last executing test programs: 4.846986694s ago: executing program 2 (id=7724): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a70010000060a090400000000000000000200000048000480440001800a00010072656469720000003400028008000240000000150800024000000004080003400000002b0800014000000014080001400000000a08000340000000150900010073797a30000000000900020073797a3200000000fa0007"], 0x1ac}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b702000001"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x62}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x5, 0x4, 0x6, 0x18, 0x4}, @jmp={0x5, 0x0, 0xc, 0x5, 0x1, 0xfffffffffffffff0}, @ldst={0x2, 0x0, 0x2, 0x3, 0x8, 0x50, 0x10}, @tail_call, @call={0x85, 0x0, 0x0, 0x46}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}]}, &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x3, 0x2, 0xa}, 0x10, r7, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000000700)=[{0x5, 0x3, 0xe, 0xb}, {0x2, 0x4, 0x5, 0x6}, {0x1, 0x3, 0xe, 0x7}, {0x3, 0x4, 0x1, 0xc}, {0x1, 0x5, 0xc, 0xa}, {0x4, 0x5, 0x4, 0xb}, {0x5, 0x1, 0x6, 0x7}, {0x5, 0x1, 0x0, 0xc}], 0x10, 0xa0b}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x239c}, @ldst={0x1, 0x3, 0x4, 0x0, 0x2, 0x8, 0x10}, @jmp={0x5, 0x0, 0xd, 0x8, 0xb, 0x10, 0xfffffffffffffffc}, @generic={0x1, 0x7, 0x4, 0x0, 0xf4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2643, 0x54, &(0x7f00000002c0)=""/84, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r9, 0x1, &(0x7f0000000380)=[r10], &(0x7f00000004c0)=[{0x4, 0x1, 0x8}], 0x10, 0x4}, 0x94) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x9e81, 0x2, 0xf, 0x5}, 0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x5}, 0x20) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000000)=0x7fff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.317371443s ago: executing program 2 (id=7729): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x73}}}], 0x18}, 0x40c0) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x3}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0xe4, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_IE={0x48, 0x2a, [@supported_rates={0x1, 0x7, [{0x48, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x36, 0x1}, {0xc}, {0x3, 0x1}]}, @ht={0x2d, 0x1a, {0x80, 0x0, 0x1, 0x0, {0xfffffffffffffff9, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x400, 0x1ff, 0xa}}, @ssid={0x0, 0x1d, @random="3bc98b67e3095a3296a72a513e7ed5dc506984140f4a5b7a92ddd7758f"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_IE={0x6a, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x6c, 0xf4}}, @cf={0x4, 0x6, {0x7, 0x2, 0x2, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xaf, 0x6}}, @tim={0x5, 0x3d, {0x4, 0xf4, 0x2, "4b06a74213af398fad81321ee775228ce585d946082019dbc357e4bbe6be7290cf54d24287be2fc95a3deee41e805d7beb3a8cf72018932401c4"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0xab, 0x82}}, @peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @ssid={0x0, 0x5, @random="60cf2d8424"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) 4.008115769s ago: executing program 2 (id=7730): r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 64) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x21}, 0x60) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}}, 0x20000000) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r5, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x150, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @crypto_settings=[@NL80211_ATTR_PMK={0x22, 0xfe, "a79208478e93679def3765b64632dde93afea4a549b65e0e0305b988d4c8"}, @NL80211_ATTR_PMK={0x20, 0xfe, "d61526af5fe7188c31b09e4bb9c4aeb5e323bbcb60faa7369d6b45ca"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac06, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x806}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac0c, 0xfac06, 0xfac04]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, 0x0) (async) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000004c40)={@remote, r8}, 0x14) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd29, 0x25dfcbfc, {0xa, 0x80, 0x14, 0x0, 0xff, 0x1, 0x0, 0x4, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24040854) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3.73689566s ago: executing program 4 (id=7732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r8 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="0f997ea3249af990c2fa993aa1a54878476c", 0x12}], 0x1}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000020000", 0x14}, {&(0x7f0000000200)="b7", 0x1}], 0x2) 3.615622342s ago: executing program 2 (id=7734): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="7e7b3a4e2a358be2687b6f10f3371366db7d069124ba46316af0b05d52d22752ad7af9d9cd1f17a3e4ee4b", 0x2b}, {&(0x7f0000000080)="af4f34578ac78a679655cea6890bb539fecd48ea8f7e6dc18da591c743dac5ba19de973b44d1bac441e8c5c636bf", 0x2e}], 0x2) r2 = accept4(r0, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80, 0x800) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @random="b08d69b83d5d", {0xd, 0xf80}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x8, @random=0x100, 0x180, @void, @void, @void, @val={0x4, 0x6, {0xf, 0x1, 0x800}}, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x7, 0x0, {0xffffffffffffffff, 0x9, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x8, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x8}}, [{0xdd, 0xcd, "87fb02204a06a7fc114b5f3741181e66e94d4ac0f3e2b3e0455f99d498bed1810b25c16cc88f572120b0c072ed68b8f57fe6aed4ffbb26493ffd89b2694cfdcab350674bd4c767d066f9931281fc00f0855589485abb1e635645d88dac52e88b462e90e7e342240a1e9b7e1fca7610772d9d2e795457af1e920b26b52ab479516bd4d399d48250b234f9e638815816d9b1e268ae314c580ca4635a009772e9bb0c03265abec4b5d5da00c54b83b8ac0bef438c733cd53453c0d961ba3d8924f21e095b69fbd4d78a89d5e8c97a"}, {0xdd, 0x7f, "a0f8c2eca2f3485b50663f3444adc868fec1f74389e367dfbae1c5cb0546cd51c59776d0beea716258f77d9be21607f838a6a080f3c3d6816e0256376f48e8b4bbe54dd5489cb322f5ea197f4fe4fc0db13f70786f42170b6b0dea016aee8d780b16dbfa6a95d841b09f1e810093fa7f3959ac69eedd52618e10b74df35112"}]}, 0x1a5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0xe, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x3, 0x3, 0x8, 0x7, 0x1}, @generic={0xb0, 0x4, 0x3, 0x6, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x95a4, 0x15, &(0x7f0000000480)=""/21, 0x0, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x3, 0xa, 0x9}, {0x2, 0x1, 0xf, 0x9}, {0x2, 0x2, 0xd, 0x4}, {0x3, 0x3, 0x5, 0x2}, {0x5, 0x4, 0xa, 0x6}, {0x3, 0x2, 0xd, 0x9}, {0x2, 0x1, 0xe, 0xb}], 0x10, 0x800}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000006c0)={r0, r3}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000740)=@add_del={0x2, &(0x7f0000000700)='ip6gretap0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000780), &(0x7f00000007c0)=0x30) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000800)={0x0, 0x0, "b30c7712b2d76827759336cd022ccb3a"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000840)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000880)=0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000008c0)={r5, 0x8}, &(0x7f0000000900)=0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = accept4(r4, 0x0, &(0x7f0000000940), 0x80800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000980)=""/76, &(0x7f0000000a00)=0x4c) getsockname$packet(r6, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r3, 0x0, 0xf4, 0x1000, &(0x7f0000000ac0)="3ce1ca48b14701acfc99e3d140297e18077c91cf488ac7ca08b45bdb272676c9d8de0084410ad6f2a055869556d1e9dd10e678800d2fe9baca8c1a4bb5ec4c3f38ff0b339b51d4498d49ce7901ed68771fee8bd58a27269d0838c287142e95465208825e8981dcabac6dad1f39e56f37add6f2e0c38fcf1788fc6d85057d7f24d481c05ee2a690bca15aa8096926f08fdd18278d9ef8c8522bed6ce931449c424b87028cb533091db13afaff716c34d36ffeed822d1ca45a9ba11b4ed5cb8e86476563a2064a68d420fdc9f31a2cc2ed52c2ec1616306341636d26f17be13b898c3559a88f53c835b08b4f034caaba963e009547", &(0x7f0000000bc0)=""/4096, 0x4, 0x0, 0xc8, 0x8a, &(0x7f0000001bc0)="1a914266596f890b6848ee78c373dae53ae85685310c731f1bdc165dcf70ae4a5bd10fa6f187b416f661a1b7b4141b66e631c152a84f6c0e4afaa4af2acf2967bd92d932b4957fa576c27446de3dff2e8eb3c71168c899db77eb0ace7d915974bdbce8d0d07a6a7713edc2a0221ac83b17f253a99ab1670fe9ea94009b1ea74a636f767270e510605d2ad9964a2d975a0c8dc8f88c0bae77185bf2ef62178944689601a0071421114e4f3fcaf08cd24ea7c1c8ede22700dbe548f2bb4c1d7b6c7acc92e4db85d183", &(0x7f0000001cc0)="c8fe16af9a0777372be8ea2865fe754b32afa05c41a156231fc418e151a316084cb0d009304e5309980e36c33e392450e0ca169e239c2075543f52ac8d9ac9fb353f1b797ba3ce2c497e5224dc964f1c907172d9380b7b9c64386f2bf0ef7ec8370cf84e9c188d973a3a81e8b9b0c23aed297a1b12fe2179e7dee66328c5cdbf38e09040367d065d2b40", 0x1, 0x0, 0x4}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000001e00)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001e40)=0x6, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r7, 0xd717b000) writev(r6, &(0x7f0000002180)=[{&(0x7f0000001e80)="c1a6a5c1696405f2bc87858d76923c47af5687025204ba6795faca4a4b6ca8dd8692b5a0da8502eba327a385c59f14a19be39cf74e03942ebedbf9f889ca91b8219fcff43b18c74cd17f6f4aac6310a9a3ce047536e214a67299da0b25c469cc5ceb5f4adf3c82d2f70b1f63d76d6e51e8366a168415e60701eb3490ec849c8cb0b74c", 0x83}, {&(0x7f0000001f40)="9f9b255d3e887a4e9f8f3252ecee2988d98926a4c2f0e3cad5b0ee604e89f17524d6a83c220e2e5f4c1bfec72dfa48ef595ac7bf6cb69bc9812fdaffed9a889703ac757951c79ecc3a2c789dd1545d4e0816a99d6b2b01542efb93e3d3563297b12770c64279a49aea0738a6396ae9bf58ad2301a50a8472238bbd906e9531e12ea8976155f69cc502d46ecb", 0x8c}, {&(0x7f0000002000)="c2d8c2afa4585508e00a4f3571f7aa1c1b40d25ae9a365fcb37c92c81a9250be81cf655a1999136ad60071cb747ae625e65da0bc86d485033841aa14148f320cc55d2fe3d21f765fce745ff9e299f4010930", 0x52}, {&(0x7f0000002080)="87bd33269f4f144fa6ab685ba8fd9f89f0fae8a8f1c9f173fe682d33afee7f39171c7a14e99b01fce9fc86e1cd41f2487d03a15c9f42a63b9f9c", 0x3a}, {&(0x7f00000020c0)="27dd2f3dd027a6090fd53e4119a08f99c0f61e916261dbede7e4f9fc6c16c16afc29f309eb08bfa6187ff6905f0d61cf0e2811de8936c9bd29aa41d5de4caceb20a340d7a6acea0ddebdcdd1fdd04da9af48eaae205f07c3afd4f7de19fb2af5d6b3802ce5804c05340194a52cb3a36f51742df4af10ac608a48f3b815e00d9a6587e91ef86d0d134c6bd68f72f55d5a46c22b3dd141b8f27e1c08342842ae12f7d9af088d917fd01b9a82685de63fcaf8e4495affad61bb", 0xb8}], 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000002200)={0x3c, 0x25, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x11, 0x4309, [0x3, 0xf8, 0xa, 0xfffffffffffffff7]}}, @generic={0x2c, 0xaa, "b1d67ed4d92bc1b83b6394907365fa34892055236190cc158168cfcf2cd51d4f108181fcc96ce85d84f56fa54c57cfcbdb15ebadfdf56c669a58d8d558ef7c962ffe66263611c56530ba70829afc3f0c57c273f52452eb6bf9dc80ac22c17602f227085485bd952037c7af017cdf33ef2f2dc4b64fe5cac6f4927c4ad9d9271a481664e9234302f214204d9c09a72f3f2cc20aa684cb0d04a4e16c2bbf2a2456731ee79a5b35f97fba8d"}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0xe6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x40, {0x3, 0xe, 0xfd, 0xfff9, [0x9, 0x6, 0x5, 0x73c, 0x100000000, 0xfffffffffffffff8, 0x1ff]}}]}, 0x138) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000002440)={@private1}, &(0x7f0000002480)=0x14) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r8, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002580)={0x8001, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000024c0)={@map=r9, r3, 0x1f, 0x2027, r3, @void, @void, @value=r10}, 0x20) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000025c0)={{0x6, 0x4}, 0x100, './file0\x00'}) 3.406077701s ago: executing program 4 (id=7736): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000002ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41bfe90003090000147f00000000000000b6447c6befb8ad61608be866a7b17b6e310000000000000000001c001a800b0001006970766c61028006000300000000003bc3fd7b57df2980433ea4a533a4cc8eae6f74d1abd6f80f5bc576c66ade6ea62ee9735b6aee3d7d7b5c63c660620bfdf0e8560452646d0f6131a0bedb54f2bfbb5170fb22c3f37f994ec908a3e933fa54430eb10400"/174], 0x50}}, 0x4020000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x78ae, 0x700, 0x880, 0x1, {{0x24, 0x4, 0x1, 0x5, 0x90, 0x68, 0x2, 0x8, 0x0, 0x0, @rand_addr=0x64010102, @empty, {[@ssrr={0x89, 0x13, 0xe9, [@rand_addr=0x64010102, @loopback, @remote, @rand_addr=0x64010101]}, @cipso={0x86, 0x39, 0x1, [{0x1, 0x12, "cf5be0ea07ecb11183c305427c7f159b"}, {0x2, 0xd, "f9a5b3afcd039eaecc1003"}, {0x2, 0x12, "98e13ea0e8dc4ce16b4fcf79ce0e2525"}, {0x2, 0x2}]}, @end, @end, @timestamp_addr={0x44, 0x2c, 0x4a, 0x1, 0x7, [{@loopback, 0x9}, {@local, 0x4}, {@empty, 0x1}, {@remote, 0x3}, {@empty, 0x7}]}]}}}}}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {}, {}, {0x10}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf254f00000008000300", @ANYRES32, @ANYBLOB="40007a800c000300376e3f510da99e1d140001"], 0x5c}, 0x1, 0x0, 0x0, 0x929c1f6559b1a90b}, 0x4004090) 3.278099537s ago: executing program 4 (id=7737): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="62202a3a2a2077e2"], 0x9) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x103, 0xffff888101827518}, 0x7, 0x7, 0xffffffff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.084095271s ago: executing program 4 (id=7738): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid\x00') unshare(0x6a040000) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c1b90996056774123ae60000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000700a800006f0200"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0xc0) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d1, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000240)={@local, @multicast1}, 0xfffffffffffffdd9) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24048080) (async) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x4, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x1ff, 0x6, 0x6}, 0x3c) (async, rerun: 64) r6 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) (async) r7 = socket(0x26, 0x2, 0x2) (async) r8 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r8, 0xff, 0x22, 0x0, &(0x7f00000002c0)) (async) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) 2.986557845s ago: executing program 2 (id=7739): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000000c0)="ee783a", 0x3}], 0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f00000000c0)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r3 = socket(0x14, 0x2, 0x4) accept4$tipc(r3, 0x0, 0x0, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x58}}, 0x8044) (async) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) 2.772731825s ago: executing program 1 (id=7741): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="e3", 0x1}], 0x1}}], 0x2, 0xc8040) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) recvfrom$inet6(r3, &(0x7f00000004c0)=""/156, 0x9c, 0x100, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) (async, rerun: 64) recvfrom$phonet(r2, 0x0, 0x0, 0x11001, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x47e2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) sendmmsg$sock(r6, &(0x7f0000003440)=[{{&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x3, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000700)="46ad56c2427c1dbbf6c14e45b4a0fa883197ca5bdd95159773588e9402bed7966f5937095dd4dc4c58affc8a8f246c5c53f46889bc8aa76a81d0de588cd21575298aeb01211ab402535d935803ee81c4c261ded95f80645a30098a3d424ed5be62454bbd3cf91e8d6e8a21990921b35c166ed4872ded4ff763bc52a10532fe007ff2b9e46f92a0b44e8b08eaf4fb031acccfb29f762578c7594012f7fe09743b284fdd7b81a77e57e91072c51d74a729845a9f3dea583df17839cfe53d94ab6732d7a863e58885c0b1526d7ab202e7cdd072cce84dd9b6a1e9f67f0c622b1523a2b0b7fd301dab44d842e2152f62570f1c10", 0xf2}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000a00)="30e6f4f99c2834a43aa8a092fedf0ac7e4da5f8e8f0475357e2f1038e546fbe78783f3bdb548077dfb2f8c036ab6ab5548e49fb6800ea16acbd8e08ed29ebc0d60043b48e107b583a32c1e67b9e3ff1e60040d3469407055299eed54b7253acfe9b5bd8a8017c27d91d0380665f0d510e015b819213610bfa76fb11604e4c46cd051033cf907a9d6a7ca178b13d6a54a487ebad1c31b0a5894d6279b09249cd5c8b9df66d6669ae7ccf80127e68c1d13acb539e76ba05dd1e0381b0f0831249927d582dd9646655b45cd6534694ade570a041b80ec24669ee4c5868648", 0xdd}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000b00)="53bcf0e1df8710dd08ee1868f18f44470395f7e35cf120ae584fe376bde34524836d25404a118c509221ed46c4784e188a095f4d695264f6bf3a3a33a0cf2a30c14aba20e4049881340029113c6ac568bf198a0729dff91878509ce6d782d0d1c07700b26d06d8a35386438fb6785c34d3e6dd56c674ffd541813021be70ffabde9be2ba8e265d65d395eeab7ad6b016c1365ec432385641ad7d7fba6a1fceb8a18f3d460884bdb2e1b1bad8845ed9", 0xaf}, {&(0x7f0000000900)="4354979dc60af02dab4898e38d746f714c5b80094fd292f8812b6cae82597d77aa18f901c36417523a9df3ea80aae4f6a03cb5f4164deefc46955b7c83cad19c891351583eedaa2cfa2a870b9fb0356a8f6eee9bd113d399deca6473b4ade060e4f62f90ee64fad94daeeb12ddadf4b4cd20c303", 0x74}], 0x6, &(0x7f0000001d00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xb}}], 0x48}}, {{&(0x7f0000001d80)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x2, 0x0, 0x3, {0xa, 0x4e23, 0xffff, @remote, 0x6}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001e00)="7a0c3577477966364fbf41e9d5548c796b730c160c4c2913a2ac594018118178ad219c84e94683cccc322ae89e7b0dfa4cd4a7a7a9487e2cb458c4136bff5cdf0d98e0f4431f58269b3ff3b7529dc5833fca382d5b7016f5", 0x58}, {&(0x7f0000001e80)="3e260559ed8611303b6b9279df845070c2b425640df6f303837ff5fac4d25a467045d221b1e778125f642796a7a312b9c22ee235821b42fa384d1699f2e74aa2afd7fb44ac81c471c87c3f5601e2f275062315f8ae13496153856030d2", 0x5d}, {&(0x7f0000001f00)="f6ef64388d088cd3f84754ef62e94bbb3574e2e64fbbff18e18d08649d70a22392c94f4edd86a1911c12548535b5de156607f921a6774a90dc67069221ca21af9bc0ef8c6f746770124b4ea706d99e9b1d08e94ba6a90c2d22bd0cf2b44edac9a0373fa7f06f2aae4649ac1b534363f61361fc1619fae122c69626b049348c4bb5f0c75b0713c524448d80ca4ffe74cfc5c6d9063482601e2483fa97b45b6f26d10e1912c558804b694e1ae016a0fd4a3ff8b42cb7525aa61fe6e66929f64586cf86e75dba4ea371833eea14c87d74ea84b74d56de64", 0xd6}, {&(0x7f0000002000)="38e98670e79587fd16c67ffb8d0b70a580e5f9266656bcef0b5704937f13bcf2f4e8edd85a606a1f1f1d17bb132a9c9cf1784ab07d14d17732a5584fdbf788198da3d0732dbae84548c63a253d652c120c1514034ea60db301b8eb20f15a3a70e777c839e3963ff95d37890f0b7124de8a52196fcfbed57dbc84f26da4c4d58129810e4247c8cdd008bcf18c098542b71de30ad196c87cc72567c06f422ed1ee8d84b3a6acba8a10adf79657bbbedf37c873aacf63d96add503e8e6927429ab6084e36e57df63c6efee03180", 0xcc}], 0x4, &(0x7f0000002100)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffb53}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x90}}, {{&(0x7f00000021c0)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000002240)="16c82041875683132c647744bd6deb900f22b0db4cd99adc49bfc5c538cc1697da18d5c395e2f465448ba4b04f28856dc87128cb231e45832b0daf17ae1c91eb3d1d0bc3851649545740c8ed56ed41244a7485e67d16277e495567379e7928a507fc4ef156e4af45646ce46223b6af3d78ab2c599d620e55e69c596dc5a93ebb24494aa5b5c5e1f511faf977bc1cd619e3f88e03fd41b3ef0cac8b2166d0c081817a74b95b461774444711d44be34312ba6985c120920ace9e0da14c", 0xbc}, {&(0x7f00000001c0)="5a9474f013742accdcad03d19754e604b0541084181344574a87db8d6eda9572909e7fc03e3d903bcc8b02a8e7abe104d1cb71e6b90c9f60679427bafab4", 0x3e}], 0x2}}, {{&(0x7f0000002300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000002380)="9cf56eb33ad89b960b143df0064e2f8a48afc49568406882456a91d6ac5bf2aca2a23f102f87e6f7ad7a1520038e97201c97e54bd0360eee97bfb7ae9aaa06a23e7ab1219aec06a6b3ba91f5483c64a033bb09f3ba8fd6c894320a0ce493dda779d661d8dd1e5f22cc6d530ae0613bb3d8e480a154179f9c16d30c9778bc802611f9c7f609b622896ba15d1b1de76a3945edf2829149c0a78c10b377484608ee144912b833", 0xa5}, {&(0x7f0000002440)="85d020816d5cfe029435a14b45325b0c4c9dffc5ba7ec993deaa7fc52a259858ca6333c69030afbf4a52c7a6197d6813f39cd851e91c0148d69060cf26f8797c6134483c0562f7fb3ccd3179d63865b878772b71cab997f6bf4fe69a327de861e517c02c85275d7a0fc43709694326d27c890a7a5e052e610b89679cfb062a9969b906ead2d1f5852adb06d668e5ff137a707453835408c5faf486c4dc36a1c024f3e0e5d3e53ee84ccd70fc3c65a91d6fd4fc194ccc509104aa00c661a520e5ea440d56e67e7026663e9c99a4f4b53a3ba230e8", 0xd4}, {&(0x7f0000002540)="803f7d94d0cad985680e3e9e2fb6be3fab34c01076129aa160a67765e331673cc27a0ddb486fd26d0a1b12f7308d70c451447c80b0315c18ecd1d3c176651ca1636f7898c502f470d3b779f69c28c9d3af303717446f68e0bca11409e88b7126c0ba43c984c3f0964b0c819fd6939d0b0df562b2c69fe779faf7d6eea3821dd63c434da27c5d1a4b1f21fe394c03d4883504609c81e071d87cd6d62a345752040a7ee15c8bf06ef37be200a11ebfb64fb63c98f842326d96c81829f7437b0d9d8088d2c3b2b8", 0xc6}], 0x3, &(0x7f0000002640)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x11a}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1000}}], 