last executing test programs: 6m39.898282871s ago: executing program 4 (id=3076): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x54, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x54, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x10, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r8, 0x6, 0x2, 0x2}, 0x10) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x7}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x7}, 0x10) 6m39.723935557s ago: executing program 4 (id=3078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000020000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd0000000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf910000000000005607f3ff000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m38.619712841s ago: executing program 4 (id=3088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000ffffff7f00000000", @ANYRES16=r0, @ANYBLOB="0100000000ffffffffffffffff00002000000000ffa2c0ea3850125a3a982bcea58cde329df7915a7694f25de3fd878e9f3985d472f0d010e4143f56276f27aa44fa0bcdc957d051a6e9c183787ba17eebf5100a0507cdbd682e43bc621d31a814996a9825bd5dfa1c2eae31a0b6de7d881e95cdc21029b35767ac0c4833f1522191f23186f49263b8602efaa24ece073695f7f515bb1f918409947db95d3dd1a7ee3e6044471bbdfa67", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000400"/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200042e37ddd2a898d011f47360b1e0000100001", @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r0, 0xf08c, 0x2, 0xa}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000640)=[{0x5, 0x1, 0x10, 0x7fff}, {0x3, 0xe, 0x5, 0x8}, {0xfffe, 0x0, 0x0, 0x9}, {0xb675, 0x0, 0x9, 0x5}, {0x3, 0x6, 0xd5, 0x6}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000000206010800000000000000000700000014000700000000f51b0b853c000000068b05001500050000000500010006000000050005000200000005000400020000000900020073797a300000000014000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18027a0000000000000000003b000000950000000000000033040e4cf6a23e4cb12e4a60ae3fc50591b5ee15c1cfbcb92d67457fb0a38e3d898ea00b0008bcf8ebd2d58668577d43677b30a3c24afb19d02657c783138d76a01b5e7c22bdecac7475f45cf2fcd51ee53645ff4528dda8045e7ec4293c0784993be3"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r9, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020002000500000001000000000000000000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000b00000000000000", @ANYRES32, @ANYBLOB="ff03000000fff100000000000000000000000000b7369226d3866d3459b44cfd566abb7651b40ad151e5a340a7c792c40775a0744bd0f2d29545651371a5385068114a35087b705e2bf4c61c515268f9eba106cfdb8c19a1d38723108c0df76449f2c3609e3e0724c69ae9960299", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000500"/28], 0x50) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0xfffffffffffffc53, 0x24, 0x4, 0x70ad27, 0xfffffeff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0x5, 0xffff}, {0x5, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x80}}]}, 0x2c}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 6m38.508246898s ago: executing program 4 (id=3089): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1412c1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ee09e805020000f526d69ba8f47e7825302e1688c0594b0b5ac43e68bd3daeae2866fa013a9c446fec160d6cda9a5ccc03f2f101b41dd6f43c86ccd01c27e51da610343826ad685517ab7b74e4316366"], 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc41d6c9de4f40b08, 0x4, 0x5, 0x80000000, 0x1084, 0xffffffffffffffff, 0x6000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m36.469733444s ago: executing program 4 (id=3107): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000002c0)=[{0x0}], 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) setsockopt$llc_int(r7, 0x10c, 0x0, &(0x7f0000000240)=0x8, 0x4) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\v\v\x00\x00\x00\x00\x00\x00\a\x00\v'], 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000007080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4c015) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r11, @ANYBLOB="59cf00000000010000000800000014000180060001000d0000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x47}, 0x8) sendto$inet(r0, &(0x7f0000000080)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 6m35.872186225s ago: executing program 4 (id=3113): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x81}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x81}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 6m20.712951806s ago: executing program 32 (id=3113): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x81}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x81}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 9.015657981s ago: executing program 1 (id=5595): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x47f2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f06558", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) 8.287902355s ago: executing program 0 (id=5601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000300)) (async) r3 = socket(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.287269667s ago: executing program 1 (id=5602): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4002}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r5, @ANYRES8=r6, @ANYRESDEC=r5, @ANYBLOB="1f65d3d934a3e849de94b25010dec075710b0fb9bd42a8b2b9e920b9c2d84033eb25eec2259eca1a364daf6dde6d61742783b406ee40823ac7f024992dd4191416a382ae90285729defaefcf592582be6e4559b9d62f4369304b253b7c7227de08d296f86de03ee85bcd9ffb98c44ea2341e0ce3a13039e8aa5713ee26d701d6e0481140e3c09a9c2021111de05d295c31556645748b8b950d5647597a2d2de1567114bf1ca150ecd33f9462352d44e649f40ebe467c0104242f2a77", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x480001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r10, &(0x7f0000000440)=[{&(0x7f0000000040)}, {&(0x7f0000000300)='\x00', 0x1}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x5ec37000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) 8.092514234s ago: executing program 0 (id=5604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x1001}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x60000090) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r6) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.091609871s ago: executing program 1 (id=5605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x7c}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c0010800800024000000007"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000400)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_LABELS_MASK={0x8, 0x17, [0x8000]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 7.886502727s ago: executing program 5 (id=5608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000000)=0x3, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140), &(0x7f0000000000)=0x8) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x75, r2, 0x700}, 0x38) 7.70757924s ago: executing program 5 (id=5610): r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="020100090f0000002cbd700000000000030006000000000002000020ac1e01010000000000000000020013000100000026bd700000000000030005000000000002004e22ac1414aa00000000000000000100140002000000040002"], 0x78}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x44015) 7.573288465s ago: executing program 5 (id=5611): unshare(0x8000400) (async) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0xb0}]}}}]}, 0x4c}}, 0x0) 7.52289317s ago: executing program 0 (id=5612): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000040)="1f63c913625efd389f28eeafec04aae7b57936fba0bcc13e50bd041c2d748536071d056ac4c007efca7fc4f66f60daf203adbc6b6fa0b9bd873075d9ce443c42df55", 0x42}, {&(0x7f00000000c0)="c0e2a4ccfcfb2e6bcf9297b1494e3f704792d7186a966ef6cad1431e310a9f491b5c21110bb9e5efd042dd82f6649765e36638cdd54a447469b28f1eda1c1bec63d84567a0737fb1487a02233a3e161c6baa8fc2121bf7e7f68f610363ca7708e4dd14c60f4f6a6148952ff2c7a8b4408df5d81e", 0x74}, {&(0x7f0000000140)="66120eeb409a35c70cf89e872d7e9f7b56ee12b26c35b3bf2948179857ce25f3fa9d442f2a3cd900145103f45563909980e22d131a886436aeebbe9acae3587c63b68fcd4d97c7f3ca74900291dd4e03bd89e80239c74693e9", 0x59}, {&(0x7f0000000280)="8c6095d884735f0130a57351c6e0f067ed5db170f445e5e1a893423ec5919a4681b21d28e0c72b8a7194748a9ad04a80bc72e1be951e5ba2d5f618a6a8675a2ace74b9e9301e69a6c403fbb3b8c320b50947bab2ad7e7f11a81c37ddb468c16481ddb604e7573438726368366e6f64fdbf2862debacb8c288789312e76acd70e5ea83e47c3fafc19093ff2e22b8c30b697ce2156fcfa08c0cdb74b4bc45a03aca3b38bf47a6f079055323e034113f6e0d4ad4a3b333a442f70", 0xb9}, {&(0x7f0000000340)="b61dee47609cbf73df326c7f5765326651be085e0a329e069f732a8228d0aeebe88ed02409c62c3c108d23d1b71d2e21d339aeb4b18a8dd05d033c8d61d534ca9633fb", 0x43}, {&(0x7f00000001c0)="9d27a75e797179975f18bca5b906b326d4dbf19c0088b3761daf5266aba5e04e7d", 0x21}, {&(0x7f00000003c0)="8f67ee530c8d0a729d9433ff1b4ead52a73be51325159cbcc4606831a1ced32e607a069e0a7a04a59ff952bd23a5edda051e20fbfe9b70790270730d63e72632b5872ead87fc9ebc588be446d42564c14937e52fcfd7d7282cec2e35023122f60e6c7e0f5da6ef5850a40a59d6a9175592ae62587f622abd6348212d3d1820cd3d27f2d8569567217c15b85d987ac5bd4d8a86b9caa4e7a74bc4b61ef1bea4e5ca620a8cfea5a68f6356e8d41b70bc59348fb9967c4fd2fc4dca71262a86fc2fd42ee5f347b7cfc5a2963459", 0xcc}, {&(0x7f00000004c0)="a6bd159960d26fafc911cd9100e4f3e36bee7c27979d40c335ba28f2d09cf416b910e5a72d568960d33d11d5d819cf7836cc2bc48c773201555b010871e8fe1504dfa9f05289bb79c90c67788b7c7e053c1ff4d3ad07ef8a2dbf563eb7345e57bb319a424d31f3bb2b5f2c5ae896a8184cdc35c3944cc57c60e1f0ce257d582c0c145d1a71", 0x85}, {&(0x7f0000000580)="3902d93e016fb4ed8f4bbbcc5aba6aa821a9e85e10f3974f7d99e36296b6050e49821f18c34207c780fc57b25e0c37264a736c8fdce0ea96a0dee54429b50bfe2886fef36e6180d1f9f5bfedeff039134ba50bec19fcac8a310e52ec3cbb74527d9dc2ff261cdf6bb9723eceac79a7db02b3e598937c268004efa2e5313f0c12d371464abf4eabfd8c361247d8", 0x8d}], 0x9) 7.431776123s ago: executing program 0 (id=5613): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x68) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000d00000000000000000000009520000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874", 0x1a}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)={0x14, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 7.419711041s ago: executing program 5 (id=5614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x27762807ea17ea17, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x6, 0x6, 0x5}}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140102000000000000060000000079df00000000000000000000000063a7c1b1d484baa15650463fef49c757f2e584ff6958ecd7ac12c7a2148a157c7b"], 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}}}, 0x24}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 7.007554812s ago: executing program 1 (id=5616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x3, @loopback, 0x5}, @in6={0xa, 0x4e22, 0x6e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000000)=0x5, 0x12) sendfile(r5, r4, 0x0, 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xdfa70d62c201db95}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000002", @ANYRES16=r7, @ANYBLOB="040027bd7000fcdbdf25180000000a001a00ffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0xc00}, 0x20000000) r8 = accept(r2, &(0x7f00000005c0)=@generic, &(0x7f0000000200)=0x80) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f00000006c0)={{r8}, "4e4d6ffd4a9e35db4e86694ea5ed53c21130d1327699112dc527762039d671dada0472bb86dba7dc5acf7ae90a017f6c4f84040847edaa842e5bb03a719e968fdf7a80eabb27fad2bc9a2560c4d4907d39f0511b5a74632619e3537ad5719659bac05468bd2172041e3c4fa7f278081da88af3257bfe241801e6b3b30df4799f266d0490929602475e52da3ed014a1626c2ad3adc4a83031471c36c131bf8528fc47275ce59a776094495e1e71e4f80ec5a116d2ac991a2957d03a5715d26d2e038ca9c258a2e21b47e9ec7207850bf1db62e193fff824cbb968827f04a1bd7dc239330dc145ad6fe0492e0b943258c46a4e503cdfc00098c79b887a0bc0bfc6776db921e9e5edc027f24e886e75b0c20d05d15e6aa9aae75cbeeeae6aed78b6e3800f92095e46e9ff058a1806d0096876ce0f063f537a7727a4c3f34851592018a4eb0ad3338bae42e14747ac9230dda36243f7461c39e1ca20e0822661fa4327c17f776d03689c92efca3ddc1e306c3e3b4d13a4748d950d54b077b701a58bba42a08c01f972e218358ada048fc1ae47726a5e4b0bc79acd240fb06b3fb7e6e06e7f7f19ba2819c70644a93573721403f9f4fcfca0d6a4e75e85b76f354c7454796daaf9a71fff35112fb39b042e572748524a5f477e5bd46d1467d5ba2b328ace07ec3d9a8bb21333d229cf1b7064a2d86b077d8e7ca7b9835787b438069095a8fd02e77c21f47b75507eee24362ab70f6d2ca79678e7926cd6910db428ebfe7444f9144a946bf9a476b306606858560af2dedd95e64ec439fbc8dedbac0ade09b8cbf205d044b9416f51457f1967fa4fb20e4cea946a9d77185936a6ba7f2b12608d967cf88868336f85707a230b74f9f4f5107f302ec3081004144df90a71b1f6d4ef4b51e765873eba78376ef510bf4be879ac7ea13dc96ffc789a1fa029c75d258645dd8335f385d485fbbcf1d7318adaf37ce141fd1a81191bcccd2cd45862b11e6fa4f4e0360578307853f5fe479ee9a81dc021e5e9c43da714a354c52cd9e4e0628edcadaeace57b771c985d5d7ccb946ecbd2ce4af403e954446dabc93450a2f5ee11f018a1c86bad46cc31ac7aa99c01a578c5b6cc65505b533ab661d2c6cf89b2c0d07edede1618a6044de00844f139154ed47b247a55c4de2a928918b4248a04c698f2448ffa36a017582f45978cf29e97df41bc7b12054591d4b4709bf43aaabb5decff86cee669c785fd71ca374064544656e1d973e830068c848cfd5357682f334d2117d41db66fd980b736286ac2788c297b860cd2578799fbca1e1b045bc08385101b8ea978c2036dbfa441c026a8a41576ab35803fe4b256a8f8dd5c197431c7585d384b380c67226c0626ab05b14891aebd79d5040e389ed3a0e31bffd85670c3c8cc68c3ebc62f8b24efa8fc5c00bd5f1724335dfd07dddc9586bd8793d912f329775b694866a0c631f1789ad67076cf11feb8219a459f577350bb01db8af46968697eb37b8209ab320d4de5862ee5e6b498414b30d255cc45de7deb2981a6a4f396c5288003fd919642a132be4aef7af9c801c635bf56312c14ade71a0d2fbfaa9f492ffda142e018316d213d28337d0d3bf7d1683bc9f78515cbab5df9bc0ae83adb4187117e6269933aa52c682f16fff281279578914ca93cf8ae7cbafb7ac006263952d64c0a1708af6ff9379bde46c24928a4d563fa55203a488edb149be625598bb4dea74cb9770d8adc7d42cc6cab3156aabd5ef65b5177936a39874c27f5e8ca14ce83864d4c61bd3da2c66c3b63ec08ecb22454116acd2c32508591e413e124352e92b7d01268ff85ad5b2c0ef644873ea0c851e4a0956c7b0c76eeff8a52ae20e2e389009110dce7c44e32107d0dd378a75ced8b949c299234daca622bb5daa98d4e2061b4a950ba7376aa8e48db32d44a374e338b31b223d6ecb7e5a60ecdf8e139ffcd2eb926acd0da941006f383e55e7308b0a1e42df2bc07119426e1fb1f48440ee9bf2b1a80d81e375fac1806d310293386f397013d1fadbf1036939880c4be28d89cda8f8dbe76768dc54bb70e0646e7fe51b36bcce53722ad2d2c10ada1472e3195858f8ee5bded0ecf566017386aa4a010df3cbe2a9f59a18a62a02f2a74941fc514ef1f93b40d58f94c6f640f99a2a251a72140c2b2e2fbe4dbaf0b5a72c896d29076d148c631c76552c6d78cd78a942c2bdc304d06b865592e51ef600ccf7790a547b50cbb3468d58e61e6beb6836c1b90e933578717ff7840f89aa83381dd3491f92a4f94f1ef9689b2e2866ae4a61e3c3c29cd67a022eab223997511683fab26072299a5feb69ec8a9129738ad50893095b0a13a42fe8fb96e06ee09a516fd876a5bd7a2bbaad67212ce74158aec66aa549c277d12ce25d59909d1a2c0752825554b2d99a78711fcc958d6f6eb3c8583f49dbc7d2016d6f4495951e75e196c73f0940063455ea4ff954c7798cd43fd41e2894bf0a627ea10dd71969ad337dab60ca5ed409e4c22b1f819c0771ed1177391a91b0e75147e339f45b11ab0ab51c1a059dca1f9a5440c7f846f54c7e9d11a1f51e5e3ac5620f006a47ed89001a1b6085a7319736496b0d90e4d576820ee2410813c58e22950a0a3306a4503d0cdd8ce8bfac4c27beb802dabbefc45ebab60c349b0e07805d0bbbee1743d3af60f1ec1ea84fa75966771f0c462c6f509d518a1149888a588094ce88cf620383e60661759ffd34abf0c62311662dc953ab227199f35a105e760b01ba01d95763e96b665c712d10c5ba957aae34120d54ba6da492c38e57f4e96dff5aa91d5c419f6ac30c577518e260959daa7cc599700fd9a65ac9b12f76c409f1edd9085818c6e18c2bba78350533ff1e4ee9bc921c7cfdbf42c53ac51d4dfbb32bcd8e94fbaaba7014f1f929b3b5f3641a58c9918025ebd8d8691ff4e26d154ba21cc9d865d6e60a9050fd2f27cad81083e0e2378a1e0de7532f9ccbafec737df0483e2762d35de44a3364ab1db76bf05b3c90ce75477ef19913edcbfa7569a8c871d8693177c21310c0fe1a7de5797934bb9fed26621eb4f0ef13d5fcfc5b86150d0313e86af1dceaecfccf17a176