84756173aec1c3077fe9e627e875548e29d1d6a6382223804ea1cd034aaf5cabbe7959329edd3c493070e13fe43da28ac3af47b059b8da9dca4ad4206d02358935ade8e7d4c6c6302858a4ec35c3cf94d04603cd220bb8094a6b149d69aad06b8e089cea80350eac1b5dfd013df2888353e31930d0210213b17f2984816afd141f876de8eabb7efb3db5408ffc609347c0cc27c817d4f2c92db829bc962a3b1d6c0b5d91c47c37a54b24a9a3bbcfe8ca682a80380f9d5a4b2ede6bf9983db0990b73000000ef00d3007745d31d28eeca766e1baa0f28c7d93cc34225fb51ae990ed611475632b3b2309a55f52a9151891516065b2059fc2d8a8a61006dfdc88d492e4cac084ec9bfb159a1de4affdba3c018c6c1d5208beca6cdcc1951876c52dfd7aeb54bb7817a46969fd20b10e7c973fe9ad40f969c73ea8b995e1449c309cc848c95d1c699582d512d084393299965ad0c7cb5acb090c20ce9f894b602ef7b5b1d45e0ae6a6362d78f02a8d0fd667bbe078b0338ab0a75e03178e7b573e656334fcb3cf385b7c9eb45b4371be704e4b1fb02d10e3b9bfe8aa7ea551a7701b7c45a9b74dbb51624945603ee37ffef3107daaa0014000280100014800a0019806dbd8590fb7f0000"], 0x690}}, 0xc000) 375.961931ms ago: executing program 3 (id=11811): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x0, 0x8000, 0xffffffff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff2}, {0x2, 0x10}, {0xf, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x738}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008015}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f00000000c0)) 375.633827ms ago: executing program 0 (id=11812): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a80)={r1, &(0x7f00000018c0), 0x0}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010102, {[@rr={0x7, 0x1b, 0x18, [@loopback, @local, @loopback, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x80}]}}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 374.720958ms ago: executing program 1 (id=11813): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r5}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) syz_80211_join_ibss(0x0, &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRESDEC=r3, @ANYRES16=0x0, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x240000c5}, 0x200408c4) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000440)=@default_ap_ssid, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r7, @ANYBLOB="01002bbd6b00fbdbdf2510900cc7ab1032de25aadb12d921bddb1443e12f3014b873067b87236c00000008000300", @ANYRES64=r2, @ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006001700800a000008001800", @ANYRES32=0x0, @ANYRES8=r7], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r10 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @local, 0x1a, 0x5}}) 373.907339ms ago: executing program 6 (id=11814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x48, r3, 0x501, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x48}}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="d80000001b00010000000000fcffffff7f000001000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001030000000000000000000000000c00080008"], 0xd8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x98411ca950264a05) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb0000000000000000020001000000fc000000070c01000000030005000000000002004e21ac1e01010000000000000000020013000300000028bd700003350000", @ANYBLOB="3bdcc0e5e3346e5a17e93b45e0dc379c59bb36a2043a07b546cea6cceccdbdf3a44b589785fb69afd2b14373992952845bfbea135bdd5228a0864c43f9dbf3a81a082560ca432bc1ea5dcb46be6ebc6d019b64e934c170536668da2efdf54928f5"], 0x78}, 0x1, 0x7}, 0x1) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8001}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380)={0x4, 0x6, 0xc, 0x7f, 0x78, 0x88, 0x80, 0x4, 0x2, 0x6, 0x5, 0x2, 0x0, 0x5}, 0xe) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) 369.589773ms ago: executing program 4 (id=11815): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x20040801}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) accept4$unix(r0, 0x0, 0x0, 0x80800) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={r4, 0x94, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @local}, @in={0x2, 0xb5, @empty}, @in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in6={0xa, 0x4e22, 0xfffffffa, @mcast1, 0x9}]}, &(0x7f0000000080)=0x10) (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) 145.13788ms ago: executing program 0 (id=11816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000020101020000000000000000050000060800084000000081a8000280"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000890) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000a9f7f8e2d7044b1d660e164c64070601010000000000000000020000030500010007000000050001000700000005000100070000000900020073797a3000000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 97.316845ms ago: executing program 4 (id=11817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 0s ago: executing program 4 (id=11818): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x20010, 0xffffffffffffffff, 0xfffff000) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_b, @device_a, @initial, {0x1, 0x7}}, @tdls_setup_req={0xc, 0x0, "", 0x7, @val=0x97552e76d563e749, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x1, 0x0, {0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x7, 0x9}}, @void}}, 0x39) kernel console output (not intermixed with test programs): mode [ 1619.126233][T14978] ip6gre1: left allmulticast mode [ 1619.234261][T14978] ip6tnl2: left allmulticast mode [ 1619.242159][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10573'. [ 1619.325580][T14990] netlink: 'syz.0.10574': attribute type 1 has an invalid length. [ 1619.353231][T14990] netlink: 'syz.0.10574': attribute type 1 has an invalid length. [ 1619.383156][T14990] netlink: 15506 bytes leftover after parsing attributes in process `syz.0.10574'. [ 1619.570398][T14995] syzkaller0: entered promiscuous mode [ 1619.587372][ T30] audit: type=1804 audit(1772016215.159:27): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10578" name="/newroot/229/cgroup.controllers" dev="tmpfs" ino=1194 res=1 errno=0 [ 1619.624481][T14995] syzkaller0: entered allmulticast mode [ 1619.646300][ T30] audit: type=1800 audit(1772016215.159:28): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10578" name="cgroup.controllers" dev="tmpfs" ino=1194 res=0 errno=0 [ 1619.670031][T14995] netlink: 'syz.2.10576': attribute type 1 has an invalid length. [ 1619.684629][T15005] bridge_slave_1: left allmulticast mode [ 1619.714809][T15005] bridge_slave_1: left promiscuous mode [ 1619.721909][T15005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.784563][T15005] bridge_slave_1: entered promiscuous mode [ 1619.788771][T15014] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10581'. [ 1619.812086][T15005] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 1619.841577][T15017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10582'. [ 1620.654112][T15041] openvswitch: netlink: IP tunnel TTL not specified. [ 1622.756085][T15032] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1623.013004][ T2018] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1623.102320][ T2018] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1623.138335][T15069] pimreg: tun_chr_ioctl cmd 1074025677 [ 1623.145435][T15069] pimreg: linktype set to 1 [ 1623.150508][ T2018] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1623.192821][ T2018] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1623.308542][T15080] syzkaller0: entered promiscuous mode [ 1623.316227][T15080] syzkaller0: entered allmulticast mode [ 1623.405950][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10596'. [ 1623.460595][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10596'. [ 1623.694384][T15103] netlink: 'syz.1.10602': attribute type 5 has an invalid length. [ 1626.181619][T15086] dummy0 (unregistering): left allmulticast mode [ 1626.188418][T15086] bridge0: port 1(dummy0) entered disabled state [ 1626.292100][T15115] netlink: 'syz.1.10603': attribute type 4 has an invalid length. [ 1626.353021][T15118] netlink: 'syz.0.10605': attribute type 21 has an invalid length. [ 1626.466092][T15124] syzkaller0: entered promiscuous mode [ 1626.471612][T15124] syzkaller0: entered allmulticast mode [ 1626.592269][T15132] syzkaller0: entered promiscuous mode [ 1626.597961][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10610'. [ 1626.598521][T15135] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10610'. [ 1626.642043][T15132] syzkaller0: entered allmulticast mode [ 1626.716441][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10612'. [ 1627.088258][T15146] syzkaller0: entered promiscuous mode [ 1627.099422][T15154] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10615'. [ 1627.161321][T15146] syzkaller0: entered allmulticast mode [ 1627.234232][ T7123] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1627.259691][T15158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1627.343804][ T7123] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1628.913352][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1630.125702][T15193] syzkaller0: entered promiscuous mode [ 1630.135863][T15193] syzkaller0: entered allmulticast mode [ 1630.385672][T15215] syzkaller0: entered promiscuous mode [ 1630.391190][T15215] syzkaller0: entered allmulticast mode [ 1630.540070][T15229] netlink: 'syz.0.10634': attribute type 1 has an invalid length. [ 1630.562346][T15222] syzkaller0: entered promiscuous mode [ 1630.568132][T15222] syzkaller0: entered allmulticast mode [ 1630.654213][T15229] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1630.666100][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10634'. [ 1630.702549][T15229] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 1630.769414][T15229] bond3 (unregistering): Released all slaves [ 1630.978543][T15250] netlink: 'syz.0.10641': attribute type 2 has an invalid length. [ 1631.005217][T15250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10641'. [ 1631.210811][T15262] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 1631.380073][T15270] syzkaller0: entered promiscuous mode [ 1631.386306][T15270] syzkaller0: entered allmulticast mode [ 1631.630153][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10650'. [ 1631.666132][T15289] netlink: 252 bytes leftover after parsing attributes in process `syz.4.10650'. [ 1631.733349][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10653'. [ 1631.743508][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10653'. [ 1631.752821][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10653'. [ 1631.828282][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10654'. [ 1631.896004][T15301] syzkaller0: entered promiscuous mode [ 1631.915837][T15301] syzkaller0: entered allmulticast mode [ 1631.935039][T15301] 0: reclassify loop, rule prio 0, protocol 800 [ 1631.992258][T15303] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10656'. [ 1632.045341][T15311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10658'. [ 1632.077022][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.084306][T15303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.091885][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.099103][T15303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.118425][T15303] bridge0: left allmulticast mode [ 1632.135274][T15317] geneve3: entered promiscuous mode [ 1632.142043][ T823] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.160995][ T823] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.253575][ T823] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.262692][ T823] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.309156][T15322] syzkaller0: entered promiscuous mode [ 1632.325269][T15322] syzkaller0: entered allmulticast mode [ 1632.401034][T15330] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1632.498118][T15333] netlink: 'syz.0.10664': attribute type 6 has an invalid length. [ 1632.581809][T15335] syzkaller0: entered promiscuous mode [ 1632.611698][T15335] syzkaller0: entered allmulticast mode [ 1632.735917][T15351] netlink: 'syz.1.10669': attribute type 11 has an invalid length. [ 1632.840546][T15353] lo speed is unknown, defaulting to 1000 [ 1633.042465][T15369] syzkaller0: entered promiscuous mode [ 1633.051849][T15369] syzkaller0: entered allmulticast mode [ 1633.258791][T15353] lo speed is unknown, defaulting to 1000 [ 1633.300865][T15353] wg1 speed is unknown, defaulting to 1000 [ 1633.520505][T15391] pim6reg1: entered promiscuous mode [ 1633.529115][T15391] pim6reg1: entered allmulticast mode [ 1634.026705][T15422] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1634.220273][T15439] vxcan4: entered allmulticast mode [ 1634.235468][T15441] netlink: 'syz.1.10691': attribute type 10 has an invalid length. [ 1634.243664][T15441] bond0: entered promiscuous mode [ 1634.248714][T15441] bond_slave_0: entered promiscuous mode [ 1634.263558][T15441] bond_slave_1: entered promiscuous mode [ 1634.274957][T15441] bridge0: port 3(bond0) entered blocking state [ 1634.291112][T15441] bridge0: port 3(bond0) entered disabled state [ 1634.293371][T15446] nbd: must specify a size in bytes for the device [ 1634.306851][T15441] bond0: entered allmulticast mode [ 1634.340479][T15441] bond_slave_0: entered allmulticast mode [ 1634.385861][T15441] bond_slave_1: entered allmulticast mode [ 1634.420269][T15441] bridge0: port 3(bond0) entered blocking state [ 1634.426812][T15441] bridge0: port 3(bond0) entered forwarding state [ 1634.468448][T15440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1634.634830][T15472] ip6t_srh: unknown srh invflags 4000 [ 1635.000656][T15497] netlink: 'syz.1.10712': attribute type 1 has an invalid length. [ 1635.047710][T15499] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1636.116451][T15571] sctp: [Deprecated]: syz.4.10732 (pid 15571) Use of int in max_burst socket option deprecated. [ 1636.116451][T15571] Use struct sctp_assoc_value instead [ 1636.121012][T15575] __nla_validate_parse: 23 callbacks suppressed [ 1636.121031][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10733'. [ 1636.161525][T15575] vlan2: entered promiscuous mode [ 1636.332870][T15577] syzkaller0: entered promiscuous mode [ 1636.339150][T15577] syzkaller0: entered allmulticast mode [ 1636.375460][T15590] pimreg: entered allmulticast mode [ 1636.385890][T15593] pimreg: left allmulticast mode [ 1636.401996][T15588] IPVS: stopping backup sync thread 15595 ... [ 1636.402527][T15595] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 1639.486977][T15630] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10748'. [ 1639.498984][T15628] netlink: 'syz.3.10749': attribute type 1 has an invalid length. [ 1639.507363][T15628] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10749'. [ 1639.523000][T15633] netlink: 'syz.1.10746': attribute type 28 has an invalid length. [ 1639.678691][T15644] syzkaller0: entered promiscuous mode [ 1639.685553][T15644] syzkaller0: entered allmulticast mode [ 1639.748401][T15633] dvmrp1: entered allmulticast mode [ 1639.780972][T15640] dvmrp0: left allmulticast mode [ 1639.786454][T15640] dvmrp1: left allmulticast mode [ 1640.055921][T15656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1640.166084][T15664] netlink: 'syz.2.10758': attribute type 1 has an invalid length. [ 1640.193434][ T5842] block nbd10: Receive control failed (result -32) [ 1640.224071][T15666] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10756'. [ 1640.394463][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10761'. [ 1640.432457][T15681] gretap2: entered allmulticast mode [ 1640.510592][T15683] syzkaller0: entered promiscuous mode [ 1640.521865][T15683] syzkaller0: entered allmulticast mode [ 1640.821045][T15694] netlink: 'syz.2.10766': attribute type 8 has an invalid length. [ 1640.876384][T15696] netlink: 'syz.2.10766': attribute type 8 has an invalid length. [ 1643.499944][T15689] veth0: entered promiscuous mode [ 1643.556989][T15689] veth0: left promiscuous mode [ 1643.720480][T15731] netlink: 'syz.3.10773': attribute type 1 has an invalid length. [ 1643.764594][T15735] netlink: 'syz.2.10776': attribute type 1 has an invalid length. [ 1643.772506][T15735] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10776'. [ 1643.824130][T15733] netlink: 'syz.4.10778': attribute type 1 has an invalid length. [ 1643.832042][T15733] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10778'. [ 1644.177788][T15759] syzkaller0: entered promiscuous mode [ 1644.183449][T15759] syzkaller0: entered allmulticast mode [ 1647.749032][T15776] netlink: 'syz.0.10788': attribute type 3 has an invalid length. [ 1647.765592][T15771] ip6gre1: entered promiscuous mode [ 1647.770939][T15771] ip6gre1: entered allmulticast mode [ 1647.794585][ T2018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1647.802333][ T2018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1647.824218][T19106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1647.927246][T15787] SET target dimension over the limit! [ 1647.963417][T15789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1648.313598][T27523] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1648.397722][T15810] syzkaller0: entered promiscuous mode [ 1648.403855][T15810] syzkaller0: entered allmulticast mode [ 1648.758503][T19106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1648.977486][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10804'. [ 1649.089806][T15824] sctp: [Deprecated]: syz.0.10804 (pid 15824) Use of int in maxseg socket option. [ 1649.089806][T15824] Use struct sctp_assoc_value instead [ 1651.553387][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1651.902536][T15826] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1652.127718][ T823] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 1652.158605][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10809'. [ 1652.431007][ T823] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1652.850046][ T823] team0: Port device bridge5 removed [ 1652.911152][ T823] team0: Port device bridge6 removed [ 1652.972866][ T823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.985136][ T823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.996276][ T823] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1653.012242][ T823] bond0 (unregistering): Released all slaves [ 1653.030700][ T823] bond1 (unregistering): Released all slaves [ 1653.050939][ T823] bond2 (unregistering): (slave lo): Releasing backup interface [ 1653.060292][ T823] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1653.075168][ T823] bond2 (unregistering): Released all slaves [ 1653.100699][ T823] bond3 (unregistering): Released all slaves [ 1653.122311][ T823] bond4 (unregistering): Released all slaves [ 1653.145054][ T823] bond5 (unregistering): Released all slaves [ 1653.184589][ T823] bond6 (unregistering): Released all slaves [ 1653.215854][ T823] bond7 (unregistering): Released all slaves [ 1653.243545][ T823] bond8 (unregistering): Released all slaves [ 1653.262683][ T823] bond9 (unregistering): (slave batadv0): Releasing backup interface [ 1653.295156][ T823] bond9 (unregistering): (slave batadv1): Releasing backup interface [ 1653.315501][ T823] bond9 (unregistering): Released all slaves [ 1653.344970][ T823] bond10 (unregistering): Released all slaves [ 1653.363672][ T823] bond11 (unregistering): Released all slaves [ 1653.746909][T15860] syzkaller0: entered promiscuous mode [ 1653.772987][T15860] syzkaller0: entered allmulticast mode [ 1653.811230][T15867] tipc: Enabled bearer , priority 0 [ 1653.819222][T15867] syzkaller0: entered promiscuous mode [ 1653.824846][T15867] syzkaller0: entered allmulticast mode [ 1654.470138][ T9872] lec:lec_start_xmit: lec0:No lecd attached [ 1654.552812][T15870] tipc: Resetting bearer [ 1657.602777][T15866] tipc: Resetting bearer [ 1657.621272][T15866] tipc: Disabling bearer [ 1657.654754][T15879] syzkaller0: entered promiscuous mode [ 1657.660361][T15879] syzkaller0: entered allmulticast mode [ 1657.676777][ T7119] tipc: Node number set to 2986818138 [ 1657.790815][T15913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10824'. [ 1657.801049][T15912] xt_ecn: cannot match TCP bits for non-tcp packets [ 1657.857663][T15914] netlink: 'syz.4.10823': attribute type 8 has an invalid length. [ 1659.635826][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1659.956684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 1659.964743][ C0] lec:lec_tx_timeout: lec0 [ 1660.291661][T15894] tipc: Enabled bearer , priority 0 [ 1660.299174][T15888] syzkaller0: entered promiscuous mode [ 1660.305097][T15888] syzkaller0: entered allmulticast mode [ 1660.320229][T15886] tipc: Resetting bearer [ 1660.344354][T15886] tipc: Disabling bearer [ 1660.489615][ T823] tipc: Disabling bearer [ 1660.642700][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10829'. [ 1660.683844][ T823] tipc: Left network mode [ 1660.706764][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10829'. [ 1660.747006][T15934] netlink: 'syz.0.10830': attribute type 1 has an invalid length. [ 1660.777051][T15934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1660.882346][T15930] lo speed is unknown, defaulting to 1000 [ 1660.991801][ T823] IPVS: stopping backup sync thread 32085 ... [ 1660.996369][T15950] No such timeout policy "syz0" [ 1661.285360][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10832'. [ 1661.387746][T15957] syzkaller0: entered promiscuous mode [ 1661.408569][T15957] syzkaller0: entered allmulticast mode [ 1664.054629][T15930] lo speed is unknown, defaulting to 1000 [ 1664.070239][T15974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1664.098103][T15930] wg1 speed is unknown, defaulting to 1000 [ 1664.158356][T15976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10842'. [ 1664.188087][T15969] lo speed is unknown, defaulting to 1000 [ 1664.382330][T15986] mac80211_hwsim hwsim115 wlan1: entered promiscuous mode [ 1664.402205][T15989] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10847'. [ 1664.419326][T15989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.438731][T15989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.458719][T15989] bond0 (unregistering): Released all slaves [ 1664.512188][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1664.565111][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1664.608444][T15994] team1: entered promiscuous mode [ 1664.626652][T15994] team1: entered allmulticast mode [ 1664.636235][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1664.638064][T15994] 8021q: adding VLAN 0 to HW filter on device team1 [ 1664.652906][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1664.664734][T16004] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1664.701021][T16000] team2: entered promiscuous mode [ 1664.706471][T16000] team2: entered allmulticast mode [ 1664.712725][T16000] 8021q: adding VLAN 0 to HW filter on device team2 [ 1664.746163][T15969] lo speed is unknown, defaulting to 1000 [ 1664.838201][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10853'. [ 1664.850125][T15969] wg1 speed is unknown, defaulting to 1000 [ 1665.027521][T16021] netlink: 'syz.1.10854': attribute type 1 has an invalid length. [ 1665.056489][T16011] syzkaller0: entered promiscuous mode [ 1665.062333][T16011] syzkaller0: entered allmulticast mode [ 1665.076154][T16020] netlink: 'syz.1.10854': attribute type 1 has an invalid length. [ 1665.322744][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10855'. [ 1667.970002][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10857'. [ 1667.985232][ T823] hsr_slave_0: left promiscuous mode [ 1668.121076][ T823] team0 (unregistering): Port device team_slave_1 removed [ 1668.146321][ T823] team0 (unregistering): Port device C removed [ 1668.961800][T16094] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1669.229519][T16108] syzkaller0: entered promiscuous mode [ 1669.245848][T16108] syzkaller0: entered allmulticast mode [ 1669.415531][T16110] netlink: 'syz.2.10873': attribute type 1 has an invalid length. [ 1669.457765][T16110] __nla_validate_parse: 6 callbacks suppressed [ 1669.457785][T16110] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10873'. [ 1669.525596][T16122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10876'. [ 1669.659830][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10877'. [ 1669.695672][T16124] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1669.837899][T16139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1669.885380][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1669.887931][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1669.914820][T16139] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1669.995991][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10883'. [ 1670.053037][T16146] macvlan2: entered promiscuous mode [ 1670.108185][T16152] syzkaller0: entered promiscuous mode [ 1670.123931][T16152] syzkaller0: entered allmulticast mode [ 1670.201451][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10885'. [ 1670.246404][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10889'. [ 1670.260093][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10889'. [ 1670.394465][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10891'. [ 1670.417576][T16178] netlink: 'syz.4.10891': attribute type 18 has an invalid length. [ 1670.462750][T16164] bridge6: port 1(veth5) entered blocking state [ 1670.470939][T16164] bridge6: port 1(veth5) entered disabled state [ 1670.483780][T16164] veth5: entered allmulticast mode [ 1670.498482][T16164] veth5: entered promiscuous mode [ 1670.531234][T16186] tipc: Enabling of bearer rejected, failed to enable media [ 1670.810641][T16209] netlink: 'syz.3.10899': attribute type 1 has an invalid length. [ 1670.858004][T16209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1670.877478][T16212] syzkaller0: entered promiscuous mode [ 1670.892586][T16212] syzkaller0: entered allmulticast mode [ 1670.925962][ T823] IPVS: stop unused estimator thread 0... [ 1671.007394][T16222] xfrm0: entered promiscuous mode [ 1671.012633][T16222] xfrm0: entered allmulticast mode [ 1671.233667][T16243] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1671.241043][T16243] team0: Device ipvlan0 is already an upper device of the team interface [ 1671.341969][T16236] syzkaller0: entered promiscuous mode [ 1671.348006][T16236] syzkaller0: entered allmulticast mode [ 1671.386864][T16250] bond0: entered promiscuous mode [ 1671.392932][T16250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.233212][T16274] netlink: 'syz.1.10920': attribute type 7 has an invalid length. [ 1674.451073][T16287] netlink: 'syz.1.10925': attribute type 1 has an invalid length. [ 1674.490093][T16287] __nla_validate_parse: 16 callbacks suppressed [ 1674.490111][T16287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10925'. [ 1674.495662][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10926'. [ 1674.559031][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10927'. [ 1674.913144][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1674.921238][ C0] lec:lec_tx_timeout: lec0 [ 1674.947724][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10931'. [ 1674.993637][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1675.005722][T16312] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1675.010106][T16314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10933'. [ 1675.214287][T16317] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1675.516386][T16304] udevd[16304]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1675.674245][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10940'. [ 1675.737354][T16345] pim6reg: entered allmulticast mode [ 1675.783498][T16349] netlink: 'syz.4.10941': attribute type 10 has an invalid length. [ 1675.791442][T16349] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10941'. [ 1675.805384][T16346] geneve2: entered promiscuous mode [ 1675.828330][T16346] tipc: Failed to remove unknown binding: 66,1,1/0:1255864855/1255864857 [ 1675.866848][T16346] tipc: Failed to remove unknown binding: 66,1,1/0:1255864855/1255864857 [ 1675.914204][ T2012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.923671][ T2012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.932686][T16349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1675.947836][T16349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.962407][T16349] hsr0: entered promiscuous mode [ 1675.969603][T16349] bridge0: port 1(hsr0) entered blocking state [ 1675.979605][T16349] bridge0: port 1(hsr0) entered disabled state [ 1676.001233][T16349] hsr0: entered allmulticast mode [ 1676.016713][T16349] hsr_slave_0: entered allmulticast mode [ 1676.031360][T16349] hsr_slave_1: entered allmulticast mode [ 1676.254135][ T2012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.278342][T16357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1676.299112][ T2012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.367272][T16355] syzkaller0: entered promiscuous mode [ 1676.372912][T16355] syzkaller0: entered allmulticast mode [ 1676.563393][T16370] netlink: 'syz.4.10948': attribute type 11 has an invalid length. [ 1676.600395][T16374] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10948'. [ 1676.616821][T16372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10949'. [ 1679.136104][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10946'. [ 1679.145365][T16365] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1679.639787][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10958'. [ 1679.671470][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10958'. [ 1679.741506][T16420] lo speed is unknown, defaulting to 1000 [ 1679.759929][T16426] sctp: [Deprecated]: syz.2.10961 (pid 16426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1679.759929][T16426] Use struct sctp_sack_info instead [ 1679.826763][T16429] wg1: entered promiscuous mode [ 1679.831856][T16429] wg1: entered allmulticast mode [ 1679.854489][T16426] openvswitch: netlink: IP tunnel dst address not specified [ 1680.070059][T16440] netlink: 'syz.2.10964': attribute type 1 has an invalid length. [ 1680.579406][T16420] lo speed is unknown, defaulting to 1000 [ 1680.603207][ T2012] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.623408][ T2012] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.649383][ T2012] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.676705][ T2012] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.723336][T16420] wg1 speed is unknown, defaulting to 1000 [ 1680.733765][T16471] x_tables: duplicate underflow at hook 1 [ 1680.757520][T16472] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1680.761449][T16468] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1680.784281][T16470] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 1681.110990][T16487] syzkaller0: entered promiscuous mode [ 1681.130396][T16487] syzkaller0: entered allmulticast mode [ 1681.279739][T16497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10975'. [ 1681.519657][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10980'. [ 1681.582822][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10980'. [ 1681.595581][T16520] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1681.603809][T16520] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1681.690113][T16517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10980'. [ 1681.836661][T16531] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1681.881743][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10985'. [ 1681.935670][T16530] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1682.452287][T16558] netlink: 'syz.1.10993': attribute type 14 has an invalid length. [ 1682.826967][T16574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10998'. [ 1682.844909][T16574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10998'. [ 1682.902233][T16579] netlink: 'syz.4.10999': attribute type 11 has an invalid length. [ 1682.925316][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10998'. [ 1683.056314][T16591] netlink: 'syz.4.11001': attribute type 10 has an invalid length. [ 1683.097125][T16591] team0: Device vxcan1 is of different type [ 1683.298022][T16601] syzkaller0: entered promiscuous mode [ 1683.315442][T16601] syzkaller0: entered allmulticast mode [ 1683.589433][T16611] lo speed is unknown, defaulting to 1000 [ 1683.881319][T16625] ipvlan0: entered promiscuous mode [ 1683.894284][T16625] ipvlan0: left promiscuous mode [ 1683.925866][T16627] tipc: Enabling of bearer rejected, failed to enable media [ 1684.158567][T16611] lo speed is unknown, defaulting to 1000 [ 1684.177677][T16611] wg1 speed is unknown, defaulting to 1000 [ 1684.619712][T16646] bridge0: left allmulticast mode [ 1684.635251][T16660] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20002 [ 1684.768657][T16648] syzkaller0: entered promiscuous mode [ 1684.793311][T16648] syzkaller0: entered allmulticast mode [ 1684.935691][T16676] netlink: 'syz.3.11022': attribute type 2 has an invalid length. [ 1684.950075][T16666] syzkaller0: entered promiscuous mode [ 1684.973561][T16666] syzkaller0: entered allmulticast mode [ 1684.982048][T16676] netlink: 'syz.3.11022': attribute type 1 has an invalid length. [ 1685.014675][T16676] __nla_validate_parse: 11 callbacks suppressed [ 1685.014696][T16676] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11022'. [ 1685.055058][T16679] netlink: del zone limit has 4 unknown bytes [ 1688.380561][T16669] syzkaller0: entered promiscuous mode [ 1688.386407][T16669] syzkaller0: entered allmulticast mode [ 