0xf0}}, {{&(0x7f0000002740)=@isdn={0x22, 0x8, 0xc8, 0x2, 0xc0}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000027c0)="1940551b386dae1f96076f7d830195d8459b023d251fdbc46a173e27a5555ece917fe45924dea1d8a1d07a47f01aecdda29186a6c3106f59a8efe4a8f72e20fb92f14c5eff2f27d0f6ab6baeacc55bce8397235cbff8e71d9b8b2057071ae63985bc", 0x62}, {&(0x7f0000002840)="585bff81206b71e598e7aeb82698bd20c3f3cacc6866e084", 0x18}, {&(0x7f0000002880)="78c9a2e0099dba6506124e5d458876095982e618ba528b3ac1fe26479c671f3aabeaf8fc6066fda67209d94eb94c9aea1d263042afd2f53a8ada7bedd34f21b821f5336c681322df613a9b9f14c5eaeefbaa783e3d27230896dc6123a8663a6e3162911f5666ec8aa75d54eecf7db8b1209e66d329a546897f4bf0d79de8a59aa899ec1108aac01e18a4ae4b96e21e100b36af2a1751b97a70270b197d4a623bf82b85464a7c", 0xa6}, {&(0x7f0000002940)="917e7dc43ef95284cbbb878a0ccc769e210ff8dbc0e4c6630b9fc445f3c72e995323a5b96d40bb9cf298c4c4e2618e0cb8267989", 0x34}, {&(0x7f0000002980)="3b8eb23554ef8658e1edcf9dd8b74c4352718dd28b8fbd78a1e48fe30aaa9bdc1e8cdd11b4bdebbd9e7c989ef7c8", 0x2e}], 0x5, &(0x7f0000002a40)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xffffff81}}], 0x30}}, {{&(0x7f0000002a80)=@can, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002b00)="a5e1ceeb04e91b7dae4c27f135a9b4363d472e7bfcd6cac3bfdedc89542f92909dcb09969c6b74e46cb87cfca0b559e2778c79df5be6da584c18fa1ceb98a805fa7bbb1799e1fa2828e527b281352668eb23c8feaa982a461c38a5c6d82138e7fd41d3adc0ae80a9f38169cb41b6f70dc0685cef1bb934d00a68d459e6512b645d7b0060032ede84475a25cc8f5f843ee8800d4abf83516b813934c13fc7bc8e803364b27ecc838f1779098764d059fbf20dd031", 0xb4}, {&(0x7f0000002bc0)="957b36a97a1fcd7bc93ecbd8542fb3f170201474f23686ddc237cab1b02d675f481c2b7ffef6873d6da433a122241693ac832490cc17c42821d4946ae711c220d8f77578578197cffdc3014d619fae81b46726fba2df9d8cc3b370fa2647046a3be82031c0d9e462dacefa68f16fc6a332299f620350fba85c337ed5a75102718732c9fe0472a90edbc98f47cb6b96a7d87e93b5613b254492fdf6dc21153f530302779f734c6c534c982dd29bf3e52205c2090cf5e890422e1a69a9e7cfa010ba4493962eb630b2a186fea58313244f11322d103b9455838ef67dd1664d8ed63bd93629a285417f22a5bcaab29148029d5b58d61c66da", 0xf7}, {&(0x7f0000002cc0)="923c0f739ce5283d620feba675dc90ab1d2422eaec731fa195b4f4dc5ac5a64e8416545a89e782ee9dd9b3ec890aa87ebe55bd7ca3068158140740e2bdeb480d697894e952b0e7d028defe0dd2611aba98594c489fcfd9fe70ff6d8dafd35eb0f8553ce7f8906e8304feb2ef22effd5085fb89e4bfa54ecacb2adc", 0x7b}, {&(0x7f0000002d40)="efb8", 0x2}, {&(0x7f0000002d80)="dc2c641fcbc8972b997f83dec6ea69c7d07d8e3953c5f0c850d849b36a3147d8b194dc76cc07", 0x26}], 0x5, &(0x7f0000002e40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}}, {{&(0x7f0000002e80)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002f00)="2400465244847c72c09036e41012292effde016aee7c9c2a2c49fbd33d5a7d0ab1946b4847b6fe2101e8abd8aba96a456dba544bbc8f1fd5011fae3e9fc26d984e3ffdbdf346d9aaa62d50a29d829df8080d40db1fbd7d8776ef9a4608bf23224ee51983380e2fdd1369691270c8f3298b081441ce0e88ba8cd647089f4c6b7c711cf7616de2c760d9b043cf66ce53278ac9cb4e40354b0fa7eb1e3a0878122a884d85efd968b083f8f63538cce527c8013528f04408c27a4aca21649923a7225903d33d70d9e7445b94aff0c2a1577231d17b8af15685afcb1d71601fd50cb5b792e7873248449cc7aa6db6f5058d5a6ef229e4756ba52282", 0xf9}, {&(0x7f0000003000)="80db718afcb8199514f0d28247a2e35ccdd7555fcfcc5249c4cbb74570c502dff3ebdcb876ca4a9711c6fb30df8e852117d05774e6d2a9aa9b4bb876c17435182bf742981808ae3a6dc15129e1f6073f80cdddd741360f9dcead8a6d40d5e481543e089c9e8c21642b31efab97b183efc996b5a0f3b532a75974e86606b6efaa92936dafd33e995d446b6ae090a83c2178f5c7feb8808f9447961f2970c556b8abf679714cacb4b8c25fd6e0c39cc77900afc79640dda70fd7", 0xb9}, {&(0x7f00000030c0)="5cabe2be437564e61ebfb2ccf7c560d7818bacde4fe230119beeec26ed58a910225aa28151dc5bf0cb7d1a1a5aca54f6af38aa21337e85040bf47adf17a0cc489b7a9990a5f3561255f8d6e98a", 0x4d}, {&(0x7f0000003140)="4d5e45f7bc6f93523a229545fa33bb9a19733c63dfab9e3fc8969dd0d7fe1e7c353815db28a7560d004f7cde74889303bdf8f7c7fc01442356c7ddd9679e9be2df959235bbbb8b0942e7796be34fa6efbc421b826161c602d8888854214a204bfd77baf4947e6d087b9ff60fe1c75b1cf4", 0x71}, {&(0x7f00000031c0)="4947a066345efd7a5e5896e94fb28e9a54fdd9da6a288955ec63416cff3fe6dbe3e58d163eb53e82da2040c657c167f33b48ef827e8c88d4763fe64dcf5ee2d03923d1157b5a60df1e07396ab7c5be5387369ef0ee330180da7f7fecadc8934c2abb5ea22e924f5a08b4b883c065290950a504e6b997cc5a50a5d9fce1cd73b29a46a80e5191e35347c724c43ed0b26576cdbc58487ee91bf14d3e803b6ec3de1b6391ed550d5f051ee277162fc863fe05371ecf1143218e265cadea99a79835", 0xc0}, {&(0x7f0000003280)="0da0e7d6ae27b8255bad2aaeedcd895bb31580ac52440cc01ecb214f12112d4688c15b7d8e5cb5d2ed929f9ee859b6c096ce2ad14d1fd8909110ff57ade07037e3d3c53708d6ddf73baa7ab59c90a1bb8739de0999c616cf575e84ca", 0x5c}], 0x6, &(0x7f0000003380)=[@timestamping={{0x14, 0x1, 0x25, 0xa0e5}}, @mark={{0x14, 0x1, 0x24, 0xea}}, @timestamping={{0x14, 0x1, 0x25, 0x5521}}, @mark={{0x14, 0x1, 0x24, 0x2f6}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0xeffb}}], 0xa8}}], 0x7, 0x8050) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$bt_sco(r1, &(0x7f0000003600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c0000000237931f02000000f6c56c0dda97c4adbeeec521ac1b2fa8232d2988613e45ed9b74df6729aeefd0b06c87ac14bdfebd9f4f05b74763623a323e4eb9998bed5533208382c5e7d66397e657e6d611abddb2128f4d0213ecece1bece763a187653dcdc9b373ac93bce9abbe196a3aef410278d80373df77b1110afdc706a3094282ca0654ef9b95f8839a924a24f73bfa081a750d8c5f0e209af4a0467acdd24d0247844e5dd0e5d2462abf10dce0e5e7168cc48b5f5a925cec7ef01b55228ab9dfc7cbbb697ef7000"/218, @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001000300000014000480050003008000000005000300070000000800020003000000"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0xc048804) 2.697385478s ago: executing program 0 (id=7742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x19}) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x9, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x10}, 0x8) r3 = socket$packet(0x11, 0xf0b52d3a79bb3ee5, 0x300) getsockname$packet(r3, &(0x7f0000000140), &(0x7f0000000180)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x42622244}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r5, 0x508, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xad4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) (async) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000380)={0x1, 0x5, 0x9, 0x893, 0x8001, 0x25d, 0x80000001, 0x65d3}, &(0x7f00000003c0)={0x5, 0xb, 0x5, 0x1, 0x3009, 0x6, 0x0, 0x6}, &(0x7f0000000400)={0x400, 0x9, 0x5, 0x87, 0x8, 0x3, 0x6, 0x8001}, &(0x7f0000000480)={r6, r7+60000000}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x3]}, 0x8}) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={r2, 0x6, 0x4, 0xe6a}, &(0x7f0000000580)=0x10) (async) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000005c0), &(0x7f0000000640)=0x68) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f0000000680)=@gcm_256={{0x304}, "d795603cf26ae03d", "230fb8e1845c3bb613662d984268bf4e580b474bd8f97ace661453395b1ffa04", "a622e756", "2a49ce63510e03b9"}, 0x38) (async) recvmmsg(r3, &(0x7f0000002800)=[{{&(0x7f00000006c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/209, 0xd1}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x3, &(0x7f0000000a00)=""/218, 0xda}, 0x5}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/17, 0x11}], 0x1}, 0x40}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/235, 0xeb}, {&(0x7f0000000d00)=""/187, 0xbb}, {&(0x7f0000000dc0)=""/6, 0x6}, {&(0x7f0000000e00)=""/233, 0xe9}, {&(0x7f0000000f00)=""/94, 0x5e}, {&(0x7f0000000f80)=""/83, 0x53}, {&(0x7f0000001000)=""/98, 0x62}], 0x7, &(0x7f0000001100)=""/48, 0x30}, 0x4}, {{&(0x7f0000001140)=@nfc_llcp, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/134, 0x86}, {&(0x7f0000001280)=""/91, 0x5b}], 0x2, &(0x7f0000001340)=""/73, 0x49}, 0x4}, {{&(0x7f00000013c0)=@phonet, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)}, {&(0x7f0000001480)=""/162, 0xa2}], 0x2}, 0x6}, {{&(0x7f0000001580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/153, 0x99}, {&(0x7f00000026c0)=""/27, 0x1b}], 0x3, &(0x7f0000002740)=""/129, 0x81}, 0xff}], 0x6, 0x20e0, &(0x7f0000002980)={0x77359400}) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000029c0)={0x1, 'gre0\x00', 0x1}, 0x18) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000002a00)={r2, 0x8}, &(0x7f0000002a40)=0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002bc0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002b80)={@map=r11, 0x5, 0x0, 0x8, &(0x7f0000002a80)=[0x0], 0x1, 0x0, &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002b00)=[0x0, 0x0], &(0x7f0000002b40)=[0x0, 0x0, 0x0]}, 0x40) r12 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r12, &(0x7f0000002c00)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000002c40)={0x2, 'pim6reg\x00', 0x3}, 0x18) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4010) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d80)={'wlan1\x00'}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000002dc0)={r10, 0xba, "4c3d90e996945dc8ce126d05c4572f20262f3a4f8038151ea81853326b16b1fc47e3ea4a12920247b92c672e0cc11ee111d53371ab270bfc5f95d3e1839671e2123d979991fc95b387950c6e7dc7b6e50e542932e7416344eea2a439714792dcebb27d0a5f6bc8526201ca2a40e67e0d76c4797c819c3bc2103de7352f04871e615b4ce23821d337e80d9578472c895b0a2d3c406113137feaa933a0b5fe69a599429bf8fe975b5c3f2e7698f62e1726b1a0e4eee3ea8e1540ca"}, &(0x7f0000002ec0)=0xc2) (async) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000002f00)=0x100, 0x4) 2.594152262s ago: executing program 3 (id=7743): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={r1, 0x5228, 0xffff, 0x6, 0x6, 0x7, 0xfff7, 0x8, {r1, @in6={{0xa, 0x4e20, 0x67e, @mcast1, 0x4}}, 0xe57, 0x4, 0x0, 0x6, 0x5}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x5, 0x1, 0x5}, &(0x7f0000000200)=0x10) close(r3) 2.536945042s ago: executing program 0 (id=7744): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt(r5, 0x5, 0x4, &(0x7f00000002c0)=""/108, &(0x7f0000000200)=0x6c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="010000400000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="dc005a80d800018005000600020000e604000700"], 0xf8}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="85de8fdf2539000002084032", @ANYRES32=r9, @ANYBLOB="0c009900060000001b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x40040) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7) 2.432559887s ago: executing program 1 (id=7745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a000000000006000200b300000014001f0000000000000000000000000000000000140020"], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x2c}}, 0x40) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) 2.419817495s ago: executing program 3 (id=7746): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @local}, {0x4, @random="098f4b1351fc"}, 0x78, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_bridge\x00'}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000000000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x58041}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) accept4(r5, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @local}, {0x4, @random="098f4b1351fc"}, 0x78, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_bridge\x00'}) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000000000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x58041}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) (async) 2.171986504s ago: executing program 1 (id=7747): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x718}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000003c0)="155fd10564524c1499dd2f3be7b37d06", 0x10) syz_emit_ethernet(0x8e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x1410, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x46040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x7ca8e000) writev(r3, &(0x7f0000000080)=[{0x0}], 0x1) r4 = socket$key(0xf, 0x3, 0x2) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 1.994378656s ago: executing program 3 (id=7748): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) socket$packet(0x11, 0xa, 0x300) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r4) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @private}, 0x4}}, 0x26) (async) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xba, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c200000e08004cf800ac0000e000221190780000000000000000890355444c3a93ac1414bb00000100000000010000075cac1414bb00003b4c7f000001000000077f00000100000009e000000100000f5cac1414bb0000371964010101000001da0a01010100008000440cc5717f0000010000a6af002936aa98ec3c9078ae87490ce97a93d62fcb4444d79df0bdf6d5a20310ab9ed447969ed72ea9f827452ec16974b00e958d1b0c72d9c1dfc92ac13c4d"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 1.554527429s ago: executing program 0 (id=7749): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b70800000000e7057babf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x218, r3, 0x300, 0x8, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x48d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd23}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2f01}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x904b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5f}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1716}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x609}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) r5 = socket(0x8000000010, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xd, 0x2020}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f7461000000100002800c0001400000000000000008140000000c0a050000001100010000000000000000000084000a"], 0xb8}}, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000280)=0x10) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000340)={r12, @in6={{0xa, 0x6e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x22, 0x10, 0x0, 0x4}, 0x9c) (async) write(r5, &(0x7f00000002c0)="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", 0xfc) 1.503423018s ago: executing program 1 (id=7750): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8000, 0xbb7b, 0x67}) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x2, 0x9f, "1bad60b519212c6a0d8364a16bdac688f828819ae364afb37847ced6bd658431a1e54287f3b68a7ea7366a5175df02b5125eaef429074fdef11f41f639d1d780011906309e94f7237aae471ecf1b5609c94418f83e914b6b23acc0962c9342101a4f07e8edf6172ce07231ff541dbf1e796a0792e43164f6bc158e812d52779b5df530f0ee46a55de02466880ec909870d0752ecf46003f3a4a5d6f144fb51"}) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2804) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'macvlan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008854}, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xb, 0xf, 0x65, 0x8, 0x8, 0x1ff, 0x7}, &(0x7f0000000780)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000007c0)={r5, @in6={{0xa, 0x4e21, 0xc3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xceba}}, 0x6, 0x3ff, 0x9, 0x2, 0x2}, &(0x7f0000000880)=0x98) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff4, 0x1}, {0xa, 0xfff2}, {0x0, 0x10}}, [{0x8, 0xb, 0x8001}, {0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xed2}, {0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc082}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x140, r7, 0x110, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x24}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa1e1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket$nl_crypto(0x10, 0x3, 0x15) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000cc0)={0x7}, 0x8) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r3) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000001040)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000d80)={0x250, r9, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x257aff58}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa39d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "0e9f09953b65bef7453cc9e512e5dd87052c60362b450d01b4e8"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "fefb17c5cdf17be591e78edb65d6e35336df8f412095fbd887e52bab4b0e016c3777"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5d4c1976d27b4034b58ed412946e80d112b20bc2fe097da2437f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000001140)={&(0x7f0000001080)=""/133, 0x320000, 0x1000, 0x80, 0x3}, 0x20) (async) listen(r1, 0x8f6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='ext4_get_implied_cluster_alloc_exit\x00', r1, 0x0, 0x4}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000001840)={&(0x7f0000001200), 0xc, &(0x7f0000001800)={&(0x7f0000001280)={0x548, r11, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x3}, {0x4}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0x8}, {0x5}, {0x2, 0x6}, {}, {0x0, 0x9}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x4, 0x8}, {0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x13}, {0x7}, {0x5, 0x5}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xabe6, 0x0, 0x0, 0x965b, 0x7, 0x7, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x4, 0x0, 0x10, 0x7, 0x9b4, 0x1ff]}}]}]}, @NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x4, 0xe6f2, 0x181, 0x4, 0x9, 0x38ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0xa83a, 0x2, 0x7c, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa91, 0xfffd, 0xa807, 0x7, 0x1, 0x4, 0xb, 0xb]}}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc00, 0x1ff, 0x5, 0x7e20, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x7, 0x6}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x3, 0x2, 0x8, 0x400, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x7ff, 0xfff6, 0x7, 0x9, 0x5, 0x0, 0xf320]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x3}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x2, 0x2}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x8}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x5}, {0x0, 0x9}, {}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x2}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0xa}, {0x2}, {0x4, 0x2}, {0x2, 0x5}, {0x3, 0x3}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0x800, 0x7, 0x2, 0xcc, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xffff, 0x2, 0x942, 0x4, 0x3, 0x5]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x9}, {0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x7, 0x3}, {0x7, 0x2}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x6}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x4, 0x7}, {0x7, 0x8}, {0x3}, {0x4, 0x9}, {0x2, 0x8}, {0x6, 0x3}, {0x7, 0x5}, {0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x3, 0x5}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x6}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x2}, {0x3}, {0x7, 0x2}, {0x4, 0x8}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x3, 0x4}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x1, 0x1}, {0x1}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xed33, 0x3, 0x40, 0x5000, 0xc, 0x3, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x5}, {0x3}, {0x2, 0xa}, {0x4, 0x9}, {0x6, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x2, 0x2}, {0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {}, {0x1, 0xa}, {0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x7}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x1}, {0x2, 0x3}, {0x6, 0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x9}, {0x5, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x9}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x4}, {0x3, 0x4}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x6}, {0x6}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x5}, {0x2}, {0x6, 0x2}, {0x6, 0x5}, {0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x3b2c, 0x4, 0x4438, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc000, 0x6, 0xfffa, 0x4, 0x8, 0x100, 0x8a, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x3617, 0x4, 0x6, 0x2, 0x8000, 0x8]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x3}, {0x3, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x7}, {0x5, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x6}, {0x2, 0x7}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x4}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x2}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x7, 0x4, 0x5, 0x3ff, 0x800, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x12, 0x1b, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc4d, 0x5, 0x9e, 0x9, 0x100, 0x3, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x19c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0xa}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x4}, {0x1}, {}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x2}, {0x6, 