last executing test programs: 38.466082549s ago: executing program 3 (id=1436): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x48}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 38.10142583s ago: executing program 3 (id=1438): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[], 0x10c}}, 0x8814) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000002000000545d08d3b889d600000004100000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800038004000580"], 0x2c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r4, 0x0, 0x1132) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="d40200babd9513eaf4900865a277ca677a59003efb63730a0829b6c848e5b6ce098546614911409ecc1c67bcbcbfa9c75349636859634bb0332cd69fd57b4f456275f837ff956b07b6c1", @ANYRES16=r6, @ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x4140}, 0x200048d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000000100000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='signal_generate\x00', r9, 0x0, 0x3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x8801, 0x0, 0x0) r11 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x8, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xff80, &(0x7f00000005c0)=ANY=[@ANYBLOB="18110000000c0000000000001812020000000000", @ANYRES32=r3, @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x14, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_procs(r7, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe) pread64(r12, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 37.764644418s ago: executing program 3 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 64) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x200}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x48, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x26) 37.135345244s ago: executing program 3 (id=1445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2b4, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x63, @mcast2, 0xb4f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7e, @private1}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1af2dcad8d0e22f6d30cbb387f57243829468799dcad2bad3b5bf692f0055e2b440eff9d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ID={0x57, 0x3, "4ac8b183f85fc0e399364a7750e777e1f3ae547ef0a375ff6348be59007f267366cb625551ae36c4f983b8f05cab5123357822a6d5309881e5d2d5037602d8dd72b7c1419bb1a8d4d18e1c7ede2df2382b6adc"}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000800}, 0x8040) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}}, 0x4088001) readv(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/160, 0xa0}], 0x1) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2c4, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37e482d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cdeff}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x377c7986}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7604eeea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x772db7a0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d1898b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1edc757b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x492c4a82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dba0ac3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5be6c98e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31171c02}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3025f9d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x124, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64da}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d39a672}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb58}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a32bdaa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5929861}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf58e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bdeeb3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40d38932}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b7cbbdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ceb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10001}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fbebbf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x278e9cd0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ce1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6196}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e50630e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33858eee}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24d01dab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37a1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd29b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e3732e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe8f44ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1519c3b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a16157d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dd070b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29341c8}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044090) r4 = socket(0x2b, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000ac0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000b00)={0x1d, r5}, 0x10) r6 = socket$inet6(0xa, 0xa, 0xb3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x78, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "72989a1ebd0240d7b2758766447fd8c5dc052bfae823da023509fdf51a5e9e4f"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x734}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x44005) pwritev(r1, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="475125659608210146f2a51cfd83830e9777a46b3191955776c06fe47f7f25e60c47cfafca50d47c57c67e568ee492df0e1aabbae889351a1c68894a90d0d223e948eaacf2e67b8ea9c4c3e0fc4362163d944e22ae3f6c7e3425af560b9f1309932c67e99d74877c9816c196b73d1bc727ef21e5cd3d8c9191c608d90303f2154a2e78f210170a7ec0638e43ace8dd094cde9de685317e7e8b1b0c19366a39b3c00ae630b59ca5f93a3b27899fe27f364921", 0xb2}, {&(0x7f0000000e00)="62e8d85112a91b652318d77d4642ac1224dfbb83dbd651c05140e09ff1ec6d7d47770bad65b8633f20e76af449c77b89239f8271b0ed93eaff2c4f8812c40b0b0d96be60885f1432418dd6a6a9ee07867ef81605508f4a1e35735b64480662dabd7291f26331e69946792f6e46d592f87e8d452901fe9c4636f3388956b1f214fe426f25a6b1b08273c87aed20644bf8c26ab1e61fe46ad1aa5b357172beff5c8a69cc76bd4ed70bae0df172c9079882ab43798a4b150c27d14346da626707459d9b23cf25162b09f2ee117e5abb62566ae945ddd6bd28bc08fedde7e1dfab", 0xdf}, {&(0x7f0000000f00)="30c9b4cdf10ec4bb8a4a1a9468e4b432f0d23f7f738a1e8c8cef7ed5b53fc85391145cc52b3d1625def1bbba380e9d6429af04883181a9a2f09d594b6da6fa47b9bdb9e5d346dab0de309f7ea65af864d0beb55fd16b4e364925d7ddbf322e33d805ce0cfac836f2e6897d22ce58eab6178ed438204bb8217224994e06d5b6ba63f6ca218d4a0df588289261ccfabf39f208e2357c", 0x95}], 0x3, 0x5, 0x6) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001100)) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2044015}, 0x4010001) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001400)={0x0, 0x8}, &(0x7f0000001440)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000001500)={&(0x7f0000001280)=@in6={0xa, 0x4e20, 0xeb1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4da}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000012c0)="ce3548c718d0bf60f0dc1b7c22672567411e8451921bf366332fb5f48542ffa4a4c5cffb73eefec2ec8df9b2127a0e7e14ef027492d4be2beb3ea92db8b85c2bbb389576cb7e8541a6409d252f998940999cfefe19d717c01d90750d66563d6b2492d1f2f954c49d5ae5d1eb5cfb3459fc4364a07842624ec32731beefebcabcb12c8dbd5b57e50382205ead11c5ea1411be01fc6f576a5da68975f7f25fe10bcdade09a943351a6cffec138b01be142bceb3d0b5577af2e1752366bb80ac9492f6b3e59b4c830f0752ac1475baf693bcad85896c3", 0xd5}], 0x1, &(0x7f0000001480)=[@init={0x18, 0x84, 0x0, {0x81, 0x8, 0x2b4c, 0x488d}}, @sndinfo={0x20, 0x84, 0x2, {0x6d7, 0x2, 0x5, 0x2, r10}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0xe28, 0x7, 0x6, 0x4}}], 0x68, 0x24000095}, 0x4) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x95}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x801da3d51d60260d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r11, 0x0, 0x20, &(0x7f0000001640)={@remote, @remote}, 0x8) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001680), 0x10) socket$pptp(0x18, 0x1, 0x2) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f00000016c0)) 36.152457662s ago: executing program 2 (id=1451): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)) socket(0x2, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x18, 0x24, 0x301, 0x70bd2d, 0xfffffffc, {0x1}, [@nested={0x4, 0x14a}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x4008004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000003c0003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 36.138820804s ago: executing program 3 (id=1452): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000002ec0), 0x0, 0x4040) close(0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) getsockopt(r1, 0xa4, 0x2, &(0x7f0000000000)=""/67, &(0x7f00000002c0)=0x43) r5 = socket$netlink(0x10, 0x3, 0x8) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000280)={0x18, 0x2, {0x2, @local}}, 0x1e) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x2b, 0xff, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "899de4841185de6f281d2503a1cc72f6"}]}}}}}}}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) 35.721328027s ago: executing program 2 (id=1454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0xa8, "56143da641c693fa03de9a7d5ae850a6f41d59bbe33fd64224cb9ecc9eed24cca394d22c1f080fb710dc7595ff2dec1aebae6abae3df1ff28b379ba0fb29e028c8c0974e4f6f3438ca4d5045aeec1093a42b2f10793f03d30e402f97b4b81712a269f32941d094051c43a8c5e158f5a67cc4b4cc72192101746c40aecdc494cd9b5a75e0a75b06ff8b482093e9bba78a20564961957ca554adff808dbf1715f1917613b4c84b35e6"}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000680)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e21, 0x1, @private2, 0x8}, @in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x10000}, @in={0x2, 0x4e20, @empty}]}, &(0x7f00000003c0)=0x10) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x40}, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x691a, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x3c}}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}}}, 0x24}}, 0x0) recvmmsg(r10, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000003c00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}], 0x4, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) 35.449308951s ago: executing program 2 (id=1457): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x8, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$can_bcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="02000000300900040000000080000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000008035010000c075bfebcd0ba27d0241591616a6b1cb67d98ec29b60126a252d15082816668e112528aec50cd3705b13923c6b01ee331a6f97344bf7669085864df306abfaa0"], 0x80}}, 0x11) r4 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4", 0x27}, {&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e6219e9d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f0470223e2c685c9ebf635e316a12b35a429160d1c7688dbc3edcb1af64032177e41def01696e7100bbe102ae1b68a44b50c484b23164ab0387c3e23b8a5", 0xf35}, {&(0x7f0000000180)="d0eadbd48861f25f379740ddfac669", 0xf}], 0x3}, 0x9cdc2384056b48b8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) 35.439727474s ago: executing program 0 (id=1458): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002e00)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000c000000020000000000001104000000ffffffff000000000000000200000000000000000000000b00000000020000000000000efd94d9db1f922f4c040000000000000e03000000020000000f000000000000020500000c0500000000000001000000004200370700002e"], 0x0, 0x88, 0x0, 0x0, 0x4}, 0x28) 35.219130573s ago: executing program 0 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) (async) r1 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00C'], 0x28}}], 0x1, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6}, 0x10) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', r2, 0x29, 0x6, 0x6, 0xb, 0x6, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x4, 0x5}}) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f0000000a40)={0xa, 0x4e23, 0x80000001, @local, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000008"], 0x18}}], 0x1, 0x8080) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e47, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x81}, @alu={0x7, 0x1, 0xb, 0x5, 0x1, 0xffffffffffffffc0, 0x1}, @generic={0x9, 0x4, 0x5, 0x2, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x90, &(0x7f00000003c0)=""/144, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x2, 0xfffffffb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r0], &(0x7f0000000480)=[{0x2, 0x3, 0x3, 0x9}, {0x4, 0x4, 0x10, 0x5}, {0x2, 0x5, 0x3, 0xa}, {0x1, 0x3, 0xb}], 0x10, 0x6}, 0x94) (rerun: 64) 35.049472105s ago: executing program 2 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}}, 0x20000044) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xceaa279c739714d4}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004a80)=@delchain={0xb8, 0x65, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {0xfff1, 0x3}, {0x4, 0x9}}, [@f_rsvp={{0x9}, {0x88, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf882, 0x6, 0x4}, {0x7fff, 0x2, 0x7}, 0x2f, 0x1, 0xf}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_RSVP_ACT={0x54, 0x6, [@m_connmark={0x50, 0x1f, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x2, 0x5, 0xffffffff, 0x4}, 0xa89d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}, 0x1, 0x0, 0x0, 0x20048080}, 0x4010) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 34.540831527s ago: executing program 0 (id=1464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000f10000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c200000000950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed3525598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f11719754006007593f2f12b706682b684633803352f0e8ce93a2570ca6dd0ff917652d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) recvmsg$can_raw(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000400)=""/89, 0x59}], 0x2}, 0x40010042) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x14, r4, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xfaece2121c31dc59}, 0x40) 34.447744264s ago: executing program 2 (id=1466): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r0, 0x13d, 0x5, 0x57e}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private0, 0x4}, 0x1c) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa01dd6bb90cd3cb7e999c0028006500000fb9e75c5bd69177301414aa00004e22", @ANYRES16, @ANYBLOB="63291586f4c19e989a0e923f929c0ea8bfea0264ea28c511dc7510f987d1b8a76f7a", @ANYRES16=r3], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000853c0000000006907864f50001ac1414aa5d00004e82c83f3d2546d63b913ceb5e257beed01551b8c55b717a6619480865ecd856b64cbde7cc6bd715e7c29f145857145a9b12b67e80ec272b28a6d0541368f9c309c2a6d8740f1eb46534c1a4e91c9eeef796a5a8542feaa397da9f95648218b31a65e39be7e6521cdc7e0a0aa80d263e8e7527a94dac5c13afc9725fda7031ed43adcbf45e780b46ff361b69edfe07f6ed4961556d1a6dfbcab5553056c61830bf4f1b6d1068fee0891ae3016a401c5cb1760b6ed5ae8db944281c0e", @ANYRESHEX=r5, @ANYRES64, @ANYRES32=r2], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22acc1280762e3590cd78b1469e5df629f12b59ee3a48e120374a7d65f0af56ca5c1a6c1e41760a3ff6f51683271bcbd041e26eabdd568ae3004c7e9939ce1d7a6d692fd39ef26dc4249d2d7702f036d489c863acc90cdc9fc2e7a0a75", @ANYRES64=0x0, @ANYRES32=r2, @ANYRESDEC=r4], 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x2) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r11, @ANYRESHEX=r6, @ANYBLOB="9fa29c04bda234286a2bcd5d85bbab11535ba8bce080f2df8913748bc19ee47b06e857e89cdeaf4a59dc9ff8f64733112f7d20802c1af6c3b270f97bfe29c04aeb111cf5e80e33909fd38689ec2a584cc6e03a19de2c9aed443fac2aa96e5a690de20dc4e3d05d19"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0x3}, {0x0, 0xfff2}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 34.33259138s ago: executing program 0 (id=1468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x1}}, 0x10, &(0x7f0000000a40), 0x7, &(0x7f0000000ac0)="c694ca66eb54a4064a17b38ea2c1733642773292fece3e21b2c40f2ef14d593b62b74172037ca9221aae1ebdf68a5ece4deca1928578f3b5a628b1ae770104734e01a0fb96dfa7591d86342a061327b5661063fe7ffd3c41a68f6e4d40fa83c4dbb59c0fdc7e7fa4e32a6801d51428181c291ea591efc12a6f89a09e2bda6d274e94112d9a2765561b9c45ebfa814b65fcaff6aa40823ff012acf5316eb9b0380135808e5154fcba8f9029ff16532036dfd19c04f0067bc080fcc0e8c36d387848661380dace9f6454ca66bf87255684284eb6335f5e2dbfae046f55fef192f900", 0xe1, 0x8054}, 0x8040) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x1}}, 0x10, &(0x7f0000000a40), 0x7, &(0x7f0000000ac0)="c694ca66eb54a4064a17b38ea2c1733642773292fece3e21b2c40f2ef14d593b62b74172037ca9221aae1ebdf68a5ece4deca1928578f3b5a628b1ae770104734e01a0fb96dfa7591d86342a061327b5661063fe7ffd3c41a68f6e4d40fa83c4dbb59c0fdc7e7fa4e32a6801d51428181c291ea591efc12a6f89a09e2bda6d274e94112d9a2765561b9c45ebfa814b65fcaff6aa40823ff012acf5316eb9b0380135808e5154fcba8f9029ff16532036dfd19c04f0067bc080fcc0e8c36d387848661380dace9f6454ca66bf87255684284eb6335f5e2dbfae046f55fef192f900", 0xe1, 0x8054}, 0x8040) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000001, 0x1010, r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24040885) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24040885) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) r5 = socket(0x1, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES8=r2], 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27) socketpair(0x1, 0x2, 0x2f4, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x48050) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf2501000000080003000500000005000500020000006c00010100000000", @ANYRES32=0x0, @ANYBLOB="14000400ff01000000000000000000000000000114000400fe8000000000000000000000000000bb14000400ff02000000000000000000000000000114000400fe8000000000000000000000000000bb080006000100000008000700", @ANYRES32=0x0, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) socket(0x2, 0x80000, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0x2) (async) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000500)=@in6={0x21, 0x8000, 0x2, 0x0, {0xa, 0x4e24, 0x9, @local, 0x2}}, 0x61) (async) connect$rxrpc(r6, &(0x7f0000000500)=@in6={0x21, 0x8000, 0x2, 0x0, {0xa, 0x4e24, 0x9, @local, 0x2}}, 0x61) 34.08134835s ago: executing program 2 (id=1470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r4, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async) shutdown(r2, 0x1) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, 0x0, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 33.700284553s ago: