last executing test programs: 52.466915555s ago: executing program 2 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0400000000080000007a000091", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aaaaaaaaaa000000"], 0x48}}, 0x0) 52.239756057s ago: executing program 2 (id=2727): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000005c0)={0x7, 0x6, 0x7, 0x0, 0x8, 0x0, [{0x6, 0x1, 0x80000000, '\x00', 0x2484}, {0xd, 0x6, 0x9f6e, '\x00', 0x2}, {0x8, 0xfffffffffffffffc, 0x5, '\x00', 0x2}, {0x3, 0x200000000000001, 0x8, '\x00', 0x81}, {0x1ff, 0x5, 0x6, '\x00', 0xe88dc406f491d3c7}, {0x1, 0x101, 0x7, '\x00', 0x2002}, {0x3, 0x59e4, 0x9, '\x00', 0x801}, {0x0, 0x3, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000390001000000800000000000010100800c0001"], 0x114}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r8, 0x34de5000) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r7, 0x0, 0x7, &(0x7f0000000000)='sgrp\x9f\x00\x00'}, 0x30) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x2, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 51.835322672s ago: executing program 2 (id=2733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x700, 0x11, 0x7fffffff, 0x5, {{0x54, 0x4, 0x3, 0x8, 0x150, 0x67, 0x0, 0xb4, 0x2f, 0x0, @private=0xa010100, @loopback, {[@end, @cipso={0x86, 0x50, 0x2, [{0x4, 0x4, 'j('}, {0x5, 0xf, "c3a4969da3730b49c0b0f02e25"}, {0x6, 0x8, "c257dbd01129"}, {0x2, 0x6, "ff5d218a"}, {0x6, 0xa, "316f9f62dc8b7872"}, {0x1, 0x10, "09b1616af195ed16ec4ab7f684d7"}, {0x7, 0x5, "1f5eb8"}, {0x0, 0x4, "c96f"}, {0x1, 0x6, "01b7f45b"}]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x7, [{@private=0xa010100, 0x200}, {@remote, 0xffffff1d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffa}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xd1, 0x1, 0xc, [{@multicast1, 0xeb}, {@remote, 0xa}, {@multicast2, 0x8}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@empty, 0xffff}]}, @timestamp_addr={0x44, 0x2c, 0xb6, 0x1, 0x5, [{@private=0xa010101, 0xfffffff8}, {@broadcast, 0x1}, {@broadcast, 0xbca}, {@private=0xa010102, 0x5}, {@multicast2, 0x3}]}, @ssrr={0x89, 0xf, 0x40, [@private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x2, [{@private=0xa010100, 0x1a0}, {@broadcast, 0xc}, {@rand_addr=0x64010102, 0xfffffffd}, {@broadcast}, {@local, 0x6}, {@rand_addr=0x64010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x3}, {@private=0xa010102, 0x80000000}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@getchain={0x5c, 0x66, 0x202, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0xd}, {0x0, 0x10}, {0xf}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x5}]}, 0x5c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet(r4, &(0x7f0000005700)=[{{&(0x7f0000000040)={0x2, 0x4e1d, @local}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xd6}]}}}, @ip_retopts={{0x10}}], 0x28}}], 0x2, 0x4880) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000089008f7c95000000000000007760abf5078ae1090cd542b87f4efc8a63edbec8776f45cab0881e4f0347b098e1ce894b26925bb158cbf98c8269f8e45128f084a8"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) 51.56726926s ago: executing program 2 (id=2737): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x174, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_ACT={0x11c, 0x1, [@m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x6a, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81db4b5bb82e527e794cf9c32a539860aa592d929cecb48c76df399b49231fc0de0b4c4b5e510bd82e77a2a017326f355f49b6d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 51.375388356s ago: executing program 2 (id=2742): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x1, {0x1, 0xff, 0x3}, 0xfe}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delchain={0x34, 0x65, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0xffff}, {0xe, 0xe}, {0x9, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000020601080001000000003a69702c6d61726b0000e9984e653b9f195ce3943b07e405174be1e4e3e013f47a0000"], 0x30}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) getsockname$tipc(r1, &(0x7f0000000bc0)=@name, &(0x7f0000000c00)=0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) readv(r7, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000840)=""/145, 0x91}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/129, 0x81}, {&(0x7f0000000ac0)=""/107, 0x6b}], 0x7) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r9, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x20021) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154601e9ff000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 51.024226155s ago: executing program 2 (id=2748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000bf995afb0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x1000000, {0x1, 0xf0, 0x2}, 0x1}, 0x18) (async) getpeername(r4, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r8, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r10}, 0x14) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r11, r12, 0x4, r1}, 0x10) (async, rerun: 32) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r13) sendmsg$NLBL_MGMT_C_LISTDEF(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r14, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000a0) (async) r15 = socket$inet6(0xa, 0x3, 0xff) close(r15) 35.970998235s ago: executing program 32 (id=2748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000bf995afb0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x1000000, {0x1, 0xf0, 0x2}, 0x1}, 0x18) (async) getpeername(r4, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r8, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r10}, 0x14) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r11, r12, 0x4, r1}, 0x10) (async, rerun: 32) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r13) sendmsg$NLBL_MGMT_C_LISTDEF(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r14, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000a0) (async) r15 = socket$inet6(0xa, 0x3, 0xff) close(r15) 9.486628317s ago: executing program 0 (id=3078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(r2, 0x0, &(0x7f0000000480)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000080000007f00001000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) readv(r6, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000001c0)=""/50, 0x32}], 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffeb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x9c13}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0xff}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0xb3c8, 0x0, 0x8001}}]}}}]}, 0x6c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, '\x00', "6365fd3dd1f949509793d35cb0a6ea4f", "6518319f", "a76d33d8d4d7a3d5"}, 0x28) 3.299329574s ago: executing program 3 (id=3148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f00000001c0)=0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe, 0x8, 0x5}, {0x3, 0x1, 0x4}}}]}]}]}}]}, 0x54}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611150000000400085000000a00000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x64, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x64}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r10, 0xc08, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10001}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008880}, 0x40001) 2.859155513s ago: executing program 3 (id=3154): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, 0x0}, 0x108) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xfffc}}, 0x14}}, 0x24008091) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000340)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79333f55191019736e827b38fce36763f0cbc5b81f3fb7d1abc84fe89d2662d0b79aa846bd1f0be46c52d774b11fdc82e86d8ef536a5c8180a4eb5c72c448566a347771c4e7e177d177d1fe2c08cd9bad969ce008cc8d85b66d5395d3ed5c3dd53", 0x8a, 0x20008040, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8a, 0xa) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, 0x0}, 0x108) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xfffc}}, 0x14}}, 0x24008091) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) pipe(&(0x7f00000004c0)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(r2, &(0x7f0000000340)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79333f55191019736e827b38fce36763f0cbc5b81f3fb7d1abc84fe89d2662d0b79aa846bd1f0be46c52d774b11fdc82e86d8ef536a5c8180a4eb5c72c448566a347771c4e7e177d177d1fe2c08cd9bad969ce008cc8d85b66d5395d3ed5c3dd53", 0x8a, 0x20008040, 0x0, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x8a, 0xa) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) 2.834099194s ago: executing program 4 (id=3155): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa101000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.607886892s ago: executing program 4 (id=3156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r2, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) 2.603577561s ago: executing program 1 (id=3157): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000740)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x1}}, @qipcrtr={0x2a, 0xfffffffffffffffc, 0x7ffe}, @qipcrtr={0x2a, 0x1, 0x7ffe}, 0x44, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000700)='veth1_macvtap\x00', 0x9, 0x6, 0x5}) sendto$packet(r0, &(0x7f00000000c0)="04", 0x5e0, 0x0, &(0x7f0000000180)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="cf6690e4a4628255a8e6ac24571b1fd51623d542f5e6deea2b74372b1cad5ee4989791f02dbdcca0aec734a9f6422685790b6b8951f21f3c79a44e9e5b35b8064e4474f2cac64f0bfef64f4212feb6edb2fbf10d3a0b0d276b4919010fecf47de7de336a625b6c73825dbdc866a87ca06b89fd79e95177fa8e94802c3483a2cc0cd70e2f47af211ad0", @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000680), &(0x7f00000006c0)=0x4) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000801200000008000300", @ANYRES32=r15, @ANYBLOB="0a00060008021100000104000600ab00ffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf8, r13, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x417}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x92}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe2c2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x4080}, 0x4814) r16 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000ec000800000000010000000500060000000000050005000000000008000300fdffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) getsockname(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80) sendmsg$inet(r10, &(0x7f0000000c00)={&(0x7f00000007c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="eb24bec0aa63c91f791c11bbd3ae9d68e89927c15165df0816e06f1ed7c87a0b2a54b7f60292ea7a7693acbda360ac1be0859ce199e42f24a3a78baa5437c52507a6e40c122a0efcf59dfb0681637c490cb749edb65cee9f399343cd55a011e66aefab909a245a", 0x67}, {&(0x7f0000000980)="8ee05e62c50f713be96d23f8b4f634f1bbac009db6b89332b748d011e76f8385ae34508364eebf3b9a4a98f7fce5e468f4cde06fd7012f6c378462c3f7224b3da96387caac9081b8812378845b76296195a7847c57e8573d9fc31596646f9e864fb6657e1328cf14b3e4742dc54957ee4ecf7250a7c8544c2d338468e9a65ee56395f5c5453c7125229b277591fdd24e31213215c736b49b05d30f2b65c4399a7e27f16898cc6d93ce4408b996145d382984192e6d59677021dc1163fb", 0xbd}, {&(0x7f0000000a40)="7675ad270a52395473eccfce21eecb66628f2d43a2c01b56b30b80e2cf4b8888334fd1a34ae82821b4825c3357782b74bd78435337a1462f15d0dc6feee2451c939140fafb4642b1ebab667011b166ae46cd6f94feb28ff3cb8429813a", 0x5d}], 0x4, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@generic={0x94, 0x9, "0ad0b5def3dc25"}, @timestamp={0x44, 0x18, 0x7, 0x0, 0x2, [0x9, 0x8000, 0x94f, 0x6, 0x8]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xdb, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010101]}, @cipso={0x86, 0x53, 0x3, [{0x2, 0x4, '3A'}, {0x1, 0x12, "3a83857eb17eaae7c5cd1ce17d788516"}, {0x5, 0x6, "d40a9152"}, {0x2, 0x8, "5fac1da85380"}, {0x6, 0x8, "4daa63a7f5a7"}, {0x7, 0xf, "360ce6e25ee52652d1953d2f91"}, {0x1, 0x12, "6636bb7804c3b53b6a5aba05269bf9a7"}]}, @cipso={0x86, 0x11, 0x2, [{0x6, 0x6, "372bd465"}, {0x2, 0x5, "afdb68"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x684fa1ab}}], 0x128}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) 2.55716004s ago: executing program 3 (id=3158): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82abcb", 0x3}], 0x1}}], 0x1, 0x4404c880) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) (async) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x49, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.475593346s ago: executing program 4 (id=3159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x95b4}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r1, 0x0, 0x0, 0x20008081, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) sendto$inet6(r1, &(0x7f0000000440)="75d713c2d19f93d5447795b2c443027865dfc5286ddb71d96ae865533703c382b5d3fcccfee7973f122d6e204109c4ef822013ea2d76071a02e7c9dfac5e2807463e4a098abc02250c4e8e6500310b7206e28061cfcc225e3ae43f3dcbea140129f03dec", 0x64, 0x40000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) 2.297595868s ago: executing program 3 (id=3161): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x7ff}, {0xa, 0x37d}, {0x1, 0x5}, {0x10, 0x5}, {0xe, 0xffffb974}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x89}, 0x28) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x40, 0x5, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x71, r3}, 0x38) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="70c78c6452cd18cd8f7d91d8b7010031bd7000fddbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000540), 0xffff800016adffff}, 0x20) syz_emit_ethernet(0x35f, &(0x7f0000000540)={@link_local, @empty, @void, {@ipv4={0x800, @gre={{0x2e, 0x4, 0x1, 0xb, 0x351, 0x65, 0x0, 0xc, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x48, 0xffffffffffffffff, [{0x0, 0x7, "a7933b32e6"}, {0x0, 0x9, "a67c9be3fec072"}, {0x6, 0x2}, {0x5, 0x12, "0f064b6612d32e5f038b9d5e147c5a5a"}, {0x5, 0x4, "c576"}, {0x1, 0xc, "d29046f746e5c5636dbf"}, {0x0, 0xe, "28e5e682712e972f96c31245"}]}, @timestamp_addr={0x44, 0x24, 0x31, 0x1, 0x6, [{@multicast2, 0x7e}, {@multicast2, 0x3c}, {@local, 0x4}, {@remote, 0x40}]}, @cipso={0x86, 0x2b, 0x1, [{0x2, 0x4, 'vG'}, {0x0, 0xe, "9194d7e862fb13f630436c91"}, {0x2, 0x8, "e573fdf5d9fc"}, {0x1, 0x4, "b268"}, {0x5, 0x7, "af769f2c24"}]}, @ssrr={0x89, 0xb, 0xeb, [@remote, @multicast2]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x24, 0x2, [0x3, 0xfff], "19e5f145de1a98eb8fc53b7a9c751bd24147853331bf6c087a44314725a97c2a2bbfa7ce"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x4], "dd1c2b03f4e2784f8042b695e021c8bf6a8b91410371a0af54c9c401483d22a4de95184918c7b05374620f749dc7c83307d6d29bec8ed9aff419103e08542cea9abb3d4990ef9fae219ca2cb37f79e8d509f59e71f0511d2eb5b9e811609eba9cff664a142555440ccee15e0319da3b00fa3db7ca591e20287e0c1184fbc441c03361de07a5d8a26c36e273893279497a702cbdd71bd8e45d87377580185b493bb09caa061b983c9de9e5386044c419e645064b49fe3ad1dd34a49371e81df58e23b86c79ba6f679ca183759182bdde19911e446b29bc682d60bef3cc998d61f1cf5eb6dc71500d0041cea1f91aa9551d82336"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x107f, 0xeb8, 0x3], "f890b318c03208dd845305f64e8c58b2d75d91190709c93819c8ff562781adffee36b5f139aac6f479cb63be3f089d1c4b66b5761bd211faa006a45b631efeb2ac3900e0b352f90cea8e4872927ed64876aed7e22bd5cb7b603d5ce7271bb8ae8bb33712288bcb96f5264caa3cc178c59a2523608c865423de9dd03d076417cf01687e23af6ef64086bc79363355c78b6b1cd5b422e3d10ed0de26"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x0, 0x3, 0x0, 0x3, 0x2, 0xc}, 0x2, {0x9, 0x5, 0x3, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "c999944c3a115dc3452982e7287b4fe8d791003f252e997d5dfa1d871f9e8edf5949560faf2e25a4fb86d4b39e4069421a22a873bc849d2c91b91342d3a00d77f71505cfb46194aa5523977b8f1abdff51feda5c92a1689113da83ecb591d6d82e778c76200f61282dbfdcb685b371cd9f75c23dbe96996ddc7e480640222aec33dfa0ccb3c87371207cd1974fd748a90a9f7c28a415f0"}}}}}}, 0x0) 1.669702539s ago: executing program 1 (id=3162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000400)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/244, 0xf4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.627860461s ago: executing program 3 (id=3163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) syz_emit_ethernet(0x101e, &(0x7f0000000700)={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x0, "18", "fe9998", 0xdcba, "a3aa00d855c69945e7794bb3f04748e758390381dabe2fedb68279d2d7c71c0f8988a3d39bf5aac8be9b356dc7b84f5c0aa0a5425f3148641ef9a81af9e973c807251ffa3c2d9af07c0ddc4a1ffb5353b34f37305204aeb25521e4a286904650df305556cf9fe5df050b8673160f641c9052c17daeac14c71c9f7ae4a40e666eeabdd1694965fc064bad3be5ef31d8ae57ec3c1f055f2381e9d65385ddf9bd5643936debc8ad03073dfd035ac1d2ac6de64af0c4a44b3657ec4636db53bd7f34dd14a73535a2a130bd8449de45aafb67e1cdd970cb077ca5b3fe74404c5ef2a7448eafa7b7e29ab0eebdebecd4ee039598ee21a7e026cce275088e1620b0dbc2da9d9bd1ce543758be44ae1c9d5d29e93f01025e59edac5bac8ef07e390e226f8b7282b42564a08b3d12acc3f30549f51556c08c3be7b18baf96ddab07c968e2d67bd368ba0eb6145031cb5155359f34ca1b5f67e44df9fb04dc21310278102b79509e8a6d076bc64daaed43b76c5d71aaf99422dd388e3a2035461ea81ce67e066fd4c217d363eb078b53645ed9863e662bfe139efe0f6ca2dc58037f93c9a250476773c551b2dfa00a4245b2d45277ab3e8aa6ce6331c6fdc774ee22f701e857255004cb7c51e1ed8145475d4f805c4e474ef75a6fa7e20d460a7dd90a77cf10c7de7d3b0e005f8025a730e3ea418b0d82866c9d379432ad09771f09931ea4bb44069041dc977185ca856de0bec2869d7b9e7d724338c4f6e87e993ae3a07282e02efc1ea1755540fde0a2672e383a29ad1e519e9d28426403564d7bace57026c9aa5dc5a8cb21ddc7df14e00562007964950d15f8eebe1c754fa712023942decaf3b52e7d93e0744f9012794a5f68647dd179489df42148c77cc40bd37ce6f94ecc2f1888004cd555a30dd6f779f11eacb134f35f3881e5afa54d4dd1a18d6385263a4038ef8b797e2777fed2e67cf18877ba777304080084acc8d5f92431a700945a46b44236d2843b8bfd8614923a19a3ffb1e0446d806765ea56c4be6b1a1fb1985d5776f390492bfaaeb1b8cebc4ce6e4dd5e8fea36d3ab852aa040841e7a6d4f1aa13ed12fb06338f1b50105efab09aadc783383b7bba6d92a60f3a09a45b0d3201374f64840c7c344364a81405b51f9039b472853b53e2d005ad57dc8d955d633394e160050f02a3c7e427d5e47708a83918a412a6cde00c4bcc83d9e143564624c50ac02ca92ec043cec7944e1294ca3dad93f6f65cdc9219cbaeadae731f7dde9283133f48a70c954c8923dbada0816c913b0e3b201aad73eda4f6cf2146c42aa7488b3b001fb82ec066ba9c3ed0a883933f3679bb029f00efe60cd9012e5c1e33951b2eec86335326ace2a3b237292d5ee636c18a2e3a7e4051a010fdbbad314cc4cf8d3cbc4c3dc02249618334f976cc318cfe84cab8e7854091523c0ac35903e30f478195e597c17ebc3a9213cb24b673c99a39f862ff39d592a3fb0d4272d592004fd030329abbc42e7e93c0b43c7f6813c53bda0cebb055a491ed88c0703fbc74efbe5211742e5e3004f46f20dc86bfb207770f9be5a23fdc265d8b2661a030f0cb0d9bfbf874266b93c92a8a89a1047948064cccfa4ae6e5972dd48ee18301a3d4f0735f859d6e498f938d095062b8d348a42051dafc4ef5ce7179fb0e2ebf177c2c7e1b03a3f53b402002964306890fe025714febc2fe4359c781b871b1aa842f8ae2a744f7763dd9e095b82b60582182fb2d337b219641df76b3bfa9322c3b80f2679db21d524c6b343cf1a0b96b1fb9e201996656a66aabc53738887f73d97f7604a7e74f546918dde381f3a983fb5a041ee587daebeeb570367f0f58239c0d42e9d0d4386d872ce3f61b56b9ad9876ae859c7e716d66198829a62b9bb86ca684e6c52878ac1a72f02b6eb97ee319bfa8010c257c7045d6e9e60934c999aac84af61afbf6012a9cb0fb42a999dbbcbb289041fb228ddab6910b2bc1c9159885c44a8031926eec9ab6ce0e3354084cf7c7d088fcdd79fbdeecf6c09e31c2cdd25b57e835f2c2237cc729a313b23165e56c38c9e7977de68ea676276b5dd6b5b90ef5c50ea3574c55ee91bf6615b8a0e10c1cfc62e3a524a0f95e744abe73976a29f7c27ff44571ef7ff82050e430576bab9feb8b6714216db1f857a8e944962fd9aa3059cd0132a98c6dbadbc7a5fd9472050587cd5c2d6a472a01b598b4b2d7d047621c24cd8fa0fc9963dde58ee5263b8d681125e88e84d88127581b793ad532fac36ca0cacef95e8190626d18b6e1714dce5a690a0e567db374629c7e3a9b458d98cda438aad7faa50acfa88333e4b0adf554d188b5259a037e184baa2b8ceb5b2afdbf40fc7e875537ab29eceac45fc126408746f0da23874e4defd8f7fb59d944a75b1d7ee03e1dd3475df3ca34e1e73d9a75cef870f7fd8b5354a2fc638158213e0df311afb930ffd86fd72ebbf5dbe01ff588fe7a3a6d833277b98d91645b9289d12d34b83df2bed70391cc3b9a7bc2bebefa13e3697b064f100bbc83d9c6a38f80a2544160584b6e31e924bba12985f358106b0a2b34ef6c865bd57877295a0d0dfb261e0fff55720dba47ae0503b283b2769cf654ac4295fa111fd79dc94f85736243b2b1da31e0c33b331ce6cc511a031b669420870a0fe636982