a33a7427a8d54cf4a9a6fe017d2c30004fcd949e3bac9ccab51683327909b711392a20a013c957ad3e0322eb3f4f60dcdf11ff4aa5f8171aefde2d1369b1e1640f18ce33f264d498b5dd2ffb9501de0785fc9b17270948768f63d4f57bccdde526e93f31a71e837c3b5e939b9517528d8fbb6905b3f4aec252721c5fa3463d1a81308b3c326d53ea044becc40a87230a98f938debb285754f518ee9d75df22566a131ba99e1849f51e9f5f6b6f9dc8d8bf29fd9e25b5357ed8462739819ddafbf51a07ba1b38da1c6875fb1ac5f300f1505b6cd79b739161849f632378103b4d61ffbdce46f64329b7316efbc37c8ce5e3b122349ff741d2946c22865a2f5809ec7aea839522dabbf9e0b06b1f6411abb9a9eed454a5b2d9dd69433a392be442eb0bad68ece652990f40149ac2c615730f406df45f74bb43cbd642da4495b68fd9154e6eab3359a13c2966b77bea56affcce8ad1c7d87b461e55da54a795c7f118ec2a546ad22bba1072bde543f1d7efaf28b296959079e9c8ac8bb4514facdd3bc3cd666a7e62435515f064548ca42c653a5de77dc1d816e65bb105b67b2cb0a505cec24ecb01fdafbeda0e1439d92444431b73b25509c610d9078460939cd72798e69fba92a2f4b19d70fc46df998e17c298aca5c5f34a315a7f14de7be6651bb914fe67b16f7a39edbf5805d53586ff7eb986342ddc4dba183e9e138e549d79d4a359ceae052925c3f8ee263692c5fa24a901e67880bef63d556b88d6c011f6e64aad49ac24b472e1470f24be958d0b6cd4069a64b875b9c03e3f18a84f9ea7bad05b2ac1937034bafa28c740e14c94e62862471635268c191635cf1d60f9ea60e623a714cd14ed0c675780e7a617cebd8a65f0f79ce0d0a3a536ff0b030119cfd8d65ffd3da7ecfb97baf3b22c7bff3b0e735e7199422182396a2635f0a345337e404c526a9df4065746078472a2bd401cf5cb9731915184a445daf22ef01d8374c28245c13524a464ac9bb3212c8280aeaa945954f576cdfd143283ea2acea2fecb09f9aff7861e2e79abf1767f6e4487c026bf165493288b2537383baf9a0b1847ae8e12faed19739e3bec5703c76772c90f042ced6f5cfd8a8c013287e001dec44ac094e934e1581b5e89c8106d63cdd620eb0da943d614cf2f6ffbf77cc93b2b0ced8e6fa728cc01bba59e334fc9ff70526c9437dc573154482f4addb77f69bd8511c22f174c842599e0c91aa3c9353ac969eeaa8e20469073652a81136c26775c53909c20f54e680d147e025187c4285b1b30f98e3fc5ec40ba31f5813d99a9b6a822c57b8839a5447ce5fd61c0054628b7a888e3ce6b0eebdf858b9ee79487c7f75152041f69f837a2e1ce28c01a1a530c2f99e1a058c5fc48905ce05fe7092906acba1b772251a0e6a05f652c8a6c9cd21086533713d4e4c8b22b852d16d68b28bcc6136d26af6f006c7ff2b57edaaca85433c3e49de421c8b37eacbe073d5bb1f8de7ae059445a158f5a5a78ae848a3e0ac643a406269744fed3d97252359790554797033e1aa464f6eb66365f6f48d93b3887e5b6df8000430817e323be2e6795c9fbd545678aeaf534f25081502615d0b86c6ca80d0c59f2c000ee768ed6ee1e618bd53f6b5f08f235fdf772c0dc04d94a5c6f2457104ca325bd31d2eee9ee8b75a488588d2d31f6d6ebb99fd0bfebdeaeee81be08c2b576d05e57e3bc5ae5dc85854b15fbe691f74449194d957f64d831f5b95668f34aa3fb8e01967a1790b41c95795b5c7818b48f87fec3458ac258ce4c44d14887a189f582d37cd6cf0770049cba8d2b69677b7f6ba212d27dccba0e4ac7b2f1918e0079f3678801107ded78d82891399752f5460f4b589b86b0a77fac77f48bc844305dfd4943a87e2a2590d4722db2281dc45d18614278e4ade4f86012386552d00480f68e8dfded6bd418520b73e2cbe7040a7f8abc32b24b44f526e96fc168cd72d546d114cc10cb0f05a9b4880696c47a6023cec4a769d497623790946edb5b006eff29127fae5a7480731860d00cae8ff2efaca2254b8e1667cce5dca0ac681fae46556724f2721af5fb62b747e99bc01aa99392bd1649805ab5cbeb996101131aa07f8099f91ff109273421537d714cf5735239f185589a425c5b55ac06ba1e45bd21a889fdad87c44685fa25c57d9efbb59829959e678053d2f7b9790aeee30a570029ead9df1ece2da4bffaa4834c294a0d81db1d4017cf1930ee8d7227bfe5a5e6548192337ab2e6cec9a5627893a58a87b5d08a9eb088d7f857127aea39598a2f47cda19163f85586c19765cf4ff74675592aa631af980cefefa5bb7f65a0b876b807e4bb29bfe5703db9e6f817cd4de555aefa2b8142b9afeb1f4b859843e275f45c37cf1c2e6575bb38c3c24666a54e886b58d992fc6629f7f0d04fa697e6136ad08cd158124d024d678b91ad120ed7b59d3ac33a7762a37fb3a1dc5bd0f9102269ab34ab1c3ff5374aa25347010223405c9ec26a5d785b9b31a010970a27464123d010ce4edaa4e882edfd80f9ff5cf25865cc5c6646048ebcdb3c5dfd43a954748b6afd15aef8e3900b02233c1394a5a94fb2011487741db335487eda3ae087a97bd15cad48648d66a626b747d4693bef43eaf1b707b81"}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x7, 0x1000}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) close(r3) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x6, 0xffff}, {0xf, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4000000) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0x2, 0xb}, {0xffe0, 0xb}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 5.016366855s ago: executing program 2 (id=5617): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x21, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1}, 0x0) 4.969426149s ago: executing program 0 (id=5618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x2004a041) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @mpls={[{0x5}, {0x800, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xfcf, 0x0, 0x1}, {0x51e}, {}, {0x7}], @generic="4058b1e687ee112ed98381b66a9a57208da95f2b7c16b58c8c3c0c95f68ce11849bdddccf2e853b83d3c974fab173f947fbd1160d8b2d664b7f5b0f94ce37d948f5d2057b7003bec507a3774e1be068433f9f86c1c0389c2381c4a72da8bb0a242330d1a6f59b5d83b07cd3fc9b80c227d67ccf17a7b34bddf9d8f6f28b546bcd89eeaeef92a108b5b48c864d4fde258ce1cadbbd38c54a474ef6c648b7a6d22086719daba76ec2e128647112c81b987ce83ce61b4f4f99fa2b47db24d4f70fb6934639c5dd513ebf1fa89d942f4492df07919135d176b6c964eb97ef283ef2fb828e898c4dc11890a466c0ab7ba"}}, 0x118) 4.872047051s ago: executing program 2 (id=5619): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 4.871223325s ago: executing program 1 (id=5620): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008848"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0x9) readv(r4, &(0x7f0000000b40)=[{&(0x7f00000002c0)=""/143, 0x8f}], 0x1) (async) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32=0xffffffffffffffff], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, 0x0, 0x20000000) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x7) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRESDEC=r8, @ANYRESDEC=r3, @ANYRES32=r0, @ANYRESOCT=r6], 0x60}, 0x1, 0x0, 0x0, 0x20000881}, 0x40004) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010300000000000000002b000000080003", @ANYBLOB="080003"], 0x24}}, 0xc810) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) (async) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x5c, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x3}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0xc, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x1cdb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r13 = socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0) 4.867422026s ago: executing program 5 (id=5621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000001200018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd0000000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf910000000000005607f3ff000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.700423441s ago: executing program 1 (id=5623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x1fa, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x400000, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x5, 0x20000000}, [@RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x44010) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000680009032168a760aae2e6bcf800000000000000000a00000000000000040004000800010001000000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r8 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r10, &(0x7f0000000080)=[{&(0x7f00000008c0)=""/4107, 0x100b}], 0x1) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000100)=0x730) 4.166359995s ago: executing program 0 (id=5625): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000f1ff0b0000000c000000080000000f0000000000000802000000000060562e615f00"], &(0x7f0000000540)=""/244, 0x2c, 0xf4, 0x1, 0x6}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x1843}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20008080) r5 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x815}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000009000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f760436ad44b24cc5fb60825278bf4e600000000000200"/47], 0x48) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x0, 0x401}, 0xc) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="0f024a3bb690944e3de505d3fced17aab3fc6219c223664b375536c43567b24217e7515b6bcc37c8ebc93e44706d388af11f89fff5df3f3c79372812dc95f7b1ca96c12eed232568f7f9b84cdbd6ababb6ca215ace17674ec1a8a30fc08a9a897aea8220c07207c0e46eaa8c6bdd844de199c51e5083a17f977bed486827cba2971472aa5a2ccac93df1be76a576f791f9778e8342e35eea79baa2da394b8f0ae40682d3742748724a2d0d37a2c0b553f44ba8f211424765f8fc7ed0f78991b14b279f736883abe88d1ea836732a28bea1b3f719361b672e68a1839eedc67915707fcede", 0xe4}, {&(0x7f0000000a00)="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", 0x4bc}], 0x2, &(0x7f0000000000)=ANY=[], 0x58}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040400) unshare(0x62020080) socket$inet6_tcp(0xa, 0x1, 0x0) 3.834701058s ago: executing program 5 (id=5627): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000680)={{}, r1, 0x10, @inherit={0x50, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000800)={"c735ef7637431d517b6bc2e10cc50a00", r1, 0x0, {0x2, 0x58e}, {0x3ff, 0x7}, 0x7f, [0x86d, 0x8, 0x5, 0x0, 0x400, 0x85, 0xc0000000, 0x8, 0x5, 0x1, 0x22, 0xfffffffffffffff3, 0x6, 0x100000001, 0x1, 0x5]}) unshare(0x62040400) unshare(0x44000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x4}, 0x8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x2000c090) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="b8a18c275218e0c9", 0x8, 0x80, &(0x7f00000002c0)={0x11, 0x1, 0x0, 0x1, 0x81, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, 0x0, &(0x7f00000006c0)}, 0x20) r10 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) sendmsg$sock(r2, &(0x7f00000007c0)={&(0x7f0000000200)=@phonet={0x23, 0x3, 0x4, 0x3}, 0xfffffffffffffe49, &(0x7f0000000740)=[{&(0x7f0000001680)="31674d0bece213a81467e3c9e64aed237857160f1b9c7c8f4433ab0c40eaae6f369e54e7bd943ca8fc81161ed7fb0d9941cc67ebca737353956d080b4df47ad0d8c8e82c2a0eb48abcec3d92f308afabfb7b8ddac767116c7476a2a7200dd29e2c1973dc12961145f58e6bca55dbff164ccb7eab8333037e3ed90aa5e956ea27c0b446e071aadeb8b883da0339346383bcbc442933429d2f34ca0d23e25eb1044d1709037d459e60d42c6c54eeaa35b1926d510845e3eb43640f3669ff16a5d97ffff98bf57c9dbec392ac901186273f29180389740fc15cc92f08aed85810a8d1788e014316fcb739b21f", 0xa2}, {&(0x7f00000004c0)="58127eda8298dc5f84d4e1797f88702f90d9590d446203dd00198e47b9861e4171323cd7f7988fee63aac9b7eee48b1d4a3880123457cacc171d1480d4f16552841678b5d8b5f64b1b865c0db96e3ff6504968c5fa5484e3f6bc37811f34555b8a7f9dcf697f63344cd59f7a67b28d242e3dcd6820abbacfac4e", 0x7a}, {&(0x7f0000000400)="03d53632bcad824f400706e6dd1fdd5a89313a777e8c0042815e220fe185137e2ba4ca87", 0x24}, {&(0x7f00000005c0)="81765392619ec47b89f25945958f413662274f13be08ddf086ec7e31dfdea784f1428689523097791dff6d8a809c5a8c1c3394a6862f714575d0102a4ad4a031fec0c56e582c10ea30123c00ce81d974da74a47f8fa299f0284aa37c7ac1c7afb56b0d6ee500e602541e6d4b76a755bfc57472046b372bf95c6c10b38125d747b649cfdf26f1e33f84374d3aa3f78bb7b57fcb1284fc8bf5d33cf059761fd755a14fe6efa93d7a646f1bfe69d4a58c0ebd715a0fac1e3bfbc00d20f60abc342138107cf73942db3144622d2c47bce7eadb556177dd603d83434dfd7a47a795e3783b47375ef182b61e65ee84a6685b016a0dd444aee25f", 0xf7}], 0x4, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0xc}}], 0x30}, 0x4008800) 2.550836466s ago: executing program 3 (id=5637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000001b00018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd0000000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf910000000000005607f3ff000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.507545678s ago: executing program 3 (id=5638): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) epoll_create1(0x0) (async) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002240)=@bpf_ext={0x1c, 0x1c, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x3, 0xf, 0x8, 0x5, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x9}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000001480)='GPL\x00', 0x10, 0x64, &(0x7f00000014c0)=""/100, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xc113, r2, 0x0, &(0x7f0000002200)=[r7, r8], 0x0, 0x10, 0x101}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002240)=@bpf_ext={0x1c, 0x1c, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x3, 0xf, 0x8, 0x5, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x9}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000001480)='GPL\x00', 0x10, 0x64, &(0x7f00000014c0)=""/100, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xc113, r2, 0x0, &(0x7f0000002200)=[r7, r8], 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000400)={{r10}, 0x0, 0xa, @inherit={0x50, &(0x7f0000000380)={0x9418610a891695ad, 0x1, 0xffffffffffffffc0, 0x9, {0x25, 0x4, 0x4, 0x2, 0x9}, [0x6]}}, @name="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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x5, 0x6) 1.427705324s ago: executing program 3 (id=5639): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff00000000711050000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x1, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "5150db981d957d"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001c00)={r7, 0x20f145d4}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x3, 0x10000000, 0x8, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.298006282s ago: executing program 3 (id=5640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0xc129c01bc9df6690) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400000}]}, @ssrr={0x89, 0x3, 0x77}, @generic={0x86, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044064}, 0x20040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x17, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f330"}}, 0x25) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0xfffffffffffffffe, {0x2, 0x1}, {0x0, 0xf0, 0x1}, 0x2, 0x2}, {0x0, 0x14d1, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, 0xfd, 0xfe}], 0x40) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 951.433006ms ago: executing program 3 (id=5641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x77359400}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 831.178995ms ago: executing program 2 (id=5642): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000582000/0x3000)=nil, 0x3000, 0x0, 0x8033, r2, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) 667.987473ms ago: executing program 2 (id=5643): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x40, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000040, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0200000000000000"], 0x18}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELFWD(r5, 0x89eb, 0x0) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f0000000380)}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000200)=0xfffffff2, 0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 403.261118ms ago: executing program 2 (id=5644): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000180)=0x4) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000100)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$packet(0x11, 0x2, 0x300) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x8, 0x9, 0x3e]}, &(0x7f0000000000)=0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000800010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000014000000110001"], 0xe0}}, 0x0) 244.354497ms ago: executing program 2 (id=5645): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) 0s ago: executing program 3 (id=5646): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xfffffffffffff4d5, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}]}}}]}, 0x40}}, 0x8000002) (fail_nth: 13) kernel console output (not intermixed with test programs): : 132 bytes leftover after parsing attributes in process `syz.0.4017'. [ 708.404036][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'. [ 