0x2}, {0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x5, 0xa}, {0x5, 0x5}, {0x7}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x4}, {0x2, 0x9}, {0x6}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x83f, 0x401, 0x1, 0x8001, 0x5, 0x37, 0x5d]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5a, 0x2, 0x3, 0x5, 0x3, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xffff, 0xa000, 0x0, 0xfffa, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf1f, 0xd7, 0x8, 0xf, 0x7f, 0xe, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x3, 0x61e7, 0x9e5, 0x1, 0x1a8, 0x8e1c]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0xfffe, 0x8, 0x8001, 0xfff5, 0x80, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc50c, 0x6, 0x6, 0x6, 0xaa, 0x5, 0x5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff, 0x8000, 0xf, 0x5, 0x8, 0xf, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x101, 0x3ff, 0x4ae, 0x1, 0x8, 0x3, 0x4]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0xeab, 0xfff7, 0x7, 0x7, 0x73a0, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0xb, 0x0, 0x4, 0x12, 0x1b, 0x36, 0x1, 0x12, 0x24, 0x30, 0x12, 0x1, 0x5, 0x3, 0x24, 0x16, 0x24, 0x3, 0x30, 0x60, 0x0, 0x6c, 0x24, 0x16, 0x5, 0x12, 0x6c, 0x6, 0x48, 0xb]}]}]}]}, 0x548}, 0x1, 0x0, 0x0, 0x4}, 0x4010) 1.390764766s ago: executing program 1 (id=7751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a401000000000031a0003"], 0x44}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[], 0xe0}}], 0x1, 0x4048040) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd25, 0x25dfdbfc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0xb, 0xc, "41206e303119c5"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1caa9b11}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35a98252}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13f5eedd}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12dfc54b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x104f2869}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0xc050}, 0x8000) (async) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x602}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48c0}, 0x800) 1.294681221s ago: executing program 0 (id=7752): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000a06700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x12) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)=""/7, 0x7}], 0x1, &(0x7f00000002c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xd, 0x1}}, @zcopy_cookie={0x18}, @cswp={0x58, 0x114, 0x7, {{0x1a, 0x8}, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x69e, 0x10, 0x7, 0xdc24, 0x8, 0x0, 0x9}}], 0x88, 0x8004}, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4) 1.164127514s ago: executing program 4 (id=7753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x9}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r10, {}, {}, {0x10}}}, 0x24}}, 0x0) 1.071312915s ago: executing program 1 (id=7754): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x9, 0x2, 0x25dfdbfb}, 0x14}}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) accept$unix(r2, &(0x7f0000000240), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='contention_begin\x00', r4, 0x0, 0x200000d}, 0x13) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44895}, 0x44040) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x1, 0xfd}, 0x8) 835.445381ms ago: executing program 3 (id=7755): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000004c0)=0xfff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab0000000140a01010000000000000000010000050c00064000001900ea0000020900010073797a300000000076000800444f23041ea8c3150d2f8e1726757ac72160a6fba7d3ae1a624e8f43a6591702530a0164760765e9a0af66daa16f9819595bb877ec6dfdcb8c70003294a936034f75c584ec8ff5fce8406e948e5f836feeaad9fcaa2638cd827218e919219ce7de237874d46dd43896810b5b110f8c00000c00064000000000003b5b66e95c7ac9f600010000000000000000000100000a000000"], 0xd8}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000340), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'ip6erspan0\x00', @random="9b6a028200"}) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/89, 0x59, 0x10000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c00028008000340000000000500020007000000080001400000000c080004400000002208000540000000e60800010073797a30"], 0xdc}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000400ffe516000002000000000095000000ba711989"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5], 0x18}}, 0x0) 724.921482ms ago: executing program 4 (id=7756): r0 = socket$inet(0xa, 0x806, 0x84) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) listen(r0, 0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000005140200000000000000000008000100020000000800030002000000c3c46fa3029dd6b201bfc933f8fd6c8eaef66fea4c1be155589fc9b1b949ac"], 0x20}}, 0x0) socketpair(0x6, 0x4, 0xdcf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x10, 0x3fb, 0x10, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc004020}, 0x10) r9 = socket$phonet(0x23, 0x2, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f00000005c0)="e7be9bbe71e9650b62665ddd92fb5f649d211b0672f3a646de6fcf867939f88d75e0ab893485707e8837f2410527ff9bf1284e311889553626c1be9e2288675a9a866cee255e6df5245a4e6e7d7c48d92b1cdc50780a42698b7dc06cbdae73effd7875136057c611ffefdce2b9d4dd3805523f9aacffd86b28505df37e8deacd5d54c5e90647f561f8f80f7eb0a9441d2ea25bfc6b1daa5493090e91bc4a454c71c1eac67b85eab42e194f54fba5159d9d39079b429e4889770e3486c83f926eefaf70fd59b4bd898270d7ba3070656a4ab0d3d76901c0869602deb2c89d47e4c291b1ab985c4a199d997e2440b4ff19d0dc5f07", &(0x7f00000006c0)=""/251, &(0x7f0000000240)="61499bfe4455b2acf85b6c1e56dd305cc8febaac9f05e893a25e77a0a7bb921f4c9a207820684b1a61cdd361055f729218b4d92243496c096f21e1", &(0x7f00000007c0), 0x2, 0x1}, 0x38) r10 = accept(r9, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0xffffffffffffff2d) recvfrom$inet6(r10, &(0x7f0000000100)=""/172, 0xac, 0x40000001, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) 665.058963ms ago: executing program 3 (id=7757): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 624.379889ms ago: executing program 0 (id=7758): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000013008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) 552.988218ms ago: executing program 2 (id=7759): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 64) unshare(0x6a040000) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = socket(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write(r3, &(0x7f0000000100)="120000001a009b8a5feee09a140000003b9b", 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c, 0x0}}], 0x1, 0x20048050) (async) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 363.545268ms ago: executing program 0 (id=7760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x2200, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000c80)={'veth0_macvtap\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 3 (id=7761): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d", 0x52}], 0x1}, 0x0) close(r5) (async) close(r5) recvmsg$unix(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x5, 0x1, 0x5, 0xa, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) kernel console output (not intermixed with test programs): 1053.539204][T27677] IPVS: starting estimator thread 0... [ 1053.645097][T30141] IPVS: using max 23 ests per chain, 55200 per kthread [ 1053.690059][T30136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1053.775583][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1053.904305][T30151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1054.027494][T30148] veth3: entered promiscuous mode [ 1054.202154][T29077] hsr_slave_0: left promiscuous mode [ 1054.208711][T29077] hsr_slave_1: left promiscuous mode [ 1054.903475][T30179] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1054.904280][T30178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1055.196292][T29077] batadv0 (unregistering): left allmulticast mode [ 1055.677797][T30198] .70·: renamed from hsr0 (while UP) [ 1055.700786][T30198] .70·: entered allmulticast mode [ 1055.711252][T30198] hsr_slave_0: entered allmulticast mode [ 1055.728930][T30198] hsr_slave_1: entered allmulticast mode [ 1055.753543][T30198] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1055.874359][T30168] lo speed is unknown, defaulting to 1000 [ 1055.920376][T30211] openvswitch: netlink: Unknown key attributes 2 [ 1056.130424][T30216] netlink: 'syz.1.6465': attribute type 7 has an invalid length. [ 1056.177201][T29077] IPVS: stop unused estimator thread 0... [ 1056.186197][T30216] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 1056.361501][T30227] netlink: 'syz.2.6470': attribute type 3 has an invalid length. [ 1056.682707][T30233] syzkaller0: entered promiscuous mode [ 1056.694782][T30233] syzkaller0: entered allmulticast mode [ 1056.932658][T30239] netlink: 'syz.2.6474': attribute type 8 has an invalid length. [ 1057.166286][T26904] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.209920][T26904] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.225570][ T5838] Bluetooth: hci2: link tx timeout [ 1057.232612][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.250221][T26904] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.267492][T26904] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.409683][T30262] __nla_validate_parse: 11 callbacks suppressed [ 1057.409706][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6485'. [ 1057.689062][T30279] syzkaller0: entered promiscuous mode [ 1057.719644][T30279] syzkaller0: entered allmulticast mode [ 1058.078528][T30279] tipc: Started in network mode [ 1058.085296][T30279] tipc: Node identity 8e4b9cc5db52, cluster identity 4711 [ 1058.102674][T30279] tipc: Enabled bearer , priority 0 [ 1058.124570][T30293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6492'. [ 1058.528340][T30278] tipc: Resetting bearer [ 1058.663856][T30278] tipc: Disabling bearer [ 1058.713960][T30312] xt_TCPMSS: Only works on TCP SYN packets [ 1058.776545][T30271] lo speed is unknown, defaulting to 1000 [ 1058.932945][T30327] netlink: 'syz.0.6501': attribute type 4 has an invalid length. [ 1059.240458][T30338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6504'. [ 1059.282486][T21429] Bluetooth: hci2: command 0x0406 tx timeout [ 1059.335449][T30282] lo speed is unknown, defaulting to 1000 [ 1059.374144][T30340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6504'. [ 1059.399070][T30340] nbd: must specify at least one socket [ 1059.662406][T30348] bridge0: entered promiscuous mode [ 1059.669340][T30348] bridge0: port 1(macvtap1) entered blocking state [ 1059.688873][T30348] bridge0: port 1(macvtap1) entered disabled state [ 1059.696722][T30348] macvtap1: entered allmulticast mode [ 1059.702852][T30348] bridge0: entered allmulticast mode [ 1059.711878][T30348] macvtap1: left allmulticast mode [ 1059.717502][T30348] bridge0: left allmulticast mode [ 1059.730068][T30348] bridge0: left promiscuous mode [ 1059.760779][T30308] wg1 speed is unknown, defaulting to 1000 [ 1059.777052][T30308] wg1 speed is unknown, defaulting to 1000 [ 1059.779838][T30351] netlink: 'syz.0.6509': attribute type 8 has an invalid length. [ 1059.803245][T30308] wg1 speed is unknown, defaulting to 1000 [ 1059.985257][T30350] lo speed is unknown, defaulting to 1000 [ 1060.287787][T30308] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1060.696001][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1060.721546][T30367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1060.892186][T16859] bond0: (slave bond_slave_0): interface is now down [ 1060.921305][T16859] bond0: (slave bond_slave_1): interface is now down [ 1060.957784][T16859] bond0: now running without any active interface! [ 1061.053716][T30372] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6514'. [ 1061.255697][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.308065][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.358199][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.387600][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.414654][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.456075][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.522416][T30387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1061.522720][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.575719][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.646419][T30308] wg1 speed is unknown, defaulting to 1000 [ 1061.697058][T30387] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1061.719769][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'. [ 1061.790403][T30399] netlink: 'syz.2.6521': attribute type 39 has an invalid length. [ 1061.833456][T30388] nbd5: detected capacity change from 0 to 127 [ 1061.856003][T30402] netlink: 'syz.2.6521': attribute type 1 has an invalid length. [ 1061.883067][T30402] netlink: 'syz.2.6521': attribute type 2 has an invalid length. [ 1062.007456][T30406] netlink: 'syz.3.6522': attribute type 5 has an invalid length. [ 1062.033733][T30390] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1062.060380][T30390] bond1 (unregistering): Released all slaves [ 1062.252794][T30351] lo speed is unknown, defaulting to 1000 [ 1062.325640][T21429] block nbd5: Receive control failed (result -32) [ 1062.338836][T30387] bond1 (unregistering): Released all slaves [ 1062.442039][T30399] hsr_slave_1 (unregistering): left promiscuous mode [ 1063.081869][T30428] __nla_validate_parse: 1 callbacks suppressed [ 1063.081891][T30428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6529'. [ 1063.157812][T30425] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1063.597504][T30416] lo speed is unknown, defaulting to 1000 [ 1063.691833][T30437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6530'. [ 1064.279659][T30416] wg1 speed is unknown, defaulting to 1000 [ 1064.279952][T30429] lo speed is unknown, defaulting to 1000 [ 1064.860733][T30429] wg1 speed is unknown, defaulting to 1000 [ 1066.220696][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6543'. [ 1066.343461][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6543'. [ 1066.373022][T30493] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6544'. [ 1066.806973][T30493] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6544'. [ 1067.169795][T30530] netlink: 71 bytes leftover after parsing attributes in process `syz.4.6551'. [ 1067.384580][T30541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1067.474726][T30547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1067.593772][T30549] netlink: 'syz.4.6555': attribute type 1 has an invalid length. [ 1067.604152][T30549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1067.670610][T30533] lo speed is unknown, defaulting to 1000 [ 1067.917708][T30564] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1067.985683][T30566] wg1: entered allmulticast mode [ 1068.296535][T30533] wg1 speed is unknown, defaulting to 1000 [ 1068.395451][T30576] netlink: 'syz.2.6561': attribute type 13 has an invalid length. [ 1068.604208][T30580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6562'. [ 1068.740744][T30586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1068.770874][T30587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1068.796948][T30586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1069.197487][T30598] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1069.857228][T30608] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6569'. [ 1069.893965][T30584] lo speed is unknown, defaulting to 1000 [ 1069.975957][T30613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1070.003021][T30615] netlink: 'syz.4.6573': attribute type 1 has an invalid length. [ 1070.032039][T30615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1070.064679][T30619] netlink: 'syz.4.6573': attribute type 1 has an invalid length. [ 1070.075893][T30619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1070.116267][T30621] netlink: 'syz.4.6573': attribute type 1 has an invalid length. [ 1070.135303][T30621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1070.260475][T30630] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1070.445133][T30636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6577'. [ 1070.533651][T30584] wg1 speed is unknown, defaulting to 1000 [ 1071.042734][T30653] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6581'. [ 1071.214233][T30657] batadv1: entered promiscuous mode [ 1071.258722][T30659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1072.305427][T30691] sctp: [Deprecated]: syz.4.6593 (pid 30691) Use of int in maxseg socket option. [ 1072.305427][T30691] Use struct sctp_assoc_value instead [ 1072.306305][T30693] xt_hashlimit: size too large, truncated to 1048576 [ 1072.439396][T30698] Unsupported ieee802154 address type: 0 [ 1072.511956][T30659] lo speed is unknown, defaulting to 1000 [ 1072.588699][T30700] veth1_vlan: left allmulticast mode [ 1072.604787][T30693] syz.3.6594: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1072.648199][T30693] CPU: 0 UID: 0 PID: 30693 Comm: syz.3.6594 Not tainted syzkaller #0 PREEMPT(full) [ 1072.648236][T30693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1072.648248][T30693] Call Trace: [ 1072.648257][T30693] [ 1072.648265][T30693] dump_stack_lvl+0x189/0x250 [ 1072.648297][T30693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1072.648328][T30693] ? __pfx__printk+0x10/0x10 [ 1072.648354][T30693] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1072.648384][T30693] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1072.648415][T30693] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1072.648449][T30693] warn_alloc+0x214/0x310 [ 1072.648483][T30693] ? __pfx_warn_alloc+0x10/0x10 [ 1072.648520][T30693] ? __get_vm_area_node+0x28f/0x300 [ 1072.648545][T30693] ? htable_create+0x101/0x7a0 [ 1072.648576][T30693] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1072.648638][T30693] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1072.648662][T30693] ? htable_create+0x101/0x7a0 [ 1072.648691][T30693] ? rcu_is_watching+0x15/0xb0 [ 1072.648715][T30693] ? htable_create+0x101/0x7a0 [ 1072.648741][T30693] __kvmalloc_node_noprof+0x670/0x910 [ 1072.648768][T30693] ? htable_create+0x101/0x7a0 [ 1072.648790][T30693] ? hashlimit_pernet+0x23/0x240 [ 1072.648815][T30693] ? hashlimit_pernet+0x23/0x240 [ 1072.648839][T30693] ? hashlimit_pernet+0x23/0x240 [ 1072.648872][T30693] htable_create+0x101/0x7a0 [ 1072.648907][T30693] hashlimit_mt_check_common+0x719/0xa10 [ 1072.648946][T30693] xt_check_match+0x3d1/0xab0 [ 1072.648979][T30693] ? __pfx_xt_check_match+0x10/0x10 [ 1072.649008][T30693] ? pcpu_alloc_noprof+0xf95/0x1750 [ 1072.649044][T30693] ? xt_find_match+0x1f7/0x250 [ 1072.649076][T30693] translate_table+0x1553/0x2040 [ 1072.649125][T30693] ? __pfx_translate_table+0x10/0x10 [ 1072.649147][T30693] ? __might_fault+0xb0/0x130 [ 1072.649194][T30693] ? _copy_from_user+0x94/0xb0 [ 1072.649228][T30693] do_ip6t_set_ctl+0x970/0xce0 [ 1072.649252][T30693] ? rcu_is_watching+0x15/0xb0 [ 1072.649276][T30693] ? trace_contention_end+0x39/0x100 [ 1072.649299][T30693] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1072.649354][T30693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1072.649387][T30693] ? file_init_path+0x3b/0x590 [ 1072.649420][T30693] nf_setsockopt+0x26f/0x290 [ 1072.649452][T30693] rawv6_setsockopt+0x23b/0x5b0 [ 1072.649478][T30693] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1072.649500][T30693] ? aa_sock_opt_perm+0xff/0x1a0 [ 1072.649523][T30693] ? sock_common_setsockopt+0x36/0xc0 [ 1072.649547][T30693] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1072.649573][T30693] do_sock_setsockopt+0x17c/0x1b0 [ 1072.649607][T30693] __x64_sys_setsockopt+0x13f/0x1b0 [ 1072.649642][T30693] do_syscall_64+0xfa/0xf80 [ 1072.649676][T30693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.649694][T30693] ? clear_bhb_loop+0x60/0xb0 [ 1072.649719][T30693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.649737][T30693] RIP: 0033:0x7f55c658f749 [ 1072.649756][T30693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.649772][T30693] RSP: 002b:00007f55c7468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1072.649793][T30693] RAX: ffffffffffffffda RBX: 00007f55c67e5fa0 RCX: 00007f55c658f749 [ 1072.649807][T30693] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 1072.649819][T30693] RBP: 