last executing test programs: 5.849524004s ago: executing program 1 (id=2814): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e27, @private=0xa010101}, 0xffac) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2, 0x400000000002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040), 0x10) (async) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040), 0x10) setsockopt(r1, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) (async) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) 4.981975557s ago: executing program 3 (id=2819): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x8a0, 0x30, 0xffff, 0x3, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x1, 0x2, 0x3, 0x1, {0x8, 0x1, 0x2, 0x40, 0x8, 0x7}, {0x5, 0x2, 0x6, 0x7, 0xc, 0xf9e}, 0x1, 0x3, 0x7}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r4, r5, 0x0, 0xffffffff000) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000a40)='3', 0x1}], 0x1, 0x0, 0x0, 0x20004880}, 0x800) recvmmsg(r7, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000100)=""/19, 0x13}], 0x1, &(0x7f0000000540)=""/73, 0x49}, 0x1}], 0x1, 0x40010000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="003000000000000014"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r12, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c020200000010d1afdc00000000"], 0x18) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r13, @ANYBLOB="20000100", @ANYRES32=r13, @ANYBLOB="0000fe0900"/24], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) ioctl$int_in(r9, 0x5421, &(0x7f0000000500)=0x9) r14 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r15 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r15, 0x8982, &(0x7f00000004c0)={0x8, 'batadv0\x00', {'pimreg1\x00'}, 0x2}) r16 = accept(r11, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000440)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r16, 0x28, 0x1, &(0x7f0000000480)=0x80000001, 0x8) writev(r14, &(0x7f0000000380)=[{&(0x7f00000000c0)="104fcedaccc991c0871c5bd70d2b42a4c52368839df9c9b7c4377f6c28b367b7865eb82b183c94c398033c3379f06fc7422efc6790921b55d6fb80aa4015d8a277430420e605b55f5f89846975864048bbc7ec933c9918401e18c3416df34f1cd5c839e0bb64cacb22632c80d90bdfe342f84ac38d30689db4863aaf37819ea2a4527130b8acd170e67c31fc793ddcf11d53c3b652a8b96906829ea73f469d7d64cbdbe4c5f1ce13070db942c4e59f7b74bf4373ec45b93d15a8bfe388640a63a938f95ca5fd75", 0xc7}, {&(0x7f00000001c0)="f2c67654c2c5ac1e0c76e0770b8054dd94a015b343b82562e9fd02086041ccb0e1455e2f431bea03f307d84c54d07314341c427bcce7cf648d24a18d62a282f256", 0x41}, {&(0x7f0000000240)="48350611b8d3ca4339e830c8268011c232598d264b495e9b", 0x18}, {&(0x7f0000000280)="1b440ec49f88b5d4cf9a0437898dd061fa62a4beb419ed8ba342a743c8f2a160656b0c990d758d98da4ebd018effeef6f63953b0fabb003173af63b815953e58bc1af2c34ec1152711b7d6aafd40adea3822d492218ed5810c806580f00ad9417f41e6bed29fa1757f86a1c07431ea3e7c5c350b13879559f7785b68d9113a298545d660d9b66fea100c4b86aa0d0efd7ad2f111319478f50da2d6af08e8e1c69d2ee08563c68a63f57effe255b8022e9a551492799930c84d1f77f438c400d7113ccacd36", 0xc5}], 0x4) 4.82409668s ago: executing program 1 (id=2822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000140), 0xfffffdef) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1000, 0x0, 0x7, 0x200, r0, 0x1, '\x00', 0x0, r7, 0x3, 0x2, 0x4, 0x4}, 0x50) socket$inet6(0xa, 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.732530135s ago: executing program 3 (id=2823): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48010}, 0x55) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000004a80)=[{{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f0000000640)=""/73, 0x49}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x6, &(0x7f00000018c0)=""/188, 0xbc}, 0x9}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001980)=""/142, 0x8e}, {&(0x7f0000001a40)=""/95, 0x5f}, {&(0x7f0000001ac0)=""/143, 0x8f}, {&(0x7f0000001b80)=""/6, 0x6}, {&(0x7f0000001bc0)=""/12, 0xc}], 0x5, &(0x7f0000001c80)=""/184, 0xb8}, 0x1}, {{&(0x7f0000001d40)=@nfc_llcp, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/116, 0x74}, {&(0x7f0000001e40)=""/96, 0x60}], 0x2, &(0x7f0000001f00)=""/51, 0x33}, 0x7}, {{&(0x7f0000001f40)=@xdp, 0x80, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/52, 0x34}], 0x2, &(0x7f0000002140)=""/171, 0xab}, 0x5}, {{&(0x7f0000002200)=@nl=@unspec, 0x80, &(0x7f0000003500)=[{&(0x7f0000002280)=""/14, 0xe}, {&(0x7f00000022c0)=""/194, 0xc2}, {&(0x7f0000002400)=""/49, 0x31}, {&(0x7f0000002440)=""/150, 0x96}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x5, &(0x7f0000003580)=""/214, 0xd6}, 0x269}, {{&(0x7f0000003680)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/232, 0xe8}, {&(0x7f0000004800)=""/16, 0x10}, {&(0x7f0000004840)=""/91, 0x5b}, {&(0x7f00000048c0)=""/146, 0x92}, {&(0x7f0000004980)=""/62, 0x3e}], 0x6, &(0x7f0000004a40)=""/47, 0x2f}, 0x3a}], 0x6, 0x3, &(0x7f0000004c00)={0x77359400}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r5, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/121, 0x79, 0x0, &(0x7f0000000140)=""/39, 0x27}}, 0x10) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) 3.843618779s ago: executing program 1 (id=2828): unshare(0x6a040000) (async) unshare(0x44000000) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) close(r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000cc20280080007007f0000010a000100aa"], 0x48}}, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) (async, rerun: 64) listen(r3, 0x7fff) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) accept(r0, 0x0, 0x0) (async, rerun: 32) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r7, 0x0, 0x8000) vmsplice(r7, &(0x7f00000000c0), 0x0, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) socket$inet6(0xa, 0x3, 0x87) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 3.694796934s ago: executing program 3 (id=2831): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000500)={0x400, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @remote}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) unshare(0x64000600) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9", @ANYRES32], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4900000076000d0b00400000000000000300000000000000080001000200000009000a00"], 0x28}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cZrouz0'}, 0x30) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x70}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', r3, 0x40, 0x80, 0x5, 0x7ff, {{0x3a, 0x4, 0x3, 0x16, 0xe8, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x2b, 0xcd, [@dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x8, [{@private=0xa010101, 0x3}, {@rand_addr=0x64010101, 0x5}]}, @cipso={0x86, 0x29, 0x3, [{0x1, 0xf, "1d9521a2c792ba1140b57a2b63"}, {0x2, 0x10, "d5ecd240a6f861214b484ff80166"}, {0x7, 0x4, "0cfc"}]}, @lsrr={0x83, 0x2b, 0xba, [@broadcast, @broadcast, @loopback, @local, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010101, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0xee, 0x1, 0x9, [{@private=0xa010100, 0x8}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}, {@loopback, 0x7}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$netlink(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff2"], 0x20}, {&(0x7f0000006740)={0x1160, 0x19, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x8, 0x69, 0x0, 0x1, [@nested={0x4, 0x12c}]}, @generic="0574a443a64e158a2e01a873af15d4daa32f93e60a8ede8fb33dc7ca7cf7b783454eb1faaf4a3a7eda2865831bcf7a650ddd4d0c7234c0b6919a221d73d72f5359b94e57185432a949c6f134f795d1893ee987f73102dd4ce06384312bd911ff5739499d3424293e20d61ebecd00ee5e4adf2383827e7a8db2521a7c03e90f42dd3026d36d1b1b473444b72c56afac636010c2f46c4b59ebaf422f5086d43172", @generic="cffb7ca35591730430d0d2f281e23fa31fb09953d3719841a15a5bf788e03fc08f79fbb072eb1adb7d41bcedf5e41c974d1fea62a5d21bf18c7709e46f6d859630de620c49f2752b0e08075106702af615ca9209d4f127c1254452957d619c5d867975289ccec39a747aaec62bc71da8975879d413d8b2b3a4691b9b464c3bce859687d99a69398808deee79ab4472c29e4929592ac4632cb2fe3d5cfb0664f51bea6280aeadc1377c1bdf24dd4e2eda89fd34d27b233962fa818866abb04752ac0556b91d0a06d71c2277ceba88cb42750042b3be4d94d61ec5b1dedb047da4b2af", @typed={0x16, 0x32, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}, @generic="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", @nested={0xc, 0xcb, 0x0, 0x1, [@typed={0x6, 0x30, 0x0, 0x0, @str='}\x00'}]}]}, 0x1160}], 0x2, 0x0, 0x0, 0x4008000}, 0x300) socket$packet(0x11, 0x2, 0x300) epoll_create(0x400) pipe(&(0x7f0000000000)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x2}, 0x1023) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000009c0)={0x3e4, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$inet6_udp(0xa, 0x2, 0x0) 3.081621919s ago: executing program 0 (id=2838): r0 = socket(0x2a, 0x800, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x4c}}, 0x4000014) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x72}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc055}, 0x4000050) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 3.015700882s ago: executing program 4 (id=2839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600007009921daa2f63432e75d5ef55491761788e72f44e5eb4436492ccfba6e40beb7de8b3b55c6cfe2341cad63aa2dde9afac21d97933933bec9e3d705e7ccdfbc837088ae74718cd247644c9f8b4f62914f19a0ea1f462550a98c583e33b14c368cc66fe9f6cf4ddfd1d46fc25b29467db82c46059238067bdc94688c6201b98b11917d4944647fea3740d82ecfd382344ddd6e703732936504183994afdfbab2b424dd51b726ca55ec229066", @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac1414"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.840668555s ago: executing program 3 (id=2841): socket(0x28, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 32) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r8 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt(r9, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) (async) unshare(0x62040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) 2.77940047s ago: executing program 0 (id=2842): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x64, r4, 0x4d1b20c6161d1adb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @broadcast}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x54, r5, 0x409, 0x70bd29, 0x25dfdbf9, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x550}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x48, {0x2, 0x4e22, @loopback}, 'veth0_to_bridge\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r8, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20000000) syz_genetlink_get_family_id$mptcp(0x0, r7) (async) syz_genetlink_get_family_id$mptcp(0x0, r7) close(0xffffffffffffffff) unshare(0x60480) r9 = socket(0x23, 0x80805, 0x2) connect$llc(r9, &(0x7f0000000540)={0x1a, 0x205, 0x2, 0x1, 0x6, 0x0, @broadcast}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2.687630244s ago: executing program 2 (id=2843): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000099d5d3fdc4d4b9512ba320b25fce6f8b30a9c2319c159c77958e", @ANYRES32=0x0, @ANYBLOB="0000045d00"/20, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRES8=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0600000000000004"], 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) syz_emit_ethernet(0xfc2, &(0x7f0000002900)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86"], 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) write(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x0) 2.670490448s ago: executing program 3 (id=2844): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], 0x1, [0x8, 0x4, 0xc000, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x202b, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r6, r7, 0x4, r3}, 0x6) 2.327366028s ago: executing program 1 (id=2845): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x202) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "7a4a75c4b59a8c4fa2c21d8c7ef19e45"}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x20a, 0x0, 0x6898, 0x0}, &(0x7f0000000880)=0x10) bpf$ITER_CREATE(0x21, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000a40)=ANY=[@ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae6810ec259f0bfba1973a8b12f4d11dabc1360ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643e410ddbbfe8148fd2aa4a46e3e10213183112f97bb1b30a99b250389e8521f3e7c634923eb202b35834e1ee935c200d7140066bac96fad1591ed9a628a164ae2760f51b981fc1829feb7d3ead8bdd9ce3b5d5deee864e3b6b82d", @ANYRES8=r9, @ANYBLOB="dfe9aaaaaaaaaaaaaa8000000000000000000000000000aaff000108000000000000000000000000005eba0000000000000000", @ANYRES32=0x41424344], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 2.290181616s ago: executing program 3 (id=2846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (rerun: 64) unshare(0x68040200) (async) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], 0x48) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r7 = socket(0x1e, 0x4, 0x0) (async) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) (async) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x5, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1.803518627s ago: executing program 0 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20}, {0x72}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e27, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x10, 0xf080, 0x4}, 0x9c) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) setsockopt(r7, 0x6, 0x8, &(0x7f0000000100)="0b5edcd27d262ac8643000294ccae96c91905021d40f5d097d1d838b69923dd3dafb8383452531251a4aa21f2f3905a361dc1521cb6a88dc9baa246c671634c232d903c8ccff442c70bdfaa7d6de5e0bdea63450be0bc1451e54038dc4478ac7043e0aedcf15d62a217ea60a562e9b8be004", 0x72) 1.403552416s ago: executing program 0 (id=2848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002800600030006000000060002"], 0xa4}}, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xfff5) 1.395803951s ago: executing program 0 (id=2849): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty=0xac1414aa, @rand_addr=0x64010100}, "17c1b7df60c70000"}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23, @multicast1}, {0x6, @local}, 0xc44e9c840b6a76a8, {0x2, 0x4e22, @rand_addr=0x64010101}, 'erspan0\x00'}) r1 = socket(0xa, 0x2, 0x0) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000706000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad8800000000140012800b00010067656e6576650000040002800b000100"], 0x40}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) sendfile(r7, r6, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.124164626s ago: executing program 4 (id=2850): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x28, 0x0, 0x28, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r4, 0x1, 0x30, &(0x7f00000003c0)=""/231, &(0x7f0000000340)=0xe7) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x54014840}, 0x20000000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xe2, 0x20, 0x6, 0x8}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={r5, 0x3e4}, 0x8) 931.469816ms ago: executing program 4 (id=2851): clock_gettime(0x3, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="08001efbb07d5a6e", 0x8}], 0x1}, 0x810) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0xffffffffffffffff, &(0x7f0000001080)=0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ufshcd_clk_gating\x00', r1, 0x0, 0x8}, 0x18) 879.510372ms ago: executing program 4 (id=2852): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x8, 0xfffff032}]}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 838.241474ms ago: executing program 2 (id=2853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x2b, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xb4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4ee2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2cbc000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r8, 0x0, 0x6}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r13 = accept4$rose(0xffffffffffffffff, &(0x7f0000000b80)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f0000000bc0)=0x1c, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r13, 0x89e4) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r14}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xce06, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r20}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x279, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x61}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r11}, @map_idx={0x18, 0xb}]}, &(0x7f0000000380)='GPL\x00', 0xe, 0x87, &(0x7f0000000400)=""/135, 0x40f00, 0x8, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r15, r16, r17, r18, r19, r20], 0x0, 0x10, 0xffff0001}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) 771.093002ms ago: executing program 1 (id=2854): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x2, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x9}, @type_tag={0x1000007, 0x0, 0x0, 0x12, 0x5}, @struct={0x3, 0x9, 0x0, 0x4, 0x1, 0x4, [{0x9, 0x40000002, 0x2}, {0x5, 0x1, 0xa}, {0x3, 0x5, 0xc}, {0x3, 0x2, 0x1}, {0x8, 0x0, 0x7}, {0x4, 0x0, 0xcd4b}, {0x8, 0x2, 0x81}, {0x6}, {0x1, 0x0, 0x8001}]}, @func_proto, @fwd={0x8}]}}, 0x0, 0xc6, 0x0, 0x1, 0x107}, 0x28) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x1f, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000007c0)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r4) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000040)={0x1d, r7}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x880) r9 = socket$inet(0x2, 0xa, 0x9) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @random="000200080010", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "000000050000000026000400"}, {0x26, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fc00000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={r10}, &(0x7f0000000040)=0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0xfffffffffffffd50}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x94, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffff801, 0x64}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x51}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xbd}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0xc2}, 0x4000005) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r14 = socket$rds(0x15, 0x5, 0x0) bind$rds(r14, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r14, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1a000}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r10, @ANYBLOB="000002000002009f02000200"], 0x10) 689.959213ms ago: executing program 2 (id=2855): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="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") r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xf, 0x0, &(0x7f0000000300)) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x48d4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x18000000000002a0, 0x29, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 575.234616ms ago: executing program 1 (id=2857): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000004c0)={0xd7, 0xb, 0x9, 0x800, 0x7, 0x7fa, 0xbbd1, 0x47ffffffc}, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r3}, &(0x7f0000000c80), &(0x7f0000000cc0)=r4}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000900)=ANY=[@ANYRESDEC=r5], 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x2, 0x40, r8, 0x40000000}, 0x50) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) ioctl$int_in(r9, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x9, 0x3, 0x2df, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 574.650529ms ago: executing program 4 (id=2858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) unshare(0x28040000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000240}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r4, 0x8, 0x70bd28, 0x7, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 427.145026ms ago: executing program 0 (id=2859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x503, 0x80000000, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xb}]}}}]}, 0x54}}, 0x40) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x32050780) socket$packet(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r6, 0x0, 0x0) connect$rose(r6, 0x0, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="5b093f82df50d7d504c219b2c1da31829383132c47bcb7a6cbaa19926c485c7c023a98c1b2bbafab82ff27eb65478777b08be84dfac998b1ce898949a6467335700fd5faba1705ec61036e277028943475a88019177074f02c4d6eff4ca4c157fe64cb6b10184ba85f8276839dd8fb22c9adfb44c20d31615fc42ead31b7e627e8782a5f352bd64c283c894312fcc675fe6adee78dd465eea11765fad4c6c1f7cfb01fe29a587c6392620aad23872bd794f7bfc468e1fe67ebbd40e3c32ebe3d6ebd1ef44f631a24c07e75dc3981c83151f666bdf780d3e9e2f9045414b40352ba244ca45b08383d25497bd04b3c743331", 0xf1}], 0x1}}, {{&(0x7f0000000180)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000700)="e1ffc36becbfec56dfde1e453d34a054648ea637e0c1d6bd3d447770a8e2a00ccb0b06a3c50823767c702f8ffae4efd17f440dbf4c23e9e6e2f05acfeb206e4a486be167ebf4d2af170b3a93fb13e38ac45a882910fb6ff910c1b3c218621b5eb11fb037d12dcd58e6a3687e8279f8baa5b7a3f85e74ba48460784cf488d21d3688d8c51c0d699e6808095b8c25589760df31f2135ccfe2efb4603543fa299671f3e250fdaee360c7386f0e789bfbb0e3c021f9bd13396bbd7d9c63fe8e323d1df2617ccf81d8b59e5b638", 0xcb}, {&(0x7f0000000800)="4d177988b83231d7c35de68fc7c1f08c949856e83fd1e8e1776592ee6de8f11be86abb3e0294d2b1d54ed992725791f43632040f80bfeb41656295f0fcc92fd3a16ec7a775c2d5cba7792a45ccc05ca32f741b268576e8ffa37015b9a80ad2b38fc393f7e29b9b85cd8b587bd81b4c3ac8b3ff3e817b7d6b173949fc151b4e61fda8cc119d325e52b1ca2febf41c8cff67f73fc8ad424d5c9fca0248fed80b9332679a2553e149a4f71424a97157b50ac9a1a5fa86bf08154052f5e922884b1d43a5c45eff5f23a1", 0xc8}], 0x2}}, {{&(0x7f00000004c0)=@qipcrtr={0x2a, 0x0, 0x4000}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="22b2aca5622512c18ed37ba626f5c25408ab2e5935fb755c5eba52d0184bc6391cc92e0128228c4f2251698a53166176c1baeb0d7791a050dc9bf5b69717062fa9c0b4ff3bd6b533c29c8eb2b9d1e63e8e5d89948907fbd6e1a90d9f567559b7d744658a97d0a9f47ba8eb464b48c00e4015715f59d92b98b2e25be947909fcdb14bbba35926a751f484bd8957aa46761ad795a31e95", 0x96}, {&(0x7f0000000440)="e7d30e3e84160b5579a3c4886ea464cce343dfcb25b5908bcc602006d92a9f385011f7ccc58901", 0x27}], 0x2}}], 0x3, 0x0) 424.686871ms ago: executing program 2 (id=2860): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000001600), 0x0, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) close(0x3) recvfrom$inet6(r4, &(0x7f0000000280)=""/46, 0x2e, 0x2100, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x1b, &(0x7f0000000080), &(0x7f0000000200)=0x4) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000009c9fc6b8adb5933a23cfe75c583d93aa8e43172aeb97fedb9106fdd6f1a762bc1d9c8de30de9b14bc10a7229df5aafa97a0016186a171b15cdb67567316e4669d2a0b0f0c34f0d8adf3751ac189ffcc431ff6056abdee0f0a528feeee5eb1380527f0d2e417c149dd4cfb11c811c59d418960da136ecd915874e3bcf1c7d5b8edaaed9059e5046fdf0154f905bc8de37154bf77329f03097684992e043b17425d8ad74898f25ea682e827255fe6d74", @ANYRES16=r10, @ANYBLOB="010005000000ffdbdf250700007c245cce67a29402050013088100000000000800000000001e00000000000000000000000500140005000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008091}, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'netdevsim0\x00', {0x4}, 0x1000}) 343.471211ms ago: executing program 4 (id=2861): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r2, 0x0, 0x4, &(0x7f0000000080)='full'}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = epoll_create(0x6) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="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", 0x2e8}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000300)="f610e61fc81cc387a84e5a00194d27a5a42cf1880b0dfd1ecda0fd0ed93ff39899a7e71357d5c598538c9e2b54684567a8b453ce71dbba9f46729b03d0210e8d98dbfc62baa875e1858fe166bb0ee187e2d4b52f4fb2425106567971a5df88d215b5f47d9944195fdac3052e14d83b474a3f4af059e547ca2be94ad4adbfc50a8c1c05bfb139e5f5816cc84883106e79c6ec207647255f4dfd73d805b9c663418c98730e941c58503a022f94d87b73cc3723c694", 0xb4}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r3, 0x8}, {r3, 0x40}], 0x2, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000280)={0x10000014}) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="1a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="526e481e", 0x4}], 0x1}}], 0x2, 0x8000) 273.530911ms ago: executing program 2 (id=2862): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x80000009, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) unshare(0x20000400) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ppoll(&(0x7f0000000280)=[{r0, 0x7220}, {r2, 0x701}], 0x2, &(0x7f00000003c0), 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000100000000000c000200010000003600000004c487b6"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) 0s ago: executing program 2 (id=2863): r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000029c0)={&(0x7f0000000000)=@isdn={0x22, 0x8, 0xa, 0x40, 0x8}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="b4df3a7ba12f129be089e1610ffc678d7b44e7db300ef1d7b1381dde9e85", 0x1e}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="923ac6f1d7d6d556a90198e8421584beccf66449a644d87dd586324e36df22f5569ce069972c50db230ff159277d8cf94a9b313e3c753a7163d0919460999a6630c241c36d328440735a1f6e42137f1b6af3a2d6bbbb93de9931abd3371f5604edec7c201be46457694235069e13282d485169fab1e1b163f7c0cdeb47e78e5e0c51b73a622dc17b78", 0x89}, {&(0x7f0000002180)="25f9dcec19f4ad14e8993d5bc830ebcd43ce8b9c0c70f87b6807cc14866047f508637352b2b3bfa31e752a6c8857cf9a84927195c507a553b679f025df347cec19b150e0fd92426c590a94a2be4e1e5ec93a2132722d4fca5fd11295e7c800de9b9616e3b151b18e7e14bc085896e3bfde9518783abd211cbd4d382a811ff583ad9127ec6b96a868b58736efc3bedcea9a312b7d46232e9afaad3d4d7cd1bd5091e03293767c357f970042bc3ee8bc53d46f097a88c4426e3d8bf562d3897359be24d24d3fc26a806ce4fa985a5747783d1d7689c4c30b16b585fa30ad623c225ad95c0c2e9609b8fbe7a60bbe559946", 0xf0}], 0x6, &(0x7f0000002300)=[{0x60, 0x108, 0x1000, "63fc781acd4bb9fcce6bdc4205f55725c16621793ee434381446f49df41b09ccf78455dc211ef41444818da4a886ebd752bc9db09ae020261128720cae595b5ae4da95a41a99802d3663"}, {0xb8, 0x113, 0x8000, "a86a70f5a4c6c1ce7deef3c6b7198862237a15935916d3cc41864f7422b1512cd18b4d0eb969ff37972f02abe6310ede071f69ecb02c99b0a3e8cb41da5de1049a35d7803f7c64cadc76a436bc67381f27ece0c80aa6b170ac73a467889b952e4ef4019fdde37f016ee456d4c7911649d8794cfea41f36db11025b2ae1ad648805b34156413aa499f3408a8ec1dc437f290cb25b8d02cfb6dfb072017dcfb2a80e"}, {0xd8, 0x114, 0xfffffffa, "c8d08b99416411f013b774dc8181abfd97df4a8f8c7c6900f01cb66015c668d4e63de331870bf3cfdad33625c6dc0316da5ac90d9a152f28e6e50eeabbf27666e4caf9eb491bd7f2d9d5046f2747a2cb69f4b16c50ba8f642429e1d579605d9761ada9124fbc530932008ff2ba4a32c1525425f95a9ee31d606e9d3413368eb3e7756304ec75aac33825f2570632b3941c7bf715845ad5e2dcd60ccd2d90017c91ba5b7447068ee114e23bb3e83b40de57eed9666ff14bb2daa08e79708a0f3b7d6b4c"}, {0x100, 0x10a, 0xf4b, "ed3fccd46bf5379937cea055d094b0ec52ce19fb316e68c98c31fe6375dddabbb93e2266adc3075f98da7fa1733041533411452edd8e98a1270801b2d7028331cc425950dbb0a19ce5758bfd4fda40cfcfe51e0dfa0de84efb88770da88d03854b6f01a73d9dc078ca0a819961e937dd73e7896016521017cef1a36384022d4da7e2d91ec0c5f41d03e4c5f1ba8b431be5363f6a681e266ca62a1e39fa3ac77f109f91de4a630348a7261c98beb2ce889d73721a0d9e2070c208f4890c66f22c648155832afd9d1cd0e77e4eb2ea0c493936157743babe834b76887c06ca15c20caf5c04dfb7fc33a8d6b0"}, {0xb8, 0x118, 0xdbe, "c9ad6ccf00c0fe32ecce981e722deb2b805b1cd445e7d8a91dfb1ed3f3d4e1e8c6d07e443d9bd58a4a33d2b33108efa845f1fcdbda19139622f25e49528d8b1106494b2b151897caeec93f9323df2d7585a70a6f962ed74ac2e28b32ca28af45bc1c519d00ab04217c346e24c03b632a89a0216b4e321bc4628eef2ab3f0f94d7b9ac16149d4eab4ac258f9860b7375cd9980d521245c5f51e337b1b82d2b507d577c04672"}, {0x98, 0x112, 0x6, "5c8b33ff630fadbcf4d119e93d33dd1cdd4ce375c1c9a9e367810c2f3cc70655d0f2b07b82ccd7f65d6d9f9f01ef76f1d457a69554b6753eeaa36532d21fe3ac2c4c01dc64627670b6c2abc132c12e3338c86b03d59d534c1ed9ab9cc3a1e51366e280058e74e6a750d285931cf0245072b32306f97cf4241511a22ec9b7bebfd29eabd53f186744"}, {0x28, 0x10f, 0x1, "1bf86b84fc58cd3b9e4065b294c3bbb5245315363baf"}, {0xb0, 0x109, 0x8, "591ac48a8eb6f62702c2e6135c712231b19856f096309f922904f05b8804974928eed50385f59cedbb4f9128fa3b35918b271fc6f1546d26f8595f65da4be55596769138778357cb236e9a7d60751021b33558c0193dc0d9cf201b9f006a33c103e85b1dbd9b0fb6a9b6fde89d77aeccac9f3c906cc8985f405496f8f83477b2a9d074bad07b2d64931ff25bb7c51231d9709bac7d550b84583ec50e"}, {0xa8, 0x113, 0x4, "0c0fc47a68554fd0861dd25d3bc7be39e64abc3463ed08efeee6f8bbd868fdd4fd823138c00ccfc0650e1343b52b398c545ded4c0235474ea476ea012517a1aa86d1b6f392d93b3946c11712f14bd5f93952c04309131f63c37cb4563fe3ce59224d5bc176e5789502d7750337c0a962aacb09ea88b692a1afbe073be38ac24961a882d14ae15763deb15dbf10c862cf482a79cd"}, {0xf8, 0x10f, 0x3, "0585774d536dde066f49e2132de03974c3a94d807a692ab7cefd76bc26d5b28c2f3efdfc3df9aabbc16bb866ddc74bea0ce84fffb0f73198a9fec082b7614b622004284f979c2d2f054a46bc789feea735ebfdff199af46a1cfe3877bab46acb724a3cdea46fc72299ff64aa4c519f66e81b7d4a42a19746a2334648e67c41a348cb692312c28934e0b96b71b3d0b135d59d73ff72a72a95637655b9c58881a0cf9fbf277cd0f92e81492b09d86171dbd94c6cb993e527caa2a63d1b5f6b5f10248195fdf4a55670f59f6952f09afe8fb654ed3e3d8012e8989c9cfc546a274dd24b917382c7aa5b"}], 0x6b8}, 0x880) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000002a00), &(0x7f0000002a40)=0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000002a80)=0x8, 0x4) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000002ac0)={{0x3, @bcast}, [@default, @rose, @rose, @bcast, @null, @remote, @rose, @netrom]}, &(0x7f0000002b40)=0x48) bind$netrom(r2, &(0x7f0000002b80)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000002c00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002c40)={r3, 0x5c4, 0x8, 0x624}) connect$vsock_stream(r4, &(0x7f0000002c80)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r5 = openat$cgroup_ro(r4, &(0x7f0000002cc0)='cpu.stat\x00', 0x0, 0x0) close(r0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000002d00)=0x3) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000002d40)={0x4}, 0x4) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000002d80)=0x1, 0x4) ioctl$FIOCLEX(r5, 0x5451) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e00), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000002f80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e40)={0xfc, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe8c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb9ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78e4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x41) socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000002fc0)={0x7f, {{0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x1ff, @mcast1}}, {{0xa, 0x4e20, 0x2, @remote, 0x5}}]}, 0x190) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000032c0)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003280)={&(0x7f00000031c0)={0x84, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000004}, 0x20) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000003300)={0x0, @local, @multicast2}, &(0x7f0000003340)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000003380)={@mcast1, 0x7c, r8}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000033c0)={0x0, 0x800, 0x3}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000037c0)={0x0, 0xeb7, 0x8000}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000003bc0)={0x0, 0xe, {0x4, @usage=0x4, r9, 0xb499, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8, 0x40, @struct={0x1, 0x1ff}, 0x1ff, 0x8, [0x58a8, 0x9, 0x6, 0xffffffffffffffff, 0x9, 0x5]}, {0x6, @usage=0x4, r10, 0x0, 0x53e4, 0x10000, 0x9, 0xa4, 0x8, @struct={0x0, 0x6}, 0x800, 0x2, [0xfe2, 0x6, 0x2, 0x5, 0x10000, 0x59]}, {0x200, @usage=0x8, 0x0, 0x6, 0x7fffffffffffffff, 0x3ff, 0x1, 0x4, 0xa8, @usage=0x80000000, 0x3, 0x0, [0x80000001, 0xfffffffffffff000, 0xffffffffffffffff, 0xef, 0x2, 0x7f]}, {0xfdae, 0x1, 0x3}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000004000), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r11, &(0x7f0000004180)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004140)={&(0x7f0000004040)={0xcc, r12, 0x220, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xdba7}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4) kernel console output (not intermixed with test programs): :No lecd attached [ 218.986514][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 218.994514][ C1] lec:lec_tx_timeout: lec0 [ 218.999338][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 224.006517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.014527][ C1] lec:lec_tx_timeout: lec0 [ 224.019046][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.026537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 229.034539][ C0] lec:lec_tx_timeout: lec0 [ 229.040312][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 234.046511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 234.054533][ C1] lec:lec_tx_timeout: lec0 [ 234.059024][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 239.066531][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 239.074534][ C1] lec:lec_tx_timeout: lec0 [ 239.079093][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 244.086641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 244.094739][ C1] lec:lec_tx_timeout: lec0 [ 255.759084][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.766827][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 260.876498][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 260.884530][ C1] lec:lec_tx_timeout: lec0 [ 317.200806][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.208697][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 322.876536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 322.884574][ C1] lec:lec_tx_timeout: lec0 [ 348.087169][ T8769] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 348.264143][ T8784] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 348.275575][ T8776] lo speed is unknown, defaulting to 1000 [ 348.591780][ T8797] __nla_validate_parse: 5 callbacks suppressed [ 348.591799][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 348.621822][ T8797] netlink: 52 bytes leftover after parsing attributes in process `syz.3.692'. [ 348.651609][ T8801] netlink: 176 bytes leftover after parsing attributes in process `syz.2.693'. [ 348.676309][ T8800] netlink: 176 bytes leftover after parsing attributes in process `syz.2.693'. [ 348.719736][ T8781] lo speed is unknown, defaulting to 1000 [ 349.450647][ T8814] lo speed is unknown, defaulting to 1000 [ 350.072511][ T8828] lo speed is unknown, defaulting to 1000 [ 350.094520][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 350.126736][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.445025][ T8842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.795750][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 350.961402][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 350.977955][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 351.029594][ T8857] netlink: 'syz.3.707': attribute type 15 has an invalid length. [ 351.146378][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 351.466414][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 351.953425][ T8884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.326227][ T8893] tipc: Enabled bearer , priority 0 [ 352.334149][ T8893] syzkaller0: entered promiscuous mode [ 352.340315][ T8893] syzkaller0: entered allmulticast mode [ 352.378260][ T8893] tipc: Resetting bearer [ 352.388167][ T8892] tipc: Resetting bearer [ 352.447092][ T8892] tipc: Disabling bearer [ 352.841738][ T8917] vxcan1: entered allmulticast mode [ 352.964630][ T8911] syz_tun: refused to change device tx_queue_len [ 353.064278][ T8919] lo speed is unknown, defaulting to 1000 [ 353.288513][ T8899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.621064][ T8940] __nla_validate_parse: 4 callbacks suppressed [ 353.621085][ T8940] netlink: 224 bytes leftover after parsing attributes in process `syz.0.728'. [ 353.640717][ T8940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 353.657742][ T8940] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 353.679682][ T8928] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.764540][ T8937] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 353.776655][ T8937] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 353.808383][ T8928] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.825760][ T8943] netlink: 'syz.3.729': attribute type 15 has an invalid length. [ 353.880089][ T8928] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.952086][ T8928] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.053056][ T8951] lo speed is unknown, defaulting to 1000 [ 354.057910][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.729'. [ 354.191680][ T968] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.213607][ T968] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.320441][ T968] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.328878][ T968] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.559940][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 354.641032][ T8975] FAULT_INJECTION: forcing a failure. [ 354.641032][ T8975] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 354.660363][ T8975] CPU: 0 UID: 0 PID: 8975 Comm: syz.0.736 Not tainted syzkaller #0 PREEMPT(full) [ 354.660390][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.660408][ T8975] Call Trace: [ 354.660415][ T8975] [ 354.660423][ T8975] dump_stack_lvl+0x189/0x250 [ 354.660459][ T8975] ? __pfx____ratelimit+0x10/0x10 [ 354.660487][ T8975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.660506][ T8975] ? __pfx__printk+0x10/0x10 [ 354.660552][ T8975] should_fail_ex+0x414/0x560 [ 354.660584][ T8975] _copy_to_user+0x31/0xb0 [ 354.660610][ T8975] simple_read_from_buffer+0xe1/0x170 [ 354.660640][ T8975] proc_fail_nth_read+0x1b3/0x220 [ 354.660663][ T8975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.660686][ T8975] ? rw_verify_area+0x2a6/0x4d0 [ 354.660706][ T8975] ? __lock_acquire+0xab9/0xd20 [ 354.660723][ T8975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.660744][ T8975] vfs_read+0x1fd/0xa30 [ 354.660765][ T8975] ? fdget_pos+0x247/0x320 [ 354.660796][ T8975] ? __pfx___mutex_lock+0x10/0x10 [ 354.660816][ T8975] ? __pfx_vfs_read+0x10/0x10 [ 354.660840][ T8975] ? __fget_files+0x2a/0x420 [ 354.660871][ T8975] ? __fget_files+0x3a0/0x420 [ 354.660895][ T8975] ? __fget_files+0x2a/0x420 [ 354.660929][ T8975] ksys_read+0x145/0x250 [ 354.660954][ T8975] ? __pfx_ksys_read+0x10/0x10 [ 354.660973][ T8975] ? rcu_is_watching+0x15/0xb0 [ 354.661000][ T8975] ? do_syscall_64+0xbe/0x3b0 [ 354.661024][ T8975] do_syscall_64+0xfa/0x3b0 [ 354.661044][ T8975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.661062][ T8975] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.661081][ T8975] ? clear_bhb_loop+0x60/0xb0 [ 354.661105][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.661124][ T8975] RIP: 0033:0x7f49f2d8d8dc [ 354.661147][ T8975] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.661163][ T8975] RSP: 002b:00007f49f3cd2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.661187][ T8975] RAX: ffffffffffffffda RBX: 00007f49f2fe6090 RCX: 00007f49f2d8d8dc [ 354.661201][ T8975] RDX: 000000000000000f RSI: 00007f49f3cd20a0 RDI: 0000000000000006 [ 354.661213][ T8975] RBP: 00007f49f3cd2090 R08: 0000000000000000 R09: 0000000000000014 [ 354.661225][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.661236][ T8975] R13: 00007f49f2fe6128 R14: 00007f49f2fe6090 R15: 00007ffd0a94a208 [ 354.661269][ T8975] [ 355.067286][ T8984] netlink: 'syz.0.738': attribute type 13 has an invalid length. [ 355.084189][ T8984] netlink: 'syz.0.738': attribute type 17 has an invalid length. [ 355.446804][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.458818][ T8996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.472060][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.525815][ T8984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.564306][ T8982] lo speed is unknown, defaulting to 1000 [ 356.025540][ T8988] lo speed is unknown, defaulting to 1000 [ 356.199983][ T9025] netlink: 64 bytes leftover after parsing attributes in process `syz.2.753'. [ 356.264942][ T9027] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.752'. [ 356.439116][ T9032] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 356.644364][ T9033] bond2: entered promiscuous mode [ 356.666138][ T9033] bond2: entered allmulticast mode [ 356.682350][ T9033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.932415][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 357.058979][ T9063] vlan0: entered promiscuous mode [ 357.064632][ T9063] geneve1: entered promiscuous mode [ 357.072245][ T9063] vlan0: entered allmulticast mode [ 357.080457][ T9063] geneve1: entered allmulticast mode [ 357.235778][ T9070] netlink: 88 bytes leftover after parsing attributes in process `syz.2.768'. [ 357.266096][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 357.495566][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 357.507598][ T9091] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 357.566368][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.770'. [ 357.805564][ T9107] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 357.953187][ T9119] netlink: 'syz.3.781': attribute type 13 has an invalid length. [ 357.973999][ T9119] netlink: 'syz.3.781': attribute type 17 has an invalid length. [ 358.056015][ T9119] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.119753][ T9119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.177941][ T5920] lo speed is unknown, defaulting to 1000 [ 358.194629][ T9134] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 358.226197][ T9112] vlan0: entered promiscuous mode [ 358.236871][ T9112] macvtap0: entered promiscuous mode [ 358.335204][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.344609][ T9124] lo speed is unknown, defaulting to 1000 [ 358.647544][ T9147] tipc: Cannot configure node identity twice [ 358.955936][ T9158] __nla_validate_parse: 5 callbacks suppressed [ 358.955955][ T9158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.790'. [ 359.113724][ T9162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.792'. [ 359.132025][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.793'. [ 359.141188][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.793'. [ 359.358004][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.796'. [ 359.427275][ T9179] ip6erspan0: entered promiscuous mode [ 359.442819][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 359.817068][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 359.888091][ T9205] hsr0: entered allmulticast mode [ 359.893257][ T9205] hsr_slave_0: entered allmulticast mode [ 359.900662][ T9205] hsr_slave_1: entered allmulticast mode [ 359.916252][ T9212] hsr_slave_0: left promiscuous mode [ 359.931408][ T9212] hsr_slave_1: left promiscuous mode [ 359.979465][ T9212] hsr0 (unregistering): left allmulticast mode [ 360.108818][ T9222] trusted_key: syz.4.806 sent an empty control message without MSG_MORE. [ 360.247232][ T9221] ip6erspan0: left promiscuous mode [ 360.555207][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 360.763552][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 360.772515][ T9267] netlink: 52 bytes leftover after parsing attributes in process `syz.0.819'. [ 361.105156][ T9288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.575052][ T9317] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 361.834162][ T9322] gretap1: entered allmulticast mode [ 361.880854][ T9322] bond2: (slave gretap1): making interface the new active one [ 361.900395][ T9322] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 363.281387][ T9400] netlink: 'syz.3.855': attribute type 64 has an invalid length. [ 363.437142][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 363.684134][ T9406] IPVS: Scheduler module ip_vs_ not found [ 364.021288][ T9426] netlink: 'syz.4.864': attribute type 13 has an invalid length. [ 364.030894][ T9426] netlink: 'syz.4.864': attribute type 17 has an invalid length. [ 364.085890][ T9426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.209671][ T9430] |ªA–: entered promiscuous mode [ 364.253057][ T9432] __nla_validate_parse: 10 callbacks suppressed [ 364.253078][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 364.335926][ T9444] netlink: 'syz.3.867': attribute type 15 has an invalid length. [ 364.482364][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 364.864805][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.876'. [ 364.944834][ T9480] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.034642][ T9480] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.080386][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 365.107968][ T9493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.879'. [ 365.153020][ T9480] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.243887][ T9480] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.336405][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.881'. [ 365.481622][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 365.488534][ T7069] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.538052][ T9496] netlink: 312 bytes leftover after parsing attributes in process `syz.1.881'. [ 365.570274][ T7069] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.605000][ T7069] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.663663][ T78] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.161209][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 366.171246][ T9555] netlink: 52 bytes leftover after parsing attributes in process `syz.1.891'. [ 366.378702][ T9562] tipc: Can't bind to reserved service type 1 [ 367.241336][ T9599] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 367.260652][ T9601] bridge: RTM_NEWNEIGH with invalid ether address [ 367.541775][ T9606] syzkaller0: entered promiscuous mode [ 367.576138][ T9606] syzkaller0: entered allmulticast mode [ 367.624321][ T9632] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.624396][ T78] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.643332][ T78] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.936299][ T78] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.945358][ T78] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.197014][ T9651] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 369.335367][ T9665] netlink: 'syz.2.926': attribute type 2 has an invalid length. [ 369.348967][ T9662] netlink: 'syz.4.928': attribute type 2 has an invalid length. [ 369.439388][ T9669] __nla_validate_parse: 13 callbacks suppressed [ 369.439407][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 369.519404][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 369.528486][ T9680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.931'. [ 369.891941][ T9695] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 369.912015][ T9695] batman_adv: batadv0: Adding interface: gretap1 [ 369.925036][ T9695] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.963625][ T9695] batman_adv: batadv0: Interface activated: gretap1 [ 370.737070][ T9713] netlink: 224 bytes leftover after parsing attributes in process `syz.0.938'. [ 371.285117][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 371.286012][ T9707] delete_channel: no stack [ 371.300417][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 371.313978][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 371.326618][ T9729] netlink: 'syz.4.944': attribute type 20 has an invalid length. [ 371.338196][ T9729] netlink: 'syz.4.944': attribute type 21 has an invalid length. [ 371.392127][ T30] audit: type=1800 audit(1759801110.580:4): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.944" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=941 res=0 errno=0 [ 371.529433][ T30] audit: type=1804 audit(1759801110.710:5): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.944" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=941 res=1 errno=0 [ 371.586827][ T9744] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 371.726326][ T9755] netlink: 1 bytes leftover after parsing attributes in process `syz.1.951'. [ 371.746691][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 371.796238][ T9757] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 371.814888][ T9757] bridge4: entered allmulticast mode [ 371.915142][ T9761] netlink: 6 bytes leftover after parsing attributes in process `syz.4.953'. [ 372.016081][ T9761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.060935][ T9767] can: request_module (can-proto-0) failed. [ 372.420686][ T9788] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 372.851565][ T9800] geneve2: entered promiscuous mode [ 372.865651][ T9800] geneve2: entered allmulticast mode [ 372.893721][ T7064] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 33523 - 0 [ 372.904560][ T7064] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 50578 - 0 [ 372.947527][ T7064] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 33523 - 0 [ 372.956115][ T7064] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 50578 - 0 [ 373.020127][ T7064] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 33523 - 0 [ 373.029663][ T5898] IPVS: starting estimator thread 0... [ 373.029838][ T7064] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 50578 - 0 [ 373.044013][ T7064] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 33523 - 0 [ 373.052699][ T7064] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 50578 - 0 [ 373.065774][ T9818] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 373.136579][ T9817] IPVS: using max 32 ests per chain, 76800 per kthread [ 373.444970][ T9834] netlink: 'syz.0.974': attribute type 13 has an invalid length. [ 373.467393][ T9837] tipc: Enabling of bearer rejected, failed to enable media [ 373.529211][ T9842] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 373.634673][ T9841] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 373.684794][ T9841] bond4 (unregistering): Released all slaves [ 373.704890][ T9852] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 374.531311][ T9888] netlink: 'syz.2.986': attribute type 1 has an invalid length. [ 374.731455][ T9887] __nla_validate_parse: 16 callbacks suppressed [ 374.731475][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.985'. [ 375.022509][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 375.036574][ T9897] netlink: 52 bytes leftover after parsing attributes in process `syz.2.987'. [ 375.258601][ T9908] netlink: 'syz.3.990': attribute type 11 has an invalid length. [ 375.497662][ T9924] netlink: 'syz.1.994': attribute type 39 has an invalid length. [ 375.520138][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.989'. [ 375.530414][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.989'. [ 375.540121][ T9910] netlink: 'syz.2.989': attribute type 6 has an invalid length. [ 375.671713][ T9930] netlink: 'syz.0.996': attribute type 7 has an invalid length. [ 375.691996][ T9928] netlink: 'syz.2.995': attribute type 4 has an invalid length. [ 375.709245][ T9930] netlink: 'syz.0.996': attribute type 21 has an invalid length. [ 375.729531][ T9930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.996'. [ 375.902503][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 375.948512][ T9941] netlink: 52 bytes leftover after parsing attributes in process `syz.0.999'. [ 376.037288][ T9949] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 376.045514][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 376.209059][ T9958] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 376.291050][ T9964] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 376.304998][ T9965] netlink: 'syz.1.1005': attribute type 39 has an invalid length. [ 376.305059][ T9964] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 376.457652][ T9959] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1003'. [ 376.485644][ T9959] ..0·: renamed from hsr0 [ 376.520553][ T9959] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.536955][ T9959] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.564007][ T9959] ..0·: entered allmulticast mode [ 376.570021][ T9959] hsr_slave_0: entered allmulticast mode [ 376.575897][ T9959] hsr_slave_1: entered allmulticast mode [ 376.584139][ T9959] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 377.679351][T10018] team0: Device gtp1 is of different type [ 377.919904][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b605400: rx timeout, send abort [ 377.955375][T10038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.008685][T10041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.234556][T10058] openvswitch: netlink: IP tunnel dst address not specified [ 378.420036][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b605000: rx timeout, send abort [ 378.429407][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b605400: abort rx timeout. Force session deactivation [ 378.508470][T10071] sctp: [Deprecated]: syz.1.1033 (pid 10071) Use of int in max_burst socket option deprecated. [ 378.508470][T10071] Use struct sctp_assoc_value instead [ 378.644256][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.654033][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 378.811882][T10090] delete_channel: no stack [ 378.816892][T10083] nbd2: detected capacity change from 0 to 63 [ 378.846301][T10093] block nbd2: NBD_DISCONNECT [ 378.872643][T10093] block nbd2: Disconnected due to user request. [ 378.915954][T10093] block nbd2: shutting down sockets [ 378.928357][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b605000: abort rx timeout. Force session deactivation [ 379.133775][T10108] dvmrp0: entered allmulticast mode [ 379.795154][T10155] bond4: option arp_validate: invalid value (18446744073491447809) [ 379.823597][T10155] bond4 (unregistering): Released all slaves [ 379.824978][T10157] validate_nla: 9 callbacks suppressed [ 379.824994][T10157] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 379.965687][T10171] netlink: 'syz.4.1058': attribute type 2 has an invalid length. [ 379.974024][T10171] __nla_validate_parse: 15 callbacks suppressed [ 379.974040][T10171] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1058'. [ 380.185306][T10190] netlink: 'syz.2.1060': attribute type 7 has an invalid length. [ 380.286220][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 380.306755][T10190] netlink: 'syz.2.1060': attribute type 8 has an invalid length. [ 380.358853][T10190] netlink: 'syz.2.1060': attribute type 13 has an invalid length. [ 380.480015][T10203] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 380.526611][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 380.889800][T10227] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 380.945624][T10227] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1067'. [ 381.248417][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 381.595120][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'. [ 382.347714][T10296] syzkaller1: entered promiscuous mode [ 382.353314][T10296] syzkaller1: entered allmulticast mode [ 382.361399][T10306] netlink: 'syz.0.1090': attribute type 21 has an invalid length. [ 382.383295][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1090'. [ 