708.433593][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4016'. [ 709.047279][T21603] wg1 speed is unknown, defaulting to 1000 [ 709.098288][T21603] lo speed is unknown, defaulting to 1000 [ 709.516549][T19432] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.532198][T21641] openvswitch: netlink: Flow key attr not present in new flow. [ 709.546459][T19435] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.557040][T19435] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.574501][T21641] netlink: 'syz.0.4039': attribute type 30 has an invalid length. [ 709.584445][T19435] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.573497][T21710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.627203][T21716] __nla_validate_parse: 10 callbacks suppressed [ 710.627223][T21716] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4061'. [ 710.643016][T21716] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4061'. [ 710.691920][T21710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.779592][T21710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.806590][T21723] xt_cgroup: path and classid specified [ 710.914901][T21723] wg1 speed is unknown, defaulting to 1000 [ 710.950287][T21723] lo speed is unknown, defaulting to 1000 [ 711.040680][T21710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.155081][T21728] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 711.327063][T19433] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.360845][T18880] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.410885][T18880] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.448902][T19433] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.767681][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4069'. [ 712.343366][T21752] team0 (unregistering): Port device team_slave_0 removed [ 712.353615][T21752] team0 (unregistering): Port device team_slave_1 removed [ 714.107221][T21769] wg1 speed is unknown, defaulting to 1000 [ 714.132068][T21769] lo speed is unknown, defaulting to 1000 [ 714.170138][T21780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4075'. [ 714.225830][T21780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4075'. [ 715.093445][T21823] tipc: Started in network mode [ 715.101972][T21823] tipc: Node identity 0ac4c30f2ab, cluster identity 4711 [ 715.143441][T21823] tipc: Enabled bearer , priority 0 [ 715.147294][T21826] netlink: 'syz.5.4086': attribute type 2 has an invalid length. [ 715.165628][T21826] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4086'. [ 715.167046][T21827] syzkaller0: entered promiscuous mode [ 715.202242][T21827] syzkaller0: entered allmulticast mode [ 715.239171][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4087'. [ 715.270350][T21823] nbd: must specify at least one socket [ 715.288990][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4087'. [ 715.320675][T21823] nbd: must specify at least one socket [ 715.376989][T21822] tipc: Resetting bearer [ 715.413224][T21822] tipc: Disabling bearer [ 715.484403][T21837] x_tables: duplicate underflow at hook 2 [ 715.572901][T21842] netlink: 'syz.1.4090': attribute type 21 has an invalid length. [ 715.580949][T21834] wg1 speed is unknown, defaulting to 1000 [ 715.584073][T21834] lo speed is unknown, defaulting to 1000 [ 715.590058][T21842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4090'. [ 715.717353][T21847] syzkaller0: entered promiscuous mode [ 715.733123][T21847] syzkaller0: entered allmulticast mode [ 715.839631][T21847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4093'. [ 716.364439][T21875] wg1 speed is unknown, defaulting to 1000 [ 716.371326][T21880] netlink: 'syz.3.4104': attribute type 21 has an invalid length. [ 716.394170][T21880] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4104'. [ 716.451736][T21875] lo speed is unknown, defaulting to 1000 [ 716.471598][T21891] netlink: 'syz.1.4106': attribute type 3 has an invalid length. [ 716.500212][T21887] tipc: Enabled bearer , priority 0 [ 716.576842][T21894] bridge_slave_0: default FDB implementation only supports local addresses [ 716.654669][T21887] tipc: Disabling bearer [ 716.752558][T21900] delete_channel: no stack [ 716.763342][T21900] delete_channel: no stack [ 716.778072][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4107'. [ 716.907050][T21898] hsr_slave_1 (unregistering): left promiscuous mode [ 717.090304][T21916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4112'. [ 717.112508][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4112'. [ 717.150357][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4112'. [ 717.243166][T21916] veth3: entered promiscuous mode [ 717.439876][T21927] bond2: Unable to set down delay as MII monitoring is disabled [ 717.452912][T21927] bond2 (unregistering): Released all slaves [ 717.844182][T19433] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.876832][T19433] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.087368][T19433] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.279421][T19433] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.671973][T21976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4130'. [ 719.398687][T21995] bond5: Unable to set down delay as MII monitoring is disabled [ 719.413989][T21995] bond5 (unregistering): Released all slaves [ 719.780403][T22026] netlink: 39 bytes leftover after parsing attributes in process `syz.2.4144'. [ 719.812925][T22017] wg1 speed is unknown, defaulting to 1000 [ 719.827391][T22018] wg1 speed is unknown, defaulting to 1000 [ 719.840612][T22017] lo speed is unknown, defaulting to 1000 [ 719.859032][T22033] batadv1: entered promiscuous mode [ 719.970687][T22018] lo speed is unknown, defaulting to 1000 [ 719.996723][T22037] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4146'. [ 720.919370][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'. [ 721.214630][T22087] @ÿ: renamed from gre0 (while UP) [ 721.437980][T22094] syzkaller0: entered promiscuous mode [ 721.461049][T22094] syzkaller0: entered allmulticast mode [ 722.307205][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4173'. [ 722.318876][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4173'. [ 722.389912][T22151] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4178'. [ 722.390290][T22149] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 722.439834][T22151] netlink: 'syz.2.4178': attribute type 32 has an invalid length. [ 722.669736][T22161] ip6gre0: left promiscuous mode [ 722.677099][T22161] dummy0: left promiscuous mode [ 722.800765][T22168] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 722.902167][T22178] syzkaller0: entered promiscuous mode [ 722.911883][T22178] syzkaller0: entered allmulticast mode [ 722.963528][T22178] x_tables: duplicate entry at hook 3 [ 722.974175][T22126] xt_hashlimit: size too large, truncated to 1048576 [ 722.991964][T22126] xt_hashlimit: max too large, truncated to 1048576 [ 723.065054][T22126] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 723.093270][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4186'. [ 723.352383][T22197] x_tables: duplicate underflow at hook 2 [ 723.380227][T22194] bond2: entered promiscuous mode [ 723.391050][T22194] bond2: entered allmulticast mode [ 723.407144][T22194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 723.863810][T22223] wg1 speed is unknown, defaulting to 1000 [ 723.879602][T22223] lo speed is unknown, defaulting to 1000 [ 724.239773][T22238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4199'. [ 724.250180][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 724.294680][T22240] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4200'. [ 724.416844][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4202'. [ 724.439345][T22245] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4201'. [ 724.459156][T22245] netlink: 'syz.1.4201': attribute type 10 has an invalid length. [ 724.467524][T22245] batadv0: entered allmulticast mode [ 724.473108][T22245] bridge0: port 3(batadv0) entered blocking state [ 724.506060][T22245] bridge0: port 3(batadv0) entered disabled state [ 724.589173][T22245] tipc: Enabling of bearer rejected, failed to enable media [ 724.685792][T19432] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 724.695502][T19432] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 724.703691][T22245] bond3: option arp_all_targets: invalid value (18446744073709551615) [ 724.762775][T22245] bond3 (unregistering): Released all slaves [ 724.893328][T22269] siw: device registration error -23 [ 725.074682][T22279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.087825][T22279] bond0: (slave erspan0): Error: Device type is different from other slaves [ 725.335703][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 725.377140][T22295] netlink: 'syz.2.4213': attribute type 28 has an invalid length. [ 725.508981][T22307] wg1 speed is unknown, defaulting to 1000 [ 725.518160][T22307] lo speed is unknown, defaulting to 1000 [ 725.855032][T22319] bond5: Unable to set down delay as MII monitoring is disabled [ 725.864488][T22319] bond5 (unregistering): Released all slaves [ 725.999199][T22325] netlink: 'syz.0.4221': attribute type 5 has an invalid length. [ 726.040021][T22327] __nla_validate_parse: 9 callbacks suppressed [ 726.040033][T22327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4222'. [ 726.059462][T22327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4222'. [ 726.272524][T22338] FAULT_INJECTION: forcing a failure. [ 726.272524][T22338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.278934][T22333] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4226'. [ 726.287072][T22338] CPU: 0 UID: 0 PID: 22338 Comm: syz.1.4225 Not tainted syzkaller #0 PREEMPT(full) [ 726.287096][T22338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.287108][T22338] Call Trace: [ 726.287115][T22338] [ 726.287122][T22338] dump_stack_lvl+0x189/0x250 [ 726.287151][T22338] ? __pfx____ratelimit+0x10/0x10 [ 726.287172][T22338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.287193][T22338] ? __pfx__printk+0x10/0x10 [ 726.287210][T22338] ? __might_fault+0xb0/0x130 [ 726.287245][T22338] should_fail_ex+0x414/0x560 [ 726.287274][T22338] _copy_from_user+0x2d/0xb0 [ 726.287296][T22338] ___sys_sendmsg+0x158/0x2a0 [ 726.287320][T22338] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.287375][T22338] ? __fget_files+0x2a/0x420 [ 726.287391][T22338] ? __fget_files+0x3a0/0x420 [ 726.287417][T22338] __x64_sys_sendmsg+0x19b/0x260 [ 726.287440][T22338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.287470][T22338] ? __pfx_ksys_write+0x10/0x10 [ 726.287496][T22338] ? do_syscall_64+0xbe/0xfa0 [ 726.287519][T22338] do_syscall_64+0xfa/0xfa0 [ 726.287537][T22338] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.287557][T22338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.287573][T22338] ? clear_bhb_loop+0x60/0xb0 [ 726.287593][T22338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.287609][T22338] RIP: 0033:0x7f4fa8d8f749 [ 726.287634][T22338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.287649][T22338] RSP: 002b:00007f4fa9c75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.287668][T22338] RAX: ffffffffffffffda RBX: 00007f4fa8fe5fa0 RCX: 00007f4fa8d8f749 [ 726.287681][T22338] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 726.287692][T22338] RBP: 00007f4fa9c75090 R08: 0000000000000000 R09: 0000000000000000 [ 726.287702][T22338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.287712][T22338] R13: 00007f4fa8fe6038 R14: 00007f4fa8fe5fa0 R15: 00007ffd9a1521b8 [ 726.287743][T22338] [ 726.339249][T22340] veth0_to_hsr: mtu less than device minimum [ 726.519678][T19437] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 726.531479][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'. [ 726.561952][T22347] bridge0: port 4(hsr0) entered blocking state [ 726.569539][T22347] bridge0: port 4(hsr0) entered disabled state [ 726.576441][T22347] hsr0: entered allmulticast mode [ 726.581655][T22347] hsr_slave_0: entered allmulticast mode [ 726.587672][T22347] hsr_slave_1: entered allmulticast mode [ 726.596159][T22347] hsr0: entered promiscuous mode [ 726.603531][T22344] netlink: 'syz.3.4230': attribute type 2 has an invalid length. [ 726.654426][T22352] bond2: Unable to set down delay as MII monitoring is disabled [ 726.666552][T22352] bond2 (unregistering): Released all slaves [ 726.867687][T22344] wg1 speed is unknown, defaulting to 1000 [ 726.878375][T22344] lo speed is unknown, defaulting to 1000 [ 727.225486][T22372] Can't find ip_set type hasV:net,port,net [ 727.324045][T22369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.362616][T22369] netlink: 'syz.3.4235': attribute type 3 has an invalid length. [ 727.425861][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4240'. [ 727.427720][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 727.470393][T22390] batman_adv: batadv0: Adding interface: ipvlan2 [ 727.479748][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 727.500235][T22392] netlink: 'syz.1.4241': attribute type 18 has an invalid length. [ 727.523318][T22390] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.552283][T22390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.566115][T22390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.599395][T22390] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 727.691814][T22401] netlink: 'syz.3.4243': attribute type 21 has an invalid length. [ 727.694872][T22404] netlink: 'syz.3.4243': attribute type 21 has an invalid length. [ 727.723384][T22404] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4243'. [ 727.765583][T22401] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4243'. [ 727.784727][T22401] netlink: 'syz.3.4243': attribute type 5 has an invalid length. [ 727.802964][T22401] netlink: 'syz.3.4243': attribute type 6 has an invalid length. [ 727.831222][T22401] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4243'. [ 727.861930][T22404] netlink: 'syz.3.4243': attribute type 5 has an invalid length. [ 727.873948][T22404] netlink: 'syz.3.4243': attribute type 6 has an invalid length. [ 728.276910][T22437] syzkaller0: entered promiscuous mode [ 728.313692][T22437] syzkaller0: entered allmulticast mode [ 728.598609][T22459] netlink: 'syz.5.4256': attribute type 1 has an invalid length. [ 729.136529][T22490] team0: Port device bridge2 added [ 729.147500][T22490] bridge0: port 3(team0) entered blocking state [ 729.205722][T22490] bridge0: port 3(team0) entered disabled state [ 729.212294][T22490] team0: entered allmulticast mode [ 729.217638][T22490] team_slave_0: entered allmulticast mode [ 729.223446][T22490] team_slave_1: entered allmulticast mode [ 729.229326][T22490] bridge2: entered allmulticast mode [ 729.238471][T22490] team0: entered promiscuous mode [ 729.243680][T22490] team_slave_0: entered promiscuous mode [ 729.250960][T22490] team_slave_1: entered promiscuous mode [ 729.259004][T22490] bridge2: entered promiscuous mode [ 729.274584][T22500] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 729.285095][T22500] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 730.202941][T22541] netlink: 'syz.1.4280': attribute type 2 has an invalid length. [ 730.237912][T22541] !: entered promiscuous mode [ 731.251265][T22565] wg1 speed is unknown, defaulting to 1000 [ 731.280784][T22565] lo speed is unknown, defaulting to 1000 [ 731.561485][T22588] netlink: 'syz.5.4293': attribute type 1 has an invalid length. [ 731.577042][T22588] __nla_validate_parse: 13 callbacks suppressed [ 731.577061][T22588] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4293'. [ 731.646877][T22596] FAULT_INJECTION: forcing a failure. [ 731.646877][T22596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.679059][T22594] wg1 speed is unknown, defaulting to 1000 [ 731.690499][T22594] lo speed is unknown, defaulting to 1000 [ 731.728471][T22596] CPU: 1 UID: 0 PID: 22596 Comm: syz.2.4294 Not tainted syzkaller #0 PREEMPT(full) [ 731.728497][T22596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.728509][T22596] Call Trace: [ 731.728516][T22596] [ 731.728524][T22596] dump_stack_lvl+0x189/0x250 [ 731.728552][T22596] ? __pfx____ratelimit+0x10/0x10 [ 731.728572][T22596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.728594][T22596] ? __pfx__printk+0x10/0x10 [ 731.728614][T22596] ? __might_fault+0xb0/0x130 [ 731.728650][T22596] should_fail_ex+0x414/0x560 [ 731.728681][T22596] _copy_from_user+0x2d/0xb0 [ 731.728704][T22596] kstrtouint_from_user+0xc4/0x170 [ 731.728727][T22596] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 731.728765][T22596] proc_fail_nth_write+0x88/0x200 [ 731.728787][T22596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 731.728815][T22596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 731.728837][T22596] vfs_write+0x27e/0xb30 [ 731.728871][T22596] ? __pfx_vfs_write+0x10/0x10 [ 731.728894][T22596] ? __fget_files+0x2a/0x420 [ 731.728916][T22596] ? __fget_files+0x3a0/0x420 [ 731.728932][T22596] ? __fget_files+0x2a/0x420 [ 731.728957][T22596] ksys_write+0x145/0x250 [ 731.728982][T22596] ? __pfx_ksys_write+0x10/0x10 [ 731.729016][T22596] ? do_syscall_64+0xbe/0xfa0 [ 731.729041][T22596] do_syscall_64+0xfa/0xfa0 [ 731.729059][T22596] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.729079][T22596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.729096][T22596] ? clear_bhb_loop+0x60/0xb0 [ 731.729118][T22596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.729134][T22596] RIP: 0033:0x7f84ee38e1ff [ 731.729151][T22596] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 731.729167][T22596] RSP: 002b:00007f84ef190030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 731.729186][T22596] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f84ee38e1ff [ 731.729198][T22596] RDX: 0000000000000001 RSI: 00007f84ef1900a0 RDI: 0000000000000004 [ 731.729209][T22596] RBP: 00007f84ef190090 R08: 0000000000000000 R09: 0000000000000000 [ 731.729220][T22596] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 731.729230][T22596] R13: 00007f84ee5e6038 R14: 00007f84ee5e5fa0 R15: 00007ffdd22775b8 [ 731.729268][T22596] [ 732.123666][T22603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4296'. [ 732.281306][T22611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4300'. [ 732.311812][T22611] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4300'. [ 732.353757][T22611] tipc: Invalid UDP bearer configuration [ 732.353818][T22611] tipc: Enabling of bearer rejected, failed to enable media [ 732.620552][T22636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4299'. [ 732.652885][T22614] Cannot find add_set index 2 as target [ 732.727808][T22650] validate_nla: 1 callbacks suppressed [ 732.727825][T22650] netlink: 'syz.2.4305': attribute type 1 has an invalid length. [ 732.742784][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4307'. [ 732.755303][T22650] netlink: 'syz.2.4305': attribute type 2 has an invalid length. [ 733.306151][T22656] bond3: entered promiscuous mode [ 733.313640][T22656] bond3: entered allmulticast mode [ 733.414445][T22638] wg1 speed is unknown, defaulting to 1000 [ 733.430369][T22638] lo speed is unknown, defaulting to 1000 [ 733.441310][T22666] wg1 speed is unknown, defaulting to 1000 [ 733.525297][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4310'. [ 733.591591][T22666] lo speed is unknown, defaulting to 1000 [ 733.728182][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4313'. [ 733.759143][T22679] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4314'. [ 734.844325][T22732] veth0_vlan: entered allmulticast mode [ 734.986556][ T1577] IPVS: starting estimator thread 0... [ 735.030343][T22744] syzkaller0: entered promiscuous mode [ 735.037000][T22744] syzkaller0: entered allmulticast mode [ 735.075371][T22745] IPVS: using max 34 ests per chain, 81600 per kthread [ 735.142666][T22744] tipc: Enabled bearer , priority 0 [ 735.151976][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4331'. [ 735.171025][T22743] delete_channel: no stack [ 735.741682][T22780] netlink: 'syz.5.4340': attribute type 4 has an invalid length. [ 735.785712][T22780] netlink: 'syz.5.4340': attribute type 4 has an invalid length. [ 735.829505][T22749] tipc: Resetting bearer [ 735.867305][T22749] tipc: Disabling bearer [ 735.909370][T22780] geneve2: entered promiscuous mode [ 735.914618][T22780] geneve2: entered allmulticast mode [ 735.968672][T22787] netlink: 'syz.3.4342': attribute type 12 has an invalid length. [ 736.264414][T22800] hsr0: left allmulticast mode [ 736.272452][T22800] hsr_slave_0: left allmulticast mode [ 736.278371][T22800] hsr_slave_1: left allmulticast mode [ 736.284019][T22800] hsr0: left promiscuous mode [ 736.289400][T22800] bridge0: port 4(hsr0) entered disabled state [ 736.311947][T22800] bridge0: port 3(batadv0) entered disabled state [ 736.329276][T22800] bridge_slave_1: left allmulticast mode [ 736.335134][T22800] bridge_slave_1: left promiscuous mode [ 736.370682][T22800] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.396592][T22800] bridge_slave_0: left allmulticast mode [ 736.408202][T22800] bridge_slave_0: left promiscuous mode [ 736.414777][T22800] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.640237][T22814] __nla_validate_parse: 4 callbacks suppressed [ 736.640255][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4351'. [ 736.667437][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4351'. [ 736.712050][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4351'. [ 736.734207][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4351'. [ 736.758400][T18880] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.769273][T18880] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.782141][T18880] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.819774][T18880] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.942992][T22829] can: request_module (can-proto-5) failed. [ 737.107830][T22846] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4358'. [ 737.121409][T22846] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4358'. [ 737.283679][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4360'. [ 737.320606][T22854] wg1 speed is unknown, defaulting to 1000 [ 737.341590][T22850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4359'. [ 737.341758][T22854] lo speed is unknown, defaulting to 1000 [ 737.352109][T22850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4359'. [ 737.564279][T22866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4362'. [ 738.017029][T22894] tipc: Cannot configure node identity twice [ 738.063571][T22899] netlink: 'syz.5.4374': attribute type 1 has an invalid length. [ 738.072628][T22900] netlink: 'syz.2.4372': attribute type 1 has an invalid length. [ 738.149408][T22900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 738.183935][T22908] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 738.198490][T22908] bond2: (slave batadv1): making interface the new active one [ 738.208759][T22908] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 738.458252][T22900] bond2 (unregistering): (slave batadv1): Releasing active interface [ 738.470413][T22900] bond2 (unregistering): Released all slaves [ 738.498485][T22920] netlink: 'syz.3.4379': attribute type 12 has an invalid length. [ 738.528387][T22923] bridge5: entered promiscuous mode [ 738.783704][T22932] wg1 speed is unknown, defaulting to 1000 [ 738.790168][T22940] ip6gretap0: entered promiscuous mode [ 738.850126][T22932] lo speed is unknown, defaulting to 1000 [ 739.029602][T22947] netlink: 'syz.1.4386': attribute type 21 has an invalid length. [ 739.413437][T22962] block nbd0: not configured, cannot reconfigure [ 739.633733][T22969] wg1 speed is unknown, defaulting to 1000 [ 739.664122][T22969] lo speed is unknown, defaulting to 1000 [ 739.766576][T22977] wg1 speed is unknown, defaulting to 1000 [ 739.873834][T22977] lo speed is unknown, defaulting to 1000 [ 741.209956][T23044] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 741.300512][T23050] syzkaller1: entered promiscuous mode [ 741.319341][T23050] syzkaller1: entered allmulticast mode [ 741.810982][T23075] netlink: 'syz.1.4422': attribute type 1 has an invalid length. [ 741.898017][T23080] __nla_validate_parse: 21 callbacks suppressed [ 741.898037][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4422'. [ 742.012849][T23075] bond4: entered promiscuous mode [ 742.019402][T23075] bond4: entered allmulticast mode [ 742.022608][T23086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.024987][T23075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 742.067581][T23086] team0: entered promiscuous mode [ 742.072737][T23086] team0: entered allmulticast mode [ 742.079624][T23086] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.379542][T23080] bond4 (unregistering): Released all slaves [ 742.423434][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.436683][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.450761][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.469344][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.481173][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.492944][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.507779][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.534314][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 742.554288][T23088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.558181][T19433] bond0: (slave bond_slave_0): interface is now down [ 742.573161][T19433] bond0: (slave bond_slave_1): interface is now down [ 742.595044][T23088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 742.612561][T19433] bond0: (slave bond_slave_0): interface is now down [ 742.621594][T19433] bond0: (slave bond_slave_1): interface is now down [ 742.645398][T19433] bond0: (slave bond_slave_0): interface is now down [ 742.662313][T19433] bond0: (slave bond_slave_1): interface is now down [ 742.696304][T19437] bond0: (slave bond_slave_0): interface is now down [ 742.703036][T19437] bond0: (slave bond_slave_1): interface is now down [ 742.755345][T19437] bond0: (slave bond_slave_0): interface is now down [ 742.762069][T19437] bond0: (slave bond_slave_1): interface is now down [ 742.804802][T23117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.812122][T23117] IPv6: NLM_F_CREATE should be set when creating new route [ 742.819435][T23117] IPv6: NLM_F_CREATE should be set when creating new route [ 742.825332][T19432] bond0: (slave bond_slave_0): interface is now down [ 742.826690][T23117] IPv6: NLM_F_CREATE should be set when creating new route [ 742.833320][T19432] bond0: (slave bond_slave_1): interface is now down [ 742.843886][T23117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.896525][T19432] bond0: (slave bond_slave_0): interface is now down [ 742.905405][T19432] bond0: (slave bond_slave_1): interface is now down [ 742.930146][T23117] IPVS: Error connecting to the multicast addr [ 742.947575][T19435] bond0: (slave bond_slave_0): interface is now down [ 742.964854][T19435] bond0: (slave bond_slave_1): interface is now down [ 743.000178][T19435] bond0: now running without any active interface! [ 743.193244][T23142] netlink: 'syz.1.4436': attribute type 1 has an invalid length. [ 743.522368][T23158] bond4: Unable to set down delay as MII monitoring is disabled [ 743.539518][T23158] bond4 (unregistering): Released all slaves [ 743.739878][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 744.284819][T23198] netlink: 'syz.5.4440': attribute type 3 has an invalid length. [ 744.330090][T23192] bond4: Unable to set down delay as MII monitoring is disabled [ 744.343751][T23192] bond4 (unregistering): Released all slaves [ 744.461481][T23208] netlink: 'syz.2.4451': attribute type 2 has an invalid length. [ 744.512339][T23208] : entered promiscuous mode [ 744.688117][T23215] bond5: Unable to set down delay as MII monitoring is disabled [ 744.711924][T23222] netlink: 'syz.3.4455': attribute type 2 has an invalid length. [ 744.779313][T23215] bond5 (unregistering): Released all slaves [ 745.140346][T23241] tipc: Enabled bearer , priority 0 [ 745.173110][T23241] veth0_to_batadv: entered promiscuous mode [ 745.190199][T23241] veth0_to_batadv: entered allmulticast mode [ 745.239853][T23240] tipc: Disabling bearer [ 745.263866][T23247] wg1 speed is unknown, defaulting to 1000 [ 745.288801][T23247] lo speed is unknown, defaulting to 1000 [ 745.439057][T23253] xt_hashlimit: size too large, truncated to 1048576 [ 745.753914][T23262] netlink: 'syz.3.4466': attribute type 13 has an invalid length. [ 745.763555][T23262] netlink: 'syz.3.4466': attribute type 12 has an invalid length. [ 745.947808][T23278] bond5: Unable to set down delay as MII monitoring is disabled [ 745.958762][T23278] bond5 (unregistering): Released all slaves [ 746.063173][T23286] xt_hashlimit: Unknown mode mask 500, kernel too old? [ 746.438864][T23284] wg1: entered promiscuous mode [ 746.446585][T23284] wg1: entered allmulticast mode [ 746.667490][T23300] netlink: 'syz.3.4477': attribute type 9 has an invalid length. [ 746.688311][T23300] netlink: 'syz.3.4477': attribute type 6 has an invalid length. [ 746.888215][T23310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.027910][T23320] __nla_validate_parse: 17 callbacks suppressed [ 747.027928][T23320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4484'. [ 747.044070][T23320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4484'. [ 747.061402][T23320] netlink: 416 bytes leftover after parsing attributes in process `syz.5.4484'. [ 747.107199][T23324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4485'. [ 747.329955][T23327] wg1 speed is unknown, defaulting to 1000 [ 747.358662][T23327] lo speed is unknown, defaulting to 1000 [ 747.734936][T23343] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 748.200720][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4496'. [ 748.448274][T23373] pim6reg: entered allmulticast mode [ 748.490378][T23373] pim6reg: left allmulticast mode [ 748.509827][T23372] wg1 speed is unknown, defaulting to 1000 [ 748.581617][T23375] wg1 speed is unknown, defaulting to 1000 [ 748.604540][T23372] lo speed is unknown, defaulting to 1000 [ 748.671139][T23375] lo speed is unknown, defaulting to 1000 [ 748.682571][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'. [ 748.769066][T23385] netlink: 'syz.1.4503': attribute type 4 has an invalid length. [ 748.833878][T23390] netlink: 'syz.2.4504': attribute type 1 has an invalid length. [ 749.338067][T23421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4512'. [ 749.394130][T23413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4512'. [ 749.630979][T23443] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20000 [ 749.928996][T23463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4525'. [ 749.938722][T23463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4525'. [ 749.980043][T23467] xt_hashlimit: max too large, truncated to 1048576 [ 750.061956][T23473] xt_hashlimit: max too large, truncated to 1048576 [ 750.223705][T19436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.237229][T19436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.376877][T23491] netlink: 'syz.3.4532': attribute type 30 has an invalid length. [ 750.499213][T23491] netlink: 'syz.3.4532': attribute type 30 has an invalid length. [ 