00007f55c6613f91 R08: 0000000000000588 R09: 0000000000000000 [ 1072.649831][T30693] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 1072.649843][T30693] R13: 00007f55c67e6038 R14: 00007f55c67e5fa0 R15: 00007ffc8285dc88 [ 1072.649880][T30693] [ 1072.649888][T30693] Mem-Info: [ 1072.954391][T30708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.965011][T30693] active_anon:6931 inactive_anon:0 isolated_anon:0 [ 1072.965011][T30693] active_file:3361 inactive_file:40235 isolated_file:0 [ 1072.965011][T30693] unevictable:768 dirty:87 writeback:0 [ 1072.965011][T30693] slab_reclaimable:12981 slab_unreclaimable:207422 [ 1072.965011][T30693] mapped:34017 shmem:4207 pagetables:1054 [ 1072.965011][T30693] sec_pagetables:0 bounce:0 [ 1072.965011][T30693] kernel_misc_reclaimable:0 [ 1072.965011][T30693] free:1213210 free_pcp:10326 free_cma:0 [ 1072.973349][T30708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.981503][T30693] Node 0 active_anon:27724kB inactive_anon:0kB active_file:13444kB inactive_file:160736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136068kB dirty:348kB writeback:0kB shmem:15292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15220kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1072.990236][T30708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.001090][T30693] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1073.006413][T30708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.014560][T30693] Node 0 [ 1073.174306][T30708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1073.221856][T30693] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.297425][T30712] sctp: [Deprecated]: syz.1.6598 (pid 30712) Use of int in max_burst socket option. [ 1073.297425][T30712] Use struct sctp_assoc_value instead [ 1073.313140][T30693] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1073.313204][T30693] Node 0 DMA32 free:934772kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27660kB inactive_anon:0kB active_file:13444kB inactive_file:160736kB unevictable:1536kB writepending:440kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:32932kB local_pcp:15600kB free_cma:0kB [ 1073.357721][T30693] lowmem_reserve[]: 0 0 0 0 0 [ 1073.362944][T30693] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.424380][T30693] lowmem_reserve[]: 0 0 0 0 0 [ 1073.440155][T30693] Node 1 Normal free:3902632kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7968kB local_pcp:4384kB free_cma:0kB [ 1073.488714][T30659] wg1 speed is unknown, defaulting to 1000 [ 1073.488869][T30684] lo speed is unknown, defaulting to 1000 [ 1073.506736][T30693] lowmem_reserve[]: 0 0 0 0 0 [ 1073.532415][T30693] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1073.561539][T30693] Node 0 DMA32: 213*4kB (UME) 510*8kB (UME) 475*16kB (UME) 412*32kB (UME) 264*64kB (UME) 339*128kB (UME) 105*256kB (UM) 75*512kB (UM) 97*1024kB (UM) 2*2048kB (UE) 166*4096kB (M) = 934644kB [ 1073.592669][T30693] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1073.630469][T30693] Node 1 Normal: 160*4kB (UM) 41*8kB (UME) 52*16kB (UME) 257*32kB (UME) 90*64kB (UME) 24*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3902632kB [ 1073.661453][T30693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.673198][T30693] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 1073.683707][T30693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.694496][T30693] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1073.705164][T30693] 47820 total pagecache pages [ 1073.710367][T30693] 0 pages in swap cache [ 1073.715721][T30693] Free swap = 124996kB [ 1073.720509][T30693] Total swap = 124996kB [ 1073.742665][T30693] 2097051 pages RAM [ 1073.756129][T30693] 0 pages HighMem/MovableOnly [ 1073.790088][T30693] 424280 pages reserved [ 1073.801275][T30693] 0 pages cma reserved [ 1073.955204][T30684] wg1 speed is unknown, defaulting to 1000 [ 1074.501019][T30746] sctp: [Deprecated]: syz.1.6603 (pid 30746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1074.501019][T30746] Use struct sctp_sack_info instead [ 1074.538809][T30745] tipc: Invalid UDP bearer configuration [ 1074.538857][T30745] tipc: Enabling of bearer rejected, failed to enable media [ 1075.094417][T30759] sock: sock_timestamping_bind_phc: sock not bind to device [ 1075.457592][T30767] __nla_validate_parse: 24 callbacks suppressed [ 1075.457616][T30767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6612'. [ 1075.508147][T30767] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6612'. [ 1075.544985][T30767] syzkaller1: entered promiscuous mode [ 1075.550618][T30767] syzkaller1: entered allmulticast mode [ 1075.587611][T30773] netlink: 'syz.3.6614': attribute type 1 has an invalid length. [ 1075.699550][T30776] gretap3: entered allmulticast mode [ 1075.719093][T30776] bond9: (slave gretap3): making interface the new active one [ 1075.732813][T30776] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 1075.810448][T30778] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.988838][T30778] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.137857][T30801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6621'. [ 1076.151506][T30778] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.184527][T30804] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6622'. [ 1076.309885][T30778] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.423197][T30815] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6626'. [ 1076.437592][T30815] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1076.495092][T30818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6625'. [ 1076.620401][ T3522] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.677908][T16873] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.750169][ T3522] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.799901][T16857] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.839345][T30829] syzkaller0: entered promiscuous mode [ 1076.845600][T30829] syzkaller0: entered allmulticast mode [ 1077.159286][T30813] lo speed is unknown, defaulting to 1000 [ 1077.225399][T30846] netlink: 'syz.3.6637': attribute type 2 has an invalid length. [ 1077.251877][T30843] syzkaller0: entered promiscuous mode [ 1077.261286][T30843] syzkaller0: entered allmulticast mode [ 1077.277431][T30847] netlink: 'syz.3.6637': attribute type 2 has an invalid length. [ 1077.302887][T30846] !: entered promiscuous mode [ 1077.308557][T30847] !: left promiscuous mode [ 1077.443676][T30851] tipc: Enabled bearer , priority 0 [ 1077.462579][T30858] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6639'. [ 1077.468463][T30851] syzkaller0: entered promiscuous mode [ 1077.485582][T30851] syzkaller0: entered allmulticast mode [ 1077.632435][T30851] tipc: Resetting bearer [ 1077.646957][T30849] tipc: Resetting bearer [ 1077.680710][T30849] tipc: Disabling bearer [ 1077.733062][T30813] wg1 speed is unknown, defaulting to 1000 [ 1077.840222][T30867] tipc: New replicast peer: 255.255.255.255 [ 1077.849052][T30867] tipc: Enabled bearer , priority 26 [ 1077.997347][T30874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6644'. [ 1078.374359][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6646'. [ 1078.578341][T30888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6649'. [ 1078.964902][T27677] tipc: Node number set to 2395907588 [ 1079.014580][T30912] sctp: [Deprecated]: syz.3.6656 (pid 30912) Use of int in maxseg socket option. [ 1079.014580][T30912] Use struct sctp_assoc_value instead [ 1079.950236][T30909] lo speed is unknown, defaulting to 1000 [ 1080.015251][T30939] netlink: 'syz.0.6665': attribute type 1 has an invalid length. [ 1080.110764][T30939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1080.227856][T30941] vlan2: entered allmulticast mode [ 1080.257193][T30941] bond2: entered allmulticast mode [ 1080.375429][T30941] bond2: (slave gretap1): making interface the new active one [ 1080.403001][T30941] gretap1: entered allmulticast mode [ 1080.425294][T30941] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1080.609402][T30909] wg1 speed is unknown, defaulting to 1000 [ 1080.613985][T30928] lo speed is unknown, defaulting to 1000 [ 1080.744308][T30957] : entered promiscuous mode [ 1081.164955][T30928] wg1 speed is unknown, defaulting to 1000 [ 1081.207808][T30937] lo speed is unknown, defaulting to 1000 [ 1081.272823][T30976] __nla_validate_parse: 8 callbacks suppressed [ 1081.272842][T30976] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6674'. [ 1081.300408][T30978] netlink: zone id is out of range [ 1081.355269][T30976] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6674'. [ 1081.799374][T30999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1081.863665][T30999] x_tables: unsorted underflow at hook 3 [ 1081.921651][T31003] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1082.066583][T30937] wg1 speed is unknown, defaulting to 1000 [ 1082.116180][T31007] netlink: 'syz.4.6683': attribute type 1 has an invalid length. [ 1082.340054][T31011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6683'. [ 1082.403277][T30994] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1082.452669][T31012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6683'. [ 1082.491165][T31012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6683'. [ 1082.672580][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1082.684472][T31019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1082.684840][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1082.712363][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1082.740451][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1082.753483][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1082.759278][T31009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1082.794204][T31009] bond1: (slave bond2): making interface the new active one [ 1082.813394][T31009] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1082.859211][T31010] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1082.894175][T31011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1083.026297][T16878] smc: removing ib device syz1 [ 1083.063849][T27677] syz1: Port: 1 Link DOWN [ 1083.239102][T31017] lo speed is unknown, defaulting to 1000 [ 1083.749762][T31032] svc: failed to register nfsdv3 RPC service (errno 111). [ 1083.785475][T31032] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1084.285982][T31056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6693'. [ 1084.340844][T31054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.349332][T31054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.564577][T31054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.598351][T31054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.775220][T31017] wg1 speed is unknown, defaulting to 1000 [ 1084.785308][T31056] hsr_slave_0: left promiscuous mode [ 1084.792021][T21429] Bluetooth: hci3: command tx timeout [ 1084.837600][T16857] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.871181][T16857] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.940571][T31063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6695'. [ 1084.942840][T16857] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.961457][T16857] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.037971][T16857] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.048442][T16857] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.150697][T31064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1085.158828][T31064] bridge0: port 1(bond3) entered blocking state [ 1085.166415][T31064] bridge0: port 1(bond3) entered disabled state [ 1085.174595][T31064] bond3: entered allmulticast mode [ 1085.186801][T31064] bond3: entered promiscuous mode [ 1085.221828][T31064] bridge0: port 1(bond3) entered blocking state [ 1085.228441][T31064] bridge0: port 1(bond3) entered forwarding state [ 1085.262061][T16857] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1085.270555][T16857] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.305617][T16873] bridge0: port 1(bond3) entered disabled state [ 1085.983745][T31084] bond3 (unregistering): Released all slaves [ 1086.065980][T31087] syzkaller1: entered promiscuous mode [ 1086.074900][T31087] syzkaller1: entered allmulticast mode [ 1086.089888][T31017] chnl_net:caif_netlink_parms(): no params data found [ 1086.373255][T31017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.380957][T31017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.409900][T31017] bridge_slave_0: entered allmulticast mode [ 1086.424925][T31017] bridge_slave_0: entered promiscuous mode [ 1086.436607][T31017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.445830][T31017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.455990][T31017] bridge_slave_1: entered allmulticast mode [ 1086.466915][T31017] bridge_slave_1: entered promiscuous mode [ 1086.565430][T31017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.591660][T31017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.603170][T31106] __nla_validate_parse: 2 callbacks suppressed [ 1086.603192][T31106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6705'. [ 1086.680623][T31106] bond4: entered allmulticast mode [ 1086.688487][T31106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1086.814793][T31114] netlink: 'syz.1.6706': attribute type 11 has an invalid length. [ 1086.871572][T21429] Bluetooth: hci3: command tx timeout [ 1086.886804][T31017] team0: Port device team_slave_0 added [ 1086.937563][T31017] team0: Port device team_slave_1 added [ 1087.055744][T31017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.065528][T31017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.094287][T31122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6708'. [ 1087.105395][T31017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.150051][T31128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1087.185801][T31128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1087.195550][T31128] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1087.228800][T31017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.237273][T31017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.269826][T31017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.383811][T31127] lo speed is unknown, defaulting to 1000 [ 1087.568155][T31017] hsr_slave_0: entered promiscuous mode [ 1087.591594][T31017] hsr_slave_1: entered promiscuous mode [ 1087.843290][T31127] wg1 speed is unknown, defaulting to 1000 [ 1087.970390][T31140] lo speed is unknown, defaulting to 1000 [ 1088.259129][T31140] wg1 speed is unknown, defaulting to 1000 [ 1088.437423][T31173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6722'. [ 1088.622043][T31168] lo speed is unknown, defaulting to 1000 [ 1088.928114][T31017] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.951989][T21429] Bluetooth: hci3: command tx timeout [ 1088.972266][T31017] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1089.000397][T31017] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1089.205178][T31017] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.240103][T31017] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1089.274135][T31017] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1089.483267][T31017] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.495063][T31017] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1089.505581][T31017] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1089.526692][T31168] wg1 speed is unknown, defaulting to 1000 [ 1089.632990][T31017] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.665550][T31017] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1089.688496][T31017] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1089.884966][T31221] netlink: 'syz.2.6732': attribute type 1 has an invalid length. [ 1090.176226][T31017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1090.220178][T31228] lo speed is unknown, defaulting to 1000 [ 1090.220867][T31017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1090.290063][T31017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1090.377060][T31017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1090.479701][T31236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6736'. [ 1090.813777][T31017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.882067][T31256] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6740'. [ 1090.897041][T31228] wg1 speed is unknown, defaulting to 1000 [ 1090.902543][T31017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.994701][T31259] netlink: 'syz.4.6742': attribute type 12 has an invalid length. [ 1091.018157][T16857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.025765][T16857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.031556][T21429] Bluetooth: hci3: command tx timeout [ 1091.127315][T16873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.134632][T16873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.294722][T31267] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6744'. [ 1091.541867][T31271] lo speed is unknown, defaulting to 1000 [ 1091.960855][T31017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.116488][T31297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6751'. [ 1092.276308][T31304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1092.415341][T31297] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6751'. [ 1092.436983][T31271] wg1 speed is unknown, defaulting to 1000 [ 1095.314359][T31017] veth0_vlan: entered promiscuous mode [ 1095.468214][T31017] veth1_vlan: entered promiscuous mode [ 1095.540932][T31017] veth0_macvtap: entered promiscuous mode [ 1095.556076][T31017] veth1_macvtap: entered promiscuous mode [ 1095.584868][T31017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.604440][T31017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.670423][T16876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.713050][T16876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.782590][T16876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.801598][T16876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.949689][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6763'. [ 1096.036497][T31349] tipc: Enabled bearer , priority 0 [ 1096.055712][T16876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.079077][T16876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.093309][T31349] tipc: Resetting bearer [ 1096.107533][T31346] tipc: Disabling bearer [ 1096.165193][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.174568][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.332358][T31358] syzkaller0: entered promiscuous mode [ 1096.338000][T31358] syzkaller0: entered allmulticast mode [ 1096.405670][T31366] tipc: Enabled bearer , priority 0 [ 1096.414076][T31360] syzkaller0: entered allmulticast mode [ 1096.443661][T31364] tipc: Disabling bearer [ 1096.467122][T31362] netlink: 'syz.0.6767': attribute type 2 has an invalid length. [ 1096.666414][T31376] syzkaller0: entered promiscuous mode [ 1096.691290][T31376] syzkaller0: entered allmulticast mode [ 1096.759628][T31390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6772'. [ 1096.783826][T31382] x_tables: duplicate underflow at hook 2 [ 1097.057879][T31403] lo speed is unknown, defaulting to 1000 [ 1097.096511][T31411] nbd: socks must be embedded in a SOCK_ITEM attr [ 1097.110077][T31411] block nbd6: shutting down sockets [ 1097.123790][T31416] netlink: 'syz.2.6779': attribute type 1 has an invalid length. [ 1097.226353][T31416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1099.748572][T31420] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6780'. [ 1099.771264][T31403] wg1 speed is unknown, defaulting to 1000 [ 1099.940028][T31433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1099.963817][T31435] sctp: [Deprecated]: syz.2.6783 (pid 31435) Use of int in max_burst socket option. [ 1099.963817][T31435] Use struct sctp_assoc_value instead [ 1100.008916][T31433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1100.106382][T31440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1100.124479][T31440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1100.153999][T31444] sctp: [Deprecated]: syz.0.6787 (pid 31444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.153999][T31444] Use struct sctp_sack_info instead [ 1100.342725][T31453] netlink: 'syz.2.6789': attribute type 10 has an invalid length. [ 1100.378755][T31453] team0: Port device dummy0 added [ 1100.397257][T31433] lo speed is unknown, defaulting