executing program 0 (id=1472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x10080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x8000}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000009b00)=[{0xffffffffffffffff, 0x21a3}], 0x1, 0x72) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x800, 0x80003d, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x1, 0xb, 0x38, 0x66, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x44, 0x4, "dcb2"}, @ssrr={0x89, 0x7, 0x8b, [@broadcast]}, @timestamp={0x44, 0x4, 0x3e, 0x0, 0x5}]}}, @timestamp={0xd, 0x0, 0x0, 0x1, 0x5, 0x7b2, 0x0, 0x8a8}}}}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e23, 0xc9, @remote, 0x3}}, 0x4, 0x9, 0x8000, 0x5f, 0x92, 0x714, 0x6}, &(0x7f00000000c0)=0x9c) 29.877051584s ago: executing program 0 (id=1474): socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4ad081d201a4530afbc401000000420000000600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x24060400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) 29.560809374s ago: executing program 3 (id=1475): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x84, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0xa}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4c, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2a, 0x1, "e668d09ce4444fd19dfb31f552228a032cca7fff8e8fa22fa06590b4ca97b2adaf2c81d730d9"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xeef}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) unshare(0x6a040000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 18.889587414s ago: executing program 32 (id=1470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r4, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async) shutdown(r2, 0x1) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, 0x0, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 14.392693986s ago: executing program 33 (id=1474): socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4ad081d201a4530afbc401000000420000000600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x24060400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) 14.122415875s ago: executing program 34 (id=1475): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x84, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0xa}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4c, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2a, 0x1, "e668d09ce4444fd19dfb31f552228a032cca7fff8e8fa22fa06590b4ca97b2adaf2c81d730d9"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xeef}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) unshare(0x6a040000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 2.649603723s ago: executing program 4 (id=1509): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x41}, 0x4dfa, 0x10003, 'ovf\x00', 0x22, 0x80005, 0x71}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.422329884s ago: executing program 4 (id=1511): unshare(0x20400) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x10, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r13}]}}]}, 0x38}}, 0x0) 2.356306107s ago: executing program 1 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000480)={0x5, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}]}) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r9, @ANYBLOB='\a'], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.20343876s ago: executing program 4 (id=1513): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time_recursive\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r1, 0x100000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000540)=""/207, 0xcf}, {0x0}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5) syz_open_procfs$namespace(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="5386eb42c7131cd7b10126362f05d5a68a041584be6c3e671e6df4906b87efd8de36a08b43aecc1a65973d4faf12032a90fe967b910320ab61ed0dcba9611173a563842d0cb2945f93e04d1f7fc48cb38c69057909068dd00abee1a30e24a266b89d1d6a427f04a870930f3a348e18f342f9221a2349e30feac9b25f6167355c83476dea55d23b8a24d0675afe76eef183212d4d0d503584b79288a5f420c62ed89997b307145aeb1f4b9b8f005b2d9c5746a9e93474b4a0bb315ead4307454bce0d69d0259d374546a8ea79773730f9a2763b31c64f5fc268e7dba13e325d1a1b06b029", @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000050000000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000001780)=ANY=[@ANYRESOCT=r1, @ANYRES8=r6, @ANYRESDEC=r7, @ANYRESHEX=r9, @ANYRES32=r8], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r10}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x800) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) 1.981519092s ago: executing program 1 (id=1514): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000a40)='q', 0x1}], 0x2, 0x0, 0x0, 0x900}, 0x60) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@empty, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x1c, 0x65, 0x0, 0x1, 0x2, 0x0, @multicast1, @remote}, {0x1e, 0xe, 0x0, @rand_addr=0x64010101}}}}}}, 0x2e) (async) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@empty, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x1c, 0x65, 0x0, 0x1, 0x2, 0x0, @multicast1, @remote}, {0x1e, 0xe, 0x0, @rand_addr=0x64010101}}}}}}, 0x2e) 1.649571793s ago: executing program 1 (id=1515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000340)={0xa, "0b7bc4a66be01d5825dd3b428bdaf81b09d62f889492181e47d7269646925cdb075dd45359e35a9cbd51fce8bb183d7cf7eea59ad53af07495c7b68171c9c2d5a808db86ee05de1e2acc2e97e3f0b757ed60b955a13f2f689a21f1005f7b79ecae3ccc86fc68c316fec463eea99e929738164909273844b8b2f483812b953a3f"}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x2, 0xfffffffc, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x1, 0xa, 0x0, 0x10, 0x32, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffc, 0x5, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0xffffffff, 0x6e6bb1, 0x1, 0x0, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x979960c5e89064c4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {0x0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x3) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendto$inet6(r0, &(0x7f0000000480)="8a", 0x1, 0x4000050, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.338314234s ago: executing program 1 (id=1516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1f}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000e00)={{r2}, r3, 0x2, @unused=[0x7, 0x1, 0x18d5, 0xf0], @name="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"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000640)={{r0}, r3, 0x2, @unused=[0x754d4a73, 0x2, 0x7, 0x100000000], @subvolid=0x8000000000000001}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000000a0a010200000000000000000a000006"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b1, &(0x7f0000000040)={'veth1_to_team\x00', 0x2000}) 1.316201999s ago: executing program 4 (id=1517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'veth1_vlan\x00', 0x1000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x278842, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[], 0x38}}, 0x20048000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x1c, 0x16, 0xa01, 0x70bd28, 0x25dfdbfc, {0x2}, [@generic="2ab30fb753bab1"]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="16cb487743757fac787478549b8b528bcfae3702743fba765dcee076127afafccb3bb4b012fbabcedf1d97381edc5b71d72eee3b1a817bc9e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r7}, 0x18) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000100000000000000b020000000400000000000007000000000f0000000000000e0300000000000000060000000100000509000000050000000300000000080000e5606100"], &(0x7f0000000400)=""/185, 0x5c, 0xb9, 0x1, 0x9}, 0x28) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ef1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x84}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a6e9dd9}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64=r8, @ANYRES32=r5], &(0x7f00000001c0)='syzkaller\x00', 0x4db, 0xc9, &(0x7f0000000280)=""/201, 0x40f00, 0x52, '\x00', 0x0, 0x1a, r8, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3779, r7, 0x0, &(0x7f0000000640)=[r9, r7, r12], &(0x7f0000000680), 0x10, 0x9}, 0x94) 1.079747595s ago: executing program 4 (id=1518): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) accept$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) 1.025552196s ago: executing program 1 (id=1519): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001940)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@ax25={{0x3, @netrom}, [@rose, @bcast, @rose, @netrom, @null, @null, @null, @null]}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/65, 0x41}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000780)=""/223, 0xdf}], 0x7, &(0x7f0000000240)=""/38, 0x26}, 0x4}], 0x1, 0x12100, &(0x7f0000001980)={r4, r5+10000000}) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e20, @empty}, 'bond0\x00'}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, 0x0, 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20040400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x10}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000180), 0x0}, 0x20) 788.756345ms ago: executing program 4 (id=1520): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) 0s ago: executing program 1 (id=1521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, &(0x7f0000000200)=""/96, 0x60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000700)="f574c3", 0x3) splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000280)) kernel console output (not intermixed with test programs): a0 [ 105.312049][ T6339] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 105.312075][ T6339] ? aa_sock_msg_perm+0xf1/0x1d0 [ 105.312096][ T6339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.312116][ T6339] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 105.312140][ T6339] __sock_sendmsg+0x21c/0x270 [ 105.312169][ T6339] ____sys_sendmsg+0x52d/0x830 [ 105.312197][ T6339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.312235][ T6339] ? import_iovec+0x74/0xa0 [ 105.312261][ T6339] ___sys_sendmsg+0x21f/0x2a0 [ 105.312285][ T6339] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.312348][ T6339] ? __fget_files+0x2a/0x420 [ 105.312364][ T6339] ? __fget_files+0x3a0/0x420 [ 105.312400][ T6339] __sys_sendmmsg+0x227/0x430 [ 105.312430][ T6339] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.312448][ T6339] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 105.312499][ T6339] ? ksys_write+0x22a/0x250 [ 105.312527][ T6339] ? __pfx_ksys_write+0x10/0x10 [ 105.312549][ T6339] ? rcu_is_watching+0x15/0xb0 [ 105.312576][ T6339] __x64_sys_sendmmsg+0xa0/0xc0 [ 105.312600][ T6339] do_syscall_64+0xfa/0x3b0 [ 105.312619][ T6339] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.312637][ T6339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.312655][ T6339] ? clear_bhb_loop+0x60/0xb0 [ 105.312678][ T6339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.312696][ T6339] RIP: 0033:0x7f8f8eb8ebe9 [ 105.312714][ T6339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.312728][ T6339] RSP: 002b:00007f8f8fa1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.312749][ T6339] RAX: ffffffffffffffda RBX: 00007f8f8edc5fa0 RCX: 00007f8f8eb8ebe9 [ 105.312762][ T6339] RDX: 0000000000000001 RSI: 000020000000ca40 RDI: 0000000000000004 [ 105.312774][ T6339] RBP: 00007f8f8fa1a090 R08: 0000000000000000 R09: 0000000000000000 [ 105.312785][ T6339] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 105.312796][ T6339] R13: 00007f8f8edc6038 R14: 00007f8f8edc5fa0 R15: 00007ffd276a4728 [ 105.312828][ T6339] [ 105.750786][ T6341] __nla_validate_parse: 5 callbacks suppressed [ 105.750808][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 105.811700][ T6341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'. [ 106.189646][ T6358] lo speed is unknown, defaulting to 1000 [ 106.317952][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 106.392690][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 106.544400][ T6362] lo speed is unknown, defaulting to 1000 [ 106.777197][ T6367] lo speed is unknown, defaulting to 1000 [ 107.146826][ T6377] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 107.188863][ T6377] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 107.544650][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 107.575446][ T6388] netlink: 188 bytes leftover after parsing attributes in process `syz.2.92'. [ 107.611994][ T6386] bridge_slave_0: left allmulticast mode [ 107.625038][ T6386] bridge_slave_0: left promiscuous mode [ 107.652183][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.687841][ T6386] bridge_slave_1: left allmulticast mode [ 107.699468][ T6386] bridge_slave_1: left promiscuous mode [ 107.712087][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.769617][ T6386] bond0: (slave bond_slave_0): Releasing backup interface [ 107.794840][ T6386] bond0: (slave bond_slave_1): Releasing backup interface [ 107.833829][ T6386] team0: Port device team_slave_0 removed [ 107.864618][ T6386] team0: Port device team_slave_1 removed [ 107.873978][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.882172][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.892478][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.900509][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.399361][ T6403] Zero length message leads to an empty skb [ 108.485368][ T6414] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 108.704824][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 108.919810][ T6434] netlink: 9 bytes leftover after parsing attributes in process `syz.4.103'. [ 108.935408][ T6424] syzkaller0: entered promiscuous mode [ 108.943171][ T6424] syzkaller0: entered allmulticast mode [ 108.953682][ T6434] ..0·: renamed from nr26 [ 108.968773][ T6434] ..0·: entered allmulticast mode [ 108.976058][ T6434] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 109.026071][ T6436] lo speed is unknown, defaulting to 1000 [ 109.598326][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'. [ 109.672628][ T6460] syzkaller0: entered promiscuous mode [ 109.681850][ T6460] syzkaller0: entered allmulticast mode [ 110.426876][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 110.564064][ T6467] lo speed is unknown, defaulting to 1000 [ 110.655990][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 110.669612][ T6471] netlink: 'syz.0.111': attribute type 16 has an invalid length. [ 110.686686][ T6471] netlink: 'syz.0.111': attribute type 17 has an invalid length. [ 110.737945][ T6472] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.806013][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.814007][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.958823][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.977955][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.188776][ T5958] lo speed is unknown, defaulting to 1000 [ 111.195582][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.206106][ T5958] syz2: Port: 1 Link DOWN [ 111.221094][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.231636][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.240651][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.495183][ T6480] __nla_validate_parse: 4 callbacks suppressed [ 111.495202][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.115'. [ 111.513573][ T6480] netlink: 'syz.4.115': attribute type 4 has an invalid length. [ 111.619925][ T6483] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 111.631629][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 111.641128][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 112.324633][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 112.369407][ T6491] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 112.379263][ T6491] netlink: 'syz.3.120': attribute type 3 has an invalid length. [ 112.391158][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 112.468067][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 112.531483][ T6496] Bluetooth: MGMT ver 1.23 [ 113.185791][ T6489] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.194797][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 113.252872][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 113.278804][ T6499] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 113.463178][ T6499] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.533247][ T6508] syz_tun: entered promiscuous mode [ 113.539064][ T6508] vlan2: entered promiscuous mode [ 113.668176][ T6507] 8021q: VLANs not supported on ipvlan0 [ 113.724271][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 113.794286][ T6519] lo speed is unknown, defaulting to 1000 [ 114.053066][ T1111] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.597535][ T6553] netlink: 'syz.4.129': attribute type 30 has an invalid length. [ 114.631506][ T6566] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.973178][ T6579] netlink: 'syz.0.134': attribute type 10 has an invalid length. [ 115.003169][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.134'. [ 115.073229][ T6579] team0: Port device geneve0 added [ 115.103618][ T194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.126864][ T194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.194986][ T194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.241268][ T194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.053525][ T6582] lo speed is unknown, defaulting to 1000 [ 116.303571][ T10] IPVS: starting estimator thread 0... [ 116.327240][ T6608] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 116.396955][ T6610] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.621279][ T6621] __nla_validate_parse: 6 callbacks suppressed [ 116.621300][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 117.209143][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 117.348493][ T6632] tipc: Enabling of bearer rejected, failed to enable media [ 117.885167][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 118.035997][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'. [ 118.044474][ T6678] tipc: Started in network mode [ 118.052436][ T6678] tipc: Node identity 0ab0232275e5, cluster identity 4711 [ 118.064435][ T6678] tipc: Enabled bearer , priority 0 [ 118.105008][ T6680] syzkaller0: entered promiscuous mode [ 118.116985][ T6680] syzkaller0: entered allmulticast mode [ 118.170215][ T6678] tipc: Resetting bearer [ 118.187037][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.220594][ T6677] tipc: Resetting bearer [ 118.237423][ T6677] tipc: Disabling bearer [ 118.246053][ T6685] lo speed is unknown, defaulting to 1000 [ 118.275262][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 118.296165][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 