750.704936][T23499] netlink: 'syz.2.4537': attribute type 11 has an invalid length. [ 750.993302][T23521] netlink: 'syz.5.4541': attribute type 13 has an invalid length. [ 751.073964][T23526] IPVS: set_ctl: invalid protocol: 59 172.20.20.37:20003 [ 751.075080][T23523] bond5: option ad_actor_sys_prio: invalid value (0) [ 751.088519][T23523] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 751.126902][T23526] netlink: 'syz.2.4544': attribute type 10 has an invalid length. [ 751.137996][T23523] bond5 (unregistering): Released all slaves [ 751.323278][T23540] netlink: 'syz.0.4549': attribute type 29 has an invalid length. [ 751.345971][T23540] netlink: 'syz.0.4549': attribute type 29 has an invalid length. [ 751.680955][T23563] wg1 speed is unknown, defaulting to 1000 [ 751.709541][T23563] lo speed is unknown, defaulting to 1000 [ 752.111413][T23590] netlink: 'syz.2.4562': attribute type 1 has an invalid length. [ 752.119327][T23593] __nla_validate_parse: 14 callbacks suppressed [ 752.119346][T23593] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4560'. [ 752.147545][T23590] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4562'. [ 752.252347][T23599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4564'. [ 752.264457][T23590] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4562'. [ 752.343104][T23590] bond3 (unregistering): Released all slaves [ 752.375721][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 752.762436][T23605] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 752.948384][T23612] wg1 speed is unknown, defaulting to 1000 [ 752.982046][T23612] lo speed is unknown, defaulting to 1000 [ 753.191510][T23631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4575'. [ 753.397216][T23637] wg1 speed is unknown, defaulting to 1000 [ 753.441856][T23637] lo speed is unknown, defaulting to 1000 [ 753.464278][T23644] syzkaller1: entered promiscuous mode [ 753.498653][T23644] syzkaller1: entered allmulticast mode [ 753.530780][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4573'. [ 753.537789][T23645] bond0: Caught tx_queue_len zero misconfig [ 753.583572][T23647] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4577'. [ 753.594335][T23649] netlink: 'syz.2.4573': attribute type 1 has an invalid length. [ 753.605371][T23647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4577'. [ 753.669860][T23650] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4577'. [ 753.712038][T23650] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4577'. [ 754.011859][T23646] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 754.033494][T23646] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 754.047509][T23646] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 754.226027][T23662] netlink: 'syz.0.4579': attribute type 27 has an invalid length. [ 756.438324][T23694] netlink: 'syz.0.4588': attribute type 5 has an invalid length. [ 756.447391][T23694] netlink: 'syz.0.4588': attribute type 5 has an invalid length. [ 756.578742][T23702] pim6reg1: entered promiscuous mode [ 756.589262][T23702] pim6reg1: entered allmulticast mode [ 756.652909][T23702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 756.698656][T23708] pim6reg1: entered promiscuous mode [ 756.707414][T23708] pim6reg1: entered allmulticast mode [ 756.950468][T23721] ip6gre1: entered promiscuous mode [ 757.104717][T23722] wg1 speed is unknown, defaulting to 1000 [ 757.140649][T23722] lo speed is unknown, defaulting to 1000 [ 757.385018][T23745] __nla_validate_parse: 4 callbacks suppressed [ 757.385036][T23745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4599'. [ 757.766699][T23740] wg1 speed is unknown, defaulting to 1000 [ 757.793861][T23740] lo speed is unknown, defaulting to 1000 [ 757.795530][T23739] netlink: 'syz.2.4596': attribute type 6 has an invalid length. [ 758.154137][T23762] batadv_slave_1: entered promiscuous mode [ 758.399371][T23759] batadv_slave_1: left promiscuous mode [ 758.507623][T23775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4605'. [ 759.037193][T23798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4611'. [ 759.073694][T23798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4611'. [ 759.162786][T23806] bond5: Unable to set down delay as MII monitoring is disabled [ 759.187280][T23806] bond5 (unregistering): Released all slaves [ 759.224088][T23807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4614'. [ 759.289900][T23811] tipc: Enabled bearer , priority 0 [ 759.301623][T23811] syzkaller0: entered promiscuous mode [ 759.309616][T23818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4616'. [ 759.322831][T23811] syzkaller0: entered allmulticast mode [ 759.752780][T23848] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4620'. [ 759.890109][T23854] wg1 speed is unknown, defaulting to 1000 [ 759.900968][T23854] lo speed is unknown, defaulting to 1000 [ 760.088509][T23866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4629'. [ 760.264331][T23873] netlink: 'syz.1.4632': attribute type 1 has an invalid length. [ 760.411077][T23873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4632'. [ 760.424044][T23876] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 760.467580][T23876] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 760.530628][ T5949] tipc: Node number set to 3092963460 [ 760.583329][T23873] bond5: (slave bridge0): Enslaving as an active interface with a down link [ 760.603454][T23892] xt_connbytes: Forcing CT accounting to be enabled [ 760.633790][T23895] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 760.642700][T23895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.646479][T23892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.657419][T23883] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 760.705087][T23897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4639'. [ 760.896344][T23904] hsr_slave_0: left promiscuous mode [ 761.032116][T23894] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 761.403921][T23920] bond5: Removing last arp target with arp_interval on [ 761.571894][T23933] syz_tun: entered promiscuous mode [ 761.578329][T23933] macvtap1: entered promiscuous mode [ 761.588582][T23933] syz_tun: left promiscuous mode [ 761.844126][T23944] syzkaller0: entered promiscuous mode [ 761.879843][T23944] syzkaller0: entered allmulticast mode [ 762.041774][T23962] wg1 speed is unknown, defaulting to 1000 [ 762.061520][T23962] lo speed is unknown, defaulting to 1000 [ 762.592441][T23995] netlink: 'syz.1.4662': attribute type 13 has an invalid length. [ 762.792935][T24009] __nla_validate_parse: 7 callbacks suppressed [ 762.792953][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 762.908534][T24015] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4668'. [ 762.934705][T24004] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 762.962784][T24015] 0ªX¹¦À: renamed from caif0 [ 762.975485][T24015] 0ªX¹¦À: entered allmulticast mode [ 762.983388][T24015] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 763.004092][T24021] netlink: 'syz.0.4669': attribute type 1 has an invalid length. [ 763.101578][T24012] syzkaller0: entered promiscuous mode [ 763.108146][T24012] syzkaller0: entered allmulticast mode [ 763.124087][T24028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4669'. [ 763.231357][T24030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4671'. [ 763.297601][T24021] 8021q: adding VLAN 0 to HW filter on device bond6 [ 763.334038][T24023] bond6: (slave ip6gretap1): making interface the new active one [ 763.350562][T24023] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 763.382924][T24031] erspan0: entered allmulticast mode [ 763.397438][T24031] bond1: (slave erspan0): Releasing active interface [ 763.447108][T24031] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 763.536224][T24021] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 765.444200][T24058] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4677'. [ 765.463086][T24065] syzkaller0: Caught tx_queue_len zero misconfig [ 765.669573][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4686'. [ 765.715495][T24087] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4683'. [ 765.918940][T24100] bond5: Unable to set down delay as MII monitoring is disabled [ 765.943047][T24100] bond5 (unregistering): Released all slaves [ 766.024515][T24117] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4691'. [ 766.042883][T24114] wg1 speed is unknown, defaulting to 1000 [ 766.067851][T24114] lo speed is unknown, defaulting to 1000 [ 766.213592][T24120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.221047][T24130] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4692'. [ 766.223316][T24120] bond0: (slave bond3): Enslaving as an active interface with a down link [ 766.314509][T24133] wg1 speed is unknown, defaulting to 1000 [ 766.339728][T24133] lo speed is unknown, defaulting to 1000 [ 766.353148][T24123] wg1 speed is unknown, defaulting to 1000 [ 766.533586][T24123] lo speed is unknown, defaulting to 1000 [ 766.944178][T24164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4702'. [ 767.184113][T24170] syzkaller0: entered allmulticast mode [ 767.243026][T24178] bond7: Unable to set down delay as MII monitoring is disabled [ 767.260838][T24178] bond7 (unregistering): Released all slaves [ 767.367378][T24182] netlink: 'syz.1.4708': attribute type 39 has an invalid length. [ 767.475993][T24193] tc_dump_action: action bad kind [ 767.706967][T24195] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 767.759764][T24199] wg1 speed is unknown, defaulting to 1000 [ 767.788413][T24199] lo speed is unknown, defaulting to 1000 [ 767.836398][T24207] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 767.854556][T24205] __nla_validate_parse: 5 callbacks suppressed [ 767.854574][T24205] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4715'. [ 768.109013][T24222] IPVS: Unknown mcast interface: vlan0 [ 768.189167][T24224] syzkaller0: left promiscuous mode [ 768.194589][T24224] syzkaller0: left allmulticast mode [ 768.506826][T24237] bond7: Unable to set down delay as MII monitoring is disabled [ 768.543178][T24237] bond7 (unregistering): Released all slaves [ 768.633490][T24231] wg1 speed is unknown, defaulting to 1000 [ 768.649137][T24238] IPv6: NLM_F_REPLACE set, but no existing node found! [ 768.674630][T24231] lo speed is unknown, defaulting to 1000 [ 768.676476][T24250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4721'. [ 769.087710][T24265] netlink: 'syz.0.4730': attribute type 1 has an invalid length. [ 769.200746][T24276] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20001 [ 769.215721][T24265] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 769.244731][T24276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4732'. [ 769.331880][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4734'. [ 769.350480][T24283] veth1_to_batadv: entered promiscuous mode [ 769.489911][T24293] tipc: Enabled bearer , priority 0 [ 769.521696][T24293] syzkaller0: entered promiscuous mode [ 769.536085][T24293] syzkaller0: entered allmulticast mode [ 769.638299][T24293] tipc: Resetting bearer [ 769.686975][T24289] tipc: Resetting bearer [ 769.710563][T24289] tipc: Disabling bearer [ 769.735825][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 769.742328][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 769.757738][T24303] wg1 speed is unknown, defaulting to 1000 [ 769.770876][T24303] lo speed is unknown, defaulting to 1000 [ 769.802661][T24315] netlink: 'syz.1.4744': attribute type 21 has an invalid length. [ 769.867677][T24315] IPv6: sit2: Disabled Multicast RS [ 769.970675][T24309] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 769.990051][T24309] bond5 (unregistering): Released all slaves [ 770.069759][T24323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.168880][T24313] wg1 speed is unknown, defaulting to 1000 [ 770.174848][T24327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4745'. [ 770.227068][T24321] wg1 speed is unknown, defaulting to 1000 [ 770.238461][T24313] lo speed is unknown, defaulting to 1000 [ 770.261295][T24333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4750'. [ 770.280031][T24321] lo speed is unknown, defaulting to 1000 [ 770.362969][ T5949] lo speed is unknown, defaulting to 1000 [ 770.370145][ T5949] syz2: Port: 1 Link DOWN [ 770.529945][T24346] batadv_slave_0: Caught tx_queue_len zero misconfig [ 770.598936][T24352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4753'. [ 770.821901][T24364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4753'. [ 770.910679][T24368] netlink: 'syz.0.4759': attribute type 1 has an invalid length. [ 770.951316][T24354] syzkaller1: entered promiscuous mode [ 770.964061][T24354] syzkaller1: entered allmulticast mode [ 771.058664][T24368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 771.077545][T24373] ip6gretap2: entered allmulticast mode [ 771.087737][T24373] bond7: (slave ip6gretap2): making interface the new active one [ 771.097473][T24373] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 771.136786][T24341] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 771.368861][T24384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4761'. [ 771.486474][T24388] tipc: Enabled bearer , priority 0 [ 771.517032][T24388] syzkaller0: entered promiscuous mode [ 771.522628][T24388] syzkaller0: entered allmulticast mode [ 771.556721][T24388] tipc: Resetting bearer [ 771.592484][T24386] tipc: Resetting bearer [ 771.691389][T24386] tipc: Disabling bearer [ 771.756995][T24395] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4764'. [ 772.001452][T24417] bond0: Error: Cannot enslave bond to itself. [ 772.052789][T24417] pimreg: entered allmulticast mode [ 772.313591][T24430] netlink: 'syz.5.4771': attribute type 1 has an invalid length. [ 772.348664][T24432] ip6tnl2: entered allmulticast mode [ 772.613947][T24443] netlink: 'syz.1.4780': attribute type 1 has an invalid length. [ 772.759158][T24447] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 772.769773][T24447] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 772.788374][T24447] bond6: (slave vcan1): making interface the new active one [ 772.799433][T24447] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 772.891851][T24447] bond6: (slave vcan2): The slave device specified does not support setting the MAC address [ 772.920673][T24447] bond6: (slave vcan2): Enslaving as a backup interface with an up link [ 773.083740][T24458] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 773.339486][T24474] __nla_validate_parse: 5 callbacks suppressed [ 773.339506][T24474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4786'. [ 773.379631][T24475] netlink: 'syz.3.4786': attribute type 1 has an invalid length. [ 773.388309][T24475] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4786'. [ 773.470370][T24485] wg1 speed is unknown, defaulting to 1000 [ 773.520493][T24490] wg1 speed is unknown, defaulting to 1000 [ 773.533014][T24485] lo speed is unknown, defaulting to 1000 [ 773.567418][T24489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.589741][T19432] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 773.600382][T24490] lo speed is unknown, defaulting to 1000 [ 773.648234][T24502] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4791'. [ 773.658586][T24502] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4791'. [ 773.909205][T24518] tipc: Enabling of bearer rejected, already enabled [ 773.929029][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4796'. [ 774.037909][T24518] syzkaller0: entered promiscuous mode [ 774.043471][T24518] syzkaller0: entered allmulticast mode [ 