to 1000 [ 1100.413439][T31457] netlink: 'syz.2.6789': attribute type 10 has an invalid length. [ 1100.477727][T31457] team0: Port device dummy0 removed [ 1100.525491][T31457] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1101.225572][T31433] wg1 speed is unknown, defaulting to 1000 [ 1101.628658][T31493] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6799'. [ 1102.023953][T31505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6802'. [ 1102.202438][T31515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1102.213201][T31515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1102.261827][T31515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1102.281334][T31515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1102.487202][T31522] lo speed is unknown, defaulting to 1000 [ 1102.757662][T31535] ip6tnl1: entered promiscuous mode [ 1102.955864][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.975252][T31548] netlink: 'syz.4.6815': attribute type 1 has an invalid length. [ 1103.014193][T31548] netlink: 'syz.4.6815': attribute type 2 has an invalid length. [ 1103.657783][T31522] wg1 speed is unknown, defaulting to 1000 [ 1103.744446][T31563] netlink: 'syz.0.6818': attribute type 12 has an invalid length. [ 1104.221778][T31589] veth0: entered promiscuous mode [ 1104.461091][T31594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.468918][T31594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.486036][T31594] netlink: 'syz.1.6827': attribute type 2 has an invalid length. [ 1104.509345][T31594] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1104.656361][T31597] syzkaller0: entered promiscuous mode [ 1104.673920][T31597] syzkaller0: entered allmulticast mode [ 1104.739176][T31599] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1104.758475][T31599] pim6reg1: linktype set to 805 [ 1105.077485][T31607] __nla_validate_parse: 8 callbacks suppressed [ 1105.077509][T31607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6831'. [ 1105.490638][T31628] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6838'. [ 1105.500527][T31627] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6838'. [ 1105.734005][T31634] lo speed is unknown, defaulting to 1000 [ 1106.550964][T31634] wg1 speed is unknown, defaulting to 1000 [ 1106.912235][T31671] xt_cgroup: path and classid specified [ 1107.264763][T31672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6847'. [ 1107.330175][T31672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6847'. [ 1107.500541][T31677] syzkaller1: entered promiscuous mode [ 1107.516619][T31677] syzkaller1: entered allmulticast mode [ 1107.524638][T31695] netlink: 'syz.1.6852': attribute type 26 has an invalid length. [ 1107.540613][T31696] syzkaller0: entered promiscuous mode [ 1107.549924][T31694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6853'. [ 1107.562539][T31696] syzkaller0: entered allmulticast mode [ 1107.607376][T31697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6853'. [ 1107.660615][T31695] lo speed is unknown, defaulting to 1000 [ 1108.413261][T31695] wg1 speed is unknown, defaulting to 1000 [ 1109.172490][T31734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6861'. [ 1109.356327][T31736] macvtap1: entered promiscuous mode [ 1109.396933][T31736] macvtap1: entered allmulticast mode [ 1109.678722][T31694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6853'. [ 1109.742431][T31694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6853'. [ 1109.751587][T16859] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.791847][T16859] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.813314][T16859] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.863858][T16859] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.085153][T31759] lo speed is unknown, defaulting to 1000 [ 1110.198660][T31752] bond3: option arp_validate: invalid value (18446744073491447809) [ 1110.215058][T31761] sctp: [Deprecated]: syz.0.6867 (pid 31761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1110.215058][T31761] Use struct sctp_sack_info instead [ 1110.289873][T31752] bond3 (unregistering): Released all slaves [ 1110.352686][T31761] netlink: 'syz.0.6867': attribute type 13 has an invalid length. [ 1110.697446][T31781] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1110.727845][T31761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.735733][T31761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.019777][T31761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.400453][T31771] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6871'. [ 1111.411295][T31759] wg1 speed is unknown, defaulting to 1000 [ 1111.451762][T16877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.491319][T16877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.546482][T31786] dummy0: entered allmulticast mode [ 1111.553387][T16877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.607507][T16877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.763759][T31786] lo speed is unknown, defaulting to 1000 [ 1112.089992][T31796] syzkaller1: entered promiscuous mode [ 1112.121675][T31796] syzkaller1: entered allmulticast mode [ 1112.409266][T31786] wg1 speed is unknown, defaulting to 1000 [ 1113.479013][T31832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1113.512112][T31832] netlink: 'syz.0.6883': attribute type 22 has an invalid length. [ 1113.520314][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1113.571498][T16882] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.604643][T16882] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.614599][T31832] netlink: 'syz.0.6883': attribute type 22 has an invalid length. [ 1113.629178][T16882] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.643798][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1113.695597][T16882] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.965012][T31842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6888'. [ 1114.003476][T31842] tipc: Started in network mode [ 1114.011845][T31842] tipc: Node identity 4a68d044296, cluster identity 4711 [ 1114.068859][T31842] tipc: Enabled bearer , priority 0 [ 1114.086755][T31849] syzkaller0: entered promiscuous mode [ 1114.103212][T31849] syzkaller0: entered allmulticast mode [ 1114.128518][T31842] tipc: Resetting bearer [ 1114.189302][T31841] tipc: Resetting bearer [ 1114.217731][T31860] siw: device registration error -23 [ 1114.261930][T31841] tipc: Disabling bearer [ 1114.304885][T31865] netlink: 'syz.0.6892': attribute type 4 has an invalid length. [ 1114.447083][T31869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6894'. [ 1114.503472][T31875] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6894'. [ 1114.562219][T31867] netlink: 280 bytes leftover after parsing attributes in process `syz.1.6893'. [ 1114.606653][T31874] lo speed is unknown, defaulting to 1000 [ 1114.805810][T31882] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6897'. [ 1114.971277][T31891] netlink: 'syz.2.6899': attribute type 1 has an invalid length. [ 1115.220586][T31874] wg1 speed is unknown, defaulting to 1000 [ 1115.363967][T31893] bond3: entered promiscuous mode [ 1115.369502][T31893] bond3: entered allmulticast mode [ 1115.376031][T31893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1115.385089][T31872] lo speed is unknown, defaulting to 1000 [ 1115.434094][T31891] bridge5: entered promiscuous mode [ 1115.446763][T31891] bridge5: entered allmulticast mode [ 1115.462595][T31891] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 1115.481328][T16857] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1115.631457][T16882] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1115.919311][T31872] wg1 speed is unknown, defaulting to 1000 [ 1116.227911][T31912] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6904'. [ 1116.564683][T31921] tipc: Started in network mode [ 1116.569807][T31921] tipc: Node identity 82ab4887412a, cluster identity 4711 [ 1116.621545][T31921] tipc: Enabled bearer , priority 0 [ 1116.650367][T31924] syzkaller0: entered promiscuous mode [ 1116.671737][T31924] syzkaller0: entered allmulticast mode [ 1116.744784][T31921] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1116.903205][T31933] tipc: Resetting bearer [ 1116.967738][T31920] tipc: Resetting bearer [ 1117.033787][T31920] tipc: Disabling bearer [ 1117.200982][T31936] lo speed is unknown, defaulting to 1000 [ 1117.316512][T31953] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1117.319020][T31952] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 1117.342714][T31954] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1117.371565][T31955] netlink: 'syz.3.6913': attribute type 2 has an invalid length. [ 1117.581161][T31959] x_tables: duplicate underflow at hook 1 [ 1117.600578][T31959] No such timeout policy "syz1" [ 1117.785304][T31936] wg1 speed is unknown, defaulting to 1000 [ 1117.808791][T31940] lo speed is unknown, defaulting to 1000 [ 1118.172730][T31977] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1118.212558][T31976] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1118.248417][T31976] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1118.298236][T31976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1118.311417][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 1118.866215][T31991] netlink: 'syz.2.6923': attribute type 2 has an invalid length. [ 1119.053265][T31970] lo speed is unknown, defaulting to 1000 [ 1119.173403][T31996] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.6924'. [ 1119.383402][T31999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.390714][T31999] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.398132][T31999] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.407306][T31999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.564910][T31970] wg1 speed is unknown, defaulting to 1000 [ 1119.574826][T31940] wg1 speed is unknown, defaulting to 1000 [ 1119.887681][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6929'. [ 1120.230704][T16873] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.271516][T16873] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.287307][T16873] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.317340][T16873] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.486326][T16873] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.516392][T16873] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.539890][T16873] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.588987][T16873] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.156114][T32048] bond0: entered allmulticast mode [ 1121.188458][T32045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6938'. [ 1121.404638][T32055] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1121.692595][T32051] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.066618][T32051] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.086243][T32079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1122.248846][T32051] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.341640][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6951'. [ 1122.353363][T32093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1122.378057][T32051] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.416401][T32093] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1122.447037][T32095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6952'. [ 1122.502325][T32097] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1122.544427][T16876] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.618669][T16876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.656261][T16876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.692048][T16876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.929205][T32106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.012722][T32106] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.068889][T32110] netlink: 'syz.0.6956': attribute type 12 has an invalid length. [ 1123.091458][T32110] netlink: 'syz.0.6956': attribute type 29 has an invalid length. [ 1123.102281][T32107] netlink: 'syz.3.6955': attribute type 13 has an invalid length. [ 1123.122888][T32110] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6956'. [ 1123.136092][T32110] netlink: 'syz.0.6956': attribute type 1 has an invalid length. [ 1123.144323][T32110] netlink: 'syz.0.6956': attribute type 1 has an invalid length. [ 1123.156296][T32110] netlink: 'syz.0.6956': attribute type 2 has an invalid length. [ 1123.468451][T32106] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.494379][T32128] tipc: Enabled bearer , priority 0 [ 1123.508120][T32119] syzkaller0: entered promiscuous mode [ 1123.514548][T32119] syzkaller0: entered allmulticast mode [ 1123.530165][T32118] lo speed is unknown, defaulting to 1000 [ 1123.546504][T32106] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.584738][T32117] tipc: Resetting bearer [ 1123.589187][T32132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6962'. [ 1123.635361][T32117] tipc: Disabling bearer [ 1123.779810][T32135] bridge: RTM_NEWNEIGH with invalid ether address [ 1123.806000][T32118] wg1 speed is unknown, defaulting to 1000 [ 1123.974824][T32143] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1124.938302][T32184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6975'. [ 1124.944990][T32185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6976'. [ 1125.171338][T32192] macvtap1: entered allmulticast mode [ 1125.177831][T32192] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1125.195167][T32192] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1125.460275][T32201] lo speed is unknown, defaulting to 1000 [ 1125.927840][T32201] wg1 speed is unknown, defaulting to 1000 [ 1126.188829][T32228] wireguard1: entered promiscuous mode [ 1126.195070][T32228] wireguard1: entered allmulticast mode [ 1126.207722][T32228] team0: Refused to change device type [ 1126.323630][T16855] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.421543][T16859] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.584488][T16855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.664382][T16855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.825712][T32247] __nla_validate_parse: 4 callbacks suppressed [ 1126.825737][T32247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6994'. [ 1126.838260][T32246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1126.853891][T32246] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1126.865726][T32246] netlink: 'syz.0.6993': attribute type 5 has an invalid length. [ 1126.884677][T32246] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1126.978669][T32251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1127.073631][T32255] netlink: 'syz.4.6996': attribute type 10 has an invalid length. [ 1127.093479][T32255] batman_adv: batadv0: Adding interface: macvtap0 [ 1127.106802][T32255] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.158370][T32255] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1127.159025][T32256] sctp: [Deprecated]: syz.4.6996 (pid 32256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1127.159025][T32256] Use struct sctp_sack_info instead [ 1127.289484][T32255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6996'. [ 1127.313829][T32255] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6996'. [ 1127.337276][T32255] ipt_rpfilter: unknown options [ 1127.350934][T32255] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6996'. [ 1127.386728][T32259] netlink: 'syz.2.6997': attribute type 23 has an invalid length. [ 1127.422286][T32259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1127.640326][T32263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6998'. [ 1128.039435][T32271] veth7: entered promiscuous mode [ 1128.089365][T32274] tipc: Enabled bearer , priority 0 [ 1128.103600][T32269] tipc: Disabling bearer [ 1128.156032][T16859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.178529][T16859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.575839][T32298] netlink: 'syz.0.7007': attribute type 29 has an invalid length. [ 1128.600450][T32298] netlink: 'syz.0.7007': attribute type 29 has an invalid length. [ 1128.767076][T32302] syzkaller1: entered promiscuous mode [ 1128.773279][T32302] syzkaller1: entered allmulticast mode [ 1128.998427][T32314] netlink: 'syz.0.7011': attribute type 10 has an invalid length. [ 1130.498256][T32324] bridge_slave_1: left allmulticast mode [ 1130.511248][T32324] bridge_slave_1: left promiscuous mode [ 1130.518657][T32324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.530198][T32324] bridge_slave_0: left allmulticast mode [ 1130.537124][T32324] bridge_slave_0: left promiscuous mode [ 1130.543283][T32324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.041227][T32329] netlink: 'syz.1.7015': attribute type 3 has an invalid length. [ 1131.053596][T32329] netlink: 'syz.1.7015': attribute type 3 has an invalid length. [ 1131.158744][T32322] lo speed is unknown, defaulting to 1000 [ 1131.211784][T32341] netlink: 'syz.0.7017': attribute type 1 has an invalid length. [ 1131.221745][T32340] netlink: 'syz.0.7017': attribute type 1 has an invalid length. [ 1131.335506][T32340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1131.982085][T32322] wg1 speed is unknown, defaulting to 1000 [ 1132.344050][T32364] __nla_validate_parse: 12 callbacks suppressed [ 1132.344072][T32364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7023'. [ 1132.713309][T32370] syzkaller0: create flow: hash 2717167759 index 1 [ 1132.797049][T26898] syzkaller0: tun_net_xmit 76 [ 1132.833470][T26209] syzkaller0: tun_net_xmit 76 [ 1132.838408][T26209] syzkaller0: tun_net_xmit 48 [ 1132.894282][T32376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7025'. [ 1133.081883][T32368] syzkaller0: delete flow: hash 2717167759 index 1 [ 1136.491436][T32391] sctp: [Deprecated]: syz.1.7028 (pid 32391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1136.491436][T32391] Use struct sctp_sack_info instead [ 1136.775112][T32406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7032'. [ 1136.793651][T32406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7032'. [ 1137.030330][T32411] sctp: [Deprecated]: syz.2.7034 (pid 32411) Use of int in maxseg socket option. [ 1137.030330][T32411] Use struct sctp_assoc_value instead [ 1137.094343][T32413] bond4: option primary_reselect: invalid value (6) [ 1137.102010][T32417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1137.122989][T32413] bond4 (unregistering): Released all slaves [ 1137.189425][T32405] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1137.226617][T32421] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7037'. [ 1137.394384][T32425] syzkaller0: entered promiscuous mode [ 1137.400011][T32425] syzkaller0: entered allmulticast mode [ 1137.663331][T32429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7040'. [ 1137.735703][T32430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.959241][T32439] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1137.977520][T32439] CPU: 0 UID: 0 PID: 32439 Comm: syz.3.7042 Not tainted syzkaller #0 PREEMPT(full) [ 1137.977553][T32439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1137.977566][T32439] Call Trace: [ 1137.977576][T32439] [ 1137.977585][T32439] dump_stack_lvl+0x189/0x250 [ 1137.977617][T32439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1137.977641][T32439] ? __pfx__printk+0x10/0x10 [ 1137.977676][T32439] ? kernfs_path_from_node+0x2f/0x290 [ 1137.977703][T32439] ? kernfs_path_from_node+0x250/0x290 [ 1137.977727][T32439] ? kernfs_path_from_node+0x2f/0x290 [ 1137.977757][T32439] sysfs_warn_dup+0x8e/0xa0 [ 1137.977783][T32439] sysfs_do_create_link_sd+0xc0/0x110 [ 1137.977811][T32439] device_add_class_symlinks+0x1cf/0x240 [ 1137.977847][T32439] device_add+0x475/0xb50 [ 1137.977891][T32439] wiphy_register+0x1d2e/0x2d20 [ 1137.977933][T32439] ? __pfx_wiphy_register+0x10/0x10 [ 1137.977956][T32439] ? __pfx_netdev_run_todo+0x10/0x10 [ 1137.977988][T32439] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1137.978027][T32439] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1137.978061][T32439] ieee80211_register_hw+0x3473/0x40d0 [ 1137.978109][T32439] ? ieee80211_register_hw+0x1451/0x40d0 [ 1137.978147][T32439] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1137.978173][T32439] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1137.978201][T32439] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1137.978224][T32439] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1137.978258][T32439] ? __hrtimer_setup+0x181/0x200 [ 1137.978280][T32439] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1137.978312][T32439] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 1137.978376][T32439] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1137.978399][T32439] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 1137.978426][T32439] ? kstrndup+0xbf/0x160 [ 1137.978459][T32439] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1137.978489][T32439] ? __pfx___nla_validate_parse+0x10/0x10 [ 1137.978534][T32439] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1137.978569][T32439] ? rcu_is_watching+0x15/0xb0 [ 1137.978597][T32439] ? __nla_parse+0x40/0x60 [ 1137.978626][T32439] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1137.978664][T32439] genl_family_rcv_msg_doit+0x215/0x300 [ 1137.978697][T32439] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1137.978739][T32439] ? bpf_lsm_capable+0x9/0x20 [ 1137.978759][T32439] ? security_capable+0x7e/0x2e0 [ 1137.978795][T32439] genl_rcv_msg+0x60e/0x790 [ 1137.978828][T32439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1137.978853][T32439] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1137.978904][T32439] netlink_rcv_skb+0x208/0x470 [ 1137.978925][T32439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1137.978962][T32439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1137.979007][T32439] ? down_read+0x274/0x2e0 [ 1137.979032][T32439] ? genl_rcv+0xd/0x40 [ 1137.979055][T32439] genl_rcv+0x28/0x40 [ 1137.979075][T32439] netlink_unicast+0x82f/0x9e0 [ 1137.979114][T32439] ? __pfx_netlink_unicast+0x10/0x10 [ 1137.979142][T32439] ? netlink_sendmsg+0x642/0xb30 [ 1137.979158][T32439] ? skb_put+0x11b/0x210 [ 1137.979191][T32439] netlink_sendmsg+0x805/0xb30 [ 1137.979221][T32439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.979244][T32439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1137.979266][T32439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1137.979290][T32439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.979312][T32439] __sock_sendmsg+0x21c/0x270 [ 1137.979339][T32439] ____sys_sendmsg+0x505/0x820 [ 1137.979376][T32439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1137.979418][T32439] ? import_iovec+0x74/0xa0 [ 1137.979452][T32439] ___sys_sendmsg+0x21f/0x2a0 [ 1137.979486][T32439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1137.979525][T32439] ? futex_wait+0x285/0x360 [ 1137.979581][T32439] ? __fget_files+0x2a/0x420 [ 1137.979599][T32439] ? __fget_files+0x3a0/0x420 [ 1137.979628][T32439] __x64_sys_sendmsg+0x19b/0x260 [ 1137.979660][T32439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1137.979707][T32439] ? do_syscall_64+0xbe/0xf80 [ 1137.979736][T32439] do_syscall_64+0xfa/0xf80 [ 1137.979759][T32439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.979778][T32439] ? clear_bhb_loop+0x60/0xb0 [ 1137.979804][T32439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.979823][T32439] RIP: 0033:0x7f632058f749 [ 1137.979843][T32439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.979871][T32439] RSP: 002b:00007f63213ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.979895][T32439] RAX: ffffffffffffffda RBX: 00007f63207e5fa0 RCX: 00007f632058f749 [ 1137.979909][T32439] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1137.979923][T32439] RBP: 00007f6320613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1137.979936][T32439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.979949][T32439] R13: 00007f63207e6038 R14: 00007f63207e5fa0 R15: 00007ffda95e5008 [ 1137.979989][T32439] [ 1138.522807][T32443] netlink: 'syz.3.7042': attribute type 3 has an invalid length. [ 1138.535689][T32430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.686042][T32448] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7046'. [ 1138.732378][T32430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.929826][T32430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.933101][T32460] netlink: 'syz.2.7050': attribute type 1 has an invalid length. [ 1138.949442][T32460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1138.970850][T32460] NCSI netlink: No device for ifindex 0 [ 1138.977088][T32464] netlink: 'syz.3.7048': attribute type 5 has an invalid length. [ 1139.038202][T32462] tipc: Enabled bearer , priority 0 [ 1139.058558][T32462] syzkaller0: entered promiscuous mode [ 1139.082039][T32462] syzkaller0: entered allmulticast mode [ 1139.160467][T16855] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.171154][ C0] syzkaller0: tun_net_xmit 90 [ 1139.196242][T16855] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.219572][T32462] tipc: Resetting bearer [ 1139.229313][T32462] syzkaller0: tun_net_xmit 90 [ 1139.235160][T32479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7053'. [ 1139.254287][T16879] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.272203][T32461] tipc: Resetting bearer [ 1139.291505][T32485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1139.356276][T32478] IPVS: Scheduler module ip_vs_sip not found [ 1139.410431][T32461] tipc: Disabling bearer [ 1139.469912][T16855] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.545604][T32491] lo speed is unknown, defaulting to 1000 [ 1139.633823][T32495] syzkaller0: entered promiscuous mode [ 1139.640957][T32495] syzkaller0: entered allmulticast mode [ 1139.924158][T32491] wg1 speed is unknown, defaulting to 1000 [ 1140.100881][T32507] lo speed is unknown, defaulting to 1000 [ 1140.150742][T32517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7061'. [ 1140.191981][T32519] netlink: 'syz.1.7064': attribute type 12 has an invalid length. [ 1140.199946][T32519] netlink: 'syz.1.7064': attribute type 29 has an invalid length. [ 1140.226572][T32519] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7064'. [ 1140.281445][T32519] netlink: 'syz.1.7064': attribute type 2 has an invalid length. [ 1140.291257][T32519] netlink: 23 bytes leftover after parsing attributes in process `syz.1.7064'. [ 1140.338850][T32517] syzkaller0: entered promiscuous mode [ 1140.375414][T32517] syzkaller0: entered allmulticast mode [ 1140.424326][T32519] syzkaller1: entered promiscuous mode [ 1140.430225][T32519] syzkaller1: entered allmulticast mode [ 1140.582382][T32535] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1140.722703][T32507] wg1 speed is unknown, defaulting to 1000 [ 1141.331535][T32557] lo speed is unknown, defaulting to 1000 [ 1141.672532][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.706729][T32557] wg1 speed is unknown, defaulting to 1000 [ 1141.897118][T32573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7076'. [ 1142.066046][T32580] netlink: 'syz.3.7079': attribute type 2 has an invalid length. [ 1142.085247][T32580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1142.152215][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 1142.285213][T32583] netlink: 'syz.0.7080': attribute type 1 has an invalid length. [ 1142.301596][T32583] netlink: 'syz.0.7080': attribute type 1 has an invalid length. [ 1142.509587][T32589] openvswitch: netlink: Missing valid actions attribute. [ 1142.521312][T32589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.720320][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.832290][T32600] tipc: Enabled bearer , priority 0 [ 1142.846214][T32600] syzkaller0: entered promiscuous mode [ 1142.856550][T32600] syzkaller0: entered allmulticast mode [ 1142.924351][T32600] tipc: Resetting bearer [ 1142.966790][T32599] tipc: Resetting bearer [ 1142.994200][T32599] tipc: Disabling bearer [ 1143.023981][T32613] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1143.172727][T32620] netlink: 'syz.0.7094': attribute type 10 has an invalid length. [ 1143.184095][T32616] sit0: entered promiscuous mode [ 1143.190034][T32616] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1143.232933][T32616] bridge0: port 3(macvtap1) entered blocking state [ 1143.239888][T32616] bridge0: port 3(macvtap1) entered disabled state [ 1143.270312][T32616] macvtap1: entered allmulticast mode [ 1143.282495][T26244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.301805][T32616] bridge0: entered allmulticast mode [ 1143.313449][T32616] macvtap1: left allmulticast mode [ 1143.319845][T32616] bridge0: left allmulticast mode [ 1143.535696][T32635] validate_nla: 1 callbacks suppressed [ 1143.535718][T32635] netlink: 'syz.4.7096': attribute type 4 has an invalid length. [ 1143.556252][T32636] netlink: 'syz.4.7096': attribute type 4 has an invalid length. [ 1143.720830][T32649] tipc: Enabled bearer , priority 4 [ 1143.735554][T32651] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1143.752669][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.775727][T32651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.202653][T32667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7105'. [ 1144.231808][T32667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7105'. [ 1144.263835][T32674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7106'. [ 1144.479006][T32682] vxcan3: entered allmulticast mode [ 1144.796066][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.810444][T27674] tipc: Node number set to 3280029831 [ 1145.066947][T32701] Bluetooth: MGMT ver 1.23 [ 1145.095697][T32703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7113'. [ 1145.151767][T32703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7113'. [ 1145.285156][T32682] Cannot find set identified by id 1 to match [ 1145.461978][T32715] syzkaller1: entered promiscuous mode [ 1145.464236][T32719] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7118'. [ 1145.478171][T32715] syzkaller1: entered allmulticast mode [ 1145.585495][T32726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1145.620423][T32726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1145.724138][T32729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.839466][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.897737][T32734] netem: change failed [ 1145.935125][T32726] lo speed is unknown, defaulting to 1000 [ 1145.943729][T32736] syzkaller0: entered promiscuous mode [ 1145.958903][T32736] syzkaller0: entered allmulticast mode [ 1146.100932][T32738] netem: change failed [ 1146.579235][T32750] netlink: 'syz.1.7129': attribute type 3 has an invalid length. [ 1146.872231][T26209] net_ratelimit: 2 callbacks suppressed [ 1146.872251][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.898384][T32755] lo speed is unknown, defaulting to 1000 [ 1146.905360][T32726] wg1 speed is unknown, defaulting to 1000 [ 1147.195490][T32764] netlink: 'syz.2.7131': attribute type 1 has an invalid length. [ 1147.209713][T32755] wg1 speed is unknown, defaulting to 1000 [ 1147.607526][ T302] vlan2: entered allmulticast mode [ 1147.914955][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.235678][ T320] __nla_validate_parse: 6 callbacks suppressed [ 1148.235699][ T320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7135'. [ 1148.293514][ T320] openvswitch: netlink: Key type 31 is not supported [ 1148.520478][ T329] syzkaller0: entered promiscuous mode [ 1148.541350][ T329] syzkaller0: entered allmulticast mode [ 1148.563859][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7139'. [ 1148.587651][ T332] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 1148.643028][ T337] netlink: 'syz.1.7141': attribute type 1 has an invalid length. [ 1148.865089][ T337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1148.952976][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.123657][ T350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7142'. [ 1149.313420][ T360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7144'. [ 1149.332160][ T360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7144'. [ 1149.347545][ T346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.361627][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.369899][ T346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.380912][ T346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.393359][ T346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.431904][ T346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.555095][ T359] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7146'. [ 1150.088663][ T393] ip6t_srh: unknown srh match flags 4000 [ 1150.201883][ T396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1150.786712][ T418] lo speed is unknown, defaulting to 1000 [ 1150.818013][ T416] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1151.172704][ T418] wg1 speed is unknown, defaulting to 1000 [ 1151.532333][ T438] lo speed is unknown, defaulting to 1000 [ 1151.606155][ T448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7173'. [ 1152.074506][T26241] net_ratelimit: 591 callbacks suppressed [ 1152.074530][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.183806][ T438] wg1 speed is unknown, defaulting to 1000 [ 1152.397998][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.406828][ T487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1152.573411][ T488] bond4 (unregistering): Released all slaves [ 1152.881541][ T515] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1152.893763][ T515] netlink: 'syz.0.7191': attribute type 1 has an invalid length. [ 1152.906550][ T515] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1153.112752][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.227703][ T526] bond5: option min_links: invalid value (18446744073709551612) [ 1153.235801][ T526] bond5: option min_links: allowed values 0 - 2147483647 [ 1153.251629][ T526] bond5 (unregistering): Released all slaves [ 1153.446904][ T535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7195'. [ 1153.456996][ T535] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7195'. [ 1153.535120][ T533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.568896][ T535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.679163][ T537] tipc: Started in network mode [ 1153.687276][ T537] tipc: Node identity 4e76648c2d48, cluster identity 4711 [ 1153.695202][ T537] tipc: Enabled bearer , priority 0 [ 1153.728177][ T537] syzkaller0: entered promiscuous mode [ 1153.734455][ T537] syzkaller0: entered allmulticast mode [ 1153.791643][ T537] tipc: Resetting bearer [ 1153.831586][ T547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7199'. [ 1153.899471][ T536] tipc: Resetting bearer [ 1153.920923][ T536] tipc: Disabling bearer [ 1154.067142][ T554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7201'. [ 1154.072165][ T555] syz_tun: entered allmulticast mode [ 1154.095567][ T554] bond0: entered promiscuous mode [ 1154.102527][ T554] bond0: left promiscuous mode [ 1154.119786][ T557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7201'. [ 1154.140982][ T557] bond0: entered promiscuous mode [ 1154.170536][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.188267][ T557] bond0: left promiscuous mode [ 1154.261453][ T553] syz_tun: left allmulticast mode [ 1154.932957][ T588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7211'. [ 1154.934795][ T586] x_tables: duplicate underflow at hook 2 [ 1155.032790][ T583] vlan2: entered allmulticast mode [ 1155.038151][ T583] bridge0: entered allmulticast mode [ 1155.066859][ T583] bridge7: port 1(vlan2) entered blocking state [ 1155.088088][ T583] bridge7: port 1(vlan2) entered disabled state [ 1155.106879][ T583] vlan2: entered promiscuous mode [ 1155.116516][ T583] bridge0: entered promiscuous mode [ 1155.148481][ T583] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1155.192286][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.431722][T26244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.469101][ T605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7219'. [ 1155.533433][ T613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7221'. [ 1155.802455][ T620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7224'. [ 1155.878900][ T628] lo speed is unknown, defaulting to 1000 [ 1155.912354][T21429] Bluetooth: hci3: command 0x0405 tx timeout [ 1155.912444][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.995813][ T636] openvswitch: netlink: IP tunnel dst address not specified [ 1156.089280][ T632] syzkaller0: entered promiscuous mode [ 1156.104355][ T632] syzkaller0: entered allmulticast mode [ 1156.179189][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7230'. [ 1156.194026][ T628] wg1 speed is unknown, defaulting to 1000 [ 1156.234602][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.806773][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.274172][T26209] net_ratelimit: 1 callbacks suppressed [ 1157.274194][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.312578][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.804202][ T655] geneve2: entered promiscuous mode [ 1158.819630][T16875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.829051][T16875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.958920][T16875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.982187][T16875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.990621][ T30] audit: type=1107 audit(1765552482.409:11): pid=662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='îæ°ÊzmAF«Ò# çZ' [ 1159.115814][ T668] __nla_validate_parse: 1 callbacks suppressed [ 1159.115835][ T668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7234'. [ 1159.170356][ T673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1159.191429][ T673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1159.226104][ T659] lo speed is unknown, defaulting to 1000 [ 1159.254052][ T675] netlink: 'syz.1.7239': attribute type 3 has an invalid length. [ 1159.352381][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.834771][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.911620][ T659] wg1 speed is unknown, defaulting to 1000 [ 1159.952382][ T688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.065127][ T697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 1160.415342][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.596258][ T720] netlink: 'syz.3.7252': attribute type 1 has an invalid length. [ 1160.651242][ T720] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7252'. [ 1160.694452][ T720] netlink: 'syz.3.7252': attribute type 2 has an invalid length. [ 1160.712984][ T720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7252'. [ 1160.956209][ T732] netlink: 760 bytes leftover after parsing attributes in process `syz.3.7257'. [ 1160.981818][ T736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7256'. [ 1161.011648][ T736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7256'. [ 1161.242573][T16871] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1161.260593][T16871] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1161.273347][T26206] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1161.362908][ T753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.434840][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.452204][T26206] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1161.717368][ T766] lo speed is unknown, defaulting to 1000 [ 1161.722230][ T769] netlink: 'syz.1.7264': attribute type 6 has an invalid length. [ 1161.771470][T26206] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1161.797384][ T774] netlink: 'syz.4.7265': attribute type 4 has an invalid length. [ 1162.114531][ T783] delete_channel: no stack [ 1162.311670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.412516][ T791] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7272'. [ 1162.472191][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.707147][ T794] lo speed is unknown, defaulting to 1000 [ 1162.716057][ T766] wg1 speed is unknown, defaulting to 1000 [ 1162.872418][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.468456][ T819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1163.469086][ T794] wg1 speed is unknown, defaulting to 1000 [ 1163.513057][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.304959][ T839] lo speed is unknown, defaulting to 1000 [ 1164.584821][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.091764][ T842] lo speed is unknown, defaulting to 1000 [ 1165.101166][ T839] wg1 speed is unknown, defaulting to 1000 [ 1165.591823][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1165.593637][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.775251][ T849] lo speed is unknown, defaulting to 1000 [ 