cf619251daed222dc4a0fb72df687c84eba3b0573a982fe1b1e69a452e3449086de81722db258a5991bb56a27c5d420ca1287d9ac6b156a84982d80d35396937fab24e99efca1b9e0f59230bd20f988900c660ec11790e458c647429ce0f8bc053afcd3339b906bb97c4a97152f016e2503d34353bbe8a9b2bad4f2c8edf85ce306860d827ee223a53838a0d74ab4b14571fd587ff3cd0c11befe90e0a9c174278372b1c580e266db0d1c9eb88075e118bc93ae3b0d67310ab797b39934e7a233a16628394a947659abeaaaf515273ce195639c4db2229c1f7c843a13f5952461a5c783b6d924560cfe750d26c6518cbb777944a69994d005bb19731b25595b1cc717262e1b35b4e301db62c1b5e3cb1a31fba0e269dc3c7a065bb55fd2a95f98861c473a313933eab4724799e1c86acc0436a2981630dd8e2a431d85a0f0b953c4d5e47a672a0eb906289fedfc1a8804bd797f52a8fb0827a47a04dd2b6b94ce1da523a2f9b278df0dd106fb2014ed7cb32051a4bc40b5f5ccea62d2cf5a9e49703ec0f2a4b8572107f2802cb5c8ccbca42cd694c96fbc573c767680a042b01b2eb694a38d72bd3a3f9235eed47406560ec10d278479636ed8986fe35b7ce96260edd1bc2e1f16ea3bb760237053a3980f91762dc2391ea0b72f2d12bea2c8a13d37fd6d6ae6eaca122b5b4da5c1d0beed787642a0ed17bf87f4c41d2272d556721b08c548fde6406df677b5045a14fc364d0a8e4e764fd027f147e91d9b6c42338c08aedd8fea4c696bcdc31a1a5764ac38a009a0ce3f8896f71831baf1aff89553bc260a69f39f685c23d0b0d41d902025efe795ddce2f401038762484377e1dd2872e24dbd742276b97fb64f3aa4f092318dd35f7dd9748a233ea4fc09bbc0e255e140d61e9d1ab271228b6e024a0d159db2c180f4cef5e88c5e3b3493877d18dcbc3368350b1e97d33a78a38e2cc712d87bc4471db8371722f16e790893152e1f4a8c7e032efb97fbd9ef4c991ed35b4419d94d7c1c1cf3e805e2bcd36aa2e0d23e51fe5ee46e967f677d77ff83a9e95a7f13a6708a9b8b30c050f19e96431af3df72507c824dc16ad4493139b91ea2046063c79f8add8219fbc9ca68dc6626e765522b4cfebbac2f65d005a7d01a5cfc9bad179af66c0a37fb3684e8bfd2c2fef892e06db2e0d941dde8337ad1771d9fa55bada6faea8eb67592a1bf0d4a756440b2d4ac0d00aa2d1ee69ff9e6979cec4e10a6145ddadeccb7aa4c49c206b505d4a1669d28209804c15b2aa8cafe2a0cd7454eae00414c8bcc3296033e976b5d4425626c85317ee76b1fe3b5df5e150e064be4ebb052bee4a5f032f06f061a4c0717ecd50d954887d5f2bc50d3c61a496b0e98de5ffca1c527ce98303121c06b6e645fc08d9c44f5b4626e889ead6f4a1fd54cc4d2acd5fe8a6ba878b16f133492563f7a1383bfe91e079057fe8354ed6b270987690bd3c0a08c17c860c8fcbdc74254364345548450000304e9d57d88c389e3165870ad7e5a50fd8fbba39933d34a1bc43c1822be11575390d7965a272806645c65312c1a14051688e2f227aaf4343a12adda520907ba34f082711b1d482716d1af8c1429bff79d631c1f5726d9270e4adbf396bbfd584fc2938590b5a0e0845f2697921c1f70752a321f3aec6d7de487a585048996d973700640f66ad6a102456086340549b3625a97bd8687f05409580d270b3e9bf42ad6e00237a81f6794c54998b9862bd1fc7711b61cfc89412c35f9126ec45095d0e33e46be732def592eb57528a330e9f6f506b7892c7d870a58e2697f0f772df9d440c4478ef9da73f7b22ba6b057970f246c2da29f79ea2a37820007acafec26359cbb0c159714bf7152362e59670dd46ea7caa8bcd9c2e8c884efef14fbd24f8039a4fd18477abaa65fc749e20f03f5ead3f18a399a7983e6a9279c0163453fcfa784f7880ebcd4c4ef2ff34dd2d1221057a859816f7474148d5cbb7afac49f6d7e791cf2d4f1c205b7e52b92f182410f9456848948814d373fffd96f0552eb46a150bfdf481b24df72333c791b379880ba7ba5361caa4d0f450bb352ece9ac49f133a9d59796686633ecf3c2e8e73decdd95080c498604bde6e29c7ae1567ac7763bc3f341d8f02d77459d3af7e7990e7ba9a402998f5bde5f335d94c2149ed5531bc590776172baaaa14e2500a91d69db5b114fa5e5af818dfab37ba314e8e3ea87760ead12c98a3424c52e7a481d58565d277a7af6d44c0d972be2bbd596721b1614c7912686ba745aee7a80a44b01ef4cd8906f86f4ce291fb167ea9f5af46d28dff561a300edf27ce73c8d7a0e9f97a442beca62f2180a44b4444dd6d60ce6d4301d0a528bcd853bda16caf7545a1017adf03cf0b5ff1ddaa43de9451218a5ee7dac90acddb3696c1aed751bdbcd39c8fab314822dd1b9c43c43334f281bf2d698ee5e337cfc9b5934724a894dc969485a83fca6e1435ac9a7f11b38a9d1726e4aa9eccee52b5478ffbcea5681ace7b0283070265f95b27cce34146a589f4f71137aa49cd4bc649339a747256e3592daa3b5e481ba80e1b6dfe91a2a80fe6b120331b63aabf9194680df4ca08bf99a06830050da47c29ca3e816c34b2c5b9f15d0546ad32489c2363a5ccbb2cb9c29a442924e9c7e6924f46a65a779798bc536dad16be37ea7facfd009fffac3c72110c758e08bdb82eef9299728b3b0aa5ba4b9d9d28ad4444e389d1b5222447dd68e910ae0f31b0fbc7450d6e819778dfe0e30f46af79615c767bdb340df30e50a2f281826139387da056d7e33b4eb83523050086fe9461d00ad110e1456607fc34c570862d3480a5957d32f37e9f6cb43863b2e74bfac9829865b99735d473d28f6f7932a3a05252b2de8040fd59d22fca690714b9405d1c9eef5ea6cadeb121af4a83024f2ab1ac718e62590f46f60693baf3b4c4ce8ed6cd579c8d158175d93741e4db7bbf792dcb6c16236c76801355dfac4d84108bf083adde0fe5c59a70443186ae3c5b184bd1fcafc706a871fb7ef34baf3c056290a731a6a0fc5e354e6d78680b71a640ca1ae4b731de7deae4e971e756baa150f"}}}}}, &(0x7f0000000480)={0x1, 0x1, [0x4f2, 0xb64, 0x5b3, 0xb69]}) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0200000090000000000008000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000019"], 0x48}}, 0x40884) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000380)=0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r7) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000f58a77eac7362f3bea3e061407d805aa9695ff1182fcc2dc1a69d4a8e610a4ca42f9e3da72a9bba29de398663df8bdf57f", @ANYRES16=r8, @ANYBLOB="000128bd7000fddbdf250a00000014000380080001000200000005000800080000000c000180070006006c630000"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) 1.505034746s ago: executing program 5 (id=3165): r0 = socket$inet6(0xa, 0x2, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendfile(r0, r1, 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x64, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x8010) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00"], 0x64}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x0, 0x0) 1.400189313s ago: executing program 4 (id=3166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = accept4(r0, &(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000000)=0x80, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)=@deltclass={0xb0, 0x29, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x7}, {0xfffc, 0xb327f965e8bbc600}}, [@c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x2}}, @TCA_ATM_HDR={0x32, 0x3, "12008fc7832fd2d21898a680e442cd75a6974f12fe788058cef0acac86c071d2d44cf40d46a3ced70de3e8a28d62"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0xc}, 0x9017, 0x8001}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8045}, 0x6) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) 1.2078091s ago: executing program 1 (id=3167): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000200), 0xd) listen(r2, 0x0) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.20221909s ago: executing program 3 (id=3168): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r5, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe0d, 0x4a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4e}, @NL80211_ATTR_PMKID={0x14, 0x55, "bb549af095c70e539d349b4a35892dd7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cae70b47812dc1890f3993e9951794e6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c412af52aa9d73ee2bb51a04bad97b1f"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0xc814}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x11}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2000c051) 1.100489094s ago: executing program 5 (id=3169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c00000001300e9990000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00408000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000009004a6890cc0e0a625a04491e3a88ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000008001f00040000007ffc7393c26e61ae1dc3943f492bb6544ed82af9842b877a1ece4c0b66300512e5018a68c13f8c27545c427c84f73961f4b709747fb1e17b4350645f1e8910b1811496eedc7b04a47fe98a84a380c18765e799c19acd66d09c0d0a8babc4f21414f33fed7470049900008f813ed01245555a82f3557b106cb888889e2172ea955b11f7704f16ca7064c4d7cddf96a8c34175bb542af2a93552ee830e96d92d1d992d140559fab1a2f5edc73e197349dbc5f69c248a12d2fbf6"], 0xc0}, 0x1, 0x0, 0x0, 0x48d1}, 0x44000) 1.070919885s ago: executing program 0 (id=3084): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}}, 0x20}}, 0x0) (async) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff"], 0x90) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="180010f20b14040026bd7000fbdbdf2508000100"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001800018014000180080001000000000008000200ac141400240002800c0002800500010000000000140001"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newtaction={0x148, 0x30, 0x51b, 0x0, 0x0, {}, [{0x134, 0x1, [@m_tunnel_key={0x104, 0x6, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x91a4}]}, {0xaf, 0x6, "d1c21d7aaf2ad5753f98d9755fb6deb46710c792c18ab19be5efca2e0fcdde3f01912d4be0552b01618fd3569d359118fe979e8de4a270d0b6948424b79c975b03f2dfa6f26707cff8b9f9bd89075523f87388fbcae4bcd21f3b819716d71d91615d789be04882f4fbbbbbf3ac46a8ad3f4b94e63b251f103386408e8850da01829c3e46f14ea3e13f74b8f19598edebcac5df97f000b9165211c741366390d8198267202994e6fb3be6a7"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x148}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400d374f5720180090001006d617371000000000900010073797a30000000000900020073797a320000009f140000001100010000000000000000000000000a"], 0x68}}, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe"], 0x48}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) (async) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d7729d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7187e45a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 903.949119ms ago: executing program 1 (id=3170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="03005e800800010000000000bd1e3b43586a5223d4b019254f5800"/42], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="6c110000", @ANYRES16=r4, @ANYBLOB="000027bd7000fddbdf256500000008000200000000001800038008000080040002000c000080080003000400000008000100080000001c0003800c00008008000300050000000c00008008000300010001000c1003800810008004100200c4d1ab3aadaa549ef72a1cde4458cb8d32ba9cc05d36f70cd713ba468cfe102e7ab254a59efe2f1043a9d1561964586674bda5b966fdcca29aa5b50f63a0054700003f8fbc678a707b875e96cd873970059729ab866ddc65b48ce018b23f1b9b779753c83e084dc71b0085ec886cec830a924a8841c08bc090b16c3871f93f334d4d376b5c6ddecb1e7a4b563826bf95184da9fa7007156a695119c9d166f4f9457f24f3e93bd4dff7132d3ac64a94083728c7edb419cf5e856369235f340331850d572f99cd8d44a0bd92965ddc6fda4863585b5649aa36498adb7a2b24f3b7d1e204285a0a0bda0aa778334c088dad04c58e34a66f452a72e6b40fcb00b68584af0de69f285dcba4314e60b2dd1f59ba0cc355def5ed4a7eeb2b10b72579da2c7b49215e836c36b40e2b0572fe0313d642396ac399f0d87d04f7ca422d5efafa481976fa1d31396a92610007b412e1fd25383c17a25340965b49ce73ae8ce6e1faf7b415e289b2f5aee185aea93d3a0bcb15723e0f0d3f101077f7e13bb7778cffe370265a74415b811a1324ed34b2a3cec3c208d81d9c8e301ace8fcab291ee2ac55628d7355947c3ff05e6c292a9ff61548e3405bb5596118ee9123b2740bb937108e1a13fa2baf2823ffc5d0f6860c034b1767c856fd71626f68fe9856c11bb25adebdfd40a261de8f6b1ecbd124c74de3d9409a7e134537037d93d185ffb5e1749d68927e6f20b70c72820ca71109f220b640f8810e175639c047c29ad8674a657d5f7a2d13981c221ea8f121b73752175d138486e70ebf2be5c697f6f2478d40da1c4f4aa9e667a67406da88ad9da767e61065a3188dda612a28fd7b2a95fe6e76c414a6bb2398d263f3cbfa17dbb55eb0def61c5b0f56d84bfd7b8ed6071b4716e2050e9e166915b39a12c3532b84a6ef3fd0fe611907eb3293434b2e35d802a92499823edc7e756c83ab82918d64cc4043deae527dbb26d21823a2afcc89f5cdbfc20bbda8399fad69645b98a43d53194a132f00ef2647b7e2faa5d9fcb1ca18f429affba2d4f4cb52502d3160c2b2cc256492623f0ee4feaaa313d36405e19117301bb0e6e1abacce2744127e8133119350e8a50156ba4cb59a6d8c93f39ef98a9b045a278d3400cdfc58d05e1cbef020b412cacb4ace715a260f41f9cd02c81ac42f0e6a338fb4b096e44fe581f4453cb37db5fae317a1dc5f25898bf7a9fdc2dab8c7fe8908431fc4ae375ff3ddcd4b6bf3597c2f1b2a019683bea9f19d85744a36ff0b6676c87d2aefa26ca344d61469e55e0aba9beba339c744ea9b3679f2d67a147119832c60b3259eb2075227dd2dff46cbb3a96e3af1cb221cdec2e4eb63398c6ad8a5baa5b8e05406f07af691b0d3032d164d4b24e22449dfb6a2fa6d5fcb30b221751b030d2792062d3f5bf2bd0cb1989bd1aff47142d996d3402611c9e0d2552f5d4117d53319e8ace931fccc998cc9d582cf6f32230d598f0f4d358d7c87dd2556702dbc20698fdf1af6b1e18875cc96e632a924cd7482b8eb6cfd615674994aa5ed3d2b4ad69fdd96536298d764457db1138646969a315a2f6cd7ab22ae7d0765a9be73702f8bacadeaf643d8c01e38595005ba9d0581b5713d37687f9b659e3db42b234dcb00c15eb11a0b2135be374c3d60641d373fad8d51256f13cbb5a13e92c63be754ec528156efa5eef7fed233ac29dbddbb9d107e264c73d912df9e279d2a3509a6d76b8fa1daf7ce38d343149336248ee77f4e076d0ba05ee97c42d9e76de8355fde8695e2cb6bb0e4489d64185e5e3b5d7a08d663e584fbe9201e08554b7702c04e531393f4b02c6e9d8bf16574ba750fa3ee7aa903f87a31b66972fc23badad74aaca85960549e6bbe14ed396ad3861d2b49f80f2061dd3b5ab1524882d6563e37357510c19fd395838e495080510eaedc817ebd937e49ce55e12a8f3ada59051b646bc2bdc050240527542b341bf004231a963875faae005d5249175c5e8aeb2240b591f14a334ad6341f87ea3a7547981389697549199b793debfcd444b3f2b933e2ba14a3151ebecd530af1ebb5635c86404421987ded8107255360d8133daf7addc9823fcd4541fac82933bde3b39874f103ec11e6c9af4a1b91be25d6eb8ab4242bc6e0fe59a4082e8d21253d2feb050098b9458031fdcbc9c4cb83fcfd54cc30a381d4cbc79cd97c335716991f9f1147ff072e4c97374336971e551e8bf01ee50c69d70ba75803a497de57f4ba8ded9715a93b95509d333ff04682659c4a6a95eacc3d2375d72c5156b9c5bfed01876b96dab27228b4d0cf6135c37af75bc5b36b7a2cfb1393d8b089c16dd7a2942ab1a1503a583d595ba781d754857fe33e11581a0e706a973384e24c19c30d941dadb30357cedc958c114cb3251105153e66ebf25cbd5f093a5162436adee55cd8a0ca65374192261467117e621b41000a7136980a689c25ea572b0e0deda4e320b8153201db32e37fbef34c8178f474e7261b1f0d579500eb877bf5db5d16990815598aeabca40ad2aaf4b9088a29726c5be03ea83d8f143177f3a0993f8a0dd2e27d276af7ab65b476a66860bd608b1eb322e6c5671fda5bd67ccbad3c8dca077be0bcb8b077ea31eb128013a7c33113d062716a1fddedf14b9e4e81efdf9520ce8b7fc8165383df81accdbc85fe40251b505707111fb4b646441bbac31ed5c66eb763f46eb17d16d4e434ac35124f3c7411f5eea60652469502555d71a0c9eb4d31c9e749cb2bf97c07c892580a43192e7f42d6fd425adeeca1adc1d3ed8693ec0a6a4c2b034023b99c4c9c7ffa49c89b5e8ab56b56c97a3fab2d7e764e5ba632f731460ab5ee6f01a38988f90fe5a8b2a96f655cb1770307992db1c91107fe50ab542898c0d2ece85bb0a9de064a7bc229fca0096b716ddd9cd07e6bd6bfc2b08d88ac95ce863984e8cbc3c6eef4eb9c74bcf4b039963dddaa545c1455d58c229f34dd8f0669f5ed94929298c741fe2342d1bb12648018bf0c47bd3392d831ac89a7f19c0da9a7c617123b7f44abd5c450503b8fa32d0002e8b356dc250f8824228e939e4852fb4d64993a36c33dbad2c89e6fabc6c521bea33c3956b30fe6421d4d9b4f33498236db94bae9cc1b6fd6196eed6d10f77d4035dd788f5981aea00921b50fa2232a30126518b92fa34a0f6627656fbeebf0ad7afa144f04150b69fb98d2f2b4a260fc070fa2fe597c6cfe4d05a1a0a1f963514dcd5c969d1d935bc5f12e31e24d984fcabe3ec6ee4f7eea42f8018791fb245f2bb69f8f3aeefb4627614e322f8fe87f5bfefbbf6bd121094887e138bba8dd6482e6a978ba0facf0ce868827a3a945212a3bdd40893d0b97319c8c728ff1e161d37fefa921df6757be3d8e6f1d372b0d7814c1d6a5ff3421db31e570b04f21ab66b041b58d178e52ebcb47e6f557a3a67b4970c75743b2bb1ae7e5a378a439680901d5c800cab9ab9f814ee785f8b0443eb6e40c87d6d058c3876d792d248510755d848a8eecd9eb45d17530f0e0792a0de26366cf7ead0ef70032c4b468696e5bdd38378ef61201636a9626dcd5b0d4e2173f369e40891d6fea3ee9450b477341647153b844c9aec8345f7cccab756b19e01556d9a64c129eacee709cc12a39fd8c822c5d822b79549f1314c7c5b4b09bc82689d8f38a59c0eccc94fb99bf939cca753a0b0204283a8e92a7172aaa80fe1bdfb96e62c2565033d349aea6b0de5eec04ee48878da6eb6a355d557cea3d228d5df5f3ad9181445e36f9d08b14c7ede670988678afb1aa87c7a406f9c40a673a8730ba68b4030fd07b717d23255e0ad75dc6ace36651ffe866fc0d6e81cdfaab9a9d1a0eee0c7d4a93a3679eb7cc8bebea76d4c9735a00c5236b22d4ea9c22a0ccc92664b13a4b8161186e00f361ed64ce887657a2cf8d9aae8b27afa5cdf79603fb6549d8ea9fd3065cec0e8464111b7df2367492a66afb297222c73213180c5e4d6f281ad30da591606449fbab38926f6ee88856554453ac9093b7014caf0635b1df978191a0b9fed1f0c8632fbab0073a9ed46d75e2a3df81476c95c6934fb8deb67800513dec3f34a07a8be84e4aa26cd701be88578e65c58736f67b9c9da2e32dc761d0aefce1c74879dc05f3c21c88d4eee3c8f292905679c8fa60b6d995ec79b771f8399bc0835cd45e56e110b331406769728998081f2ac2444f89d817d6f3a87a97fe8c6af6fdfed0654dea54cc7c71569c3a0ba9a0ea92ac3fd14dc2907608eb5e8be645d3aa4470514c746659e0b4b79cf58368567001a77eab5e2c15cc3912bdb7733e172f5117bedfdd6e04b62ef5686beeba8c559c42b31b051805c906dd562dc8644696b7e7b7709c86dd3a490350a482e69250ed64099dabf93eed95875d65772860f90d255d19d74dc4b7f198e4fc36d0dba7b19d5546e9e6957b27f1cd50218d148c8edfe72b14a371137016c8858d58fbd015e5a5c853918c1313145d35360f0286a170e3f81eb9f0655940b66fc201b99d0d3a67de2a4be58c5f38b4a5bf379bf0395c973b3c03a0fe8defbc86cc32e7adf7554c62c0ca11a402cdc9a66cd1b6c5db90932b8ec6605e814f660223d9b073d82c02e29bd0486a1e02aafa70f58a2bff5a8a1641e6591915ca85d6539a4ccd7e5ee78bd3a520b294c7b77d7104d579a56fb245f914d909328b02962e7f4b85b11f025a7a7a7803a42b62a2ff92222b1d58ceaf058bfccf3c60de2b4133872b81540a684d65bd31eb735ed215ab5493544f516e5c247f86806514e804024010aedb1cf32dd2b31e80dc38c7f293ccda2c15be60c4dc1d1a0dce6cc87993bfebcea1e7e3795202992e43247e26fdcd35cbb12e3837c28a04697858b0d1d692b987fe1ffa3dd09997e6eae1706e93f272002ce527d554eac9f9d52b5875407ef895ffffe6f40aba18fedf1da8b600d36229efa397052d9123629b15581c2268edbc572d20de71f427c061fe52e3fb223a4fee1fc4ff24a5375dd6f53d9ac76f5326601153ac3e50009b1df421a6d6f7212bc53ff84f04f5982c17515f85903f97cde4e99a6dd0187173da898f01256d3a56166cfcbf36e6f96a40657e5ca07cc4c74d2a1c71a5f1f5ba8afcc46124eddbabe2a08ece975671e98878e23a6c1b664ad2faaf9a71f0a8993e1c88262b2191286daafa513298d203e94817828ee9592cef30b388ca9523f763fc353cc03a67c37612847a568c5bac7ef7a764c95ebaa9c55eca3166a01f9bb6dddfd942dfafdee507e737f2888b30dbe728513a4bb41f5573cf0e7ac002cbc7254cd599cd0dd88d2b048a651e2a3fc764aaf1b1e0f947dfb7f7389130b437bfc05b571eb90a5e905f4beadee75d6886d1b0549d882f64b7bc3a10e4b10460027cb46526c798afbdab4d674d2cdde04794c0548e84ee86782800c250b8f855f5cdbe313c561b3851107850ce3ea9c0d9dcad58c1994566590908ccf7a0f50c054ad663e6dc7c1f51537bf2cabf17b04061405ebdf26c2a837e7423ff59eb39a0f5e9e71fe5b0c5fd28e3c4637b2333abd43b0761a0e2b03ac81564d9463cfd769c37a9a4ba06b1fb9e363f7599d184c58f4d78b3fbcbcbddde6fea379877defb510d42b95ca309fb33aafea0ed3074a0aee1d219538e7afbd825c9eb1119676993e9bc1e1467c9cdc638ab2b94ddd1288faee095858bafb060a4669d0e3c7d64459b98cef7acba7607efb9b295aa2c9060a231f9d830f86e8a8d1c8476de485a073044570f885c49ef919efba0800010007000000040003800800020000000000ec000380e8000080e10001009e09a2a02625581fefa44f60f0bbf2cb0a88afbe923862e083d722f0edbf132d59dd339f2ec20a50faa42cb4a25b462182745df1e216a8bbd89198776028b008b8a26a7a3a5bf8786c3dce4eefdbd2ae55074abf6f92d27775c4bc2a08d52e4e8e826697143ec080fec217b446c7189e062569f97ae6c5cacf730a981f047ed8b796e2fa785f4aade1cef49867e9138c50d03ba8bec15e6396852bd14f2af811668a5773156fa714f03404f8c31cd6dbc7f1afd5901c244eafaf2e8aabb750baa54e789a1720930394669d231610a6049f50199b7260055c28fa50fa7a00000008000200000000009445c3c15f88ec0daace73d4ecdf134afeab88d1db3d86db8f6aa80715f2a9b99602a7c4aba8c3bb2f4895536b63dc302ddc9822546000"], 0x116c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044051) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200025bd7000fddbdf254200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600004a30e362fb00000a00060008021100000100000a000600ffffffff00000a00060050505050505000000a00060050505050505000000000"], 0x58}, 0x1, 0x0, 0x0, 0x18000}, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x10007, 0x1, 0x1, 0x3, 0x9}, 0x20) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x3, @mcast1, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r8, &(0x7f0000000240)=[{&(0x7f0000001040)='J', 0x1}], 0x1) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "0300", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "c1799d70", "bb0001000100"}, 0x28) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="aab72faaaaaa00000000000086dd624e8e1806"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24008040) (async, rerun: 32) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r2) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r10, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x4, 0xc467, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}}}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000090600000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa120000"], 0x40}}, 0x0) 896.070758ms ago: executing program 5 (id=3172): syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000000000)="dbc1d8f6f6c31022", 0x8, 