118.663377][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 118.679484][ T6710] netlink: 100 bytes leftover after parsing attributes in process `syz.2.169'. [ 118.714461][ T6710] netlink: 100 bytes leftover after parsing attributes in process `syz.2.169'. [ 118.778799][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 118.983816][ T6710] batadv0: entered promiscuous mode [ 119.026508][ T6710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.059192][ T6710] batadv0: left promiscuous mode [ 119.234136][ T6720] vxcan1: entered allmulticast mode [ 119.543513][ T6738] 0ªX¹¦À: renamed from caif0 [ 119.592082][ T6738] 0ªX¹¦À: entered allmulticast mode [ 119.597959][ T6738] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 119.812926][ T6751] sctp: [Deprecated]: syz.3.179 (pid 6751) Use of int in maxseg socket option. [ 119.812926][ T6751] Use struct sctp_assoc_value instead [ 121.364280][ T6775] lo speed is unknown, defaulting to 1000 [ 121.590912][ T3449] syzkaller0: tun_net_xmit 76 [ 121.596345][ T3449] syzkaller0: tun_net_xmit 48 [ 121.616975][ T5958] syzkaller0: tun_net_xmit 76 [ 122.022854][ T6814] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 122.951537][ T6799] netlink: 'syz.2.194': attribute type 29 has an invalid length. [ 122.970117][ T6814] batman_adv: batadv0: Adding interface: netdevsim0 [ 122.992898][ T6814] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.036138][ T6814] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 123.143617][ T6798] lo speed is unknown, defaulting to 1000 [ 123.150319][ T6820] tipc: Started in network mode [ 123.169109][ T6820] tipc: Node identity b6d0948cb63b, cluster identity 4711 [ 123.187015][ T6820] tipc: Enabled bearer , priority 0 [ 123.196127][ T6820] syzkaller0: entered allmulticast mode [ 123.293687][ T6820] tipc: Resetting bearer [ 123.421588][ T6819] tipc: Disabling bearer [ 123.773972][ T6848] tc_dump_action: action bad kind [ 124.171809][ T6866] Illegal XDP return value 4294967274 on prog (id 68) dev N/A, expect packet loss! [ 124.288533][ T6871] netlink: 'syz.3.209': attribute type 6 has an invalid length. [ 124.297531][ T6868] sctp: [Deprecated]: syz.2.208 (pid 6868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.297531][ T6868] Use struct sctp_sack_info instead [ 124.615372][ T6894] netlink: 'syz.1.214': attribute type 13 has an invalid length. [ 124.645553][ T6894] netlink: 'syz.1.214': attribute type 17 has an invalid length. [ 124.833897][ T6905] __nla_validate_parse: 4 callbacks suppressed [ 124.833916][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 124.851771][ T6894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.920586][ T6907] tipc: Started in network mode [ 124.925522][ T6907] tipc: Node identity b20e8bd8d141, cluster identity 4711 [ 124.981114][ T6907] tipc: Enabled bearer , priority 0 [ 125.092688][ T6903] syzkaller0: entered promiscuous mode [ 125.102379][ T6903] syzkaller0: entered allmulticast mode [ 125.170282][ T6898] lo speed is unknown, defaulting to 1000 [ 125.182367][ T6899] tipc: Resetting bearer [ 125.202523][ T6899] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.210746][ T6892] lo speed is unknown, defaulting to 1000 [ 125.381186][ T6896] tipc: Resetting bearer [ 125.445555][ T6896] tipc: Disabling bearer [ 125.767273][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 126.331303][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.338925][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.430053][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.446283][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.484273][ T6953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.581182][ T6949] geneve2: entered promiscuous mode [ 126.586628][ T6949] geneve2: entered allmulticast mode [ 126.594420][ T6951] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 126.600660][ T6951] syzkaller1: linktype set to 823 [ 126.612078][ T194] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.621512][ T194] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.653488][ T194] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.663425][ T194] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.700306][ T194] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.710856][ T194] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.724540][ T194] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.743824][ T194] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 126.918690][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 126.968918][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 126.995278][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 127.553932][ T6994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 127.585575][ T6999] lo speed is unknown, defaulting to 1000 [ 127.904009][ T7014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.384791][ T7030] veth0_to_bridge: entered promiscuous mode [ 128.386477][ T7033] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 128.424338][ T7032] veth0_to_bridge: left promiscuous mode [ 128.485670][ T7033] team0: Port device dummy0 added [ 128.546420][ T7042] netlink: 'syz.2.250': attribute type 3 has an invalid length. [ 128.556492][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 128.596692][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.250'. [ 128.696700][ T7043] lo speed is unknown, defaulting to 1000 [ 129.022127][ T7054] vlan2: entered promiscuous mode [ 129.029263][ T7054] vlan2: entered allmulticast mode [ 129.053102][ T7054] hsr_slave_1: entered allmulticast mode [ 129.256099][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 130.057235][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 130.126432][ T7103] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 130.177349][ T7106] lo speed is unknown, defaulting to 1000 [ 130.661580][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 130.811872][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 130.842641][ T30] audit: type=1800 audit(1756785077.919:2): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.265" name="memory.events" dev="tmpfs" ino=332 res=0 errno=0 [ 130.970501][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 131.174651][ T7149] netlink: 844 bytes leftover after parsing attributes in process `syz.3.272'. [ 131.183355][ T7148] netlink: 844 bytes leftover after parsing attributes in process `syz.3.272'. [ 131.494451][ T7162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.529017][ T7166] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 132.555687][ T7168] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.277'. [ 132.579281][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 132.599939][ T7169] lo speed is unknown, defaulting to 1000 [ 132.690380][ T7171] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947043][ T7170] lo speed is unknown, defaulting to 1000 [ 132.990322][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997169][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.327180][ T7175] netlink: 'syz.4.280': attribute type 2 has an invalid length. [ 133.374860][ T7175] netlink: zone id is out of range [ 133.382088][ T7175] netlink: zone id is out of range [ 133.394721][ T7175] netlink: zone id is out of range [ 133.400156][ T7175] netlink: zone id is out of range [ 133.405565][ T7175] netlink: zone id is out of range [ 133.411824][ T7175] netlink: zone id is out of range [ 133.418160][ T7175] netlink: zone id is out of range [ 133.423360][ T7175] netlink: zone id is out of range [ 133.428947][ T7175] netlink: zone id is out of range [ 133.730508][ T7202] lo speed is unknown, defaulting to 1000 [ 133.810423][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 134.377687][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 134.652685][ T7242] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.116168][ T7267] ip6erspan0: entered promiscuous mode [ 135.193611][ T7270] __nla_validate_parse: 2 callbacks suppressed [ 135.193632][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.306'. [ 135.260497][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.306'. [ 135.281513][ T7266] lo speed is unknown, defaulting to 1000 [ 135.384175][ T7284] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 135.465767][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 135.501209][ T7289] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 135.511081][ T7284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.529815][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 135.554043][ T7286] veth2: entered promiscuous mode [ 135.591863][ T7284] macvlan2: entered promiscuous mode [ 135.597423][ T7284] macvlan2: entered allmulticast mode [ 135.604955][ T7284] bond1: entered promiscuous mode [ 135.615221][ T7284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.625142][ T7284] bond1: left promiscuous mode [ 135.652185][ T7291] gretap1: entered promiscuous mode [ 135.662764][ T7291] bond1: (slave gretap1): making interface the new active one [ 135.673236][ T7291] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 135.729873][ T7289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.749893][ T7290] veth2: entered promiscuous mode [ 135.948982][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 136.083181][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 136.123253][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 136.463392][ T7082] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 136.563100][ T7082] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 136.732654][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'. [ 137.045811][ T7349] tipc: Enabling of bearer rejected, media not registered [ 137.725132][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 137.917843][ T7383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.050234][ T7383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.177104][ T7383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.238977][ T7397] netlink: 'syz.2.334': attribute type 7 has an invalid length. [ 138.334509][ T7383] batman_adv: batadv0: Removing interface: netdevsim0 [ 138.345046][ T7383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.403618][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'. [ 138.428634][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 138.519380][ T7405] lo speed is unknown, defaulting to 1000 [ 138.642598][ T1168] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.691448][ T7415] netlink: 68 bytes leftover after parsing attributes in process `syz.3.339'. [ 138.745367][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.805734][ T7419] Bluetooth: MGMT ver 1.23 [ 138.825384][ T7084] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.838023][ T7084] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.915163][ T7420] geneve2: entered promiscuous mode [ 138.959984][ T7420] geneve2: entered allmulticast mode [ 139.053798][ T7415] lo speed is unknown, defaulting to 1000 [ 139.984531][ T7441] tipc: Enabled bearer , priority 0 [ 139.999277][ T7441] syzkaller0: entered promiscuous mode [ 140.004802][ T7441] syzkaller0: entered allmulticast mode [ 140.173604][ T7441] tipc: Resetting bearer [ 140.220822][ T7440] tipc: Resetting bearer [ 140.266522][ T7440] tipc: Disabling bearer [ 140.550431][ T7472] __nla_validate_parse: 3 callbacks suppressed [ 140.550451][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 140.586618][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 140.754014][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 140.985411][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 140.989460][ T7480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.004644][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.033531][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.195794][ T7491] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.312587][ T7491] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.421134][ T7491] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.529049][ T7491] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.663980][ T7521] netlink: 'syz.3.369': attribute type 3 has an invalid length. [ 141.930675][ T7542] pim6reg1: entered promiscuous mode [ 141.942720][ T7542] pim6reg1: entered allmulticast mode [ 142.081897][ T7548] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 142.098790][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 142.130507][ T7548] netlink: 248 bytes leftover after parsing attributes in process `syz.2.375'. [ 142.329275][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 142.442591][ T7564] tipc: Can't bind to reserved service type 2 [ 142.443920][ T7562] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 142.461097][ T7562] macvtap1: entered allmulticast mode [ 142.472599][ T7562] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 142.483555][ T7562] batman_adv: batadv0: Adding interface: macvtap1 [ 142.490202][ T7562] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.597339][ T7562] batman_adv: batadv0: Interface activated: macvtap1 [ 142.912095][ T7580] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 142.946699][ T7580] netlink: 92 bytes leftover after parsing attributes in process `syz.0.387'. [ 143.145191][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.390'. [ 143.178452][ T7583] dummy0: entered promiscuous mode [ 143.183980][ T7583] macsec1: entered allmulticast mode [ 143.189560][ T7583] dummy0: entered allmulticast mode [ 143.200148][ T7583] dummy0: left allmulticast mode [ 143.205256][ T7583] dummy0: left promiscuous mode [ 143.342761][ T7084] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.415902][ T7084] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.476947][ T7084] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.522851][ T7084] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.544670][ T7599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.393'. [ 143.699404][ T7604] tipc: Started in network mode [ 143.714667][ T7604] tipc: Node identity da9de7ecaeb, cluster identity 4711 [ 143.741207][ T7604] tipc: Enabled bearer , priority 0 [ 143.779834][ T7604] syzkaller0: entered promiscuous mode [ 143.785365][ T7604] syzkaller0: entered allmulticast mode [ 143.801391][ T7610] syz_tun: entered allmulticast mode [ 143.843278][ T7610] dvmrp8: entered allmulticast mode [ 143.849983][ T7604] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 143.996295][ T7604] tipc: Resetting bearer [ 144.035812][ T7602] tipc: Resetting bearer [ 144.041812][ T30] audit: type=1800 audit(1756785091.109:3): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.400" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=480 res=0 errno=0 [ 144.052219][ T7618] netlink: 'syz.4.398': attribute type 23 has an invalid length. [ 144.117199][ T7602] tipc: Disabling bearer [ 144.169559][ T7610] lo speed is unknown, defaulting to 1000 [ 144.572280][ T7629] syzkaller0: entered promiscuous mode [ 144.584885][ T7629] syzkaller0: entered allmulticast mode [ 144.603679][ T7609] syz_tun: left allmulticast mode [ 144.610223][ T7609] dvmrp8: left allmulticast mode [ 145.115053][ T7658] lo speed is unknown, defaulting to 1000 [ 146.964391][ T7699] lo speed is unknown, defaulting to 1000 [ 147.189985][ T7712] ÿÿÿÿ: tun_chr_ioctl cmd 1074025673 [ 147.195449][ T7712] ÿÿÿÿ: tun_chr_ioctl cmd 1074025673 [ 147.217523][ T7715] ÿÿÿÿ: tun_chr_ioctl cmd 2147767520 [ 147.723037][ T7715] ÿÿÿÿ: tun_chr_ioctl cmd 2147767520 [ 148.042393][ T7726] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 148.335634][ T7733] __nla_validate_parse: 5 callbacks suppressed [ 148.335655][ T7733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.426'. [ 148.342555][ T7735] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 148.405643][ T7735] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 148.415911][ T7733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.426'. [ 148.447897][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 148.582767][ T7735] vlan2: entered allmulticast mode [ 148.615118][ T7735] veth1: entered allmulticast mode [ 148.975245][ T7748] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.282150][ T7755] netlink: 'syz.4.434': attribute type 4 has an invalid length. [ 149.359496][ T7755] netlink: 152 bytes leftover after parsing attributes in process `syz.4.434'. [ 149.401581][ T7755] block nbd0: not configured, cannot reconfigure [ 149.472242][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 149.658984][ T7771] bond0: Unable to set up delay as MII monitoring is disabled [ 149.699715][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 149.731743][ T7774] tipc: Enabling of bearer rejected, failed to enable media [ 149.811752][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 149.830876][ T7778] netlink: 'syz.4.441': attribute type 7 has an invalid length. [ 149.871586][ T7778] netlink: 'syz.4.441': attribute type 8 has an invalid length. [ 149.905123][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 149.917155][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 149.926435][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 149.943741][ T7778] gretap0: entered promiscuous mode [ 149.959460][ T7778] gretap0: left promiscuous mode [ 150.064447][ T7786] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 150.104922][ T7785] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 150.115771][ T7785] tipc: Enabled bearer , priority 0 [ 150.127490][ T7785] tipc: Resetting bearer [ 150.156518][ T7782] can: request_module (can-proto-0) failed. [ 150.183457][ T7784] tipc: Disabling bearer [ 150.553656][ T7799] lo speed is unknown, defaulting to 1000 [ 151.880682][ T7677] net_ratelimit: 702 callbacks suppressed [ 151.880704][ T7677] Set syz1 is full, maxelem 65536 reached [ 152.293614][ T7829] ip6tnl1: left promiscuous mode [ 152.299161][ T7829] ip6tnl1: left allmulticast mode [ 152.309835][ T7829] veth2: left promiscuous mode [ 152.315700][ T7829] batman_adv: batadv0: Interface deactivated: macvtap1 [ 152.323456][ T7829] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 152.330899][ T7829] macvtap1: left allmulticast mode [ 152.385251][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.407791][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.562165][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.581213][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.744165][ T7875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.944083][ T7875] bridge0: port 3(dummy0) entered disabled state [ 152.950743][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.093215][ T7895] lo speed is unknown, defaulting to 1000 [ 153.340925][ T7909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.554709][ T7916] lo speed is unknown, defaulting to 1000 [ 154.067643][ T7916] __nla_validate_parse: 7 callbacks suppressed [ 154.067664][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.477'. [ 154.093444][ T7936] netlink: 410 bytes leftover after parsing attributes in process `syz.2.482'. [ 154.470367][ T7956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.488'. [ 154.535661][ T7957] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 154.634894][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.642488][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.670677][ T7960] 0ªX¹¦À: left allmulticast mode [ 154.721736][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.740209][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.811006][ T7960] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 154.851240][ T7974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.895874][ T7957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.929229][ T7963] veth3: entered promiscuous mode [ 154.954340][ T7963] bond1: (slave veth3): Enslaving as an active interface with an up link [ 154.993590][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.003568][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.113272][ T7977] tipc: Enabling of bearer rejected, failed to enable media [ 155.128874][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.200506][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.266754][ T7989] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 155.358471][ T7996] netlink: 'syz.2.495': attribute type 13 has an invalid length. [ 155.369927][ T7996] netlink: 'syz.2.495': attribute type 17 has an invalid length. [ 155.415527][ T7998] netlink: 'syz.4.496': attribute type 49 has an invalid length. [ 155.514348][ T8005] netlink: 'syz.0.497': attribute type 9 has an invalid length. [ 155.555089][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.565025][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.583084][ T7996] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 155.679945][ T8016] netlink: 68 bytes leftover after parsing attributes in process `syz.0.500'. [ 155.704081][ T8008] lo speed is unknown, defaulting to 1000 [ 156.188129][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.503'. [ 156.803012][ T8048] can: request_module (can-proto-0) failed. [ 156.946345][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 157.561121][ T8021] lo speed is unknown, defaulting to 1000 [ 158.026029][ T8070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.236283][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 158.259295][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 158.273080][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 158.302806][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 158.792092][ T8103] netlink: 'syz.0.523': attribute type 9 has an invalid length. [ 158.913889][ T8110] sctp: [Deprecated]: syz.4.526 (pid 8110) Use of int in max_burst socket option. [ 158.913889][ T8110] Use struct sctp_assoc_value instead [ 159.117006][ T8116] batadv_slave_1: entered promiscuous mode [ 159.141905][ T8124] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 159.206062][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.227467][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.240712][ T8115] batadv_slave_1: left promiscuous mode [ 159.276275][ T8128] lo speed is unknown, defaulting to 1000 [ 159.354245][ T8137] __nla_validate_parse: 2 callbacks suppressed [ 159.354264][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 159.373464][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 159.383186][ T8137] netlink: 'syz.1.533': attribute type 11 has an invalid length. [ 159.615341][ T8150] netlink: 'syz.0.537': attribute type 9 has an invalid length. [ 159.655019][ T8151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.671837][ T8153] erspan0: entered promiscuous mode [ 159.700237][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 160.354531][ T8178] macvlan2: entered allmulticast mode [ 160.362146][ T8178] veth1_vlan: entered allmulticast mode [ 160.371189][ T8178] veth1_vlan: left allmulticast mode [ 160.540975][ T8189] !: renamed from dummy0 [ 160.611872][ T8184] delete_channel: no stack [ 160.944567][ T8196] lo speed is unknown, defaulting to 1000 [ 161.076686][ T8216] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 161.254134][ T8225] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 161.296823][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.554'. [ 161.391438][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.463273][ T8216] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.582157][ T8225] batadv0: entered promiscuous mode [ 161.616758][ T8225] batadv0: entered allmulticast mode [ 161.674923][ T8225] bond0: (slave batadv0): Releasing backup interface [ 161.717502][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 161.794059][ T8225] bridge0: port 2(batadv0) entered blocking state [ 161.856770][ T8225] bridge0: port 2(batadv0) entered disabled state [ 161.915549][ T8231] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768304430) [ 161.926095][ T8231] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 161.946722][ T8212] lo speed is unknown, defaulting to 1000 [ 162.006764][ T7084] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 162.016346][ T7084] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 162.156265][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 162.202111][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 162.272042][ T8252] tipc: Enabled bearer , priority 0 [ 162.403053][ T8262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.505827][ T5881] Bluetooth: hci4: link tx timeout [ 162.521987][ T5881] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.531320][ T5881] Bluetooth: hci4: link tx timeout [ 162.536472][ T5881] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.560914][ T8252] tipc: Disabling bearer [ 163.067962][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 163.080252][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 163.174255][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 163.201115][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.203695][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 163.219656][ T7087] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.249922][ T7087] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.307257][ T7087] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.412282][ T8294] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 163.431799][ T8294] macsec1: entered promiscuous mode [ 163.438563][ T8294] macsec1: entered allmulticast mode [ 163.445948][ T8294] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 163.587007][ T8308] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 163.837231][ T8309] lo speed is unknown, defaulting to 1000 [ 164.138554][ T8337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.194800][ T8339] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 164.588510][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 165.363826][ T8339] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 165.438314][ T8346] __nla_validate_parse: 3 callbacks suppressed [ 165.438337][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 165.485319][ T8348] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 165.545290][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.555949][ T8348] bond0: (slave team0): Enslaving as an active interface with an up link [ 165.790141][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 165.985828][ T8367] lo speed is unknown, defaulting to 1000 [ 166.033962][ T8376] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.590'. [ 166.447968][ T8398] Bluetooth: MGMT ver 1.23 [ 166.501966][ T8398] geneve2: entered promiscuous mode [ 166.514851][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 166.525475][ T8392] syzkaller1: entered promiscuous mode [ 166.531798][ T8392] syzkaller1: entered allmulticast mode [ 166.545110][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.675955][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 166.757016][ T8412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.599'. [ 166.816114][ T8408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.599'. [ 166.952065][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 166.983616][ T8423] netlink: 'syz.0.603': attribute type 11 has an invalid length. [ 167.013710][ T8424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 167.064740][ T8422] bridge1: port 1(veth0_to_bond) entered blocking state [ 167.092928][ T8422] bridge1: port 1(veth0_to_bond) entered disabled state [ 167.116403][ T8422] veth0_to_bond: entered allmulticast mode [ 167.143797][ T8422] veth0_to_bond: entered promiscuous mode [ 167.186746][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 167.401925][ T8442] netlink: 68 bytes leftover after parsing attributes in process `syz.2.607'. [ 167.455318][ T8440] lo speed is unknown, defaulting to 1000 [ 167.753614][ T8459] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 167.819755][ T8462] syzkaller0: entered promiscuous mode [ 167.825553][ T8462] syzkaller0: entered allmulticast mode [ 168.355778][ T8470] lo speed is unknown, defaulting to 1000 [ 168.391803][ T8487] netlink: 'syz.3.617': attribute type 4 has an invalid length. [ 168.427418][ T8480] lo speed is unknown, defaulting to 1000 [ 168.448584][ T8488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.835380][ T5873] block nbd0: Receive control failed (result -107) [ 168.856825][ T8496] nbd0: detected capacity change from 0 to 32 [ 168.964484][ T8501] lo: entered allmulticast mode [ 168.980782][ T8494] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 169.025895][ T8501] dvmrp8: entered allmulticast mode [ 169.225292][ T8501] netlink: 'syz.1.624': attribute type 23 has an invalid length. [ 169.233116][ T8504] lo speed is unknown, defaulting to 1000 [ 169.320632][ T8515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.367492][ T8514] syzkaller0: entered promiscuous mode [ 169.373889][ T8514] syzkaller0: entered allmulticast mode [ 169.442268][ T8517] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 169.498305][ T8500] lo: left allmulticast mode [ 169.504974][ T8500] dvmrp8: left allmulticast mode [ 169.841408][ T8533] openvswitch: netlink: Flow key attr not present in new flow. [ 169.984790][ T8538] bridge_slave_0: left allmulticast mode [ 170.019563][ T8538] bridge_slave_0: left promiscuous mode [ 170.037016][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.065863][ T8538] bridge_slave_1: left allmulticast mode [ 170.082226][ T8538] bridge_slave_1: left promiscuous mode [ 170.086472][ T8543] sctp: [Deprecated]: syz.1.639 (pid 8543) Use of int in max_burst socket option. [ 170.086472][ T8543] Use struct sctp_assoc_value instead [ 170.098491][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.211480][ T8538] bond0: (slave bond_slave_0): Releasing backup interface [ 170.252362][ T8538] bond0: (slave bond_slave_1): Releasing backup interface [ 170.281530][ T8538] team0: Port device team_slave_0 removed [ 170.303859][ T8538] team0: Port device team_slave_1 removed [ 170.342937][ T8538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.391608][ T8538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.540305][ T8538] team0: Port device geneve0 removed [ 170.555086][ T8538] bond1: (slave gretap1): Releasing active interface [ 170.612528][ T8544] tipc: Enabling of bearer rejected, failed to enable media [ 170.615644][ T8562] __nla_validate_parse: 15 callbacks suppressed [ 170.615663][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 170.625725][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.640'. [ 170.635976][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.641'. [ 170.702674][ T7084] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.742874][ T8562] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 170.786136][ T8562] gretap2: entered promiscuous mode [ 170.800315][ T7084] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.862185][ T7084] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.887514][ T8564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.642'. [ 170.903622][ T7084] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.923171][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 170.942925][ T8564] netlink: 'syz.1.642': attribute type 2 has an invalid length. [ 170.977527][ T8570] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.643'. [ 171.180798][ T8587] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 171.190075][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.648'. [ 171.458687][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 171.495973][ T8597] Unsupported ieee802154 address type: 0 [ 171.537931][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 171.569436][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 171.592323][ T8605] lo speed is unknown, defaulting to 1000 [ 171.624924][ T8605] lo speed is unknown, defaulting to 1000 [ 171.802095][ T8608] bridge0: port 1(veth5) entered blocking state [ 171.813531][ T8608] bridge0: port 1(veth5) entered disabled state [ 171.821344][ T8608] veth5: entered allmulticast mode [ 171.833078][ T8608] veth5: entered promiscuous mode [ 171.852737][ T8605] lo speed is unknown, defaulting to 1000 [ 171.922071][ T8617] bridge0: port 2(veth0_to_bond) entered blocking state [ 171.933972][ T8605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 171.944793][ T8617] bridge0: port 2(veth0_to_bond) entered disabled state [ 171.955647][ T8617] veth0_to_bond: entered allmulticast mode [ 171.974486][ T8617] veth0_to_bond: entered promiscuous mode [ 172.014302][ T8622] openvswitch: netlink: Unknown nsh attribute 0 [ 172.015502][ T8619] tipc: Enabled bearer , priority 0 [ 172.026684][ T8622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.059845][ T8616] veth0_to_bridge: entered promiscuous mode [ 172.066072][ T8616] veth0_to_bridge: entered allmulticast mode [ 172.092735][ T8605] lo speed is unknown, defaulting to 1000 [ 172.148874][ T8605] lo speed is unknown, defaulting to 1000 [ 172.166100][ T8605] lo speed is unknown, defaulting to 1000 [ 172.191049][ T8605] lo speed is unknown, defaulting to 1000 [ 172.218843][ T8605] lo speed is unknown, defaulting to 1000 [ 172.252705][ T8602] tipc: Disabling bearer [ 172.637672][ T8645] veth0_to_bridge: left promiscuous mode [ 172.676062][ T8645] veth0_to_bridge: left allmulticast mode [ 172.829352][ T8645] geneve2: left promiscuous mode [ 172.874912][ T8645] geneve2: left allmulticast mode [ 173.030738][ T8645] gretap2: left promiscuous mode [ 173.409870][ T8672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.529594][ T8672] netlink: 'syz.2.670': attribute type 13 has an invalid length. [ 173.713405][ T8686] netlink: 'syz.3.673': attribute type 29 has an invalid length. [ 173.753780][ T8690] netlink: 'syz.3.673': attribute type 29 has an invalid length. [ 174.017519][ T8700] netlink: 'syz.1.677': attribute type 3 has an invalid length. [ 174.155969][ T8711] lo speed is unknown, defaulting to 1000 [ 174.301884][ T8720] tipc: Enabled bearer , priority 0 [ 174.369088][ T8720] tipc: Disabling bearer [ 174.633148][ T8733] pim6reg: entered allmulticast mode [ 174.745069][ T8733] pim6reg: left allmulticast mode [ 177.075164][ T8747] lo speed is unknown, defaulting to 1000 [ 177.299399][ T8765] netlink: 'syz.1.693': attribute type 11 has an invalid length. [ 177.345973][ T8769] netlink: 'syz.1.693': attribute type 11 has an invalid length. [ 177.473180][ T8776] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 177.494747][ T8776] team0: Port device 0! added [ 177.900366][ T8788] lo speed is unknown, defaulting to 1000 [ 178.304025][ T8784] __nla_validate_parse: 15 callbacks suppressed [ 178.304044][ T8784] netlink: 104 bytes leftover after parsing attributes in process `syz.4.696'. [ 178.429843][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 178.529734][ T8806] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 178.545400][ T8806] netlink: 'syz.0.702': attribute type 3 has an invalid length. [ 178.574851][ T8806] netlink: 224 bytes leftover after parsing attributes in process `syz.0.702'. [ 178.647551][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 178.694021][ T8813] openvswitch: netlink: Message has 20 unknown bytes. [ 178.719514][ T8813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.905467][ T8820] lo: entered allmulticast mode [ 178.973977][ T8825] dvmrp8: entered allmulticast mode [ 179.650293][ T8820] lo: left allmulticast mode [ 179.665210][ T8854] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.717'. [ 179.665692][ T8820] dvmrp8: left allmulticast mode [ 180.403324][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 180.757161][ T8890] netlink: 27 bytes leftover after parsing attributes in process `syz.4.727'. [ 180.875814][ T8893] vlan2: entered promiscuous mode [ 180.882708][ T8893] gretap0: entered promiscuous mode [ 194.430521][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.866981][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 211.870831][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 211.873158][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 234.011195][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 234.042010][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 234.355887][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 234.735919][ T8939] netlink: 'syz.1.742': attribute type 21 has an invalid length. [ 234.766675][ T8939] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.794315][ T8939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.801649][ T8939] IPv6: NLM_F_CREATE should be set when creating new route [ 234.809149][ T8939] IPv6: NLM_F_CREATE should be set when creating new route [ 234.816397][ T8939] IPv6: NLM_F_CREATE should be set when creating new route [ 234.831765][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 234.842137][ T8942] lo speed is unknown, defaulting to 1000 [ 234.893300][ T8943] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.909717][ T8943] bond0: (slave bond3): Enslaving as an active interface with an up link [ 234.935792][ T8947] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 234.946071][ T8946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.744'. [ 234.980751][ T8946] netlink: 59 bytes leftover after parsing attributes in process `syz.2.744'. [ 234.995768][ T8946] netlink: 59 bytes leftover after parsing attributes in process `syz.2.744'. [ 235.031639][ T8946] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 235.204405][ T8953] netlink: 76 bytes leftover after parsing attributes in process `syz.3.746'. [ 235.260381][ T8936] infiniband syz!: set down [ 235.265352][ T8936] infiniband syz!: added team_slave_0 [ 235.282378][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.746'. [ 235.358356][ T8960] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 235.366183][ T8960] netlink: 76 bytes leftover after parsing attributes in process `syz.2.748'. [ 235.419558][ T8936] RDS/IB: syz!: added [ 235.431362][ T8936] smc: adding ib device syz! with port count 1 [ 235.453667][ T8936] smc: ib device syz! port 1 has pnetid [ 235.751587][ T8968] openvswitch: netlink: Message has 4 unknown bytes. [ 236.404919][ T8988] bridge0: entered allmulticast mode [ 236.429056][ T8988] pim6reg: entered allmulticast mode [ 236.676090][ T8997] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 236.678255][ T8996] IPVS: stopping backup sync thread 8997 ... [ 237.643137][ T9008] netlink: 'syz.3.759': attribute type 21 has an invalid length. [ 238.071740][ T9020] pim6reg1: entered promiscuous mode [ 238.084234][ T9020] pim6reg1: entered allmulticast mode [ 238.535418][ T24] IPVS: starting estimator thread 0... [ 238.626871][ T9028] IPVS: using max 25 ests per chain, 60000 per kthread [ 239.652252][ T8980] lo speed is unknown, defaulting to 1000 [ 239.788027][ T9071] syzkaller1: entered promiscuous mode [ 239.806982][ T9071] syzkaller1: entered allmulticast mode [ 240.406139][ T9098] __nla_validate_parse: 3 callbacks suppressed [ 240.406162][ T9098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.780'. [ 240.456397][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 240.760191][ T9114] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 240.771761][ T9113] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 240.804738][ T30] audit: type=1107 audit(1756785187.879:4): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 241.122723][ T9133] netlink: 68 bytes leftover after parsing attributes in process `syz.2.794'. [ 241.153588][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 241.326849][ T9145] team0: Port device dummy0 removed [ 241.333677][ T9145] bridge_slave_0: left allmulticast mode [ 241.364458][ T9145] bridge_slave_0: left promiscuous mode [ 241.387507][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.422583][ T9145] bridge_slave_1: left allmulticast mode [ 241.450618][ T9145] bridge_slave_1: left promiscuous mode [ 241.461893][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.487504][ T9159] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.503171][ T9145] bond0: (slave bond_slave_0): Releasing backup interface [ 241.506831][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.800'. [ 241.514772][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 241.539316][ T9160] netlink: 216 bytes leftover after parsing attributes in process `syz.2.800'. [ 241.557592][ T9145] bond0: (slave bond_slave_1): Releasing backup interface [ 241.571672][ T9145] team0: Port device team_slave_0 removed [ 241.582227][ T9145] team0: Port device team_slave_1 removed [ 241.615238][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'. [ 241.674598][ T9159] team0: Mode changed to "loadbalance" [ 241.714940][ T9154] lo speed is unknown, defaulting to 1000 [ 241.748156][ T9157] netlink: 64 bytes leftover after parsing attributes in process `syz.2.800'. [ 242.026159][ T9157] raw_sendmsg: syz.2.800 forgot to set AF_INET. Fix it! [ 243.115167][ T9199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.133252][ T9199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.328008][ T9199] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 243.345884][ T9207] tipc: Enabling of bearer rejected, failed to enable media [ 243.517044][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.560032][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.608627][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.666876][ T7082] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.729996][ T9233] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 243.743789][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 243.966343][ T9233] lo speed is unknown, defaulting to 1000 [ 244.984938][ T9276] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 245.147681][ T9283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.246858][ T9276] k›*·]‘: entered promiscuous mode [ 245.374175][ T9277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.385837][ T9277] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.400180][ T9277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.631349][ T9301] __nla_validate_parse: 6 callbacks suppressed [ 245.631369][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 245.655181][ T9293] lo speed is unknown, defaulting to 1000 [ 245.808618][ T9306] netlink: 'syz.4.839': attribute type 23 has an invalid length. [ 246.032021][ T9309] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 246.089314][ T9313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.137077][ T9309] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 246.886149][ T9341] lo speed is unknown, defaulting to 1000 [ 247.137542][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 247.160499][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 247.170866][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 247.704658][ T9359] lo speed is unknown, defaulting to 1000 [ 247.876366][ T9380] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 247.891513][ T9380] netlink: 200 bytes leftover after parsing attributes in process `syz.3.857'. [ 247.908068][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 248.184150][ T9386] ip6tnl2: entered allmulticast mode [ 248.298776][ T9391] nft_compat: unsupported protocol 0 [ 248.384026][ T9394] netlink: 9 bytes leftover after parsing attributes in process `syz.3.861'. [ 248.413516][ T9394] .70·: renamed from hsr0 [ 248.443122][ T9394] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.473525][ T9394] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.506712][ T9394] .70·: entered allmulticast mode [ 248.511805][ T9394] hsr_slave_0: entered allmulticast mode [ 248.548939][ T9394] hsr_slave_1: entered allmulticast mode [ 248.565469][ T9394] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 248.772091][ T9403] lo speed is unknown, defaulting to 1000 [ 248.957010][ T9410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.864'. [ 248.979357][ T9411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.864'. [ 249.457337][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.2.867'. [ 249.888283][ T1168] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.890880][ T9433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.916639][ T1168] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.935904][ T1168] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.960202][ T1168] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.161210][ T9438] FAULT_INJECTION: forcing a failure. [ 250.161210][ T9438] name failslab, interval 1, probability 0, space 0, times 0 [ 250.195367][ T9438] CPU: 0 UID: 0 PID: 9438 Comm: syz.2.871 Not tainted syzkaller #0 PREEMPT(full) [ 250.195395][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.195405][ T9438] Call Trace: [ 250.195414][ T9438] [ 250.195422][ T9438] dump_stack_lvl+0x189/0x250 [ 250.195453][ T9438] ? __pfx____ratelimit+0x10/0x10 [ 250.195473][ T9438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.195496][ T9438] ? __pfx__printk+0x10/0x10 [ 250.195528][ T9438] ? __pfx___might_resched+0x10/0x10 [ 250.195546][ T9438] ? fs_reclaim_acquire+0x7d/0x100 [ 250.195580][ T9438] should_fail_ex+0x414/0x560 [ 250.195612][ T9438] should_failslab+0xa8/0x100 [ 250.195642][ T9438] __kmalloc_noprof+0xcb/0x4f0 [ 250.195665][ T9438] ? kfree+0x4d/0x440 [ 250.195685][ T9438] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.195710][ T9438] tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.195732][ T9438] ? tomoyo_domain+0xd9/0x130 [ 250.195759][ T9438] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 250.195785][ T9438] tomoyo_path_number_perm+0x1e8/0x5a0 [ 250.195815][ T9438] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.195861][ T9438] ? __lock_acquire+0xab9/0xd20 [ 250.195913][ T9438] ? __fget_files+0x2a/0x420 [ 250.195934][ T9438] ? __fget_files+0x2a/0x420 [ 250.195949][ T9438] ? __fget_files+0x3a0/0x420 [ 250.195962][ T9438] ? __fget_files+0x2a/0x420 [ 250.195984][ T9438] security_file_ioctl+0xcb/0x2d0 [ 250.196013][ T9438] __se_sys_ioctl+0x47/0x170 [ 250.196040][ T9438] do_syscall_64+0xfa/0x3b0 [ 250.196059][ T9438] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.196077][ T9438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.196096][ T9438] ? clear_bhb_loop+0x60/0xb0 [ 250.196119][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.196137][ T9438] RIP: 0033:0x7fea2038ebe9 [ 250.196154][ T9438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.196167][ T9438] RSP: 002b:00007fea1e5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.196187][ T9438] RAX: ffffffffffffffda RBX: 00007fea205c5fa0 RCX: 00007fea2038ebe9 [ 250.196201][ T9438] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000004 [ 250.196212][ T9438] RBP: 00007fea1e5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 250.196223][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.196234][ T9438] R13: 00007fea205c6038 R14: 00007fea205c5fa0 R15: 00007fff1e193e88 [ 250.196330][ T9438] [ 250.196371][ T9438] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.308785][ T5867] block nbd1: Receive control failed (result -32) [ 251.656342][ T9470] lo speed is unknown, defaulting to 1000 [ 251.985676][ T9486] pim6reg: left allmulticast mode [ 251.991453][ T9486] bridge0: left allmulticast mode [ 252.039370][ T9487] __nla_validate_parse: 6 callbacks suppressed [ 252.039389][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 252.086948][ T9487] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 252.094598][ T9487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.248429][ T9490] lo speed is unknown, defaulting to 1000 [ 252.578095][ T9502] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 252.892639][ T9510] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 252.925163][ T9510] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 252.969986][ T9510] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 253.073861][ T9510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.385171][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.894'. [ 253.483315][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 253.556883][ T9539] sctp: [Deprecated]: syz.4.894 (pid 9539) Use of int in maxseg socket option. [ 253.556883][ T9539] Use struct sctp_assoc_value instead [ 253.985458][ T9548] Bluetooth: MGMT ver 1.23 [ 254.285216][ T9560] netlink: 224 bytes leftover after parsing attributes in process `syz.3.899'. [ 254.370052][ T9560] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 254.413107][ T9564] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 254.487182][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 254.497486][ T9571] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 254.593545][ T9560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.603394][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 254.624879][ T9575] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 254.634987][ T9566] bond4: (slave gretap1): making interface the new active one [ 254.640424][ T9575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.646056][ T9566] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 254.669889][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.682513][ T9564] bond0: (slave team0): Enslaving as an active interface with an up link [ 254.701863][ T9571] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 254.720205][ T9570] macsec1: entered promiscuous mode [ 254.725721][ T9570] bond0: entered promiscuous mode [ 254.739968][ T9570] bond0: left promiscuous mode [ 254.818196][ T9575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.864855][ T9564] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.882602][ T9564] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 255.173399][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.196580][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.231367][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.364967][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.584953][ T9615] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 255.644932][ T9615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.768229][ T9622] bond5: (slave veth7): Enslaving as an active interface with a down link [ 255.801594][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 255.860498][ T9615] gretap2: entered promiscuous mode [ 255.877401][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.926034][ T9615] bond5: (slave gretap2): making interface the new active one [ 255.963669][ T9615] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 256.243126][ T9654] netlink: 'syz.1.923': attribute type 4 has an invalid length. [ 256.285170][ T9654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.923'. [ 256.358273][ T9654] wlan1: mtu less than device minimum [ 256.407764][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'. [ 256.437971][ T9663] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 256.480770][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 256.656281][ T9674] netlink: 'syz.2.930': attribute type 6 has an invalid length. [ 256.742838][ T9686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.773099][ T9680] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 257.103344][ T30] audit: type=1800 audit(1756785204.179:5): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.937" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1070 res=0 errno=0 [ 257.542617][ T9719] tunl0: Caught tx_queue_len zero misconfig [ 258.394652][ T9747] __nla_validate_parse: 1 callbacks suppressed [ 258.394670][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 258.896122][ T9755] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.947'. [ 259.018641][ T9762] tipc: Enabled bearer , priority 0 [ 259.034127][ T9762] syzkaller0: entered promiscuous mode [ 259.050158][ T9762] syzkaller0: entered allmulticast mode [ 259.060538][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 259.201293][ T9759] tipc: Resetting bearer [ 259.298107][ T9759] tipc: Disabling bearer [ 259.577898][ T9773] lo speed is unknown, defaulting to 1000 [ 259.662426][ T9785] netlink: 164 bytes leftover after parsing attributes in process `syz.2.953'. [ 259.708569][ T9785] netlink: 164 bytes leftover after parsing attributes in process `syz.2.953'. [ 259.727300][ T9785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 259.998807][ T9795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.473796][ T9807] netlink: 56 bytes leftover after parsing attributes in process `syz.3.958'. [ 260.513017][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 260.551984][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 261.001618][ T9830] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 261.018811][ T9829] netlink: 56 bytes leftover after parsing attributes in process `syz.2.962'. [ 261.087509][ T9830] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 261.357915][ T9836] lo speed is unknown, defaulting to 1000 [ 261.610454][ T9856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.628839][ T9856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.699410][ T9856] bridge0: port 2(batadv0) entered disabled state [ 262.049710][ T9871] validate_nla: 1 callbacks suppressed [ 262.049730][ T9871] netlink: 'syz.0.971': attribute type 1 has an invalid length. [ 262.112979][ T9870] geneve3: entered promiscuous mode [ 262.127828][ T9870] geneve3: entered allmulticast mode [ 262.149349][ T7082] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 262.183045][ T7082] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 262.218888][ T7082] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 262.242584][ T7082] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 262.373550][ T9879] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 262.445205][ T9885] !: renamed from dummy0 [ 262.984194][ T9882] lo speed is unknown, defaulting to 1000 [ 264.381543][ T9920] __nla_validate_parse: 5 callbacks suppressed [ 264.381566][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.981'. [ 264.733218][ T9913] geneve2: entered promiscuous mode [ 264.757058][ T9913] geneve2: entered allmulticast mode [ 264.793335][ T9917] netem: change failed [ 264.824017][ T7082] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.849456][ T7082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 264.865798][ T7082] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.888204][ T7082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 265.010457][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.028879][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 265.053187][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.065534][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 265.133346][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 265.152265][ T5937] IPVS: starting estimator thread 0... [ 265.266436][ T9932] IPVS: using max 23 ests per chain, 55200 per kthread [ 265.506851][ T9947] netlink: 32 bytes leftover after parsing attributes in process `syz.3.989'. [ 265.566203][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 265.578069][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 265.580053][ T9951] netlink: 112 bytes leftover after parsing attributes in process `syz.2.991'. [ 265.837825][ T9954] netlink: 68 bytes leftover after parsing attributes in process `syz.4.993'. [ 265.840600][ T9959] lo speed is unknown, defaulting to 1000 [ 265.883578][ T9961] lo speed is unknown, defaulting to 1000 [ 266.967536][ T9990] lo speed is unknown, defaulting to 1000 [ 267.292204][T10010] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.292573][ T13] nci: nci_rx_work: unknown MT 0x1 [ 267.308414][T10001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.334479][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 267.750049][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 268.188257][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 268.599365][T10053] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 268.822677][T10058] pimreg3: entered allmulticast mode [ 268.848425][T10062] veth1: entered promiscuous mode [ 268.875644][T10062] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 268.898004][T10062] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 269.122358][T10076] syzkaller1: entered promiscuous mode [ 269.135634][T10076] syzkaller1: entered allmulticast mode [ 269.234496][T10081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.386923][T10080] lo