1691.122259][T16698] x_tables: duplicate underflow at hook 3 [ 1691.158231][T16700] netlink: 'syz.4.11026': attribute type 39 has an invalid length. [ 1691.197755][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11027'. [ 1691.324527][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11032'. [ 1691.336314][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11032'. [ 1691.402635][T16717] gretap0: entered promiscuous mode [ 1691.413974][T16717] gretap0: left promiscuous mode [ 1691.450944][T16721] syzkaller0: entered promiscuous mode [ 1691.457075][T16721] syzkaller0: entered allmulticast mode [ 1691.527003][T16724] syzkaller0: entered promiscuous mode [ 1691.532727][T16724] syzkaller0: entered allmulticast mode [ 1691.581829][T16726] syzkaller0: entered promiscuous mode [ 1691.588091][T16726] syzkaller0: entered allmulticast mode [ 1691.727832][T16737] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11040'. [ 1691.738481][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11040'. [ 1691.883840][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11044'. [ 1692.006073][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11048'. [ 1692.020944][T16753] netlink: 'syz.0.11044': attribute type 9 has an invalid length. [ 1692.029093][T16753] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.11044'. [ 1692.065682][T16752] lo speed is unknown, defaulting to 1000 [ 1692.137088][T16757] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11047'. [ 1692.185133][T16761] syzkaller0: entered promiscuous mode [ 1692.190652][T16761] syzkaller0: entered allmulticast mode [ 1692.271584][T16752] lo speed is unknown, defaulting to 1000 [ 1692.280150][T16752] wg1 speed is unknown, defaulting to 1000 [ 1692.335488][T16763] syzkaller0: entered promiscuous mode [ 1692.341492][T16763] syzkaller0: entered allmulticast mode [ 1692.679486][T16779] syzkaller0: entered promiscuous mode [ 1692.690216][T16779] syzkaller0: entered allmulticast mode [ 1692.968268][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11061'. [ 1692.999669][T16796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1693.020188][T16796] vlan0: entered promiscuous mode [ 1693.031061][T16796] bond3: entered promiscuous mode [ 1693.037557][T16796] vlan0: entered allmulticast mode [ 1693.042770][T16796] bond3: entered allmulticast mode [ 1693.051814][T16794] syzkaller0: entered promiscuous mode [ 1693.066155][T16794] syzkaller0: entered allmulticast mode [ 1693.195263][T16804] syzkaller0: entered promiscuous mode [ 1693.202264][T16804] syzkaller0: entered allmulticast mode [ 1693.652482][T16817] siw: device registration error -23 [ 1693.736085][T16824] tipc: Enabled bearer , priority 0 [ 1693.775703][T16824] tipc: Resetting bearer [ 1693.815533][T16821] tipc: Disabling bearer [ 1693.974912][T16832] lo speed is unknown, defaulting to 1000 [ 1694.082821][T16841] syzkaller0: entered promiscuous mode [ 1694.110383][T16841] syzkaller0: entered allmulticast mode [ 1694.268640][T16843] hsr_slave_0: left promiscuous mode [ 1694.276166][T16843] hsr_slave_1: left promiscuous mode [ 1694.317741][T16832] lo speed is unknown, defaulting to 1000 [ 1694.319535][T16831] lo speed is unknown, defaulting to 1000 [ 1694.325920][T16832] wg1 speed is unknown, defaulting to 1000 [ 1694.544345][T16858] syzkaller0: entered promiscuous mode [ 1694.549863][T16858] syzkaller0: entered allmulticast mode [ 1694.641807][T16865] bond4: entered promiscuous mode [ 1694.734888][T16871] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1694.784178][T16831] lo speed is unknown, defaulting to 1000 [ 1694.792833][T16831] wg1 speed is unknown, defaulting to 1000 [ 1694.823011][T16873] tipc: Enabled bearer , priority 0 [ 1694.855382][T16873] tipc: Resetting bearer [ 1694.909241][T16872] tipc: Disabling bearer [ 1694.918017][T16879] netlink: 'syz.3.11087': attribute type 1 has an invalid length. [ 1694.937782][T16877] team_slave_1: Caught tx_queue_len zero misconfig [ 1695.188197][T16887] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1695.194447][T16887] pim6reg1: linktype set to 805 [ 1695.209866][T16887] IPVS: Error connecting to the multicast addr [ 1695.475012][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1695.484733][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1695.702239][T16920] syzkaller0: entered promiscuous mode [ 1695.709761][T16920] syzkaller0: entered allmulticast mode [ 1695.720518][T16923] tipc: Enabled bearer , priority 0 [ 1695.755671][T16923] tipc: Resetting bearer [ 1695.774161][T16922] tipc: Disabling bearer [ 1695.870656][T16926] netlink: 'syz.1.11099': attribute type 31 has an invalid length. [ 1696.230896][T16954] __nla_validate_parse: 13 callbacks suppressed [ 1696.230914][T16954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11107'. [ 1696.389554][T16954] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1696.424358][T16971] udevd[16971]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1696.447130][T16972] netlink: 'syz.0.11108': attribute type 39 has an invalid length. [ 1696.472148][T16971] udevd[16971]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1696.733864][T16978] syzkaller0: entered promiscuous mode [ 1696.740595][T16978] syzkaller0: entered allmulticast mode [ 1696.809981][T16988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11114'. [ 1699.284862][T16986] syzkaller1: entered promiscuous mode [ 1699.290480][T16986] syzkaller1: entered allmulticast mode [ 1699.501334][T16991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.517687][T16991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.549748][T16999] netlink: 'syz.0.11118': attribute type 3 has an invalid length. [ 1699.574423][T16999] netlink: 666 bytes leftover after parsing attributes in process `syz.0.11118'. [ 1699.645508][T16991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.657865][T16991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.686556][T16993] lo speed is unknown, defaulting to 1000 [ 1699.747841][T17008] syzkaller0: entered promiscuous mode [ 1699.754447][T17008] syzkaller0: entered allmulticast mode [ 1699.835902][T16991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.870914][T16991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.406300][T16991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.416985][T16991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.438059][T16993] lo speed is unknown, defaulting to 1000 [ 1702.460313][T16993] wg1 speed is unknown, defaulting to 1000 [ 1702.491844][ T2006] veth9: left allmulticast mode [ 1702.497003][ T2006] veth9: left promiscuous mode [ 1702.502091][ T2006] bridge8: port 2(veth9) entered disabled state [ 1702.512205][ T2006] ip6gretap2: left allmulticast mode [ 1702.519787][ T2006] ip6gretap2: left promiscuous mode [ 1702.529089][ T2006] bridge8: port 1(ip6gretap2) entered disabled state [ 1702.560529][ T2006] bridge_slave_1: left allmulticast mode [ 1702.566469][ T2006] bridge_slave_1: left promiscuous mode [ 1702.572352][ T2006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.355115][ T2006] ¾x9ÿ: left promiscuous mode [ 1703.359964][ T2006] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1703.551652][ T2006] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1703.560242][ T2006] ip6gretap1 (unregistering): left allmulticast mode [ 1703.579468][ T2006] bond0 (unregistering): (slave ip6gre2): Releasing backup interface [ 1703.628956][ T2006] tipc: Disabling bearer [ 1704.023674][ T2307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1704.037755][ T2307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1704.046729][ T2307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1704.055347][ T2307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1704.063021][ T2307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1704.157580][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1704.168157][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1704.175785][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1704.289090][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1704.304138][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1704.432371][ T2006] bond1 (unregistering): left allmulticast mode [ 1704.438951][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1704.447031][ T2006] bond1 (unregistering): left promiscuous mode [ 1704.461714][ T2006] team0: Port device macvlan3 removed [ 1704.484517][ T2006] bond1 (unregistering): Released all slaves [ 1704.509335][ T2006] bond2 (unregistering): Released all slaves [ 1704.527487][ T2006] bond3 (unregistering): Released all slaves [ 1704.544539][ T2006] bond4 (unregistering): Released all slaves [ 1704.571906][ T2006] bond5 (unregistering): Released all slaves [ 1704.590626][ T2006] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 1704.601591][ T2006] bond6 (unregistering): Released all slaves [ 1704.619217][ T2006] bond0 (unregistering): Released all slaves [ 1704.645285][ T2006] bond7 (unregistering): left allmulticast mode [ 1704.652860][ T2006] team0: Port device bond7 removed [ 1704.661865][ T2006] bond7 (unregistering): Released all slaves [ 1704.680448][ T2006] bond8 (unregistering): Released all slaves [ 1704.945151][ T2006] bond9 (unregistering): (slave gretap1): Releasing active interface [ 1704.990823][ T2006] bond8 (unregistering): (slave geneve3): Releasing active interface [ 1705.247651][ T2006] bond10 (unregistering): (slave bridge6): Releasing active interface [ 1705.419349][ T2006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.429656][ T2006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.440509][ T2006] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1705.450528][ T2006] bond0 (unregistering): Released all slaves [ 1705.460653][ T2006] bond1 (unregistering): Released all slaves [ 1705.474349][ T2006] bond2 (unregistering): Released all slaves [ 1705.492231][ T2006] bond3 (unregistering): Released all slaves [ 1705.509596][ T2006] bond4 (unregistering): Released all slaves [ 1705.523213][ T2006] bond5 (unregistering): Released all slaves [ 1705.536359][ T2006] bond6 (unregistering): Released all slaves [ 1705.550269][ T2006] bond7 (unregistering): Released all slaves [ 1705.565777][ T2006] bond8 (unregistering): Released all slaves [ 1705.585713][ T2006] bond9 (unregistering): Released all slaves [ 1705.600847][ T2006] bond10 (unregistering): Released all slaves [ 1705.618690][ T2006] bond11 (unregistering): (slave vcan0): Releasing backup interface [ 1705.627435][ T2006] vcan0: left promiscuous mode [ 1705.632888][ T2006] bond11 (unregistering): Released all slaves [ 1705.651885][ T2006] bond12 (unregistering): (slave batadv1): Releasing active interface [ 1705.661659][ T2006] bond12 (unregistering): (slave batadv2): Releasing active interface [ 1705.670797][ T2006] bond12 (unregistering): Released all slaves [ 1705.686089][ T2006] bond13 (unregistering): (slave veth5): Releasing backup interface [ 1705.694196][ T2006] veth5: left promiscuous mode [ 1705.700825][ T2006] bond13 (unregistering): Released all slaves [ 1705.872547][T17029] lo speed is unknown, defaulting to 1000 [ 1705.955102][ T826] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1705.999834][ T826] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.057348][ T30] audit: type=1800 audit(1772016301.629:29): pid=17048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11129" name="memory.events" dev="tmpfs" ino=2495 res=0 errno=0 [ 1706.140050][ T2006] hmac(sha224: left promiscuous mode [ 1706.195557][ T826] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.223291][ T826] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.280921][ T2006] : left promiscuous mode [ 1706.314745][ T823] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.324230][ T823] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.347353][T17029] lo speed is unknown, defaulting to 1000 [ 1706.358363][T17029] wg1 speed is unknown, defaulting to 1000 [ 1706.361374][ T5842] Bluetooth: hci0: command tx timeout [ 1706.385871][ T2006] æÿîÿ: left promiscuous mode [ 1706.410558][ T826] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.420554][ T826] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.491466][ T2006] tipc: Left network mode [ 1706.492412][T17057] lo speed is unknown, defaulting to 1000 [ 1706.562211][ T2006] tipc: Disabling bearer [ 1706.588687][ T2006] tipc: Left network mode [ 1706.837419][T17063] syzkaller0: entered promiscuous mode [ 1706.843214][T17063] syzkaller0: entered allmulticast mode [ 1708.437689][ T5842] Bluetooth: hci0: command tx timeout [ 1709.809912][T17029] chnl_net:caif_netlink_parms(): no params data found [ 1709.830532][T17057] lo speed is unknown, defaulting to 1000 [ 1709.838077][T17073] syzkaller0: entered promiscuous mode [ 1709.843889][T17073] syzkaller0: entered allmulticast mode [ 1709.976585][T17057] wg1 speed is unknown, defaulting to 1000 [ 1710.158334][T17082] syzkaller0: entered promiscuous mode [ 1710.164002][T17082] syzkaller0: entered allmulticast mode [ 1710.170777][T17029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.178321][T17029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.186966][T17029] bridge_slave_0: entered allmulticast mode [ 1710.197348][T17029] bridge_slave_0: entered promiscuous mode [ 1710.208205][T17029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.218301][T17029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.225929][T17029] bridge_slave_1: entered allmulticast mode [ 1710.244345][T17029] bridge_slave_1: entered promiscuous mode [ 1710.368042][T17029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1710.422508][T17029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1710.455784][T17084] syz_tun: entered allmulticast mode [ 1710.465453][T17029] team0: Port device team_slave_0 added [ 1710.494589][T17029] team0: Port device team_slave_1 added [ 1710.521331][ T5842] Bluetooth: hci0: command tx timeout [ 1710.600915][T17086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11138'. [ 1710.625056][T17029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.634086][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.660480][T17029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.704597][T17029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.711660][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.742476][T17029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.821156][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11143'. [ 1710.918033][T17029] hsr_slave_0: entered promiscuous mode [ 1710.938931][T17029] hsr_slave_1: entered promiscuous mode [ 1711.035421][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11146'. [ 1711.429903][T17144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11153'. [ 1711.465061][T17140] syzkaller0: entered promiscuous mode [ 1711.470578][T17140] syzkaller0: entered allmulticast mode [ 1712.611145][ T5842] Bluetooth: hci0: command tx timeout [ 1714.432656][T17157] syzkaller0: entered promiscuous mode [ 1714.438243][T17157] syzkaller0: entered allmulticast mode [ 1714.893798][T17172] syzkaller0: entered promiscuous mode [ 1714.899309][T17172] syzkaller0: entered allmulticast mode [ 1715.443353][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11169'. [ 1717.940922][T17217] lo speed is unknown, defaulting to 1000 [ 1717.962465][T17029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1718.075000][T17029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1718.114137][T17029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1718.135923][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11173'. [ 1718.172061][T17029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1718.206092][T17236] sctp: [Deprecated]: syz.1.11173 (pid 17236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1718.206092][T17236] Use struct sctp_sack_info instead [ 1718.227445][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11173'. [ 1718.363501][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11174'. [ 1718.464422][T17029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1718.495350][T17029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.541252][ T2012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.548420][ T2012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.585252][ T2012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.592534][ T2012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.627254][ T9872] lec:lec_start_xmit: lec0:No lecd attached [ 1718.647151][T17226] lo speed is unknown, defaulting to 1000 [ 1718.660399][T17217] lo speed is unknown, defaulting to 1000 [ 1718.789539][T17217] wg1 speed is unknown, defaulting to 1000 [ 1719.180146][T17029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1719.249355][T17283] netlink: 