382.393264][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 382.539787][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 382.854004][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 382.894193][T10343] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 383.197721][T10361] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 383.212763][T10361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.916982][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 383.925017][ C1] lec:lec_tx_timeout: lec0 [ 384.170764][T10405] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.183071][T10405] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 384.358906][T10404] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.407196][T10404] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 384.709435][T10409] mpoa:mpoad_close: () going down [ 385.115357][T10456] validate_nla: 2 callbacks suppressed [ 385.115375][T10456] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 385.773843][T10487] __nla_validate_parse: 12 callbacks suppressed [ 385.773862][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 385.807698][T10494] netlink: 'syz.4.1136': attribute type 28 has an invalid length. [ 385.860014][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'. [ 386.028105][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 386.059119][T10514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1139'. [ 386.079289][T10523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'. [ 386.305295][T10535] syzkaller1: entered promiscuous mode [ 386.311717][T10535] syzkaller1: entered allmulticast mode [ 386.830070][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 386.915096][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 387.303465][T10574] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 387.312970][T10574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.825686][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'. [ 388.091681][T10596] can: request_module (can-proto-5) failed. [ 388.154408][T10601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1161'. [ 388.163974][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'. [ 389.241144][T10658] netlink: 'syz.2.1172': attribute type 17 has an invalid length. [ 389.267056][T10658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.008882][T10698] netlink: 'syz.0.1183': attribute type 11 has an invalid length. [ 391.247859][T10764] __nla_validate_parse: 11 callbacks suppressed [ 391.247877][T10764] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1201'. [ 391.369271][T10773] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1202'. [ 391.603148][T10787] netlink: 'syz.2.1200': attribute type 3 has an invalid length. [ 391.621476][T10787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1200'. [ 391.804703][T10790] tipc: Started in network mode [ 391.810168][T10790] tipc: Node identity aa1e6c2ed373, cluster identity 4711 [ 391.821646][T10790] tipc: Enabled bearer , priority 0 [ 391.854364][T10790] tipc: Resetting bearer [ 391.919069][T10795] syzkaller0: entered promiscuous mode [ 391.976040][T10795] syzkaller0: entered allmulticast mode [ 392.447098][T10789] tipc: Resetting bearer [ 392.473217][T10789] tipc: Disabling bearer [ 392.701199][T10825] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 392.780161][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.800455][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.860297][T10814] hsr0: left allmulticast mode [ 392.865096][T10814] hsr_slave_0: left allmulticast mode [ 392.870782][T10814] hsr_slave_1: left allmulticast mode [ 392.910759][ T7064] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.930885][ T7064] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.954007][ T7064] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.031233][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 393.171327][ T7064] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.196992][T10835] macvtap1: entered allmulticast mode [ 393.202893][T10835] veth1_vlan: entered allmulticast mode [ 393.297071][T10846] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 393.991725][T10869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.039770][T10872] veth0_to_bond: entered allmulticast mode [ 394.100565][T10869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.101859][T10874] netlink: 'syz.2.1226': attribute type 2 has an invalid length. [ 394.138330][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'. [ 394.183189][T10869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.278244][T10869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.311170][T10883] 8021q: VLANs not supported on lo [ 394.384903][T10886] tipc: Enabled bearer , priority 0 [ 394.392534][T10885] tipc: Enabling of bearer rejected, already enabled [ 394.410953][ T7064] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.420010][T10887] syzkaller0: entered promiscuous mode [ 394.425644][T10887] syzkaller0: entered allmulticast mode [ 394.437140][T10885] tipc: Resetting bearer [ 394.460167][T10884] tipc: Resetting bearer [ 394.482256][T10884] tipc: Disabling bearer [ 394.507480][ T7071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.535730][ T7071] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.547182][ T7071] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.779775][T10900] netlink: 'syz.3.1233': attribute type 12 has an invalid length. [ 394.803836][T10900] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1233'. [ 395.199501][T10923] netlink: 'syz.0.1240': attribute type 2 has an invalid length. [ 395.212371][T10923] netlink: 'syz.0.1240': attribute type 4 has an invalid length. [ 395.220834][T10923] netlink: 'syz.0.1240': attribute type 8 has an invalid length. [ 395.229033][T10923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1240'. [ 395.537742][T10938] tipc: Enabled bearer , priority 0 [ 395.547299][T10938] syzkaller0: entered promiscuous mode [ 395.552934][T10938] syzkaller0: entered allmulticast mode [ 395.565230][T10938] tipc: Resetting bearer [ 395.580730][T10937] tipc: Resetting bearer [ 395.600058][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1247'. [ 395.610959][T10937] tipc: Disabling bearer [ 395.780535][T10954] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 395.788684][T10954] netlink: 'syz.4.1249': attribute type 2 has an invalid length. [ 396.596398][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 396.685571][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'. [ 396.723438][T10998] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1259'. [ 397.228160][T10979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.551445][T10990] tipc: Enabling of bearer rejected, failed to enable media [ 397.591136][T10993] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 397.595511][ T7064] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.637055][ T7064] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.654032][ T7064] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.715166][ T7064] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.841665][T11045] tc_dump_action: action bad kind [ 397.919057][T11051] validate_nla: 1 callbacks suppressed [ 397.919076][T11051] netlink: 'syz.3.1269': attribute type 13 has an invalid length. [ 398.032096][ T7064] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.041294][ T7064] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.069244][ T7064] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.094488][ T7064] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.741198][T11078] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1274'. [ 398.747691][T11079] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 398.769661][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 399.057796][T11089] netlink: 'syz.3.1278': attribute type 4 has an invalid length. [ 399.524573][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 400.061656][T11120] geneve3: entered promiscuous mode [ 400.568012][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1290'. [ 400.798523][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1291'. [ 401.028959][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 401.038514][T11146] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1293'. [ 401.051600][T11149] FAULT_INJECTION: forcing a failure. [ 401.051600][T11149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.064868][T11149] CPU: 0 UID: 0 PID: 11149 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(full) [ 401.064894][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.064904][T11149] Call Trace: [ 401.064912][T11149] [ 401.064920][T11149] dump_stack_lvl+0x189/0x250 [ 401.064949][T11149] ? __pfx____ratelimit+0x10/0x10 [ 401.064981][T11149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.065005][T11149] ? __pfx__printk+0x10/0x10 [ 401.065047][T11149] should_fail_ex+0x414/0x560 [ 401.065077][T11149] _copy_to_user+0x31/0xb0 [ 401.065103][T11149] simple_read_from_buffer+0xe1/0x170 [ 401.065132][T11149] proc_fail_nth_read+0x1b3/0x220 [ 401.065157][T11149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.065181][T11149] ? rw_verify_area+0x2a6/0x4d0 [ 401.065202][T11149] ? __lock_acquire+0xab9/0xd20 [ 401.065219][T11149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.065241][T11149] vfs_read+0x1fd/0xa30 [ 401.065259][T11149] ? fdget_pos+0x247/0x320 [ 401.065289][T11149] ? __pfx___mutex_lock+0x10/0x10 [ 401.065309][T11149] ? __pfx_vfs_read+0x10/0x10 [ 401.065334][T11149] ? __fget_files+0x2a/0x420 [ 401.065362][T11149] ? __fget_files+0x3a0/0x420 [ 401.065384][T11149] ? __fget_files+0x2a/0x420 [ 401.065419][T11149] ksys_read+0x145/0x250 [ 401.065453][T11149] ? __pfx_ksys_read+0x10/0x10 [ 401.065472][T11149] ? rcu_is_watching+0x15/0xb0 [ 401.065502][T11149] ? do_syscall_64+0xbe/0x3b0 [ 401.065527][T11149] do_syscall_64+0xfa/0x3b0 [ 401.065545][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.065574][T11149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.065592][T11149] ? clear_bhb_loop+0x60/0xb0 [ 401.065615][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.065631][T11149] RIP: 0033:0x7f5749f8d8dc [ 401.065649][T11149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 401.065665][T11149] RSP: 002b:00007f574ad43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 401.065686][T11149] RAX: ffffffffffffffda RBX: 00007f574a1e6090 RCX: 00007f5749f8d8dc [ 401.065699][T11149] RDX: 000000000000000f RSI: 00007f574ad430a0 RDI: 000000000000000d [ 401.065709][T11149] RBP: 00007f574ad43090 R08: 0000000000000000 R09: 0000000000000000 [ 401.065720][T11149] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 401.065730][T11149] R13: 00007f574a1e6128 R14: 00007f574a1e6090 R15: 00007ffe2f7142f8 [ 401.065760][T11149] [ 401.399180][T11153] netlink: 'syz.2.1295': attribute type 6 has an invalid length. [ 402.756970][T11203] __nla_validate_parse: 2 callbacks suppressed [ 402.756988][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.779843][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.789864][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.810145][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.813510][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 402.820910][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.839165][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.858158][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.868687][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 402.878272][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'. [ 403.025736][T11210] netlink: 'syz.2.1307': attribute type 10 has an invalid length. [ 403.800171][T11230] netlink: 'syz.3.1310': attribute type 10 has an invalid length. [ 403.836267][T11230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.875013][T11230] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 404.872749][T11286] sctp: [Deprecated]: syz.3.1327 (pid 11286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.872749][T11286] Use struct sctp_sack_info instead [ 404.891507][T11286] sctp: [Deprecated]: syz.3.1327 (pid 11286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.891507][T11286] Use struct sctp_sack_info instead [ 404.994672][T11295] vlan3: entered promiscuous mode [ 405.000024][T11295] bond0: entered promiscuous mode [ 405.005272][T11295] bond_slave_0: entered promiscuous mode [ 405.011723][T11295] bond_slave_1: entered promiscuous mode [ 405.712795][T11324] netlink: 'syz.0.1336': attribute type 13 has an invalid length. [ 406.181686][T11357] veth0: entered promiscuous mode [ 406.388318][T11357] veth0 (unregistering): left promiscuous mode [ 407.416685][T11404] netlink: 'syz.2.1362': attribute type 21 has an invalid length. [ 407.431142][T11404] netlink: 'syz.2.1362': attribute type 5 has an invalid length. [ 407.445860][T11404] netlink: 'syz.2.1362': attribute type 6 has an invalid length. [ 407.792255][T11423] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 407.873767][T11425] __nla_validate_parse: 94 callbacks suppressed [ 407.873787][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 407.927005][T11425] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 408.123051][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 408.317665][T11453] lo: Caught tx_queue_len zero misconfig [ 408.491627][T11444] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1373'. [ 408.886654][T11480] netlink: 'syz.1.1380': attribute type 4 has an invalid length. [ 409.104618][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 409.362510][T11497] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1385'. [ 409.844669][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 410.148446][T11554] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 410.182085][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 410.191090][T11555] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1400'. [ 410.488804][T11571] bond4: option all_slaves_active: invalid value (13) [ 410.499872][T11571] bond4 (unregistering): Released all slaves [ 410.585067][T11575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1406'. [ 410.720765][T11586] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1409'. [ 411.288290][T11621] netlink: 'syz.3.1420': attribute type 13 has an invalid length. [ 411.507763][T11640] sctp: [Deprecated]: syz.2.1422 (pid 11640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.507763][T11640] Use struct sctp_sack_info instead [ 411.660375][ T7069] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.682645][ T7069] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.716390][ T7069] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.725306][ T7069] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.965824][T11658] netlink: 'syz.3.1429': attribute type 3 has an invalid length. [ 412.123220][T11670] netlink: 'syz.4.1427': attribute type 31 has an invalid length. [ 412.211943][T11668] vlan0: left promiscuous mode [ 412.216944][T11668] geneve1: left promiscuous mode [ 412.262904][T11668] veth1_vlan: left allmulticast mode [ 412.373219][T11669] netlink: 'syz.0.1430': attribute type 6 has an invalid length. [ 412.938617][T11692] bond4: entered promiscuous mode [ 413.311309][T11718] openvswitch: netlink: Key type 31 is not supported [ 413.885771][T11729] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 414.279004][T11740] __nla_validate_parse: 5 callbacks suppressed [ 414.279025][T11740] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1446'. [ 414.446266][T11753] batadv_slave_1: entered promiscuous mode [ 414.534215][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 414.605105][T11750] batadv_slave_1: left promiscuous mode [ 415.162261][T11784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1457'. [ 415.183618][T11781] dvmrp1: entered allmulticast mode [ 415.228256][T11790] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1459'. [ 415.249764][T11789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1458'. [ 415.258021][T11790] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1459'. [ 415.268583][T11790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1459'. [ 415.296064][T11792] dvmrp0: left allmulticast mode [ 415.301723][T11792] dvmrp1: left allmulticast mode [ 415.428603][T11800] netlink: 'syz.3.1461': attribute type 21 has an invalid length. [ 415.458530][T11800] netlink: 'syz.3.1461': attribute type 1 has an invalid length. [ 415.477234][T11800] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1461'. [ 415.508599][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 415.517765][T11797] netlink: 'syz.3.1461': attribute type 5 has an invalid length. [ 415.525510][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 415.775602][T11812] netlink: 'syz.4.1464': attribute type 10 has an invalid length. [ 415.786928][T11812] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.809418][T11812] bond0: (slave team0): Enslaving as an active interface with an up link [ 415.920587][T11818] ip6tnl2: entered promiscuous mode [ 415.946868][T11818] ip6tnl2: entered allmulticast mode [ 415.953881][T11818] team0: Device ip6tnl2 is of different type [ 416.225580][T11833] syzkaller1: entered promiscuous mode [ 416.233740][T11833] syzkaller1: entered allmulticast mode [ 416.384130][T11839] syzkaller1: entered promiscuous mode [ 416.390184][T11839] syzkaller1: entered allmulticast mode [ 416.657044][T11856] netlink: 'syz.1.1472': attribute type 4 has an invalid length. [ 417.748971][T11899] delete_channel: no stack [ 418.970001][T11962] netlink: 'syz.2.1497': attribute type 4 has an invalid length. [ 419.372567][T11984] nbd: must specify an index to disconnect [ 419.540490][T11988] netlink: 'syz.4.1505': attribute type 13 has an invalid length. [ 419.656770][T11990] netlink: 'syz.2.1506': attribute type 1 has an invalid length. [ 419.929000][T11998] __nla_validate_parse: 10 callbacks suppressed [ 419.929022][T11998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1508'. [ 420.338814][T12013] netlink: 'syz.0.1509': attribute type 8 has an invalid length. [ 420.698913][T12036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1516'. [ 420.790382][T12035] macsec1: entered promiscuous mode [ 420.795717][T12035] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 420.855778][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1518'. [ 420.879831][T12036] bond4: option lacp_rate: invalid value (80) [ 420.890605][T12036] bond4 (unregistering): Released all slaves [ 421.042388][T12038] bond4: option lacp_rate: invalid value (80) [ 421.072050][T12038] bond4 (unregistering): Released all slaves [ 421.379923][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 421.433788][T12064] netlink: 'syz.2.1523': attribute type 13 has an invalid length. [ 421.503782][T12064] netlink: 'syz.2.1523': attribute type 17 has an invalid length. [ 421.715245][T12084] netlink: 'syz.3.1529': attribute type 4 has an invalid length. [ 421.727871][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1527'. [ 421.759642][T12081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1528'. [ 421.975573][T12095] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1530'. [ 422.521891][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'. [ 422.794479][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 423.019481][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1543'. [ 423.231815][T12147] nbd: socks must be embedded in a SOCK_ITEM attr [ 424.088048][T12182] netlink: 'syz.0.1552': attribute type 4 has an invalid length. [ 424.403268][T12209] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 424.405906][T12200] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 424.426035][T12200] bond5 (unregistering): Released all slaves [ 424.718620][T12213] tipc: Enabled bearer , priority 0 [ 424.790918][T12201] syzkaller0: entered promiscuous mode [ 424.823903][T12201] syzkaller0: entered allmulticast mode [ 424.904796][T12201] tipc: Resetting bearer [ 424.920106][T12197] tipc: Resetting bearer [ 424.962075][T12197] tipc: Disabling bearer [ 425.154011][T12240] netlink: 'syz.0.1565': attribute type 13 has an invalid length. [ 425.186869][T12240] netlink: 'syz.0.1565': attribute type 17 has an invalid length. [ 425.426088][T12256] __nla_validate_parse: 3 callbacks suppressed [ 425.426107][T12256] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1566'. [ 425.580136][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.647558][T12240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.862906][T12272] openvswitch: netlink: Flow key attr not present in new flow. [ 425.874368][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1569'. [ 425.888311][T12265] syzkaller0: entered promiscuous mode [ 425.893943][T12265] syzkaller0: entered allmulticast mode [ 426.062640][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1574'. [ 426.129601][T12282] syzkaller1: entered promiscuous mode [ 426.135107][T12282] syzkaller1: entered allmulticast mode [ 426.321517][T12300] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 426.339060][T12303] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1579'. [ 426.348888][T12300] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1578'. [ 426.395236][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 426.494276][T12308] macvtap1: entered allmulticast mode [ 426.512612][T12308] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 426.530529][T12308] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 426.774993][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 426.833938][T12341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.052471][T12352] tipc: Enabled bearer , priority 0 [ 427.088165][T12352] syzkaller0: entered promiscuous mode [ 427.093681][T12352] syzkaller0: entered allmulticast mode [ 427.171233][T12367] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 427.188682][T12352] tipc: Resetting bearer [ 427.217255][T12352] tipc: Resetting bearer [ 427.265662][T12352] tipc: Disabling bearer [ 427.444211][T12372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.585187][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1595'. [ 427.643753][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 427.760985][T12388] bond5: option mode: invalid value (254) [ 427.767921][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 427.783269][T12388] bond5 (unregistering): Released all slaves [ 427.852813][T12402] netlink: 'syz.1.1600': attribute type 61 has an invalid length. [ 427.893513][T12399] veth0_virt_wifi: renamed from veth1_vlan [ 428.087910][T12416] tipc: Enabled bearer , priority 0 [ 428.095855][T12416] syzkaller0: entered promiscuous mode [ 428.101828][T12416] syzkaller0: entered allmulticast mode [ 428.160469][T12414] tipc: Resetting bearer [ 428.190136][T12414] tipc: Disabling bearer [ 428.455574][T12431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.550619][T12434] vlan2: entered promiscuous mode [ 428.555914][T12434] bond0: entered promiscuous mode [ 428.783299][T12445] veth7: entered promiscuous mode [ 428.846830][T12448] nbd0: detected capacity change from 0 to 127 [ 428.862243][ T5156] block nbd0: Receive control failed (result -32) [ 429.057804][T12458] netlink: 'syz.1.1620': attribute type 2 has an invalid length. [ 429.181296][T12465] bond4: entered promiscuous mode [ 430.239477][T12525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.319071][T12525] tipc: Started in network mode [ 430.325074][T12525] tipc: Node identity 46101f5f84d7, cluster identity 4711 [ 430.344165][T12525] tipc: Enabled bearer , priority 0 [ 430.367057][T12525] syzkaller0: entered promiscuous mode [ 430.383772][T12525] syzkaller0: entered allmulticast mode [ 430.396890][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 430.445436][T12532] tipc: Enabled bearer , priority 0 [ 430.503444][T12532] syzkaller0: entered promiscuous mode [ 430.527222][T12532] syzkaller0: entered allmulticast mode [ 430.565622][T12538] __nla_validate_parse: 10 callbacks suppressed [ 430.565644][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 430.640339][T12532] tipc: Resetting bearer [ 430.687524][T12531] tipc: Resetting bearer [ 430.731599][T12531] tipc: Disabling bearer [ 430.743879][T12543] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1640'. [ 431.050477][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 431.060150][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'. [ 431.069448][T12571] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1645'. [ 431.071674][T12524] tipc: Resetting bearer [ 431.171855][T12580] netlink: 'syz.1.1647': attribute type 4 has an invalid length. [ 431.190956][T12524] tipc: Disabling bearer [ 431.261067][T12566] netlink: 'syz.1.1647': attribute type 4 has an invalid length. [ 431.580011][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 431.993205][T12628] tipc: Enabling of bearer rejected, failed to enable media [ 432.656678][T12673] syzkaller1: tun_chr_ioctl cmd 1342215191 [ 432.662607][T12666] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 432.669425][T12666] syzkaller1: linktype set to 823 [ 432.832875][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 432.874128][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 432.879198][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 432.892364][T12682] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1671'. [ 433.470722][T12707] pim6reg1: entered promiscuous mode [ 433.487357][T12707] pim6reg1: entered allmulticast mode [ 434.238729][T12748] raw_sendmsg: syz.3.1689 forgot to set AF_INET. Fix it! [ 434.461855][T12753] tipc: Enabling of bearer rejected, failed to enable media [ 434.764279][T12758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.332457][T12758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.450649][T12758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.543186][T12758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.583272][T12779] tipc: Enabled bearer , priority 0 [ 435.592100][T12779] syzkaller0: entered promiscuous mode [ 435.597824][T12779] syzkaller0: entered allmulticast mode [ 435.631699][T12779] tipc: Resetting bearer [ 435.647985][T12778] tipc: Resetting bearer [ 435.672374][T12778] tipc: Disabling bearer [ 435.781196][T12319] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.825284][T12791] netlink: 'syz.1.1704': attribute type 16 has an invalid length. [ 435.838940][T12791] __nla_validate_parse: 5 callbacks suppressed [ 435.838960][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 435.869257][T12791] netlink: 'syz.1.1704': attribute type 4 has an invalid length. [ 435.891128][T12319] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.899565][T12319] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.917893][T12791] nicvf0: entered promiscuous mode [ 435.925477][T12319] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.944173][T12319] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 435.974408][T12319] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 435.996999][T12319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.025799][T12319] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.554477][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 436.578031][T12827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1713'. [ 436.593277][T12826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1713'. [ 436.614387][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 436.806987][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1714'. [ 437.236332][T12848] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1720'. [ 437.265627][T12850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1721'. [ 437.423525][T12860] syz_tun: entered allmulticast mode [ 437.530091][T12863] veth5: entered promiscuous mode [ 437.745498][T12860] dvmrp8: entered allmulticast mode [ 437.867589][T12864] syz_tun: left allmulticast mode [ 437.872860][T12864] dvmrp8: left allmulticast mode [ 438.173904][T12887] bond0: (slave gretap0): Error: Device type is different from other slaves [ 438.225811][T12892] bond0: (slave gretap0): Error: Device type is different from other slaves [ 439.021607][T12909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.444512][T12922] netlink: 'syz.3.1741': attribute type 29 has an invalid length. [ 439.458914][T12926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1742'. [ 439.468433][T12926] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1742'. [ 439.483102][T12926] netlink: 'syz.1.1742': attribute type 5 has an invalid length. [ 440.082207][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.091268][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 440.132149][T12922] netlink: 'syz.3.1741': attribute type 29 has an invalid length. [ 440.158269][T12942] tipc: Enabled bearer , priority 0 [ 440.175568][T12321] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 33523 - 0 [ 440.186045][T12321] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 50578 - 0 [ 440.197864][T12921] tipc: Disabling bearer [ 440.235629][T12321] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 33523 - 0 [ 440.254402][T12321] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 50578 - 0 [ 440.345395][T12321] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 33523 - 0 [ 440.364435][T12321] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 50578 - 0 [ 440.374617][T12321] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 33523 - 0 [ 440.405471][T12321] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 50578 - 0 [ 440.702094][T12957] syzkaller1: entered promiscuous mode [ 440.714545][T12957] syzkaller1: entered allmulticast mode [ 440.992343][T12963] bridge0: port 1(syz_tun) entered blocking state [ 441.001673][T12963] bridge0: port 1(syz_tun) entered disabled state [ 441.009111][T12963] syz_tun: entered allmulticast mode [ 441.034396][T12963] syz_tun: left allmulticast mode [ 441.088077][T12968] __nla_validate_parse: 10 callbacks suppressed [ 441.088096][T12968] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1753'. [ 441.237129][T12973] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1754'. [ 441.264252][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 441.306914][T12980] batadv0: entered promiscuous mode [ 441.314073][T12980] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 441.325374][T12980] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 441.338838][T12980] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 441.805428][T13004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1764'. [ 441.807860][T13006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1763'. [ 441.881259][T13005] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1764'. [ 441.891942][T13010] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1763'. [ 441.906372][T13010] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1763'. [ 441.917900][T13005] netlink: zone id is out of range [ 441.921744][T13010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1763'. [ 441.926617][T13005] netlink: zone id is out of range [ 441.943626][T13010] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1763'. [ 441.953963][T13005] netlink: get zone limit has 8 unknown bytes [ 442.084976][T13013] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 442.105640][T13013] netlink: 'syz.3.1765': attribute type 11 has an invalid length. [ 442.475980][T13030] nbd: socks must be embedded in a SOCK_ITEM attr [ 443.075565][T13056] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 443.078120][T13060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.086890][T13056] netlink: 'syz.4.1778': attribute type 2 has an invalid length. [ 443.111136][T13056] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 443.163629][T13059] syzkaller1: entered promiscuous mode [ 443.169343][T13059] syzkaller1: entered allmulticast mode [ 443.234124][T13064] xfrm0: Caught tx_queue_len zero misconfig [ 443.307447][T13071] netlink: 'syz.3.1781': attribute type 13 has an invalid length. [ 443.315395][T13071] netlink: 'syz.3.1781': attribute type 17 has an invalid length. [ 443.579514][T13084] netlink: 'syz.1.1782': attribute type 74 has an invalid length. [ 443.623784][T13071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.634054][T13071] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.647927][T13071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.901749][T13071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.193865][T13099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.608363][T13126] sit0: entered promiscuous mode [ 445.916540][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 445.924611][ C1] lec:lec_tx_timeout: lec0 [ 447.080317][T13184] sctp: [Deprecated]: syz.3.1809 (pid 13184) Use of int in max_burst socket option. [ 447.080317][T13184] Use struct sctp_assoc_value instead [ 447.100728][T13179] tipc: Enabled bearer , priority 0 [ 447.108184][T13179] syzkaller0: entered promiscuous mode [ 447.113672][T13179] syzkaller0: entered allmulticast mode [ 447.150437][T13179] __nla_validate_parse: 21 callbacks suppressed [ 447.150458][T13179] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1810'. [ 447.174063][T13188] tipc: Resetting bearer [ 447.195812][T13178] tipc: Resetting bearer [ 447.218375][T13196] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.238918][T13178] tipc: Disabling bearer [ 447.248541][T13192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 447.511936][T13216] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1818'. [ 447.580835][T13220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 447.614817][T13214] bond5: entered promiscuous mode [ 447.629245][T13214] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.888040][T13233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1823'. [ 448.024190][T13246] netlink: 'syz.0.1824': attribute type 10 has an invalid length. [ 448.345216][T13259] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1828'. [ 448.400591][T13259] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1828'. [ 448.625048][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 449.271460][T13293] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1834'. [ 449.642948][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 449.748177][T13306] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 449.761148][T13299] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.771564][T13306] nbd: error processing sock list [ 449.870861][T13299] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.926103][T13299] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.987248][T13299] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.095566][T12319] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.134811][T12319] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.156633][T12319] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.184036][T12319] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.828969][T13345] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 450.842103][T13345] bond6 (unregistering): Released all slaves [ 451.055840][T13361] netlink: 'syz.1.1854': attribute type 4 has an invalid length. [ 451.321102][T13372] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 451.332809][T13375] sctp: [Deprecated]: syz.0.1857 (pid 13375) Use of int in maxseg socket option. [ 451.332809][T13375] Use struct sctp_assoc_value instead [ 451.403563][T13379] netlink: 'syz.3.1858': attribute type 6 has an invalid length. [ 451.415162][T13379] xt_l2tp: v2 sid > 0xffff: 1114112 [ 451.539410][T13383] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 452.676392][T13427] vcan1: entered promiscuous mode [ 452.699087][T13427] vcan1: entered allmulticast mode [ 452.707513][T13427] __nla_validate_parse: 6 callbacks suppressed [ 452.707542][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 452.735989][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 452.745676][T13427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.929758][T13435] wg1 speed is unknown, defaulting to 1000 [ 452.946926][T13435] wg1 speed is unknown, defaulting to 1000 [ 452.971939][T13435] wg1 speed is unknown, defaulting to 1000 [ 453.020408][T13435] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 453.105878][T13435] wg1 speed is unknown, defaulting to 1000 [ 453.180517][T13435] wg1 speed is unknown, defaulting to 1000 [ 453.233822][T13435] wg1 speed is unknown, defaulting to 1000 [ 453.289173][T13435] wg1 speed is unknown, defaulting to 1000 [ 453.309532][T13435] wg1 speed is unknown, defaulting to 1000 [ 453.410473][T13459] netlink: 'syz.4.1881': attribute type 7 has an invalid length. [ 453.488249][T13462] wg1 speed is unknown, defaulting to 1000 [ 453.733920][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 453.770983][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 453.839843][T13484] pim6reg1: entered promiscuous mode [ 