last executing test programs: 15.430692052s ago: executing program 1 (id=5494): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/16, 0x10}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, 0x0, 0x0, &(0x7f000000f4c0)}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f0000000980)=""/239, 0xef}, {&(0x7f000000f780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000000880)=""/194, 0xc2}, {&(0x7f0000011940)=""/4089, 0xff9}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x14800) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000500)={0x0, @default, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r7) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, 0x0) r17 = socket$inet(0xa, 0x801, 0x84) connect$inet(r17, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 15.069758139s ago: executing program 1 (id=5500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) sendto$inet6(r1, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) write$cgroup_int(r2, &(0x7f0000000040)=0x2, 0x12) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r5, &(0x7f0000000000)="dffa0bce0d", 0x5, 0x0, &(0x7f0000001100)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0xfffffff7, 0x4) 1.655148021s ago: executing program 1 (id=5512): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x4, 'erspan0\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x100010, r0, 0xfffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socketpair(0x15, 0x800, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r3, 0x303, 0xfffffffd, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x804) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xcc, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x3}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24000084}, 0x20004040) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) 1.593792248s ago: executing program 1 (id=5518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x354, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @private0, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x739a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42cd}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75d5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "baaf5179d7c065097c6b434a703c9ec3cd38f249"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x25, 0x3, "274f16f6b0795b1c376ac9e4cfe13cfd4f59d8b5a62ea6f4d9ef8b902c20017481"}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000cc0)={&(0x7f0000000640), 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x550, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x1a0, 0x80, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x69}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xfffffffb, @device_b, 0x1b, @value, 0x1, 0x3, 0x4, [{{0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0xee}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}]}}, @mesh_chsw={0x76, 0x6, {0x80, 0x0, 0x25, 0xffff}}, @cf={0x4, 0x6, {0x81, 0x8, 0x6e1, 0x800}}, @rann={0x7e, 0x15, {{0x1, 0x50}, 0xf0, 0x1, @broadcast, 0x56561f53, 0x5, 0x6}}, @random_vendor={0xdd, 0xea, "36f03ccf8edbbab2071aea5e133f1811f16de7653b82bd4e75d896231f2bb69ae15b8448a24d825e7c350a71191173705544b67784dad1d9081f6be2021df864e781d09f98161e49169cd749c582fae2a2014c6c84514e95f16165b1469ad384b57de5d2c2bfda44014052470ff7e9c1788162fa07f9e8095d295e22b63689cf5e64667768bda3f5b6bd77b55fbdfb9f5b1dd990e122f6bfee3fd4c2f6f0d86ab0f090e94b6c1d7759199733a1f8780d73032c7018207d4c5e89bf088abc645da3114e8a5ceeac40ded76ec5c056bc8442e43d4de40cca909469d3e816b595881ad5f39788b0206728ab"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x80, 0x5, @device_a, 0x1, @value=@device_b, 0x0, 0x6, @broadcast, 0x7}}]}, @NL80211_ATTR_BEACON_TAIL={0x7f, 0xf, [@mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x6, {0x1, 0xfff9, @val=0x7192, @void, @void}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x1, 0x40, @device_b, 0xc5, 0x101, 0x6}}, @challenge={0x10, 0x1, 0x3}, @preq={0x82, 0x3b, {{0x0, 0x0, 0x1}, 0x0, 0x8, 0x8, @device_b, 0x10001, @void, 0x5, 0x7fff, 0x3, [{{}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x5}]}}, @mesh_chsw={0x76, 0x6, {0x1, 0xd, 0x18, 0x5}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0xd730}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x17, 0x80, [@random_vendor={0xdd, 0x11, "43bb6f100966c4684e13481475dda3517a"}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @beacon=[@NL80211_ATTR_PROBE_RESP={0x2e3, 0x91, "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"}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5c}]}, 0x550}, 0x1, 0x0, 0x0, 0x800}, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r7, 0x104, 0x5, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf8}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x24044800) syz_extract_tcp_res$synack(&(0x7f0000001000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000001040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x122, &(0x7f0000001080)={@broadcast, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0xe, 0x6, "f6b813", 0xe8, 0x6, 0x0, @remote, @loopback, {[@srh={0x33, 0xa, 0x4, 0x5, 0xfb, 0x10, 0x7, [@mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private0]}], {{0x4e24, 0x4e24, r9, r10, 0x0, 0x0, 0x1b, 0x1, 0x800, 0x0, 0x5, {[@md5sig={0x13, 0x12, "11386fdd70b65d80997e75a2f455ad33"}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x45}, @timestamp={0x8, 0xa, 0x4, 0x4863a986}, @fastopen={0x22, 0x5, "8a9a13"}, @exp_fastopen={0xfe, 0xb, 0xf989, "eeab08f0d1977b"}, @nop, @mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, "a31af4"}, @fastopen={0x22, 0x11, "c0cb85db5616f37f77f36f444816d1"}, @eol]}}, {"ba284038bd018c5b456bb7a3ff6dd3c1c0448a8e8f18a69f0430bf12dfee7de1df389b13"}}}}}}}, &(0x7f00000011c0)={0x1, 0x7, [0xf5, 0xafa, 0x66f, 0xd7f]}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0xf63, 0x800, 0x4}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) clock_gettime(0x0, &(0x7f0000005a40)={0x0, 0x0}) recvmmsg(r7, &(0x7f00000058c0)=[{{&(0x7f0000001300)=@hci, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001380)=""/58, 0x3a}, {&(0x7f00000013c0)=""/100, 0x64}, {&(0x7f0000001440)=""/106, 0x6a}], 0x3, &(0x7f0000001500)=""/142, 0x8e}, 0x3}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001640)=""/156, 0x9c}, {&(0x7f0000001700)=""/97, 0x61}, {&(0x7f0000001780)=""/42, 0x2a}, {&(0x7f00000017c0)=""/252, 0xfc}, {&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/51, 0x33}], 0x6, &(0x7f00000019c0)=""/221, 0xdd}, 0x5}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001ac0)=""/178, 0xb2}, {&(0x7f0000001b80)=""/183, 0xb7}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/218, 0xda}, {&(0x7f0000002d40)=""/143, 0x8f}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x6, &(0x7f0000003e80)=""/150, 0x96}, 0xffff0001}, {{&(0x7f0000003f40)=@nfc_llcp, 0x80, &(0x7f0000004140)=[{&(0x7f0000003fc0)=""/210, 0xd2}, {&(0x7f00000040c0)=""/109, 0x6d}], 0x2, &(0x7f0000004180)=""/44, 0x2c}, 0x10}, {{&(0x7f00000041c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1}, 0x80000000}, {{&(0x7f0000005280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005300)=""/72, 0x48}, {&(0x7f0000005380)=""/221, 0xdd}, {&(0x7f0000005480)=""/154, 0x9a}, {&(0x7f0000005540)=""/49, 0x31}, {&(0x7f0000005580)=""/195, 0xc3}, {&(0x7f0000005680)=""/226, 0xe2}], 0x6, &(0x7f0000005800)=""/168, 0xa8}, 0x8001}], 0x6, 0x100, &(0x7f0000005a80)={r11, r12+10000000}) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000005ac0)) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005b40), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000005c80)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005b80)={0x8c, r13, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x76}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000005d00)=@generic={&(0x7f0000005cc0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005dc0)={'syztnl0\x00', &(0x7f0000005d40)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x7, 0xfffffffe, 0x10, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x1, 0x5, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f0000005e00)=@base={0x5, 0x3ff, 0x3, 0x153a012c, 0x44000, r14, 0x6, '\x00', r15, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000005e80)) r16 = openat$cgroup_ro(r0, &(0x7f0000005f00)='blkio.bfq.io_service_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000005ec0), r16) 1.422667747s ago: executing program 0 (id=5519): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e240000000000000200001000", @ANYBLOB], 0xb8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x8c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ed0f3a4ff7f9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a116812bee5a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 1.150432734s ago: executing program 3 (id=5521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000022000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000385e6ebd0000000000000050a8ac187fa345ec8d87e292fa7bdd064536e4de97d265b7379b1fd5575715ead94e2b008973b90b9eaefcf338b18c3b71c7391b2b8544bb7688c4f01199d93cfd3d856a4052d509ee2b31c1c900b2d29975e1b6b3d571472bf221e2ee1ca33e69f349957fed028239f03c333b9a34fefd0fe3ab0ba987afde9c85120fa00a566342125ebbbd4dd5a4141715e52752f2a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000000080)={r5, 0x8000}, 0x8) 1.047586919s ago: executing program 2 (id=5522): socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000600)="b22fbb603c27ba98c35837ca3c7464fb39356b20392ef53c7eefe5a93bf16b3595be5751653121ca0e053ab8864e6ca905eaa0c4fc36bf9a5bb69f365374c525a9e84ac4f1be43240589b78d690c6ace8c515868baae19b64b08abfcea8986aac945acdea7f121d60eebbd73d9427105c8ceb880caf9cbaca7dd379e79e7bde17b8ad1df7980e5f846d34ac025b3da5017dd571e183175fd0fb7900399c48c1c819c8414ee", &(0x7f0000000400)=""/25, &(0x7f0000000780)="fb857acdf4e2a639f20208e7fee535b22f9cbd16aa6fe4c0cc2f40268173b5e9e8be371a03c7967d524ec9e8d1b1938f1f045e2c7c0226f74ee8841ce6da7f7200f83e94bdf9c6b2d89e77025acc2753f8e6c1fc970cb980b751cdec045bcbcb7fef61642ac0ae836695065ef12b0debfacd9c88f9f365d14aa1b7b678ccc38ded208a3b9646fc1856d472fe6514b45667d4af8d706d0dd62ed2e69d688e0921", &(0x7f0000000480)="34c1c43016e579bd35f26b192c64ab475dbd28b8bf2fc7e04241c07c8a3a1e79981f", 0x40, r0, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x2, 0x8000) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r4], 0xac}, 0x1, 0x0, 0x0, 0x3004c800}, 0x4000894) socket(0x10, 0x803, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xc, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000040000d00000005000000080000e9de54bd0b5300"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socket$kcm(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x10) 1.045917762s ago: executing program 1 (id=5523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="da70a7e7ed0600", 0xfffffffffffffed0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x1, 0x44) 1.044300599s ago: executing program 0 (id=5524): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl(r0, 0x4, &(0x7f0000000040)="fb59f0fd47f24a16552167a1a0e0e3e6fc4df980168e235931f0a11f2b99edf9d456fb6734c7503262cc51997df756612e5f6d9f8ac7a88246b69d8b4e63d701a992c06c30cba0b0a41c0dabb6c699f7915e5965ddf7e01fbdbb1986da8abb7f3cdf2f1e9da0053f7e64aa90eb3290d55d0702a12b277c8e9c30cfbdf9a4f25eb41f") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x10, 0x4) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000140)={'dvmrp1\x00', 0x300}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x1, 0x4, @local, @remote, 0x700, 0x8000, 0xfffffff8, 0xfffffc00}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x1, '\x00', r3, r4, 0x0, 0x1, 0x3}, 0x50) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000380)=0x8, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000400)={0x8000, 0x20, '\x00', 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r7, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1c4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x80c1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r9, 0x29, 0x2d, &(0x7f0000000700)={0x8, {{0xa, 0x4e22, 0x100, @loopback, 0x7}}}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r8) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x8c, r11, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x56af, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x28, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x3, 0x0, 0x3, 0x5, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x9a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4953507b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe000000}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6a4c5ac}]}, &(0x7f0000000b40)='GPL\x00', 0xe2e, 0xc, &(0x7f0000000b80)=""/12, 0x41100, 0x1, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000c00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x2, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[r2], &(0x7f0000000cc0)=[{0x5, 0x1, 0xb, 0xa}], 0x10, 0x9}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000fc0)={r4, 0x4, 0x6, 0x7}) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001080)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x1b, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x35e0}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000ec0)='GPL\x00', 0x2, 0x97, &(0x7f0000000f00)=""/151, 0x1e00, 0x48, '\x00', r3, @fallback=0x11, r15, 0x8, &(0x7f0000001000)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x0, 0xd, 0x79, 0x60}, 0x10, 0xffffffffffffffff, r14, 0x4, &(0x7f00000010c0)=[r16, r12], &(0x7f0000001100)=[{0x1, 0x4, 0x7, 0x5}, {0x1, 0x5, 0xb, 0x3}, {0x3, 0x3, 0x6, 0x8}, {0x4, 0x4, 0x4, 0xc}], 0x10, 0x10001}, 0x94) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r15, 0x84, 0x21, &(0x7f0000001200)=0x8, 0x4) 870.3624ms ago: executing program 0 (id=5525): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100faffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c000380060001000000000008000200020000007600000000000000080001"], 0x5c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x40000c0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, 0x0, 0x0) writev(r5, &(0x7f0000001300)=[{0x0}, {&(0x7f00000010c0)="985485c5", 0xfdef}], 0x2) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) close(r7) 869.598602ms ago: executing program 3 (id=5526): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x88, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async, rerun: 64) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async, rerun: 64) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES16=r7], 0x21c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r10, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x6}], 0x10}}], 0x2, 0x40c8044) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) 866.920659ms ago: executing program 2 (id=5527): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r2 = socket(0x2a, 0x2, 0x0) getpeername$packet(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0x9, 0x8, 0x2a000, r4, 0x5, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x5, @value=r5}, 0x50) 792.588089ms ago: executing program 4 (id=5528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, 'V\aj', 0x0, 0x88, 0x1, @local, @local}}}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10) sendmsg$tipc(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) shutdown(r4, 0x2) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 725.191839ms ago: executing program 3 (id=5529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e26, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 630.566627ms ago: executing program 0 (id=5530): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001300)="d7b5", 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfd}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2=0xac141400}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x70}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x3, 0x2, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f, 0x0, 0x0, 0x5}], "13d86558da0a7f6b"}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r11) r12 = epoll_create1(0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f00000000c0)) epoll_pwait(r12, &(0x7f0000000280)=[{}], 0x1, 0xfffff800, 0x0, 0x0) 628.620043ms ago: executing program 2 (id=5531): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000800000e0000000008000000911130000000000095"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_rx_data\x00', r1, 0x0, 0x8000000000000000}, 0x18) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet(0x2, 0x2, 0x1) r6 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) close(0x3) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="100000000d14002228bd3480fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000640)="0800dee2f5a93ee610264a3f1347082521c9e731126143330a8a47054aeef03f65e0203001f1585c6d39cd056d89f16581d36cfb786405573595d75bb3a2aa2b811f13b829eda59b31cc8e2422f189f6d99b35d3a056b2014b0430e8f409b8cfbd1089ad94bf564f4be546e9a3516a5ab320d9f87ee7bb36da7c27db2140cb049edb20ecdc430a5d16f4177ec1b3e38ba0620dfc12425b4efd364e9b109e3df94e2500266468703c1c389947ff81f026d53d6bbaa6b3874048a9b742293760f116444982a0097d5f1b096555e9c0d3019d65f9038e50d029f9e55f328262e033ae8f3168275bdd4654afe578cf6d55712f02fa6b2d09", 0xf6}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRESOCT], 0x40}, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) 628.223959ms ago: executing program 4 (id=5532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e0001000000000000000000010100800c0001000300000000000000140003002001000000000000000000000000020050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1619a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000)="c4a30b4b016064f9a998d44bba1210ae4aa1737b34d13f519cb9e36ba1cfd4820b2b175c65426d7e796e70640eea", &(0x7f00000000c0)=""/17, &(0x7f0000001040)="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", &(0x7f0000000240)="55b5770b059a8da342d926d875a4a4a15803da6cdde53fedfe3075dee020b4b182f1e97b9bca6dfa87577bbb2a3514b6fc6bf741e415c0ba60750d3cb4724f74a0db8e7332dd45c7bfbefb988457fbd267fc57a02b824245dc8242487604453a0f75719672a69a40e6343eed50c25d37df938ddf71588c1a0744c161393d1c6a2f587bb970aee3f5bbfd57404d06c3c2e30a7b1a1c22b76484af4bc7", 