252 bytes leftover after parsing attributes in process `syz.0.11182'. [ 1719.391531][T17288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11184'. [ 1719.391798][T17289] netlink: 'syz.1.11183': attribute type 39 has an invalid length. [ 1719.416649][T17288] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11184'. [ 1719.418293][T17226] lo speed is unknown, defaulting to 1000 [ 1719.487734][T17288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11184'. [ 1719.560455][T17226] wg1 speed is unknown, defaulting to 1000 [ 1719.737550][T17296] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11185'. [ 1719.927218][ T2006] hsr_slave_0: left promiscuous mode [ 1719.950469][ T2006] hsr_slave_0: left promiscuous mode [ 1719.957007][ T2006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.968194][ T2006] veth1_macvtap: left promiscuous mode [ 1719.974695][ T2006] veth0_macvtap: left promiscuous mode [ 1719.980463][ T2006] veth1_vlan: left allmulticast mode [ 1719.987477][ T2006] veth1_vlan: left promiscuous mode [ 1719.992859][ T2006] veth0_vlan: left promiscuous mode [ 1720.112750][ T2006] pim6reg (unregistering): left allmulticast mode [ 1720.618393][ T2006] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 1720.937703][T17029] veth0_vlan: entered promiscuous mode [ 1720.995836][T17029] veth1_vlan: entered promiscuous mode [ 1721.172186][T17339] pimreg: tun_chr_ioctl cmd 1074025677 [ 1721.184667][T17339] pimreg: linktype set to 519 [ 1721.218189][T17029] veth0_macvtap: entered promiscuous mode [ 1721.296532][T17029] veth1_macvtap: entered promiscuous mode [ 1721.318884][T17029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.332598][T17029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.387394][ T821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.396666][ T821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.410445][ T821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.423562][ T821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.606217][ T826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.638629][ T826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.679883][ T821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.699487][ T821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.755822][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11201'. [ 1721.908075][ T2006] IPVS: stop unused estimator thread 0... [ 1721.926813][ T2006] IPVS: stop unused estimator thread 0... [ 1722.075203][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11205'. [ 1722.270638][T17382] netlink: 'syz.4.11210': attribute type 1 has an invalid length. [ 1722.385709][T17382] bond4: entered promiscuous mode [ 1722.401179][T17382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1722.465720][T17393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1722.494032][T17393] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 1722.507214][T17393] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 1722.522834][T17393] bond4: (slave vti1): making interface the new active one [ 1722.533344][T17393] vti1: entered promiscuous mode [ 1722.540013][T17393] bond4: (slave vti1): Enslaving as an active interface with an up link [ 1723.268536][T17440] __nla_validate_parse: 7 callbacks suppressed [ 1723.268555][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11224'. [ 1723.311939][T17440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1723.409649][T17445] bond5: (slave batadv1): Opening slave failed [ 1723.674246][T17457] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11227'. [ 1723.728061][T17459] netlink: 'syz.0.11229': attribute type 21 has an invalid length. [ 1723.755044][T17459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11229'. [ 1723.953149][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 1723.961329][ C0] lec:lec_tx_timeout: lec0 [ 1724.030044][T17464] netlink: 'syz.4.11231': attribute type 1 has an invalid length. [ 1724.129101][T17472] netlink: 'syz.4.11231': attribute type 6 has an invalid length. [ 1724.283005][T17495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11238'. [ 1724.302329][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11237'. [ 1724.455346][T17499] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1724.888454][T17535] syzkaller0: entered promiscuous mode [ 1724.897955][T17535] syzkaller0: entered allmulticast mode [ 1724.981090][T17541] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11252'. [ 1725.086130][T17545] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1727.715700][T17529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1727.956440][T17578] siw: device registration error -23 [ 1728.059356][ T7120] IPVS: starting estimator thread 0... [ 1728.066692][T17577] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1728.157661][T17590] syzkaller0: entered promiscuous mode [ 1728.160240][T17585] IPVS: using max 36 ests per chain, 86400 per kthread [ 1728.166607][T17590] syzkaller0: entered allmulticast mode [ 1728.190021][T17591] No such timeout policy "syz0" [ 1728.295500][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11264'. [ 1728.501197][T17602] tipc: Enabling of bearer rejected, failed to enable media [ 1728.766169][T17611] syzkaller0: entered promiscuous mode [ 1728.772902][T17611] syzkaller0: entered allmulticast mode [ 1728.803942][T17622] netlink: 'syz.4.11273': attribute type 39 has an invalid length. [ 1728.816788][T17614] lo speed is unknown, defaulting to 1000 [ 1728.824678][T17622] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11273'. [ 1728.844005][T17622] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11273'. [ 1728.903028][T17622] netlink: 'syz.4.11273': attribute type 5 has an invalid length. [ 1728.911106][T17622] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11273'. [ 1731.325948][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1731.733204][T17614] lo speed is unknown, defaulting to 1000 [ 1731.751751][T17614] wg1 speed is unknown, defaulting to 1000 [ 1731.962140][T17650] wg1: Caught tx_queue_len zero misconfig [ 1732.116906][T17656] netlink: 508 bytes leftover after parsing attributes in process `syz.3.11282'. [ 1732.538458][T17675] team_slave_0: entered promiscuous mode [ 1732.544250][T17675] team_slave_1: entered promiscuous mode [ 1732.552185][T17675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1732.580442][T17675] team0: Device macvlan2 is already an upper device of the team interface [ 1732.589772][T17677] xt_policy: too many policy elements [ 1732.607831][T17675] team_slave_0: left promiscuous mode [ 1732.613323][T17675] team_slave_1: left promiscuous mode [ 1732.825129][T17693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11291'. [ 1732.936153][T17685] syzkaller0: entered promiscuous mode [ 1732.941651][T17685] syzkaller0: entered allmulticast mode [ 1733.062151][T17711] netlink: 'syz.1.11295': attribute type 64 has an invalid length. [ 1733.110699][T17712] Bluetooth: MGMT ver 1.23 [ 1733.235260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1735.767190][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1735.829921][T17730] lo speed is unknown, defaulting to 1000 [ 1735.839031][T17734] tipc: Enabled bearer , priority 0 [ 1735.866953][T17734] syzkaller0: entered promiscuous mode [ 1735.877887][T17734] syzkaller0: entered allmulticast mode [ 1735.995350][T17743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1736.022516][T17734] tipc: Resetting bearer [ 1736.068475][T17729] tipc: Resetting bearer [ 1736.124961][T17729] tipc: Disabling bearer [ 1736.155382][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11305'. [ 1736.193305][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11305'. [ 1736.216134][T17757] netlink: 'syz.5.11305': attribute type 7 has an invalid length. [ 1736.280181][T17730] lo speed is unknown, defaulting to 1000 [ 1736.296438][T17730] wg1 speed is unknown, defaulting to 1000 [ 1736.324497][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11306'. [ 1736.521332][T17774] sit0: Caught tx_queue_len zero misconfig [ 1736.644087][T17774] veth0: entered promiscuous mode [ 1736.644235][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11308'. [ 1736.662258][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11309'. [ 1736.672984][T17783] bridge0: entered allmulticast mode [ 1736.913306][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1736.921365][ C0] lec:lec_tx_timeout: lec0 [ 1736.955506][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11318'. [ 1737.013283][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11318'. [ 1737.049617][T17797] geneve3: entered promiscuous mode [ 1737.066187][T17797] geneve3: entered allmulticast mode [ 1737.210304][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11322'. [ 1737.319845][T17826] netlink: 'syz.4.11324': attribute type 1 has an invalid length. [ 1737.357789][T17826] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11324'. [ 1737.527580][T17842] : renamed from bond_slave_0 (while UP) [ 1737.552722][T17849] netlink: 'syz.3.11326': attribute type 1 has an invalid length. [ 1737.623313][T17848] lo speed is unknown, defaulting to 1000 [ 1737.931123][T17848] lo speed is unknown, defaulting to 1000 [ 1737.938731][T17848] wg1 speed is unknown, defaulting to 1000 [ 1738.395005][T17864] bond6: option packets_per_slave: invalid value (1048582) [ 1738.402646][T17864] bond6: option packets_per_slave: allowed values 0 - 65535 [ 1738.420814][T17864] bond6 (unregistering): Released all slaves [ 1738.618274][T17880] sctp: [Deprecated]: syz.4.11340 (pid 17880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1738.618274][T17880] Use struct sctp_sack_info instead [ 1738.739690][T17881] tipc: Failed to remove unknown binding: 66,0,0/2986818138:2092423024/2092423027 [ 1738.763661][T17881] tipc: Failed to remove unknown binding: 66,0,0/2986818138:2092423024/2092423026 [ 1738.783554][T17881] tipc: Failed to remove unknown binding: 66,0,0/2986818138:2092423024/2092423025 [ 1738.800666][T17881] tipc: Failed to remove unknown binding: 66,0,0/2986818138:2092423024/2092423027 [ 1738.810273][T17881] tipc: Failed to remove unknown binding: 66,0,0/2986818138:2092423024/2092423026 [ 1738.821532][T17881] tipc: Failed to remove unknown binding: 66,0,0/2986818138:2092423024/2092423025 [ 1738.837602][T17887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1738.845157][T17887] IPv6: NLM_F_CREATE should be set when creating new route [ 1738.852394][T17887] IPv6: NLM_F_CREATE should be set when creating new route [ 1738.884857][T17887] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1739.279596][T17913] lo speed is unknown, defaulting to 1000 [ 1739.443880][T17924] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1739.683022][T17932] Bluetooth: MGMT ver 1.23 [ 1739.988666][T17941] geneve4: entered promiscuous mode [ 1739.998767][T17941] geneve4: entered allmulticast mode [ 1740.085803][T17947] ip6gretap0: entered promiscuous mode [ 1740.091683][T17947] ip6gretap0: entered allmulticast mode [ 1740.123021][T17951] IPVS: length: 132 != 8 [ 1740.129516][T17913] lo speed is unknown, defaulting to 1000 [ 1740.176530][T17951] pimreg: entered allmulticast mode [ 1740.202335][T17916] pimreg: left allmulticast mode [ 1740.228281][T17913] wg1 speed is unknown, defaulting to 1000 [ 1740.271174][T17960] lo speed is unknown, defaulting to 1000 [ 1740.699329][T17977] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 1740.736087][T17977] bond6 (unregistering): Released all slaves [ 1740.828626][T17960] lo speed is unknown, defaulting to 1000 [ 1740.847383][T17960] wg1 speed is unknown, defaulting to 1000 [ 1741.013887][T17991] __nla_validate_parse: 13 callbacks suppressed [ 1741.013907][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11366'. [ 1741.229764][T17993] netlink: 'syz.3.11365': attribute type 10 has an invalid length. [ 1741.238345][T17993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11365'. [ 1741.436167][T18005] netlink: 'syz.4.11368': attribute type 1 has an invalid length. [ 1742.425432][T18032] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11377'. [ 1742.438076][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11375'. [ 1742.610753][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11380'. [ 1742.670298][T18032] bond5: entered promiscuous mode [ 1742.677875][T18032] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1742.688065][T18032] bond5 (unregistering): Released all slaves [ 1742.867599][T18050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11380'. [ 1742.880383][T18036] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.964454][T18036] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.006370][T18058] tipc: Enabled bearer , priority 0 [ 1743.028053][T18036] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.066287][T18058] syzkaller0: entered promiscuous mode [ 1743.072577][T18058] syzkaller0: entered allmulticast mode [ 1743.099715][T18036] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.153948][T18058] tipc: Resetting bearer [ 1743.170473][T18057] tipc: Resetting bearer [ 1743.213374][T18057] tipc: Disabling bearer [ 1743.252001][ T2012] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.269781][ T2012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.287377][T18075] tipc: Enabled bearer , priority 0 [ 1743.295973][T18075] syzkaller0: entered promiscuous mode [ 1743.301570][T18075] syzkaller0: entered allmulticast mode [ 1743.327175][T18075] tipc: Resetting bearer [ 1743.335075][ T2018] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.357519][ T2012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.484434][T18086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11392'. [ 1743.501413][T18085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11392'. [ 1743.550748][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11394'. [ 1743.565704][T18091] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11394'. [ 1743.619185][T18091] netlink: 'syz.1.11394': attribute type 10 has an invalid length. [ 1743.730381][T18091] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1743.934053][T18120] xt_ecn: cannot match TCP bits for non-tcp packets [ 1744.017960][T18070] tipc: Resetting bearer [ 1744.063097][T18070] tipc: Disabling bearer [ 1744.239886][T18131] lo speed is unknown, defaulting to 1000 [ 1744.654694][T18131] lo speed is unknown, defaulting to 1000 [ 1744.664693][T18131] wg1 speed is unknown, defaulting to 1000 [ 1745.837421][T18210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1745.844746][T18210] IPv6: NLM_F_CREATE should be set when creating new route [ 1745.851998][T18210] IPv6: NLM_F_CREATE should be set when creating new route [ 1745.916974][T18210] syzkaller1: entered promiscuous mode [ 1745.933270][T18210] syzkaller1: entered allmulticast mode [ 1746.028573][T18221] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 1746.225872][T18238] netlink: 'syz.0.11433': attribute type 1 has an invalid length. [ 1746.304839][T18228] __nla_validate_parse: 11 callbacks suppressed [ 1746.304862][T18228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11433'. [ 1746.349137][T18228] bond5 (unregistering): Released all slaves [ 1746.448547][T18257] xt_hashlimit: size too large, truncated to 1048576 [ 1746.502880][T18253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11440'. [ 1746.555830][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11441'. [ 1746.708145][T18269] vxcan3: entered promiscuous mode [ 1746.990686][T18231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1747.395333][T18299] netlink: 'syz.3.11452': attribute type 4 has an invalid length. [ 1747.415088][T18299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11452'. [ 1747.541952][T18308] syzkaller0: entered promiscuous mode [ 1747.567794][T18308] syzkaller0: entered allmulticast mode [ 1747.743682][T18319] syzkaller0: entered promiscuous mode [ 1747.749429][T18319] syzkaller0: entered allmulticast mode [ 1747.868347][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11462'. [ 1747.885803][T18328] netlink: 'syz.0.11462': attribute type 1 has an invalid length. [ 1747.957309][T18328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1748.035644][T18336] bond5: (slave geneve4): making interface the new active one [ 1748.048867][T18336] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 1748.065215][ T2006] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1748.084459][ T2006] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1748.124601][ T2006] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1748.133017][ T2006] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1748.281122][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11468'. [ 1748.293478][T18363] netlink: 