0x20008001, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff17}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x3ffd, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x2}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) 810.538393ms ago: executing program 4 (id=3173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@dccp={{0x16, 0x4, 0x2, 0x20, 0x131, 0x67, 0x0, 0xb, 0x21, 0x0, @rand_addr=0x64010100, @loopback, {[@generic={0x7, 0x4, ':('}, @generic={0x94, 0xd, "ed53f33906324de2371a34"}, @ssrr={0x89, 0x1b, 0xaf, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010100, 0x5}]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x7, 0x4, "fb1fa4", 0x2, "a69521"}, "4da68e5e1d5887106fe2be0a245090de88104bd5e21d90426d59d92fe5f390a84a3c8b4318bd6d24cb0865691379dc23142e581ebe09b386de5078f85f035cf2651f6d60ae91789d6b3c6b4dc2bbbaece4c71745cdb1880e65d0e5cae74edd2a7fbcab4ff2157c795d67540f4bd2c72ce9673fa6ef6e4701f56b714dff4d4400cbe33187394eda196c52f9b3986037c09cd25a407b3987f4300c4da812b99aee633bd9a457117764a021782e77eae4903a053b8c91b870723e0353c91e6b7406441c7a4bc1a206c949"}}}}, 0x13f) 739.921844ms ago: executing program 0 (id=3174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 566.602747ms ago: executing program 0 (id=3175): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) 541.203111ms ago: executing program 5 (id=3176): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "defe07eb4e09bf7fc01a6eb00e12c330"}}}]}, 0x44}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 468.015668ms ago: executing program 1 (id=3177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xe, 0xffffffff}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2400400c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r13, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x9}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x40}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc0000000000000000000000000000002001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000002b000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000fc37fa7000400000000000000000014000e00"/188], 0x104}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 346.957773ms ago: executing program 5 (id=3178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060008060000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 331.48657ms ago: executing program 0 (id=3179): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x3, 0xb, 0x0, 0x9, 0x0, 0x0, 0x80]}}) 159.836714ms ago: executing program 5 (id=3180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f00000015c0)="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", 0x1000}], 0x1, 0x0, 0x5) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x14, 0x14, 0xff, 0xfe, 0x2, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES16, @ANYRESDEC=r6], 0x28}}, 0x4040004) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x400}, 0x1c) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv4_deladdr={0x20, 0x15, 0x300, 0x70bd2a, 0x25dfdbfe, {0x2, 0x38, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x40001) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r13 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x2, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x83}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 85.900975ms ago: executing program 0 (id=3181): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0) 65.523156ms ago: executing program 1 (id=3182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="958bba6cda1f57a4bf03e06d0ee0147f4213fb1d31a73a901938420b16cf271ab5544e6498a51900826c", 0x2a}, {&(0x7f0000000040)="943398fe87", 0x5}], 0x2}}], 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=3183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000080)=@ax25={{0x3, @null}, [@netrom, @default, @rose, @null, @null, @bcast, @netrom, @bcast]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/44, 0x2c}], 0x2, &(0x7f0000000500)=""/66, 0x42}, 0x40010042) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f00000001c0)=0x100, 0x4) socket$netlink(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): 269.356470][T12179] vmalloc_user_noprof+0xad/0xf0 [ 269.356491][T12179] ? xskq_create+0xbf/0x170 [ 269.356511][T12179] xskq_create+0xbf/0x170 [ 269.356534][T12179] xsk_init_queue+0xb0/0x110 [ 269.356557][T12179] xsk_setsockopt+0x4dc/0x8d0 [ 269.356578][T12179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.356598][T12179] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.356622][T12179] ? aa_sock_opt_perm+0xff/0x1b0 [ 269.356640][T12179] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 269.356655][T12179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.356676][T12179] do_sock_setsockopt+0x17c/0x1b0 [ 269.356696][T12179] __x64_sys_setsockopt+0x13f/0x1b0 [ 269.356717][T12179] do_syscall_64+0xfa/0x3b0 [ 269.356729][T12179] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.356749][T12179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.356763][T12179] ? clear_bhb_loop+0x60/0xb0 [ 269.356781][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.356794][T12179] RIP: 0033:0x7f0eea98ebe9 [ 269.356809][T12179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.356821][T12179] RSP: 002b:00007f0eeb72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.356839][T12179] RAX: ffffffffffffffda RBX: 00007f0eeabc5fa0 RCX: 00007f0eea98ebe9 [ 269.356849][T12179] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 269.356858][T12179] RBP: 00007f0eeaa11e19 R08: 0000000000000004 R09: 0000000000000000 [ 269.356867][T12179] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.356875][T12179] R13: 00007f0eeabc6038 R14: 00007f0eeabc5fa0 R15: 00007ffc457be4c8 [ 269.356901][T12179] [ 269.356989][T12179] Mem-Info: [ 269.677336][T12179] active_anon:5120 inactive_anon:0 isolated_anon:0 [ 269.677336][T12179] active_file:2700 inactive_file:39937 isolated_file:0 [ 269.677336][T12179] unevictable:768 dirty:36 writeback:0 [ 269.677336][T12179] slab_reclaimable:11583 slab_unreclaimable:107207 [ 269.677336][T12179] mapped:31192 shmem:1368 pagetables:1309 [ 269.677336][T12179] sec_pagetables:0 bounce:0 [ 269.677336][T12179] kernel_misc_reclaimable:0 [ 269.677336][T12179] free:1315181 free_pcp:16852 free_cma:0 [ 269.729828][T12179] Node 0 active_anon:20580kB inactive_anon:0kB active_file:10800kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124768kB dirty:140kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13936kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.769897][T12179] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.820077][T12179] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.856467][T12179] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 269.865966][T12179] Node 0 DMA32 free:1367484kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20432kB inactive_anon:0kB active_file:10800kB inactive_file:157980kB unevictable:1536kB writepending:140kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:41552kB local_pcp:17180kB free_cma:0kB [ 269.907959][T12179] lowmem_reserve[]: 0 0 1 1 1 [ 269.916271][T12179] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 269.963600][T12179] lowmem_reserve[]: 0 0 0 0 0 [ 269.969066][T12179] Node 1 Normal free:3877856kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26252kB local_pcp:14848kB free_cma:0kB [ 270.028065][T12179] lowmem_reserve[]: 0 0 0 0 0 [ 270.043732][T12179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.057296][T12179] Node 0 DMA32: 2346*4kB (UME) 1764*8kB (UM) 917*16kB (UM) 167*32kB (UM) 577*64kB (UM) 487*128kB (UME) 390*256kB (UME) 281*512kB (UM) 142*1024kB (UE) 6*2048kB (UM) 201*4096kB (UM) = 1367480kB [ 270.089834][T12179] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 270.110625][T12179] Node 1 Normal: 224*4kB (UE) 62*8kB (UME) 51*16kB (UME) 36*32kB (UME) 15*64kB (UME) 10*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3877856kB [ 270.129254][T12179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.140545][T12179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.156263][T12179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.167328][T12179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.184799][T12179] 44002 total pagecache pages [ 270.189580][T12179] 0 pages in swap cache [ 270.195303][T12179] Free swap = 124996kB [ 270.199496][T12179] Total swap = 124996kB [ 270.212392][T12179] 2097051 pages RAM [ 270.216430][T12179] 0 pages HighMem/MovableOnly [ 270.221588][T12179] 425667 pages reserved [ 270.225851][T12179] 0 pages cma reserved [ 271.709647][T12181] netlink: 'syz.1.1738': attribute type 14 has an invalid length. [ 271.777538][T12198] tipc: Enabled bearer , priority 0 [ 271.957588][T12211] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 272.043328][T12209] macvtap3: entered promiscuous mode [ 272.051959][T12209] team0: Device macvtap3 failed to register rx_handler [ 272.129274][T12214] bond4: (slave bridge4): making interface the new active one [ 272.144369][T12214] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 272.175351][T12220] erspan0: entered allmulticast mode [ 272.189267][T12211] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 272.207046][T12198] tipc: Disabling bearer [ 272.211204][ T11] block nbd0: Possible stuck request ffff8880254e0000: control (read@0,1024B). Runtime 90 seconds [ 272.224066][ T11] block nbd0: Possible stuck request ffff8880254e01c0: control (read@1024,1024B). Runtime 90 seconds [ 272.237032][ T11] block nbd0: Possible stuck request ffff8880254e0380: control (read@2048,1024B). Runtime 90 seconds [ 272.249407][ T11] block nbd0: Possible stuck request ffff8880254e0540: control (read@3072,1024B). Runtime 90 seconds [ 272.297362][T12223] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1745'. [ 272.396694][T12227] tipc: Enabled bearer , priority 0 [ 272.404703][T12227] syzkaller0: entered promiscuous mode [ 272.410610][T12227] syzkaller0: entered allmulticast mode [ 272.511749][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1745'. [ 272.555707][T12235] tipc: Resetting bearer [ 272.657265][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 272.831818][T12243] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1751'. [ 272.893732][T12247] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1753'. [ 272.985973][T12252] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1754'. [ 272.991137][T12254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1755'. [ 273.072845][T12255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1755'. [ 273.089515][T12243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.115967][T12243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.152770][T12243] bond0 (unregistering): Released all slaves [ 273.234036][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 273.290721][T12266] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 273.328679][T12266] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 273.411530][T12226] tipc: Resetting bearer [ 273.491881][T12226] tipc: Disabling bearer [ 273.515849][T12272] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1761'. [ 273.968253][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 274.032718][ T56] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.042782][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 274.066530][ T56] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.087401][T12290] Can't find ip_set type bitmap:ip,mac [ 274.094336][T12299] netlink: 'syz.4.1769': attribute type 12 has an invalid length. [ 274.129792][ T56] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.165521][ T7385] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.278718][T12309] bond0: option mode: unable to set because the bond device has slaves [ 274.421262][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'. [ 274.469721][T12320] netlink: 'syz.3.1775': attribute type 44 has an invalid length. [ 274.974031][T12338] ip6gre2: entered allmulticast mode [ 275.197561][T12348] sctp: [Deprecated]: syz.2.1787 (pid 12348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.197561][T12348] Use struct sctp_sack_info instead [ 276.661701][T12407] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 277.377197][T12437] tipc: Enabled bearer , priority 0 [ 277.389298][T12437] syzkaller0: entered promiscuous mode [ 277.404196][T12437] syzkaller0: entered allmulticast mode [ 277.529143][T12445] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 277.542475][T12437] veth1_to_hsr: mtu less than device minimum [ 277.557659][T12436] tipc: Resetting bearer [ 277.607915][T12436] tipc: Disabling bearer [ 277.835083][T12452] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 278.051294][T12468] bridge: RTM_NEWNEIGH with invalid ether address [ 278.074667][T12469] bridge: RTM_NEWNEIGH with invalid ether address [ 278.111313][T12467] block nbd0: NBD_DISCONNECT [ 278.116046][T12467] block nbd0: Send disconnect failed -32 [ 278.125405][T12467] block nbd0: shutting down sockets [ 278.145421][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.154834][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 278.162769][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.171892][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.179700][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.188905][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 278.196745][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.205874][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 278.243911][ T5917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.255128][ T5917] Buffer I/O error on dev nbd0, logical block 0, async page read [ 278.278413][ T5917] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.297680][T12481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.300940][ T5917] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.320520][ T5917] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.345041][ T5917] Buffer I/O error on dev nbd0, logical block 2, async page read [ 278.359887][ T5917] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.389528][ T5917] Buffer I/O error on dev nbd0, logical block 3, async page read [ 278.408280][ T5917] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.428432][ T5917] Buffer I/O error on dev nbd0, logical block 0, async page read [ 278.437264][T12478] veth0: renamed from ipvlan1 [ 278.443834][ T5917] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.481101][ T5917] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.505164][ T5917] ldm_validate_partition_table(): Disk read failed. [ 278.548704][ T5917] Dev nbd0: unable to read RDB block 0 [ 278.576343][ T5917] nbd0: unable to read partition table [ 278.606732][ T5917] ldm_validate_partition_table(): Disk read failed. [ 278.616946][ T5917] Dev nbd0: unable to read RDB block 0 [ 278.627595][ T5917] nbd0: unable to read partition table [ 278.963689][T12515] team0: No ports can be present during mode change [ 278.997176][T12518] __nla_validate_parse: 7 callbacks suppressed [ 278.997197][T12518] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1835'. [ 279.001572][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1833'. [ 279.118348][T12529] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.145640][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 279.176909][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1836'. [ 279.274113][T12516] lo speed is unknown, defaulting to 1000 [ 279.758195][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1844'. [ 280.192002][T12570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1848'. [ 280.558634][T12591] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 280.577738][ T30] audit: type=1107 audit(1757290427.743:5): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÔþK ' [ 280.641850][ T30] audit: type=1107 audit(1757290427.773:6): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÔþK ' [ 280.878902][T12598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.888671][T12598] bond5: (slave bond6): making interface the new active one [ 280.897597][T12598] bond5: (slave bond6): Enslaving as an active interface with an up link [ 280.915608][T12583] bond5: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.937027][T12583] bond5: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 281.075314][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1860'. [ 281.267551][T12620] syz.1.1860: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.302266][T12620] CPU: 1 UID: 0 PID: 12620 Comm: syz.1.1860 Not tainted syzkaller #0 PREEMPT(full) [ 281.302294][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.302307][T12620] Call Trace: [ 281.302315][T12620] [ 281.302323][T12620] dump_stack_lvl+0x189/0x250 [ 281.302356][T12620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.302380][T12620] ? __pfx__printk+0x10/0x10 [ 281.302407][T12620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.302431][T12620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.302456][T12620] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 281.302481][T12620] warn_alloc+0x214/0x310 [ 281.302518][T12620] ? __pfx_warn_alloc+0x10/0x10 [ 281.302557][T12620] ? __get_vm_area_node+0x28f/0x300 [ 281.302584][T12620] ? packet_set_ring+0x6f4/0x2350 [ 281.302614][T12620] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 281.302677][T12620] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.302707][T12620] ? alloc_pages_mpol+0x3cd/0x4a0 [ 281.302736][T12620] ? packet_set_ring+0x6f4/0x2350 [ 281.302760][T12620] vzalloc_noprof+0xb2/0xf0 [ 281.302787][T12620] ? packet_set_ring+0x6f4/0x2350 [ 281.302811][T12620] packet_set_ring+0x6f4/0x2350 [ 281.302861][T12620] ? __pfx_packet_set_ring+0x10/0x10 [ 281.302909][T12620] ? _copy_from_user+0x94/0xb0 [ 281.302938][T12620] packet_setsockopt+0xc5a/0x12c0 [ 281.302965][T12620] ? __pfx_packet_setsockopt+0x10/0x10 [ 281.302996][T12620] ? __lock_acquire+0xab9/0xd20 [ 281.303036][T12620] ? aa_sk_perm+0x81e/0x950 [ 281.303071][T12620] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.303110][T12620] ? __fget_files+0x2a/0x420 [ 281.303126][T12620] ? aa_sock_opt_perm+0xff/0x1b0 [ 281.303149][T12620] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 281.303169][T12620] ? __pfx_packet_setsockopt+0x10/0x10 [ 281.303195][T12620] do_sock_setsockopt+0x17c/0x1b0 [ 281.303222][T12620] __x64_sys_setsockopt+0x13f/0x1b0 [ 281.303249][T12620] do_syscall_64+0xfa/0x3b0 [ 281.303266][T12620] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.303293][T12620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.303312][T12620] ? clear_bhb_loop+0x60/0xb0 [ 281.303336][T12620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.303354][T12620] RIP: 0033:0x7f8033b8ebe9 [ 281.303372][T12620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.303388][T12620] RSP: 002b:00007f80349ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.303410][T12620] RAX: ffffffffffffffda RBX: 00007f8033dc6090 RCX: 00007f8033b8ebe9 [ 281.303425][T12620] RDX: 000000000000000d RSI: 0000000000000107 RDI: 000000000000000c [ 281.303436][T12620] RBP: 00007f8033c11e19 R08: 000000000000001c R09: 0000000000000000 [ 281.303449][T12620] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 281.303461][T12620] R13: 00007f8033dc6128 R14: 00007f8033dc6090 R15: 00007ffccb273528 [ 281.303496][T12620] [ 281.303577][T12620] Mem-Info: [ 281.613824][T12620] active_anon:5140 inactive_anon:0 isolated_anon:0 [ 281.613824][T12620] active_file:2700 inactive_file:39940 isolated_file:0 [ 281.613824][T12620] unevictable:768 dirty:42 writeback:0 [ 281.613824][T12620] slab_reclaimable:11599 slab_unreclaimable:105120 [ 281.613824][T12620] mapped:30175 shmem:1370 pagetables:1380 [ 281.613824][T12620] sec_pagetables:0 bounce:0 [ 281.613824][T12620] kernel_misc_reclaimable:0 [ 281.613824][T12620] free:1316970 free_pcp:16161 free_cma:0 [ 281.672766][T12620] Node 0 active_anon:20560kB inactive_anon:0kB active_file:10800kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120700kB dirty:168kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13864kB