1165.913629][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.009399][ T876] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1166.152612][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.204989][ T849] wg1 speed is unknown, defaulting to 1000 [ 1166.230804][ T874] lo speed is unknown, defaulting to 1000 [ 1166.233305][ T842] wg1 speed is unknown, defaulting to 1000 [ 1166.247268][ T884] __nla_validate_parse: 1 callbacks suppressed [ 1166.247289][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7297'. [ 1166.632192][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.859178][ T874] wg1 speed is unknown, defaulting to 1000 [ 1167.080277][ T905] sctp: [Deprecated]: syz.1.7304 (pid 905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1167.080277][ T905] Use struct sctp_sack_info instead [ 1167.597321][ T925] ip6erspan0: entered allmulticast mode [ 1167.675305][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.895529][ T934] nbd: must specify an index to disconnect [ 1168.331412][ T938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.357017][ T957] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7315'. [ 1168.566005][ T938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.635927][ T970] tipc: Enabled bearer , priority 0 [ 1168.645367][ T974] netlink: 'syz.3.7321': attribute type 1 has an invalid length. [ 1168.646915][ T964] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7318'. [ 1168.704153][ T938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.716751][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.748357][ T970] syzkaller0: entered promiscuous mode [ 1168.754420][ T970] syzkaller0: entered allmulticast mode [ 1168.768364][ T975] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1168.780608][ T975] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1168.795899][ T975] bond1: (slave vcan1): making interface the new active one [ 1168.804325][ T975] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1168.835220][ T974] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 1168.848341][ T974] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 1168.859651][ T970] tipc: Resetting bearer [ 1168.868561][ T975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1168.922382][ T938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.951686][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.965213][ T969] tipc: Resetting bearer [ 1169.038020][ T969] tipc: Disabling bearer [ 1169.058538][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.068833][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.078759][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.143550][ T983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7323'. [ 1169.244830][T26904] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.258985][ T986] netlink: 'syz.2.7326': attribute type 3 has an invalid length. [ 1169.340240][T16859] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.409087][T26898] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.518319][T26898] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.733413][ T1018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7335'. [ 1169.751836][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.763361][ T1015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7332'. [ 1169.852930][ T1027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7336'. [ 1169.910976][ T1023] lo speed is unknown, defaulting to 1000 [ 1169.969609][ T1018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7335'. [ 1170.052912][ T1035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7339'. [ 1170.260347][ T1046] netlink: 'syz.0.7342': attribute type 2 has an invalid length. [ 1170.335033][ T1048] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1170.583832][ T1067] bridge_slave_1: left allmulticast mode [ 1170.589926][ T1067] bridge_slave_1: left promiscuous mode [ 1170.601675][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.640933][ T1067] bridge_slave_0: left allmulticast mode [ 1170.651585][ T1067] bridge_slave_0: left promiscuous mode [ 1170.667797][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.063591][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.227051][ T1023] wg1 speed is unknown, defaulting to 1000 [ 1171.790626][ T1094] bond4 (unregistering): Released all slaves [ 1171.836687][ T1090] lo speed is unknown, defaulting to 1000 [ 1172.002028][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.073418][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.232847][ T1090] wg1 speed is unknown, defaulting to 1000 [ 1172.452140][ T1123] vxcan3: entered allmulticast mode [ 1172.979197][ T1124] Cannot find set identified by id 0 to match [ 1173.111593][T26234] net_ratelimit: 2 callbacks suppressed [ 1173.111612][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.294364][ T1132] __nla_validate_parse: 2 callbacks suppressed [ 1173.294386][ T1132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7359'. [ 1173.340015][ T1135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1173.353691][ T1133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7359'. [ 1173.363579][ T1135] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1173.708247][ T1139] tipc: Enabled bearer , priority 0 [ 1173.729154][ T1139] syzkaller0: entered promiscuous mode [ 1173.751928][ T1139] syzkaller0: entered allmulticast mode [ 1173.956407][ T1141] tipc: Resetting bearer [ 1173.970669][ T1137] tipc: Resetting bearer [ 1174.009449][ T1137] tipc: Disabling bearer [ 1174.244243][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.337241][ T1163] lo speed is unknown, defaulting to 1000 [ 1174.471346][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1174.476002][ T1173] netlink: 'syz.0.7369': attribute type 1 has an invalid length. [ 1174.528991][ T30] audit: type=1800 audit(1765552497.959:12): pid=1176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7370" name="memory.events" dev="tmpfs" ino=1579 res=0 errno=0 [ 1174.688065][T26234] IPVS: starting estimator thread 0... [ 1174.794479][ T1182] IPVS: using max 23 ests per chain, 55200 per kthread [ 1174.884368][ T1163] wg1 speed is unknown, defaulting to 1000 [ 1174.969844][ T1190] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1174.993181][ T1190] bond5 (unregistering): Released all slaves [ 1175.273255][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.593010][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.135920][ T1220] IPVS: set_ctl: invalid protocol: 12336 48.48.48.48:12336 [ 1176.315239][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.563643][ T1247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7385'. [ 1176.574996][ T1248] netlink: 'syz.2.7386': attribute type 10 has an invalid length. [ 1176.586334][ T1248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.596328][ T1248] bond0: (slave team0): Enslaving as an active interface with an up link [ 1176.668084][ T1252] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1176.689276][ T1252] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1176.787673][ T1258] netlink: 'syz.0.7389': attribute type 1 has an invalid length. [ 1176.844782][ T1258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1176.910477][ T1264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1176.921928][ T1264] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1176.953871][ T1264] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1177.031747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.066738][ T1258] veth1: entered promiscuous mode [ 1177.106839][ T1258] bond4: (slave veth1): Enslaving as an active interface with a down link [ 1177.244011][ T8384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.263917][ T8384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.286549][ T1277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.302032][ T1277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.310614][ T1277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.319496][ T1277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.618463][ T1284] netlink: 'syz.1.7395': attribute type 10 has an invalid length. [ 1177.734099][ T1284] veth0_vlan: left promiscuous mode [ 1177.763579][ T1284] veth0_vlan: entered promiscuous mode [ 1177.785331][ T1284] team0: Device veth0_vlan failed to register rx_handler [ 1177.925643][ T1289] lo speed is unknown, defaulting to 1000 [ 1178.184804][ T1289] wg1 speed is unknown, defaulting to 1000 [ 1178.184891][ T1297] lo speed is unknown, defaulting to 1000 [ 1178.324274][T26904] net_ratelimit: 5 callbacks suppressed [ 1178.324297][T26904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.392041][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.846406][ T1297] wg1 speed is unknown, defaulting to 1000 [ 1178.895157][ T1334] lo speed is unknown, defaulting to 1000 [ 1179.089600][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7409'. [ 1179.183333][ T1349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1179.244618][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.255634][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.268861][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.285420][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.295914][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.305830][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.317140][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.327297][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.471505][ T1334] wg1 speed is unknown, defaulting to 1000 [ 1179.756615][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 1180.504978][ T1377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7418'. [ 1180.525868][ T1377] sctp: [Deprecated]: syz.2.7418 (pid 1377) Use of int in max_burst socket option. [ 1180.525868][ T1377] Use struct sctp_assoc_value instead [ 1180.536097][ T1369] syzkaller1: entered allmulticast mode [ 1180.650928][ T1383] netlink: 'syz.0.7419': attribute type 3 has an invalid length. [ 1180.703983][ T1383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7419'. [ 1180.876535][ T1392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1180.911754][ T1392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1181.052973][ T1401] netlink: 'syz.2.7426': attribute type 10 has an invalid length. [ 1181.083661][ T1401] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1181.183375][ T1406] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1181.218910][ T1406] bond5 (unregistering): Released all slaves [ 1181.306659][ T1423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1181.335745][ T1423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1181.370333][ T1411] batman_adv: batadv0: Adding interface: vlan3 [ 1181.387019][ T1411] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.456515][ T1411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.478347][ T1411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.490835][ T1411] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1181.506044][ T1423] tipc: Enabling of bearer rejected, failed to enable media [ 1181.539273][ T1428] syzkaller1: entered promiscuous mode [ 1181.548880][ T1428] syzkaller1: entered allmulticast mode [ 1181.784613][ T1446] netlink: 'syz.0.7436': attribute type 1 has an invalid length. [ 1181.815846][ T1446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7436'. [ 1181.855537][ T1446] netlink: 'syz.0.7436': attribute type 1 has an invalid length. [ 1181.903838][ T1442] bond5 (unregistering): Released all slaves [ 1181.923188][ T1446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7436'. [ 1182.045846][ T1457] netlink: 'syz.2.7439': attribute type 42 has an invalid length. [ 1182.299433][ T1473] lo speed is unknown, defaulting to 1000 [ 1182.308514][ T1475] netlink: 'syz.2.7444': attribute type 3 has an invalid length. [ 1182.785525][ T1486] syzkaller0: entered promiscuous mode [ 1182.806631][ T1486] syzkaller0: entered allmulticast mode [ 1182.817798][ T1474] lo speed is unknown, defaulting to 1000 [ 1182.825528][ T1473] wg1 speed is unknown, defaulting to 1000 [ 1183.135136][ T1488] delete_channel: no stack [ 1183.487464][ T1517] tipc: Enabled bearer , priority 0 [ 1183.516128][ T1516] tipc: Disabling bearer [ 1183.550892][ T1474] wg1 speed is unknown, defaulting to 1000 [ 1183.592616][T26241] net_ratelimit: 2051 callbacks suppressed [ 1183.592638][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.640204][ T1519] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1183.669645][ T1519] netlink: 'syz.1.7454': attribute type 2 has an invalid length. [ 1183.686339][ T1519] netlink: 'syz.1.7454': attribute type 9 has an invalid length. [ 1183.704789][ T1519] netlink: 'syz.1.7454': attribute type 22 has an invalid length. [ 1184.074987][T26898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.402687][ T1554] netlink: 'syz.1.7462': attribute type 10 has an invalid length. [ 1184.415760][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.423278][ T1554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.431930][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.439142][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.455257][ T1554] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1184.531567][ T1554] __nla_validate_parse: 6 callbacks suppressed [ 1184.531587][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7462'. [ 1184.636450][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.731973][T26904] bond0: (slave bridge0): interface is now down [ 1184.762524][T26904] bond0: now running without any active interface! [ 1184.884410][ T1567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.894204][ T1567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.911149][ T1567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.927621][ T1567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.936623][ T1569] sctp: [Deprecated]: syz.1.7468 (pid 1569) Use of int in max_burst socket option. [ 1184.936623][ T1569] Use struct sctp_assoc_value instead [ 1184.937001][ T1567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.975058][ T1567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.114657][ T1576] lo speed is unknown, defaulting to 1000 [ 1185.298932][ T1573] tipc: Enabled bearer , priority 26 [ 1185.385215][ T1576] wg1 speed is unknown, defaulting to 1000 [ 1185.622285][ T1595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1186.026180][ T1599] lo speed is unknown, defaulting to 1000 [ 1186.102653][ T1609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1186.390810][ T1621] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1186.424950][T26215] tipc: Node number set to 1661521988 [ 1186.607412][ T1599] wg1 speed is unknown, defaulting to 1000 [ 1186.610629][ T1603] lo speed is unknown, defaulting to 1000 [ 1186.637952][ T1629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7483'. [ 1187.016467][ T1645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7486'. [ 1187.269260][ T1603] wg1 speed is unknown, defaulting to 1000 [ 1187.754614][ T1672] Cannot find map_set index 135 as target [ 1187.760954][ T1673] Cannot find map_set index 135 as target [ 1187.847614][ T1672] lo speed is unknown, defaulting to 1000 [ 1187.986311][T27674] IPVS: starting estimator thread 0... [ 1188.096082][ T1678] validate_nla: 1 callbacks suppressed [ 1188.096104][ T1678] netlink: 'syz.0.7496': attribute type 29 has an invalid length. [ 1188.112227][ T1677] IPVS: using max 28 ests per chain, 67200 per kthread [ 1188.145558][ T1685] netlink: 'syz.0.7496': attribute type 29 has an invalid length. [ 1188.498349][ T1672] wg1 speed is unknown, defaulting to 1000 [ 1188.498372][ T1683] lo speed is unknown, defaulting to 1000 [ 1188.599931][ T1697] netlink: 'syz.0.7500': attribute type 1 has an invalid length. [ 1188.793410][T26234] net_ratelimit: 139 callbacks suppressed [ 1188.793434][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.813321][ T1683] wg1 speed is unknown, defaulting to 1000 [ 1188.841326][ T1697] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1189.102240][ T1716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7504'. [ 1189.358559][ T1723] lo speed is unknown, defaulting to 1000 [ 1189.463989][ T1732] netlink: 'syz.1.7509': attribute type 21 has an invalid length. [ 1189.483660][ T1732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1189.562938][ T1732] netlink: 'syz.1.7509': attribute type 32 has an invalid length. [ 1189.580918][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1189.794181][ T1732] bond3: option coupled_control: invalid value (64) [ 1189.804455][ T1732] bond3 (unregistering): Released all slaves [ 1189.832896][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.841226][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.933349][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7505'. [ 1190.245341][ T1752] bond3: entered promiscuous mode [ 1190.260906][ T1752] bond3: entered allmulticast mode [ 1190.277954][ T1752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1190.295319][ T1753] batman_adv: batadv0: Adding interface: dummy0 [ 1190.304500][ T1753] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.369367][ T1753] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1190.388349][ T1723] wg1 speed is unknown, defaulting to 1000 [ 1190.492218][ T1758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1190.502668][ T1758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1190.522931][ T1758] netlink: 'syz.1.7515': attribute type 11 has an invalid length. [ 1190.783306][ T1770] tipc: Enabling of bearer rejected, failed to enable media [ 1190.875921][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.049421][ T1782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1191.111622][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1191.558172][ T1800] lo speed is unknown, defaulting to 1000 [ 1191.583202][ T1805] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7528'. [ 1191.911542][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.046464][ T1800] wg1 speed is unknown, defaulting to 1000 [ 1192.388232][ T1843] xt_CT: No such helper "netbios-ns" [ 1192.437961][ T1842] lo speed is unknown, defaulting to 1000 [ 1192.762913][ T1869] netlink: 'syz.0.7545': attribute type 1 has an invalid length. [ 1192.875219][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.968848][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.289304][ T1842] wg1 speed is unknown, defaulting to 1000 [ 1193.328354][ T1888] lo speed is unknown, defaulting to 1000 [ 1193.371437][ T1891] netlink: 'syz.4.7550': attribute type 21 has an invalid length. [ 1193.406195][ T1891] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7550'. [ 1193.542481][ T1891] netlink: 'syz.4.7550': attribute type 4 has an invalid length. [ 1193.552229][ T1891] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7550'. [ 1193.596016][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7551'. [ 1193.676449][T16879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.991620][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.054811][ T1901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7553'. [ 1194.291935][ T1903] openvswitch: netlink: Key 32 has unexpected len 7 expected 2 [ 1194.471448][ T1888] wg1 speed is unknown, defaulting to 1000 [ 1194.692323][ T1929] xt_TCPMSS: Only works on TCP SYN packets [ 1195.035405][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.055546][ T1940] __nla_validate_parse: 3 callbacks suppressed [ 1195.055569][ T1940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7566'. [ 1195.592412][T26898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.615586][ T1967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7575'. [ 1195.643242][ T1969] openvswitch: netlink: IPv4 tun info is not correct [ 1195.688661][ T1967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7575'. [ 1195.827826][ T1973] SET target dimension over the limit! [ 1195.935477][ T1979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.025526][ T1979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.063326][ T1979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.074180][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.082842][ T1979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.144876][ T1988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7581'. [ 1196.214553][ T1986] lo speed is unknown, defaulting to 1000 [ 1196.260543][ T1988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7581'. [ 1196.733346][ T1993] syzkaller0: entered promiscuous