'syz.0.11468': attribute type 1 has an invalid length. [ 1748.325839][T18363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1748.417903][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11468'. [ 1748.418743][T18363] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1748.465247][T18367] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1748.479312][T18367] bond6: (slave batadv1): making interface the new active one [ 1748.491482][T18367] batadv1: entered promiscuous mode [ 1748.497800][T18367] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 1748.602625][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11471'. [ 1748.606668][T18373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11472'. [ 1748.624327][T18375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11471'. [ 1748.642585][T18375] netlink: 'syz.3.11471': attribute type 32 has an invalid length. [ 1748.674552][T18375] bond5: Setting coupled_control to off (0) [ 1748.737885][T18384] syzkaller0: entered promiscuous mode [ 1748.750028][T18384] syzkaller0: entered allmulticast mode [ 1748.967965][T18394] siw: device registration error -23 [ 1749.147193][T18407] tipc: Enabled bearer , priority 0 [ 1749.159156][T18407] syzkaller0: entered promiscuous mode [ 1749.180056][T18407] syzkaller0: entered allmulticast mode [ 1749.220828][T18407] tipc: Resetting bearer [ 1749.254598][T18406] tipc: Resetting bearer [ 1749.277029][T18406] tipc: Disabling bearer [ 1749.296455][T18411] tipc: Enabled bearer , priority 0 [ 1749.305056][T18411] syzkaller0: entered promiscuous mode [ 1749.310712][T18411] syzkaller0: entered allmulticast mode [ 1749.528168][T18416] syzkaller0: entered promiscuous mode [ 1749.534526][T18416] syzkaller0: entered allmulticast mode [ 1750.051936][T18409] tipc: Resetting bearer [ 1750.095056][T18409] tipc: Disabling bearer [ 1750.377280][T18453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1750.514453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1750.536298][T18461] netlink: 'syz.1.11497': attribute type 2 has an invalid length. [ 1750.629072][T18467] lo speed is unknown, defaulting to 1000 [ 1750.954987][T18467] lo speed is unknown, defaulting to 1000 [ 1750.962655][T18467] wg1 speed is unknown, defaulting to 1000 [ 1751.147235][T18491] ip6gretap0 (unregistering): left allmulticast mode [ 1751.164560][T18491] ip6gretap0 (unregistering): left promiscuous mode [ 1751.627422][T18511] tipc: Enabled bearer , priority 0 [ 1751.641685][T18511] syzkaller0: entered promiscuous mode [ 1751.648037][T18511] syzkaller0: entered allmulticast mode [ 1751.687463][T18511] tipc: Resetting bearer [ 1751.697682][T18510] tipc: Resetting bearer [ 1751.728600][T18510] tipc: Disabling bearer [ 1751.748837][T18517] pimreg: entered allmulticast mode [ 1751.758158][T18517] pimreg: left allmulticast mode [ 1751.939803][T18533] lo speed is unknown, defaulting to 1000 [ 1751.967110][T18537] __nla_validate_parse: 5 callbacks suppressed [ 1751.967129][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11513'. [ 1752.324097][T18533] lo speed is unknown, defaulting to 1000 [ 1752.331765][T18533] wg1 speed is unknown, defaulting to 1000 [ 1752.549128][T18558] tipc: Enabled bearer , priority 0 [ 1752.584557][T18558] syzkaller0: entered promiscuous mode [ 1752.590073][T18558] syzkaller0: entered allmulticast mode [ 1752.774128][T18566] tipc: Resetting bearer [ 1752.826630][T18557] tipc: Resetting bearer [ 1752.890915][T18557] tipc: Disabling bearer [ 1752.916601][T18569] pimreg: entered allmulticast mode [ 1752.943536][T18569] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1752.950815][T18569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1753.020759][T18571] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1753.192570][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11528'. [ 1753.213363][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11528'. [ 1753.223004][T18584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1753.303548][T18586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1753.320695][T18597] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11531'. [ 1753.332017][T18598] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11531'. [ 1753.441517][T18606] pimreg: entered allmulticast mode [ 1753.455605][T18606] pimreg: left allmulticast mode [ 1753.506925][T18610] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1753.565463][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11537'. [ 1753.576118][T18612] netlink: 'syz.4.11536': attribute type 1 has an invalid length. [ 1753.611456][T18612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11536'. [ 1753.638066][T18612] bond6: (slave bridge8): making interface the new active one [ 1753.649825][T18612] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 1753.664741][T18612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11536'. [ 1753.939811][T18629] syzkaller1: entered promiscuous mode [ 1753.945929][T18629] syzkaller1: entered allmulticast mode [ 1753.971075][T18632] netlink: 'syz.0.11543': attribute type 1 has an invalid length. [ 1754.020346][T18632] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1754.093533][T18638] netlink: 'syz.3.11544': attribute type 1 has an invalid length. [ 1754.101420][T18638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1754.127869][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11545'. [ 1754.276879][T18648] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11548'. [ 1754.365785][T18646] bond6: invalid ARP target 0.0.0.0 specified for addition [ 1754.374735][T18646] bond6: option arp_ip_target: invalid value (0) [ 1754.383015][T18646] bond6 (unregistering): Released all slaves [ 1754.434460][T18648] lo speed is unknown, defaulting to 1000 [ 1754.773374][T18648] lo speed is unknown, defaulting to 1000 [ 1754.782638][T18648] wg1 speed is unknown, defaulting to 1000 [ 1754.865227][T18657] netlink: 'syz.1.11550': attribute type 13 has an invalid length. [ 1754.934805][ T7119] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1755.370518][T18688] vti0: entered promiscuous mode [ 1755.376980][T18688] vti0: entered allmulticast mode [ 1755.540033][T18679] lo speed is unknown, defaulting to 1000 [ 1755.715513][ T7123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1755.736475][T18710] netlink: 'syz.4.11563': attribute type 6 has an invalid length. [ 1755.782591][T18713] syzkaller1: entered promiscuous mode [ 1755.788690][T18713] syzkaller1: entered allmulticast mode [ 1755.922764][T18679] lo speed is unknown, defaulting to 1000 [ 1756.005616][T18714] syzkaller0: entered promiscuous mode [ 1756.011219][T18714] syzkaller0: entered allmulticast mode [ 1756.026139][T18679] wg1 speed is unknown, defaulting to 1000 [ 1756.913348][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1758.760704][T18738] __nla_validate_parse: 3 callbacks suppressed [ 1758.760725][T18738] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1758.972762][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11574'. [ 1759.014847][ T5842] block nbd11: Receive control failed (result -1) [ 1759.245040][T18757] syzkaller0: entered promiscuous mode [ 1759.251035][T18757] syzkaller0: entered allmulticast mode [ 1759.516854][T18768] tipc: Enabled bearer , priority 0 [ 1759.528445][T18768] syzkaller0: entered promiscuous mode [ 1759.549275][T18770] netlink: 'syz.3.11581': attribute type 1 has an invalid length. [ 1759.563149][T18768] syzkaller0: entered allmulticast mode [ 1759.568874][T18770] netlink: 228 bytes leftover after parsing attributes in process `syz.3.11581'. [ 1759.598876][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11581'. [ 1759.610546][T18768] FAULT_INJECTION: forcing a failure. [ 1759.610546][T18768] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.674840][ T2006] batadv1: left promiscuous mode [ 1759.677260][T18775] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11581'. [ 1759.699264][T18768] CPU: 1 UID: 0 PID: 18768 Comm: syz.0.11580 Not tainted syzkaller #0 PREEMPT(full) [ 1759.699290][T18768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1759.699301][T18768] Call Trace: [ 1759.699309][T18768] [ 1759.699318][T18768] dump_stack_lvl+0xe8/0x150 [ 1759.699349][T18768] should_fail_ex+0x412/0x560 [ 1759.699375][T18768] should_failslab+0xa8/0x100 [ 1759.699406][T18768] __kmalloc_noprof+0xe8/0x760 [ 1759.699426][T18768] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1759.699455][T18768] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1759.699486][T18768] ? tomoyo_path_number_perm+0x219/0x630 [ 1759.699505][T18768] tomoyo_path_number_perm+0x246/0x630 [ 1759.699527][T18768] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1759.699547][T18768] ? __lock_acquire+0x6b5/0x2cf0 [ 1759.699575][T18768] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1759.699615][T18768] ? __fget_files+0x2a/0x420 [ 1759.699640][T18768] ? __fget_files+0x2a/0x420 [ 1759.699660][T18768] ? __fget_files+0x3a0/0x420 [ 1759.699684][T18768] ? __fget_files+0x2a/0x420 [ 1759.699708][T18768] security_file_ioctl+0xc3/0x2a0 [ 1759.699733][T18768] __se_sys_ioctl+0x47/0x170 [ 1759.699754][T18768] do_syscall_64+0x14d/0xf80 [ 1759.699777][T18768] ? trace_irq_disable+0x3b/0x150 [ 1759.699798][T18768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.699816][T18768] ? clear_bhb_loop+0x40/0x90 [ 1759.699836][T18768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.699852][T18768] RIP: 0033:0x7f1e4df9c629 [ 1759.699868][T18768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.699881][T18768] RSP: 002b:00007f1e4ee0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.699899][T18768] RAX: ffffffffffffffda RBX: 00007f1e4e215fa0 RCX: 00007f1e4df9c629 [ 1759.699911][T18768] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1759.699921][T18768] RBP: 00007f1e4ee0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.699931][T18768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.699940][T18768] R13: 00007f1e4e216038 R14: 00007f1e4e215fa0 R15: 00007ffee9843138 [ 1759.699966][T18768] [ 1759.699990][T18768] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1759.824286][T18778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1759.884384][T18768] tipc: Resetting bearer [ 1759.955560][T18778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1759.972884][T18767] tipc: Resetting bearer [ 1760.090166][T18767] tipc: Disabling bearer [ 1760.369962][T18802] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11590'. [ 1760.381317][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11590'. [ 1760.478616][T18817] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11595'. [ 1760.515602][T18818] tipc: Enabled bearer , priority 0 [ 1760.541836][T18818] syzkaller0: entered promiscuous mode [ 1760.572613][T18818] syzkaller0: entered allmulticast mode [ 1760.580745][T18826] xt_l2tp: wrong L2TP version: 0 [ 1760.655363][T18818] tipc: Resetting bearer [ 1760.680842][T18814] tipc: Resetting bearer [ 1760.704738][T18814] tipc: Disabling bearer [ 1760.713912][T18830] lo speed is unknown, defaulting to 1000 [ 1760.764529][T18837] tipc: Enabled bearer , priority 0 [ 1760.786893][T18837] syzkaller0: entered promiscuous mode [ 1760.792401][T18837] syzkaller0: entered allmulticast mode [ 1760.864586][T18837] FAULT_INJECTION: forcing a failure. [ 1760.864586][T18837] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.883643][T18837] CPU: 0 UID: 0 PID: 18837 Comm: syz.4.11599 Not tainted syzkaller #0 PREEMPT(full) [ 1760.883669][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1760.883680][T18837] Call Trace: [ 1760.883688][T18837] [ 1760.883696][T18837] dump_stack_lvl+0xe8/0x150 [ 1760.883726][T18837] should_fail_ex+0x412/0x560 [ 1760.883752][T18837] should_failslab+0xa8/0x100 [ 1760.883775][T18837] __kmalloc_noprof+0xe8/0x760 [ 1760.883794][T18837] ? tomoyo_encode+0x28b/0x550 [ 1760.883821][T18837] tomoyo_encode+0x28b/0x550 [ 1760.883848][T18837] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1760.883880][T18837] ? tomoyo_path_number_perm+0x219/0x630 [ 1760.883899][T18837] tomoyo_path_number_perm+0x246/0x630 [ 1760.883920][T18837] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1760.883941][T18837] ? __lock_acquire+0x6b5/0x2cf0 [ 1760.883974][T18837] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1760.884020][T18837] ? __fget_files+0x2a/0x420 [ 1760.884047][T18837] ? __fget_files+0x2a/0x420 [ 1760.884069][T18837] ? __fget_files+0x3a0/0x420 [ 1760.884091][T18837] ? __fget_files+0x2a/0x420 [ 1760.884118][T18837] security_file_ioctl+0xc3/0x2a0 [ 1760.884146][T18837] __se_sys_ioctl+0x47/0x170 [ 1760.884168][T18837] do_syscall_64+0x14d/0xf80 [ 1760.884191][T18837] ? trace_irq_disable+0x3b/0x150 [ 1760.884214][T18837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.884233][T18837] ? clear_bhb_loop+0x40/0x90 [ 1760.884255][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.884273][T18837] RIP: 0033:0x7f1cf599c629 [ 1760.884290][T18837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1760.884304][T18837] RSP: 002b:00007f1cf6895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.884324][T18837] RAX: ffffffffffffffda RBX: 00007f1cf5c15fa0 RCX: 00007f1cf599c629 [ 1760.884337][T18837] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1760.884347][T18837] RBP: 00007f1cf6895090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.884357][T18837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.884368][T18837] R13: 00007f1cf5c16038 R14: 00007f1cf5c15fa0 R15: 00007ffe7db08f58 [ 1760.884398][T18837] [ 1760.884419][T18837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1761.011656][T18845] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1761.016937][T18837] tipc: Resetting bearer [ 1761.148183][T18830] lo speed is unknown, defaulting to 1000 [ 1761.154645][T18836] tipc: Resetting bearer [ 1761.178985][T18836] tipc: Disabling bearer [ 1761.206775][T18830] wg1 speed is unknown, defaulting to 1000 [ 1761.599079][T18876] lo: Caught tx_queue_len zero misconfig [ 1761.651145][T18880] netlink: 'syz.4.11612': attribute type 1 has an invalid length. [ 1761.841841][T18880] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1761.901848][T18887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.908866][ T2006] bond0: (slave bond_slave_0): interface is now down [ 1761.917974][ T2006] bond0: (slave bond_slave_1): interface is now down [ 1761.926837][T18887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.940874][T18887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1761.957612][ T2012] bond0: (slave bond_slave_0): interface is now down [ 1761.970537][ T2012] bond0: (slave bond_slave_1): interface is now down [ 1761.993772][ T2012] bond0: (slave bond_slave_0): interface is now down [ 1762.000506][ T2012] bond0: (slave bond_slave_1): interface is now down [ 1762.040229][ T2012] bond0: (slave bond_slave_0): interface is now down [ 1762.047862][ T2012] bond0: (slave bond_slave_1): interface is now down [ 1762.083421][ T823] bond0: (slave bond_slave_0): interface is now down [ 1762.090352][ T823] bond0: (slave bond_slave_1): interface is now down [ 1762.120715][ T823] bond0: now running without any active interface! [ 1762.176439][T18896] tipc: Enabled bearer , priority 0 [ 1762.189128][T18896] syzkaller0: entered promiscuous mode [ 1762.209410][T18896] syzkaller0: entered allmulticast mode [ 1762.264756][T18896] FAULT_INJECTION: forcing a failure. [ 1762.264756][T18896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.280309][T18896] CPU: 1 UID: 0 PID: 18896 Comm: syz.1.11616 Not tainted syzkaller #0 PREEMPT(full) [ 1762.280333][T18896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1762.280343][T18896] Call Trace: [ 1762.280351][T18896] [ 1762.280358][T18896] dump_stack_lvl+0xe8/0x150 [ 1762.280384][T18896] should_fail_ex+0x412/0x560 [ 1762.280408][T18896] _copy_from_user+0x2d/0xb0 [ 1762.280431][T18896] sock_do_ioctl+0x195/0x320 [ 1762.280453][T18896] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1762.280469][T18896] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1762.280506][T18896] sock_ioctl+0x5c6/0x7f0 [ 1762.280525][T18896] ? __pfx_sock_ioctl+0x10/0x10 [ 1762.280542][T18896] ? __fget_files+0x2a/0x420 [ 1762.280563][T18896] ? __fget_files+0x3a0/0x420 [ 1762.280581][T18896] ? __fget_files+0x2a/0x420 [ 1762.280605][T18896] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1762.280623][T18896] ? __pfx_sock_ioctl+0x10/0x10 [ 1762.280639][T18896] __se_sys_ioctl+0xfc/0x170 [ 1762.280659][T18896] do_syscall_64+0x14d/0xf80 [ 1762.280681][T18896] ? trace_irq_disable+0x3b/0x150 [ 1762.280703][T18896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.280718][T18896] ? clear_bhb_loop+0x40/0x90 [ 1762.280738][T18896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.280754][T18896] RIP: 