pagetables:5392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.751557][T12620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.784592][T12620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.819211][T12620] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 281.825450][T12620] Node 0 DMA32 free:1374652kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20512kB inactive_anon:0kB active_file:10800kB inactive_file:157992kB unevictable:1536kB writepending:168kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:39316kB local_pcp:17936kB free_cma:0kB [ 281.859001][T12620] lowmem_reserve[]: 0 0 1 1 1 [ 281.864011][T12620] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 281.899931][T12620] lowmem_reserve[]: 0 0 0 0 0 [ 281.915013][T12620] Node 1 Normal free:3878368kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25740kB local_pcp:14336kB free_cma:0kB [ 281.989024][T12620] lowmem_reserve[]: 0 0 0 0 0 [ 282.045573][T12645] netlink: 'syz.0.1866': attribute type 10 has an invalid length. [ 282.051939][T12620] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.077213][T12645] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 282.125222][T12620] Node 0 DMA32: 908*4kB (UM) 1696*8kB (UME) 706*16kB (UME) 624*32kB (UM) 594*64kB (UME) 489*128kB (UM) 390*256kB (UM) 280*512kB (UM) 142*1024kB (UE) 7*2048kB (UM) 201*4096kB (UM) = 1375312kB [ 282.126764][T12649] bond0: (slave syz_tun): Releasing backup interface [ 282.170067][T12620] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 282.185352][T12620] Node 1 Normal: 224*4kB (UE) 62*8kB (UME) 51*16kB (UME) 46*32kB (UME) 18*64kB (UME) 10*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3878368kB [ 282.213679][T12649] bond0: (slave team0): Releasing backup interface [ 282.222025][T12653] openvswitch: netlink: IPv4 tun info is not correct [ 282.223696][T12620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.239426][T12620] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.255465][T12620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.266074][T12620] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.266549][T12649] bond2: (slave veth0_to_bond): Releasing active interface [ 282.275678][T12620] 44007 total pagecache pages [ 282.288294][T12620] 0 pages in swap cache [ 282.295421][T12649] bond0: (slave bond_slave_0): Releasing backup interface [ 282.309173][T12620] Free swap = 124996kB [ 282.316222][T12620] Total swap = 124996kB [ 282.321632][T12649] bond0: (slave bond_slave_1): Releasing backup interface [ 282.331383][T12620] 2097051 pages RAM [ 282.339701][T12649] team0: Port device team_slave_0 removed [ 282.349946][T12649] team0: Port device team_slave_1 removed [ 282.356567][T12649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.364124][T12620] 0 pages HighMem/MovableOnly [ 282.368906][T12620] 425667 pages reserved [ 282.376563][T12620] 0 pages cma reserved [ 282.381918][T12649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.395230][T12649] bond2: (slave veth3): Releasing active interface [ 282.402163][T12649] bond2: (slave veth3): the permanent HWaddr of slave - ea:df:ff:f6:24:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 282.431052][T12649] bond2: (slave veth5): Releasing active interface [ 282.451384][T12649] bond4: (slave gretap3): Releasing active interface [ 282.486776][T12664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 282.509571][T12649] bond6: (slave gretap4): Releasing active interface [ 282.652060][T12669] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 282.826123][T12669] bond0 (unregistering): Released all slaves [ 282.997688][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1877'. [ 283.198209][T12699] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1880'. [ 283.473398][T12710] lo speed is unknown, defaulting to 1000 [ 283.510098][T12714] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1885'. [ 283.571373][T12714] xt_socket: unknown flags 0xd0 [ 283.768688][T12731] netlink: 'syz.2.1890': attribute type 21 has an invalid length. [ 283.954711][T12727] syzkaller1: entered promiscuous mode [ 283.965441][T12727] syzkaller1: entered allmulticast mode [ 284.099343][T12739] __nla_validate_parse: 2 callbacks suppressed [ 284.099366][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 284.152084][T12747] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1894'. [ 284.296215][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 284.324744][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 284.601160][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1899'. [ 285.228257][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1904'. [ 285.273654][T12787] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1904'. [ 285.312443][T12787] netlink: zone id is out of range [ 285.334357][T12787] netlink: get zone limit has 8 unknown bytes [ 285.747548][T12806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.802727][T12809] sch_fq: defrate 0 ignored. [ 285.941625][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1914'. [ 285.992048][T12819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1914'. [ 286.276945][T12830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1919'. [ 286.399126][T12838] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 286.958661][ T5932] IPVS: starting estimator thread 0... [ 287.050404][T12871] IPVS: using max 27 ests per chain, 64800 per kthread [ 287.326592][T12882] netlink: 'syz.2.1934': attribute type 1 has an invalid length. [ 288.077405][T12911] team0 (unregistering): Port device team_slave_0 removed [ 288.106577][T12911] team0 (unregistering): Port device team_slave_1 removed [ 288.128723][T12911] team0 (unregistering): Port device batadv1 removed [ 288.166315][T12911] team0 (unregistering): Port device geneve0 removed [ 288.202106][T12911] team0 (unregistering): Port device dummy0 removed [ 289.159692][T12968] team0: Device gtp1 is up. Set it down before adding it as a team port [ 289.215969][T12984] __nla_validate_parse: 5 callbacks suppressed [ 289.215989][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1958'. [ 289.383404][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 289.637617][T13004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1962'. [ 289.879078][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 290.172335][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 290.175520][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 290.192467][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 290.397486][T13046] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1970'. [ 290.520034][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1972'. [ 290.538653][T13050] IPv6: Can't replace route, no match found [ 290.545618][T13050] IPv6: Can't replace route, no match found [ 290.577848][T13054] tipc: Enabled bearer , priority 0 [ 290.599769][T13054] syzkaller0: entered promiscuous mode [ 290.636505][T13054] syzkaller0: entered allmulticast mode [ 290.677493][T13054] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 290.714384][T13054] tipc: Resetting bearer [ 290.726655][T13053] tipc: Resetting bearer [ 290.765723][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 290.807490][T13053] tipc: Disabling bearer [ 290.865090][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.162797][ T7384] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.186564][ T7384] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.210832][ T7384] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.234520][ T7384] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.335111][T13093] lo: MTU too low for tipc bearer [ 291.364905][T13093] tipc: Enabling of bearer rejected, failed to enable media [ 292.088179][T13125] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 292.201825][T13125] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.237478][T13133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.251584][T13133] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.265809][T13133] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 292.482971][T13125] veth7: entered promiscuous mode [ 292.531386][T13148] netlink: 'syz.1.1997': attribute type 1 has an invalid length. [ 292.545674][T13125] bond7: (slave veth7): Enslaving as an active interface with a down link [ 292.564868][T13139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.982832][T13166] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 292.992948][T13166] netlink: 'syz.1.2004': attribute type 3 has an invalid length. [ 293.533213][T13190] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 295.241736][ T55] block nbd2: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 60 seconds [ 295.252513][ T55] block nbd2: Possible stuck request ffff8880255b01c0: control (read@1024,1024B). Runtime 60 seconds [ 295.264385][ T55] block nbd2: Possible stuck request ffff8880255b0380: control (read@2048,1024B). Runtime 60 seconds [ 295.275393][ T55] block nbd2: Possible stuck request ffff8880255b0540: control (read@3072,1024B). Runtime 60 seconds [ 297.161080][ T5235] udevd[5235]: worker [8280] /devices/virtual/block/nbd2 is taking a long time [ 314.505130][T13231] netlink: 'syz.1.2024': attribute type 23 has an invalid length. [ 314.554248][T13242] __nla_validate_parse: 14 callbacks suppressed [ 314.554270][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 314.588122][T13242] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 314.606358][T13242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.628285][T13244] netlink: 'syz.0.2027': attribute type 7 has an invalid length. [ 315.363052][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2038'. [ 317.646298][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.754950][T13286] tipc: Enabled bearer , priority 0 [ 317.869582][T13286] tipc: Disabling bearer [ 318.105383][T13308] netlink: 'syz.3.2045': attribute type 18 has an invalid length. [ 318.124749][T13312] netlink: 'syz.1.2046': attribute type 6 has an invalid length. [ 318.151605][T13313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.229823][T13318] netlink: 'syz.2.2049': attribute type 21 has an invalid length. [ 318.264620][T13318] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2049'. [ 318.407678][T13320] tipc: Enabled bearer , priority 0 [ 318.429198][T13322] ip6gre0: entered allmulticast mode [ 318.463796][T13320] syzkaller0: entered promiscuous mode [ 318.480360][T13320] syzkaller0: entered allmulticast mode [ 318.547865][T13320] tipc: Resetting bearer [ 318.613683][T13319] tipc: Resetting bearer [ 318.646511][T13331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2054'. [ 318.664198][T13319] tipc: Disabling bearer [ 318.839021][T13341] sctp: [Deprecated]: syz.1.2057 (pid 13341) Use of int in maxseg socket option. [ 318.839021][T13341] Use struct sctp_assoc_value instead [ 318.988607][T13350] syzkaller1: entered promiscuous mode [ 319.005638][T13350] syzkaller1: entered allmulticast mode [ 319.081944][T13355] IPVS: set_ctl: invalid protocol: 50 172.20.20.56:20000 [ 319.229605][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 319.316066][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 319.630985][T13376] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2069'. [ 319.932227][T13388] tipc: Enabled bearer , priority 0 [ 319.939935][T13387] syzkaller0: entered promiscuous mode [ 319.958482][T13387] syzkaller0: entered allmulticast mode [ 320.009821][T13388] tipc: Resetting bearer [ 320.139664][T13387] tipc: Resetting bearer [ 320.313419][T13387] tipc: Disabling bearer [ 320.365221][T13403] veth0: entered promiscuous mode [ 320.389673][T13413] veth0: left promiscuous mode [ 320.412542][T13409] can: request_module (can-proto-0) failed. [ 320.429108][T13411] can: request_module (can-proto-0) failed. [ 320.585443][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2079'. [ 320.692019][T13429] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 320.699823][T13429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2082'. [ 320.972753][T13443] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2086'. [ 320.989883][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 321.106056][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 321.190543][T13455] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2090'. [ 321.229946][T13449] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 321.250465][T13449] netlink: 'syz.3.2089': attribute type 2 has an invalid length. [ 321.267916][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 321.283938][T13456] team_slave_0: entered promiscuous mode [ 321.289988][T13456] team_slave_1: entered promiscuous mode [ 321.314597][T13456] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 321.322716][T13456] team0: Device macvtap1 is already an upper device of the team interface [ 321.336921][T13456] team_slave_0: left promiscuous mode [ 321.342510][T13456] team_slave_1: left promiscuous mode [ 321.365800][T13449] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 321.374506][T13449] netlink: 'syz.3.2089': attribute type 2 has an invalid length. [ 321.384183][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 321.406907][T13449] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 321.415674][T13449] netlink: 'syz.3.2089': attribute type 2 has an invalid length. [ 321.423977][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 321.433699][T13449] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 321.442305][T13449] netlink: 'syz.3.2089': attribute type 2 has an invalid length. [ 321.451542][T13449] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 321.684101][T13473] tipc: Enabling of bearer rejected, failed to enable media [ 322.957684][T13550] sctp: [Deprecated]: syz.1.2116 (pid 13550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.957684][T13550] Use struct sctp_sack_info instead [ 323.205151][T13562] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 323.251908][T13562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.420007][T13570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.526349][T13569] ipvlan1: entered promiscuous mode [ 323.685126][T13570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.828149][T13570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.034395][T13570] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.281137][ T7397] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.413566][ T3556] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.572774][ T3556] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.617322][ T3556] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.183491][T13645] smc: net device bond0 applied user defined pnetid SYZ2 [ 325.283349][T13651] __nla_validate_parse: 68 callbacks suppressed [ 325.283370][T13651] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2142'. [ 325.330297][ T55] block nbd2: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 90 seconds [ 325.341224][ T55] block nbd2: Possible stuck request ffff8880255b01c0: control (read@1024,1024B). Runtime 90 seconds [ 325.353105][ T55] block nbd2: Possible stuck request ffff8880255b0380: control (read@2048,1024B). Runtime 90 seconds [ 325.364485][ T55] block nbd2: Possible stuck request ffff8880255b0540: control (read@3072,1024B). Runtime 90 seconds [ 325.547520][T13651] smc: removing net device bond0 with user defined pnetid SYZ2 [ 325.572594][T13662] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2146'. [ 325.610442][T13651] bond0 (unregistering): left promiscuous mode [ 325.643504][T13651] bond_slave_0: left promiscuous mode [ 325.662626][T13651] bond_slave_1: left promiscuous mode [ 325.683245][T13651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.705169][T13651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.741437][T13651] bond0 (unregistering): Released all slaves [ 325.788356][T13669] veth1_macvtap: left promiscuous mode [ 325.809894][T13669] macsec0: entered promiscuous mode [ 325.836563][T13669] macsec0: entered allmulticast mode [ 325.846236][T13670] veth1_macvtap: entered promiscuous mode [ 325.881714][T13670] veth1_macvtap: entered allmulticast mode [ 325.894685][T13670] macsec0: left promiscuous mode [ 325.910349][T13670] macsec0: left allmulticast mode [ 325.931379][T13670] veth1_macvtap: left allmulticast mode [ 326.028064][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 326.120848][T13688] veth0_to_bridge: entered promiscuous mode [ 326.157168][T13688] veth0_to_bridge: left promiscuous mode [ 326.243505][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 326.499227][T13704] tipc: Enabled bearer , priority 0 [ 326.528831][T13704] syzkaller0: entered promiscuous mode [ 326.541011][T13704] syzkaller0: entered allmulticast mode [ 326.574521][T13704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 326.604296][T13713] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2159'. [ 326.695010][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 326.918155][T13722] veth0: entered promiscuous mode [ 326.936487][T13724] tipc: Resetting bearer [ 326.957045][T13701] tipc: Resetting bearer [ 326.988348][T13701] tipc: Disabling bearer [ 327.016689][T13723] veth0 (unregistering): left promiscuous mode [ 327.071062][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 327.332466][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'. [ 327.393708][T13741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.582908][T13755] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2171'. [ 327.619555][T13758] sctp: [Deprecated]: syz.2.2172 (pid 13758) Use of int in max_burst socket option. [ 327.619555][T13758] Use struct sctp_assoc_value instead [ 327.810911][T13768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 327.887107][T13768] 8021q: VLANs not supported on ip_vti0 [ 328.468859][T13798] bond7: entered allmulticast mode [ 328.475321][T13798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 328.483562][T13798] bridge0: port 4(bond7) entered blocking state [ 328.490910][T13798] bridge0: port 4(bond7) entered disabled state [ 328.506579][T13798] bond7: entered promiscuous mode [ 328.673261][T13814] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 328.689760][T13814] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 328.812707][T13824] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.167804][T13834] nbd: nbd64 already in use [ 329.192559][T13836] pim6reg1: entered promiscuous mode [ 329.226805][T13836] pim6reg1: entered allmulticast mode [ 329.521351][T13851] wireguard: wg2: Could not create IPv4 socket [ 329.600859][ T5917] udevd[5917]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 329.867391][T13863] lo speed is unknown, defaulting to 1000 [ 329.887930][T13876] validate_nla: 123 callbacks suppressed [ 329.887952][T13876] netlink: 'syz.0.2202': attribute type 4 has an invalid length. [ 330.356455][T13898] __nla_validate_parse: 10 callbacks suppressed [ 330.356478][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2208'. [ 330.360877][ T7397] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.396438][ T7397] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.418225][ T7397] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.439867][ T7397] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.446389][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 330.462544][ T7395] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 330.467689][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2210'. [ 330.592976][T13904] syzkaller1: entered promiscuous mode [ 330.598717][T13904] syzkaller1: entered allmulticast mode [ 330.609891][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 330.915530][T13908] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2212'. [ 331.183375][T13915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.594967][T13940] !