774.058811][T24535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.066114][T24535] IPv6: NLM_F_CREATE should be set when creating new route [ 774.073367][T24535] IPv6: NLM_F_CREATE should be set when creating new route [ 774.080625][T24535] IPv6: NLM_F_CREATE should be set when creating new route [ 774.093445][T24535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.121440][T24518] tipc: Resetting bearer [ 774.281236][T24538] tipc: Enabled bearer , priority 0 [ 774.301925][T24538] syzkaller0: entered promiscuous mode [ 774.315066][T24538] syzkaller0: entered allmulticast mode [ 774.361126][T24545] IPVS: Error connecting to the multicast addr [ 774.461436][T24543] tipc: Resetting bearer [ 774.478462][T24538] tipc: Enabling of bearer rejected, already enabled [ 774.531478][T24558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4807'. [ 774.569393][T24556] netlink: 'syz.1.4805': attribute type 1 has an invalid length. [ 774.653982][T24563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4805'. [ 774.669816][T24556] 8021q: adding VLAN 0 to HW filter on device bond7 [ 774.730626][T24536] tipc: Resetting bearer [ 774.792893][T24536] tipc: Disabling bearer [ 774.874806][T24568] syzkaller0: entered promiscuous mode [ 774.906056][T24568] syzkaller0: entered allmulticast mode [ 775.022571][T24577] x_tables: duplicate underflow at hook 1 [ 775.048318][T24579] netlink: 372 bytes leftover after parsing attributes in process `syz.2.4812'. [ 775.057712][T24579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4812'. [ 775.081889][T24571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 775.094096][T24579] netlink: 372 bytes leftover after parsing attributes in process `syz.2.4812'. [ 775.124421][T24571] batman_adv: batadv0: Adding interface: gretap1 [ 775.144113][T24571] batman_adv: batadv0: Interface activated: gretap1 [ 775.188710][T24573] bond5: Unable to set down delay as MII monitoring is disabled [ 775.200299][T24573] bond5 (unregistering): Released all slaves [ 775.208323][T24588] sctp: [Deprecated]: syz.2.4815 (pid 24588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.208323][T24588] Use struct sctp_sack_info instead [ 775.777901][T24634] wg1 speed is unknown, defaulting to 1000 [ 775.804523][T24634] lo speed is unknown, defaulting to 1000 [ 776.061539][T24647] tipc: Enabling of bearer rejected, already enabled [ 776.252812][T24652] 8021q: VLANs not supported on ip_vti0 [ 776.485091][T24664] bond8: Unable to set down delay as MII monitoring is disabled [ 776.499552][T24664] bond8 (unregistering): Released all slaves [ 776.555456][T24665] bond4: (slave veth3): Enslaving as an active interface with a down link [ 776.587599][T24662] bond4: (slave ip6gretap1): making interface the new active one [ 776.597146][T24662] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 776.668968][T24671] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.671539][T24686] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 776.680769][T24671] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.894555][T24671] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.906597][T24671] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.057960][T24671] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.073129][T24671] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.073713][T24708] netlink: 'syz.2.4839': attribute type 1 has an invalid length. [ 777.223050][T24671] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.246793][T24671] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.419583][T19433] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.447230][T19433] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.476748][T19436] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.487365][T19436] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.539815][T19437] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.562918][T19437] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.593521][T19437] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.608593][T24732] IPVS: length: 103 != 8 [ 777.636639][T19437] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.899372][T24740] ip6gre0: entered promiscuous mode [ 777.913988][T24740] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 778.076536][T24754] tipc: Enabled bearer , priority 0 [ 778.084270][T24754] syzkaller0: entered promiscuous mode [ 778.105661][T24754] syzkaller0: entered allmulticast mode [ 778.200030][T24761] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 778.224692][T24761] bond5 (unregistering): Released all slaves [ 778.326413][T24774] wg2: entered promiscuous mode [ 778.331463][T24774] wg2: entered allmulticast mode [ 778.373707][T24775] wg2: left promiscuous mode [ 778.397884][T24775] wg2: left allmulticast mode [ 778.504893][T24783] syzkaller0: entered promiscuous mode [ 778.522773][T24783] syzkaller0: entered allmulticast mode [ 778.535110][T24748] tipc: Resetting bearer [ 778.579540][T24748] tipc: Disabling bearer [ 778.818011][T24798] syzkaller1: entered promiscuous mode [ 778.836691][T24798] syzkaller1: entered allmulticast mode [ 779.058667][T24811] __nla_validate_parse: 16 callbacks suppressed [ 779.058782][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 779.980578][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4874'. [ 780.010015][T24833] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.230389][T24840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4876'. [ 780.257812][T24843] netlink: 'syz.1.4877': attribute type 11 has an invalid length. [ 780.302630][T24842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4878'. [ 780.655055][T24859] warn_alloc: 2 callbacks suppressed [ 780.655073][T24859] syz.2.4880: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 780.682028][T24859] CPU: 0 UID: 0 PID: 24859 Comm: syz.2.4880 Not tainted syzkaller #0 PREEMPT(full) [ 780.682052][T24859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.682062][T24859] Call Trace: [ 780.682069][T24859] [ 780.682078][T24859] dump_stack_lvl+0x189/0x250 [ 780.682108][T24859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.682129][T24859] ? __pfx__printk+0x10/0x10 [ 780.682148][T24859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 780.682175][T24859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 780.682198][T24859] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 780.682224][T24859] warn_alloc+0x214/0x310 [ 780.682255][T24859] ? __pfx_warn_alloc+0x10/0x10 [ 780.682288][T24859] ? __get_vm_area_node+0x28f/0x300 [ 780.682311][T24859] ? xskq_create+0xbf/0x170 [ 780.682333][T24859] __vmalloc_node_range_noprof+0x690/0x12d0 [ 780.682386][T24859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 780.682414][T24859] ? __kasan_kmalloc+0x93/0xb0 [ 780.682438][T24859] vmalloc_user_noprof+0xad/0xf0 [ 780.682462][T24859] ? xskq_create+0xbf/0x170 [ 780.682482][T24859] xskq_create+0xbf/0x170 [ 780.682504][T24859] xsk_init_queue+0xb0/0x110 [ 780.682526][T24859] xsk_setsockopt+0x57b/0x8d0 [ 780.682548][T24859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 780.682569][T24859] ? __pfx_aa_sk_perm+0x10/0x10 [ 780.682595][T24859] ? aa_sock_opt_perm+0xff/0x1b0 [ 780.682623][T24859] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 780.682641][T24859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 780.682660][T24859] do_sock_setsockopt+0x17c/0x1b0 [ 780.682685][T24859] __x64_sys_setsockopt+0x13f/0x1b0 [ 780.682712][T24859] do_syscall_64+0xfa/0xfa0 [ 780.682732][T24859] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.682753][T24859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.682771][T24859] ? clear_bhb_loop+0x60/0xb0 [ 780.682793][T24859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.682810][T24859] RIP: 0033:0x7f84ee38f749 [ 780.682828][T24859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.682844][T24859] RSP: 002b:00007f84ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 780.682863][T24859] RAX: ffffffffffffffda RBX: 00007f84ee5e6090 RCX: 00007f84ee38f749 [ 780.682878][T24859] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 780.682889][T24859] RBP: 00007f84ee413f91 R08: 0000000000000004 R09: 0000000000000000 [ 780.682900][T24859] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 780.682911][T24859] R13: 00007f84ee5e6128 R14: 00007f84ee5e6090 R15: 00007ffdd22775b8 [ 780.682950][T24859] [ 780.683178][T24859] Mem-Info: [ 780.965826][T24859] active_anon:6585 inactive_anon:0 isolated_anon:0 [ 780.965826][T24859] active_file:3556 inactive_file:40148 isolated_file:0 [ 780.965826][T24859] unevictable:790 dirty:230 writeback:0 [ 780.965826][T24859] slab_reclaimable:13335 slab_unreclaimable:154640 [ 780.965826][T24859] mapped:36521 shmem:1369 pagetables:1109 [ 780.965826][T24859] sec_pagetables:0 bounce:0 [ 780.965826][T24859] kernel_misc_reclaimable:0 [ 780.965826][T24859] free:1238473 free_pcp:16451 free_cma:0 [ 781.013279][T24859] Node 0 active_anon:26408kB inactive_anon:0kB active_file:14224kB inactive_file:160388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146168kB dirty:920kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15220kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 781.047710][T24859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:84kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 781.079554][T24859] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 781.111277][T24859] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 781.165037][T24859] Node 0 DMA32 free:1039456kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26008kB inactive_anon:0kB active_file:14224kB inactive_file:160388kB unevictable:1536kB writepending:920kB zspages:0kB present:3129332kB managed:2565012kB mlocked:0kB bounce:0kB free_pcp:55896kB local_pcp:25288kB free_cma:0kB [ 781.254614][T24859] lowmem_reserve[]: 0 0 0 0 0 [ 781.261155][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 781.270300][T24859] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 781.306221][T24859] lowmem_reserve[]: 0 0 0 0 0 [ 781.311027][T24859] Node 1 Normal free:3899180kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10656kB local_pcp:0kB free_cma:0kB [ 781.346017][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4883'. [ 781.357191][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4883'. [ 781.366729][T24859] lowmem_reserve[]: 0 0 0 0 0 [ 781.374136][T24859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 781.419689][T24859] Node 0 DMA32: 782*4kB (UME) 928*8kB (UME) 411*16kB (UM) 1006*32kB (UME) 255*64kB (UM) 110*128kB (UME) 209*256kB (UME) 250*512kB (UM) 159*1024kB (UM) 3*2048kB (UE) 149*4096kB (UM) = 1040488kB [ 781.439411][T24859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 781.452808][T24859] Node 1 Normal: 207*4kB (UME) 54*8kB (UME) 46*16kB (UME) 219*32kB (UME) 70*64kB (UME) 17*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3899180kB [ 781.487511][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'. [ 781.503365][T24859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.503392][T24859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 781.503409][T24859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.503425][T24859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 781.503441][T24859] 45067 total pagecache pages [ 781.503450][T24859] 0 pages in swap cache [ 781.503459][T24859] Free swap = 124996kB [ 781.503468][T24859] Total swap = 124996kB [ 781.503479][T24859] 2097051 pages RAM [ 781.503487][T24859] 0 pages HighMem/MovableOnly [ 781.503496][T24859] 424156 pages reserved [ 781.503504][T24859] 0 pages cma reserved [ 781.649787][T24890] syzkaller0: entered promiscuous mode [ 781.679873][T24890] syzkaller0: entered allmulticast mode [ 781.734053][T24897] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4890'. [ 782.200309][T24918] wg1 speed is unknown, defaulting to 1000 [ 782.224556][T24918] lo speed is unknown, defaulting to 1000 [ 782.553728][T24930] syzkaller0: entered promiscuous mode [ 782.559724][T24930] syzkaller0: entered allmulticast mode [ 784.655017][T24949] sctp: [Deprecated]: syz.2.4900 (pid 24949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 784.655017][T24949] Use struct sctp_sack_info instead [ 786.000363][T24920] wg1 speed is unknown, defaulting to 1000 [ 786.039594][T24946] syzkaller0: entered promiscuous mode [ 786.046474][T24946] syzkaller0: entered allmulticast mode [ 786.060697][T24920] lo speed is unknown, defaulting to 1000 [ 786.070135][T24941] siw: device registration error -23 [ 786.361538][T24960] wg1 speed is unknown, defaulting to 1000 [ 786.381773][T24960] lo speed is unknown, defaulting to 1000 [ 786.782723][T24990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4911'. [ 786.800996][T24990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4911'. [ 786.834810][T24986] bond6: Unable to set down delay as MII monitoring is disabled [ 786.848771][T24986] bond6 (unregistering): Released all slaves [ 787.168617][T25015] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4915'. [ 787.286806][T25019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 787.334543][T25037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4921'. [ 787.415089][T25037] netlink: 'syz.1.4921': attribute type 5 has an invalid length. [ 787.424080][T25037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4921'. [ 787.604587][T25053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4923'. [ 787.739318][T25053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4923'. [ 787.770125][T25056] can: request_module (can-proto-5) failed. [ 787.919463][T25053] netlink: 'syz.5.4923': attribute type 1 has an invalid length. [ 787.929239][T25053] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4923'. [ 788.509565][T25094] netlink: 'syz.2.4933': attribute type 10 has an invalid length. [ 788.602715][T25100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4936'. [ 788.650765][T25100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'. [ 788.917109][T25106] svc: failed to register nfsdv3 RPC service (errno 111). [ 788.930284][T25106] svc: failed to register nfsaclv3 RPC service (errno 111). [ 788.981171][T25122] syz.5.4945 (25122) used obsolete PPPIOCDETACH ioctl [ 788.990993][T25124] rdma_op ffff88802740f9f0 conn xmit_rdma 0000000000000000 [ 789.118890][T25127] syzkaller1: entered promiscuous mode [ 789.124421][T25127] syzkaller1: entered allmulticast mode [ 789.264725][T25133] netlink: 'syz.3.4949': attribute type 1 has an invalid length. [ 789.547274][T25147] wg1 speed is unknown, defaulting to 1000 [ 789.560135][T25147] lo speed is unknown, defaulting to 1000 [ 789.579426][T25149] tipc: Enabling of bearer rejected, already enabled [ 789.618655][T25155] netlink: 'syz.2.4957': attribute type 1 has an invalid length. [ 789.685772][T25155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 789.693834][T25149] netlink: 'syz.1.4954': attribute type 6 has an invalid length. [ 789.702121][T25149] netlink: 'syz.1.4954': attribute type 6 has an invalid length. [ 789.713777][T25150] wg1 speed is unknown, defaulting to 1000 [ 789.766286][T25156] block nbd0: server does not support multiple connections per device. [ 789.784381][T25160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 789.784404][T25156] block nbd0: shutting down sockets [ 789.792232][T25160] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 789.810163][T25160] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 789.837804][T25164] nbd: must specify an index to disconnect [ 789.861368][T25155] gretap1: entered promiscuous mode [ 789.873620][T25155] bond6: (slave gretap1): making interface the new active one [ 789.887144][T25155] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 