453.864572][T13484] pim6reg1: entered allmulticast mode [ 454.334784][T13515] netlink: 'syz.2.1892': attribute type 13 has an invalid length. [ 454.354579][T13515] netlink: 'syz.2.1892': attribute type 17 has an invalid length. [ 454.564182][T13515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.599642][T13515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.660642][T13523] syzkaller1: entered promiscuous mode [ 454.686898][T13515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.692350][T13523] syzkaller1: entered allmulticast mode [ 454.730350][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 454.742576][T13520] wg1 speed is unknown, defaulting to 1000 [ 454.754328][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 454.893735][T13523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1894'. [ 454.946193][T13524] wg1 speed is unknown, defaulting to 1000 [ 455.191823][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 455.281968][T13555] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 455.311813][T13558] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1902'. [ 455.460562][T13553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.556027][T13557] bond3: (slave batadv1): Opening slave failed [ 455.678655][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 455.703851][T13567] netlink: 'syz.4.1905': attribute type 6 has an invalid length. [ 455.757898][T13567] netlink: 'syz.4.1905': attribute type 4 has an invalid length. [ 455.770255][T13567] netlink: 'syz.4.1905': attribute type 4 has an invalid length. [ 456.609195][T13606] 8021q: VLANs not supported on ipvlan1 [ 456.639329][T13610] netlink: 'syz.0.1918': attribute type 21 has an invalid length. [ 456.688734][T13610] netlink: 'syz.0.1918': attribute type 4 has an invalid length. [ 456.706283][T13612] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 456.707225][T13610] netlink: 'syz.0.1918': attribute type 5 has an invalid length. [ 456.760798][T13614] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20003 [ 456.939409][T13633] syzkaller1: entered promiscuous mode [ 456.944920][T13633] syzkaller1: entered allmulticast mode [ 457.113034][T13642] netlink: 'syz.2.1928': attribute type 3 has an invalid length. [ 457.124603][T13640] wg1 speed is unknown, defaulting to 1000 [ 457.257958][T13648] 8021q: VLANs not supported on lo [ 457.771252][T13681] __nla_validate_parse: 10 callbacks suppressed [ 457.771273][T13681] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1937'. [ 458.265909][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 458.520585][T13725] pim6reg99999999: entered allmulticast mode [ 458.745501][T13742] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1953'. [ 459.435802][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 459.763141][T13769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1965'. [ 459.887656][T13784] nftables ruleset with unbound set [ 459.893955][T13783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1967'. [ 459.905036][T13778] wg1 speed is unknown, defaulting to 1000 [ 460.049879][T13794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1968'. [ 460.157144][T13800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1970'. [ 460.382059][T13808] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1972'. [ 460.417104][T13810] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 460.438822][T13810] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 461.334344][T13827] validate_nla: 1 callbacks suppressed [ 461.334363][T13827] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 461.647766][T13864] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1985'. [ 461.661037][T13864] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 461.767481][T13868] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 462.269960][T13909] batadv_slave_1: entered promiscuous mode [ 462.397484][T13914] rdma_rxe: rxe_newlink: failed to add lo [ 462.406127][T13912] wg1 speed is unknown, defaulting to 1000 [ 462.441201][T13914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.449379][T13914] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.458765][T13914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.488278][T13907] batadv_slave_1: left promiscuous mode [ 462.522438][T13916] wg1 speed is unknown, defaulting to 1000 [ 462.780981][T13930] netlink: 'syz.1.2007': attribute type 13 has an invalid length. [ 462.792096][T13930] netlink: 'syz.1.2007': attribute type 17 has an invalid length. [ 462.951058][T13930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.991399][T13930] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.026939][T13930] 0ªX¹¦À: left allmulticast mode [ 463.031928][T13930] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 463.179523][T13945] __nla_validate_parse: 5 callbacks suppressed [ 463.179543][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 463.324706][T13947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 463.437373][T13956] sctp: [Deprecated]: syz.3.2011 (pid 13956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.437373][T13956] Use struct sctp_sack_info instead [ 463.468147][T13955] bridge0: entered promiscuous mode [ 463.473989][T13955] vlan4: entered promiscuous mode [ 463.556099][T13961] tipc: Enabled bearer , priority 0 [ 463.574296][T13961] syzkaller0: entered promiscuous mode [ 463.587403][T13961] syzkaller0: entered allmulticast mode [ 463.616333][T13955] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 463.619788][T13964] netlink: 'syz.4.2015': attribute type 2 has an invalid length. [ 463.632196][T13964] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2015'. [ 463.724802][T13960] tipc: Resetting bearer [ 463.790112][T13960] tipc: Disabling bearer [ 463.894183][T13970] wg1 speed is unknown, defaulting to 1000 [ 464.170843][T12309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.187904][T12309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.210872][T12309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.255133][T12309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.316313][T13995] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 465.028411][T14017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2030'. [ 465.088299][T14023] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2031'. [ 465.154761][T14026] wg1 speed is unknown, defaulting to 1000 [ 465.515857][T14041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2037'. [ 465.536655][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2037'. [ 465.566040][T14041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2037'. [ 465.570613][T14047] geneve2: entered promiscuous mode [ 465.589635][T14041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2037'. [ 465.610916][T14045] wg1 speed is unknown, defaulting to 1000 [ 466.382922][T14084] wg1 speed is unknown, defaulting to 1000 [ 466.766048][T14101] netlink: 'syz.3.2051': attribute type 39 has an invalid length. [ 467.019527][T14099] wg1 speed is unknown, defaulting to 1000 [ 467.437978][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 467.483412][T14122] netlink: 'syz.3.2053': attribute type 2 has an invalid length. [ 467.512541][T14122] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 467.525681][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 467.933051][T14138] tipc: Enabled bearer , priority 0 [ 467.961136][T14138] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 467.972071][T14138] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 467.986201][T14139] syzkaller1: entered promiscuous mode [ 467.996698][T14139] syzkaller1: entered allmulticast mode [ 468.029772][T14138] tipc: Resetting bearer [ 468.184645][T14142] wg1 speed is unknown, defaulting to 1000 [ 469.006920][T11015] tipc: Node number set to 2037214254 [ 469.475712][T14184] xt_limit: Overflow, try lower: 271964/0 [ 470.025408][T14199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.085295][T14204] __nla_validate_parse: 5 callbacks suppressed [ 470.085319][T14204] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2075'. [ 470.514845][T14215] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 470.565597][T14215] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 470.587943][T14215] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 470.683338][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'. [ 470.695560][T14217] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 470.715955][T14215] gretap1: entered promiscuous mode [ 470.722529][T14215] gretap1: entered allmulticast mode [ 470.735538][T14215] bond6: (slave gretap1): making interface the new active one [ 470.744805][T14215] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 470.781074][T14219] macvtap1: entered promiscuous mode [ 470.800630][T14219] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 470.929566][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 471.144392][T14236] netlink: 'syz.3.2084': attribute type 2 has an invalid length. [ 471.260730][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'. [ 471.318880][T14246] netlink: 'syz.4.2087': attribute type 58 has an invalid length. [ 471.327317][T14247] team0: entered promiscuous mode [ 471.342829][T14246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2087'. [ 471.374984][T14250] wg1 speed is unknown, defaulting to 1000 [ 471.403010][T14252] openvswitch: netlink: Key type 276 is out of range max 32 [ 471.872090][T12309] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 471.953960][T12309] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 471.985188][T12309] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 472.029751][T14261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2091'. [ 472.048356][T14261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2091'. [ 472.110175][T14261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2091'. [ 472.144096][T12309] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 472.162352][T14261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2091'. [ 472.331094][T14272] wg1 speed is unknown, defaulting to 1000 [ 472.684198][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 473.560130][T14319] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 473.567726][T14319] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 473.719758][T14339] IPVS: set_ctl: invalid protocol: 94 172.30.1.3:20003 [ 473.847765][T14344] netlink: 'syz.4.2114': attribute type 6 has an invalid length. [ 473.979492][T14352] netlink: 'syz.3.2116': attribute type 5 has an invalid length. [ 474.121718][T14364] wg1 speed is unknown, defaulting to 1000 [ 474.311328][ T5843] Bluetooth: hci4: link tx timeout [ 474.323400][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.568713][T14386] netlink: 'syz.4.2125': attribute type 5 has an invalid length. [ 475.127540][T14407] wg1 speed is unknown, defaulting to 1000 [ 475.177567][T14410] __nla_validate_parse: 10 callbacks suppressed [ 475.177587][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2133'. [ 475.323530][T14404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.359251][ T5156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 475.366304][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 475.372870][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 475.481972][T14423] IPVS: set_ctl: invalid protocol: 41 172.30.0.1:20003 [ 475.874110][T14441] tipc: Enabled bearer , priority 0 [ 475.893779][T14430] wg1 speed is unknown, defaulting to 1000 [ 475.913333][T14440] syzkaller0: entered promiscuous mode [ 475.930005][T14440] syzkaller0: entered allmulticast mode [ 476.015526][T14452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2147'. [ 476.039557][T14439] tipc: Resetting bearer [ 476.072781][T14438] tipc: Resetting bearer [ 476.101626][T14438] tipc: Disabling bearer [ 476.253269][T14463] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 476.296881][T14463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.338006][T14463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.351549][T14463] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 476.378880][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 476.392122][T14463] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 476.465412][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.481427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.773587][T14496] vlan3: entered allmulticast mode [ 476.801263][T14496] bridge_slave_0: entered allmulticast mode [ 476.950230][T14510] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2164'. [ 476.990761][T14510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.043627][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 477.044260][T14504] wg1 speed is unknown, defaulting to 1000 [ 477.067848][T14516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2166'. [ 477.157032][T14519] netlink: 'syz.0.2165': attribute type 10 has an invalid length. [ 477.174477][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2165'. [ 477.241840][T14527] netlink: 'syz.2.2167': attribute type 15 has an invalid length. [ 477.438155][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 477.457489][T11022] IPVS: starting estimator thread 0... [ 477.547326][T14532] IPVS: using max 26 ests per chain, 62400 per kthread [ 477.569685][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 477.974268][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'. [ 477.983711][T14560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2178'. [ 478.392017][T14580] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.402241][T14580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.468840][T14580] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.498177][T14585] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 478.506780][T14580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.537299][T14585] bond7: entered promiscuous mode [ 478.543793][T14585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.564690][T14587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.572191][T14587] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 478.583168][T14587] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 478.604377][T14587] bond7: (slave wireguard0): making interface the new active one [ 478.611515][T14585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.619543][T14585] IPv6: NLM_F_CREATE should be set when creating new route [ 478.622382][T14587] wireguard0: entered promiscuous mode [ 478.626817][T14585] IPv6: NLM_F_CREATE should be set when creating new route [ 478.632843][T14585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.654754][T14587] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 478.681040][T14580] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.697685][T14580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.759116][T14592] vxcan1: entered allmulticast mode [ 478.834170][T14580] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.846843][T14580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.890999][T14592] vxcan1: left allmulticast mode [ 479.027402][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.035621][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.059620][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.068082][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.076298][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.097513][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.105763][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.146087][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.523875][T14616] wg1 speed is unknown, defaulting to 1000 [ 479.870186][T14626] wg1 speed is unknown, defaulting to 1000 [ 480.387206][T14644] __nla_validate_parse: 5 callbacks suppressed [ 480.387227][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 480.429317][T14645] netlink: 'syz.3.2201': attribute type 1 has an invalid length. [ 480.609961][T14645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 480.834425][T14653] wg1 speed is unknown, defaulting to 1000 [ 481.002717][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2207'. [ 481.037700][T14672] netlink: 'syz.0.2208': attribute type 10 has an invalid length. [ 481.249194][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 481.285289][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2212'. [ 481.938192][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2218'. [ 482.132311][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 482.151802][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 482.161379][T14718] netlink: 'syz.2.2221': attribute type 15 has an invalid length. [ 482.306740][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 482.318592][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 482.432702][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 482.629387][T14749] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 483.050732][T14771] netlink: 'syz.2.2234': attribute type 12 has an invalid length. [ 483.475421][T14783] bond8 (unregistering): Released all slaves [ 483.870841][T14803] bond0: (slave gretap0): Error: Device type is different from other slaves [ 483.898368][T12313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.909738][T12313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.292825][T14867] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 485.542966][T14892] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 485.552096][T14892] __nla_validate_parse: 13 callbacks suppressed [ 485.552118][T14892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2265'. [ 485.806036][T14898] wg1 speed is unknown, defaulting to 1000 [ 486.135187][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 486.667677][T14940] netlink: 79 bytes leftover after parsing attributes in process `syz.3.2277'. [ 486.922368][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2279'. [ 486.973956][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 486.992032][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2279'. [ 487.008469][T14945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.216032][T14958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2282'. [ 487.248744][T14945] bond7 (unregistering): Released all slaves [ 487.420005][T14970] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2286'. [ 487.443911][T14970] pim6reg: entered allmulticast mode [ 487.465298][T14970] syzkaller0: entered promiscuous mode [ 487.492499][T14970] syzkaller0: entered