€ÿ: renamed from bond_slave_0 [ 331.661098][T13938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2221'. [ 331.963250][T13951] syz.2.2227 uses old SIOCAX25GETINFO [ 332.148678][T13951] pim6reg: entered allmulticast mode [ 332.315016][T13957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2229'. [ 332.351370][T13957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2229'. [ 332.452222][T13976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.528786][T13977] sctp: [Deprecated]: syz.4.2233 (pid 13977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.528786][T13977] Use struct sctp_sack_info instead [ 332.655764][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2239'. [ 332.795578][T13997] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2241'. [ 332.824295][T13997] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 332.888450][T14001] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 333.872965][T13968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.911617][T13968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.999460][T14017] netlink: 'syz.0.2243': attribute type 4 has an invalid length. [ 334.147526][T13968] vlan0: left allmulticast mode [ 334.153166][T13968] veth0_vlan: left allmulticast mode [ 334.158605][T13968] vlan0: left promiscuous mode [ 334.300461][ T7384] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.308966][ T7384] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.324737][ T7384] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.337891][ T7384] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.352918][ T7384] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.398879][ T7384] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.431094][ T7384] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.439538][ T7384] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.676946][T14047] openvswitch: netlink: Flow key attr not present in new flow. [ 334.699691][T14042] bridge5: port 1(veth9) entered blocking state [ 334.706838][T14042] bridge5: port 1(veth9) entered disabled state [ 334.713674][T14042] veth9: entered allmulticast mode [ 334.722981][T14042] veth9: entered promiscuous mode [ 334.737118][T14049] vlan0: entered allmulticast mode [ 334.743426][T14049] veth0_to_bond: entered allmulticast mode [ 334.749851][T14049] bridge5: port 2(vlan0) entered blocking state [ 334.758658][T14049] bridge5: port 2(vlan0) entered disabled state [ 334.766761][T14049] vlan0: entered promiscuous mode [ 334.772143][T14049] veth0_to_bond: entered promiscuous mode [ 334.786529][T14055] netlink: 'syz.0.2253': attribute type 3 has an invalid length. [ 334.794844][T14055] netlink: 'syz.0.2253': attribute type 1 has an invalid length. [ 334.815702][T14051] syzkaller0: entered promiscuous mode [ 334.823628][T14051] syzkaller0: entered allmulticast mode [ 334.984549][T14057] netlink: 'syz.0.2254': attribute type 10 has an invalid length. [ 335.073532][T14057] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 335.347806][T14069] net veth1_virt_wifi .: renamed from virt_wifi0 [ 335.933020][T14091] __nla_validate_parse: 2 callbacks suppressed [ 335.933042][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 335.984296][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 336.007387][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 336.019736][T14100] netlink: 'syz.1.2269': attribute type 1 has an invalid length. [ 336.057974][T14100] netlink: 'syz.1.2269': attribute type 11 has an invalid length. [ 336.069510][T14100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2269'. [ 336.111258][T14104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2270'. [ 336.259359][T14108] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 336.474971][T14113] netlink: 'syz.4.2273': attribute type 21 has an invalid length. [ 336.492018][T14113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2273'. [ 336.507866][T14115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2274'. [ 336.530624][T14113] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2273'. [ 336.551502][T14113] openvswitch: netlink: Message has 2 unknown bytes. [ 336.567034][T14113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.317569][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2286'. [ 337.322468][T14159] netlink: 'syz.0.2285': attribute type 8 has an invalid length. [ 337.421092][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 337.507981][T14173] netlink: 'syz.4.2288': attribute type 6 has an invalid length. [ 337.517865][T14173] netlink: 'syz.4.2288': attribute type 5 has an invalid length. [ 337.904707][T14173] netlink: 'syz.4.2288': attribute type 1 has an invalid length. [ 337.929137][T14173] netlink: 'syz.4.2288': attribute type 3 has an invalid length. [ 338.162150][T14190] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 338.186500][T14191] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 338.488869][T14201] atomic_op ffff88802439b198 conn xmit_atomic 0000000000000000 [ 338.673575][T14210] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 338.714834][T14210] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 338.773261][T14219] tipc: Enabled bearer , priority 0 [ 338.848169][T14210] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 338.986506][T14210] tipc: Resetting bearer [ 339.525036][T14258] nbd: must specify a device to reconfigure [ 339.724959][T14265] veth1_macvtap: left promiscuous mode [ 339.745381][T14265] team0: Device veth1_macvtap failed to register rx_handler [ 340.238634][T14292] validate_nla: 3 callbacks suppressed [ 340.238654][T14292] netlink: 'syz.4.2322': attribute type 1 has an invalid length. [ 340.320220][T12135] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 340.333160][T12135] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 340.342071][ T7961] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 340.410945][ T7961] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 340.433321][ T7961] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 340.476904][T14299] bridge0: Device is already in use. [ 340.484052][T14300] bridge0: Device is already in use. [ 340.534265][T14303] veth0_to_bridge: entered allmulticast mode [ 340.996803][T14319] x_tables: ip_tables: udp match: only valid for protocol 17 [ 341.194894][T14336] netlink: 'syz.0.2337': attribute type 30 has an invalid length. [ 341.215028][T14336] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 341.244978][T14336] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 341.421157][T14347] __nla_validate_parse: 16 callbacks suppressed [ 341.421179][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 341.509236][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'. [ 341.570343][T14347] netlink: 'syz.4.2340': attribute type 3 has an invalid length. [ 341.617490][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2344'. [ 341.684664][T14364] netlink: 'syz.0.2345': attribute type 1 has an invalid length. [ 341.726538][T14364] 8021q: adding VLAN 0 to HW filter on device bond8 [ 341.928840][T14364] 8021q: adding VLAN 0 to HW filter on device bond8 [ 341.943607][T14364] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 341.966591][T14364] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 342.082625][T14378] netlink: 212316 bytes leftover after parsing attributes in process `syz.4.2347'. [ 342.126952][T14366] veth15: entered promiscuous mode [ 342.198412][T14369] gretap5: entered allmulticast mode [ 342.450338][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2351'. [ 342.603113][T14391] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 342.622352][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 342.723115][T14404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.764945][ T5932] lo speed is unknown, defaulting to 1000 [ 342.778730][ T5932] syz0: Port: 1 Link ACTIVE [ 342.858854][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2356'. [ 342.891384][ T7970] lo speed is unknown, defaulting to 1000 [ 342.924922][T14426] vlan1: entered allmulticast mode [ 342.940642][T14426] hsr0: entered allmulticast mode [ 342.950930][T14426] hsr_slave_0: entered allmulticast mode [ 342.966420][T14426] hsr_slave_1: entered allmulticast mode [ 343.229020][T14435] lo speed is unknown, defaulting to 1000 [ 343.583799][T14444] veth0_to_bridge: entered promiscuous mode [ 343.741755][T14447] veth0_to_bridge: left promiscuous mode [ 344.175694][T14466] nbd: device at index 4 is going down [ 344.182809][T14466] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.2368'. [ 344.280460][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 344.307234][T14468] geneve2: entered promiscuous mode [ 344.337116][T14468] geneve2: entered allmulticast mode [ 344.396591][T14471] smc: adding net device bond0 with user defined pnetid SYZ2 [ 344.432607][T14471] bond0: entered promiscuous mode [ 344.437725][T14471] bond0: entered allmulticast mode [ 344.446005][T14471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.482418][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2372'. [ 344.722232][ T5917] udevd[5917]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 344.813669][T14496] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 345.095896][T14471] smc: removing net device bond0 with user defined pnetid SYZ2 [ 345.110842][T14513] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 345.120991][T14471] bond0 (unregistering): Released all slaves [ 345.179099][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 345.194293][T14475] bridge0: port 3(syz_tun) entered blocking state [ 345.202790][T14475] bridge0: port 3(syz_tun) entered disabled state [ 345.211010][T14475] syz_tun: entered allmulticast mode [ 345.218580][T14475] syz_tun: entered promiscuous mode [ 345.234235][T14475] bridge0: port 3(syz_tun) entered blocking state [ 345.241212][T14475] bridge0: port 3(syz_tun) entered forwarding state [ 345.264715][T14486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.300027][T14499] syzkaller1: entered promiscuous mode [ 345.312648][T14499] syzkaller1: entered allmulticast mode [ 345.320021][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 345.335150][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 345.425507][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 345.478437][T14525] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2385'. [ 345.752294][T14535] xt_limit: Overflow, try lower: 271964/0 [ 346.885348][T14587] netlink: 'syz.4.2402': attribute type 1 has an invalid length. [ 346.901322][T14587] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2402'. [ 347.166981][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2403'. [ 347.336502][T14602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2405'. [ 347.563009][T14608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.634384][T14608] openvswitch: netlink: Multiple metadata blocks provided [ 348.220653][T14629] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 348.539403][T14647] netlink: 'syz.4.2419': attribute type 1 has an invalid length. [ 348.554451][T14649] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.2417'. [ 348.561649][T14647] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 348.580764][ T7970] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 349.058846][T14669] netlink: 'syz.2.2425': attribute type 7 has an invalid length. [ 349.073549][T14669] netlink: 'syz.2.2425': attribute type 8 has an invalid length. [ 349.086996][T14669] tipc: Enabling of bearer rejected, failed to enable media [ 349.274731][T14673] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2427'. [ 349.322412][ T7970] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 349.868567][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2434'. [ 349.947085][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 350.036491][T14703] dummy0: entered promiscuous mode [ 350.059377][T14703] batadv_slave_1: entered promiscuous mode [ 350.070781][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 350.102497][T14703] debugfs: 'hsr1' already exists in 'hsr' [ 350.108394][T14703] Cannot create hsr debugfs directory [ 350.125071][T14710] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 350.871115][ T30] audit: type=1800 audit(1757290498.053:7): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2443" name="memory.events" dev="tmpfs" ino=2536 res=0 errno=0 [ 351.081843][T14751] netlink: 'syz.1.2449': attribute type 1 has an invalid length. [ 351.213448][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2450'. [ 351.425909][T14759] pimreg: entered allmulticast mode [ 352.015944][T14793] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 352.071270][T14792] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2459'. [ 352.200379][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 352.322980][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2463'. [ 352.415349][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 352.471942][T14818] netlink: 'syz.2.2463': attribute type 1 has an invalid length. [ 352.749584][T14816] bond8: (slave bridge6): making interface the new active one [ 352.762159][T14816] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 352.773587][T14819] smc: net device erspan0 applied user defined pnetid SYZ2 [ 353.424335][T14848] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 353.518030][T14855] openvswitch: netlink: Message has -1 unknown bytes. [ 353.541749][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'. [ 353.569810][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'. [ 353.803199][T14865] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 353.931325][T14875] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 353.961886][T14875] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 353.982326][T14875] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 354.015261][T14875] netlink: 'syz.4.2486': attribute type 2 has an invalid length. [ 354.041333][T14875] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2486'. [ 354.306818][T14890] bond0: entered promiscuous mode [ 354.367613][T14890] batadv0: entered promiscuous mode [ 354.391833][T14890] debugfs: 'hsr2' already exists in 'hsr' [ 354.397642][T14890] Cannot create hsr debugfs directory [ 354.422301][T14901] Bluetooth: MGMT ver 1.23 [ 354.436995][T14902] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2490'. [ 354.439495][T14890] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 354.458509][T14890] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 354.469767][T14890] hsr2: entered allmulticast mode [ 354.480677][T14890] bond0: entered allmulticast mode [ 354.491414][T14890] batadv0: entered allmulticast mode [ 354.502218][T14890] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 354.718272][T14890] bond0: left promiscuous mode [ 354.769329][T14890] batadv0: left promiscuous mode [ 355.016478][T14916] netlink: 'syz.2.2497': attribute type 11 has an invalid length. [ 355.041553][T14916] netlink: 'syz.2.2497': attribute type 11 has an invalid length. [ 355.058238][T14916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2497'. [ 355.086140][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'. [ 355.098467][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 355.408431][ T55] block nbd2: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 120 seconds [ 355.420637][ T55] block nbd2: Possible stuck request ffff8880255b01c0: control (read@1024,1024B). Runtime 120 seconds [ 355.436246][ T55] block nbd2: Possible stuck request ffff8880255b0380: control (read@2048,1024B). Runtime 120 seconds [ 355.448213][ T55] block nbd2: Possible stuck request ffff8880255b0540: control (read@3072,1024B). Runtime 120 seconds [ 355.610492][T14945] netlink: 'syz.2.2504': attribute type 4 has an invalid length. [ 355.673543][T14945] netlink: 'syz.2.2504': attribute type 83 has an invalid length. [ 355.729300][T14947] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 355.746203][T14947] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 355.821259][T14952] tipc: Enabled bearer , priority 0 [ 355.831468][T14952] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 355.866045][T14952] tipc: Resetting bearer [ 356.440905][ T5876] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 356.450367][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 356.880579][ T7961] tipc: Node number set to 2866626357 [ 358.429413][T14956] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 358.471180][T14956] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.513475][T14959] IPv6: NLM_F_REPLACE set, but no existing node found! [ 358.555951][T14959] __nla_validate_parse: 7 callbacks suppressed [ 358.556325][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 358.723591][T14972] macvtap3: entered allmulticast mode [ 358.729180][T14972] bridge0: entered allmulticast mode [ 358.737305][T14972] bridge0: port 1(macvtap3) entered blocking state [ 358.744720][T14972] bridge0: port 1(macvtap3) entered disabled state [ 358.777891][T14972] bridge0: left allmulticast mode [ 358.797493][T14979] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.2512'. [ 358.820380][T14979] netlink: zone id is out of range [ 358.829911][T14979] netlink: zone id is out of range [ 358.838613][T14979] netlink: zone id is out of range [ 358.844501][T14979] netlink: zone id is out of range [ 358.852361][T14979] netlink: zone id is out of range [ 358.857829][T14979] netlink: zone id is out of range [ 358.865198][T14979] netlink: zone id is out of range [ 358.870992][T14979] netlink: zone id is out of range [ 358.878852][T14979] netlink: zone id is out of range [ 358.902727][T14979] netlink: zone id is out of range [ 359.036588][T14974] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 359.294809][T15001] netlink: 'syz.2.2521': attribute type 6 has an invalid length. [ 359.310609][T15001] netlink: 'syz.2.2521': attribute type 1 has an invalid length. [ 359.358603][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'. [ 359.376259][T15001] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2521'. [ 359.408949][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'. [ 359.487400][T15007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.494741][T15007] IPv6: NLM_F_CREATE should be set when creating new route [ 359.502305][T15007] IPv6: NLM_F_CREATE should be set when creating new route [ 359.509630][T15007] IPv6: NLM_F_CREATE should be set when creating new route [ 359.530445][T15008] netem: change failed [ 359.613501][T15011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.858975][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 359.896211][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 360.348925][T15033] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2531'. [ 360.378464][T15033] nbd: illegal input index -8454144 [ 360.388681][T15038] tipc: Enabling of bearer rejected, already enabled [ 360.567621][T15049] veth0_to_bridge: entered promiscuous mode [ 360.597627][T15049] veth0_to_bridge: left promiscuous mode [ 360.648472][T15049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2535'. [ 360.659522][T15049] tipc: Enabling of bearer rejected, failed to enable media [ 360.800469][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 361.578071][T15095] lo: entered promiscuous mode [ 361.604498][T15099] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 361.894559][T15112] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 361.907010][ T5932] tipc: Resetting bearer [ 361.928538][T15112] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 362.049687][T15112] syzkaller1: entered promiscuous mode [ 362.056076][T15112] syzkaller1: entered allmulticast mode [ 362.064478][T15112] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 362.188220][T15128] netlink: 'syz.2.2560': attribute type 12 has an invalid length. [ 362.212757][T15128] netlink: 'syz.2.2560': attribute type 29 has an invalid length. [ 362.428077][T15142] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 362.743398][ T5932] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 362.869521][T15174] : renamed from bridge_slave_0 [ 362.940512][ T5932] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 363.032883][T15184] netlink: 'syz.4.2576': attribute type 6 has an invalid length. [ 363.538329][T15211] 8021q: adding VLAN 0 to HW filter on device bond8 [ 363.668192][T15216] bond8: (slave geneve3): making interface the new