789.963551][T25168] macvlan2: entered promiscuous mode [ 789.976527][T25168] macvlan2: entered allmulticast mode [ 789.996905][T25168] bond6: entered promiscuous mode [ 790.005034][T25168] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 790.015410][T25168] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 790.031195][T25168] bond6: left promiscuous mode [ 790.091311][T25150] lo speed is unknown, defaulting to 1000 [ 790.103495][T25176] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.278680][T25176] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.299161][T25188] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 790.409138][T25193] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 790.551285][T25176] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.654978][T25176] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.767276][T25210] netlink: 'syz.2.4969': attribute type 1 has an invalid length. [ 790.777147][T19432] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.820389][T19432] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.873209][T19429] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.888119][T25215] netlink: 'syz.0.4970': attribute type 10 has an invalid length. [ 790.926313][T19432] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.136856][T25232] tipc: Enabled bearer , priority 0 [ 791.163038][T25232] syzkaller0: entered promiscuous mode [ 791.178515][T25232] syzkaller0: entered allmulticast mode [ 791.235959][T25232] tipc: Resetting bearer [ 791.260441][T25239] netlink: 'syz.5.4977': attribute type 29 has an invalid length. [ 791.308198][T25231] tipc: Resetting bearer [ 791.352774][T25231] tipc: Disabling bearer [ 791.373049][T25245] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 791.741772][T25274] tipc: Enabled bearer , priority 0 [ 791.774031][T25274] syzkaller0: entered promiscuous mode [ 791.796291][T25274] syzkaller0: entered allmulticast mode [ 791.813458][T25279] bridge0: entered promiscuous mode [ 791.844064][T25274] tipc: Resetting bearer [ 791.861884][T25272] tipc: Resetting bearer [ 791.885113][T25272] tipc: Disabling bearer [ 791.913547][T25279] bond7: option resend_igmp: invalid value (2878) [ 791.921289][T25279] bond7: option resend_igmp: allowed values 0 - 255 [ 791.931608][T25279] bond7 (unregistering): Released all slaves [ 792.011710][T25282] 8021q: adding VLAN 0 to HW filter on device bond9 [ 792.034487][T25287] bond9: (slave geneve2): making interface the new active one [ 792.046105][T25287] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 792.059228][T25290] ip6tnl0: Caught tx_queue_len zero misconfig [ 792.172209][T25292] __nla_validate_parse: 12 callbacks suppressed [ 792.172229][T25292] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4991'. [ 792.203241][T19435] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.247858][T19435] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.264227][T19435] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.278917][T19435] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.327847][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4997'. [ 792.707344][T25332] wg1 speed is unknown, defaulting to 1000 [ 792.719396][T25332] lo speed is unknown, defaulting to 1000 [ 792.942714][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5007'. [ 793.283457][T25358] tipc: Invalid UDP bearer configuration [ 793.283511][T25358] tipc: Enabling of bearer rejected, failed to enable media [ 793.424958][T25362] tipc: Invalid UDP bearer configuration [ 793.425013][T25362] tipc: Enabling of bearer rejected, failed to enable media [ 793.454653][T25361] wg1 speed is unknown, defaulting to 1000 [ 793.477916][T25368] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5012'. [ 793.493176][T25356] validate_nla: 3 callbacks suppressed [ 793.493194][T25356] netlink: 'syz.2.5010': attribute type 3 has an invalid length. [ 793.524165][T25361] lo speed is unknown, defaulting to 1000 [ 793.540563][T25356] netlink: 'syz.2.5010': attribute type 1 has an invalid length. [ 793.569007][T25356] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5010'. [ 793.601222][T25359] tipc: Failed to remove unknown binding: 66,1,1/0:2630748801/2630748803 [ 793.945691][T25378] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 794.088378][T25385] netpci0: tun_chr_ioctl cmd 1074025677 [ 794.094295][T25385] netpci0: linktype set to 6 [ 794.129599][T25385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 794.136887][T25385] IPv6: NLM_F_CREATE should be set when creating new route [ 794.144169][T25385] IPv6: NLM_F_CREATE should be set when creating new route [ 794.243856][T25393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5019'. [ 794.367279][T25389] syzkaller0: entered promiscuous mode [ 794.372821][T25389] syzkaller0: entered allmulticast mode [ 794.467370][T25389] tipc: Enabled bearer , priority 0 [ 794.480177][T25388] tipc: Resetting bearer [ 794.542219][T25388] tipc: Disabling bearer [ 794.661642][T25396] wg1 speed is unknown, defaulting to 1000 [ 794.715970][T25396] lo speed is unknown, defaulting to 1000 [ 795.225088][T25428] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5027'. [ 795.239750][ T5949] IPVS: starting estimator thread 0... [ 795.336919][T25429] IPVS: using max 25 ests per chain, 60000 per kthread [ 795.824562][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 795.872175][T25463] netlink: 'syz.2.5037': attribute type 1 has an invalid length. [ 795.915088][T25457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5036'. [ 795.932280][T25463] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 795.951412][T25457] netlink: 'syz.3.5036': attribute type 1 has an invalid length. [ 795.976944][T25457] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5036'. [ 796.106709][T25479] vxcan2: entered allmulticast mode [ 796.805527][T25518] "syz.5.5050" (25518) uses obsolete ecb(arc4) skcipher [ 796.857110][T25521] wg1 speed is unknown, defaulting to 1000 [ 796.866755][T25521] lo speed is unknown, defaulting to 1000 [ 797.188301][T25532] Can't find ip_set type bitmap:ip,mac [ 797.357471][T25539] macsec0: entered promiscuous mode [ 797.370261][T25539] macsec0: left promiscuous mode [ 797.568444][T25543] netlink: 'syz.0.5056': attribute type 3 has an invalid length. [ 798.087884][T25555] netlink: 'syz.3.5060': attribute type 1 has an invalid length. [ 798.528265][T25572] netlink: 'syz.2.5063': attribute type 1 has an invalid length. [ 798.528265][T25571] netlink: 'syz.2.5063': attribute type 1 has an invalid length. [ 798.528287][T25572] netlink: 'syz.2.5063': attribute type 3 has an invalid length. [ 798.565843][T25571] netlink: 'syz.2.5063': attribute type 3 has an invalid length. [ 798.573619][T25571] netlink: 'syz.2.5063': attribute type 2 has an invalid length. [ 798.606826][T25572] netlink: 'syz.2.5063': attribute type 2 has an invalid length. [ 798.653245][T25571] netlink: 'syz.2.5063': attribute type 3 has an invalid length. [ 798.663169][T25572] netlink: 'syz.2.5063': attribute type 3 has an invalid length. [ 798.697832][T25572] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5063'. [ 798.716514][T25571] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5063'. [ 798.872333][T25594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5069'. [ 798.921516][T25594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5069'. [ 799.031295][T25597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5070'. [ 799.082432][T25599] syz_tun: entered allmulticast mode [ 799.194469][T25612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5071'. [ 799.203562][T25601] bond5: Unable to set down delay as MII monitoring is disabled [ 799.218192][T25601] bond5 (unregistering): Released all slaves [ 799.309381][T25598] syz_tun: left allmulticast mode [ 800.972930][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5075'. [ 800.985330][T25619] team0: left allmulticast mode [ 800.990223][T25619] team_slave_0: left allmulticast mode [ 801.011663][T25619] team_slave_1: left allmulticast mode [ 801.028067][T25624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5077'. [ 801.039611][T25619] bridge2: left allmulticast mode [ 801.044697][T25619] team0: left promiscuous mode [ 801.050546][T25619] team_slave_0: left promiscuous mode [ 801.056527][T25619] team_slave_1: left promiscuous mode [ 801.062264][T25619] bridge2: left promiscuous mode [ 801.088523][T25619] bridge0: port 3(team0) entered disabled state [ 801.103398][T25619] bridge_slave_1: left allmulticast mode [ 801.109531][T25619] bridge_slave_1: left promiscuous mode [ 801.115916][T25619] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.162211][T25619] bridge_slave_0: left allmulticast mode [ 801.170553][T25619] bridge_slave_0: left promiscuous mode [ 801.180232][T25619] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.360928][T25648] netlink: 'syz.3.5081': attribute type 11 has an invalid length. [ 801.493615][T25629] bond8 (unregistering): Released all slaves [ 801.651269][T25661] netlink: 'syz.5.5087': attribute type 1 has an invalid length. [ 801.674151][T25655] bond7: Unable to set down delay as MII monitoring is disabled [ 801.687432][T25655] bond7 (unregistering): Released all slaves [ 801.763953][T25661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.779185][T25631] wg1 speed is unknown, defaulting to 1000 [ 801.789759][T25631] lo speed is unknown, defaulting to 1000 [ 801.875079][T25663] bond5: (slave dummy0): making interface the new active one [ 801.884101][T25663] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 802.151397][T25663] bond5 (unregistering): (slave dummy0): Releasing active interface [ 802.163947][T25663] bond5 (unregistering): Released all slaves [ 802.331846][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5093'. [ 802.497562][T25693] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5093'. [ 802.834498][T25715] bond10: Unable to set down delay as MII monitoring is disabled [ 802.845961][T25715] bond10 (unregistering): Released all slaves [ 802.882981][T25719] ip6gre0: left promiscuous mode [ 802.908426][T25719] xfrm0: left promiscuous mode [ 802.922442][T25719] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 802.933880][T25719] bridge5: left promiscuous mode [ 802.950958][T25719] ip6gre1: left promiscuous mode [ 803.336331][T25740] wg1 speed is unknown, defaulting to 1000 [ 803.370786][T25740] lo speed is unknown, defaulting to 1000 [ 803.572189][T25755] bond8: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 803.583732][T25755] bond8: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 803.612979][T25760] GUP no longer grows the stack in syz.1.5111 (25760): 200000003000-20000000a000 (200000001000) [ 803.624080][T25760] CPU: 1 UID: 0 PID: 25760 Comm: syz.1.5111 Not tainted syzkaller #0 PREEMPT(full) [ 803.624105][T25760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 803.624116][T25760] Call Trace: [ 803.624124][T25760] [ 803.624134][T25760] dump_stack_lvl+0x189/0x250 [ 803.624166][T25760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.624196][T25760] ? __pfx__printk+0x10/0x10 [ 803.624212][T25760] ? find_vma+0xe7/0x160 [ 803.624249][T25760] __get_user_pages+0x2470/0x2a00 [ 803.624298][T25760] ? __gup_longterm_locked+0xc63/0x1660 [ 803.624321][T25760] ? down_read_killable+0x1d1/0x350 [ 803.624350][T25760] __gup_longterm_locked+0xde4/0x1660 [ 803.624378][T25760] ? try_grab_folio_fast+0x1bf/0x6a0 [ 803.624413][T25760] ? gup_fast_fallback+0x1b86/0x22d0 [ 803.624437][T25760] gup_fast_fallback+0x1d65/0x22d0 [ 803.624499][T25760] ? __pfx_gup_fast_fallback+0x10/0x10 [ 803.624518][T25760] ? __mutex_lock+0x335/0x1350 [ 803.624549][T25760] ? is_valid_gup_args+0x11f/0x200 [ 803.624572][T25760] ? get_user_pages_fast+0x4d/0xb0 [ 803.624597][T25760] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 803.624628][T25760] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 803.624646][T25760] ? wait_for_space+0x248/0x2d0 [ 803.624667][T25760] iov_iter_get_pages2+0x5e/0xa0 [ 803.624692][T25760] __se_sys_vmsplice+0x548/0x10d0 [ 803.624732][T25760] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 803.624754][T25760] ? __pfx_futex_wake+0x10/0x10 [ 803.624839][T25760] ? do_syscall_64+0xbe/0xfa0 [ 803.624864][T25760] do_syscall_64+0xfa/0xfa0 [ 803.624884][T25760] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.624904][T25760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.624922][T25760] ? clear_bhb_loop+0x60/0xb0 [ 803.624944][T25760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.624961][T25760] RIP: 0033:0x7f4fa8d8f749 [ 803.624978][T25760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.624994][T25760] RSP: 002b:00007f4fa9c75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 803.625014][T25760] RAX: ffffffffffffffda RBX: 00007f4fa8fe5fa0 RCX: 00007f4fa8d8f749 [ 803.625028][T25760] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 803.625040][T25760] RBP: 00007f4fa8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 803.625051][T25760] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 803.625062][T25760] R13: 00007f4fa8fe6038 R14: 00007f4fa8fe5fa0 R15: 00007ffd9a1521b8 [ 803.625096][T25760] [ 803.957393][T25767] bond5: Unable to set down delay as MII monitoring is disabled [ 803.968488][T25767] bond5 (unregistering): Released all slaves [ 803.994967][T25773] __nla_validate_parse: 2 callbacks suppressed [ 803.994985][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5113'. [ 804.011219][T25764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5112'. [ 804.049645][T25769] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5113'. [ 804.087076][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5115'. [ 804.098400][T25777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5115'. [ 804.107744][T25777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5115'. [ 804.117084][T25777] netlink: 540 bytes leftover after parsing attributes in process `syz.0.5115'. [ 804.139698][T25779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5116'. [ 804.289160][T25791] tipc: Enabling of bearer rejected, failed to enable media [ 804.414513][T25800] bond10: Unable to set down delay as MII monitoring is disabled [ 804.428673][T25800] bond10 (unregistering): Released all slaves [ 804.649017][T25816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5126'. [ 804.689401][T25821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5124'. [ 804.728024][T25816] batman_adv: batadv0: Removing interface: vlan0 [ 804.743225][T25816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.810609][T25831] netlink: 'syz.2.5124': attribute type 32 has an invalid length. [ 805.276438][T25831] bond7: Setting coupled_control to off (0) [ 805.311403][T25837] bond9: Unable to set down delay as MII monitoring is disabled [ 805.320597][T25837] bond9 (unregistering): Released all slaves [ 805.362271][T25856] bridge5: entered promiscuous mode [ 805.493145][T25864] netlink: 'syz.0.5134': attribute type 4 has an invalid length. [ 805.508293][T25864] netlink: 'syz.0.5134': attribute type 4 has an invalid length. [ 805.585009][T25870] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 805.664290][T25870] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.693543][T25870] tipc: Enabled bearer , priority 6 [ 805.796596][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.822400][T25884] netlink: 'syz.0.5139': attribute type 11 has an invalid length. [ 805.839580][T25884] netlink: 'syz.0.5139': attribute type 4 has an invalid length. [ 805.936368][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.076468][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.183014][T25892] netlink: 'syz.1.5142': attribute type 10 has an