speed is unknown, defaulting to 1000 [ 269.788885][T10095] __nla_validate_parse: 7 callbacks suppressed [ 269.788908][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 269.806705][T10097] lo speed is unknown, defaulting to 1000 [ 270.221902][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 270.273966][T10114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.936001][T10132] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 270.960137][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 271.308098][T10138] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 271.350666][T10138] CPU: 0 UID: 0 PID: 10138 Comm: syz.1.1046 Not tainted syzkaller #0 PREEMPT(full) [ 271.350698][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.350710][T10138] Call Trace: [ 271.350718][T10138] [ 271.350727][T10138] dump_stack_lvl+0x189/0x250 [ 271.350762][T10138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.350787][T10138] ? __pfx__printk+0x10/0x10 [ 271.350824][T10138] ? kernfs_path_from_node+0x2f/0x290 [ 271.350845][T10138] ? kernfs_path_from_node+0x250/0x290 [ 271.350865][T10138] ? kernfs_path_from_node+0x2f/0x290 [ 271.350891][T10138] sysfs_warn_dup+0x8e/0xa0 [ 271.350912][T10138] sysfs_do_create_link_sd+0xc0/0x110 [ 271.350938][T10138] device_add_class_symlinks+0x1cf/0x240 [ 271.350985][T10138] device_add+0x475/0xb50 [ 271.351013][T10138] wiphy_register+0x1ba6/0x28d0 [ 271.351058][T10138] ? __pfx_wiphy_register+0x10/0x10 [ 271.351076][T10138] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 271.351112][T10138] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 271.351142][T10138] ieee80211_register_hw+0x3425/0x4080 [ 271.351187][T10138] ? ieee80211_register_hw+0x13f1/0x4080 [ 271.351219][T10138] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 271.351249][T10138] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.351287][T10138] ? __hrtimer_setup+0x187/0x210 [ 271.351305][T10138] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 271.351346][T10138] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 271.351411][T10138] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 271.351436][T10138] ? trace_kmalloc+0x1f/0xd0 [ 271.351457][T10138] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 271.351482][T10138] ? kstrndup+0xbf/0x160 [ 271.351516][T10138] hwsim_new_radio_nl+0xea4/0x1b10 [ 271.351541][T10138] ? __pfx___nla_validate_parse+0x10/0x10 [ 271.351582][T10138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 271.351624][T10138] ? __nla_parse+0x40/0x60 [ 271.351660][T10138] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 271.351695][T10138] genl_family_rcv_msg_doit+0x215/0x300 [ 271.351730][T10138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 271.351770][T10138] ? bpf_lsm_capable+0x9/0x20 [ 271.351791][T10138] ? security_capable+0x7e/0x2e0 [ 271.351826][T10138] genl_rcv_msg+0x60e/0x790 [ 271.351860][T10138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.351884][T10138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 271.351926][T10138] netlink_rcv_skb+0x205/0x470 [ 271.351942][T10138] ? __lock_acquire+0xab9/0xd20 [ 271.351971][T10138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.351998][T10138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.352043][T10138] ? down_read+0x1ad/0x2e0 [ 271.352070][T10138] genl_rcv+0x28/0x40 [ 271.352092][T10138] netlink_unicast+0x82c/0x9e0 [ 271.352133][T10138] ? __pfx_netlink_unicast+0x10/0x10 [ 271.352165][T10138] ? netlink_sendmsg+0x642/0xb30 [ 271.352181][T10138] ? skb_put+0x11b/0x210 [ 271.352208][T10138] netlink_sendmsg+0x805/0xb30 [ 271.352240][T10138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.352264][T10138] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.352285][T10138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.352306][T10138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.352334][T10138] __sock_sendmsg+0x21c/0x270 [ 271.352365][T10138] ____sys_sendmsg+0x505/0x830 [ 271.352397][T10138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.352430][T10138] ? import_iovec+0x74/0xa0 [ 271.352456][T10138] ___sys_sendmsg+0x21f/0x2a0 [ 271.352479][T10138] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.352543][T10138] ? __fget_files+0x2a/0x420 [ 271.352559][T10138] ? __fget_files+0x3a0/0x420 [ 271.352589][T10138] __x64_sys_sendmsg+0x19b/0x260 [ 271.352614][T10138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.352651][T10138] ? rcu_is_watching+0x15/0xb0 [ 271.352676][T10138] ? do_syscall_64+0xbe/0x3b0 [ 271.352701][T10138] do_syscall_64+0xfa/0x3b0 [ 271.352720][T10138] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.352739][T10138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.352756][T10138] ? clear_bhb_loop+0x60/0xb0 [ 271.352779][T10138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.352797][T10138] RIP: 0033:0x7fe55a98ebe9 [ 271.352815][T10138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.352830][T10138] RSP: 002b:00007fe55b7d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.352852][T10138] RAX: ffffffffffffffda RBX: 00007fe55abc5fa0 RCX: 00007fe55a98ebe9 [ 271.352865][T10138] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 271.352876][T10138] RBP: 00007fe55aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 271.352887][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.352897][T10138] R13: 00007fe55abc6038 R14: 00007fe55abc5fa0 R15: 00007fffd4c3c538 [ 271.352931][T10138] [ 272.171841][T10138] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 272.243213][T10138] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 272.266182][T10142] netlink: 'syz.0.1047': attribute type 10 has an invalid length. [ 272.290701][T10138] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 272.369285][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'. [ 272.517582][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 272.664682][T10151] lo speed is unknown, defaulting to 1000 [ 272.716155][T10170] netlink: 'syz.1.1054': attribute type 16 has an invalid length. [ 272.725339][T10168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1053'. [ 272.929668][T10179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1058'. [ 273.172837][T10179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1058'. [ 273.175705][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 273.262345][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 273.646190][T10207] tipc: Failed to remove unknown binding: 66,2,2/0:3493395027/3493395029 [ 273.688938][T10207] tipc: Failed to remove unknown binding: 66,2,2/0:3493395027/3493395029 [ 274.205489][T10235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.285881][T10237] lo speed is unknown, defaulting to 1000 [ 274.731391][ T30] audit: type=1800 audit(1756785221.809:6): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1078" name=CB dev="tmpfs" ino=1173 res=0 errno=0 [ 274.949752][T10255] veth1: left promiscuous mode [ 274.985067][T10255] veth3: left promiscuous mode [ 275.038812][T10255] macsec1: left promiscuous mode [ 275.044266][T10262] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 275.057027][T10255] geneve2: left promiscuous mode [ 275.062500][T10255] geneve3: left promiscuous mode [ 275.165209][T10255] __nla_validate_parse: 3 callbacks suppressed [ 275.165228][T10255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1081'. [ 275.329517][T10270] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 275.623307][T10283] lo speed is unknown, defaulting to 1000 [ 275.882778][T10303] vlan2: entered promiscuous mode [ 276.137855][T10308] tipc: Enabled bearer , priority 0 [ 276.145387][T10308] syzkaller0: entered promiscuous mode [ 276.151379][T10308] syzkaller0: entered allmulticast mode [ 276.263068][T10316] tipc: Resetting bearer [ 276.304688][T10307] tipc: Resetting bearer [ 276.345007][T10307] tipc: Disabling bearer [ 277.058002][T10354] netlink: 'syz.0.1109': attribute type 31 has an invalid length. [ 277.076939][T10354] netlink: 'syz.0.1109': attribute type 9 has an invalid length. [ 277.122646][T10356] IPVS: length: 141 != 8 [ 277.139448][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 277.364954][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 277.476855][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 277.697505][T10370] unknown channel width for channel at 909000KHz? [ 277.716338][T10370] unknown channel width for channel at 909000KHz? [ 277.733381][T10370] unknown channel width for channel at 909000KHz? [ 277.902661][T10379] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.160734][T10387] can: request_module (can-proto-0) failed. [ 278.215656][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 279.748417][T10381] syzkaller1: entered promiscuous mode [ 279.754225][T10381] syzkaller1: entered allmulticast mode [ 279.773827][T10399] tipc: Enabled bearer , priority 0 [ 279.873447][T10399] tipc: Disabling bearer [ 279.985016][T10408] geneve2: entered promiscuous mode [ 280.006322][T10413] macsec0: entered allmulticast mode [ 280.028086][T10413] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 280.486800][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 280.628787][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 280.660046][T10436] ip6erspan0: left promiscuous mode [ 280.670481][T10436] veth2: left promiscuous mode [ 280.675872][T10436] gretap1: left promiscuous mode [ 280.677667][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 281.588029][T10473] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 281.682682][T10475] lo speed is unknown, defaulting to 1000 [ 281.733700][T10482] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 281.912989][T10480] lo speed is unknown, defaulting to 1000 [ 281.990371][T10491] tipc: Enabled bearer , priority 0 [ 282.007755][T10491] syzkaller0: entered promiscuous mode [ 282.013301][T10491] syzkaller0: entered allmulticast mode [ 282.213759][T10498] tipc: Resetting bearer [ 282.223019][T10491] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 282.257254][T10500] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 282.316987][T10491] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 282.347070][T10490] tipc: Resetting bearer [ 282.398261][T10490] tipc: Disabling bearer [ 282.620719][T10503] netlink: 'syz.4.1143': attribute type 11 has an invalid length. [ 283.824837][T10542] !: renamed from dummy0 [ 283.865298][T10540] lo speed is unknown, defaulting to 1000 [ 284.037701][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 284.095586][T10547] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1154'. [ 284.136649][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 284.261911][T10550] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1155'. [ 284.391907][T10545] lo speed is unknown, defaulting to 1000 [ 284.643660][T10564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1159'. [ 284.880156][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 285.385465][T10586] vlan0: entered promiscuous mode [ 285.964614][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 285.981610][T10599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.202158][T10613] team0: Port device 0! removed [ 286.227379][T10613] veth0_to_bond: left allmulticast mode [ 286.233098][T10613] veth0_to_bond: left promiscuous mode [ 286.245548][T10613] bridge0: port 2(veth0_to_bond) entered disabled state [ 286.265801][T10613] batman_adv: batadv0: Removing interface: macvtap1 [ 286.274352][T10613] veth5: left allmulticast mode [ 286.279532][T10613] veth5: left promiscuous mode [ 286.284820][T10613] bridge0: port 1(veth5) entered disabled state [ 286.305122][T10613] bond4: (slave gretap1): Releasing active interface [ 286.339230][T10613] bond5: (slave veth7): Releasing active interface [ 286.355554][T10613] bond5: (slave veth7): the permanent HWaddr of slave - 62:89:86:c6:df:16 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 286.394396][T10613] bond5: (slave gretap2): Releasing active interface [ 286.435464][T10618] unknown channel width for channel at 909000KHz? [ 286.557006][T10629] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1178'. [ 286.618319][T10631] tipc: Enabled bearer , priority 0 [ 286.637224][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 286.648347][T10631] syzkaller0: entered promiscuous mode [ 286.667483][T10631] syzkaller0: entered allmulticast mode [ 286.732752][T10631] tipc: Resetting bearer [ 286.762904][T10630] tipc: Resetting bearer [ 286.819844][T10630] tipc: Disabling bearer [ 286.846994][T10651] lo: entered allmulticast mode [ 286.903674][T10648] dvmrp8: entered allmulticast mode [ 287.001518][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 287.110114][T10648] lo speed is unknown, defaulting to 1000 [ 287.135186][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 287.389603][T10672] netlink: 'syz.3.1191': attribute type 16 has an invalid length. [ 287.511890][T10672] netlink: 'syz.3.1191': attribute type 17 has an invalid length. [ 287.734707][T10672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.762611][T10672] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.803337][T10672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.863975][T10645] lo: left allmulticast mode [ 287.872084][T10645] dvmrp8: left allmulticast mode [ 287.990139][T10681] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 288.011670][T10681] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 288.398724][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 288.433920][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 288.525299][T10713] team0: Caught tx_queue_len zero misconfig [ 288.540940][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 288.852686][T10718] lo speed is unknown, defaulting to 1000 [ 289.325915][T10735] syzkaller1: entered promiscuous mode [ 289.332453][T10735] syzkaller1: entered allmulticast mode [ 289.588718][T10746] ip6tnl0: Caught tx_queue_len zero misconfig [ 289.732865][T10749] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 289.766691][T10749] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1208'. [ 290.072865][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1214'. [ 290.088483][T10769] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 290.487628][T10779] can: request_module (can-proto-4) failed. [ 290.771514][T10795] vlan2: entered promiscuous mode [ 290.782595][T10795] ip6gretap0: entered promiscuous mode [ 290.808677][T10796] netlink: 'syz.4.1221': attribute type 13 has an invalid length. [ 290.818790][T10796] netlink: 'syz.4.1221': attribute type 17 has an invalid length. [ 291.024659][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.034494][T10796] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.048885][T10796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.073921][ T5865] lo speed is unknown, defaulting to 1000 [ 291.083173][ T5865] syz2: Port: 1 Link ACTIVE [ 291.102463][T10798] lo speed is unknown, defaulting to 1000 [ 291.168169][T10803] lo speed is unknown, defaulting to 1000 [ 291.959853][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1228'. [ 292.206732][T10826] tipc: Enabling of bearer rejected, failed to enable media [ 292.215502][T10827] tipc: Enabling of bearer rejected, failed to enable media [ 293.318462][T10849] lo speed is unknown, defaulting to 1000 [ 293.561372][T10859] tipc: Enabled bearer , priority 0 [ 293.570086][T10859] syzkaller0: entered promiscuous mode [ 293.575737][T10859] syzkaller0: entered allmulticast mode [ 293.669739][T10869] netlink: get zone limit has 8 unknown bytes [ 293.709745][T10859] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 293.748386][T10859] tipc: Resetting bearer [ 293.832088][T10857] tipc: Resetting bearer [ 293.876038][T10857] tipc: Disabling bearer [ 293.924333][T10877] bridge0: entered allmulticast mode [ 293.935228][T10876] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 293.955229][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 294.092224][T10876] bridge0 (unregistering): left allmulticast mode [ 294.710765][T10911] netlink: 'syz.4.1248': attribute type 11 has an invalid length. [ 294.933158][T10928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1249'. [ 295.051732][T10936] netlink: 736 bytes leftover after parsing attributes in process `syz.2.1251'. [ 295.099692][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 295.364609][T10943] lo speed is unknown, defaulting to 1000 [ 295.392333][T10941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1252'. [ 295.445481][T10941] lo speed is unknown, defaulting to 1000 [ 295.540078][T10946] IPVS: persistence engine module ip_vs_pe_ not found [ 295.565657][T10955] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 295.783072][T10965] netlink: 'syz.0.1255': attribute type 4 has an invalid length. [ 296.097999][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 296.117319][T10977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1259'. [ 296.219722][T10946] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 296.501454][T10988] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1260'. [ 296.628428][T10981] lo speed is unknown, defaulting to 1000 [ 296.786010][T11000] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 296.875432][T11005] IPv6: addrconf: prefix option has invalid lifetime [ 297.015031][T11006] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.110490][T11006] vcan1: entered allmulticast mode [ 297.629260][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 299.487013][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 299.512506][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1269'. [ 299.559802][T11053] nbd: must specify a device to reconfigure [ 299.595629][T11053] tipc: Enabled bearer , priority 10 [ 299.891888][T11053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.911570][T11053] bridge0: port 2(bond3) entered blocking state [ 299.918247][T11053] bridge0: port 2(bond3) entered disabled state [ 299.924742][T11053] bond3: entered allmulticast mode [ 299.936320][T11053] bond3: entered promiscuous mode [ 299.958769][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 300.021911][T11067] tipc: Enabled bearer , priority 0 [ 300.041905][T11062] syzkaller0: entered promiscuous mode [ 300.057068][T11062] syzkaller0: entered allmulticast mode [ 300.127153][T11062] tipc: Resetting bearer [ 300.142357][T11061] tipc: Resetting bearer [ 300.165363][T11061] tipc: Disabling bearer [ 300.224981][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 300.399112][T11077] pimreg: entered allmulticast mode [ 300.434932][T11077] pimreg: left allmulticast mode [ 300.546193][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 300.726922][ T24] tipc: Node number set to 125477023 [ 301.511318][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 