active one [ 363.708486][T15216] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 363.989758][T15221] __nla_validate_parse: 141 callbacks suppressed [ 363.989778][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 364.048206][ T56] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 364.083069][ T56] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 364.188205][ T56] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 364.194034][T15239] net_ratelimit: 225 callbacks suppressed [ 364.194053][T15239] netlink: set zone limit has 8 unknown bytes [ 364.217846][ T56] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 364.348424][T15244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2596'. [ 364.380111][T15244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2596'. [ 364.434181][T15249] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2598'. [ 364.472744][T15254] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2601'. [ 364.501682][T15255] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 364.698117][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 364.802930][T15267] validate_nla: 4 callbacks suppressed [ 364.802951][T15267] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 364.886709][T15273] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2607'. [ 364.930834][T15273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2607'. [ 365.114473][T15271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 365.136177][T15271] bond7: (slave bond8): making interface the new active one [ 365.151553][T15271] bond7: (slave bond8): Enslaving as an active interface with an up link [ 365.197934][T15279] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 365.218526][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2608'. [ 365.430933][T15298] veth0_to_bond: entered allmulticast mode [ 365.463146][T15302] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 33619968, id = 0 [ 365.468117][T15304] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2612'. [ 365.501330][T15303] IPVS: stopping master sync thread 8646 ... [ 365.529761][T15304] gretap0: entered promiscuous mode [ 365.633705][T15311] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 365.650755][T15311] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 366.349237][T15350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.522847][T15358] Bluetooth: MGMT ver 1.23 [ 366.725269][T15371] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 366.850079][ T7956] hid (null): unknown global tag 0xe [ 366.869463][ T7956] hid (null): nested delimiters [ 368.092235][T15434] vlan3: entered allmulticast mode [ 368.107878][T15434] hsr0: entered allmulticast mode [ 368.136714][T15434] hsr_slave_0: entered allmulticast mode [ 368.159449][T15434] hsr_slave_1: entered allmulticast mode [ 368.839120][ T7956] hid-generic 0005:0D45:1012.0002: unknown global tag 0xe [ 368.848081][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 368.895679][ T7956] hid-generic 0005:0D45:1012.0002: item 0 2 1 14 parsing failed [ 368.915624][ T7956] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 369.024350][T15464] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 369.738914][T15503] __nla_validate_parse: 10 callbacks suppressed [ 369.738936][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2666'. [ 369.775089][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2666'. [ 369.809146][T15499] netlink: 'syz.2.2666': attribute type 7 has an invalid length. [ 369.838921][T15503] netlink: 'syz.2.2666': attribute type 7 has an invalid length. [ 369.876276][T15499] netlink: 'syz.2.2666': attribute type 8 has an invalid length. [ 369.907599][T15503] netlink: 'syz.2.2666': attribute type 8 has an invalid length. [ 369.930366][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 369.936642][T15508] lo speed is unknown, defaulting to 1000 [ 369.945979][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 369.986884][T15515] netlink: 'syz.4.2671': attribute type 29 has an invalid length. [ 370.031993][T15515] netlink: 'syz.4.2671': attribute type 29 has an invalid length. [ 370.117127][T15515] netlink: 'syz.4.2671': attribute type 29 has an invalid length. [ 370.200337][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 370.468715][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2675'. [ 370.617679][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 371.123324][T15571] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 371.137371][T15571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2685'. [ 371.147945][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 371.168295][T15571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2685'. [ 371.518021][T15586] tunl0: entered promiscuous mode [ 371.542459][T15586] netlink: 'syz.1.2690': attribute type 3 has an invalid length. [ 371.604198][T15586] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2690'. [ 371.858273][T15600] netlink: zone id is out of range [ 371.892954][T15600] netlink: zone id is out of range [ 371.898592][T15600] netlink: zone id is out of range [ 371.904582][T15600] netlink: zone id is out of range [ 371.918443][T15600] netlink: zone id is out of range [ 371.929852][T15600] netlink: zone id is out of range [ 371.943921][T15600] netlink: zone id is out of range [ 371.949846][T15600] netlink: zone id is out of range [ 371.958791][T15600] netlink: zone id is out of range [ 371.973248][T15600] netlink: zone id is out of range [ 371.979353][T15607] netlink: 'syz.3.2695': attribute type 1 has an invalid length. [ 373.307996][T15673] netlink: 'syz.3.2716': attribute type 5 has an invalid length. [ 373.576068][T15686] gre2: entered promiscuous mode [ 373.602196][T15686] gre2: entered allmulticast mode [ 373.901128][T15713] tipc: Enabling of bearer rejected, failed to enable media [ 374.303766][T15733] rdma_rxe: rxe_newlink: failed to add wlan1 [ 374.807301][T15769] __nla_validate_parse: 12 callbacks suppressed [ 374.807326][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 375.173926][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'. [ 375.346037][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 375.475466][T15803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'. [ 375.485687][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2752'. [ 375.497497][T15803] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 375.611843][T15810] validate_nla: 2 callbacks suppressed [ 375.611867][T15810] netlink: 'syz.4.2754': attribute type 1 has an invalid length. [ 375.670909][T15812] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2755'. [ 375.718213][T15817] netlink: 'syz.3.2757': attribute type 21 has an invalid length. [ 375.741136][T15810] bond9: (slave bridge6): making interface the new active one [ 375.749476][T15810] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 376.030519][T15835] sctp: [Deprecated]: syz.4.2759 (pid 15835) Use of int in maxseg socket option. [ 376.030519][T15835] Use struct sctp_assoc_value instead [ 376.097403][T15838] netlink: 'syz.1.2763': attribute type 1 has an invalid length. [ 376.208453][T15842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2765'. [ 376.786392][T15863] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 376.795392][T15863] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 377.449382][T15889] bond0: (slave wlan1): Releasing backup interface [ 377.481273][T15889] batman_adv: batadv0: Adding interface: wlan1 [ 377.487765][T15884] can: request_module (can-proto-4) failed. [ 377.509342][T15889] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.541216][T15889] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 377.555108][T15883] can: request_module (can-proto-4) failed. [ 377.771292][T15900] netlink: 'syz.0.2784': attribute type 1 has an invalid length. [ 377.814095][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 377.826900][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.843685][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.854747][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.871802][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.886644][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.913572][ T7397] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.938618][ T7397] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.015754][T15906] ip6gre1: entered allmulticast mode [ 378.025705][T15908] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 378.043748][ T7397] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 378.053920][ T7397] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.097575][T15902] lo speed is unknown, defaulting to 1000 [ 378.107827][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 378.126182][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'. [ 378.149242][ T7397] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 378.165835][ T7397] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.238175][ T7397] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 378.298755][ T7397] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.338853][T15916] net_ratelimit: 6 callbacks suppressed [ 378.338875][T15916] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 378.455514][T15924] xfrm1: entered promiscuous mode [ 378.466480][T15924] xfrm1: entered allmulticast mode [ 378.808774][ T7397] bond7: left promiscuous mode [ 378.819050][ T7397] bridge0: port 4(bond7) entered disabled state [ 378.840645][ T7397] batadv2: left allmulticast mode [ 378.845937][ T7397] batadv2: left promiscuous mode [ 378.853331][ T7397] bridge0: port 3(batadv2) entered disabled state [ 378.864556][ T7397] bridge_slave_1: left allmulticast mode [ 378.871306][ T7397] bridge_slave_1: left promiscuous mode [ 378.877217][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.891404][ T7397] bridge_slave_0: left allmulticast mode [ 378.897196][ T7397] bridge_slave_0: left promiscuous mode [ 378.903616][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.086733][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.283695][ T7397] bond3 (unregistering): (slave gretap1): Releasing active interface [ 379.306700][ T7397] bond4 (unregistering): (slave gretap2): Releasing active interface [ 379.329032][ T7397] bond6 (unregistering): (slave gretap3): Releasing active interface [ 379.410121][ T7397] dvmrp0 (unregistering): left allmulticast mode [ 379.432340][ T7397] bond8 (unregistering): (slave geneve3): Releasing active interface [ 379.735071][ T7397] bond1 (unregistering): Released all slaves [ 379.909232][ T7397] bond2 (unregistering): Released all slaves [ 379.961838][ T5876] Bluetooth: hci1: command tx timeout [ 380.048202][T15957] __nla_validate_parse: 2 callbacks suppressed [ 380.048222][T15957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2799'. [ 380.079198][ T7397] bond3 (unregistering): Released all slaves [ 380.097498][ T7397] bond4 (unregistering): Released all slaves [ 380.223504][ T7397] bond5 (unregistering): Released all slaves [ 380.345924][ T7397] bond6 (unregistering): (slave veth11): Releasing active interface [ 380.356268][ T7397] bond6 (unregistering): Released all slaves [ 380.478695][ T7397] bond0 (unregistering): Released all slaves [ 380.596824][ T7397] bond7 (unregistering): Released all slaves [ 380.723568][ T7397] bond8 (unregistering): Released all slaves [ 380.774955][T15944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.979006][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 381.005415][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 381.110822][ T7397] tipc: Disabling bearer [ 381.129883][ T7397] tipc: Left network mode [ 381.313150][T15902] chnl_net:caif_netlink_parms(): no params data found [ 381.432340][T15985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2806'. [ 381.689337][T15902] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.704517][T15902] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.705071][T15995] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2807'. [ 381.713693][T15902] bridge_slave_0: entered allmulticast mode [ 381.730025][T15902] bridge_slave_0: entered promiscuous mode [ 381.740895][T15902] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.748164][T15902] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.756014][T15902] bridge_slave_1: entered allmulticast mode [ 381.763601][T15902] bridge_slave_1: entered promiscuous mode [ 381.845072][T15996] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2809'. [ 381.995526][T15902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.040745][ T5876] Bluetooth: hci1: command tx timeout [ 382.105985][T15902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.191029][T16011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2813'. [ 382.366626][T16016] team0: Device vti0 is up. Set it down before adding it as a team port [ 382.417751][ T7397] dummy0: left promiscuous mode [ 382.425260][ T7397] batadv_slave_1: left promiscuous mode [ 382.437747][ T7397] hsr_slave_0: left promiscuous mode [ 382.450701][ T7397] hsr_slave_1: left promiscuous mode [ 382.456634][ T7397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.466202][ T7397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.558042][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 382.584921][T16021] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 382.597154][T16021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.644035][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2817'. [ 384.120917][ T5876] Bluetooth: hci1: command tx timeout [ 384.245920][T15902] team0: Port device team_slave_0 added [ 384.255742][T15902] team0: Port device team_slave_1 added [ 384.368554][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'. [ 384.420777][T15902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.429664][T15902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.457586][T15902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.477888][T16035] pim6reg1: entered promiscuous mode [ 384.486910][T16035] pim6reg1: entered allmulticast mode [ 384.496531][T15902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.504371][T15902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.533307][T15902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.575275][T16043] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 384.653772][T16043] smc: adding net device bond0 with user defined pnetid SYZ2 [ 384.700482][T15902] hsr_slave_0: entered promiscuous mode [ 384.707268][T15902] hsr_slave_1: entered promiscuous mode [ 384.714447][T15902] debugfs: 'hsr0' already exists in 'hsr' [ 384.720433][T15902] Cannot create hsr debugfs directory [ 384.816944][T16045] veth11: entered promiscuous mode [ 384.826593][T16045] bond0: (slave veth11): Enslaving as a backup interface with a down link [ 384.964738][T16052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.109496][ T7397] IPVS: stop unused estimator thread 0... [ 385.356808][T16064] openvswitch: netlink: Message has 2 unknown bytes. [ 385.364423][T16064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.442861][T16068] __nla_validate_parse: 1 callbacks suppressed [ 385.442884][T16068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2830'. [ 385.469739][T16072] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2829'. [ 385.484836][ T55] block nbd2: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 150 seconds [ 385.495825][ T55] block nbd2: Possible stuck request ffff8880255b01c0: control (read@1024,1024B). Runtime 150 seconds [ 385.508041][ T55] block nbd2: Possible stuck request ffff8880255b0380: control (read@2048,1024B). Runtime 150 seconds [ 385.512705][T16070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2830'. [ 385.519801][ T55] block nbd2: Possible stuck request ffff8880255b0540: control (read@3072,1024B). Runtime 150 seconds [ 385.732528][T15902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.748931][T15902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.756263][T16079] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2834'. [ 385.770513][T15902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.784671][T15902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.902372][T16088] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2835'. [ 385.914333][T16088] netlink: zone id is out of range [ 385.919566][T16088] netlink: get zone limit has 8 unknown bytes [ 385.937822][T15902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.979358][T15902] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.004052][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.011271][ T7397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.038354][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.045666][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.203013][ T5876] Bluetooth: hci1: command tx timeout [ 386.276755][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2838'. [ 386.424899][T16112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2841'. [ 386.614629][T15902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.628374][T16121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2843'. [ 386.638386][T16120] C: renamed from lo [ 386.707463][T16123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2845'. [ 386.787866][T16126] syzkaller1: entered promiscuous mode [ 386.798944][T16126] syzkaller1: entered allmulticast mode [ 386.818774][T16119] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2845'. [ 386.846326][T16128] tipc: Enabled bearer , priority 0 [ 386.859745][T16128] syzkaller0: entered promiscuous mode [ 386.867658][T16128] syzkaller0: entered allmulticast mode [ 386.898261][T15902] veth0_vlan: entered promiscuous mode [ 386.905675][T16128] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.995149][T16128] tipc: Resetting bearer [ 387.016892][T16127] tipc: Resetting bearer [ 387.061261][T16127] tipc: Disabling bearer [ 387.089922][T15902] veth1_vlan: entered promiscuous mode [ 387.159400][T15902] veth0_macvtap: entered promiscuous mode [ 387.245197][T15902] veth1_macvtap: entered promiscuous mode [ 387.349085][T15902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.370566][T15902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.407767][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.421278][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.474823][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.484459][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.258810][T16162] team0: Mode changed to "loadbalance" [ 388.297968][ T7397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.325504][ T7397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.423774][ T7389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.439894][ T7389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.710957][T16181] netlink: 'syz.1.2776': attribute type 2 has an invalid length. [ 388.718797][T16181] nbd: must specify a device to reconfigure [ 388.916616][T16190] netlink: 'syz.3.2863': attribute type 13 has an invalid length. [ 389.327474][T16205] batman_adv: batadv0: Removing interface: wlan1 [ 389.359343][T16205] netlink: 'syz.0.2869': attribute type 2 has an invalid length. [ 389.855705][T16235] netlink: 'syz.3.2877': attribute type 3 has an invalid length. [ 390.059099][T16252] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 390.394416][T16263] veth0_to_team: entered promiscuous mode [ 390.415838][T16263] veth0_to_team: entered allmulticast mode [ 390.462599][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 390.474951][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 390.484994][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.496498][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 390.506404][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 390.583273][T16265] lo speed is unknown, defaulting to 1000 [ 390.726898][T16273] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 390.755726][T16273] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 391.160123][T16289] __nla_validate_parse: 14 callbacks suppressed [ 