0x3ff, r4}, 0x38) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012042, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000800008807c0000805400098028000080060001000a00000014000200fc010000000000000000000000000000050085924bca02519fedc3a807d7cc03000300000041000080060001000a0000001400020000000000000000000000000000000001050003f1ff000000240001000000000000000000000000000000000000000000001500000000000000000000080005000100000014000200776731"], 0xb0}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 607.923364ms ago: executing program 2 (id=5533): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xf, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002bbd7000ffdbdf25020000000c000300020000000000000005000d0032000000080008000300000008000700", @ANYRES32=r4, @ANYBLOB="05000d0015000000080002007f00000014000b00000000000000000000000000000000010600060000000000080005000000000005000d0029000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 515.651505ms ago: executing program 3 (id=5534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x1d}}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000240)={0x3, 'veth0_to_batadv\x00', {0xfffff66e}, 0x2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={r8, 0xffff, 0x10}, 0xc) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x10) (rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x37}, @void, @val={0xc, 0x99, {0x3, 0x1}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40841) (async) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x2, {0x2}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}}, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r15, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r15, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 32) 422.689511ms ago: executing program 2 (id=5535): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/249, 0xf9, 0x0, &(0x7f0000000480)=""/74, 0x4a}, &(0x7f00000008c0)=0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x11, r2, 0xc5978000) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0x3, 0x1}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000003c0)=0x9, 0x4) recvmmsg(r5, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0) 420.680249ms ago: executing program 3 (id=5536): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES8=r0, @ANYRES32=r5, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES8=r2], 0x50) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540001ea", @ANYRES16=r12, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000c001000ffffffffffffffff140008006d616373656330000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async, rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) (async, rerun: 32) setsockopt$inet6_buf(r8, 0x29, 0x15, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) (async, rerun: 32) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 419.493105ms ago: executing program 0 (id=5537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x41) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d1010000007000000000000000000000000021400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000003c0)={{0x0, 0x9, 0x0, 0x50, 0x7, 0x5c5, 0x6, 0xe, 0xd, 0x7, 0x3, 0x900000000, 0xf, 0x29, 0x9}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f0000000040)="6bed50fdfce25646ca3380be0bf46a18", 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r5, &(0x7f0000000040), 0x0}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000013c0)={{r4, 0x9, 0x9, 0x8, 0x6be86a1b, 0x8, 0x6, 0xa, 0x6, 0xfffffffb, 0x8, 0x1000, 0x4, 0x9, 0x4}}) 406.094502ms ago: executing program 4 (id=5538): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r3) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a2838578b28addc164f8aee2600b3a850786c33a32d10200000000000000d44208d828ffe86913f4d6", @ANYRES8=r1, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c00078008000400040000000800010018000000080002000900000008000400050000000800040000040000"], 0x50}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x2040000, 0x0) r6 = socket(0x26, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 309.808729ms ago: executing program 4 (id=5539): epoll_create1(0x0) (async) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) (async) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) unshare(0x22020400) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000002000)=0x5c) (async) sendmmsg$alg(r7, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216342ba80000", 0x10}, {&(0x7f0000000540)="ebe3a0e9796cdd1647e299f4e37efdba128280b372219d205e81f4a7f71c1926aae1efe0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7c981726b360fbb37b4f00000000baff0502fc38ff6f9a8c768db1a90eac05240f5f9f44c6a89450086aec5315ab03977e1e8d91bccb8c33249e4ee45a597cbc6d7dbfb18a", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000001c0)=[@iv={0xf8, 0x117, 0x2, 0x13c, "de51ac96188b5648d09cf4c16b67ec658f99c44edc881c65dad534804cd0a00c34a1ebf08488d3e5e5056412dfe2d06d30eb0657bdd7835a0a1b3b0351b38b9bb15bcec1d0d935d5d7f22520fc5acfbf2cc310df750fc4f09c2eb18d15807d015927f171c659196b37743a0cae351cc36f5a84772e997ef3eb76cf643b01b6aa74c92c628e604e22f03915d5ed524c277859532e09467ef789ce9083047f7beba6abcc141b22a417f65b46f790117e6a63380ac2b0368457413ce841c6433fe43e0174a5f9d31c26dddb0629581ef5298771b0a9e7bd264121ad0de1b28c23b1a4"}], 0xf8}], 0x1, 0x40800) 238.524736ms ago: executing program 0 (id=5540): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000780)="e818c45ddb85a5d865d4bd2d25bc687d44a5783adee7bc7031466bbd5752bd1e06f15a00d4d73574fc97f699ca960b0eac07d112d05b989974be1d476ddaa14921b4271b6a1a7ecb725a503e1bfe648bf0b1525a60e7799ddb7a994701a44bb03f7b4ffe2a377f7c3591d2161fea88c8c16207f6c59e400967cc4a021d76e2be2dc885f489ec320bc5eb5a6967dfbf03084f63083e461a1ad0fecb331147a794c8ef13b0a05fe257ea69b8a678d90f19d90a7a3df1ce8699ee1a234e075507dbc14d26878bd236e310b4d3074532a40e5b522f4c9b09752c9ecbe8a7ddfa9780ce2931c59f3cca2c3cfa9d29f0adf8e87c55b797c7e34a83d7cd1e0f8d2fe7da1f7956f9e2e521ae8a69d64973b3c6639f37c13773e294cb31e20300bfdad53bde6fe3b7", 0x124}], 0x1, 0x0, 0x0, 0x40}, 0x4c815) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/192, 0xc0}, 0x8}], 0x1, 0x20, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x28020000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="c253d0b5", 0x4}, {&(0x7f00000003c0)="80", 0x1}], 0x2, 0x0, 0x0, 0x40004}], 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x25, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x63, 0x0, 0x0, 0x3e}, 0x94) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) shutdown(r6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010600b782f687d36e6ed000104fce2ff", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 166.3094ms ago: executing program 4 (id=5541): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8940, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000010000001d01000008000900", @ANYRES32=r1, @ANYRES64=r1], 0x24}}, 0x20008030) 140.686812ms ago: executing program 1 (id=5542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="820187d73353916fe14d9b480fcd37dea1b821003819cd59feaf269df918293d4d64f2bfcad9", @ANYRES32=r0], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x9, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r3, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=0x0], 0x48}}, 0x4040004) 50.662221ms ago: executing program 4 (id=5543): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffe}]}}}]}, 0x38}}, 0x28000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) (async) bind$netlink(r1, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) (async) unshare(0x22020600) (async, rerun: 32) r2 = socket(0x1d, 0x2, 0x6) (rerun: 32) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x3) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async, rerun: 64) unshare(0x28000600) (async) close(0x3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="86ef062ba9f7b2b32c86545d6e7d", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf25080000000c0099000000000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xa000050) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r6 = getpid() r7 = syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/net\x00') (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r7, @ANYBLOB="323e713a2b72252d18b5e64274928f7778a13fb1bb7e29ded165483f1d9f7c8bd063c52531baf334fffa0ca43b47ba6591fdf90ef88c1dc0056dc9467e3042ffa7a8c32a36dbcdc5a001f634f0c2032efa787e"], 0x3c}}, 0x0) (rerun: 32) 50.289569ms ago: executing program 2 (id=5544): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, 0x1, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000000)) 0s ago: executing program 3 (id=5545): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@null, @default, @netrom, @netrom, @default, @rose, @bcast]}, &(0x7f0000000100)=0x48) poll(&(0x7f0000009b00)=[{r0}], 0x1, 0x72) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48403, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0xfd}, @ra={0x94, 0x4, 0x1000}]}}, @address_reply={0xd}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)={{r1}, {@void, @max}}) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 500.474015][ T8774] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.479423][T19501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3476'. [ 500.493550][ T8774] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.621059][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3476'. [ 500.668682][T19501] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3476'. [ 501.017927][T19531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.031210][T19531] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.900282][T19581] tipc: Started in network mode [ 501.909880][T19581] tipc: Node identity de02c2b32fe5, cluster identity 4711 [ 501.935821][T19581] tipc: Enabled bearer , priority 0 [ 502.044412][T19581] tipc: Disabling bearer [ 502.281284][T19597] nbd: socks must be embedded in a SOCK_ITEM attr [ 502.486169][T19601] syzkaller1: entered promiscuous mode [ 502.491906][T19601] syzkaller1: entered allmulticast mode [ 503.728898][T19652] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 504.387643][T19674] validate_nla: 1 callbacks suppressed [ 504.387660][T19674] netlink: 'syz.1.3520': attribute type 11 has an invalid length. [ 504.653973][ T49] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 505.618714][T19723] bond0: (slave gretap0): Error: Device type is different from other slaves [ 505.640378][ T9386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.648499][ T9386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.384664][T19765] __nla_validate_parse: 1 callbacks suppressed [ 506.384691][T19765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3542'. [ 506.415779][T19764] veth0: entered promiscuous mode [ 506.592014][T19764] netlink: 'syz.3.3543': attribute type 16 has an invalid length. [ 506.606034][T19764] netlink: 'syz.3.3543': attribute type 17 has an invalid length. [ 506.706024][T19764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.714530][T19764] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.722684][T19764] dummy0: left promiscuous mode [ 506.744038][T19764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.962340][T19764] veth0: left promiscuous mode [ 507.313352][T19806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3554'. [ 507.332133][T19803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.657909][T19822] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 507.736166][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3558'. [ 507.800683][T19829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3559'. [ 507.857376][ T5848] Bluetooth: hci0: command 0x0405 tx timeout [ 508.132130][T19847] netlink: 'syz.1.3564': attribute type 1 has an invalid length. [ 508.201824][T19847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.262835][T19844] netlink: 'syz.2.3563': attribute type 10 has an invalid length. [ 508.369144][T19848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.377912][T19848] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 508.389691][T19848] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 508.510358][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 508.973685][T19883] !: renamed from dummy0 (while UP) [ 509.268766][T19894] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 509.289990][T19894] bond2 (unregistering): Released all slaves [ 509.450658][T19908] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3580'. [ 509.468967][T19909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3578'. [ 509.478389][T19908] netlink: 'syz.0.3580': attribute type 9 has an invalid length. [ 509.486540][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 509.495817][T19908] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3580'. [ 509.525485][T19908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3580'. [ 509.528002][T19912] netlink: 'syz.1.3578': attribute type 1 has an invalid length. [ 509.864138][T19939] netem: change failed [ 510.026327][T19942] bridge_slave_0: left allmulticast mode [ 510.032075][T19942] bridge_slave_0: left promiscuous mode [ 510.057102][T19942] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.088022][T19942] bridge_slave_1: left allmulticast mode [ 510.094487][T19942] bridge_slave_1: left promiscuous mode [ 510.104570][T19942] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.123249][T19942] bond0: (slave bond_slave_0): Releasing backup interface [ 510.135007][T19942] bond0: (slave bond_slave_1): Releasing backup interface [ 510.143769][T19956] netlink: 'syz.1.3590': attribute type 10 has an invalid length. [ 510.166522][T19942] team0: Port device team_slave_0 removed [ 510.183426][T19942] team0: Port device team_slave_1 removed [ 510.198955][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.234090][T19942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.254091][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.262351][T19942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.272305][T19942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.347292][T19956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.359481][T19956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 510.511181][T19972] bridge_slave_0: left allmulticast mode [ 510.517818][T19972] bridge_slave_0: left promiscuous mode [ 510.532532][T19972] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.560569][T19972] bridge_slave_1: left promiscuous mode [ 510.567424][T19972] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.609675][T19972] bond0: (slave bond_slave_0): Releasing backup interface [ 510.629462][T19972] bond0: (slave bond_slave_1): Releasing backup interface [ 510.659844][T19972] team0: Port device team_slave_0 removed [ 510.674764][T19972] team0: Port device team_slave_1 removed [ 510.682973][T19972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.690982][T19972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.704421][T19972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.718979][T19972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.729726][T19972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.789165][ T5948] syz0: Port: 1 Link DOWN [ 511.977137][T20031] tipc: New replicast peer: 0.0.0.0 [ 511.984092][T20031] tipc: Enabled bearer , priority 10 [ 512.027004][T20031] tipc: New replicast peer: 255.255.255.255 [ 512.798090][T20045] netlink: 'syz.2.3616': attribute type 1 has an invalid length. [ 512.922836][T20045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.585492][T20075] __nla_validate_parse: 4 callbacks suppressed [ 513.585511][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3623'. [ 513.633546][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 513.933822][T20091] sctp: [Deprecated]: syz.3.3628 (pid 20091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.933822][T20091] Use struct sctp_sack_info instead [ 514.373764][ T5848] Bluetooth: hci2: link tx timeout [ 514.379757][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 514.389031][ T5848] Bluetooth: hci2: link tx timeout [ 514.394153][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 514.402092][ T5848] Bluetooth: hci2: link tx timeout [ 514.407673][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 514.415370][ T5848] Bluetooth: hci2: link tx timeout [ 514.420491][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 514.516701][T20117] netlink: 'syz.3.3633': attribute type 13 has an invalid length. [ 514.524540][T20117] netlink: 'syz.3.3633': attribute type 17 has an invalid length. [ 514.616467][T20120] netlink: 'syz.0.3636': attribute type 1 has an invalid length. [ 514.639909][T20120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3636'. [ 514.678824][T20117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.733562][T20121] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 514.764284][T20121] macsec1: entered promiscuous mode [ 514.776108][T20121] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 514.831104][T20133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'. [ 514.842064][T20122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.943931][T20117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.142906][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3642'. [ 515.192549][T20141] netlink: 'syz.1.3642': attribute type 30 has an invalid length. [ 515.221165][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'. [ 515.780308][T20171] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 515.850165][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3650'. [ 515.900726][T20176] bond3: (slave bridge2): making interface the new active one [ 515.918535][T20176] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 516.004753][T20180] !: renamed from dummy0 (while UP) [ 516.055991][T20182] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3652'. [ 516.065351][T20182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3652'. [ 