0033:0x7fb9b559c629 [ 1762.280770][T18896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.280783][T18896] RSP: 002b:00007fb9b653c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.280802][T18896] RAX: ffffffffffffffda RBX: 00007fb9b5815fa0 RCX: 00007fb9b559c629 [ 1762.280814][T18896] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1762.280825][T18896] RBP: 00007fb9b653c090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.280837][T18896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.280847][T18896] R13: 00007fb9b5816038 R14: 00007fb9b5815fa0 R15: 00007ffdf6ecb4c8 [ 1762.280874][T18896] [ 1762.282547][T18895] tipc: Resetting bearer [ 1762.447907][T18906] nbd: device at index 64 is going down [ 1762.610080][T18895] tipc: Disabling bearer [ 1762.638985][T18753] udevd[18753]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1762.665955][T18813] udevd[18813]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1762.873884][T18921] syzkaller0: entered allmulticast mode [ 1762.879856][T18922] syzkaller0: entered promiscuous mode [ 1762.887640][T18920] syzkaller0: left promiscuous mode [ 1762.916662][T18920] syzkaller0: left allmulticast mode [ 1763.179113][T18944] x_tables: duplicate underflow at hook 3 [ 1763.810870][T18955] tipc: Enabled bearer , priority 0 [ 1763.819213][T18955] syzkaller0: entered promiscuous mode [ 1763.825504][T18955] syzkaller0: entered allmulticast mode [ 1763.854712][T18955] FAULT_INJECTION: forcing a failure. [ 1763.854712][T18955] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.867966][T18955] CPU: 0 UID: 0 PID: 18955 Comm: syz.1.11634 Not tainted syzkaller #0 PREEMPT(full) [ 1763.867991][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1763.868002][T18955] Call Trace: [ 1763.868010][T18955] [ 1763.868018][T18955] dump_stack_lvl+0xe8/0x150 [ 1763.868048][T18955] should_fail_ex+0x412/0x560 [ 1763.868081][T18955] should_failslab+0xa8/0x100 [ 1763.868105][T18955] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1763.868133][T18955] ? __alloc_skb+0x1d0/0x7d0 [ 1763.868153][T18955] ? __local_bh_enable_ip+0xd0/0x130 [ 1763.868180][T18955] __alloc_skb+0x1d0/0x7d0 [ 1763.868206][T18955] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1763.868233][T18955] rtnetlink_event+0x1b7/0x270 [ 1763.868259][T18955] notifier_call_chain+0x1be/0x400 [ 1763.868293][T18955] netif_set_mtu_ext+0x5aa/0x800 [ 1763.868323][T18955] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1763.868347][T18955] ? __mutex_trylock_common+0x158/0x260 [ 1763.868392][T18955] netif_set_mtu+0xd7/0x1b0 [ 1763.868417][T18955] ? __pfx_netif_set_mtu+0x10/0x10 [ 1763.868456][T18955] ? __dev_get_by_name+0xe5/0x140 [ 1763.868480][T18955] dev_set_mtu+0x126/0x260 [ 1763.868507][T18955] dev_ioctl+0x7b4/0x1150 [ 1763.868532][T18955] sock_do_ioctl+0x23e/0x320 [ 1763.868554][T18955] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1763.868569][T18955] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1763.868612][T18955] sock_ioctl+0x5c6/0x7f0 [ 1763.868631][T18955] ? __pfx_sock_ioctl+0x10/0x10 [ 1763.868650][T18955] ? __fget_files+0x2a/0x420 [ 1763.868672][T18955] ? __fget_files+0x3a0/0x420 [ 1763.868694][T18955] ? __fget_files+0x2a/0x420 [ 1763.868720][T18955] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1763.868742][T18955] ? __pfx_sock_ioctl+0x10/0x10 [ 1763.868759][T18955] __se_sys_ioctl+0xfc/0x170 [ 1763.868781][T18955] do_syscall_64+0x14d/0xf80 [ 1763.868805][T18955] ? trace_irq_disable+0x3b/0x150 [ 1763.868828][T18955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.868846][T18955] ? clear_bhb_loop+0x40/0x90 [ 1763.868868][T18955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.868890][T18955] RIP: 0033:0x7fb9b559c629 [ 1763.868908][T18955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.868922][T18955] RSP: 002b:00007fb9b653c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.868941][T18955] RAX: ffffffffffffffda RBX: 00007fb9b5815fa0 RCX: 00007fb9b559c629 [ 1763.868954][T18955] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1763.868966][T18955] RBP: 00007fb9b653c090 R08: 0000000000000000 R09: 0000000000000000 [ 1763.868977][T18955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.868987][T18955] R13: 00007fb9b5816038 R14: 00007fb9b5815fa0 R15: 00007ffdf6ecb4c8 [ 1763.869018][T18955] [ 1764.155994][T18955] tipc: Resetting bearer [ 1764.239268][T18954] tipc: Resetting bearer [ 1764.303920][T18954] tipc: Disabling bearer [ 1764.374008][ T2307] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1764.396478][ T2307] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1764.406738][ T2307] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1764.415339][ T2307] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1764.424940][ T2307] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1764.504144][T18966] lo speed is unknown, defaulting to 1000 [ 1764.568868][T18979] netlink: 'syz.3.11638': attribute type 1 has an invalid length. [ 1764.588877][T18982] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1764.685496][T18984] syzkaller0: entered promiscuous mode [ 1764.691307][T18984] syzkaller0: entered allmulticast mode [ 1764.830188][T18970] lo speed is unknown, defaulting to 1000 [ 1764.839451][T18966] lo speed is unknown, defaulting to 1000 [ 1764.850188][T18966] wg1 speed is unknown, defaulting to 1000 [ 1764.943333][T18987] __nla_validate_parse: 16 callbacks suppressed [ 1764.943352][T18987] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11644'. [ 1765.553829][T18970] lo speed is unknown, defaulting to 1000 [ 1765.575636][T18970] wg1 speed is unknown, defaulting to 1000 [ 1765.609869][T19003] syzkaller0: entered promiscuous mode [ 1765.615559][T19003] syzkaller0: entered allmulticast mode [ 1765.676276][T18966] chnl_net:caif_netlink_parms(): no params data found [ 1765.729838][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1765.744369][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1765.764463][ T7119] IPVS: starting estimator thread 0... [ 1765.853988][T19014] IPVS: using max 36 ests per chain, 86400 per kthread [ 1765.882587][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11652'. [ 1765.912415][T19022] syzkaller0: entered promiscuous mode [ 1765.918232][T19022] syzkaller0: entered allmulticast mode [ 1766.104241][T18966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.111660][T18966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.122590][T18966] bridge_slave_0: entered allmulticast mode [ 1766.137607][T18966] bridge_slave_0: entered promiscuous mode [ 1766.161023][T18966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.168613][T18966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.177185][T18966] bridge_slave_1: entered allmulticast mode [ 1766.196527][T18966] bridge_slave_1: entered promiscuous mode [ 1766.222840][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11655'. [ 1766.245344][T18966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.258760][T18966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.290304][T18966] team0: Port device team_slave_0 added [ 1766.300307][T18966] team0: Port device team_slave_1 added [ 1766.328813][T18966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.335982][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.364103][T18966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.379506][T18966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.387732][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.416065][T18966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.436052][T19035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11656'. [ 1766.500355][T18966] hsr_slave_0: entered promiscuous mode [ 1766.507041][T18966] hsr_slave_1: entered promiscuous mode [ 1766.513663][ T5842] Bluetooth: hci6: command tx timeout [ 1766.522052][T18966] debugfs: 'hsr0' already exists in 'hsr' [ 1766.528234][T18966] Cannot create hsr debugfs directory [ 1766.788518][T19045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11658'. [ 1766.919949][T19047] syzkaller0: entered promiscuous mode [ 1766.926320][T19047] syzkaller0: entered allmulticast mode [ 1767.165687][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1768.593275][ T5842] Bluetooth: hci6: command tx timeout [ 1769.777519][T18966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1769.809308][T18966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1769.859336][T18966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1769.882731][T18966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1769.984579][T19073] syzkaller0: entered promiscuous mode [ 1769.990150][T19073] syzkaller0: entered allmulticast mode [ 1770.012704][T19075] syzkaller0: entered promiscuous mode [ 1770.029770][T19075] syzkaller0: entered allmulticast mode [ 1770.242013][T19086] netlink: 'syz.0.11667': attribute type 8 has an invalid length. [ 1770.407452][T18966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.437520][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.445289][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.460134][T18966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.477163][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.487344][ T2016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.494621][ T2016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.542234][ T2018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.549447][ T2018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.562177][T19094] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1770.624822][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11670'. [ 1770.661399][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.672865][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.677021][ T5842] Bluetooth: hci6: command tx timeout [ 1770.718957][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.732224][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.755780][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.777330][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.790044][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.827862][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.855551][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.869565][T19111] IPVS: Scheduler module ip_vs_sip not found [ 1770.884870][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.885052][T19112] IPVS: length: 140 != 8 [ 1770.911921][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.945035][T19094] wlan1 speed is unknown, defaulting to 1000 [ 1770.951574][T19117] tipc: Enabled bearer , priority 0 [ 1771.000232][T19117] syzkaller0: entered promiscuous mode [ 1771.017792][T19117] syzkaller0: entered allmulticast mode [ 1771.081729][T19117] FAULT_INJECTION: forcing a failure. [ 1771.081729][T19117] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.094946][T19117] CPU: 0 UID: 0 PID: 19117 Comm: syz.0.11675 Not tainted syzkaller #0 PREEMPT(full) [ 1771.094969][T19117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1771.094978][T19117] Call Trace: [ 1771.094985][T19117] [ 1771.094994][T19117] dump_stack_lvl+0xe8/0x150 [ 1771.095020][T19117] should_fail_ex+0x412/0x560 [ 1771.095043][T19117] should_failslab+0xa8/0x100 [ 1771.095063][T19117] __kmalloc_noprof+0xe8/0x760 [ 1771.095080][T19117] ? nsim_fib_event_nb+0x28e/0x1210 [ 1771.095097][T19117] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1771.095117][T19117] nsim_fib_event_nb+0x28e/0x1210 [ 1771.095146][T19117] notifier_call_chain+0x1be/0x400 [ 1771.095172][T19117] ? atomic_notifier_call_chain+0x26/0x180 [ 1771.095194][T19117] atomic_notifier_call_chain+0xda/0x180 [ 1771.095218][T19117] call_fib_notifiers+0x31/0x60 [ 1771.095238][T19117] fib6_del+0xf7e/0x15a0 [ 1771.095259][T19117] ? fib6_del+0x10e1/0x15a0 [ 1771.095296][T19117] ? __pfx_fib6_del+0x10/0x10 [ 1771.095316][T19117] ? is_bpf_text_address+0x292/0x2b0 [ 1771.095331][T19117] ? is_bpf_text_address+0x26/0x2b0 [ 1771.095357][T19117] fib6_clean_node+0x29c/0x580 [ 1771.095381][T19117] ? __pfx_fib6_clean_node+0x10/0x10 [ 1771.095401][T19117] ? stack_trace_save+0xa9/0x100 [ 1771.095416][T19117] ? __pfx_stack_trace_save+0x10/0x10 [ 1771.095430][T19117] ? kfree+0x1c1/0x630 [ 1771.095456][T19117] fib6_walk_continue+0x67b/0x910 [ 1771.095487][T19117] __fib6_clean_all+0x35b/0x5a0 [ 1771.095508][T19117] ? __fib6_clean_all+0xbd/0x5a0 [ 1771.095527][T19117] ? __pfx_fib6_ifdown+0x10/0x10 [ 1771.095549][T19117] ? __pfx___fib6_clean_all+0x10/0x10 [ 1771.095569][T19117] ? __pfx_fib6_clean_node+0x10/0x10 [ 1771.095587][T19117] ? __pfx_fib6_ifdown+0x10/0x10 [ 1771.095606][T19117] ? do_raw_spin_lock+0x12b/0x2f0 [ 1771.095625][T19117] ? __mutex_trylock_common+0x158/0x260 [ 1771.095649][T19117] rt6_disable_ip+0x128/0x730 [ 1771.095671][T19117] ? rcu_is_watching+0x15/0xb0 [ 1771.095691][T19117] ? trace_contention_end+0x3d/0x150 [ 1771.095712][T19117] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1771.095740][T19117] addrconf_ifdown+0x161/0x1a40 [ 1771.095759][T19117] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1771.095786][T19117] ? tls_dev_event+0x745/0xf00 [ 1771.095807][T19117] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1771.095837][T19117] addrconf_notify+0x1bc/0x1050 [ 1771.095860][T19117] notifier_call_chain+0x1be/0x400 [ 1771.095888][T19117] netif_set_mtu_ext+0x5aa/0x800 [ 1771.095914][T19117] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1771.095934][T19117] ? __mutex_trylock_common+0x158/0x260 [ 1771.095970][T19117] netif_set_mtu+0xd7/0x1b0 [ 1771.095991][T19117] ? __pfx_netif_set_mtu+0x10/0x10 [ 1771.096022][T19117] ? __dev_get_by_name+0xe5/0x140 [ 1771.096042][T19117] dev_set_mtu+0x126/0x260 [ 1771.096065][T19117] dev_ioctl+0x7b4/0x1150 [ 1771.096086][T19117] sock_do_ioctl+0x23e/0x320 [ 1771.096105][T19117] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1771.096118][T19117] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1771.096152][T19117] sock_ioctl+0x5c6/0x7f0 [ 1771.096170][T19117] ? __pfx_sock_ioctl+0x10/0x10 [ 1771.096185][T19117] ? __fget_files+0x2a/0x420 [ 1771.096204][T19117] ? __fget_files+0x3a0/0x420 [ 1771.096222][T19117] ? __fget_files+0x2a/0x420 [ 1771.096243][T19117] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1771.096260][T19117] ? __pfx_sock_ioctl+0x10/0x10 [ 1771.096275][T19117] __se_sys_ioctl+0xfc/0x170 [ 1771.096299][T19117] do_syscall_64+0x14d/0xf80 [ 1771.096319][T19117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.096335][T19117] ? clear_bhb_loop+0x40/0x90 [ 1771.096353][T19117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.096369][T19117] RIP: 0033:0x7f1e4df9c629 [ 1771.096384][T19117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1771.096396][T19117] RSP: 002b:00007f1e4ee0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1771.096413][T19117] RAX: ffffffffffffffda RBX: 00007f1e4e215fa0 RCX: 00007f1e4df9c629 [ 1771.096423][T19117] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1771.096433][T19117] RBP: 00007f1e4ee0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1771.096443][T19117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1771.096452][T19117] R13: 00007f1e4e216038 R14: 00007f1e4e215fa0 R15: 00007ffee9843138 [ 1771.096479][T19117] [ 1771.102612][T19117] tipc: Resetting bearer [ 1771.549967][T19129] syzkaller0: entered promiscuous mode [ 1771.557357][T19129] syzkaller0: entered allmulticast mode [ 1771.566612][T19116] tipc: Resetting bearer [ 1771.598563][T19116] tipc: Disabling bearer [ 1771.618313][T19132] tipc: Enabled bearer , priority 0 [ 1771.626926][T19132] syzkaller0: entered promiscuous mode [ 1771.632437][T19132] syzkaller0: entered allmulticast mode [ 1771.679716][T18966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.692239][T19132] tipc: Resetting bearer [ 1771.739116][T19131] tipc: Resetting bearer [ 1771.762479][T19131] tipc: Disabling bearer [ 1771.780280][T19137] netlink: 'syz.0.11681': attribute type 2 has an invalid length. [ 1771.857207][T19138] lo speed is unknown, defaulting to 1000 [ 1772.245024][T18966] veth0_vlan: entered promiscuous mode [ 1772.266860][T18966] veth1_vlan: entered promiscuous mode [ 1772.308198][T19138] lo speed is unknown, defaulting to 1000 [ 1772.322685][T19138] wg1 speed is unknown, defaulting to 1000 [ 1772.347412][T18966] veth0_macvtap: entered promiscuous mode [ 1772.359807][T19138] wlan1 speed is unknown, defaulting to 1000 [ 1772.386101][T18966] veth1_macvtap: entered promiscuous mode [ 1772.481907][T19167] syzkaller0: entered promiscuous mode [ 1772.488110][T19167] syzkaller0: entered allmulticast mode [ 1772.543520][T18966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1772.561042][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11687'. [ 1772.575813][T18966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1772.705263][T19177] nbd: must specify at least one socket [ 1772.754492][ T5842] Bluetooth: hci6: command tx timeout [ 1772.766127][T16453] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.799321][T16453] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.831378][T16453] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1772.845455][T16453] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.018344][T19192] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11692'. [ 1773.161353][T19184] lo speed is unknown, defaulting to 1000 [ 1773.185742][ T826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.187913][T19199] syzkaller0: entered promiscuous mode [ 1773.197238][ T826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1773.211048][T19199] syzkaller0: entered allmulticast mode [ 1773.220553][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11692'. [ 1773.241389][T19192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11692'. [ 1773.407421][T19201] syzkaller1: entered promiscuous mode [ 1773.412965][T19201] syzkaller1: entered allmulticast mode [ 1773.571928][T19184] lo speed is unknown, defaulting to 1000 [ 1773.580520][T19184] wg1 speed is unknown, defaulting to 1000 [ 1773.597024][T19184] wlan1 speed is unknown, defaulting to 1000 [ 1775.294831][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11704'. [ 1775.347280][T19235] syzkaller0: entered promiscuous mode [ 1775.352789][T19235] syzkaller0: entered allmulticast mode [ 1775.456671][T19237] bridge9: entered promiscuous mode [ 1775.862711][T19188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1775.935820][ T2018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.947252][ T2018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.071716][T19250] syzkaller0: entered promiscuous mode [ 1776.090758][T19256] netlink: 'syz.4.11711': attribute type 1 has an invalid length. [ 1776.093881][T19250] syzkaller0: entered allmulticast mode [ 1776.141634][T19259] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11636'. [ 1776.149689][T19256] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1776.155485][T19259] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11636'. [ 1776.179524][T19261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11710'. [ 1776.224411][T19260] ip6erspan0: entered promiscuous mode [ 1776.250261][T19260] bond8: (slave ip6erspan0): making interface the new active one [ 1776.288716][T19260] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1776.354293][T19256] bridge0: port 2(macsec0) entered blocking state [ 1776.360831][T19256] bridge0: port 2(macsec0) entered disabled state [ 1776.384743][T19256] macsec0: entered allmulticast mode [ 1776.392057][T19256] macsec0: entered promiscuous mode [ 1776.399243][ T2307] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1776.416765][ T2307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1776.428487][ T2307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1776.441257][ T2307] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1776.449958][ T2307] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1776.530554][T19259] syzkaller0: entered promiscuous mode [ 1776.537784][T19259] syzkaller0: entered allmulticast mode [ 1776.545480][T19253] syzkaller0: entered promiscuous mode [ 1776.550978][T19253] syzkaller0: entered allmulticast mode [ 1776.627630][T19269] lo speed is unknown, defaulting to 1000 [ 1776.686904][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11714'. [ 1776.717531][T19281] netlink: 'syz.0.11713': attribute type 7 has an invalid length. [ 1776.994247][ T8230] syz_tun (unregistering): left allmulticast mode [ 1777.028556][T19269] lo speed is unknown, defaulting to 1000 [ 1778.517199][ T5842] Bluetooth: hci7: command tx timeout [ 1780.301342][T19269] wg1 speed is unknown, defaulting to 1000 [ 1780.309306][T19269] wlan1 speed is unknown, defaulting to 1000 [ 1780.335598][ T2012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.369184][T19296] netem: incorrect ge model size [ 1780.379835][T19296] netem: change failed [ 1780.452464][T19329] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11723'. [ 1780.466556][T19298] syzkaller0: entered promiscuous mode [ 1780.472064][T19298] syzkaller0: entered allmulticast mode [ 1780.488762][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11723'. [ 1780.594826][ T5842] Bluetooth: hci7: command tx timeout [ 1780.617319][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11724'. [ 1780.662615][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11725'. [ 1781.913121][ T9872] lec:lec_start_xmit: lec0:No lecd attached [ 1782.683277][ T5842] Bluetooth: hci7: command tx timeout [ 1783.392150][T19340] netlink: 'syz.6.11725': attribute type 4 has an invalid length. [ 1783.508378][T19348] syzkaller0: entered promiscuous mode [ 1783.517405][T19348] syzkaller0: entered allmulticast mode [ 1783.554161][ T2012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.759473][ T5842] Bluetooth: hci7: command tx timeout [ 1785.085469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1786.359103][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11728'. [ 1786.369669][T19362] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1786.462745][ T2012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.680757][ T2012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.744884][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11730'. [ 1786.781764][T19367] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1786.923077][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1786.931158][ C0] lec:lec_tx_timeout: lec0 [ 1787.148691][T19401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11736'. [ 1787.170389][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11735'. [ 1787.279544][ T2006] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1787.310667][T19269] chnl_net:caif_netlink_parms(): no params data found [ 1787.599819][ T2019] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1787.812714][T19417] syzkaller0: entered promiscuous mode [ 1787.818444][T19417] syzkaller0: entered allmulticast mode [ 1787.825968][ T2006] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1787.854292][ T2006] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1787.906252][T19442] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11740'. [ 1791.002257][T19426] syzkaller0: entered promiscuous mode [ 1791.008181][T19426] syzkaller0: entered allmulticast mode [ 1791.016180][ T2012] bridge_slave_0: left allmulticast mode [ 1791.021848][ T2012] bridge_slave_0: left promiscuous mode [ 1791.027791][ T2012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.043350][ T2012] veth5: left allmulticast mode [ 1791.048245][ T2012] veth5: left promiscuous mode [ 1791.053742][ T2012] bridge6: port 1(veth5) entered disabled state [ 1791.208072][T19474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11749'. [ 1791.318170][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11749'. [ 1791.387601][ T2012] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1791.397949][ T2012] bridge1 (unregistering): left promiscuous mode [ 1791.887426][ T2012] bond1 (unregistering): Released all slaves [ 1791.900549][ T2012] bond2 (unregistering): Released all slaves [ 1791.914007][ T2012] bond3 (unregistering): Released all slaves [ 1791.929794][ T2012] bond0 (unregistering): Released all slaves [ 1791.942161][ T2012] bond4 (unregistering): Released all slaves [ 1791.956460][ T2012] bond5 (unregistering): Released all slaves [ 1791.979692][T19452] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 1792.334829][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1792.375384][ T2012] : left promiscuous mode [ 1792.496212][ T2012] tipc: Left network mode [ 1792.497111][T19269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.512842][T19269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.526003][T19269] bridge_slave_0: entered allmulticast mode [ 1792.534773][T19269] bridge_slave_0: entered promiscuous mode [ 1792.547065][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11755'. [ 1792.599532][T19269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.607901][T19269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.615921][T19269] bridge_slave_1: entered allmulticast mode [ 1792.623632][T19269] bridge_slave_1: entered promiscuous mode [ 1792.672284][T19504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11756'. [ 1792.682647][T19504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11756'. [ 1792.741410][T19269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.760613][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1792.768262][T19269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1792.797728][T19507] syzkaller0: entered promiscuous mode [ 1792.819090][T19507] syzkaller0: entered allmulticast mode [ 1792.841059][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11758'. [ 1792.945350][T19269] team0: Port device team_slave_0 added [ 1792.956429][T19269] team0: Port device team_slave_1 added [ 1792.978449][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11758'. [ 1793.075740][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1793.123600][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11760'. [ 1793.137304][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11760'. [ 1793.164081][T19269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.171951][T19269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.208932][T19269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.220168][T19512] lo speed is unknown, defaulting to 1000 [ 1793.267856][T19269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.289201][T19269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1793.407602][T19269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.924256][T19269] hsr_slave_0: entered promiscuous mode [ 1793.931263][T19269] hsr_slave_1: entered promiscuous mode [ 1793.977771][T19269] debugfs: 'hsr0' already exists in 'hsr' [ 1793.996161][T19269] Cannot create hsr debugfs directory [ 1794.272149][T19512] lo speed is unknown, defaulting to 1000 [ 1794.276495][ T7121] IPVS: starting estimator thread 0... [ 1794.291941][T19562] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.316052][T19562] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1794.374116][T19565] IPVS: using max 29 ests per chain, 69600 per kthread [ 1794.383508][T19512] wg1 speed is unknown, defaulting to 1000 [ 1794.416701][T19512] wlan1 speed is unknown, defaulting to 1000 [ 1794.455437][T19562] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.482028][T19562] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1794.551256][T19573] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1794.609613][ T2012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.619733][ T2012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1794.634936][ T2012] pimreg (unregistering): left allmulticast mode [ 1794.939112][T19562] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.949423][T19562] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1795.001426][T19570] syzkaller0: entered promiscuous mode [ 1795.013308][T19570] syzkaller0: entered allmulticast mode [ 1795.054647][T19562] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.067772][T19562] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1797.963072][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1797.971091][ C0] lec:lec_tx_timeout: lec0 [ 1798.181407][T19588] tipc: Enabling of bearer rejected, failed to enable media [ 1798.327507][ T2006] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1798.343919][ T2006] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1798.363957][T19612] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11774'. [ 1798.390656][T19269] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.536546][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11775'. [ 1798.607749][T32153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1798.620776][T32153] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1798.631466][T32153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1798.641184][T32153] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1798.735331][T19269] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.765728][ T2012] IPVS: stop unused estimator thread 0... [ 1798.822748][T32153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1798.844049][T32153] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1798.901696][T19269] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.934501][T19625] lo speed is unknown, defaulting to 1000 [ 1799.069153][T19269] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.115091][T19631] syzkaller0: entered promiscuous mode [ 1799.120607][T19631] syzkaller0: entered allmulticast mode [ 1799.454126][T19625] lo speed is unknown, defaulting to 1000 [ 1799.497542][T19269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1799.535254][T19625] wg1 speed is unknown, defaulting to 1000 [ 1799.541230][T19269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1799.566458][T19625] wlan1 speed is unknown, defaulting to 1000 [ 1799.574814][T19269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1799.618351][T19269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1799.658039][T19672] netlink: 'syz.0.11782': attribute type 2 has an invalid length. [ 1799.976193][T19269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.010293][T19693] netlink: 'syz.0.11785': attribute type 64 has an invalid length. [ 1800.031267][T19269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.104382][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1800.136488][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11786'. [ 1800.205469][ T2012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.212633][ T2012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.244681][ T2012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.251880][ T2012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.517804][T19713] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11789'. [ 1800.544985][T19713] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11789'. [ 1800.792376][T19269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.882280][T19732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1800.889645][T19732] IPv6: NLM_F_CREATE should be set when creating new route [ 1800.895118][T19269] veth0_vlan: entered promiscuous mode [ 1800.896962][T19732] IPv6: NLM_F_CREATE should be set when creating new route [ 1800.909569][T19732] IPv6: NLM_F_CREATE should be set when creating new route [ 1800.911092][T19269] veth1_vlan: entered promiscuous mode [ 1800.923942][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1800.968800][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11792'. [ 1801.025714][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11792'. [ 1801.030927][T19269] veth0_macvtap: entered promiscuous mode [ 1801.066675][T19269] veth1_macvtap: entered promiscuous mode [ 1801.138018][T19269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1801.176217][T19269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1801.221848][T16453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.242649][T16453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.282479][T19740] tipc: Started in network mode [ 1801.299492][T19740] tipc: Node identity 52dec71721a4, cluster identity 4711 [ 1801.323591][T19740] tipc: Enabled bearer , priority 0 [ 1801.339331][T16453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.357173][T16453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.367777][T19740] syzkaller0: entered promiscuous mode [ 1801.373705][T19740] syzkaller0: entered allmulticast mode [ 1801.437245][T19740] tipc: Resetting bearer [ 1801.500906][T19739] tipc: Resetting bearer [ 1801.544603][T19739] tipc: Disabling bearer [ 1801.560635][T19758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11797'. [ 1801.719007][T19767] bridge10: entered promiscuous mode [ 1801.731941][T19767] bridge10: entered allmulticast mode [ 1801.759309][T19767] team0: Port device bridge10 added [ 1801.784276][T16453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.786214][T19757] syzkaller0: entered promiscuous mode [ 1801.792466][T16453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.798410][T19757] syzkaller0: entered allmulticast mode [ 1801.816220][T19771] netlink: 'syz.6.11800': attribute type 1 has an invalid length. [ 1801.828601][T19771] netlink: 240 bytes leftover after parsing attributes in process `syz.6.11800'. [ 1801.990385][T16453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.015882][T16453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.174158][T19782] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.11803'. [ 