391.184194][T16289] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2894'. [ 391.309440][T16297] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2896'. [ 391.319264][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 391.339833][T16290] bridge0: port 1(veth0_to_bridge) entered blocking state [ 391.370512][T16290] bridge0: port 1(veth0_to_bridge) entered disabled state [ 391.390547][T16290] veth0_to_bridge: entered allmulticast mode [ 391.426580][T16290] veth0_to_bridge: entered promiscuous mode [ 391.471125][T16265] chnl_net:caif_netlink_parms(): no params data found [ 391.598629][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2897'. [ 391.727622][T16265] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.737851][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.745381][T16265] bridge_slave_0: entered allmulticast mode [ 391.757220][T16265] bridge_slave_0: entered promiscuous mode [ 391.767235][T16265] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.774955][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.784330][T16265] bridge_slave_1: entered allmulticast mode [ 391.792952][T16265] bridge_slave_1: entered promiscuous mode [ 391.866408][T16318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2900'. [ 391.913452][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.938460][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.973691][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 391.994541][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2901'. [ 392.144852][T16265] team0: Port device team_slave_0 added [ 392.166021][ T7389] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.246212][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'. [ 392.296487][T16265] team0: Port device team_slave_1 added [ 392.303843][ T7389] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.314207][ T7389] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.323088][T16337] team0: vlans aren't supported yet for dev_uc|mc_add() [ 392.433873][ T7385] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.444106][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.458533][T16345] netlink: 'syz.1.2907': attribute type 1 has an invalid length. [ 392.460380][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.520804][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.542579][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.545327][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 392.549567][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.549598][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.603583][ T51] Bluetooth: hci5: command tx timeout [ 392.762935][T16265] hsr_slave_0: entered promiscuous mode [ 392.791796][T16265] hsr_slave_1: entered promiscuous mode [ 392.811698][T16265] debugfs: 'hsr0' already exists in 'hsr' [ 392.830022][T16265] Cannot create hsr debugfs directory [ 392.991966][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 393.076729][T16356] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 393.329571][T16366] team0: Device vti0 is up. Set it down before adding it as a team port [ 393.455370][T16369] team0: Device vti0 is up. Set it down before adding it as a team port [ 393.846871][T16390] netlink: 'syz.0.2923': attribute type 4 has an invalid length. [ 393.869385][T16265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 393.908568][T16265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 393.947395][T16265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 393.999557][T16265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 394.049982][T16401] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 394.385589][T16424] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 394.501787][T16424] 8021q: adding VLAN 0 to HW filter on device bond10 [ 394.620738][T16427] bond10: (slave geneve2): making interface the new active one [ 394.662634][T16429] netlink: 'syz.0.2933': attribute type 12 has an invalid length. [ 394.680565][ T51] Bluetooth: hci5: command tx timeout [ 394.686408][T16429] netlink: 'syz.0.2933': attribute type 11 has an invalid length. [ 394.698375][T16427] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 394.737809][ T7397] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.778751][ T7397] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.833709][ T7397] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.860118][ T7385] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.881183][T16431] lo speed is unknown, defaulting to 1000 [ 394.933972][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.062054][T16265] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.106563][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.113915][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.186205][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.193471][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.228625][T16442] netlink: 'syz.3.2937': attribute type 5 has an invalid length. [ 395.584244][T16458] geneve4: entered promiscuous mode [ 395.625013][T16458] geneve4: entered allmulticast mode [ 395.661769][ T56] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 395.699232][ T3556] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 395.728193][T16461] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.749893][T16461] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.803864][ T3556] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 396.058148][T16265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.760626][ T51] Bluetooth: hci5: command tx timeout [ 396.769627][T16265] veth0_vlan: entered promiscuous mode [ 396.797561][T16500] lo speed is unknown, defaulting to 1000 [ 396.833207][T16265] veth1_vlan: entered promiscuous mode [ 396.935758][T16265] veth0_macvtap: entered promiscuous mode [ 396.973673][T16265] veth1_macvtap: entered promiscuous mode [ 397.028299][T16265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.047292][T16511] __nla_validate_parse: 11 callbacks suppressed [ 397.047315][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'. [ 397.077686][T16265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.133361][ T7395] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.186541][ T7395] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.205960][ T7395] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.228533][ T7395] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.268620][T16461] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.295133][T16461] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.317591][T16461] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 397.370063][T16504] ieee802154 phy1 wpan1: encryption failed: -90 [ 397.423450][T16504] netlink: 'syz.4.2952': attribute type 13 has an invalid length. [ 397.436152][T16461] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.439625][T16504] netlink: 'syz.4.2952': attribute type 17 has an invalid length. [ 397.462653][T16461] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.473657][T16461] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 397.576053][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.613111][T16504] ip6gre0: left allmulticast mode [ 397.667162][T16504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.698826][T16461] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.709974][T16461] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.724821][T16461] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 397.915324][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.926830][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.077947][ T7385] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.086505][ T7385] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 398.096738][ T7385] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.127125][T16542] syzkaller0: entered promiscuous mode [ 398.144847][T16542] syzkaller0: entered allmulticast mode [ 398.206279][T16546] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2963'. [ 398.216927][T16546] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2963'. [ 398.288063][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.298323][ T3556] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.314736][ T3556] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 398.333460][ T3556] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.352501][ T3556] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.373855][ T3556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 398.386627][ T3556] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.429446][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 398.444881][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.447610][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 398.472909][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.482813][ T7397] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.509616][ T7397] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 398.526737][ T7397] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 398.546907][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 398.688049][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.742189][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.797758][T16560] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2966'. [ 398.840685][ T51] Bluetooth: hci5: command tx timeout [ 398.842596][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 398.869353][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'. [ 398.872666][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2967'. [ 398.951255][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.035213][T16567] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 399.146631][T16567] dummy0: entered promiscuous mode [ 399.207225][T16567] bridge0: port 3(dummy0) entered blocking state [ 399.271828][T16567] bridge0: port 3(dummy0) entered disabled state [ 399.292708][T16567] dummy0: entered allmulticast mode [ 399.328615][T16567] bridge0: port 3(dummy0) entered blocking state [ 399.335217][T16567] bridge0: port 3(dummy0) entered forwarding state [ 399.393511][T16567] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 399.448709][T16567] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 399.521311][T16567] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 399.556490][T16567] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 399.611380][T16567] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 399.640957][T16567] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 399.806052][T16603] openvswitch: netlink: Flow actions attr not present in new flow. [ 400.405072][T16627] validate_nla: 9 callbacks suppressed [ 400.405092][T16627] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 400.447233][T16622] netlink: 'syz.0.2985': attribute type 1 has an invalid length. [ 400.513370][T16630] netlink: 'syz.3.2984': attribute type 1 has an invalid length. [ 400.520089][T16627] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.554884][ T5876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.560541][T16627] bridge_slave_1: left allmulticast mode [ 400.568518][ T5876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.579386][T16627] bridge_slave_1: left promiscuous mode [ 400.585651][ T5876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.601146][ T5876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 400.611286][ T5876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 400.624748][T16627] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.853463][T16622] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 401.035723][ T7389] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.087031][ T7389] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.189345][T16629] lo speed is unknown, defaulting to 1000 [ 401.259843][ T7389] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.301333][ T7389] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.383212][T16656] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.557975][ T7389] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.608759][ T7389] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.113878][T16662] vlan0 (unregistering): left allmulticast mode [ 402.130342][T16662] veth0_vlan (unregistering): left allmulticast mode [ 402.142243][T16662] vlan0 (unregistering): left promiscuous mode [ 402.280682][ T51] Bluetooth: hci5: command tx timeout [ 402.299728][ T7389] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.339214][ T7389] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.680820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.840527][ T51] Bluetooth: hci6: command tx timeout [ 403.111350][T16694] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 403.274278][T16704] __nla_validate_parse: 20 callbacks suppressed [ 403.274299][T16704] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3005'. [ 404.832274][ T7389] bond2 (unregistering): (slave gretap1): Releasing active interface [ 404.876011][ T7389] bond7 (unregistering): (slave gretap3): Releasing backup interface [ 404.924765][ T51] Bluetooth: hci6: command tx timeout [ 404.946680][ T7389] bond10 (unregistering): (slave geneve2): Releasing active interface [ 405.015882][ T7389] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 405.301800][ T7389] bond9 (unregistering): (slave bridge6): Releasing active interface [ 405.500686][ T7389] bond0 (unregistering): (slave team0): Releasing backup interface [ 405.510986][ T7389] bond0 (unregistering): Released all slaves [ 405.526902][ T7389] bond1 (unregistering): Released all slaves [ 405.541461][ T7389] bond2 (unregistering): Released all slaves [ 405.557275][ T7389] bond3 (unregistering): Released all slaves [ 405.576604][ T7389] bond4 (unregistering): Released all slaves [ 405.598723][ T7389] bond5 (unregistering): Released all slaves [ 405.615023][ T7389] bond6 (unregistering): Released all slaves [ 405.632945][ T7389] bond7 (unregistering): (slave bond8): Releasing backup interface [ 405.643322][ T7389] bond7 (unregistering): Released all slaves [ 405.779388][ T7389] bond8 (unregistering): Released all slaves [ 405.794927][ T7389] bond9 (unregistering): Released all slaves [ 405.926569][ T7389] bond10 (unregistering): Released all slaves [ 405.995175][T16708] sch_fq: defrate 0 ignored. [ 406.090591][T16629] chnl_net:caif_netlink_parms(): no params data found [ 406.277305][ T7389] : left promiscuous mode [ 406.364431][ T3556] wlan0: Trigger new scan to find an IBSS to join [ 406.525647][ T7389] tipc: Disabling bearer [ 406.560807][ T7389] tipc: Left network mode [ 406.661669][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3009'. [ 406.757576][T16719] lo speed is unknown, defaulting to 1000 [ 406.768513][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.791364][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.808991][T16629] bridge_slave_0: entered allmulticast mode [ 406.832176][T16629] bridge_slave_0: entered promiscuous mode [ 406.859595][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.868875][T16738] netlink: 'syz.0.3012': attribute type 2 has an invalid length. [ 406.887689][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.900558][T16629] bridge_slave_1: entered allmulticast mode [ 406.950512][T16629] bridge_slave_1: entered promiscuous mode [ 407.000747][ T51] Bluetooth: hci6: command tx timeout [ 407.047592][T16743] ieee802154 phy1 wpan1: encryption failed: -22 [ 407.088893][T16743] ieee802154 phy1 wpan1: encryption failed: -22 [ 407.255700][T16629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.280682][T16748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3015'. [ 407.329462][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3015'. [ 407.380585][T16629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.409442][T16751] IPv6: sit1: Disabled Multicast RS [ 407.444819][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'. [ 407.649994][T16755] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.657880][T16755] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.661957][T16761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3019'. [ 407.734295][T16755] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 407.850038][T16629] team0: Port device team_slave_0 added [ 407.936205][T16629] team0: Port device team_slave_1 added [ 408.461157][T16629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.488564][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.574659][T16629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.610971][T16774] lo speed is unknown, defaulting to 1000 [ 408.617557][T16629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.617578][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.617607][T16629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.736622][ T7389] hsr_slave_0: left promiscuous mode [ 408.757570][ T7389] hsr_slave_1: left promiscuous mode [ 408.959077][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3028'. [ 409.080295][ T51] Bluetooth: hci6: command tx timeout [ 409.159093][ T7389] pim6reg527 (unregistering): left allmulticast mode [ 410.166231][ T3556] smc: removing ib device syz0 [ 410.277258][ T5924] lo speed is unknown, defaulting to 1000 [ 410.291399][ T5924] syz0: Port: 1 Link DOWN [ 410.314910][T16798] tipc: Started in network mode [ 410.329691][T16798] tipc: Node identity 8a9b49e61e93, cluster identity 4711 [ 410.348436][T16798] tipc: Enabled bearer , priority 0 [ 410.857784][T16804] syzkaller0: entered promiscuous mode [ 410.884424][T16804] syzkaller0: entered allmulticast mode [ 410.936690][T16810] tipc: Resetting bearer [ 410.955880][T16793] tipc: Resetting bearer [ 410.988732][T16793] tipc: Disabling bearer [ 411.331688][ T1160] wlan0: Trigger new scan to find an IBSS to join [ 411.355358][T16814] veth3: entered allmulticast mode [ 411.590122][T16629] hsr_slave_0: entered promiscuous mode [ 411.608012][T16629] hsr_slave_1: entered promiscuous mode [ 411.627019][T16629] debugfs: 'hsr0' already exists in 'hsr' [ 411.636206][T16629] Cannot create hsr debugfs directory [ 412.753421][T16848] netlink: 'syz.5.3038': attribute type 4 has an invalid length. [ 412.772888][T16848] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3038'. [ 412.837582][T16850] netlink: 'syz.1.3039': attribute type 4 has an invalid length. [ 412.848547][T16850] netlink: 'syz.1.3039': attribute type 62 has an invalid length. [ 413.167766][ T7389] IPVS: stop unused estimator thread 0... [ 413.196779][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3043'. [ 413.563524][T16867] ipvlan0: entered promiscuous mode [ 413.606787][ T51] block nbd3: Receive control failed (result -32) [ 413.639046][T16629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.683882][T16629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.701106][T12135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.767676][T16629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.802785][T16629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.882735][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3051'. [ 413.912837][T16906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3051'. [ 414.127134][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.221599][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.250920][T12135] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.258167][T12135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.309677][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.317171][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.369866][T16919] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3057'. [ 414.408535][T16922] geneve2: entered promiscuous mode [ 414.417658][T16922] geneve2: entered allmulticast mode [ 414.435469][ T7395] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.472303][ T7395] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.500373][ T7395] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.526170][T12135] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.624815][T16934] team0: Device vcan1 is up. Set it down before adding it