516.075737][T20182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3652'. [ 516.498809][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 517.388047][T20255] netlink: 'syz.4.3672': attribute type 1 has an invalid length. [ 517.800002][T20273] netlink: 'syz.1.3675': attribute type 3 has an invalid length. [ 517.819309][T20269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 517.866529][T20274] veth0_macvtap: left promiscuous mode [ 518.087705][ T10] IPVS: starting estimator thread 0... [ 518.153603][T20287] netlink: 'syz.2.3679': attribute type 8 has an invalid length. [ 518.181975][T20284] IPVS: using max 26 ests per chain, 62400 per kthread [ 518.575598][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 518.917788][T20324] ip_vti0: entered promiscuous mode [ 518.965543][T20324] __nla_validate_parse: 9 callbacks suppressed [ 518.965561][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'. [ 519.071863][T20334] xfrm1: entered allmulticast mode [ 519.390072][T20352] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3700'. [ 519.666638][T20368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3703'. [ 519.878100][T20376] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3705'. [ 519.887514][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3706'. [ 519.887767][T20376] unsupported nlmsg_type 40 [ 520.017038][T20383] netlink: 'syz.3.3707': attribute type 1 has an invalid length. [ 520.036483][T20390] tipc: Enabling of bearer rejected, failed to enable media [ 520.048421][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3709'. [ 520.108599][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3709'. [ 520.117745][T20389] netlink: 'syz.2.3709': attribute type 14 has an invalid length. [ 520.125615][T20389] netlink: 'syz.2.3709': attribute type 11 has an invalid length. [ 520.134061][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3709'. [ 520.167152][T20383] bond2: entered promiscuous mode [ 520.180408][T20383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.207872][T20383] bond2: (slave bridge5): making interface the new active one [ 520.218393][T20383] bridge5: entered promiscuous mode [ 520.225530][T20383] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 520.345904][T20406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3713'. [ 520.357858][T20411] sctp: [Deprecated]: syz.2.3715 (pid 20411) Use of int in maxseg socket option. [ 520.357858][T20411] Use struct sctp_assoc_value instead [ 520.407810][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3715'. [ 520.852552][T20419] netlink: 'syz.0.3712': attribute type 6 has an invalid length. [ 521.349772][T20439] geneve0: entered promiscuous mode [ 522.556965][T20491] geneve2: entered promiscuous mode [ 522.649235][T20492] bridge_slave_0: left allmulticast mode [ 522.659276][T20492] bridge_slave_0: left promiscuous mode [ 522.680583][T20492] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.701106][T20492] bridge_slave_1: left allmulticast mode [ 522.717393][T20492] bridge_slave_1: left promiscuous mode [ 522.723259][T20492] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.748713][T20492] bond0: (slave bond_slave_0): Releasing backup interface [ 522.779790][T20492] bond0: (slave bond_slave_1): Releasing backup interface [ 522.809538][T20492] team0: Port device team_slave_0 removed [ 522.821613][T20492] team0: Port device team_slave_1 removed [ 522.828447][T20492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.836811][T20492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.870365][T20492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.878136][T20492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.887731][T20492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.922490][T20488] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 524.002231][T20556] veth1_macvtap: left promiscuous mode [ 525.501569][T20612] bond0: entered promiscuous mode [ 525.509959][T20612] batadv0: entered promiscuous mode [ 525.517203][T20612] debugfs: 'hsr1' already exists in 'hsr' [ 525.523190][T20612] Cannot create hsr debugfs directory [ 525.528745][T20612] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 525.543131][T20612] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 525.651176][T20616] __nla_validate_parse: 9 callbacks suppressed [ 525.651193][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 525.874568][T20631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3770'. [ 525.965343][T20633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3771'. [ 526.310922][T20654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3776'. [ 526.429521][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 526.443487][T20660] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3779'. [ 526.468154][T20662] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 526.740181][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'. [ 526.801870][T20670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.815038][T20667] bond3: (slave batadv1): Opening slave failed [ 526.830448][T20676] netlink: 'syz.4.3784': attribute type 15 has an invalid length. [ 527.062991][T20691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3787'. [ 527.074145][T20694] netlink: 'syz.1.3788': attribute type 10 has an invalid length. [ 527.240889][T20706] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.3789'. [ 527.390742][T20713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3792'. [ 527.560391][T20716] bond4: option broadcast_neighbor: invalid value (5) [ 527.572338][T20716] bond4 (unregistering): Released all slaves [ 527.811546][T20731] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0 [ 528.831927][T20818] sctp: [Deprecated]: syz.4.3820 (pid 20818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.831927][T20818] Use struct sctp_sack_info instead [ 529.049813][T20830] tipc: Enabled bearer , priority 10 [ 529.496000][T20866] nbd: must specify a size in bytes for the device [ 529.514395][T20851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.868355][T20888] netlink: 'syz.0.3835': attribute type 1 has an invalid length. [ 529.900158][T20888] bond1: entered promiscuous mode [ 529.905861][T20888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.949126][T20888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.958032][T20888] bond1: (slave bond2): making interface the new active one [ 529.966443][T20888] bond2: entered promiscuous mode [ 529.972795][T20888] bond1: (slave bond2): Enslaving as an active interface with an up link [ 529.989206][T20896] netlink: 'syz.1.3838': attribute type 21 has an invalid length. [ 530.003663][T20896] netlink: 'syz.1.3838': attribute type 4 has an invalid length. [ 530.011656][T20896] netlink: 'syz.1.3838': attribute type 5 has an invalid length. [ 530.185282][ T10] tipc: Node number set to 4058497715 [ 530.320143][T20916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.328040][T20913] tipc: Enabled bearer , priority 0 [ 530.347851][T20917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.420379][T20916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.472705][T20914] tipc: Disabling bearer [ 530.499957][T20928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.507266][T20928] IPv6: NLM_F_CREATE should be set when creating new route [ 530.514481][T20928] IPv6: NLM_F_CREATE should be set when creating new route [ 530.523673][T20928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.607551][T20933] netlink: 'syz.1.3851': attribute type 11 has an invalid length. [ 530.648135][T20939] bridge0: entered promiscuous mode [ 530.672599][T20939] bridge0: left promiscuous mode [ 530.820859][T20938] bridge0: entered promiscuous mode [ 530.850293][T20938] bridge0: left promiscuous mode [ 531.267347][T20957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.460893][T20975] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 531.524851][T20957] __nla_validate_parse: 14 callbacks suppressed [ 531.524869][T20957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3855'. [ 532.025096][T21001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3870'. [ 532.132844][T21008] team0: Mode changed to "activebackup" [ 532.512645][T21024] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3875'. [ 532.526657][T21032] pim6reg: entered allmulticast mode [ 532.562953][T21032] pim6reg: left allmulticast mode [ 532.807311][T21042] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3879'. [ 533.184189][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3886'. [ 533.193562][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3885'. [ 533.246974][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 533.271465][T21068] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 533.284208][T21068] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 533.889283][T21101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3891'. [ 534.331176][T21126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3898'. [ 534.465358][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3898'. [ 534.516312][T21126] veth1_macvtap: left promiscuous mode [ 534.557995][T21142] netlink: 'syz.1.3902': attribute type 4 has an invalid length. [ 534.646605][T21146] batadv_slave_1: entered promiscuous mode [ 534.661004][T21145] batadv_slave_1: left promiscuous mode [ 535.242371][T21170] tipc: Enabling of bearer rejected, already enabled [ 535.373620][T21177] tipc: Enabling of bearer rejected, already enabled [ 535.732533][T21186] netlink: 'syz.4.3914': attribute type 12 has an invalid length. [ 536.054988][T21195] syz_tun: entered allmulticast mode [ 536.069536][T21194] syz_tun: left allmulticast mode [ 536.316384][T21209] sctp: [Deprecated]: syz.0.3920 (pid 21209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.316384][T21209] Use struct sctp_sack_info instead [ 536.468807][T21208] netlink: 'syz.3.3922': attribute type 12 has an invalid length. [ 536.846248][T21227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 536.978271][T21237] __nla_validate_parse: 6 callbacks suppressed [ 536.978288][T21237] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3927'. [ 537.026037][T21240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3928'. [ 537.103631][T21234] netlink: 'syz.4.3924': attribute type 2 has an invalid length. [ 538.228285][ T9384] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.270843][ T9384] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.340388][ T9384] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.377672][ T9384] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.415433][ T9384] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.445424][ T9384] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.470132][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 538.484633][T21293] team0: Mode changed to "loadbalance" [ 538.528268][ T9384] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.545440][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 538.575494][ T9384] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.602833][ T9384] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.647565][T21306] erspan0: entered promiscuous mode [ 538.654797][ T9384] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.721014][ T9384] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.740929][ T9384] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.799443][T21311] pimreg: entered allmulticast mode [ 538.835916][T21311] pimreg: left allmulticast mode [ 539.071417][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3945'. [ 539.121534][T21330] bridge_slave_1: left allmulticast mode [ 539.132692][T21330] bridge_slave_1: left promiscuous mode [ 539.143272][T21330] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.156604][T21330] bridge_slave_0: left allmulticast mode [ 539.162258][T21330] bridge_slave_0: left promiscuous mode [ 539.168391][T21330] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.279191][T21343] macsec1: entered promiscuous mode [ 539.284677][T21343] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 539.297554][T21343] mac80211_hwsim hwsim42 wlan1: left promiscuous mode [ 539.522316][T21354] Bluetooth: MGMT ver 1.23 [ 539.714282][T21361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3953'. [ 539.766183][T21378] netlink: 'syz.0.3955': attribute type 1 has an invalid length. [ 539.774474][T21378] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3955'. [ 539.928368][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3952'. [ 539.981494][T21391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 540.001688][T21391] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3958'. [ 540.656961][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 541.022120][T21431] netlink: 'syz.3.3968': attribute type 6 has an invalid length. [ 542.008521][T21440] __nla_validate_parse: 2 callbacks suppressed [ 542.008539][T21440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3972'. [ 542.015994][T21441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3972'. [ 542.050977][T21444] 8021q: VLANs not supported on ip6tnl0 [ 542.134728][T21446] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3973'. [ 542.157100][ T8774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.164925][ T8774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.583657][T21456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3977'. [ 542.687433][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 542.704767][T21456] bridge5: entered promiscuous mode [ 542.718619][T21456] bridge5: entered allmulticast mode [ 542.736386][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3978'. [ 543.389911][T21485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3988'. [ 543.412749][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3988'. [ 543.458808][T21491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3990'. [ 543.626037][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3991'. [ 543.890718][T21503] 8021q: VLANs not supported on ip6tnl0 [ 544.643789][ T5844] block nbd1: Receive control failed (result -32) [ 544.872742][T21545] netlink: zone id is out of range [ 544.895030][T21545] netlink: zone id is out of range [ 544.895876][T21542] team0: Device ipip0 is up. Set it down before adding it as a team port [ 544.900986][T21545] netlink: zone id is out of range [ 544.931834][T21545] netlink: zone id is out of range [ 544.958044][T21545] netlink: zone id is out of range [ 545.028487][T21549] tipc: Started in network mode [ 545.045599][T21549] tipc: Node identity 32a6a7860f21, cluster identity 4711 [ 545.085621][T21549] tipc: Enabled bearer , priority 0 [ 545.095119][T21550] syzkaller0: entered promiscuous mode [ 545.100809][T21550] syzkaller0: entered allmulticast mode [ 545.138999][T21542] tipc: Resetting bearer [ 545.161614][T21540] tipc: Resetting bearer [ 545.211962][T21540] tipc: Disabling bearer [ 545.607940][T21582] sch_fq: defrate 4294967293 ignored. [ 546.205288][T21590] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 547.070267][T21650] __nla_validate_parse: 11 callbacks suppressed [ 547.070288][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4028'. [ 547.367824][T21669] vxcan3: entered allmulticast mode [ 548.271578][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'. [ 548.322684][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'. [ 548.451967][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4048'. [ 548.475554][T21719] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4044'. [ 548.492243][T21719] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 548.612753][T21730] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 548.633336][T21730] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4048'. [ 549.072031][T21762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4057'. [ 549.145760][T21764] netlink: 'syz.3.4058': attribute type 1 has an invalid length. [ 549.168321][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4058'. [ 549.388090][T21779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4062'. [ 549.412695][T21782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4063'. [ 549.422775][T21782] 8021q: VLANs not supported on ipvlan1 [ 549.465882][T21782] macsec1: entered promiscuous mode [ 549.471177][T21782] macsec1: entered allmulticast mode [ 549.535604][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 549.588064][T21790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 549.647049][T21790] bond4: (slave batadv1): Opening slave failed [ 549.779705][T21800] tipc: Enabled bearer , priority 0 [ 549.790075][T21800] syzkaller0: entered promiscuous mode [ 549.808135][T21800] syzkaller0: entered allmulticast mode [ 549.871330][T21800] tipc: Resetting bearer [ 549.886257][T21799] tipc: Resetting bearer [ 549.913189][T21799] tipc: Disabling bearer [ 550.107441][T21819] netlink: 'syz.1.4074': attribute type 1 has an invalid length. [ 550.325880][T21840] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 550.493939][T21849] delete_channel: no stack [ 550.611218][T21855] tipc: Enabled bearer , priority 0 [ 550.620212][T21855] syzkaller0: entered promiscuous mode [ 550.624020][T21857] netlink: 'syz.3.4086': attribute type 9 has an invalid length. [ 550.626515][T21855] syzkaller0: entered allmulticast mode [ 550.669072][T21855] tipc: Resetting bearer [ 550.691474][T21854] tipc: Resetting bearer [ 550.709779][T21854] tipc: Disabling bearer [ 550.747869][T21864] netlink: 'syz.3.4088': attribute type 3 has an invalid length. [ 550.760323][T21864] lo: entered allmulticast mode [ 550.779159][T21864] dvmrp1: left allmulticast mode [ 550.842673][T21868] siw: device registration error -23 [ 550.867730][T21863] lo: left allmulticast mode [ 551.056065][T21885] netlink: 'syz.0.4093': attribute type 39 has an invalid length. [ 551.099633][T21874] netlink: 'syz.2.4090': attribute type 10 has an invalid length. [ 551.115068][T21874] bond0: (slave 0!): Enslaving as an active interface with an up link [ 551.341337][T21898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 