1802.871434][T19825] gtp0: entered promiscuous mode [ 1802.935157][T19825] gtp0: entered allmulticast mode [ 1802.996971][T19831] netlink: 'syz.4.11810': attribute type 10 has an invalid length. [ 1803.023295][T19830] openvswitch: netlink: Key type 36 is out of range max 32 [ 1803.231541][T27525] wlan1 speed is unknown, defaulting to 1000 [ 1803.245008][T19839] openvswitch: netlink: Flow actions attr not present in new flow. [ 1803.411295][T19871] __nla_validate_parse: 2 callbacks suppressed [ 1803.411315][T19871] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11816'. [ 1803.449671][T19871] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11816'. [ 1803.696778][T19896] syzkaller0: entered promiscuous mode [ 1803.702449][T19896] syzkaller0: entered allmulticast mode [ 1803.983827][T19901] netlink: 'syz.3.11822': attribute type 4 has an invalid length. [ 1804.028897][T19901] netlink: 'syz.3.11822': attribute type 4 has an invalid length. [ 1804.094333][T19901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1804.282453][T19908] syzkaller0: entered promiscuous mode [ 1804.289752][T19908] syzkaller0: entered allmulticast mode [ 1804.298239][T19911] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.11827'. [ 1805.953993][T19858] wlan1: Trigger new scan to find an IBSS to join [ 1809.954662][T19864] wlan1: Trigger new scan to find an IBSS to join [ 1811.954941][T32153] wlan1: Creating new IBSS network, BSSID 66:82:1f:84:55:93 [ 1811.965290][ T29] wlan1 speed is unknown, defaulting to 1000 [ 1811.971305][ T29] óyz2: Port: 1 Link ACTIVE [ 1830.677682][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 1845.207303][ T9872] lec:lec_start_xmit: lec0:No lecd attached [ 1850.913172][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 1850.921359][ C0] lec:lec_tx_timeout: lec0 [ 1854.199363][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1854.200011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1859.954401][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1859.962435][ C0] lec:lec_tx_timeout: lec0 [ 1884.914365][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1886.993377][ T2307] Bluetooth: hci6: command 0x0406 tx timeout [ 1895.795025][ T31] INFO: task syz.5.11480:18400 blocked for more than 143 seconds. [ 1895.802878][ T31] Not tainted syzkaller #0 [ 1895.808224][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1895.817019][ T31] task:syz.5.11480 state:D stack:25816 pid:18400 tgid:18398 ppid:17029 task_flags:0x400140 flags:0x00080002 [ 1895.829074][ T31] Call Trace: [ 1895.833794][ T31] [ 1895.836769][ T31] __schedule+0x1585/0x5340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1895.841278][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1895.853137][ T31] ? __pfx___schedule+0x10/0x10 [ 1895.858074][ T31] ? schedule+0x90/0x360 [ 1895.862323][ T31] schedule+0x164/0x360 [ 1895.883222][ T31] schedule_preempt_disabled+0x13/0x30 [ 1895.888727][ T31] __mutex_lock+0x7fe/0x1300 [ 1895.903200][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1895.908038][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1895.914620][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1895.919695][ T31] ? stack_trace_save+0xa9/0x100 [ 1895.925194][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1895.930601][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1895.938195][ T31] ? kasan_save_track+0x4f/0x80 [ 1895.943491][ T31] ? kasan_save_track+0x3e/0x80 [ 1895.948367][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1895.954056][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 1895.958669][ T31] ? netlink_dump+0x1ef/0xe80 [ 1895.964069][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 1895.969539][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 1895.975940][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 1895.980646][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 1895.986108][ T31] ? genl_rcv+0x28/0x40 [ 1895.990293][ T31] ? netlink_unicast+0x80f/0x9b0 [ 1896.073499][ T31] ? netlink_sendmsg+0x813/0xb40 [ 1896.078505][ T31] ? ____sys_sendmsg+0xa68/0xad0 [ 1896.103699][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 1896.108618][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1896.128399][ T31] ? do_syscall_64+0x14d/0xf80 [ 1896.133671][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.140418][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1896.148381][ T31] ? rcu_is_watching+0x15/0xb0 [ 1896.153781][ T31] ? trace_kmalloc+0x2a/0x110 [ 1896.158485][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1896.166372][ T31] genl_dumpit+0x10b/0x1b0 [ 1896.170824][ T31] netlink_dump+0x722/0xe80 [ 1896.175847][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 1896.180923][ T31] ? genl_start+0x499/0x6c0 [ 1896.213869][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 1896.219195][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1896.233428][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1896.254186][ T31] ? genl_get_cmd+0x4a8/0x930 [ 1896.258944][ T31] ? __pfx_genl_start+0x10/0x10 [ 1896.274186][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 1896.279194][ T31] ? __pfx_genl_done+0x10/0x10 [ 1896.293192][ T31] ? __dev_queue_xmit+0x274/0x38a0 [ 1896.298378][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 1896.302919][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1896.323641][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1896.330207][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1896.354591][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1896.359419][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1896.373219][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1896.378580][ T31] ? down_read+0x272/0x2e0 [ 1896.394631][ T31] ? genl_rcv+0xd/0x40 [ 1896.398841][ T31] genl_rcv+0x28/0x40 [ 1896.414326][ T31] netlink_unicast+0x80f/0x9b0 [ 1896.419162][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1896.439534][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1896.463241][ T31] ? skb_put+0x11b/0x210 [ 1896.467550][ T31] netlink_sendmsg+0x813/0xb40 [ 1896.472347][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1896.504499][ T31] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 1896.510798][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1896.539853][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1896.547051][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1896.552956][ T31] ____sys_sendmsg+0xa68/0xad0 [ 1896.558319][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1896.564453][ T31] ? import_iovec+0x73/0xa0 [ 1896.568999][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1896.574217][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1896.579431][ T31] ? futex_wake+0x4ac/0x580 [ 1896.584729][ T31] ? __fget_files+0x2a/0x420 [ 1896.589352][ T31] ? __fget_files+0x3a0/0x420 [ 1896.594228][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1896.599187][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1896.605103][ T31] ? rcu_is_watching+0x15/0xb0 [ 1896.609980][ T31] do_syscall_64+0x14d/0xf80 [ 1896.614734][ T31] ? trace_irq_disable+0x3b/0x150 [ 1896.619778][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.626057][ T31] ? clear_bhb_loop+0x40/0x90 [ 1896.630748][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.637394][ T31] RIP: 0033:0x7efdc219c629 [ 1896.641860][ T31] RSP: 002b:00007efdc312d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1896.650827][ T31] RAX: ffffffffffffffda RBX: 00007efdc2415fa0 RCX: 00007efdc219c629 [ 1896.659125][ T31] RDX: 0000000020000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 1896.667411][ T31] RBP: 00007efdc2232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1896.675641][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1896.683663][ T31] R13: 00007efdc2416038 R14: 00007efdc2415fa0 R15: 00007fff77b71d28 [ 1896.691649][ T31] [ 1896.695202][ T31] INFO: task syz.5.11480:18405 blocked for more than 144 seconds. [ 1896.706505][ T31] Not tainted syzkaller #0 [ 1896.711634][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1896.720391][ T31] task:syz.5.11480 state:D stack:26344 pid:18405 tgid:18398 ppid:17029 task_flags:0x400040 flags:0x00080002 [ 1896.732579][ T31] Call Trace: [ 1896.735931][ T31] [ 1896.738903][ T31] __schedule+0x1585/0x5340 [ 1896.743805][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 1896.749107][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1896.755321][ T31] ? __pfx___schedule+0x10/0x10 [ 1896.760209][ T31] ? schedule+0x90/0x360 [ 1896.764534][ T31] schedule+0x164/0x360 [ 1896.768701][ T31] schedule_preempt_disabled+0x13/0x30 [ 1896.774213][ T31] __mutex_lock+0x7fe/0x1300 [ 1896.778814][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1896.783961][ T31] ? netlink_dump+0xe4/0xe80 [ 1896.788559][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1896.793641][ T31] ? sock_recvmsg+0x22c/0x270 [ 1896.798321][ T31] ? do_syscall_64+0x14d/0xf80 [ 1896.803245][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.809324][ T31] netlink_dump+0xe4/0xe80 [ 1896.814175][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 1896.819239][ T31] ? kmem_cache_free+0x187/0x630 [ 1896.824295][ T31] ? netlink_recvmsg+0x5d6/0xa50 [ 1896.829246][ T31] netlink_recvmsg+0x690/0xa50 [ 1896.834185][ T31] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1896.839480][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1896.844704][ T31] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1896.850066][ T31] ? security_socket_recvmsg+0x7e/0x2c0 [ 1896.856242][ T31] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1896.861549][ T31] sock_recvmsg+0x22c/0x270 [ 1896.866200][ T31] __sys_recvfrom+0x240/0x3c0 [ 1896.870900][ T31] ? __pfx___sys_recvfrom+0x10/0x10 [ 1896.876452][ T31] ? exc_page_fault+0x6a/0xc0 [ 1896.881152][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1896.886513][ T31] __x64_sys_recvfrom+0xde/0x100 [ 1896.891457][ T31] do_syscall_64+0x14d/0xf80 [ 1896.896107][ T31] ? trace_irq_disable+0x3b/0x150 [ 1896.901144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.907579][ T31] ? clear_bhb_loop+0x40/0x90 [ 1896.912269][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.919243][ T31] RIP: 0033:0x7efdc215cece [ 1896.923862][ T31] RSP: 002b:00007efdc310ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1896.932305][ T31] RAX: ffffffffffffffda RBX: 00007efdc310c6c0 RCX: 00007efdc215cece [ 1896.940582][ T31] RDX: 0000000000001000 RSI: 00007efdc310b000 RDI: 0000000000000003 [ 1896.948675][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1896.957211][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1896.965876][ T31] R13: 00007efdc310af58 R14: 00007efdc310b000 R15: 0000000000000000 [ 1896.973965][ T31] [ 1896.977057][ T31] [ 1896.977057][ T31] Showing all locks held in the system: [ 1897.014626][ T31] 1 lock held by khungtaskd/31: [ 1897.019521][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1897.082815][ T31] 2 locks held by getty/5577: [ 1897.087840][ T31] #0: ffff8880369e80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1897.097991][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1897.108358][ T31] 3 locks held by kworker/0:9/7121: [ 1897.123337][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1897.134924][ T31] #1: ffffc900034c7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1897.153621][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1897.173133][ T31] 1 lock held by syz-executor/9614: [ 1897.178385][ T31] 2 locks held by syz.2.11024/16695: [ 1897.185244][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1897.203272][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1897.223288][ T31] 3 locks held by syz.5.11480/18400: [ 1897.228625][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1897.253131][ T31] #1: ffff8880788a66f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1897.273361][ T31] #2: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 1897.293614][ T31] 1 lock held by syz.5.11480/18405: [ 1897.298858][ T31] #0: ffff8880788a66f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80 [ 1897.333360][ T31] 3 locks held by syz-executor/18966: [ 1897.338777][ T31] #0: ffff888053174ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1897.373409][ T31] #1: ffff8880531740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1897.383633][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1897.394770][ T31] 4 locks held by syz-executor/19269: [ 1897.400168][ T31] #0: ffff8880854c8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1897.410468][ T31] #1: ffff8880854c80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1897.420439][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1897.430593][ T31] #3: ffff888024de0af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 1897.440505][ T31] [ 1897.444023][ T31] ============================================= [ 1897.444023][ T31] [ 1897.464861][ T31] NMI backtrace for cpu 0 [ 1897.464880][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1897.464896][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1897.464903][ T31] Call Trace: [ 1897.464910][ T31] [ 1897.464917][ T31] dump_stack_lvl+0xe8/0x150 [ 1897.464942][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1897.464960][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1897.464979][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1897.464996][ T31] sys_info+0x135/0x170 [ 1897.465009][ T31] watchdog+0xfd9/0x1030 [ 1897.465032][ T31] ? watchdog+0x21a/0x1030 [ 1897.465056][ T31] kthread+0x388/0x470 [ 1897.465070][ T31] ? __pfx_watchdog+0x10/0x10 [ 1897.465086][ T31] ? __pfx_kthread+0x10/0x10 [ 1897.465100][ T31] ret_from_fork+0x51e/0xb90 [ 1897.465121][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1897.465137][ T31] ? __switch_to+0xc7d/0x1450 [ 1897.465156][ T31] ? __pfx_kthread+0x10/0x10 [ 1897.465169][ T31] ret_from_fork_asm+0x1a/0x30 [ 1897.465201][ T31] [ 1897.465208][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1897.579586][ C1] NMI backtrace for cpu 1 [ 1897.579603][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1897.579620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1897.579630][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1897.579656][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1897.579670][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1897.579684][ C1] RAX: 0000000000851b5b RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1897.579695][ C1] RDX: 0000000000000001 RSI: ffffffff8def18d2 RDI: ffffffff8c27a480 [ 1897.579706][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1897.579716][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901172b0 [ 1897.579728][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 1897.579738][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 1897.579750][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1897.579761][ C1] CR2: 00007fff2a69b628 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1897.579775][ C1] Call Trace: [ 1897.579782][ C1] [ 1897.579787][ C1] default_idle+0x9/0x20 [ 1897.579802][ C1] default_idle_call+0x72/0xb0 [ 1897.579819][ C1] do_idle+0x1bd/0x500 [ 1897.579838][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1897.579861][ C1] ? __pfx_do_idle+0x10/0x10 [ 1897.579884][ C1] cpu_startup_entry+0x43/0x60 [ 1897.579903][ C1] start_secondary+0x101/0x110 [ 1897.579920][ C1] common_startup_64+0x13e/0x147 [ 1897.579943][ C1] [ 1897.747888][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1897.754779][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1897.763890][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1897.773938][ T31] Call Trace: [ 1897.777204][ T31] [ 1897.780134][ T31] vpanic+0x56c/0xa60 [ 1897.784119][ T31] ? __pfx___schedule+0x10/0x10 [ 1897.788965][ T31] ? __pfx_vpanic+0x10/0x10 [ 1897.793464][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1897.798685][ T31] panic+0xc5/0xd0 [ 1897.802497][ T31] ? __pfx_panic+0x10/0x10 [ 1897.806904][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1897.812348][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1897.818496][ T31] watchdog+0x1023/0x1030 [ 1897.822838][ T31] ? watchdog+0x21a/0x1030 [ 1897.827244][ T31] kthread+0x388/0x470 [ 1897.831300][ T31] ? __pfx_watchdog+0x10/0x10 [ 1897.835961][ T31] ? __pfx_kthread+0x10/0x10 [ 1897.840547][ T31] ret_from_fork+0x51e/0xb90 [ 1897.845124][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1897.850228][ T31] ? __switch_to+0xc7d/0x1450 [ 1897.854889][ T31] ? __pfx_kthread+0x10/0x10 [ 1897.859457][ T31] ret_from_fork_asm+0x1a/0x30 [ 1897.864211][ T31] [ 1897.867600][ T31] Kernel Offset: disabled [ 1897.871910][ T31] Rebooting in 86400 seconds..