as a team port [ 414.919264][T16948] netlink: 'syz.1.3065': attribute type 21 has an invalid length. [ 414.923838][T16945] tipc: Enabled bearer , priority 0 [ 415.049060][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 415.078789][T16944] tipc: Disabling bearer [ 415.107998][T16948] tunl0: entered promiscuous mode [ 415.117641][T16948] netlink: 'syz.1.3065': attribute type 3 has an invalid length. [ 415.126971][T16948] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3065'. [ 415.156189][T16629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.563479][ T55] block nbd2: Possible stuck request ffff8880255b0000: control (read@0,1024B). Runtime 180 seconds [ 415.577786][ T55] block nbd2: Possible stuck request ffff8880255b01c0: control (read@1024,1024B). Runtime 180 seconds [ 415.591063][ T55] block nbd2: Possible stuck request ffff8880255b0380: control (read@2048,1024B). Runtime 180 seconds [ 415.605471][ T55] block nbd2: Possible stuck request ffff8880255b0540: control (read@3072,1024B). Runtime 180 seconds [ 415.766591][T16629] veth0_vlan: entered promiscuous mode [ 415.832212][T16629] veth1_vlan: entered promiscuous mode [ 415.921774][T16629] veth0_macvtap: entered promiscuous mode [ 415.929546][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3072'. [ 415.945911][T16629] veth1_macvtap: entered promiscuous mode [ 415.996525][T16986] tipc: Started in network mode [ 416.001719][T16986] tipc: Node identity 16dbaf0f1bd9, cluster identity 4711 [ 416.015047][T16986] tipc: Enabled bearer , priority 0 [ 416.031524][T16986] syzkaller0: entered promiscuous mode [ 416.037151][T16986] syzkaller0: entered allmulticast mode [ 416.077057][T16986] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 416.114345][T16986] tipc: Resetting bearer [ 416.123816][T16983] tipc: Resetting bearer [ 416.162941][T16983] tipc: Disabling bearer [ 416.197378][T16629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.238950][T16629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.279395][ T3556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.308568][ T3556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.339280][ T3556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.349891][ T3556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.515286][ T7397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.530571][ T7397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.596445][T12135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.617745][T12135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.279578][T17029] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 417.670665][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.720406][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.759285][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.770890][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.778969][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.147424][T17040] netlink: 'syz.4.3088': attribute type 12 has an invalid length. [ 418.361313][T17039] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3087'. [ 418.371835][T17039] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3087'. [ 418.606940][T17058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3093'. [ 418.637946][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 418.658149][T17031] chnl_net:caif_netlink_parms(): no params data found [ 418.842100][T17072] nft_compat: unsupported protocol 0 [ 418.920718][ T5876] Bluetooth: hci6: command tx timeout [ 418.977440][T17031] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.984812][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.993122][T17031] bridge_slave_0: entered allmulticast mode [ 419.002551][T17031] bridge_slave_0: entered promiscuous mode [ 419.015043][T17031] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.023142][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.040468][T17031] bridge_slave_1: entered allmulticast mode [ 419.053179][T17031] bridge_slave_1: entered promiscuous mode [ 419.125988][T17031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.148787][T17031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.316530][T17031] team0: Port device team_slave_0 added [ 419.328737][T17031] team0: Port device team_slave_1 added [ 419.555064][T17031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.572196][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.609340][T17115] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3106'. [ 419.649747][T17031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.686123][T17119] pim6reg: entered allmulticast mode [ 419.700307][T17119] pim6reg: left allmulticast mode [ 419.740077][T17031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.756792][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.831060][T17031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.881560][ T5876] Bluetooth: hci2: command tx timeout [ 420.061562][T17031] hsr_slave_0: entered promiscuous mode [ 420.077319][T17031] hsr_slave_1: entered promiscuous mode [ 420.088201][T17031] debugfs: 'hsr0' already exists in 'hsr' [ 420.111664][T17031] Cannot create hsr debugfs directory [ 420.143246][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3116'. [ 420.182412][T17160] IPVS: set_ctl: invalid protocol: 43 172.30.0.6:20000 [ 420.214399][T17160] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3114'. [ 420.311216][T17160] ip6gretap0: entered promiscuous mode [ 420.316754][T17160] ip6gretap0: entered allmulticast mode [ 420.392707][T17169] netlink: 'syz.1.3120': attribute type 7 has an invalid length. [ 420.410852][T17169] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3120'. [ 420.639828][T17031] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.651353][T17031] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.778881][T17174] bond11: entered promiscuous mode [ 420.785204][T17174] bond11: entered allmulticast mode [ 420.791174][T17174] 8021q: adding VLAN 0 to HW filter on device bond11 [ 421.048221][T17174] bond11 (unregistering): Released all slaves [ 421.102968][T17031] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.115621][T17031] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.189412][T17184] veth1_macvtap: left promiscuous mode [ 421.196306][T17184] macsec0: entered promiscuous mode [ 421.202293][T17184] macsec0: entered allmulticast mode [ 421.229020][T17194] veth1_macvtap: entered promiscuous mode [ 421.234970][T17194] veth1_macvtap: entered allmulticast mode [ 421.243090][T17194] macsec0: left promiscuous mode [ 421.248482][T17194] macsec0: left allmulticast mode [ 421.253970][T17194] veth1_macvtap: left allmulticast mode [ 421.297587][T17031] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.324338][T17031] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.432180][T17031] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.457339][T17031] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.556657][T17215] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3134'. [ 421.592270][T17215] 0ªî{X¹¦: renamed from gretap0 [ 421.607507][T17215] 0ªî{X¹¦: entered allmulticast mode [ 421.632631][T17215] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 421.769390][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 421.856640][T17233] netlink: 'syz.3.3139': attribute type 1 has an invalid length. [ 421.864870][T17233] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3139'. [ 421.919800][T17238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3139'. [ 421.954094][T17239] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3138'. [ 421.973305][ T5876] Bluetooth: hci2: command tx timeout [ 422.099409][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'. [ 422.189157][T17244] netlink: 'syz.4.3140': attribute type 12 has an invalid length. [ 422.306522][T17250] xfrm1: entered promiscuous mode [ 422.313969][T17250] xfrm1: entered allmulticast mode [ 422.352464][T17031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.415693][T17031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.503729][T17031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.619846][T17031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 423.386176][T17300] syzkaller1: entered promiscuous mode [ 423.397476][T17300] syzkaller1: entered allmulticast mode [ 423.476093][T17031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.584903][T17031] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.591396][T17321] netlink: 'syz.3.3158': attribute type 10 has an invalid length. [ 423.596595][T17322] netlink: 'syz.3.3158': attribute type 10 has an invalid length. [ 423.656327][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.663579][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.731099][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.738503][ T7395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.863746][T17334] netlink: 'syz.5.3160': attribute type 10 has an invalid length. [ 423.905947][T17334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 424.040598][ T5876] Bluetooth: hci2: command tx timeout [ 424.069873][T17031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.123799][T17031] veth0_vlan: entered promiscuous mode [ 424.140527][T17031] veth1_vlan: entered promiscuous mode [ 424.178394][T17031] veth0_macvtap: entered promiscuous mode [ 424.189019][T17031] veth1_macvtap: entered promiscuous mode [ 424.215907][T17031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.235168][T17031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.251369][ T3556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.263220][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.327890][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.361238][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.659788][ T7395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.692037][ T7395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.814653][ T7389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.854995][ T7389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.859221][T17358] __nla_validate_parse: 5 callbacks suppressed [ 424.859241][T17358] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.3166'. [ 424.952302][T17358] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.3166'. [ 425.017821][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3169'. [ 425.217250][T17377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3170'. [ 425.277439][T17379] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3172'. [ 425.635103][T17388] syzkaller1: entered promiscuous mode [ 425.651425][T17388] syzkaller1: entered allmulticast mode [ 425.690006][T17397] tipc: Enabling of bearer rejected, failed to enable media [ 425.772437][T17400] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 426.052415][T17407] netlink: 'syz.0.3181': attribute type 11 has an invalid length. [ 426.079497][ T5871] ------------[ cut here ]------------ [ 426.085556][ T5871] refcount_t: underflow; use-after-free. [ 426.091732][ T5871] WARNING: CPU: 0 PID: 5871 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 426.101214][ T5871] Modules linked in: [ 426.105996][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 426.115660][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.126299][ T5871] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 426.133163][ T5871] Code: 80 b3 e2 8b e8 07 2b bb fc 90 0f 0b 90 90 eb d7 e8 eb 8e f7 fc c6 05 d8 69 c5 0a 01 90 48 c7 c7 e0 b3 e2 8b e8 e7 2a bb fc 90 <0f> 0b 90 90 eb b7 e8 cb 8e f7 fc c6 05 b5 69 c5 0a 01 90 48 c7 c7 [ 426.153345][ T5871] RSP: 0000:ffffc9000411f578 EFLAGS: 00010246 [ 426.159435][ T5871] RAX: 3365be2c94df3600 RBX: 0000000000000003 RCX: ffff8880301c3c00 [ 426.167585][ T5871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 426.176073][ T5871] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 426.184258][ T5871] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88807be7e800 [ 426.184309][ T5876] Bluetooth: hci2: command tx timeout [ 426.198129][ T5871] R13: ffff8880563a7c60 R14: ffff8880563a7c78 R15: dffffc0000000000 [ 426.206596][ T5871] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 426.215681][ T5871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.222379][ T5871] CR2: 00007fc197162700 CR3: 000000006bdcc000 CR4: 00000000003526f0 [ 426.231962][ T5871] Call Trace: [ 426.235286][ T5871] [ 426.238245][ T5871] klist_dec_and_del+0x3c7/0x3d0 [ 426.243509][ T5871] klist_remove+0x1bd/0x340 [ 426.248078][ T5871] ? __pfx_klist_children_put+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 426.253740][ T5871] ? __pfx_klist_remove+0x10/0x10 [ 426.258817][ T5871] ? __pfx_kobject_move+0x10/0x10 [ 426.263967][ T5871] ? do_raw_spin_unlock+0x122/0x240 [ 426.269213][ T5871] ? get_device_parent+0x366/0x3a0 [ 426.276161][ T5871] device_move+0x193/0x700 [ 426.280878][ T5871] hci_conn_del_sysfs+0xb8/0x170 [ 426.285898][ T5871] hci_conn_del+0xc33/0x11b0 [ 426.290605][ T5871] hci_conn_hash_flush+0x191/0x230 [ 426.295772][ T5871] hci_dev_close_sync+0xaef/0x1330 [ 426.301181][ T5871] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 426.306800][ T5871] ? up_write+0x1c4/0x420 [ 426.311286][ T5871] hci_unregister_dev+0x21a/0x510 [ 426.317176][ T5871] vhci_release+0x152/0x1a0 [ 426.321817][ T5871] ? __pfx_vhci_release+0x10/0x10 [ 426.326884][ T5871] __fput+0x449/0xa70 [ 426.330996][ T5871] task_work_run+0x1d1/0x260 [ 426.336207][ T5871] ? __pfx_task_work_run+0x10/0x10 [ 426.341411][ T5871] ? kmem_cache_free+0x18f/0x400 [ 426.346391][ T5871] do_exit+0x6b5/0x2300 [ 426.350641][ T5871] ? do_raw_spin_lock+0x121/0x290 [ 426.355700][ T5871] ? __pfx_do_exit+0x10/0x10 [ 426.360931][ T5871] do_group_exit+0x21c/0x2d0 [ 426.365559][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.370867][ T5871] get_signal+0x1286/0x1340 [ 426.375527][ T5871] arch_do_signal_or_restart+0x9a/0x750 [ 426.381310][ T5871] ? fput_close_sync+0x119/0x200 [ 426.386293][ T5871] ? kmem_cache_free+0x309/0x400 [ 426.391419][ T5871] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 426.397650][ T5871] ? exit_to_user_mode_loop+0x40/0x110 [ 426.401855][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3180'. [ 426.403214][ T5871] exit_to_user_mode_loop+0x75/0x110 [ 426.417462][ T5871] do_syscall_64+0x2bd/0x3b0 [ 426.422150][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.427395][ T5871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.434213][ T5871] ? clear_bhb_loop+0x60/0xb0 [ 426.438941][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.446218][ T5871] RIP: 0033:0x7fbf8bd8d5fc [ 426.451161][ T5871] Code: Unable to access opcode bytes at 0x7fbf8bd8d5d2. [ 426.458234][ T5871] RSP: 002b:00007ffeb9907e60 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.466808][ T5871] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fbf8bd8d5fc [ 426.474907][ T5871] RDX: 0000000000000030 RSI: 00007ffeb9907f20 RDI: 00000000000000f9 [ 426.482993][ T5871] RBP: 00007ffeb9907ecc R08: 0000000000000000 R09: 00007ffeb9907bd7 [ 426.491102][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000026c [ 426.499121][ T5871] R13: 00000000000927c0 R14: 0000000000067c04 R15: 00007ffeb9907f20 [ 426.507290][ T5871] [ 426.510506][ T5871] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 426.517834][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 426.527317][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.537387][ T5871] Call Trace: [ 426.540676][ T5871] [ 426.543630][ T5871] dump_stack_lvl+0x99/0x250 [ 426.548252][ T5871] ? __asan_memcpy+0x40/0x70 [ 426.552901][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.558118][ T5871] ? __pfx__printk+0x10/0x10 [ 426.562732][ T5871] vpanic+0x281/0x750 [ 426.566726][ T5871] ? __pfx__printk+0x10/0x10 [ 426.571345][ T5871] ? __pfx_vpanic+0x10/0x10 [ 426.575869][ T5871] ? is_bpf_text_address+0x292/0x2b0 [ 426.581193][ T5871] panic+0xb9/0xc0 [ 426.584926][ T5871] ? __pfx_panic+0x10/0x10 [ 426.589370][ T5871] __warn+0x31b/0x4b0 [ 426.593444][ T5871] ? refcount_warn_saturate+0x11a/0x1d0 [ 426.599000][ T5871] ? refcount_warn_saturate+0x11a/0x1d0 [ 426.604565][ T5871] report_bug+0x2be/0x4f0 [ 426.608910][ T5871] ? refcount_warn_saturate+0x11a/0x1d0 [ 426.614478][ T5871] ? refcount_warn_saturate+0x11a/0x1d0 [ 426.620027][ T5871] ? refcount_warn_saturate+0x11c/0x1d0 [ 426.625668][ T5871] handle_bug+0x84/0x160 [ 426.629916][ T5871] exc_invalid_op+0x1a/0x50 [ 426.634422][ T5871] asm_exc_invalid_op+0x1a/0x20 [ 426.639281][ T5871] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 426.645462][ T5871] Code: 80 b3 e2 8b e8 07 2b bb fc 90 0f 0b 90 90 eb d7 e8 eb 8e f7 fc c6 05 d8 69 c5 0a 01 90 48 c7 c7 e0 b3 e2 8b e8 e7 2a bb fc 90 <0f> 0b 90 90 eb b7 e8 cb 8e f7 fc c6 05 b5 69 c5 0a 01 90 48 c7 c7 [ 426.665091][ T5871] RSP: 0000:ffffc9000411f578 EFLAGS: 00010246 [ 426.671184][ T5871] RAX: 3365be2c94df3600 RBX: 0000000000000003 RCX: ffff8880301c3c00 [ 426.679160][ T5871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 426.687134][ T5871] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 426.695370][ T5871] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88807be7e800 [ 426.703520][ T5871] R13: ffff8880563a7c60 R14: ffff8880563a7c78 R15: dffffc0000000000 [ 426.711516][ T5871] ? refcount_warn_saturate+0x119/0x1d0 [ 426.717100][ T5871] klist_dec_and_del+0x3c7/0x3d0 [ 426.722146][ T5871] klist_remove+0x1bd/0x340 [ 426.726663][ T5871] ? __pfx_klist_children_put+0x10/0x10 [ 426.732215][ T5871] ? __pfx_klist_remove+0x10/0x10 [ 426.737258][ T5871] ? __pfx_kobject_move+0x10/0x10 [ 426.742286][ T5871] ? do_raw_spin_unlock+0x122/0x240 [ 426.747586][ T5871] ? get_device_parent+0x366/0x3a0 [ 426.752710][ T5871] device_move+0x193/0x700 [ 426.757137][ T5871] hci_conn_del_sysfs+0xb8/0x170 [ 426.762095][ T5871] hci_conn_del+0xc33/0x11b0 [ 426.766701][ T5871] hci_conn_hash_flush+0x191/0x230 [ 426.771906][ T5871] hci_dev_close_sync+0xaef/0x1330 [ 426.777043][ T5871] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 426.782609][ T5871] ? up_write+0x1c4/0x420 [ 426.786953][ T5871] hci_unregister_dev+0x21a/0x510 [ 426.791991][ T5871] vhci_release+0x152/0x1a0 [ 426.796503][ T5871] ? __pfx_vhci_release+0x10/0x10 [ 426.801536][ T5871] __fput+0x449/0xa70 [ 426.805551][ T5871] task_work_run+0x1d1/0x260 [ 426.810154][ T5871] ? __pfx_task_work_run+0x10/0x10 [ 426.815287][ T5871] ? kmem_cache_free+0x18f/0x400 [ 426.820313][ T5871] do_exit+0x6b5/0x2300 [ 426.824545][ T5871] ? do_raw_spin_lock+0x121/0x290 [ 426.829713][ T5871] ? __pfx_do_exit+0x10/0x10 [ 426.834369][ T5871] do_group_exit+0x21c/0x2d0 [ 426.839019][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.844273][ T5871] get_signal+0x1286/0x1340 [ 426.849028][ T5871] arch_do_signal_or_restart+0x9a/0x750 [ 426.854626][ T5871] ? fput_close_sync+0x119/0x200 [ 426.859595][ T5871] ? kmem_cache_free+0x309/0x400 [ 426.864555][ T5871] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 426.870845][ T5871] ? exit_to_user_mode_loop+0x40/0x110 [ 426.876363][ T5871] exit_to_user_mode_loop+0x75/0x110 [ 426.881694][ T5871] do_syscall_64+0x2bd/0x3b0 [ 426.886315][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.891560][ T5871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.897668][ T5871] ? clear_bhb_loop+0x60/0xb0 [ 426.902358][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.908388][ T5871] RIP: 0033:0x7fbf8bd8d5fc [ 426.912917][ T5871] Code: Unable to access opcode bytes at 0x7fbf8bd8d5d2. [ 426.920044][ T5871] RSP: 002b:00007ffeb9907e60 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.928474][ T5871] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fbf8bd8d5fc [ 426.936737][ T5871] RDX: 0000000000000030 RSI: 00007ffeb9907f20 RDI: 00000000000000f9 [ 426.944821][ T5871] RBP: 00007ffeb9907ecc R08: 0000000000000000 R09: 00007ffeb9907bd7 [ 426.952802][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000026c [ 426.960972][ T5871] R13: 00000000000927c0 R14: 0000000000067c04 R15: 00007ffeb9907f20 [ 426.969154][ T5871] [ 426.972495][ T5871] Kernel Offset: disabled [ 426.976822][ T5871] Rebooting in 86400 seconds..