551.385113][T21898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 551.693868][T21918] bridge0: port 1(syz_tun) entered blocking state [ 551.702947][T21918] bridge0: port 1(syz_tun) entered disabled state [ 551.722185][T21918] syz_tun: entered allmulticast mode [ 551.742464][T21918] syz_tun: entered promiscuous mode [ 551.761095][T21909] rdma_rxe: rxe_newlink: failed to add syz_tun [ 551.909881][T21928] syzkaller1: entered promiscuous mode [ 551.915658][T21928] syzkaller1: entered allmulticast mode [ 551.994887][T21933] IPVS: Scheduler module ip_vs_sip not found [ 552.002169][T21931] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 552.184109][T21941] __nla_validate_parse: 15 callbacks suppressed [ 552.184127][T21941] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4107'. [ 552.207957][T21942] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4107'. [ 552.264159][T21947] sctp: [Deprecated]: syz.0.4106 (pid 21947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.264159][T21947] Use struct sctp_sack_info instead [ 552.622145][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'. [ 552.632677][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'. [ 552.962564][T21986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'. [ 553.025040][T21993] ip_vti0: left promiscuous mode [ 553.100377][T21993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.117889][T21993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.132156][T21993] xfrm0: left promiscuous mode [ 553.137071][T21993] xfrm0: left allmulticast mode [ 553.234429][T21993] bond1: left promiscuous mode [ 553.239920][T21993] bond2: left promiscuous mode [ 553.251199][ T8774] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.263972][ T8774] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.297658][ T8774] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.307033][ T8774] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.786942][T22012] netlink: 'syz.1.4124': attribute type 1 has an invalid length. [ 553.841262][T22012] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 553.886580][T22023] netlink: 'syz.0.4123': attribute type 1 has an invalid length. [ 553.909923][T22023] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4123'. [ 554.176329][T22040] syzkaller1: entered promiscuous mode [ 554.181841][T22040] syzkaller1: entered allmulticast mode [ 554.368466][T22056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4134'. [ 554.388274][T22056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4134'. [ 554.399268][T22056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4134'. [ 554.468494][T22061] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4135'. [ 554.951756][T22094] netlink: 'syz.4.4146': attribute type 3 has an invalid length. [ 555.060172][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.071002][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.079955][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.096328][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.710563][T22137] netlink: 'syz.1.4156': attribute type 2 has an invalid length. [ 555.865049][T22148] syz_tun: left allmulticast mode [ 555.871354][T22148] syz_tun: left promiscuous mode [ 555.876745][T22148] bridge0: port 1(syz_tun) entered disabled state [ 555.891120][T22148] bond0: (slave 0!): Releasing backup interface [ 555.944704][T22148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 556.033152][T22148] netlink: 'syz.2.4157': attribute type 10 has an invalid length. [ 556.191159][T22148] bond0: (slave wlan1): Opening slave failed [ 556.856035][T22200] veth0_to_bond: entered allmulticast mode [ 557.004983][T22221] netlink: 'syz.4.4179': attribute type 1 has an invalid length. [ 557.018951][T22214] team0: Mode changed to "activebackup" [ 557.047551][T22226] syz_tun: entered allmulticast mode [ 557.053798][T22221] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 557.115400][T22229] bond5: Unable to set up delay as MII monitoring is disabled [ 557.135100][T22229] bond5 (unregistering): Released all slaves [ 557.232882][T22223] syz_tun: left allmulticast mode [ 557.368093][T22238] syzkaller0: entered promiscuous mode [ 557.374058][T22238] syzkaller0: entered allmulticast mode [ 557.625596][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 557.850878][T22255] __nla_validate_parse: 9 callbacks suppressed [ 557.850896][T22255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4187'. [ 558.146405][T22267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4189'. [ 558.272828][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'. [ 558.356203][T22275] netlink: 'syz.1.4192': attribute type 10 has an invalid length. [ 558.429306][T22276] netlink: 'syz.1.4192': attribute type 10 has an invalid length. [ 559.696860][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 559.701244][T22296] netlink: 'syz.1.4196': attribute type 3 has an invalid length. [ 559.775876][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 559.819059][T22301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4200'. [ 559.853287][T22305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4198'. [ 559.872376][T22305] : entered promiscuous mode [ 559.887074][T22305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4198'. [ 559.899612][T22301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.096222][T22319] netlink: 'syz.0.4204': attribute type 10 has an invalid length. [ 560.122664][T22319] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.139508][T22319] bond0: (slave team0): Enslaving as an active interface with an up link [ 560.317097][T22329] netlink: 'syz.1.4203': attribute type 1 has an invalid length. [ 560.360399][T22329] 8021q: adding VLAN 0 to HW filter on device bond5 [ 560.378510][T22321] bond5: (slave wlan0): Opening slave failed [ 560.387715][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4203'. [ 560.580141][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4210'. [ 560.914339][T22357] netlink: 'syz.4.4215': attribute type 12 has an invalid length. [ 560.951188][T22353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4212'. [ 560.963862][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4212'. [ 560.979697][T22353] netlink: 'syz.1.4212': attribute type 2 has an invalid length. [ 561.202757][T22383] netlink: 'syz.4.4221': attribute type 1 has an invalid length. [ 561.211418][T22383] nbd: error processing sock list [ 561.315308][T22387] D: renamed from syzkaller0 (while UP) [ 561.322847][T22387] tipc: Disabling bearer [ 562.483448][T22427] netlink: 'syz.2.4232': attribute type 9 has an invalid length. [ 563.003092][T22454] netlink: 'syz.2.4237': attribute type 12 has an invalid length. [ 563.048853][T22457] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 563.101481][T22459] __nla_validate_parse: 3 callbacks suppressed [ 563.101499][T22459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4239'. [ 563.129523][T22457] batman_adv: batadv0: Adding interface: gretap1 [ 563.148500][T22457] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.174450][T22457] batman_adv: batadv0: Interface activated: gretap1 [ 563.175729][T22459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4239'. [ 563.550742][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4244'. [ 563.571056][T22474] macvtap1: entered promiscuous mode [ 563.576494][T22474] bond0: entered promiscuous mode [ 563.581681][T22474] bond_slave_0: entered promiscuous mode [ 563.587645][T22474] bond_slave_1: entered promiscuous mode [ 563.593578][T22474] team0: entered promiscuous mode [ 563.598841][T22474] team_slave_0: entered promiscuous mode [ 563.605870][T22474] team_slave_1: entered promiscuous mode [ 563.611898][T22477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4244'. [ 563.621724][T22474] macvtap1: entered allmulticast mode [ 563.629932][T22474] bond0: entered allmulticast mode [ 563.635126][T22474] bond_slave_0: entered allmulticast mode [ 563.641184][T22474] bond_slave_1: entered allmulticast mode [ 563.648860][T22474] team0: entered allmulticast mode [ 563.654073][T22474] team_slave_0: entered allmulticast mode [ 563.659987][T22474] team_slave_1: entered allmulticast mode [ 563.670976][T22474] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 564.863251][T22540] netlink: 'syz.0.4260': attribute type 2 has an invalid length. [ 564.885717][T22540] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.4260'. [ 565.137183][T22556] tipc: Trying to set illegal importance in message [ 565.143669][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4264'. [ 565.382426][T22565] block nbd2: Unsupported socket: should be TCP or UNIX. [ 565.717099][ T8770] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 565.728336][ T8770] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 565.745512][ T5956] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 565.835480][ T5956] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 565.896784][ T5956] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 566.054677][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4278'. [ 566.513062][T22636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4286'. [ 566.589249][T22639] IPVS: length: 24 != 119185342488 [ 566.594408][T22639] IPVS: length: 24 != 119185342488 [ 566.610384][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4288'. [ 566.615728][T22639] IPVS: length: 24 != 119185342488 [ 566.625466][T22639] IPVS: length: 24 != 119185342488 [ 566.640498][T22639] IPVS: length: 24 != 119185342488 [ 566.655060][T22639] IPVS: length: 24 != 119185342488 [ 566.668997][T22639] IPVS: length: 24 != 119185342488 [ 566.679022][T22639] IPVS: length: 24 != 119185342488 [ 566.683363][T22644] syzkaller1: entered promiscuous mode [ 566.684848][T22639] IPVS: length: 24 != 119185342488 [ 566.696291][T22639] IPVS: length: 24 != 119185342488 [ 566.698648][T22644] syzkaller1: entered allmulticast mode [ 566.701477][T22639] IPVS: length: 24 != 119185342488 [ 566.712499][T22639] IPVS: length: 24 != 119185342488 [ 566.722937][T22639] IPVS: length: 24 != 119185342488 [ 566.738797][T22639] IPVS: length: 24 != 119185342488 [ 566.744321][T22639] IPVS: length: 24 != 119185342488 [ 566.749759][T22639] IPVS: length: 24 != 119185342488 [ 566.757223][T22639] IPVS: length: 24 != 119185342488 [ 566.763466][T22639] IPVS: length: 24 != 119185342488 [ 566.769671][T22639] IPVS: length: 24 != 119185342488 [ 566.774898][T22639] IPVS: length: 24 != 119185342488 [ 566.780522][T22639] IPVS: length: 24 != 119185342488 [ 566.786089][T22639] IPVS: length: 24 != 119185342488 [ 566.813307][T22639] IPVS: length: 24 != 119185342488 [ 566.822122][T22639] IPVS: length: 24 != 119185342488 [ 566.827992][T22639] IPVS: length: 24 != 119185342488 [ 566.833298][T22639] IPVS: length: 24 != 119185342488 [ 566.844435][T22639] IPVS: length: 24 != 119185342488 [ 566.859939][T22639] IPVS: length: 24 != 119185342488 [ 566.872869][T22639] IPVS: length: 24 != 119185342488 [ 566.881513][T22639] IPVS: length: 24 != 119185342488 [ 566.890724][T22639] IPVS: length: 24 != 119185342488 [ 566.896258][T22639] IPVS: length: 24 != 119185342488 [ 566.901501][T22639] IPVS: length: 24 != 119185342488 [ 566.906772][T22639] IPVS: length: 24 != 119185342488 [ 566.911998][T22639] IPVS: length: 24 != 119185342488 [ 566.919729][T22639] IPVS: length: 24 != 119185342488 [ 566.929470][T22639] IPVS: length: 24 != 119185342488 [ 566.934734][T22639] IPVS: length: 24 != 119185342488 [ 566.941311][T22639] IPVS: length: 24 != 119185342488 [ 566.947070][T22639] IPVS: length: 24 != 119185342488 [ 566.952647][T22639] IPVS: length: 24 != 119185342488 [ 566.962468][T22639] IPVS: length: 24 != 119185342488 [ 566.975711][T22639] IPVS: length: 24 != 119185342488 [ 566.981324][T22639] IPVS: length: 24 != 119185342488 [ 566.987012][T22639] IPVS: length: 24 != 119185342488 [ 566.992342][T22639] IPVS: length: 24 != 119185342488 [ 566.999190][T22639] IPVS: length: 24 != 119185342488 [ 567.004485][T22639] IPVS: length: 24 != 119185342488 [ 567.010093][T22639] IPVS: length: 24 != 119185342488 [ 567.015434][T22639] IPVS: length: 24 != 119185342488 [ 567.020694][T22639] IPVS: length: 24 != 119185342488 [ 567.027207][T22639] IPVS: length: 24 != 119185342488 [ 567.032463][T22639] IPVS: length: 24 != 119185342488 [ 567.037788][T22639] IPVS: length: 24 != 119185342488 [ 567.043026][T22639] IPVS: length: 24 != 119185342488 [ 567.048721][T22639] IPVS: length: 24 != 119185342488 [ 567.053974][T22639] IPVS: length: 24 != 119185342488 [ 567.060374][T22639] IPVS: length: 24 != 119185342488 [ 567.066020][T22639] IPVS: length: 24 != 119185342488 [ 567.121585][T22639] IPVS: length: 24 != 119185342488 [ 567.133053][T22639] IPVS: length: 24 != 119185342488 [ 567.138534][T22639] IPVS: length: 24 != 119185342488 [ 567.143940][T22639] IPVS: length: 24 != 119185342488 [ 567.183564][T22667] netlink: 'syz.4.4297': attribute type 49 has an invalid length. [ 567.204055][T22639] IPVS: length: 24 != 119185342488 [ 567.216484][T22639] IPVS: length: 24 != 119185342488 [ 567.396002][T22676] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4301'. [ 567.409037][T22676] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 567.440554][T22681] netlink: 'syz.2.4302': attribute type 8 has an invalid length. [ 567.453754][T22681] bond0: entered promiscuous mode [ 567.461567][T22681] veth1_to_bridge: entered promiscuous mode [ 567.468637][T22681] ip6gretap0: entered promiscuous mode [ 567.478583][T22681] debugfs: 'hsr1' already exists in 'hsr' [ 567.484368][T22681] Cannot create hsr debugfs directory [ 567.505472][T22681] hsr1: entered promiscuous mode [ 567.611009][T22688] macvlan0: entered promiscuous mode [ 567.618365][T22688] batadv0: entered promiscuous mode [ 567.624984][T22688] debugfs: 'hsr1' already exists in 'hsr' [ 567.631142][T22688] Cannot create hsr debugfs directory [ 567.636811][T22688] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 567.647438][T22688] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 567.659534][T22688] hsr1: entered allmulticast mode [ 567.667379][T22688] macvlan0: entered allmulticast mode [ 567.672994][T22688] batadv0: entered allmulticast mode [ 567.679070][T22688] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 567.687432][T22688] macvlan0: left promiscuous mode [ 567.693460][T22688] batadv0: left promiscuous mode [ 567.778240][T22695] netlink: 'syz.1.4306': attribute type 16 has an invalid length. [ 567.790876][T22695] netlink: 'syz.1.4306': attribute type 16 has an invalid length. [ 568.059555][T22706] lo: entered promiscuous mode [ 568.083648][T22706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.436095][T22726] __nla_validate_parse: 3 callbacks suppressed [ 568.436113][T22726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4314'. [ 568.509739][T22728] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4313'. [ 568.521275][T22728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4313'. [ 568.620316][ T30] audit: type=1800 audit(1759705571.225:7): pid=22735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4315" name="memory.events" dev="tmpfs" ino=1481 res=0 errno=0 [ 568.691702][ T30] audit: type=1804 audit(1759705571.225:8): pid=22735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4315" name="memory.events" dev="tmpfs" ino=1481 res=1 errno=0 [ 568.919697][T22755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4321'. [ 569.059509][T22764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4323'. [ 569.170112][T22773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4323'. [ 569.209500][T22773] netlink: 34 bytes leftover after parsing attributes in process `syz.1.4323'. [ 569.935582][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 570.090438][T22817] netlink: 'syz.0.4334': attribute type 1 has an invalid length. [ 570.231319][T22822] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 570.337603][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4333'. [ 570.354357][T22822] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4333'. [ 570.367428][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4333'. [ 571.143057][T22867] IPVS: Scheduler module ip_vs_sip not found [ 571.340696][T22885] tipc: Enabled bearer , priority 0 [ 571.360076][T22881] netlink: 'syz.0.4350': attribute type 1 has an invalid length. [ 571.395933][T22881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.447150][T22883] syzkaller0: entered promiscuous mode [ 571.452694][T22883] syzkaller0: entered allmulticast mode [ 571.586723][T22881] bond5 (unregistering): Released all slaves [ 571.696683][T22900] netlink: 'syz.1.4356': attribute type 4 has an invalid length. [ 571.796800][T22898] tipc: Enabled bearer , priority 0 [ 571.806660][T22898] syzkaller0: entered promiscuous mode [ 571.812248][T22898] syzkaller0: entered allmulticast mode [ 571.873214][T22898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.914352][T22898] bond6: entered promiscuous mode [ 572.268865][T22898] tipc: Resetting bearer [ 572.321806][T22898] tipc: Disabling bearer [ 572.455346][T21280] tipc: Node number set to 1032300422 [ 572.747256][T22945] tipc: Enabling of bearer rejected, failed to enable media [ 572.799049][T22947] netlink: 'syz.4.4368': attribute type 1 has an invalid length. [ 572.955927][T22957] netlink: 'syz.0.4369': attribute type 1 has an invalid length. [ 572.977730][T22956] netlink: 'syz.0.4369': attribute type 1 has an invalid length. [ 572.986719][T22959] netlink: 'syz.2.4367': attribute type 6 has an invalid length. [ 573.020175][T22957] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 573.088506][T22956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.313342][T22975] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 573.506819][T22978] netlink: 'syz.0.4372': attribute type 1 has an invalid length. [ 573.536271][T22978] __nla_validate_parse: 8 callbacks suppressed [ 573.536288][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4372'. [ 573.594508][T22982] sch_fq: defrate 0 ignored. [ 573.724332][T22991] sctp: [Deprecated]: syz.2.4376 (pid 22991) Use of int in max_burst socket option. [ 