mode [ 1196.738944][ T1993] syzkaller0: entered allmulticast mode [ 1196.746732][ T1986] wg1 speed is unknown, defaulting to 1000 [ 1199.201923][T26215] net_ratelimit: 161 callbacks suppressed [ 1199.201945][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.416396][ T1999] geneve1: entered promiscuous mode [ 1199.432079][T16860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.532172][ T2003] lo speed is unknown, defaulting to 1000 [ 1199.718211][ T2024] syzkaller1: entered promiscuous mode [ 1199.733581][ T2024] syzkaller1: entered allmulticast mode [ 1199.766796][ T2024] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7589'. [ 1199.790314][ T2024] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7589'. [ 1200.108919][ T2042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7594'. [ 1200.131764][ T2042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7594'. [ 1200.151943][ T2042] netlink: 'syz.2.7594': attribute type 14 has an invalid length. [ 1200.159821][ T2042] netlink: 'syz.2.7594': attribute type 13 has an invalid length. [ 1200.201689][ T2003] wg1 speed is unknown, defaulting to 1000 [ 1200.210682][ T2039] lo speed is unknown, defaulting to 1000 [ 1200.271392][T26215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.442261][ T2056] vlan3: entered promiscuous mode [ 1200.458308][ T2056] bridge0: entered promiscuous mode [ 1200.658699][ T2063] veth8: entered promiscuous mode [ 1200.659783][ T2067] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1200.671858][ T2063] veth8: entered allmulticast mode [ 1201.005306][ T2039] wg1 speed is unknown, defaulting to 1000 [ 1201.279668][ T2086] tipc: Enabled bearer , priority 0 [ 1201.294800][ T2087] syzkaller0: entered promiscuous mode [ 1201.313808][ T2087] syzkaller0: entered allmulticast mode [ 1201.342669][ T2090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1201.359266][T16860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.368897][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.380736][ T2086] tipc: Resetting bearer [ 1201.398778][ T2086] netlink: 'syz.4.7605': attribute type 2 has an invalid length. [ 1201.423429][ T2086] netlink: 'syz.4.7605': attribute type 1 has an invalid length. [ 1201.437932][ T2093] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7608'. [ 1201.447892][ T2086] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7605'. [ 1201.468580][ T2093] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1201.490062][ T2093] 0ªî{X¹¦: entered allmulticast mode [ 1201.507665][ T2093] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1201.535361][ T2095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 1201.545287][ T2095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 1201.562298][ T2085] tipc: Resetting bearer [ 1201.602380][ T2085] tipc: Disabling bearer [ 1201.927442][ T2108] netlink: 'syz.4.7611': attribute type 10 has an invalid length. [ 1202.000130][ T2108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.022365][ T2108] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1202.146414][ T2121] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7616'. [ 1202.183808][ T2117] netlink: 'syz.0.7615': attribute type 6 has an invalid length. [ 1202.267330][ T2127] gtp0: entered promiscuous mode [ 1202.281366][ T2127] gtp0: entered allmulticast mode [ 1202.338592][ T2131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7617'. [ 1202.354552][ T2117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7615'. [ 1202.403614][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.593546][ T2139] lo speed is unknown, defaulting to 1000 [ 1202.624830][ T2149] x_tables: unsorted underflow at hook 1 [ 1202.803136][ T2154] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1202.871588][ T2164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.880052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.960478][ T2163] geneve2: entered promiscuous mode [ 1202.980757][ T2139] wg1 speed is unknown, defaulting to 1000 [ 1202.993125][T16860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.405867][ T2178] syzkaller1: entered promiscuous mode [ 1203.445688][ T2178] syzkaller1: entered allmulticast mode [ 1203.477095][ T2182] 8021q: VLANs not supported on tunl0 [ 1203.567567][ T2185] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1203.649760][ T2189] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1203.681558][ T2189] bond2 (unregistering): Released all slaves [ 1204.149376][ T2205] bond0: (slave bridge0): Releasing backup interface [ 1204.205269][ T2205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.212811][ T2205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.244650][ T2205] bridge_slave_0: left promiscuous mode [ 1204.250812][ T2205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.278382][ T2205] bridge_slave_1: left allmulticast mode [ 1204.284747][ T2205] bridge_slave_1: left promiscuous mode [ 1204.290863][ T2205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.317892][ T2205] bond0: (slave bond_slave_0): Releasing backup interface [ 1204.342885][ T2205] bond0: (slave bond_slave_1): Releasing backup interface [ 1204.379488][ T2205] team0: Port device team_slave_0 removed [ 1204.396353][T27674] net_ratelimit: 1 callbacks suppressed [ 1204.396375][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.445528][ T2205] team0: Port device team_slave_1 removed [ 1204.482820][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.482904][ T2205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.514476][ T2205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.537739][ T2205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.557143][ T2205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.572041][ T2205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1204.922831][ T2244] tipc: Enabled bearer , priority 0 [ 1204.953042][ T2244] tipc: Resetting bearer [ 1204.993932][ T2242] tipc: Disabling bearer [ 1205.192074][T26904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.275155][ T2255] __nla_validate_parse: 6 callbacks suppressed [ 1205.275177][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7651'. [ 1205.345432][ T2255] vlan3: entered promiscuous mode [ 1205.350961][ T2255] bond0: entered promiscuous mode [ 1205.514267][T26234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.597811][ T2260] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1205.628912][ T2268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7655'. [ 1205.667159][ T2260] bond5 (unregistering): Released all slaves [ 1206.470277][ T2312] bridge0: entered promiscuous mode [ 1206.521900][ T2314] ip6t_REJECT: ECHOREPLY is not supported [ 1206.556833][ T2315] ip6t_REJECT: ECHOREPLY is not supported [ 1206.559070][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.603707][ T2320] tipc: Enabled bearer , priority 0 [ 1206.644312][ T2318] syzkaller0: entered promiscuous mode [ 1206.650028][ T2318] syzkaller0: entered allmulticast mode [ 1206.690751][ T2327] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7667'. [ 1206.701528][ T2318] tipc: Resetting bearer [ 1206.752136][ T2318] tipc: Disabling bearer [ 1206.769171][ T2328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1206.792002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.816448][ T2328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.830063][ T2327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7667'. [ 1207.121980][T16871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.212668][ T2338] bond5: option mode: invalid value (254) [ 1207.237611][ T2338] bond5 (unregistering): Released all slaves [ 1207.333904][ T2342] tipc: Failed to remove unknown binding: 66,1,1/2395907588:3886704295/3886704297 [ 1207.390827][ T2342] tipc: Failed to remove unknown binding: 66,1,1/2395907588:3886704295/3886704297 [ 1207.431718][ T2342] tipc: Failed to remove unknown binding: 66,1,1/2395907588:3886704295/3886704297 [ 1207.561653][ T2342] Cannot find set identified by id 3 to match [ 1207.568229][ T2345] macvtap1: entered promiscuous mode [ 1207.574194][ T2345] syz_tun: entered promiscuous mode [ 1207.590041][ T2345] macvtap1: entered allmulticast mode [ 1207.597531][ T2345] syz_tun: entered allmulticast mode [ 1207.603541][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.615579][ T2345] syz_tun: left allmulticast mode [ 1207.625824][ T2345] syz_tun: left promiscuous mode [ 1208.064015][ T2354] lo speed is unknown, defaulting to 1000 [ 1208.094709][T26241] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1208.285228][ T2364] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7677'. [ 1208.365049][ T2365] netlink: 'syz.2.7677': attribute type 10 has an invalid length. [ 1208.427751][ T2367] netlink: 'syz.0.7678': attribute type 1 has an invalid length. [ 1208.530309][T26241] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1208.644755][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.046709][ T2367] bond5: entered promiscuous mode [ 1209.054398][ T2367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1209.063075][ T2354] wg1 speed is unknown, defaulting to 1000 [ 1209.081994][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7676'. [ 1209.091784][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7676'. [ 1209.107503][ T2375] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1209.131244][ T2375] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1209.153579][ T2375] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1209.359861][ T2382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7680'. [ 1209.379754][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7680'. [ 1209.673218][T26209] net_ratelimit: 1 callbacks suppressed [ 1209.673238][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.146889][ T2408] tipc: Enabled bearer , priority 0 [ 1210.156119][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.324490][T16879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.343135][ T2412] syzkaller0: entered promiscuous mode [ 1210.348845][ T2412] syzkaller0: entered allmulticast mode [ 1210.389588][ T2425] tipc: Resetting bearer [ 1210.430317][ T2407] tipc: Resetting bearer [ 1210.461446][ T2407] tipc: Disabling bearer [ 1210.488310][ T2428] netlink: 'syz.1.7689': attribute type 1 has an invalid length. [ 1210.593891][ T2428] __nla_validate_parse: 3 callbacks suppressed [ 1210.593916][ T2428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7689'. [ 1210.711415][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.732732][ T2444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1211.037731][ T2458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7695'. [ 1211.137733][ T2462] netlink: 'syz.4.7697': attribute type 1 has an invalid length. [ 1211.187532][ T2462] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7697'. [ 1211.227548][ T2462] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7697'. [ 1211.239701][ T2462] netlink: 658 bytes leftover after parsing attributes in process `syz.4.7697'. [ 1211.255897][ T2470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7699'. [ 1211.270084][ T2472] netlink: 'syz.2.7698': attribute type 1 has an invalid length. [ 1211.278698][ T2472] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7698'. [ 1211.298972][ T2474] netlink: 'syz.2.7698': attribute type 1 has an invalid length. [ 1211.305882][ T2470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7699'. [ 1211.319192][ T2473] tipc: Enabled bearer , priority 0 [ 1211.345174][ T2473] syzkaller0: entered promiscuous mode [ 1211.353423][ T2474] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7698'. [ 1211.364606][ T2473] syzkaller0: entered allmulticast mode [ 1211.397764][ T2482] batadv0: entered promiscuous mode [ 1211.406681][ T2482] macvtap1: entered promiscuous mode [ 1211.414535][ T2482] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1211.426143][ T2482] batadv0: left promiscuous mode [ 1211.535768][ T2470] lo speed is unknown, defaulting to 1000 [ 1211.574244][ T2484] tipc: Resetting bearer [ 1211.636285][ T2467] tipc: Resetting bearer [ 1211.729720][ T2467] tipc: Disabling bearer [ 1211.755069][ T2494] nbd: couldn't find a device at index 0 [ 1211.767989][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.999109][ T2470] wg1 speed is unknown, defaulting to 1000 [ 1212.234483][T16879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.795479][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.826218][ T2534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.860468][ T2534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.924451][ T2534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1213.178246][ T2562] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode [ 1213.530624][ T2547] lo speed is unknown, defaulting to 1000 [ 1213.842293][ T2595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1213.842527][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.882878][ T2600] netlink: 'syz.1.7728': attribute type 4 has an invalid length. [ 1213.882891][ T2601] netlink: 'syz.1.7728': attribute type 4 has an invalid length. [ 1214.308748][ T2547] wg1 speed is unknown, defaulting to 1000 [ 1214.573795][ T2630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.748642][ T2635] net_ratelimit: 4 callbacks suppressed [ 1214.748666][ T2635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.884923][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.148872][ T2651] lo speed is unknown, defaulting to 1000 [ 1215.272765][T26206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.435225][T26898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.572713][ T2661] lo speed is unknown, defaulting to 1000 [ 1215.592517][ T2651] wg1 speed is unknown, defaulting to 1000 [ 1215.765652][ T2684] netlink: 'syz.0.7744': attribute type 7 has an invalid length. [ 1215.824331][ T2691] __nla_validate_parse: 18 callbacks suppressed [ 1215.824351][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7745'. [ 1215.882485][ T2693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7746'. [ 1215.923772][T26209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.052699][ T2661] wg1 speed is unknown, defaulting to 1000 [ 1216.689237][ T2717] openvswitch: netlink: Actions may not be safe on all matching packets [ 1216.883141][ T2729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7751'. [ 1216.963783][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.436683][ T2746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1217.996135][T16882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.009369][ T2744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1218.018009][ T2771] lo speed is unknown, defaulting to 1000 [ 1218.039079][ T2744] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1218.166754][ T2744] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1218.186140][ T2744] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1218.239785][ T2744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1218.263545][ T2744] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1218.281397][T26241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.342712][ T2744] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1218.371316][ T2744] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1218.466446][ T2744] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1218.478880][ T2744] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1218.487426][ T2744] CPU: 0 UID: 0 PID: 2744 Comm: syz.1.7754 Not tainted syzkaller #0 PREEMPT(full) [ 1218.497036][ T2744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1218.507559][ T2744] RIP: 0010:klist_remove+0x14a/0x340 [ 1218.513101][ T2744] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 67 e7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 67 e7 f6 49 8b 44 24 58 48 89 44 24 08 [ 1218.533345][ T2744] RSP: 0018:ffffc9000445f820 EFLAGS: 00010202 [ 1218.539463][ T2744] RAX: 000000000000000b RBX: ffff888068c2bd00 RCX: 0000000000000000 [ 1218.548270][ T2744] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1218.556444][ T2744] RBP: ffffc9000445f920 R08: ffffffff8f671743 R09: 1ffffffff1ece2e8 [ 1218.564443][ T2744] R10: dffffc0000000000 R11: fffffbfff1ece2e9 R12: 0000000000000000 [ 1218.572519][ T2744] R13: 1ffff110063c0a8c R14: ffff888031e05460 R15: dffffc0000000000 [ 1218.580688][ T2744] FS: 00007f70a31f66c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 1218.589641][ T2744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1218.596420][ T2744] CR2: 00007f63207e7dac CR3: 000000008e6de000 CR4: 00000000003526f0 [ 1218.604669][ T2744] Call Trace: [ 1218.607966][ T2744] [ 1218.610965][ T2744] ? __pfx_klist_remove+0x10/0x10 [ 1218.616009][ T2744] ? kobject_move+0x5a6/0x6e0 [ 1218.620786][ T2744] ? __pfx_kobject_move+0x10/0x10 [ 1218.625902][ T2744] ? do_raw_spin_unlock+0x122/0x240 [ 1218.631113][ T2744] ? get_device_parent+0x366/0x3a0 [ 1218.636465][ T2744] device_move+0x193/0x700 [ 1218.640915][ T2744] hci_conn_del_sysfs+0xb8/0x170 [ 1218.645880][ T2744] hci_conn_del+0xc36/0x11b0 [ 1218.650486][ T2744] hci_conn_hash_flush+0x191/0x230 [ 1218.655612][ T2744] hci_dev_close_sync+0x821/0xff0 [ 1218.660730][ T2744] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1218.666730][ T2744] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1218.672896][ T2744] hci_dev_do_close+0x2f/0x90 [ 1218.677592][ T2744] hci_rfkill_set_block+0x21d/0x2e0 [ 1218.682885][ T2744] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 1218.689128][ T2744] rfkill_set_block+0x1d2/0x440 [ 1218.694084][ T2744] rfkill_fop_write+0x44b/0x570 [ 1218.699244][ T2744] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1218.704647][ T2744] ? security_kernfs_init_security+0x270/0x290 [ 1218.711113][ T2744] ? rw_verify_area+0x255/0x4d0 [ 1218.716154][ T2744] ? __lock_acquire+0x6b6/0x2cf0 [ 1218.721288][ T2744] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1218.726764][ T2744] vfs_write+0x27e/0xb30 [ 1218.731026][ T2744] ? __pfx_vfs_write+0x10/0x10 [ 1218.735807][ T2744] ? __fget_files+0x2a/0x420 [ 1218.740486][ T2744] ? __fget_files+0x2a/0x420 [ 1218.745182][ T2744] ? __fget_files+0x3a0/0x420 [ 1218.749887][ T2744] ? __fget_files+0x2a/0x420 [ 1218.754501][ T2744] ksys_write+0x145/0x250 [ 1218.758938][ T2744] ? __pfx_ksys_write+0x10/0x10 [ 1218.763810][ T2744] do_syscall_64+0xfa/0xf80 [ 1218.768419][ T2744] ? rcu_is_watching+0x15/0xb0 [ 1218.773431][ T2744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.779623][ T2744] ? clear_bhb_loop+0x60/0xb0 [ 1218.784322][ T2744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.790327][ T2744] RIP: 0033:0x7f70a4f8f749 [ 1218.795012][ T2744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.815351][ T2744] RSP: 002b:00007f70a31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1218.823869][ T2744] RAX: ffffffffffffffda RBX: 00007f70a51e6090 RCX: 00007f70a4f8f749 [ 1218.832195][ T2744] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 1218.840360][ T2744] RBP: 00007f70a5013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1218.848436][ T2744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.856679][ T2744] R13: 00007f70a51e6128 R14: 00007f70a51e6090 R15: 00007ffffe1df638 [ 1218.864892][ T2744] [ 1218.868159][ T2744] Modules linked in: [ 1218.876823][ T2744] ---[ end trace 0000000000000000 ]--- [ 1218.887476][T27674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.896129][ T2744] RIP: 0010:klist_remove+0x14a/0x340 [ 1218.901960][ T2744] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 67 e7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 67 e7 f6 49 8b 44 24 58 48 89 44 24 08 [ 1218.925321][ T2744] RSP: 0018:ffffc9000445f820 EFLAGS: 00010202 [ 1218.931622][ T2744] RAX: 000000000000000b RBX: ffff888068c2bd00 RCX: 0000000000000000 [ 1218.939917][ T2744] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1218.948702][ T2744] RBP: ffffc9000445f920 R08: ffffffff8f671743 R09: 1ffffffff1ece2e8 [ 1218.957753][ T2744] R10: dffffc0000000000 R11: fffffbfff1ece2e9 R12: 0000000000000000 [ 1218.966031][ T2744] R13: 1ffff110063c0a8c R14: ffff888031e05460 R15: dffffc0000000000 [ 1218.974699][ T2744] FS: 00007f70a31f66c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 1218.985236][ T2744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1218.992122][ T2744] CR2: 00007f63207e7dac CR3: 000000008e6de000 CR4: 00000000003526f0 [ 1219.002494][ T2744] Kernel panic - not syncing: Fatal exception [ 1219.009383][ T2744] Kernel Offset: disabled [ 1219.013710][ T2744] Rebooting in 86400 seconds..