301.926419][T11142] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1294'. [ 302.197590][T11164] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1298'. [ 302.244508][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 302.256786][T11160] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1298'. [ 302.615407][T11184] vxcan1: entered allmulticast mode [ 302.643068][T11184] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 302.657717][T11186] bond0: Caught tx_queue_len zero misconfig [ 302.710242][T11193] netlink: 'syz.2.1305': attribute type 7 has an invalid length. [ 303.073780][T11215] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 303.327581][T11222] block nbd2: server does not support multiple connections per device. [ 303.337707][T11222] block nbd2: shutting down sockets [ 303.389636][T11241] lo speed is unknown, defaulting to 1000 [ 303.426208][T11248] lo: entered allmulticast mode [ 303.452600][T11250] macsec0: entered promiscuous mode [ 303.500860][T11250] veth1_macvtap: entered allmulticast mode [ 303.531237][T11250] macsec0: left promiscuous mode [ 303.550484][T11250] macsec0: left allmulticast mode [ 303.577969][T11234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.598066][T11250] veth1_macvtap: left allmulticast mode [ 303.652556][T11248] lo speed is unknown, defaulting to 1000 [ 303.977277][T11265] syzkaller0: entered promiscuous mode [ 303.983246][T11265] syzkaller0: entered allmulticast mode [ 304.155474][T11231] lo: left allmulticast mode [ 304.533666][T11280] __nla_validate_parse: 10 callbacks suppressed [ 304.533696][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 305.029315][T11293] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 306.437933][T11293] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 306.439388][T11296] syz_tun: entered allmulticast mode [ 306.459051][T11297] dvmrp8: entered allmulticast mode [ 306.465266][T11297] syz_tun: left allmulticast mode [ 306.473047][T11297] dvmrp8: left allmulticast mode [ 306.737720][T11315] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 306.781455][T11316] bond0: option arp_validate: invalid value (18446744073491447809) [ 307.325795][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 307.336228][T11333] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1346'. [ 307.375298][T11331] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 307.382893][T11331] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 307.442078][T11331] netlink: 'syz.3.1345': attribute type 37 has an invalid length. [ 307.752853][T11347] tipc: Enabled bearer , priority 0 [ 307.770230][T11347] tipc: Resetting bearer [ 308.046424][T11357] lo speed is unknown, defaulting to 1000 [ 308.164236][ T7084] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 308.164784][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 308.213101][T11360] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 308.553152][T11347] tipc: Disabling bearer [ 308.658641][T11386] netlink: 'syz.4.1358': attribute type 21 has an invalid length. [ 308.813064][T11384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1357'. [ 309.012095][T11392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1359'. [ 309.040189][T11399] sctp: [Deprecated]: syz.1.1362 (pid 11399) Use of int in max_burst socket option. [ 309.040189][T11399] Use struct sctp_assoc_value instead [ 309.501684][T11410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1366'. [ 309.812644][T11421] veth9: entered promiscuous mode [ 309.974300][T11430] lo speed is unknown, defaulting to 1000 [ 310.018390][T11433] netlink: 'syz.4.1373': attribute type 4 has an invalid length. [ 310.095086][T11434] tipc: Enabled bearer , priority 0 [ 310.103841][T11434] syzkaller0: entered promiscuous mode [ 310.130253][T11434] syzkaller0: entered allmulticast mode [ 310.178812][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'. [ 310.206828][T11434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1372'. [ 310.492073][T11441] tipc: Resetting bearer [ 310.597567][T11447] tc_dump_action: action bad kind [ 310.695207][T11447] veth11: entered promiscuous mode [ 310.734412][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 310.802877][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1377'. [ 310.880883][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 310.925710][T11443] tipc: Resetting bearer [ 310.930257][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1378'. [ 311.000396][T11443] tipc: Disabling bearer [ 311.293303][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 311.415411][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 311.432506][T11475] lo speed is unknown, defaulting to 1000 [ 311.440800][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 312.113931][T11516] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1387'. [ 312.451426][T11532] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 313.420942][T11561] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 313.728103][T11569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.793138][T11585] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 314.078897][T11591] IPVS: Scheduler module ip_vs_ not found [ 314.205994][T11600] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 314.574213][T11644] netlink: 'syz.3.1417': attribute type 10 has an invalid length. [ 314.655964][T11644] team0: Failed to send options change via netlink (err -105) [ 314.685120][T11644] team0: Port device 0! added [ 314.768264][T11655] openvswitch: netlink: Multiple metadata blocks provided [ 314.792155][T11658] openvswitch: netlink: Multiple metadata blocks provided [ 314.852012][T11656] lo speed is unknown, defaulting to 1000 [ 315.560671][T11703] netlink: 'syz.3.1433': attribute type 12 has an invalid length. [ 315.592405][T11703] __nla_validate_parse: 6 callbacks suppressed [ 315.592425][T11703] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1433'. [ 315.689918][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 315.699625][T11706] netlink: 'syz.1.1434': attribute type 2 has an invalid length. [ 315.709161][T11706] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 315.740497][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 315.942089][T11715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.967808][T11712] IPv6: sit1: Disabled Multicast RS [ 316.710830][T11742] bridge_slave_0: left allmulticast mode [ 316.717239][T11742] bridge_slave_0: left promiscuous mode [ 316.723317][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.739624][T11742] bridge_slave_1: left allmulticast mode [ 316.745727][T11742] bridge_slave_1: left promiscuous mode [ 316.754143][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.773416][T11742] veth0_to_bond: left allmulticast mode [ 316.780684][T11742] veth0_to_bond: left promiscuous mode [ 316.788122][T11742] bridge1: port 1(veth0_to_bond) entered disabled state [ 316.794538][ T30] audit: type=1800 audit(1756785263.869:7): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1440" name="memory.events" dev="tmpfs" ino=1277 res=0 errno=0 [ 316.828496][T11742] bond0: (slave bond_slave_0): Releasing backup interface [ 316.854107][T11742] bond0: (slave bond_slave_1): Releasing backup interface [ 316.867944][T11742] team0: Port device team_slave_0 removed [ 316.877709][T11742] team0: Port device team_slave_1 removed [ 316.884257][T11742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.901191][T11742] team0: Port device netdevsim0 removed [ 316.918510][T11745] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 316.994210][T11745] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 317.219201][T11747] lo speed is unknown, defaulting to 1000 [ 318.235604][T11782] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 318.256670][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 318.278143][T11782] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 318.313431][T11784] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1451'. [ 318.429265][T11782] lo speed is unknown, defaulting to 1000 [ 318.643109][T11791] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1455'. [ 318.844189][T11797] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1456'. [ 318.870144][T11797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1456'. [ 319.303615][T11813] netlink: 'syz.1.1460': attribute type 13 has an invalid length. [ 319.322967][T11815] netlink: zone id is out of range [ 319.328453][T11815] netlink: zone id is out of range [ 319.334124][T11815] netlink: zone id is out of range [ 319.339492][T11815] netlink: zone id is out of range [ 319.344631][T11815] netlink: zone id is out of range [ 319.356587][T11813] netlink: 'syz.1.1460': attribute type 17 has an invalid length. [ 319.366739][T11815] netlink: zone id is out of range [ 319.384828][T11815] netlink: zone id is out of range [ 319.436266][T11815] netlink: zone id is out of range [ 319.471360][T11815] netlink: del zone limit has 4 unknown bytes [ 319.503697][ T7082] bond0: (slave bond_slave_0): interface is now down [ 319.515715][ T7082] bond0: (slave bond_slave_1): interface is now down [ 319.517230][T11813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.522975][ T7082] bond0: (slave wlan1): interface is now down [ 319.531491][T11821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1462'. [ 319.535456][ T7082] bond0: (slave team0): interface is now down [ 319.547640][T11813] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.564099][T11813] bridge0: port 3(0!) entered blocking state [ 319.571225][T11813] bridge0: port 3(0!) entered forwarding state [ 319.583141][T11813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.593433][ T12] bond0: (slave bond_slave_0): interface is now down [ 319.605940][ T12] bond0: (slave bond_slave_1): interface is now down [ 319.617610][ T12] bond0: (slave wlan1): interface is now down [ 319.624071][ T12] bond0: (slave team0): interface is now down [ 319.695782][T11830] bond0: (slave bond_slave_0): interface is now down [ 319.715641][T11830] bond0: (slave bond_slave_1): interface is now down [ 319.727950][T11830] bond0: (slave wlan1): interface is now down [ 319.734107][T11830] bond0: (slave team0): interface is now down [ 319.774247][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 319.799805][T11831] bond0: (slave bond_slave_0): interface is now down [ 319.824591][T11831] bond0: (slave bond_slave_1): interface is now down [ 319.845061][T11831] bond0: (slave wlan1): interface is now down [ 319.847794][T11854] trusted_key: syz.0.1464 sent an empty control message without MSG_MORE. [ 319.854182][T11831] bond0: (slave team0): interface is now down [ 319.889613][T11844] bond0: (slave bond_slave_0): interface is now down [ 319.896367][T11844] bond0: (slave bond_slave_1): interface is now down [ 319.905980][T11844] bond0: (slave wlan1): interface is now down [ 319.913867][T11844] bond0: (slave team0): interface is now down [ 319.958702][T11827] bond0: (slave bond_slave_0): interface is now down [ 319.968288][T11827] bond0: (slave bond_slave_1): interface is now down [ 319.975010][T11827] bond0: (slave wlan1): interface is now down [ 320.000490][T11827] bond0: (slave team0): interface is now down [ 320.036705][T11846] bond0: (slave bond_slave_0): interface is now down [ 320.053869][T11846] bond0: (slave bond_slave_1): interface is now down [ 320.060811][T11846] bond0: (slave wlan1): interface is now down [ 320.068039][T11846] bond0: (slave team0): interface is now down [ 320.088391][T11846] bond0: (slave bond_slave_0): interface is now down [ 320.096105][T11846] bond0: (slave bond_slave_1): interface is now down [ 320.101944][T11859] lo speed is unknown, defaulting to 1000 [ 320.133596][T11846] bond0: (slave wlan1): interface is now down [ 320.160224][T11846] bond0: (slave team0): interface is now down [ 320.245780][T11846] bond0: now running without any active interface! [ 320.735238][T11877] __nla_validate_parse: 1 callbacks suppressed [ 320.735259][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'. [ 322.603645][T11874] lo speed is unknown, defaulting to 1000 [ 324.004903][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 326.975149][T11895] lo speed is unknown, defaulting to 1000 [ 327.924993][T11892] lo speed is unknown, defaulting to 1000 [ 330.448871][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 333.201332][T11924] net_ratelimit: 1 callbacks suppressed [ 333.201356][T11924] openvswitch: netlink: IP tunnel dst address not specified [ 334.219152][T11928] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 334.370829][T11928] netlink: 'syz.4.1482': attribute type 3 has an invalid length. [ 334.641874][T11928] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1482'. [ 335.812744][T11916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.820382][ T5865] IPVS: starting estimator thread 0... [ 336.958827][T11937] IPVS: using max 23 ests per chain, 55200 per kthread [ 337.715258][T11933] lo speed is unknown, defaulting to 1000 [ 338.842236][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.932265][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.980555][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.091070][ T5882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.141582][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.315008][ T5882] Bluetooth: hci5: command tx timeout [ 341.431938][T11943] lo speed is unknown, defaulting to 1000 [ 342.316087][T11947] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 343.253558][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.270918][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.283884][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.301970][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.323192][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.379527][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.388016][ T5882] Bluetooth: hci5: command tx timeout [ 343.394828][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.403164][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.412593][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.427375][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.580712][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 343.614094][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 343.645358][T11951] lo speed is unknown, defaulting to 1000 [ 345.281980][T11956] lo speed is unknown, defaulting to 1000 [ 345.401166][ T5881] Bluetooth: hci0: command tx timeout [ 345.466916][ T5881] Bluetooth: hci1: command tx timeout [ 345.473058][ T5881] Bluetooth: hci5: command tx timeout [ 345.699743][T11964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1491'. [ 346.584386][T11836] bond0 (unregistering): (slave bond3): Releasing backup interface [ 346.593737][T11836] bond0 (unregistering): Released all slaves [ 346.694220][T11836] bond1 (unregistering): Released all slaves [ 346.795514][T11836] bond2 (unregistering): Released all slaves [ 346.898345][T11836] bond3 (unregistering): Released all slaves [ 346.913405][T11836] bond4 (unregistering): Released all slaves [ 347.018243][T11836] k›*·]‘: left promiscuous mode [ 347.118207][T11836] tipc: Left network mode [ 347.132499][T11943] chnl_net:caif_netlink_parms(): no params data found [ 347.281250][T11994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'. [ 347.324072][T11994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'. [ 347.416247][T12000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'. [ 347.422586][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'. [ 347.440125][T11951] chnl_net:caif_netlink_parms(): no params data found [ 347.466705][ T5881] Bluetooth: hci0: command tx timeout [ 347.546661][ T5881] Bluetooth: hci5: command tx timeout [ 347.552237][ T5867] Bluetooth: hci1: command tx timeout [ 347.705654][T11943] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.716892][T11943] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.724343][T11943] bridge_slave_0: entered allmulticast mode [ 347.738273][T11943] bridge_slave_0: entered promiscuous mode [ 347.980153][T11943] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.987587][T11943] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.994800][T11943] bridge_slave_1: entered allmulticast mode [ 348.003493][T11943] bridge_slave_1: entered promiscuous mode [ 348.086316][T11836] hsr_slave_0: left promiscuous mode [ 348.092813][T11836] hsr_slave_1: left promiscuous mode [ 348.116324][T11836] pimreg3 (unregistering): left allmulticast mode [ 348.791306][T11836] vxcan1 (unregistering): left allmulticast mode [ 349.078927][T11943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.101953][T11951] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.113375][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.121010][T11951] bridge_slave_0: entered allmulticast mode [ 349.129478][T11951] bridge_slave_0: entered promiscuous mode [ 349.161029][T11943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.218246][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.237962][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.245378][T11951] bridge_slave_1: entered allmulticast mode [ 349.257747][T11951] bridge_slave_1: entered promiscuous mode [ 349.265633][T11956] chnl_net:caif_netlink_parms(): no params data found [ 349.360101][T11943] team0: Port device team_slave_0 added [ 349.371908][T11943] team0: Port device team_slave_1 added [ 349.461206][T11951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.512202][T11943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.520039][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.547182][ T5881] Bluetooth: hci0: command tx timeout [ 349.549194][T11943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.589952][T11951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.627005][ T5881] Bluetooth: hci1: command tx timeout [ 349.634874][T11943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.642555][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.669285][T11943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.696179][T12030] tipc: Enabling of bearer rejected, failed to enable media [ 349.715750][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 349.756100][T11956] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.765313][T11956] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.773508][T11956] bridge_slave_0: entered allmulticast mode [ 349.782992][T11956] bridge_slave_0: entered promiscuous mode [ 349.798637][T11951] team0: Port device team_slave_0 added [ 349.813677][T11951] team0: Port device team_slave_1 added [ 349.820799][T11956] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.829360][T11956] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.837059][T11956] bridge_slave_1: entered allmulticast mode [ 349.845288][T11956] bridge_slave_1: entered promiscuous mode [ 350.153151][T11951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.170540][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.244741][T11951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.344503][T11943] hsr_slave_0: entered promiscuous mode [ 350.381802][T11943] hsr_slave_1: entered promiscuous mode [ 350.404413][T11943] debugfs: 'hsr0' already exists in 'hsr' [ 350.423190][T11943] Cannot create hsr debugfs directory [ 350.445531][T11956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.483281][T11951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.502752][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.531127][T11951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.573218][T11956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.662522][T11956] team0: Port device team_slave_0 added [ 350.678001][T11956] team0: Port device team_slave_1 added [ 350.767639][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 350.825510][T11951] hsr_slave_0: entered promiscuous mode [ 350.834433][T11951] hsr_slave_1: entered promiscuous mode [ 350.846123][T11951] debugfs: 'hsr0' already exists in 'hsr' [ 350.853521][T11951] Cannot create hsr debugfs directory [ 350.912278][T11956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.926609][T11956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.984011][T11956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.010290][T11956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.026612][T11956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.076114][T11956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.107719][T12048] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 351.160583][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 351.403103][T12055] tipc: New replicast peer: 255.255.255.255 [ 351.410749][T12055] tipc: Enabled bearer , priority 10 [ 351.451203][T11956] hsr_slave_0: entered promiscuous mode [ 351.457697][T11956] hsr_slave_1: entered promiscuous mode [ 351.463932][T11956] debugfs: 'hsr0' already exists in 'hsr' [ 351.469958][T11956] Cannot create hsr debugfs directory [ 351.628426][ T5881] Bluetooth: hci0: command tx timeout [ 351.706981][ T5881] Bluetooth: hci1: command tx timeout [ 351.750013][T12068] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 351.782815][T12068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.814245][T12068] vlan2: entered promiscuous mode [ 351.821466][T12068] bond2: entered promiscuous mode [ 351.827018][T12068] vlan2: entered allmulticast mode [ 351.832201][T12068] bond2: entered allmulticast mode [ 351.870363][T12068] bond2: (slave gretap4): making interface the new active one [ 351.878088][T12068] gretap4: entered promiscuous mode [ 351.883514][T12068] gretap4: entered allmulticast mode [ 351.895028][T12068] bond2: (slave gretap4): Enslaving as an active interface with an up link [ 351.940844][T11943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.981730][T12073] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 352.003924][T11943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.046412][T11943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.103607][T11943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.141928][T12078] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 352.152622][T12078] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 352.170516][T12078] bond4: (slave vcan0): making interface the new active one [ 352.179598][T12078] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 352.201119][T12073] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 352.223212][T12073] bond4: (slave vcan1): Enslaving as a backup interface with an up link [ 352.247736][T12078] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.295141][T12076] lo speed is unknown, defaulting to 1000 [ 352.330421][T11951] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.350960][T11951] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.364931][T11951] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.399828][T11951] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 352.619357][T11956] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.658472][T11956] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.693371][T11956] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.713395][T11956] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 353.022846][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 353.022920][T11943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.053512][T11951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.084003][T12106] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 353.145127][T11943] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.258439][T11951] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.267642][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.274823][T11846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.319117][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.326424][T11829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.348458][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.355952][T11829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.456792][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.464070][T11827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.553604][T11956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.658163][T11956] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.698053][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.705361][T11846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.722463][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.729818][T11827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.805454][T12118] lo speed is unknown, defaulting to 1000 [ 354.403180][T11951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.473845][T11943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.650938][T11956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.677798][ T5930] [ 354.680270][ T5930] ============================================ [ 354.686445][ T5930] WARNING: possible recursive locking detected [ 354.692779][ T5930] syzkaller #0 Not tainted [ 354.697304][ T5930] -------------------------------------------- [ 354.703463][ T5930] kworker/0:4/5930 is trying to acquire lock: [ 354.709611][ T5930] ffff88805824b218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 354.722009][ T5930] [ 354.722009][ T5930] but task is already holding lock: [ 354.729485][ T5930] ffff888069cce258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 354.741686][ T5930] [ 354.741686][ T5930] other info that might help us debug this: [ 354.749744][ T5930] Possible unsafe locking scenario: [ 354.749744][ T5930] [ 354.757276][ T5930] CPU0 [ 354.760724][ T5930] ---- [ 354.763995][ T5930] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 354.771114][ T5930] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 354.778315][ T5930] [ 354.778315][ T5930] *** DEADLOCK *** [ 354.778315][ T5930] [ 354.786459][ T5930] May be due to missing lock nesting notation [ 354.786459][ T5930] [ 354.794775][ T5930] 13 locks held by kworker/0:4/5930: [ 354.800058][ T5930] #0: ffff88802ed1f548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 354.810760][ T5930] #1: ffffc9000ab87bc0 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 354.823979][ T5930] #2: ffff888069ebc538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x3e/0x490 [ 354.833214][ T5930] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1e7/0xe60 [ 354.842565][ T5930] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 354.851805][ T5930] #5: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 354.861988][ T5930] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xf8/0x1a10 [ 354.871573][ T5930] #7: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 354.881497][ T5930] #8: ffff888069cce258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 354.894127][ T5930] #9: ffff888030cb0158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 354.904437][ T5930] #10: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 354.913407][ T5930] #11: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 354.923338][ T5930] #12: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 354.933351][ T5930] [ 354.933351][ T5930] stack backtrace: [ 354.939260][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 354.939280][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.939290][ T5930] Workqueue: mld mld_dad_work [ 354.939311][ T5930] Call Trace: [ 354.939317][ T5930] [ 354.939324][ T5930] dump_stack_lvl+0x189/0x250 [ 354.939344][ T5930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.939361][ T5930] ? __pfx__printk+0x10/0x10 [ 354.939381][ T5930] ? print_lock_name+0xde/0x100 [ 354.939399][ T5930] print_deadlock_bug+0x28b/0x2a0 [ 354.939415][ T5930] validate_chain+0x1a3f/0x2140 [ 354.939432][ T5930] ? unwind_next_frame+0xa5/0x2390 [ 354.939448][ T5930] ? look_up_lock_class+0x74/0x170 [ 354.939463][ T5930] ? register_lock_class+0x51/0x320 [ 354.939484][ T5930] __lock_acquire+0xab9/0xd20 [ 354.939505][ T5930] ? __dev_queue_xmit+0x22b7/0x3b50 [ 354.939521][ T5930] lock_acquire+0x120/0x360 [ 354.939539][ T5930] ? __dev_queue_xmit+0x22b7/0x3b50 [ 354.939557][ T5930] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 354.939575][ T5930] _raw_spin_lock+0x2e/0x40 [ 354.939595][ T5930] ? __dev_queue_xmit+0x22b7/0x3b50 [ 354.939611][ T5930] __dev_queue_xmit+0x22b7/0x3b50 [ 354.939632][ T5930] ? __dev_queue_xmit+0x27b/0x3b50 [ 354.939651][ T5930] ? neigh_connected_output+0x1ea/0x460 [ 354.939672][ T5930] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.939689][ T5930] ? read_seqbegin+0x122/0x250 [ 354.939708][ T5930] ? neigh_connected_output+0x1ea/0x460 [ 354.939727][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.939740][ T5930] ? read_seqbegin+0x1ac/0x250 [ 354.939759][ T5930] ? __pfx_read_seqbegin+0x10/0x10 [ 354.939789][ T5930] ip_finish_output2+0xd3d/0x1160 [ 354.939807][ T5930] ? ip_skb_dst_mtu+0x18d/0xb70 [ 354.939825][ T5930] ? ip_finish_output2+0x452/0x1160 [ 354.939843][ T5930] ? __pfx_ip_finish_output2+0x10/0x10 [ 354.939861][ T5930] ? ip_skb_dst_mtu+0x18d/0xb70 [ 354.939877][ T5930] ? ip_skb_dst_mtu+0x917/0xb70 [ 354.939893][ T5930] ? ip_finish_output+0x33a/0x3f0 [ 354.939910][ T5930] ip_output+0x29f/0x450 [ 354.939926][ T5930] ? ip_output+0x5b/0x450 [ 354.939942][ T5930] iptunnel_xmit+0x5f8/0xa90 [ 354.939960][ T5930] ip_tunnel_xmit+0x1c41/0x2390 [ 354.939987][ T5930] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 354.940004][ T5930] ? gre_build_header+0x3fd/0xa40 [ 354.940024][ T5930] ? __pfx_gre_build_header+0x10/0x10 [ 354.940043][ T5930] gre_tap_xmit+0x590/0x7a0 [ 354.940061][ T5930] ? __pfx_gre_tap_xmit+0x10/0x10 [ 354.940076][ T5930] ? __lock_acquire+0xab9/0xd20 [ 354.940104][ T5930] dev_hard_start_xmit+0x2d7/0x830 [ 354.940125][ T5930] sch_direct_xmit+0x241/0x4b0 [ 354.940147][ T5930] ? __pfx_sch_direct_xmit+0x10/0x10 [ 354.940169][ T5930] __dev_queue_xmit+0x1857/0x3b50 [ 354.940185][ T5930] ? unwind_next_frame+0xa5/0x2390 [ 354.940203][ T5930] ? __dev_queue_xmit+0x27b/0x3b50 [ 354.940222][ T5930] ? __lock_acquire+0xab9/0xd20 [ 354.940241][ T5930] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.940258][ T5930] ? __lock_acquire+0xab9/0xd20 [ 354.940286][ T5930] ? __lock_acquire+0xab9/0xd20 [ 354.940307][ T5930] bond_dev_queue_xmit+0x10b/0x1e0 [ 354.940326][ T5930] ? __pfx_bond_dev_queue_xmit+0x10/0x10 [ 354.940344][ T5930] ? bond_do_alb_xmit+0x600/0x820 [ 354.940362][ T5930] bond_start_xmit+0x779/0x1a10 [ 354.940384][ T5930] ? bond_start_xmit+0xf8/0x1a10 [ 354.940403][ T5930] ? __pfx_bond_start_xmit+0x10/0x10 [ 354.940423][ T5930] ? __lock_acquire+0xab9/0xd20 [ 354.940442][ T5930] ? netif_skb_features+0xa69/0x1540 [ 354.940457][ T5930] ? validate_xmit_xfrm+0xbf/0x1160 [ 354.940473][ T5930] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 354.940487][ T5930] ? __pfx_netif_skb_features+0x10/0x10 [ 354.940503][ T5930] ? unwind_next_frame+0xa5/0x2390 [ 354.940522][ T5930] dev_hard_start_xmit+0x2d7/0x830 [ 354.940544][ T5930] __dev_queue_xmit+0x1b8d/0x3b50 [ 354.940563][ T5930] ? __dev_queue_xmit+0x27b/0x3b50 [ 354.940583][ T5930] ? fib_rules_lookup+0x96/0xe90 [ 354.940597][ T5930] ? __pfx_fib_rules_lookup+0x10/0x10 [ 354.940612][ T5930] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.940628][ T5930] ? l3mdev_update_flow+0x4d1/0x640 [ 354.940646][ T5930] ? __lock_acquire+0xab9/0xd20 [ 354.940666][ T5930] ? __lock_acquire+0xab9/0xd20 [ 354.940691][ T5930] ? ip6_finish_output2+0xd4c/0x1480 [ 354.940712][ T5930] ip6_finish_output2+0xf70/0x1480 [ 354.940736][ T5930] ? __pfx_ip6_finish_output2+0x10/0x10 [ 354.940756][ T5930] ? ip6_mtu+0x7d/0x490 [ 354.940773][ T5930] ? ip6_mtu+0x38c/0x490 [ 354.940790][ T5930] ? ip6_finish_output+0x2ef/0x4e0 [ 354.940808][ T5930] ? ip6_output+0x126/0x550 [ 354.940824][ T5930] ip6_output+0x340/0x550 [ 354.940843][ T5930] NF_HOOK+0x9e/0x380 [ 354.940862][ T5930] ? NF_HOOK+0x101/0x380 [ 354.940880][ T5930] ? __pfx_NF_HOOK+0x10/0x10 [ 354.940899][ T5930] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 354.940916][ T5930] ? do_raw_spin_unlock+0x122/0x240 [ 354.940933][ T5930] ? icmp6_dst_alloc+0x3a5/0x420 [ 354.940951][ T5930] ? icmp6_dst_alloc+0x3a5/0x420 [ 354.940970][ T5930] mld_sendpack+0x8d4/0xe60 [ 354.940994][ T5930] ? mld_sendpack+0x1e7/0xe60 [ 354.941014][ T5930] ? __pfx_mld_sendpack+0x10/0x10 [ 354.941037][ T5930] ? mld_send_initial_cr+0x352/0x550 [ 354.941054][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 354.941068][ T5930] mld_dad_work+0x46/0x490 [ 354.941093][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 354.941105][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 354.941119][ T5930] process_scheduled_works+0xae1/0x17b0 [ 354.941140][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.941159][ T5930] worker_thread+0x8a0/0xda0 [ 354.941180][ T5930] kthread+0x70e/0x8a0 [ 354.941197][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 354.941210][ T5930] ? __pfx_kthread+0x10/0x10 [ 354.941227][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.941246][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.941258][ T5930] ? __pfx_kthread+0x10/0x10 [ 354.941274][ T5930] ret_from_fork+0x3f9/0x770 [ 354.941289][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 354.941304][ T5930] ? __switch_to_asm+0x39/0x70 [ 354.941321][ T5930] ? __switch_to_asm+0x33/0x70 [ 354.941338][ T5930] ? __pfx_kthread+0x10/0x10 [ 354.941354][ T5930] ret_from_fork_asm+0x1a/0x30 [ 354.941376][ T5930] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.851651][T12118] bond0: (slave syz_tun): Releasing backup interface [ 356.882503][T11836] bridge_slave_1: left allmulticast mode [ 356.888353][T11836] bridge_slave_1: left promiscuous mode [ 356.893999][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.902957][T11836] bridge_slave_0: left allmulticast mode [ 356.910437][T11836] bridge_slave_0: left promiscuous mode [ 356.916259][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.023053][T11836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.033082][T11836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.042729][T11836] bond0 (unregistering): Released all slaves [ 357.141836][T11836] hsr_slave_0: left promiscuous mode [ 357.150110][T11836] hsr_slave_1: left promiscuous mode [ 357.155917][T11836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.163969][T11836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.275221][T11836] team0 (unregistering): Port device team_slave_1 removed [ 357.301718][T11836] team0 (unregistering): Port device team_slave_0 removed [ 358.184095][T11836] bridge_slave_1: left allmulticast mode [ 358.189887][T11836] bridge_slave_1: left promiscuous mode [ 358.195631][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.204513][T11836] bridge_slave_0: left allmulticast mode [ 358.210342][T11836] bridge_slave_0: left promiscuous mode [ 358.216061][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.225099][T11836] bridge_slave_1: left allmulticast mode [ 358.230990][T11836] bridge_slave_1: left promiscuous mode [ 358.237061][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.245267][T11836] bridge_slave_0: left allmulticast mode [ 358.251136][T11836] bridge_slave_0: left promiscuous mode [ 358.257032][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.402490][T11836] bond2 (unregistering): (slave gretap4): Releasing active interface [ 358.410976][T11836] gretap4 (unregistering): left promiscuous mode [ 358.417573][T11836] gretap4 (unregistering): left allmulticast mode [ 358.679285][T11836] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 358.688381][T11836] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 358.699074][T11836] bond0 (unregistering): (slave team0): Releasing backup interface [ 358.708537][T11836] bond0 (unregistering): Released all slaves [ 358.719295][T11836] bond1 (unregistering): Released all slaves [ 358.732943][T11836] bond2 (unregistering): Released all slaves [ 358.820769][T11836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.830773][T11836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.840402][T11836] bond0 (unregistering): Released all slaves [ 358.897443][T11836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.907842][T11836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.917707][T11836] bond0 (unregistering): Released all slaves [ 359.013589][T11836] tipc: Left network mode [ 359.308159][T11836] hsr_slave_0: left promiscuous mode [ 359.314496][T11836] hsr_slave_1: left promiscuous mode [ 359.325179][T11836] hsr_slave_0: left promiscuous mode [ 359.338198][T11836] hsr_slave_1: left promiscuous mode [ 359.344075][T11836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.353517][T11836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.365980][T11836] hsr_slave_0: left promiscuous mode [ 359.372127][T11836] hsr_slave_1: left promiscuous mode [ 359.377951][T11836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.385546][T11836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.695313][T11846] smc: removing ib device syz! [ 360.045663][T11836] team0 (unregistering): Port device team_slave_1 removed [ 360.075283][T11836] team0 (unregistering): Port device team_slave_0 removed [ 360.193892][T11836] team0 (unregistering): Port device team_slave_1 removed [ 360.222390][T11836] team0 (unregistering): Port device team_slave_0 removed [ 360.274547][ T5937] lo speed is unknown, defaulting to 1000 [ 360.280486][ T5937] infiniband syz2: ib_query_port failed (-19) [ 360.973455][T11836] IPVS: stop unused estimator thread 0...