573.724332][T22991] Use struct sctp_assoc_value instead [ 574.274785][T23034] geneve2: entered promiscuous mode [ 574.282373][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.283482][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 574.291313][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.308797][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.328430][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.448413][ T5956] IPVS: starting estimator thread 0... [ 574.454558][T23045] IPVS: sed: FWM 3 0x00000003 - no destination available [ 574.476641][T23045] IPVS: sed: FWM 3 0x00000003 - no destination available [ 574.535323][T23048] IPVS: using max 26 ests per chain, 62400 per kthread [ 574.595572][T23057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4394'. [ 574.618481][T23059] can: request_module (can-proto-3) failed. [ 574.624493][T23057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4394'. [ 574.637972][T23056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4394'. [ 574.658455][T23056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4394'. [ 574.914458][T23075] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 575.012367][T23092] netlink: 696 bytes leftover after parsing attributes in process `syz.2.4402'. [ 575.720892][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'. [ 575.759569][T23133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4411'. [ 575.787016][T23134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4411'. [ 577.094537][T23172] netlink: 'syz.3.4422': attribute type 1 has an invalid length. [ 577.340263][T23189] netlink: zone id is out of range [ 577.356603][T23189] netlink: zone id is out of range [ 577.366272][T23189] netlink: get zone limit has 8 unknown bytes [ 577.495899][T23198] netlink: 'syz.3.4430': attribute type 4 has an invalid length. [ 577.770445][T23217] netlink: 'syz.2.4437': attribute type 24 has an invalid length. [ 577.821737][T23217] bond6: option ad_actor_sys_prio: invalid value (0) [ 577.836505][T23217] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 577.861280][T23217] bond6 (unregistering): Released all slaves [ 578.093198][T23226] netlink: 'syz.2.4439': attribute type 10 has an invalid length. [ 578.221431][T23226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.230382][T23226] batadv0: entered promiscuous mode [ 578.239028][T23226] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 578.281199][T23227] bond0: (slave batadv0): Releasing backup interface [ 578.299493][T23227] batadv0 (unregistering): left promiscuous mode [ 578.447137][ T49] bridge_slave_1: left allmulticast mode [ 578.452940][ T49] bridge_slave_1: left promiscuous mode [ 578.461330][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.481332][ T49] bridge_slave_0: left allmulticast mode [ 578.491813][ T49] bridge_slave_0: left promiscuous mode [ 578.503480][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.690881][T23249] __nla_validate_parse: 6 callbacks suppressed [ 578.690906][T23249] netlink: 512 bytes leftover after parsing attributes in process `syz.3.4446'. [ 578.773363][ T49] ip6gretap0 (unregistering): left promiscuous mode [ 578.815432][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 579.077681][ T49] bond2 (unregistering): (slave gretap1): Releasing active interface [ 579.611110][ T49] bond0 (unregistering): (slave 30): Releasing backup interface [ 579.621430][ T49] : left promiscuous mode [ 579.628713][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.640322][ T49] bond_slave_1: left promiscuous mode [ 579.646365][ T49] bond0 (unregistering): Released all slaves [ 579.665137][ T49] bond1 (unregistering): Released all slaves [ 579.689028][ T49] bond2 (unregistering): Released all slaves [ 579.712326][ T49] bond3 (unregistering): Released all slaves [ 579.830927][ T49] bond4 (unregistering): (slave veth5): Releasing active interface [ 579.839741][ T49] bond4 (unregistering): Released all slaves [ 579.859296][ T49] bond5 (unregistering): Released all slaves [ 579.883460][ T49] bond6 (unregistering): Released all slaves [ 579.918657][ T49] bond7 (unregistering): Released all slaves [ 580.035449][ T49] bond8 (unregistering): Released all slaves [ 580.048697][ T49] bond9 (unregistering): (slave veth9): Releasing active interface [ 580.058049][ T49] bond9 (unregistering): Released all slaves [ 580.137214][T23279] bond4: entered promiscuous mode [ 580.142311][T23279] bond4: entered allmulticast mode [ 580.177905][T23279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.221475][T23283] tipc: Enabled bearer , priority 0 [ 580.252452][T23284] syzkaller0: entered promiscuous mode [ 580.267604][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 580.269163][T23284] syzkaller0: entered allmulticast mode [ 580.333881][ T49] tipc: Left network mode [ 580.469937][ T49] IPVS: stopping backup sync thread 6585 ... [ 580.517060][T23288] tipc: Resetting bearer [ 580.569965][T23288] tipc: Disabling bearer [ 580.612989][T23331] C: renamed from lo [ 580.620499][T23331] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 580.764829][T23342] netlink: 'syz.0.4466': attribute type 1 has an invalid length. [ 580.890540][T23351] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 580.911791][T23351] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 580.925598][T23351] bond6: (slave vcan1): making interface the new active one [ 580.933612][T23351] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 580.993989][T23342] bond6: (slave vcan2): The slave device specified does not support setting the MAC address [ 581.007716][T23342] bond6: (slave vcan2): Enslaving as a backup interface with an up link [ 581.029712][T23356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 581.056259][T23351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 581.072567][T23357] hsr0: entered promiscuous mode [ 581.078606][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4468'. [ 581.101935][T23357] hsr_slave_0: left promiscuous mode [ 581.110598][T23357] hsr_slave_1: left promiscuous mode [ 581.134663][T23357] hsr0 (unregistering): left promiscuous mode [ 581.147847][T23354] IPVS: set_ctl: invalid protocol: 12802 57.83.176.8:65274 [ 581.156792][T23354] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 581.206225][T23356] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 581.208632][T23359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.407710][T23359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.507121][T23359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.528699][ T49] veth1_to_bridge: left promiscuous mode [ 581.540965][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.550048][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.960764][ T49] team0 (unregistering): Port device team_slave_1 removed [ 582.393059][T23359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.664422][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 582.678395][ T3591] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.689690][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 582.697926][T23409] netlink: 'syz.3.4483': attribute type 12 has an invalid length. [ 582.792449][ T8775] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.834547][ T9386] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.887447][ T8775] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.990555][T23430] vlan2: entered promiscuous mode [ 583.071115][T23432] syzkaller1: entered promiscuous mode [ 583.076842][T23432] syzkaller1: entered allmulticast mode [ 583.094810][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4486'. [ 583.541417][T23451] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4493'. [ 583.683003][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4497'. [ 583.696083][T23461] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4497'. [ 583.718610][T23461] batadv1: entered promiscuous mode [ 583.723859][T23461] batadv1: entered allmulticast mode [ 583.939085][T23471] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4500'. [ 583.968512][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4501'. [ 583.982119][T23473] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4500'. [ 584.072750][T23478] warn_alloc: 1 callbacks suppressed [ 584.072768][T23478] syz.3.4501: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 584.165652][T23478] CPU: 0 UID: 0 PID: 23478 Comm: syz.3.4501 Not tainted syzkaller #0 PREEMPT(full) [ 584.165680][T23478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 584.165692][T23478] Call Trace: [ 584.165700][T23478] [ 584.165709][T23478] dump_stack_lvl+0x189/0x250 [ 584.165749][T23478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.165774][T23478] ? __pfx__printk+0x10/0x10 [ 584.165803][T23478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 584.165830][T23478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 584.165858][T23478] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 584.165887][T23478] warn_alloc+0x214/0x310 [ 584.165916][T23478] ? stack_depot_save_flags+0x40/0x860 [ 584.165948][T23478] ? __pfx_warn_alloc+0x10/0x10 [ 584.165977][T23478] ? kasan_save_track+0x4f/0x80 [ 584.165999][T23478] ? xskq_create+0x56/0x170 [ 584.166026][T23478] ? xsk_init_queue+0xb0/0x110 [ 584.166050][T23478] ? xsk_setsockopt+0x4dc/0x8d0 [ 584.166076][T23478] ? do_sock_setsockopt+0x179/0x1b0 [ 584.166096][T23478] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 584.166116][T23478] ? do_syscall_64+0xfa/0x3b0 [ 584.166135][T23478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.166163][T23478] __vmalloc_node_range_noprof+0x125/0x12f0 [ 584.166224][T23478] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.166258][T23478] ? __kasan_kmalloc+0x93/0xb0 [ 584.166293][T23478] vmalloc_user_noprof+0xad/0xf0 [ 584.166319][T23478] ? xskq_create+0xbf/0x170 [ 584.166351][T23478] xskq_create+0xbf/0x170 [ 584.166384][T23478] xsk_init_queue+0xb0/0x110 [ 584.166415][T23478] xsk_setsockopt+0x4dc/0x8d0 [ 584.166445][T23478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.166474][T23478] ? __pfx_aa_sk_perm+0x10/0x10 [ 584.166504][T23478] ? aa_sock_opt_perm+0xff/0x1b0 [ 584.166535][T23478] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 584.166564][T23478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.166593][T23478] do_sock_setsockopt+0x179/0x1b0 [ 584.166621][T23478] __x64_sys_setsockopt+0x13f/0x1b0 [ 584.166651][T23478] do_syscall_64+0xfa/0x3b0 [ 584.166669][T23478] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.166698][T23478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.166718][T23478] ? clear_bhb_loop+0x60/0xb0 [ 584.166741][T23478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.166759][T23478] RIP: 0033:0x7f9b84f8eec9 [ 584.166777][T23478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.166794][T23478] RSP: 002b:00007f9b85dd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.166815][T23478] RAX: ffffffffffffffda RBX: 00007f9b851e6090 RCX: 00007f9b84f8eec9 [ 584.166831][T23478] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 584.166844][T23478] RBP: 00007f9b85011f91 R08: 0000000000000004 R09: 0000000000000000 [ 584.166857][T23478] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.166869][T23478] R13: 00007f9b851e6128 R14: 00007f9b851e6090 R15: 00007ffcdc564ef8 [ 584.166903][T23478] [ 584.166912][T23478] Mem-Info: [ 584.478121][T23478] active_anon:4026 inactive_anon:0 isolated_anon:0 [ 584.478121][T23478] active_file:3076 inactive_file:40077 isolated_file:0 [ 584.478121][T23478] unevictable:768 dirty:185 writeback:0 [ 584.478121][T23478] slab_reclaimable:12857 slab_unreclaimable:165771 [ 584.478121][T23478] mapped:30286 shmem:1357 pagetables:1039 [ 584.478121][T23478] sec_pagetables:0 bounce:0 [ 584.478121][T23478] kernel_misc_reclaimable:0 [ 584.478121][T23478] free:1263077 free_pcp:11133 free_cma:0 [ 584.546988][ T49] IPVS: stop unused estimator thread 0... [ 584.577463][T23478] Node 0 active_anon:15804kB inactive_anon:0kB active_file:12304kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121244kB dirty:740kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13132kB pagetables:4048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 584.634903][T23478] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 584.684404][T23478] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.774024][T23478] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 584.793448][T23478] Node 0 DMA32 free:1148252kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15972kB inactive_anon:0kB active_file:12304kB inactive_file:159792kB unevictable:1536kB writepending:756kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:41444kB local_pcp:17732kB free_cma:0kB [ 584.969038][T23478] lowmem_reserve[]: 0 0 0 0 0 [ 584.991708][T23478] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 585.026169][T23478] lowmem_reserve[]: 0 0 0 0 0 [ 585.030910][T23478] Node 1 Normal free:3886388kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21396kB local_pcp:10184kB free_cma:0kB [ 585.063962][T23478] lowmem_reserve[]: 0 0 0 0 0 [ 585.068828][T23478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 585.082027][T23478] Node 0 DMA32: 1928*4kB (UME) 755*8kB (UME) 907*16kB (UME) 285*32kB (ME) 132*64kB (UME) 55*128kB (UME) 147*256kB (UM) 102*512kB (UM) 42*1024kB (UE) 12*2048kB (UME) 229*4096kB (UM) = 1148296kB [ 585.127599][T23497] tipc: Enabled bearer , priority 0 [ 585.134992][T23497] syzkaller0: entered promiscuous mode [ 585.141652][T23497] syzkaller0: entered allmulticast mode [ 585.151188][T23497] tipc: Resetting bearer [ 585.165360][T23478] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 585.212048][T23478] Node 1 Normal: 213*4kB (U) 56*8kB (UME) 56*16kB (UME) 75*32kB (UME) 29*64kB (UME) 6*128kB (UM) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886388kB [ 585.230976][T23478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.240721][T23478] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 585.251863][T23478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.269075][T23478] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 585.284460][T23478] 46457 total pagecache pages [ 585.306717][T23478] 0 pages in swap cache [ 585.310947][T23478] Free swap = 124996kB [ 585.315313][T23478] Total swap = 124996kB [ 585.319469][T23478] 2097051 pages RAM [ 585.323332][T23478] 0 pages HighMem/MovableOnly [ 585.351053][T23497] tipc: Resetting bearer [ 585.366797][T23478] 423781 pages reserved [ 585.371035][T23478] 0 pages cma reserved [ 585.387161][T23497] tipc: Disabling bearer [ 585.490295][T23510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4511'. [ 585.517026][T23513] netlink: 'syz.3.4510': attribute type 2 has an invalid length. [ 585.555915][T23510] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.578468][T23516] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 585.586547][T23516] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 585.736402][T23515] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 585.970993][T23538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4518'. [ 585.995543][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4518'. [ 586.113547][T23545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4521'. [ 586.134983][T23545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4521'. [ 586.146767][T23545] netlink: 'syz.3.4521': attribute type 1 has an invalid length. [ 586.702071][T23579] syzkaller0: entered promiscuous mode [ 586.708320][T23579] syzkaller0: entered allmulticast mode [ 586.827048][T23586] netlink: 'syz.3.4531': attribute type 1 has an invalid length. [ 586.878103][T23586] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4531'. [ 587.500446][T23611] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 587.510186][T23611] batadv_slave_0: entered promiscuous mode [ 587.517058][T23611] batadv_slave_0: left promiscuous mode [ 587.523981][T23611] mac80211_hwsim hwsim49 wlan0: left promiscuous mode [ 587.703737][T23627] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 588.203813][T23654] netlink: 'syz.1.4552': attribute type 3 has an invalid length. [ 588.557591][T23667] bond5: option tlb_dynamic_lb: invalid value (2) [ 588.566157][T23667] bond5 (unregistering): Released all slaves [ 588.853430][T23676] __nla_validate_parse: 10 callbacks suppressed [ 588.853447][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 588.949617][T23683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4559'. [ 589.108702][T23693] netlink: 'syz.3.4562': attribute type 1 has an invalid length. [ 589.140723][T23693] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 589.158003][T23697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4564'. [ 589.178029][T23695] netlink: 'syz.4.4563': attribute type 39 has an invalid length. [ 589.432895][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4567'. [ 589.452121][T23711] C: renamed from lo [ 589.477079][T23711] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 589.522645][T23721] netlink: 'syz.1.4571': attribute type 1 has an invalid length. [ 589.556014][T23718] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 589.631615][T23724] tipc: Enabled bearer , priority 0 [ 589.664054][T23724] syzkaller0: entered promiscuous mode [ 589.680197][T23724] syzkaller0: entered allmulticast mode [ 589.744426][T23724] tipc: Resetting bearer [ 589.767039][T23736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4575'. [ 589.785987][T23723] tipc: Resetting bearer [ 589.811877][T23723] tipc: Disabling bearer [ 589.847521][T23746] vlan0: entered promiscuous mode [ 589.852823][T23746] vlan0: entered allmulticast mode [ 589.858609][T23746] hsr_slave_1: entered allmulticast mode [ 589.885722][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4579'. [ 590.228899][T23766] netlink: 'syz.1.4584': attribute type 5 has an invalid length. [ 590.467944][T23787] netlink: 'syz.1.4589': attribute type 1 has an invalid length. [ 590.481972][T23787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4589'. [ 590.764249][T23806] IPv6: sit2: Disabled