allmulticast mode [ 487.694020][T14983] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2289'. [ 487.719900][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2290'. [ 487.860019][T14986] wg1 speed is unknown, defaulting to 1000 [ 488.112162][T14994] netlink: 'syz.1.2292': attribute type 1 has an invalid length. [ 488.166352][T14994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.228527][T14997] bond4: (slave geneve4): making interface the new active one [ 488.295324][T14997] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 488.334836][T12313] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.354605][T12313] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.385131][T12313] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.403766][T12313] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.708282][T15015] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 488.716051][T15015] netlink: 'syz.3.2295': attribute type 3 has an invalid length. [ 488.748796][T15015] NCSI netlink: No device for ifindex 246 [ 488.796437][T15011] can: request_module (can-proto-0) failed. [ 488.861268][T15022] wg1 speed is unknown, defaulting to 1000 [ 488.897305][T15021] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 489.237646][T15048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.467178][T15056] nbd1: detected capacity change from 0 to 127 [ 489.500620][ T51] block nbd1: Receive control failed (result -32) [ 489.585511][T15074] sctp: [Deprecated]: syz.3.2313 (pid 15074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.585511][T15074] Use struct sctp_sack_info instead [ 489.742012][T15077] wg1 speed is unknown, defaulting to 1000 [ 490.137113][T15100] nbd: must specify at least one socket [ 490.347208][T15108] 8021q: adding VLAN 0 to HW filter on device bond7 [ 490.385414][T15117] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 490.414664][T15118] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 490.650919][T15133] netlink: 'syz.1.2329': attribute type 21 has an invalid length. [ 490.674582][T15133] __nla_validate_parse: 12 callbacks suppressed [ 490.674602][T15133] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2329'. [ 490.941185][T15131] netlink: 'syz.3.2328': attribute type 16 has an invalid length. [ 490.949179][T15126] netlink: 'syz.3.2328': attribute type 16 has an invalid length. [ 490.957467][T15131] netlink: 'syz.3.2328': attribute type 17 has an invalid length. [ 490.972604][T15126] netlink: 'syz.3.2328': attribute type 17 has an invalid length. [ 490.993012][T15131] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 491.062217][T15126] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 491.229901][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 491.710925][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 491.721385][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'. [ 491.731579][T15170] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2338'. [ 491.741284][T15170] nbd: socks must be embedded in a SOCK_ITEM attr [ 491.802554][T15178] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2340'. [ 491.821716][T15178] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2340'. [ 491.834876][T15178] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2340'. [ 492.656908][T15194] netlink: 'syz.1.2345': attribute type 12 has an invalid length. [ 492.752278][T15211] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2350'. [ 492.874652][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 493.069536][T15223] wg1 speed is unknown, defaulting to 1000 [ 493.156372][T15236] 8021q: VLANs not supported on nlmon0 [ 493.401453][T15243] wg1 speed is unknown, defaulting to 1000 [ 493.865942][T15267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.129785][T15279] wg1 speed is unknown, defaulting to 1000 [ 494.509262][T15290] wg1 speed is unknown, defaulting to 1000 [ 494.645025][T15299] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 495.813650][T15329] wg1 speed is unknown, defaulting to 1000 [ 495.850560][T15342] __nla_validate_parse: 5 callbacks suppressed [ 495.850580][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 495.887977][T15342] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2375'. [ 495.897271][T15342] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2375'. [ 496.195155][T15349] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2377'. [ 496.277705][T15353] netlink: 'syz.4.2380': attribute type 3 has an invalid length. [ 496.306883][T15353] netlink: 'syz.4.2380': attribute type 1 has an invalid length. [ 496.349641][T15360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.581767][T15357] nicvf0: entered promiscuous mode [ 496.750157][T12318] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 496.767178][T12318] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 496.823225][T12318] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 496.853715][T12318] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 496.934701][T15363] syzkaller0: entered promiscuous mode [ 496.940374][T15363] syzkaller0: entered allmulticast mode [ 498.445833][T15383] wg1 speed is unknown, defaulting to 1000 [ 498.475998][T15390] wg1 speed is unknown, defaulting to 1000 [ 498.506005][T15394] wg1 speed is unknown, defaulting to 1000 [ 498.693062][T15408] sit0: entered promiscuous mode [ 498.719055][T15408] netlink: 'syz.3.2393': attribute type 1 has an invalid length. [ 498.731218][T15408] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2393'. [ 498.843780][T15412] netlink: 'syz.2.2394': attribute type 2 has an invalid length. [ 498.843787][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'. [ 498.843815][T15411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'. [ 499.004278][T15422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2396'. [ 499.029804][T15419] netlink: 'syz.2.2397': attribute type 13 has an invalid length. [ 499.041105][T15419] netlink: 'syz.2.2397': attribute type 17 has an invalid length. [ 499.064500][T15419] team0: left promiscuous mode [ 499.114764][T15419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.167164][T15429] batadv1: entered promiscuous mode [ 499.172428][T15429] batadv1: entered allmulticast mode [ 499.187283][T15428] wg1 speed is unknown, defaulting to 1000 [ 499.593294][T15441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.602241][T15441] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.624837][T15441] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 500.146283][T15468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.234279][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 500.324779][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2411'. [ 500.552408][T15484] netlink: 'syz.2.2414': attribute type 1 has an invalid length. [ 500.610432][T15484] 8021q: adding VLAN 0 to HW filter on device bond8 [ 500.628866][T15492] bond8: (slave geneve3): making interface the new active one [ 500.637920][T15492] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 500.650635][T12319] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.675132][T12319] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.683557][T12319] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.704813][T12319] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.754827][T15492] tipc: Failed to remove unknown binding: 66,1,1/0:320254256/320254258 [ 500.777140][T15484] bond8: entered promiscuous mode [ 500.782542][T15484] geneve3: entered promiscuous mode [ 500.782724][T15492] tipc: Failed to remove unknown binding: 66,1,1/0:320254256/320254258 [ 501.301900][T15539] netlink: 'syz.4.2426': attribute type 13 has an invalid length. [ 501.326953][T15539] __nla_validate_parse: 4 callbacks suppressed [ 501.326973][T15539] netlink: 368 bytes leftover after parsing attributes in process `syz.4.2426'. [ 501.494318][T15542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2426'. [ 501.502118][T15539] wg1 speed is unknown, defaulting to 1000 [ 501.509816][T15542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.527823][T15549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2429'. [ 501.528609][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 501.617606][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 501.625396][T15542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.635874][T15552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2430'. [ 501.713308][T15552] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.787755][T15558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.914337][T15548] wg1 speed is unknown, defaulting to 1000 [ 501.971838][T15552] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.102037][T15562] gre4: entered promiscuous mode [ 502.105539][T15567] netlink: 'syz.2.2434': attribute type 6 has an invalid length. [ 502.111755][T15562] gre4: entered allmulticast mode [ 502.116179][T15568] netlink: 'syz.2.2434': attribute type 6 has an invalid length. [ 502.140211][T15562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2432'. [ 502.141110][T15552] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.220594][T15552] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.307267][ T968] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.342393][ T968] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.386442][T12319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.509788][T12319] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.546073][T15584] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 502.633602][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 502.872957][T15609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 503.027790][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 503.078846][T15615] syzkaller1: entered promiscuous mode [ 503.090329][T15615] syzkaller1: entered allmulticast mode [ 503.226036][T15626] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2449'. [ 505.121555][T15648] erspan0: entered promiscuous mode [ 505.129365][T15648] erspan0: left promiscuous mode [ 505.303329][T15663] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 505.418729][T15674] nbd: must specify at least one socket [ 505.955511][T15709] netlink: 'syz.0.2470': attribute type 10 has an invalid length. [ 506.010095][T15712] gretap0: entered promiscuous mode [ 506.162901][T15723] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 506.174004][T15723] bridge0: port 1(erspan0) entered blocking state [ 506.181104][T15723] bridge0: port 1(erspan0) entered disabled state [ 506.188374][T15723] erspan0: entered allmulticast mode [ 506.197256][T15723] erspan0: entered promiscuous mode [ 506.207428][T15723] erspan0: left allmulticast mode [ 506.212501][T15723] erspan0: left promiscuous mode [ 506.218048][T15723] bridge0: port 1(erspan0) entered disabled state [ 506.235012][T15724] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 506.243145][T15724] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 506.480263][T15741] __nla_validate_parse: 12 callbacks suppressed [ 506.480283][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'. [ 506.519722][T15741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.644943][T15751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2482'. [ 506.876485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.884525][ C1] lec:lec_tx_timeout: lec0 [ 506.933191][T15763] bond9: entered promiscuous mode [ 506.938383][T15763] bond9: entered allmulticast mode [ 506.944073][T15763] 8021q: adding VLAN 0 to HW filter on device bond9 [ 507.112924][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 507.140202][T15774] netlink: 'syz.3.2488': attribute type 16 has an invalid length. [ 507.152197][T15774] netlink: 'syz.3.2488': attribute type 17 has an invalid length. [ 507.513215][T15774] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 507.670068][T15795] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2493'. [ 507.718193][T12318] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 507.749471][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'. [ 507.759054][T15798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2491'. [ 507.776628][T12318] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 507.797377][T12318] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 507.816584][T12318] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 508.005290][T15811] netlink: 'syz.3.2497': attribute type 46 has an invalid length. [ 508.087132][T15816] netlink: 'syz.0.2499': attribute type 21 has an invalid length. [ 508.095252][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2499'. [ 508.112899][T15816] netlink: 'syz.0.2499': attribute type 21 has an invalid length. [ 508.120911][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2499'. [ 508.228086][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2502'. [ 508.489237][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2506'. [ 508.781039][T15857] syzkaller1: entered promiscuous mode [ 508.788272][T15857] syzkaller1: entered allmulticast mode [ 508.962292][T15861] wg1 speed is unknown, defaulting to 1000 [ 509.371215][T15891] nbd: device at index 2 is going down [ 562.961433][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 567.976546][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.984573][ C1] lec:lec_tx_timeout: lec0 [ 601.157504][T15949] __nla_validate_parse: 68 callbacks suppressed [ 601.157525][T15949] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2535'. [ 601.204647][T15949] 0ªX¹¦À: renamed from caif0 [ 601.282246][T15949] 0ªX¹¦À: entered allmulticast mode [ 601.289203][T15949] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 601.656136][T15984] dvmrp8: entered allmulticast mode [ 601.736380][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 601.819079][T15982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 601.998206][T16004] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2550'. [ 602.011991][T16004] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2550'. [ 602.022879][T16004] netlink: 'syz.1.2550': attribute type 5 has an invalid length. [ 602.061519][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 602.073106][T16004] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2550'. [ 602.113712][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 602.187458][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 602.194771][T16014] tipc: Enabling of bearer rejected, failed to enable media [ 602.248663][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 602.357344][T16014] wg1 speed is unknown, defaulting to 1000 [ 602.443407][T16018] netlink: 'syz.1.2552': attribute type 30 has an invalid length. [ 602.566012][T12317] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.587269][T12317] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.613650][T12317] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.694764][T12317] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.302140][T16056] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 603.364858][T16047] wg1 speed is unknown, defaulting to 1000 [ 603.609091][T16065] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 603.675887][T16065] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 604.323053][T16083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.385870][T16083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.445018][T16083] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 604.477314][T16083] bond0 (unregistering): Released all slaves [ 604.935877][T16112] wg1 speed is unknown, defaulting to 1000 [ 605.324814][T16149] bond0: option resend_igmp: invalid value (1793847487) [ 605.331941][T16149] bond0: option resend_igmp: allowed values 0 - 255 [ 605.481868][T16127] wg1 speed is unknown, defaulting to 1000 [ 605.751557][T16159] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 605.817170][T16159] bond5 (unregistering): Released all slaves [ 606.220355][T16182] __nla_validate_parse: 70 callbacks suppressed [ 606.220379][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 606.451648][T16198] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2594'. [ 606.768074][T16216] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 607.434080][T16250] wg1 speed is unknown, defaulting to 1000 [ 607.505294][T16256] tun0: tun_chr_ioctl cmd 1074025675 [ 607.511087][T16256] tun0: persist enabled [ 607.548533][T16256] tun0: tun_chr_ioctl cmd 1074025675 [ 607.553964][T16256] tun0: persist disabled [ 607.750194][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 607.792301][T16270] bond0 (unregistering): Released all slaves [ 607.869598][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 608.953130][T16335] netlink: 'syz.2.2638': attribute type 1 has an invalid length. [ 609.043825][T16338] bond10: (slave geneve0): making interface the new active one [ 609.067000][T16335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2638'. [ 609.092007][T16338] bond10: (slave geneve0): Enslaving as an active interface with an up link [ 609.101071][T12318] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 609.112621][T12318] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 609.121587][T16338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2638'. [ 609.139020][T16335] 8021q: adding VLAN 0 to HW filter on device bond10 [ 609.147580][T12318] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 609.166019][T16343] wg1 speed is unknown, defaulting to 1000 [ 609.194917][T12318] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 609.223460][T16353] netlink: 'syz.2.2643': attribute type 3 has an invalid length. [ 609.254945][T16353] siw: device registration error -23 [ 609.502986][T16358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 609.546999][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'. [ 609.556043][T16365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2645'. [ 609.580208][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'. [ 609.589309][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2646'. [ 609.615467][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.624043][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.638261][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.646780][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.701995][T16370] wg1 speed is unknown, defaulting to 1000 [ 610.282718][ T968] tipc: Resetting bearer [ 610.812339][T16427] netlink: 'syz.3.2662': attribute type 5 has an invalid length. [ 