Multicast RS [ 590.989635][T23819] tipc: Enabled bearer , priority 0 [ 591.020215][T23819] syzkaller0: entered promiscuous mode [ 591.026223][T23819] syzkaller0: entered allmulticast mode [ 591.048746][T23819] tipc: Resetting bearer [ 591.184630][T23827] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4604'. [ 591.193842][T23827] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4604'. [ 591.247677][T23829] syzkaller1: entered promiscuous mode [ 591.253291][T23829] syzkaller1: entered allmulticast mode [ 591.727403][T23841] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 591.748297][T23841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.792292][T23818] tipc: Resetting bearer [ 591.814683][T23818] tipc: Disabling bearer [ 591.837665][T23856] vlan3: entered promiscuous mode [ 591.894232][T23863] tipc: Enabling of bearer rejected, already enabled [ 591.968805][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4615'. [ 591.991656][T23856] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 593.170441][T23925] netlink: 'syz.1.4629': attribute type 4 has an invalid length. [ 593.782830][T23962] netlink: 'syz.1.4641': attribute type 1 has an invalid length. [ 593.847934][T23962] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.861344][T23957] netlink: 'syz.4.4639': attribute type 83 has an invalid length. [ 593.884703][T23966] bond6: (slave geneve2): making interface the new active one [ 593.897229][T23966] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 594.357092][T23987] __nla_validate_parse: 6 callbacks suppressed [ 594.357110][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4646'. [ 594.810300][T24005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4650'. [ 594.820943][T24019] tipc: Enabling of bearer rejected, already enabled [ 594.893559][T24024] netlink: 'syz.4.4650': attribute type 10 has an invalid length. [ 594.912267][T24019] tipc: Resetting bearer [ 594.970936][T24024] !: entered promiscuous mode [ 594.977924][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 594.985095][T24024] bond0: (slave 0!): Enslaving as an active interface with an up link [ 595.021033][T24028] netlink: 'syz.0.4657': attribute type 2 has an invalid length. [ 595.172413][T24035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.182078][T24035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4660'. [ 595.195316][T24035] netlink: 'syz.1.4660': attribute type 30 has an invalid length. [ 595.203138][T24035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4660'. [ 595.357939][T24040] dvmrp8: entered allmulticast mode [ 595.412758][T24040] syzkaller0: entered promiscuous mode [ 595.430070][T24040] syzkaller0: entered allmulticast mode [ 596.288908][T24039] dvmrp8: left allmulticast mode [ 596.526735][T24074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'. [ 596.602624][T24079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4669'. [ 596.735415][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 596.767181][T24090] netlink: 'syz.4.4674': attribute type 4 has an invalid length. [ 596.982233][ T5844] block nbd2: Receive control failed (result -32) [ 597.049476][T24111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4681'. [ 597.121138][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4683'. [ 597.350797][T24126] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4686'. [ 597.446586][T24128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4687'. [ 597.484764][T24135] netlink: 'syz.3.4689': attribute type 33 has an invalid length. [ 597.492772][T24135] netlink: 'syz.3.4689': attribute type 17 has an invalid length. [ 597.520898][T24135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.641200][T21277] IPVS: starting estimator thread 0... [ 597.742063][T24137] tipc: Enabling of bearer rejected, failed to enable media [ 597.747893][T24143] IPVS: using max 27 ests per chain, 64800 per kthread [ 598.182132][T24171] netlink: 'syz.2.4699': attribute type 1 has an invalid length. [ 598.275129][T24182] netlink: 'syz.0.4700': attribute type 1 has an invalid length. [ 598.497861][T24182] 8021q: adding VLAN 0 to HW filter on device bond8 [ 599.101937][ T8770] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.110454][ T8770] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.119832][ T8770] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.136105][ T8770] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.113474][T24274] __nla_validate_parse: 8 callbacks suppressed [ 600.113492][T24274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4724'. [ 600.134887][T24271] netdevsim netdevsim0: Direct firmware load for ./bus failed with error -2 [ 600.144330][T24271] netdevsim netdevsim0: Falling back to sysfs fallback for: ./bus [ 600.572490][T24298] pimreg: entered allmulticast mode [ 600.688277][T24301] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4731'. [ 600.746683][T24304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4731'. [ 600.789776][T24301] 0ªX¹¦À: renamed from caif0 [ 600.798952][T24309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4731'. [ 600.853951][T24301] 0ªX¹¦À: entered allmulticast mode [ 600.895995][T24301] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 601.149470][T24323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4735'. [ 601.179158][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4735'. [ 601.382636][T24297] pimreg: left allmulticast mode [ 601.575898][T24337] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 601.585467][T24344] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 601.593082][T24344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.318183][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4748'. [ 602.327455][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 602.336698][T24378] validate_nla: 2 callbacks suppressed [ 602.336713][T24378] netlink: 'syz.3.4748': attribute type 1 has an invalid length. [ 602.350085][T24378] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4748'. [ 602.359423][T24378] block nbd3: Unsupported socket: should be TCP or UNIX. [ 602.552338][T24385] hsr0: entered promiscuous mode [ 602.560929][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4750'. [ 602.578564][T24385] hsr_slave_0: left promiscuous mode [ 602.585026][T24385] hsr_slave_1: left promiscuous mode [ 602.633865][T24385] hsr0 (unregistering): left promiscuous mode [ 603.824239][T24441] IPVS: Unknown mcast interface: vetN1_macvtap [ 604.147503][T24458] team0: Device gtp0 is of different type [ 604.886763][T24491] netlink: 'syz.4.4775': attribute type 1 has an invalid length. [ 605.256864][T24511] __nla_validate_parse: 9 callbacks suppressed [ 605.256883][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 605.300349][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4783'. [ 605.314335][T24515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4783'. [ 605.329342][T24515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4783'. [ 605.344690][T24513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4781'. [ 605.470060][T24517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.603296][T24513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4781'. [ 605.739125][T24524] bond7: entered promiscuous mode [ 605.750998][T24524] bond7: entered allmulticast mode [ 605.762592][T24524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 606.132481][T24517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.231931][T21281] IPVS: starting estimator thread 0... [ 606.288673][T24517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.325313][T24547] IPVS: using max 26 ests per chain, 62400 per kthread [ 606.421657][T24517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.762862][ T8770] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.783095][ T8770] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.796381][T24581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4795'. [ 606.823236][ T8770] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.832629][T24579] netlink: 'syz.1.4796': attribute type 10 has an invalid length. [ 606.906275][ T8774] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.916241][T24577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4795'. [ 607.017664][T24581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4795'. [ 607.133716][T24589] !: renamed from dummy0 [ 607.534562][T24608] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4802'. [ 607.908273][T24631] tipc: Enabling of bearer rejected, already enabled [ 609.153088][T24684] openvswitch: netlink: Message has 4 unknown bytes. [ 610.429544][T24737] batadv1: entered promiscuous mode [ 610.473615][T24740] __nla_validate_parse: 5 callbacks suppressed [ 610.473634][T24740] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4827'. [ 610.500503][T24742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4829'. [ 610.505304][T24740] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 610.766936][T24750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4831'. [ 610.815864][ T8774] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.889106][T24758] tipc: Enabling of bearer rejected, already enabled [ 610.905968][T24758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 611.104080][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4838'. [ 612.717126][T24828] tipc: Enabling of bearer rejected, failed to enable media [ 613.266175][T24866] ip6tnl3: entered promiscuous mode [ 613.329874][T24872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4868'. [ 613.361477][T24876] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4866'. [ 613.432706][T24879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4871'. [ 613.447855][T24882] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4873'. [ 613.943072][T24902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4877'. [ 613.981941][T24893] netlink: 'syz.3.4873': attribute type 6 has an invalid length. [ 614.162486][T24906] tipc: Enabled bearer , priority 0 [ 614.175066][T24906] syzkaller0: entered promiscuous mode [ 614.181659][T24906] syzkaller0: entered allmulticast mode [ 614.203680][T24906] tipc: Resetting bearer [ 614.223015][T24905] tipc: Resetting bearer [ 614.240735][T24905] tipc: Disabling bearer [ 614.790248][T24929] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 614.923626][T24939] 8021q: adding VLAN 0 to HW filter on device bond7 [ 615.406731][T24967] netlink: 'syz.2.4895': attribute type 3 has an invalid length. [ 615.426432][T24967] pim6reg1: entered promiscuous mode [ 615.433720][T24967] pim6reg1: entered allmulticast mode [ 615.532322][T24983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4899'. [ 615.702453][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4903'. [ 615.791667][T25005] netlink: 'syz.0.4904': attribute type 1 has an invalid length. [ 615.800428][T25005] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4904'. [ 615.824855][T25005] netlink: 'syz.0.4904': attribute type 1 has an invalid length. [ 615.835104][T25005] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4904'. [ 615.843149][T25008] vlan2: entered allmulticast mode [ 615.849470][T25008] bridge_slave_0: entered allmulticast mode [ 616.157370][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4911'. [ 616.577154][T24857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.829757][T25049] tipc: Enabling of bearer rejected, already enabled [ 617.001092][T24858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.009309][T24858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.100347][T25068] pim6reg1: entered promiscuous mode [ 617.126898][T25068] pim6reg1: entered allmulticast mode [ 617.271267][T25078] netlink: 'syz.2.4923': attribute type 21 has an invalid length. [ 617.280093][T25078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4923'. [ 617.293967][T25079] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4926'. [ 617.319922][T25081] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.358750][T25084] netlink: 'syz.1.4928': attribute type 1 has an invalid length. [ 617.799120][T25105] lo: left promiscuous mode [ 617.832234][T25105] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 618.294511][T25120] IPVS: Scheduler module ip_vs_ not found [ 618.827641][T25147] netlink: 'syz.0.4942': attribute type 13 has an invalid length. [ 618.839226][T25147] netlink: 'syz.0.4942': attribute type 17 has an invalid length. [ 618.960861][T25147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.988384][T25147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.094528][T25203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4956'. [ 620.143669][T25199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4956'. [ 620.157854][T25207] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4959'. [ 620.714387][T25226] dvmrp0: entered allmulticast mode [ 620.804402][T25231] __nla_validate_parse: 1 callbacks suppressed [ 620.804420][T25231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4962'. [ 620.823498][T25231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4962'. [ 621.080532][T25237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4965'. [ 621.402977][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4968'. [ 621.413620][T25249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4968'. [ 622.174127][T25276] hsr0: left allmulticast mode [ 622.179580][T25276] hsr_slave_0: left allmulticast mode [ 622.184971][T25276] macsec1: left allmulticast mode [ 622.247915][T25276] tipc: Resetting bearer [ 622.261360][T25276] syzkaller0: left promiscuous mode [ 622.268981][T25276] syzkaller0: left allmulticast mode [ 622.393211][T25276] bond7: left promiscuous mode [ 622.401993][T25276] bond7: left allmulticast mode [ 622.410013][T25276] ip6tnl3: left promiscuous mode [ 622.439089][T25281] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 622.459239][T24852] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.476454][T24852] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.484842][T24852] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.518599][T24852] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.588858][T24852] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.604839][T24852] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.641962][T24852] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.662772][T24852] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.148857][T25312] netlink: 'syz.3.4981': attribute type 1 has an invalid length. [ 623.459741][T25316] batman_adv: batadv0: Interface deactivated: gretap1 [ 623.986758][T25316] bond0: left allmulticast mode [ 623.995790][T25316] bond_slave_0: left allmulticast mode [ 624.001272][T25316] bond_slave_1: left allmulticast mode [ 624.007801][T25316] team0: left allmulticast mode [ 624.012836][T25316] team_slave_0: left allmulticast mode [ 624.037658][T25316] team_slave_1: left allmulticast mode [ 624.053310][T25316] bond0: left promiscuous mode [ 624.073507][T25316] bond_slave_0: left promiscuous mode [ 624.087021][T25316] bond_slave_1: left promiscuous mode [ 624.092857][T25316] team0: left promiscuous mode [ 624.137375][T25316] team_slave_0: left promiscuous mode [ 624.151624][T25316] team_slave_1: left promiscuous mode [ 624.344558][ T8775] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.363869][ T8775] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.385930][ T8775] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.412000][ T8775] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.608590][T25364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4993'. [ 624.634897][T25364] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4993'. [ 624.668137][T25364] netlink: 'syz.3.4993': attribute type 5 has an invalid length. [ 624.692788][T25364] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4993'. [ 624.802443][T25367] bridge: RTM_NEWNEIGH with invalid ether address [ 624.824398][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4997'. [ 624.985861][T25377] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 625.158103][T25379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'. [ 625.746313][T25413] netlink: 'syz.0.5010': attribute type 6 has an invalid length. [ 625.754076][T25413] netlink: 'syz.0.5010': attribute type 5 has an invalid length. [ 625.829845][T25413] netlink: 'syz.0.5010': attribute type 4 has an invalid length. [ 625.854955][T25413] netlink: 'syz.0.5010': attribute type 4 has an invalid length. [ 625.882001][T25428] 8021q: VLANs not supported on ipvlan0 [ 625.909618][T25413] __nla_validate_parse: 9 callbacks suppressed [ 625.909642][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5010'. [ 625.945295][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5010'. [ 626.012134][T25434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5013'. [ 626.055481][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5013'. [ 626.103480][T25431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5014'. [ 626.245841][T25431] bond1: entered promiscuous mode [ 626.263627][T25431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.290494][T25447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.299064][T25447] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 626.313325][T25447] bond1: (slave vcan0): Error -95 calling set_mac_address [ 626.359542][T25440] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5016'. [ 626.364870][T25451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5018'. [ 626.443140][T25461] ipvlan0: entered promiscuous mode [ 626.450041][T25461] ipvlan0: left promiscuous mode [ 626.797385][T25475] netlink: 'syz.3.5024': attribute type 1 has an invalid length. [ 627.026919][T25476] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 627.038225][T25476] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 627.080628][T25475] macvlan1: entered promiscuous mode [ 627.086038][T25475] macvlan1: entered allmulticast mode [ 627.111772][T25480] syzkaller0: entered promiscuous mode [ 627.119017][T25480] syzkaller0: entered allmulticast mode [ 627.264413][T25486] syzkaller1: entered promiscuous mode [ 627.281566][T25486] syzkaller1: entered allmulticast mode [ 627.411785][T25501] netlink: 'syz.4.5028': attribute type 5 has an invalid length. [ 627.456785][T25496] netlink: 'syz.4.5028': attribute type 6 has an invalid length. [ 627.574568][T25509] netlink: 'syz.3.5030': attribute type 2 has an invalid length. [ 627.596725][T25509] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.5030'. [ 627.814425][T25525] netlink: 212860 bytes leftover after parsing attributes in process `syz.1.5037'. [ 627.830466][T25530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 629.147218][T25569] bridge12: entered promiscuous mode [ 629.217247][T25572] netlink: 'syz.1.5048': attribute type 12 has an invalid length. [ 629.418176][T25585] netlink: 'syz.2.5050': attribute type 4 has an invalid length. [ 629.942919][T25622] netlink: 'syz.2.5063': attribute type 2 has an invalid length. [ 630.930560][T25608] syz.4.5060: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 630.951493][T25608] CPU: 0 UID: 0 PID: 25608 Comm: syz.4.5060 Not tainted syzkaller #0 PREEMPT(full) [ 630.951509][T25608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 630.951516][T25608] Call Trace: [ 630.951521][T25608] [ 630.951525][T25608] dump_stack_lvl+0x189/0x250 [ 630.951546][T25608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.951559][T25608] ? __pfx__printk+0x10/0x10 [ 630.951575][T25608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 630.951589][T25608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 630.951603][T25608] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 630.951618][T25608] warn_alloc+0x214/0x310 [ 630.951635][T25608] ? __pfx_warn_alloc+0x10/0x10 [ 630.951654][T25608] ? __get_vm_area_node+0x28f/0x300 [ 630.951668][T25608] ? veth_dev_init+0x363/0x570 [ 630.951682][T25608] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 630.951694][T25608] ? veth_newlink+0x5d4/0xa60 [ 630.951719][T25608] ? alloc_pages_mpol+0x3cd/0x4a0 [ 630.951733][T25608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 630.951745][T25608] ? __kasan_kmalloc_large+0x1c/0xa0 [ 630.951759][T25608] ? rcu_is_watching+0x15/0xb0 [ 630.951772][T25608] ? veth_dev_init+0x363/0x570 [ 630.951782][T25608] ? veth_dev_init+0x363/0x570 [ 630.951793][T25608] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 630.951806][T25608] ? veth_dev_init+0x363/0x570 [ 630.951821][T25608] veth_dev_init+0x363/0x570 [ 630.951837][T25608] register_netdevice+0x6bf/0x1ae0 [ 630.951858][T25608] ? snprintf+0xda/0x120 [ 630.951873][T25608] ? __pfx_register_netdevice+0x10/0x10 [ 630.951885][T25608] ? __pfx_snprintf+0x10/0x10 [ 630.951899][T25608] ? __asan_memset+0x22/0x50 [ 630.951909][T25608] ? dev_addr_mod+0x2ce/0x3d0 [ 630.951925][T25608] veth_newlink+0x5d4/0xa60 [ 630.951938][T25608] ? __pfx_veth_newlink+0x10/0x10 [ 630.951950][T25608] ? css_rstat_updated+0x23a/0x4f0 [ 630.952000][T25608] ? validate_linkmsg+0x765/0x950 [ 630.952022][T25608] ? __pfx_veth_newlink+0x10/0x10 [ 630.952034][T25608] rtnl_newlink_create+0x310/0xb00 [ 630.952048][T25608] ? __mutex_lock+0x5bb/0x1350 [ 630.952067][T25608] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 630.952081][T25608] ? __pfx___mutex_lock+0x10/0x10 [ 630.952097][T25608] ? ns_capable+0x8a/0xf0 [ 630.952110][T25608] rtnl_newlink+0x16e4/0x1c80 [ 630.952132][T25608] ? __pfx_rtnl_newlink+0x10/0x10 [ 630.952152][T25608] ? __pfx___schedule+0x10/0x10 [ 630.952241][T25608] ? __dev_queue_xmit+0x1d79/0x3b50 [ 630.952259][T25608] ? __lock_acquire+0xab9/0xd20 [ 630.952285][T25608] ? __pfx_rtnl_newlink+0x10/0x10 [ 630.952294][T25608] rtnetlink_rcv_msg+0x7cc/0xb70 [ 630.952306][T25608] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 630.952316][T25608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 630.952329][T25608] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 630.952350][T25608] netlink_rcv_skb+0x208/0x470 [ 630.952360][T25608] ? rcu_is_watching+0x15/0xb0 [ 630.952371][T25608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 630.952382][T25608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.952399][T25608] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.952414][T25608] netlink_unicast+0x82c/0x9e0 [ 630.952434][T25608] ? __pfx_netlink_unicast+0x10/0x10 [ 630.952451][T25608] ? netlink_sendmsg+0x642/0xb30 [ 630.952460][T25608] ? skb_put+0x11b/0x210 [ 630.952473][T25608] netlink_sendmsg+0x805/0xb30 [ 630.952489][T25608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.952502][T25608] ? aa_sock_msg_perm+0xf1/0x1d0 [ 630.952517][T25608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.952532][T25608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.952543][T25608] __sock_sendmsg+0x21c/0x270 [ 630.952560][T25608] ____sys_sendmsg+0x505/0x830 [ 630.952575][T25608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.952592][T25608] ? import_iovec+0x74/0xa0 [ 630.952607][T25608] ___sys_sendmsg+0x21f/0x2a0 [ 630.952620][T25608] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.952654][T25608] ? __fget_files+0x2a/0x420 [ 630.952667][T25608] ? __fget_files+0x3a0/0x420 [ 630.952686][T25608] __x64_sys_sendmsg+0x19b/0x260 [ 630.952700][T25608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.952718][T25608] ? rcu_is_watching+0x15/0xb0 [ 630.952732][T25608] ? do_syscall_64+0xbe/0x3b0 [ 630.952745][T25608] do_syscall_64+0xfa/0x3b0 [ 630.952754][T25608] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.952769][T25608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.952780][T25608] ? clear_bhb_loop+0x60/0xb0 [ 630.952792][T25608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.952801][T25608] RIP: 0033:0x7fef7238eec9 [ 630.952812][T25608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.952821][T25608] RSP: 002b:00007fef705f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.952833][T25608] RAX: ffffffffffffffda RBX: 00007fef725e5fa0 RCX: 00007fef7238eec9 [ 630.952840][T25608] RDX: 8ae257a062cc3564 RSI: 0000200000000200 RDI: 0000000000000006 [ 630.952847][T25608] RBP: 00007fef72411f91 R08: 0000000000000000 R09: 0000000000000000 [ 630.952853][T25608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.952859][T25608] R13: 00007fef725e6038 R14: 00007fef725e5fa0 R15: 00007ffed1baf918 [ 630.952877][T25608] [ 630.952881][T25608] Mem-Info: [ 631.466846][T25608] active_anon:5588 inactive_anon:0 isolated_anon:0 [ 631.466846][T25608] active_file:3076 inactive_file:40095 isolated_file:0 [ 631.466846][T25608] unevictable:768 dirty:102 writeback:0 [ 631.466846][T25608] slab_reclaimable:12773 slab_unreclaimable:150243 [ 631.466846][T25608] mapped:32288 shmem:1357 pagetables:1011 [ 631.466846][T25608] sec_pagetables:0 bounce:0 [ 631.466846][T25608] kernel_misc_reclaimable:0 [ 631.466846][T25608] free:1272421 free_pcp:12170 free_cma:0 [ 631.512658][T25608] Node 0 active_anon:22352kB inactive_anon:0kB active_file:12304kB inactive_file:160176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129152kB dirty:408kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13404kB pagetables:3936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 631.545927][T25608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 631.576500][T25608] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 631.605759][T25608] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 631.611510][T25608] Node 0 DMA32 free:1187932kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22312kB inactive_anon:0kB active_file:12304kB inactive_file:159864kB unevictable:1536kB writepending:408kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:27256kB local_pcp:10812kB free_cma:0kB [ 631.644182][T25608] lowmem_reserve[]: 0 0 0 0 0 [ 631.649183][T25608] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 631.677948][T25608] lowmem_reserve[]: 0 0 0 0 0 [ 631.682631][T25608] Node 1 Normal free:3886388kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21416kB local_pcp:10184kB free_cma:0kB [ 631.714298][T25608] lowmem_reserve[]: 0 0 0 0 0 [ 631.719278][T25608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 631.732323][T25608] Node 0 DMA32: 1105*4kB (UM) 854*8kB (UME) 764*16kB (UME) 1487*32kB (UME) 263*64kB (UME) 72*128kB (UME) 117*256kB (UM) 100*512kB (UM) 36*1024kB (UME) 5*2048kB (UE) 235*4096kB (UM) = 1187924kB [ 631.751621][T25608] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 631.763632][T25608] Node 1 Normal: 213*4kB (U) 56*8kB (UME) 56*16kB (UME) 75*32kB (UME) 29*64kB (UME) 6*128kB (UM) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886388kB [ 631.781998][T25608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.792049][T25608] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 631.801372][T25608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.811014][T25608] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 631.820542][T25608] 44525 total pagecache pages [ 631.825630][T25608] 0 pages in swap cache [ 631.829762][T25608] Free swap = 124996kB [ 631.833885][T25608] Total swap = 124996kB [ 631.838396][T25608] 2097051 pages RAM [ 631.842188][T25608] 0 pages HighMem/MovableOnly [ 631.847108][T25608] 423781 pages reserved [ 631.851256][T25608] 0 pages cma reserved [ 633.215478][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 634.936749][T25720] __nla_validate_parse: 9 callbacks suppressed [ 634.936769][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5086'. [ 635.146434][T25728] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5088'. [ 635.237889][T25735] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 635.453537][T25745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5093'. [ 635.496490][T25745] 8021q: adding VLAN 0 to HW filter on device bond9 [ 635.637471][T25751] netlink: 'syz.3.5092': attribute type 10 has an invalid length. [ 635.656575][T25759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5096'. [ 635.657383][T25745] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 635.671790][T25751] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5092'. [ 635.718125][T25745] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 635.804049][T25751] batman_adv: batadv0: Adding interface: virt_wifi0 [ 635.811230][T25751] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.838650][T25751] batman_adv: batadv0: Interface activated: virt_wifi0 [ 636.888657][T25820] IPv6: Can't replace route, no match found [ 636.931933][T25822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.353927][T25842] netlink: 'syz.2.5113': attribute type 10 has an invalid length. [ 637.369413][T25841] netlink: 'syz.2.5113': attribute type 10 has an invalid length. [ 637.718768][T25857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5115'. [ 637.804266][T25863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.878134][T25863] vxcan3: entered allmulticast mode [ 637.884972][T25866] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5119'. [ 638.004006][T25871] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5119'. [ 638.341060][T25884] netlink: 'syz.2.5124': attribute type 29 has an invalid length. [ 638.413326][T25884] netlink: 'syz.2.5124': attribute type 29 has an invalid length. [ 638.472803][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5126'. [ 638.476524][T25884] netlink: 604 bytes leftover after parsing attributes in process `syz.2.5124'. [ 638.482317][T25889] 8021q: VLANs not supported on bond0 [ 638.494052][T25884] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 638.724348][T25893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.778037][T25893] tipc: Failed to remove unknown binding: 66,1,1/1032300422:1686744649/1686744651 [ 638.792448][T25893] tipc: Failed to remove unknown binding: 66,1,1/1032300422:1686744649/1686744651 [ 638.801918][T25893] tipc: Failed to remove unknown binding: 66,1,1/1032300422:1686744649/1686744651 [ 638.885819][T25897] netlink: 'syz.4.5129': attribute type 1 has an invalid length. [ 639.121802][T25917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.133425][ T5848] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.138739][T25915] macvlan0: entered promiscuous mode [ 639.151951][T25915] batadv0: entered promiscuous mode [ 639.160503][T25915] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 639.172670][T25915] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 639.183642][T25915] hsr1: entered allmulticast mode [ 639.190470][T25915] macvlan0: entered allmulticast mode [ 639.197046][T25915] batadv0: entered allmulticast mode [ 639.216735][T25915] macvlan0: left promiscuous mode [ 639.227555][T25915] batadv0: left promiscuous mode [ 639.361285][T25917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.726319][T25942] vlan0: entered promiscuous mode [ 639.732170][T25942] vlan0: entered allmulticast mode [ 639.738332][T25942] bond0: entered allmulticast mode [ 639.900576][T25952] netlink: 'syz.0.5142': attribute type 10 has an invalid length. [ 639.938479][T25952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.950019][T25952] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 639.982547][T25961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.993397][T25961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.013304][T25961] batman_adv: batadv0: Removing interface: gretap1 [ 640.037826][T25961] bond0: (slave batadv0): Releasing backup interface [ 640.254523][T25976] __nla_validate_parse: 5 callbacks suppressed [ 640.254543][T25976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5147'. [ 640.616785][T25997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5154'. [ 695.298523][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5158'. [ 695.396260][T26030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5161'. [ 695.582444][T26044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5165'. [ 695.641762][T26045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5165'. [ 695.849044][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5170'. [ 695.948863][T26072] netlink: 'syz.0.5171': attribute type 4 has an invalid length. [ 696.149903][T26080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5174'. [ 696.534189][T26100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5182'. [ 696.624258][T26100] nbd: must specify a size in bytes for the device [ 697.380435][T26138] netlink: 'syz.3.5191': attribute type 1 has an invalid length. [ 697.388978][T26139] netlink: 'syz.3.5191': attribute type 1 has an invalid length. [ 697.426958][T26138] bond9: entered promiscuous mode [ 697.435770][T26138] 8021q: adding VLAN 0 to HW filter on device bond9 [ 697.538196][T26145] netlink: 'syz.4.5190': attribute type 30 has an invalid length. [ 697.781710][T26154] syzkaller1: entered promiscuous mode [ 697.787574][T26154] syzkaller1: entered allmulticast mode [ 698.090876][T26173] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5200'. [ 698.102077][T26173] 0ªX¹¦À: renamed from caif0 [ 698.129226][T26173] 0ªX¹¦À: entered allmulticast mode [ 698.134621][T26173] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 698.244150][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5198'. [ 701.162143][T26204] netlink: 'syz.4.5208': attribute type 7 has an invalid length. [ 701.221260][T26210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5210'. [ 701.255448][T26210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5210'. [ 701.335956][T26218] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5212'. [ 701.345000][T26218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5212'. [ 701.383537][T26223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5215'. [ 701.384374][T26220] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 701.415844][T26220] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 701.468250][T26231] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 701.636838][T26238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 701.668026][T26238] tipc: Enabling of bearer rejected, already enabled [ 701.686809][T26238] syzkaller0: entered promiscuous mode [ 701.692288][T26238] syzkaller0: entered allmulticast mode [ 701.940081][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5227'. [ 702.492331][T26269] netlink: 'syz.4.5229': attribute type 2 has an invalid length. [ 702.520440][T26269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5229'. [ 702.798670][T26277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5231'. [ 702.986679][T26291] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5234'. [ 703.246793][T26299] netlink: 'syz.3.5236': attribute type 10 has an invalid length. [ 703.469165][T26304] pim6reg: entered allmulticast mode [ 703.521944][T26302] pim6reg: left allmulticast mode [ 704.109530][T26345] macvtap1: entered allmulticast mode [ 704.114948][T26345] veth1_vlan: entered allmulticast mode [ 704.123837][T26345] veth1_vlan: left allmulticast mode [ 704.302114][T26347] vlan2: entered promiscuous mode [ 704.311659][T26347] !: entered promiscuous mode [ 704.713966][T26375] netlink: 'syz.2.5256': attribute type 5 has an invalid length. [ 704.882119][T26382] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 704.944726][T26382] dvmrp1: linktype set to 773 [ 705.188541][T26406] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 705.313629][T26414] macvtap1: entered allmulticast mode [ 705.330116][T26414] bridge0: entered allmulticast mode [ 705.337454][T26414] bridge0: port 1(macvtap1) entered blocking state [ 705.344778][T26414] bridge0: port 1(macvtap1) entered disabled state [ 705.363996][T26414] bridge0: left allmulticast mode [ 705.758645][T26387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 705.764581][T26387] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 705.864071][T26387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 705.892662][T26387] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 705.946411][T26387] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 705.952336][T26387] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 705.993912][T26387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 706.016875][T26387] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 