610.844347][T16427] geneve0: entered promiscuous mode [ 610.851510][T16427] geneve0: entered allmulticast mode [ 610.860592][T12318] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 610.869281][T12318] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 610.927008][T12318] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 610.952339][T12318] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 611.600738][T16454] wg1 speed is unknown, defaulting to 1000 [ 612.181241][T16483] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 612.191188][T16483] nbd: error processing sock list [ 612.200073][T16483] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 612.342598][T16495] __nla_validate_parse: 9 callbacks suppressed [ 612.342617][T16495] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2681'. [ 612.359096][T16496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2681'. [ 612.381131][T16495] bridge5: entered allmulticast mode [ 612.513120][T16505] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.523123][T16505] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 612.561023][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2682'. [ 612.622836][T16505] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.652906][T16505] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 612.678266][T16510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2682'. [ 612.701334][T16507] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2682'. [ 612.733135][T16505] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.755729][T16505] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 612.858735][T16505] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.910384][T16505] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 612.972712][T16523] ¬»: renamed from ip6_vti0 (while UP) [ 613.018315][T16521] wg1 speed is unknown, defaulting to 1000 [ 613.035242][T16527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2687'. [ 613.047376][T16527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2687'. [ 613.056937][T16527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2687'. [ 613.132551][T12317] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.142137][T12317] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 613.202285][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.211448][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 613.289527][T12317] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.298301][T12317] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 613.307810][T12317] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.333561][T12317] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 613.379989][T16541] batman_adv: batadv0: Removing interface: ip6gretap2 [ 613.431645][T16541] bond4: (slave geneve4): Releasing active interface [ 613.491673][T16543] vlan3: entered allmulticast mode [ 613.517211][T16543] bridge_slave_0: entered allmulticast mode [ 613.588143][T12317] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.597225][T12317] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.606219][T16545] pim6reg1: entered promiscuous mode [ 613.612182][T16545] pim6reg1: entered allmulticast mode [ 613.769996][T12317] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.785296][T12317] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.890994][T16551] wg1 speed is unknown, defaulting to 1000 [ 614.230187][T16588] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 614.238865][T16588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2701'. [ 614.664207][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'. [ 614.726382][T16607] netlink: 'syz.2.2705': attribute type 13 has an invalid length. [ 615.568326][T16639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 615.774922][T16642] wg1 speed is unknown, defaulting to 1000 [ 615.872812][T16642] macvtap2: entered allmulticast mode [ 615.878623][T16642] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 615.889352][T16642] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 616.063435][T16666] netlink: 'syz.0.2720': attribute type 15 has an invalid length. [ 616.274240][T16675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.323911][T16679] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 616.332425][T16679] netlink: 'syz.4.2724': attribute type 3 has an invalid length. [ 616.990782][T16705] syzkaller0: entered promiscuous mode [ 616.996400][T16705] syzkaller0: entered allmulticast mode [ 617.418204][T16725] siw: device registration error -23 [ 617.498788][T16738] __nla_validate_parse: 14 callbacks suppressed [ 617.498808][T16738] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2743'. [ 617.604941][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2744'. [ 617.975706][T16765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.065390][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 618.082293][T16770] netlink: 'syz.1.2751': attribute type 13 has an invalid length. [ 618.117749][T16770] netlink: 'syz.1.2751': attribute type 17 has an invalid length. [ 618.177055][T16770] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 618.354658][ T30] audit: type=1800 audit(1759801357.540:6): pid=16791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2755" name="memory.events" dev="tmpfs" ino=2811 res=0 errno=0 [ 618.430028][ T30] audit: type=1804 audit(1759801357.570:7): pid=16791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2755" name="/newroot/545/memory.events" dev="tmpfs" ino=2811 res=1 errno=0 [ 618.730539][T16810] ip6gre2: entered allmulticast mode [ 618.748956][T16816] vlan4: entered allmulticast mode [ 618.782425][T16812] wg1 speed is unknown, defaulting to 1000 [ 618.903353][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 619.090447][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2767'. [ 619.234031][T16831] wg1 speed is unknown, defaulting to 1000 [ 619.286129][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 619.359575][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2770'. [ 619.413972][T16850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2775'. [ 619.431637][T16850] IPv6: NLM_F_CREATE should be specified when creating new route [ 619.671296][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2778'. [ 620.090898][T16884] wg1 speed is unknown, defaulting to 1000 [ 620.263044][T16893] netlink: 'syz.0.2787': attribute type 3 has an invalid length. [ 620.355520][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 620.419657][T16893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.668771][T16894] hsr_slave_0 (unregistering): left promiscuous mode [ 620.735916][T16905] netlink: 'syz.3.2789': attribute type 3 has an invalid length. [ 620.904824][T16907] syzkaller1: entered promiscuous mode [ 620.914648][T16907] syzkaller1: entered allmulticast mode [ 621.121386][T16911] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 621.206165][T16923] wg1 speed is unknown, defaulting to 1000 [ 621.740237][T16955] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 621.763700][T16955] netlink: 'syz.2.2803': attribute type 2 has an invalid length. [ 621.794011][T16960] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 621.801932][T16960] netlink: 'syz.2.2803': attribute type 2 has an invalid length. [ 622.717477][T11017] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 622.735809][T11017] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 622.838043][T11017] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 623.028834][T17021] netlink: 'syz.3.2819': attribute type 10 has an invalid length. [ 623.088789][T17023] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 623.133631][T17026] wg1 speed is unknown, defaulting to 1000 [ 623.244978][T17036] wg1 speed is unknown, defaulting to 1000 [ 623.347273][T17047] netlink: 'syz.2.2825': attribute type 1 has an invalid length. [ 623.355155][T17047] __nla_validate_parse: 6 callbacks suppressed [ 623.355172][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2825'. [ 624.358431][T17063] wg1 speed is unknown, defaulting to 1000 [ 624.381885][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'. [ 624.404906][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 624.492680][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2834'. [ 624.504079][T17074] wg1 speed is unknown, defaulting to 1000 [ 624.656061][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 624.696194][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2837'. [ 624.730908][T17090] batman_adv: batadv0: Adding interface: macvtap1 [ 624.737571][T17090] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.763872][T17090] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 625.204240][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 625.231393][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 625.341801][T17104] wg1 speed is unknown, defaulting to 1000 [ 625.365789][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 625.608549][T17124] wg1 speed is unknown, defaulting to 1000 [ 625.639273][T17132] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.714599][T17123] wg1 speed is unknown, defaulting to 1000 [ 625.760899][T17132] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.948827][T17132] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.139397][T17134] wg1 speed is unknown, defaulting to 1000 [ 626.160321][T17132] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.232512][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2847'. [ 626.306518][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2847'. [ 626.343155][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2847'. [ 626.750938][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.855999][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.919096][T12313] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.980831][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.060337][T17159] netlink: 'syz.4.2852': attribute type 39 has an invalid length. [ 627.145169][T17163] rdma_op ffff8880212a01f0 conn xmit_rdma 0000000000000000 [ 627.712949][T17179] syzkaller0: create flow: hash 3298720059 index 1 [ 627.797260][ T12] syzkaller0: tun_net_xmit 76 [ 627.802947][ T12] syzkaller0: tun_net_xmit 48 [ 627.827025][ T5919] syzkaller0: tun_net_xmit 76 [ 628.013070][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.027325][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.038570][T11917] ------------[ cut here ]------------ [ 628.044256][T11917] refcount_t: underflow; use-after-free. [ 628.050497][T11917] WARNING: CPU: 0 PID: 11917 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 628.060225][T11917] Modules linked in: [ 628.064511][T11917] CPU: 0 UID: 0 PID: 11917 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 628.074227][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 628.084381][T11917] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 628.090729][T11917] Code: a0 15 9e 8b e8 37 47 fd fc 90 0f 0b 90 90 eb d7 e8 1b d9 39 fd c6 05 8c f1 c0 0a 01 90 48 c7 c7 00 16 9e 8b e8 17 47 fd fc 90 <0f> 0b 90 90 eb b7 e8 fb d8 39 fd c6 05 69 f1 c0 0a 01 90 48 c7 c7 [ 628.110425][T11917] RSP: 0018:ffffc90005477700 EFLAGS: 00010246 [ 628.116718][T11917] RAX: 79eabe2a6390a100 RBX: 0000000000000003 RCX: ffff888068bc9e40 [ 628.124677][T11917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 628.132701][T11917] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 628.140680][T11917] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000 [ 628.148995][T11917] R13: ffff8880566ef860 R14: ffff8880566ef878 R15: ffffffff85be6d60 [ 628.157116][T11917] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 628.166030][T11917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.172755][T11917] CR2: 00007f48529c35f0 CR3: 00000000730ec000 CR4: 00000000003526f0 [ 628.180886][T11917] Call Trace: [ 628.184152][T11917] [ 628.187145][T11917] klist_dec_and_del+0x3c7/0x3d0 [ 628.192078][T11917] ? __pfx_klist_children_put+0x10/0x10 [ 628.197662][T11917] klist_del+0xa6/0x110 [ 628.201895][T11917] device_del+0x280/0x8e0 [ 628.206810][T11917] ? _raw_spin_unlock_irq+0x2e/0x50 [ 628.212047][T11917] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 628.218172][T11917] ? __pfx_device_del+0x10/0x10 [ 628.223030][T11917] ? netdev_unregister_kobject+0x344/0x450 [ 628.228915][T11917] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 628.235330][T11917] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 628.242363][T11917] ? rtnl_net_dev_lock+0x257/0x2f0 [ 628.247594][T11917] unregister_netdevice_queue+0x33c/0x380 [ 628.253474][T11917] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 628.259923][T11917] ? rtnl_net_dev_lock+0x36/0x2f0 [ 628.264956][T11917] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 628.270360][T11917] unregister_netdev+0x1f/0x60 [ 628.275116][T11917] bnep_session+0x294d/0x2b40 [ 628.279915][T11917] ? rcu_is_watching+0x15/0xb0 [ 628.284665][T11917] ? trace_sched_exit_tp+0x36/0x110 [ 628.290070][T11917] ? __lock_acquire+0xab9/0xd20 [ 628.294917][T11917] ? __pfx_bnep_session+0x10/0x10 [ 628.300124][T11917] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 628.306010][T11917] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 628.312384][T11917] ? __pfx_woken_wake_function+0x10/0x10 [ 628.318072][T11917] ? __kthread_parkme+0x7b/0x200 [ 628.323022][T11917] ? __kthread_parkme+0x1a1/0x200 [ 628.328281][T11917] kthread+0x711/0x8a0 [ 628.332358][T11917] ? __pfx_bnep_session+0x10/0x10 [ 628.337482][T11917] ? __pfx_kthread+0x10/0x10 [ 628.342073][T11917] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.347346][T11917] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.352724][T11917] ? __pfx_kthread+0x10/0x10 [ 628.357564][T11917] ret_from_fork+0x436/0x7d0 [ 628.362145][T11917] ? __pfx_ret_from_fork+0x10/0x10 [ 628.367315][T11917] ? __switch_to_asm+0x39/0x70 [ 628.372060][T11917] ? __switch_to_asm+0x33/0x70 [ 628.376836][T11917] ? __pfx_kthread+0x10/0x10 [ 628.381424][T11917] ret_from_fork_asm+0x1a/0x30 [ 628.386200][T11917] [ 628.389457][T11917] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 628.396730][T11917] CPU: 0 UID: 0 PID: 11917 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 628.406254][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 628.416304][T11917] Call Trace: [ 628.419623][T11917] [ 628.422544][T11917] dump_stack_lvl+0x99/0x250 [ 628.427127][T11917] ? __asan_memcpy+0x40/0x70 [ 628.431708][T11917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.436927][T11917] ? __pfx__printk+0x10/0x10 [ 628.441510][T11917] vpanic+0x281/0x750 [ 628.445513][T11917] ? __pfx__printk+0x10/0x10 [ 628.450106][T11917] ? __pfx_vpanic+0x10/0x10 [ 628.454599][T11917] ? is_bpf_text_address+0x26/0x2b0 [ 628.459791][T11917] panic+0xb9/0xc0 [ 628.463505][T11917] ? __pfx_panic+0x10/0x10 [ 628.467949][T11917] __warn+0x31b/0x4b0 [ 628.471955][T11917] ? refcount_warn_saturate+0x11a/0x1d0 [ 628.477498][T11917] ? refcount_warn_saturate+0x11a/0x1d0 [ 628.483063][T11917] report_bug+0x2be/0x4f0 [ 628.487395][T11917] ? refcount_warn_saturate+0x11a/0x1d0 [ 628.492931][T11917] ? refcount_warn_saturate+0x11a/0x1d0 [ 628.498467][T11917] ? refcount_warn_saturate+0x11c/0x1d0 [ 628.504000][T11917] handle_bug+0x84/0x160 [ 628.508234][T11917] exc_invalid_op+0x1a/0x50 [ 628.512717][T11917] asm_exc_invalid_op+0x1a/0x20 [ 628.517552][T11917] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 628.523716][T11917] Code: a0 15 9e 8b e8 37 47 fd fc 90 0f 0b 90 90 eb d7 e8 1b d9 39 fd c6 05 8c f1 c0 0a 01 90 48 c7 c7 00 16 9e 8b e8 17 47 fd fc 90 <0f> 0b 90 90 eb b7 e8 fb d8 39 fd c6 05 69 f1 c0 0a 01 90 48 c7 c7 [ 628.543304][T11917] RSP: 0018:ffffc90005477700 EFLAGS: 00010246 [ 628.549359][T11917] RAX: 79eabe2a6390a100 RBX: 0000000000000003 RCX: ffff888068bc9e40 [ 628.557311][T11917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 628.565265][T11917] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 628.573237][T11917] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000 [ 628.581222][T11917] R13: ffff8880566ef860 R14: ffff8880566ef878 R15: ffffffff85be6d60 [ 628.589184][T11917] ? __pfx_klist_children_put+0x10/0x10 [ 628.594776][T11917] klist_dec_and_del+0x3c7/0x3d0 [ 628.599704][T11917] ? __pfx_klist_children_put+0x10/0x10 [ 628.605229][T11917] klist_del+0xa6/0x110 [ 628.609368][T11917] device_del+0x280/0x8e0 [ 628.613686][T11917] ? _raw_spin_unlock_irq+0x2e/0x50 [ 628.618866][T11917] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 628.624930][T11917] ? __pfx_device_del+0x10/0x10 [ 628.629766][T11917] ? netdev_unregister_kobject+0x344/0x450 [ 628.635561][T11917] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 628.642007][T11917] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 628.648785][T11917] ? rtnl_net_dev_lock+0x257/0x2f0 [ 628.653910][T11917] unregister_netdevice_queue+0x33c/0x380 [ 628.659618][T11917] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 628.665842][T11917] ? rtnl_net_dev_lock+0x36/0x2f0 [ 628.670870][T11917] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 628.675974][T11917] unregister_netdev+0x1f/0x60 [ 628.680721][T11917] bnep_session+0x294d/0x2b40 [ 628.685380][T11917] ? rcu_is_watching+0x15/0xb0 [ 628.690137][T11917] ? trace_sched_exit_tp+0x36/0x110 [ 628.695325][T11917] ? __lock_acquire+0xab9/0xd20 [ 628.700195][T11917] ? __pfx_bnep_session+0x10/0x10 [ 628.705344][T11917] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 628.711238][T11917] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 628.717556][T11917] ? __pfx_woken_wake_function+0x10/0x10 [ 628.723178][T11917] ? __kthread_parkme+0x7b/0x200 [ 628.728099][T11917] ? __kthread_parkme+0x1a1/0x200 [ 628.733197][T11917] kthread+0x711/0x8a0 [ 628.737268][T11917] ? __pfx_bnep_session+0x10/0x10 [ 628.742276][T11917] ? __pfx_kthread+0x10/0x10 [ 628.746863][T11917] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.752039][T11917] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.757246][T11917] ? __pfx_kthread+0x10/0x10 [ 628.761832][T11917] ret_from_fork+0x436/0x7d0 [ 628.766403][T11917] ? __pfx_ret_from_fork+0x10/0x10 [ 628.771497][T11917] ? __switch_to_asm+0x39/0x70 [ 628.776243][T11917] ? __switch_to_asm+0x33/0x70 [ 628.780987][T11917] ? __pfx_kthread+0x10/0x10 [ 628.785560][T11917] ret_from_fork_asm+0x1a/0x30 [ 628.790340][T11917] [ 629.906146][T11917] Shutting down cpus with NMI [ 629.911144][T11917] Kernel Offset: disabled [ 629.915457][T11917] Rebooting in 86400 seconds..