706.175416][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 706.494948][T26479] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 707.007039][T26493] __nla_validate_parse: 13 callbacks suppressed [ 707.007058][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5283'. [ 707.199595][T26504] netlink: 'syz.4.5288': attribute type 1 has an invalid length. [ 707.246907][T26504] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.265881][T26504] vlan2: entered promiscuous mode [ 707.270927][T26504] bond7: entered promiscuous mode [ 707.276297][T26504] vlan2: entered allmulticast mode [ 707.281414][T26504] bond7: entered allmulticast mode [ 707.341357][T26504] bond7: (slave gretap1): making interface the new active one [ 707.349074][T26504] gretap1: entered promiscuous mode [ 707.354419][T26504] gretap1: entered allmulticast mode [ 707.362542][T26504] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 707.976461][T26561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.418143][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5305'. [ 708.443995][T26578] syzkaller1: entered promiscuous mode [ 708.449834][T26578] syzkaller1: entered allmulticast mode [ 708.598880][T26584] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5307'. [ 708.865623][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5311'. [ 708.897566][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5311'. [ 708.925418][T26599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.111612][T26611] syzkaller0: entered promiscuous mode [ 709.123044][T26611] syzkaller0: entered allmulticast mode [ 709.432936][T26626] tipc: Enabled bearer , priority 0 [ 709.440674][T26632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'. [ 709.567660][T26626] tipc: Resetting bearer [ 709.580252][T26626] tipc: Disabling bearer [ 709.596910][T26635] tun0: tun_chr_ioctl cmd 2147767521 [ 709.807368][T26647] netlink: 'syz.1.5323': attribute type 1 has an invalid length. [ 709.815913][T26647] netlink: 'syz.1.5323': attribute type 2 has an invalid length. [ 709.833968][T26647] netlink: 'syz.1.5323': attribute type 1 has an invalid length. [ 709.854126][T26647] netlink: 'syz.1.5323': attribute type 2 has an invalid length. [ 710.142085][T26659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5326'. [ 710.154887][T26661] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 710.272072][T26665] netlink: 'syz.2.5328': attribute type 10 has an invalid length. [ 710.293855][T26664] netlink: 'syz.2.5328': attribute type 10 has an invalid length. [ 710.312543][T26669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5329'. [ 710.323040][T26665] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.367093][T26665] team0: entered promiscuous mode [ 710.402140][T26665] team0: entered allmulticast mode [ 710.418934][T26665] bond0: (slave team0): Enslaving as an active interface with an up link [ 710.547006][T26673] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 710.572649][T26681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'. [ 710.583869][T26681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5332'. [ 710.591629][T26673] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 710.623904][T26678] macvlan2: entered promiscuous mode [ 710.629771][T26678] macvlan2: entered allmulticast mode [ 710.664470][T26681] geneve3: entered promiscuous mode [ 710.673166][T26681] geneve3: entered allmulticast mode [ 711.027134][T26698] syzkaller0: entered promiscuous mode [ 711.032631][T26698] syzkaller0: entered allmulticast mode [ 711.089468][T26710] syzkaller0: left allmulticast mode [ 711.246273][T26728] bond0: Device is already in use. [ 712.594446][T26789] netlink: 'syz.2.5361': attribute type 64 has an invalid length. [ 712.922715][T26803] __nla_validate_parse: 3 callbacks suppressed [ 712.922734][T26803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5363'. [ 712.990362][T26807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.413036][T26825] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5370'. [ 713.428497][T26825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5370'. [ 713.542070][T26828] macvlan0: entered promiscuous mode [ 713.548678][T26828] batadv0: entered promiscuous mode [ 713.554993][T26828] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 713.565298][T26828] hsr1: entered allmulticast mode [ 713.575263][T26828] macvlan0: left promiscuous mode [ 713.596914][T26828] batadv0: left promiscuous mode [ 713.783123][T26846] sctp: [Deprecated]: syz.3.5376 (pid 26846) Use of int in max_burst socket option. [ 713.783123][T26846] Use struct sctp_assoc_value instead [ 713.850051][T26847] bond10 (unregistering): Released all slaves [ 714.134964][T26862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.927555][T26871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5383'. [ 714.996358][T26873] netlink: 'syz.4.5384': attribute type 2 has an invalid length. [ 715.014056][T26873] netlink: 'syz.4.5384': attribute type 2 has an invalid length. [ 715.222205][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5386'. [ 715.424341][T26896] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5390'. [ 715.442500][T26896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5390'. [ 715.454102][T26896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5390'. [ 715.496391][T26896] batadv0 (unregistering): left promiscuous mode [ 716.045356][T26915] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5394'. [ 716.504714][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5398'. [ 716.867938][T26966] ip6gre1: entered allmulticast mode [ 717.417358][T27001] netlink: 'syz.3.5413': attribute type 4 has an invalid length. [ 717.606514][T27012] macsec0: entered promiscuous mode [ 717.613491][T27012] macsec0: entered allmulticast mode [ 717.630238][T27012] veth1_macvtap: entered allmulticast mode [ 717.671647][T27012] macsec0: left promiscuous mode [ 717.692269][T27012] macsec0: left allmulticast mode [ 717.704756][T27012] veth1_macvtap: left allmulticast mode [ 717.824502][T27028] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 718.393068][T27071] tipc: Enabled bearer , priority 0 [ 718.418796][T27063] syzkaller0: entered promiscuous mode [ 718.424287][T27063] syzkaller0: entered allmulticast mode [ 718.534405][T27079] sctp: [Deprecated]: syz.1.5430 (pid 27079) Use of int in max_burst socket option deprecated. [ 718.534405][T27079] Use struct sctp_assoc_value instead [ 718.559860][T27063] tipc: Resetting bearer [ 718.635843][T27061] tipc: Resetting bearer [ 718.658921][T27061] tipc: Disabling bearer [ 718.837237][T27098] __nla_validate_parse: 7 callbacks suppressed [ 718.837258][T27098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5432'. [ 719.417809][T27124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5439'. [ 719.827298][T27154] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5445'. [ 719.845454][T27154] netlink: 'syz.2.5445': attribute type 4 has an invalid length. [ 719.853373][T27154] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5445'. [ 719.887275][T27154] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5445'. [ 719.906152][T27157] netlink: 'syz.2.5445': attribute type 4 has an invalid length. [ 719.917093][T27157] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5445'. [ 720.108423][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5446'. [ 721.039748][T27201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5458'. [ 721.043315][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5456'. [ 721.058693][T27201] netlink: 312 bytes leftover after parsing attributes in process `syz.3.5458'. [ 721.282307][T27208] 8021q: adding VLAN 0 to HW filter on device bond10 [ 721.337148][T27211] syzkaller0: entered promiscuous mode [ 721.345465][T27211] syzkaller0: entered allmulticast mode [ 721.459343][T27217] netlink: 'syz.4.5462': attribute type 10 has an invalid length. [ 721.509835][T27208] bond10 (unregistering): Released all slaves [ 721.524042][T27220] netlink: 'syz.4.5462': attribute type 10 has an invalid length. [ 722.503397][T27262] netlink: 'syz.1.5472': attribute type 4 has an invalid length. [ 722.613029][T27268] nbd: couldn't find a device at index 0 [ 722.833204][T27281] netlink: 'syz.3.5477': attribute type 7 has an invalid length. [ 723.076304][T27296] netlink: 'syz.4.5478': attribute type 10 has an invalid length. [ 723.159101][T27296] bond0: (slave 0!): Releasing backup interface [ 723.208323][T27296] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 723.389585][T27310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.107173][T27350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.109675][T27351] netlink: 'syz.1.5494': attribute type 1 has an invalid length. [ 724.194955][T27351] 8021q: adding VLAN 0 to HW filter on device bond11 [ 724.248273][T27351] vlan2: entered allmulticast mode [ 724.268342][T27351] veth1: entered allmulticast mode [ 724.322151][T27363] team0: Device gtp0 is of different type [ 724.478943][T27371] geneve2: entered promiscuous mode [ 724.498262][ T6329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.506863][ T6329] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.515267][ T6329] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.545385][ T6329] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.696211][T27379] macvtap1: entered allmulticast mode [ 724.725252][T27379] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 724.764414][T27379] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 725.354647][T27392] __nla_validate_parse: 8 callbacks suppressed [ 725.354667][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5504'. [ 725.407079][T27392] gtp2: entered promiscuous mode [ 725.412043][T27392] gtp2: entered allmulticast mode [ 725.776141][T24857] wlan1: Trigger new scan to find an IBSS to join [ 726.157918][T27397] netlink: 'syz.0.5506': attribute type 6 has an invalid length. [ 728.815706][T24848] wlan1: Trigger new scan to find an IBSS to join [ 731.775852][ T6881] wlan1: Trigger new scan to find an IBSS to join [ 732.655792][ T6881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.780766][T27422] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 738.628697][T27467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'. [ 738.701777][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 738.727931][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5528'. [ 738.859557][T27481] netlink: 'syz.4.5532': attribute type 1 has an invalid length. [ 738.883737][T27481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5532'. [ 739.081072][T27500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5537'. [ 739.184722][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5535'. [ 739.205730][T27508] netlink: 'syz.4.5539': attribute type 12 has an invalid length. [ 739.422638][T27523] ------------[ cut here ]------------ [ 739.428665][T27523] ida_free called for id=1167 which is not allocated. [ 739.437586][T27523] WARNING: CPU: 1 PID: 27523 at lib/idr.c:592 ida_free+0x280/0x310 [ 739.445589][T27523] Modules linked in: [ 739.449545][T27523] CPU: 1 UID: 0 PID: 27523 Comm: syz.4.5543 Not tainted syzkaller #0 PREEMPT(full) [ 739.459183][T27523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.469706][T27523] RIP: 0010:ida_free+0x280/0x310 [ 739.474656][T27523] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 739.494413][T27523] RSP: 0018:ffffc9000ffa7880 EFLAGS: 00010246 [ 739.500675][T27523] RAX: bd4e1fefd5fd7400 RBX: 0000000000000a06 RCX: ffff888053850000 [ 739.508877][T27523] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 739.516924][T27523] RBP: ffffc9000ffa7968 R08: 0000000000000003 R09: 0000000000000004 [ 739.524905][T27523] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92001ff4f14 [ 739.532981][T27523] R13: dffffc0000000000 R14: ffff88802b4c0400 R15: 000000000000048f [ 739.541004][T27523] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 739.549992][T27523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.556663][T27523] CR2: 0000000000000000 CR3: 0000000060420000 CR4: 00000000003526f0 [ 739.564643][T27523] Call Trace: [ 739.567981][T27523] [ 739.570919][T27523] ? __pfx_ida_free+0x10/0x10 [ 739.575658][T27523] ? namespace_unlock+0x486/0x760 [ 739.580693][T27523] free_mnt_ns+0x52/0xe0 [ 739.584927][T27523] namespace_unlock+0x529/0x760 [ 739.589826][T27523] ? __pfx_namespace_unlock+0x10/0x10 [ 739.595228][T27523] ? free_nsproxy+0x3e/0x350 [ 739.599820][T27523] free_nsproxy+0x3e/0x350 [ 739.604221][T27523] do_exit+0x6b0/0x2300 [ 739.608429][T27523] ? cgroup_freezing+0x20/0x350 [ 739.613288][T27523] ? __pfx_do_exit+0x10/0x10 [ 739.618101][T27523] ? cgroup_freezing+0x20/0x350 [ 739.622943][T27523] ? cgroup_freezing+0x20/0x350 [ 739.627863][T27523] do_group_exit+0x21c/0x2d0 [ 739.632470][T27523] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.637741][T27523] get_signal+0x1285/0x1340 [ 739.642276][T27523] arch_do_signal_or_restart+0xa0/0x790 [ 739.647874][T27523] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 739.654026][T27523] ? ksys_unshare+0x7b7/0x8c0 [ 739.658740][T27523] ? exit_to_user_mode_loop+0x40/0x110 [ 739.664190][T27523] exit_to_user_mode_loop+0x72/0x110 [ 739.669500][T27523] do_syscall_64+0x2bd/0x3b0 [ 739.674095][T27523] ? lockdep_hardirqs_on+0x9c/0x150 [ 739.679366][T27523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.685604][T27523] ? clear_bhb_loop+0x60/0xb0 [ 739.690291][T27523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.696301][T27523] RIP: 0033:0x7fef7238eec9 [ 739.700724][T27523] Code: Unable to access opcode bytes at 0x7fef7238ee9f. [ 739.707800][T27523] RSP: 002b:00007fef705f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 739.716249][T27523] RAX: fffffffffffffff4 RBX: 00007fef725e5fa0 RCX: 00007fef7238eec9 [ 739.724207][T27523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 739.732215][T27523] RBP: 00007fef72411f91 R08: 0000000000000000 R09: 0000000000000000 [ 739.740215][T27523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.748221][T27523] R13: 00007fef725e6038 R14: 00007fef725e5fa0 R15: 00007ffed1baf918 [ 739.756238][T27523] [ 739.759275][T27523] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 739.766559][T27523] CPU: 1 UID: 0 PID: 27523 Comm: syz.4.5543 Not tainted syzkaller #0 PREEMPT(full) [ 739.775915][T27523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.785967][T27523] Call Trace: [ 739.789232][T27523] [ 739.792149][T27523] dump_stack_lvl+0x99/0x250 [ 739.796724][T27523] ? __asan_memcpy+0x40/0x70 [ 739.801300][T27523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.806483][T27523] ? __pfx__printk+0x10/0x10 [ 739.811069][T27523] vpanic+0x281/0x750 [ 739.815034][T27523] ? __pfx__printk+0x10/0x10 [ 739.819616][T27523] ? __pfx_vpanic+0x10/0x10 [ 739.824117][T27523] ? is_bpf_text_address+0x26/0x2b0 [ 739.829318][T27523] panic+0xb9/0xc0 [ 739.833029][T27523] ? __pfx_panic+0x10/0x10 [ 739.837450][T27523] __warn+0x31b/0x4b0 [ 739.841422][T27523] ? ida_free+0x280/0x310 [ 739.845740][T27523] ? ida_free+0x280/0x310 [ 739.850055][T27523] report_bug+0x2be/0x4f0 [ 739.854367][T27523] ? ida_free+0x280/0x310 [ 739.858682][T27523] ? ida_free+0x280/0x310 [ 739.862996][T27523] ? ida_free+0x282/0x310 [ 739.867310][T27523] handle_bug+0x84/0x160 [ 739.871542][T27523] exc_invalid_op+0x1a/0x50 [ 739.876034][T27523] asm_exc_invalid_op+0x1a/0x20 [ 739.880873][T27523] RIP: 0010:ida_free+0x280/0x310 [ 739.885795][T27523] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 739.905393][T27523] RSP: 0018:ffffc9000ffa7880 EFLAGS: 00010246 [ 739.911459][T27523] RAX: bd4e1fefd5fd7400 RBX: 0000000000000a06 RCX: ffff888053850000 [ 739.919419][T27523] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 739.927377][T27523] RBP: ffffc9000ffa7968 R08: 0000000000000003 R09: 0000000000000004 [ 739.935340][T27523] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92001ff4f14 [ 739.943307][T27523] R13: dffffc0000000000 R14: ffff88802b4c0400 R15: 000000000000048f [ 739.951286][T27523] ? __pfx_ida_free+0x10/0x10 [ 739.955958][T27523] ? namespace_unlock+0x486/0x760 [ 739.960980][T27523] free_mnt_ns+0x52/0xe0 [ 739.965212][T27523] namespace_unlock+0x529/0x760 [ 739.970064][T27523] ? __pfx_namespace_unlock+0x10/0x10 [ 739.975437][T27523] ? free_nsproxy+0x3e/0x350 [ 739.980024][T27523] free_nsproxy+0x3e/0x350 [ 739.984431][T27523] do_exit+0x6b0/0x2300 [ 739.988583][T27523] ? cgroup_freezing+0x20/0x350 [ 739.993427][T27523] ? __pfx_do_exit+0x10/0x10 [ 739.998012][T27523] ? cgroup_freezing+0x20/0x350 [ 740.002855][T27523] ? cgroup_freezing+0x20/0x350 [ 740.007703][T27523] do_group_exit+0x21c/0x2d0 [ 740.012285][T27523] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.017482][T27523] get_signal+0x1285/0x1340 [ 740.021996][T27523] arch_do_signal_or_restart+0xa0/0x790 [ 740.027540][T27523] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 740.033691][T27523] ? ksys_unshare+0x7b7/0x8c0 [ 740.038372][T27523] ? exit_to_user_mode_loop+0x40/0x110 [ 740.043832][T27523] exit_to_user_mode_loop+0x72/0x110 [ 740.049111][T27523] do_syscall_64+0x2bd/0x3b0 [ 740.053690][T27523] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.058883][T27523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.064939][T27523] ? clear_bhb_loop+0x60/0xb0 [ 740.069608][T27523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.075488][T27523] RIP: 0033:0x7fef7238eec9 [ 740.079905][T27523] Code: Unable to access opcode bytes at 0x7fef7238ee9f. [ 740.086905][T27523] RSP: 002b:00007fef705f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 740.095308][T27523] RAX: fffffffffffffff4 RBX: 00007fef725e5fa0 RCX: 00007fef7238eec9 [ 740.103272][T27523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 740.111230][T27523] RBP: 00007fef72411f91 R08: 0000000000000000 R09: 0000000000000000 [ 740.119187][T27523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.127143][T27523] R13: 00007fef725e6038 R14: 00007fef725e5fa0 R15: 00007ffed1baf918 [ 740.135114][T27523] [ 740.138377][T27523] Kernel Offset: disabled [ 740.142708][T27523] Rebooting in 86400 seconds..