invalid length. [ 806.216267][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.356310][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.456476][ T5832] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 806.466450][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 806.496343][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.564158][T25905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.636400][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.648904][T25909] erspan2: entered allmulticast mode [ 806.776666][ T5902] tipc: Node number set to 1877556887 [ 806.877281][T25925] gretap0: entered promiscuous mode [ 806.916536][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.444378][T25936] syzkaller0: entered promiscuous mode [ 807.457484][T25936] syzkaller0: entered allmulticast mode [ 807.498488][T25936] macsec1: entered promiscuous mode [ 807.853900][T25937] wg1 speed is unknown, defaulting to 1000 [ 807.864313][T25937] lo speed is unknown, defaulting to 1000 [ 808.016506][T25944] netlink: 'syz.2.5158': attribute type 1 has an invalid length. [ 808.798480][T25980] sctp: [Deprecated]: syz.0.5167 (pid 25980) Use of int in max_burst socket option. [ 808.798480][T25980] Use struct sctp_assoc_value instead [ 809.157264][T25997] netlink: 'syz.5.5170': attribute type 10 has an invalid length. [ 809.176742][T25997] bridge0: port 4(macsec0) entered blocking state [ 809.185739][T25997] bridge0: port 4(macsec0) entered disabled state [ 809.192578][T25997] macsec0: entered allmulticast mode [ 809.205663][T25997] veth1_macvtap: entered allmulticast mode [ 809.225800][T25996] __nla_validate_parse: 15 callbacks suppressed [ 809.225820][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5170'. [ 809.252952][T25997] macsec0: entered promiscuous mode [ 809.285435][T25997] bridge0: port 4(macsec0) entered blocking state [ 809.292048][T25997] bridge0: port 4(macsec0) entered forwarding state [ 809.328440][T25996] dummy0: entered promiscuous mode [ 809.358168][T25996] dummy0: left promiscuous mode [ 809.579033][T26011] x_tables: duplicate underflow at hook 2 [ 809.589703][T26011] x_tables: duplicate underflow at hook 2 [ 809.717361][T26017] wg1 speed is unknown, defaulting to 1000 [ 809.805832][T26017] lo speed is unknown, defaulting to 1000 [ 810.570834][T26031] sctp: [Deprecated]: syz.0.5177 (pid 26031) Use of int in maxseg socket option. [ 810.570834][T26031] Use struct sctp_assoc_value instead [ 810.587497][T26030] sctp: [Deprecated]: syz.0.5177 (pid 26030) Use of int in maxseg socket option. [ 810.587497][T26030] Use struct sctp_assoc_value instead [ 810.605902][T26031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5177'. [ 810.617909][T26032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5177'. [ 810.855221][ C0] net_ratelimit: 4 callbacks suppressed [ 810.855245][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 810.955592][ T5915] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 810.964349][T19431] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 811.235771][ T5915] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 811.263141][T26049] tipc: Enabled bearer , priority 0 [ 811.279332][T26049] syzkaller0: entered promiscuous mode [ 811.326006][T26049] syzkaller0: entered allmulticast mode [ 811.359413][T26049] tipc: Resetting bearer [ 811.385728][T26047] nbd0: detected capacity change from 0 to 127 [ 811.403912][T26048] tipc: Resetting bearer [ 811.430385][T26050] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5183'. [ 811.486984][T26048] tipc: Disabling bearer [ 811.536917][ T5832] block nbd0: Receive control failed (result -32) [ 811.877629][T26069] netlink: 'syz.1.5188': attribute type 4 has an invalid length. [ 811.895333][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 811.976556][T19431] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 811.987187][T19431] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 812.150540][T26093] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5196'. [ 812.169200][T26094] ip6tnl0: entered promiscuous mode [ 812.177696][T26094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5194'. [ 812.231435][T26099] bond4: option mode: unable to set because the bond device has slaves [ 812.695996][ T1577] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 812.749676][T26114] Bluetooth: MGMT ver 1.23 [ 812.894080][T26115] wg1 speed is unknown, defaulting to 1000 [ 812.921673][T26115] lo speed is unknown, defaulting to 1000 [ 812.935328][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 813.374648][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5208'. [ 813.397558][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5208'. [ 813.431350][T26144] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 813.486642][T26149] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 813.542162][T26152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5210'. [ 813.559610][T26152] ip6tnl2: entered allmulticast mode [ 813.651796][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5213'. [ 813.701811][T26160] netlink: 'syz.5.5213': attribute type 1 has an invalid length. [ 813.730754][T26162] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 813.758604][T26162] bond5 (unregistering): Released all slaves [ 813.975204][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.087786][T26171] wg1 speed is unknown, defaulting to 1000 [ 814.098497][T26171] lo speed is unknown, defaulting to 1000 [ 814.331996][T26177] wg1 speed is unknown, defaulting to 1000 [ 814.340869][T26182] __nla_validate_parse: 5 callbacks suppressed [ 814.340888][T26182] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5221'. [ 814.378496][T26177] lo speed is unknown, defaulting to 1000 [ 814.634722][T26196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5225'. [ 814.680237][T26196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5225'. [ 814.729300][T26196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5225'. [ 814.825605][T26200] netlink: 'syz.5.5224': attribute type 11 has an invalid length. [ 814.843519][T26200] netlink: 'syz.5.5224': attribute type 11 has an invalid length. [ 814.863487][T26200] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5224'. [ 815.015259][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 815.021103][T26190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.127776][T26207] bond10: Unable to set down delay as MII monitoring is disabled [ 815.139966][T26207] bond10 (unregistering): Released all slaves [ 815.167294][T26219] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 815.217814][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5230'. [ 815.227213][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5230'. [ 815.343012][T26224] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5232'. [ 815.370822][T26224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5232'. [ 815.383217][T26224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5232'. [ 815.961727][T26258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.055308][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 816.170623][T26280] netlink: 'syz.0.5247': attribute type 4 has an invalid length. [ 816.215341][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 816.244856][T26277] wg1 speed is unknown, defaulting to 1000 [ 816.286637][T26277] lo speed is unknown, defaulting to 1000 [ 816.650535][T26297] bond9: entered promiscuous mode [ 816.657991][T26297] bond9: entered allmulticast mode [ 816.676702][T26297] 8021q: adding VLAN 0 to HW filter on device bond9 [ 816.880348][T26313] bridge0: port 5(vlan1) entered blocking state [ 816.889777][T26313] bridge0: port 5(vlan1) entered disabled state [ 816.897454][T26313] vlan1: entered allmulticast mode [ 816.902604][T26313] bridge0: entered allmulticast mode [ 816.913378][T26313] vlan1: left allmulticast mode [ 816.928893][T26313] bridge0: left allmulticast mode [ 817.010690][T26304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.095198][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 817.160033][T26304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.272036][T26322] syzkaller1: entered promiscuous mode [ 817.281236][T26322] syzkaller1: entered allmulticast mode [ 817.398402][T26344] wg1 speed is unknown, defaulting to 1000 [ 817.411766][T26344] lo speed is unknown, defaulting to 1000 [ 817.481495][T26348] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 817.638013][T26356] netlink: 'syz.3.5265': attribute type 33 has an invalid length. [ 817.742208][T26358] tipc: Cannot configure node identity twice [ 817.828700][T26362] syzkaller1: entered promiscuous mode [ 817.838022][T26362] syzkaller1: entered allmulticast mode [ 817.988743][T26369] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 818.106650][T26380] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 818.135458][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 818.160468][T26380] bond5 (unregistering): Released all slaves [ 818.322131][T26396] netlink: 'syz.5.5273': attribute type 3 has an invalid length. [ 818.470365][T26404] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 818.686200][T26425] netlink: 'syz.0.5282': attribute type 10 has an invalid length. [ 818.920500][T26432] wg1 speed is unknown, defaulting to 1000 [ 818.931438][T26432] lo speed is unknown, defaulting to 1000 [ 819.175210][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 820.215607][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 820.446449][T26480] __nla_validate_parse: 14 callbacks suppressed [ 820.446469][T26480] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5299'. [ 820.488691][T26488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5301'. [ 821.079316][T26511] wg1 speed is unknown, defaulting to 1000 [ 821.092813][T26511] lo speed is unknown, defaulting to 1000 [ 821.165038][T26519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5308'. [ 821.178733][T26519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5308'. [ 821.255238][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 821.381018][T26504] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 821.528157][T26534] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 821.552459][T26534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.811310][T26553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5320'. [ 822.120379][T26571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 822.174838][T26573] veth1: mtu less than device minimum [ 822.178390][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5325'. [ 822.295242][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 822.681324][T26594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5331'. [ 822.693306][T26594] xt_recent: Unsupported userspace flags (000000b1) [ 822.980627][T26608] netlink: 308 bytes leftover after parsing attributes in process `syz.0.5336'. [ 822.991123][T26608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 823.122597][T26620] netlink: 'syz.1.5337': attribute type 1 has an invalid length. [ 823.335322][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 823.390170][T26633] bridge0: entered promiscuous mode [ 823.408286][T26633] bridge0: port 5(macvtap1) entered blocking state [ 823.437488][T26633] bridge0: port 5(macvtap1) entered disabled state [ 823.444292][T26633] macvtap1: entered allmulticast mode [ 823.493060][T26633] bridge0: entered allmulticast mode [ 823.534755][T26633] macvtap1: left allmulticast mode [ 823.561261][T26633] bridge0: left allmulticast mode [ 823.588818][T26633] bridge0: left promiscuous mode [ 823.637671][T19432] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 823.647475][T19432] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 823.667145][ T1577] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 823.690571][T26640] wg1 speed is unknown, defaulting to 1000 [ 823.704504][T26640] lo speed is unknown, defaulting to 1000 [ 823.917804][T26648] sctp: [Deprecated]: syz.5.5347 (pid 26648) Use of int in max_burst socket option. [ 823.917804][T26648] Use struct sctp_assoc_value instead [ 824.025715][ T5915] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 824.200103][T26640] netlink: 'syz.0.5345': attribute type 6 has an invalid length. [ 824.287602][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5349'. [ 824.375199][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 824.536800][ T5949] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 824.563839][T26671] netlink: zone id is out of range [ 824.573271][T26671] netlink: zone id is out of range [ 824.695308][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 826.456621][ C0] net_ratelimit: 6 callbacks suppressed [ 826.456641][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 827.293115][T26692] wg1 speed is unknown, defaulting to 1000 [ 827.328756][T26697] wg1 speed is unknown, defaulting to 1000 [ 827.344181][T26692] lo speed is unknown, defaulting to 1000 [ 827.354204][T26688] wg1 speed is unknown, defaulting to 1000 [ 827.366754][T26708] wg1 speed is unknown, defaulting to 1000 [ 827.381193][T26697] lo speed is unknown, defaulting to 1000 [ 827.412498][T26688] lo speed is unknown, defaulting to 1000 [ 827.418813][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 827.477371][T26708] lo speed is unknown, defaulting to 1000 [ 827.495401][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 827.544008][T26719] __nla_validate_parse: 1 callbacks suppressed [ 827.544025][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5363'. [ 827.745468][ T1577] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 828.010643][T26729] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5367'. [ 828.336270][T26747] netlink: 464 bytes leftover after parsing attributes in process `syz.2.5373'. [ 828.465914][ T1577] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 828.535381][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 828.627475][T26764] netlink: 'syz.0.5379': attribute type 1 has an invalid length. [ 828.683571][T26764] 8021q: adding VLAN 0 to HW filter on device bond10 [ 828.779486][T26777] netlink: 'syz.1.5383': attribute type 1 has an invalid length. [ 828.802098][T26774] wg1 speed is unknown, defaulting to 1000 [ 828.837855][T26778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 828.867942][T26777] 8021q: adding VLAN 0 to HW filter on device bond10 [ 828.996212][T26785] netlink: 'syz.5.5384': attribute type 16 has an invalid length. [ 829.004266][T26785] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.5384'. [ 829.029385][T26781] veth11: entered promiscuous mode [ 829.070303][T26781] bond10: (slave veth11): Enslaving as an active interface with a down link [ 829.098082][T26774] lo speed is unknown, defaulting to 1000 [ 829.107921][T26795] netlink: 'syz.2.5385': attribute type 25 has an invalid length. [ 829.128671][T26794] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5386'. [ 829.138473][T26795] netlink: 'syz.2.5385': attribute type 34 has an invalid length. [ 829.203546][T26799] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5386'. [ 829.272096][T26800] tipc: Enabling of bearer rejected, failed to enable media [ 829.402932][T26800] syzkaller0: entered promiscuous mode [ 829.425914][T26800] syzkaller0: entered allmulticast mode [ 829.575227][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 829.953653][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5395'. [ 830.098165][T26838] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 830.189423][T26844] netlink: 'syz.0.5396': attribute type 1 has an invalid length. [ 830.202615][T26844] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.5396'. [ 830.414450][T26843] bond8: Unable to set down delay as MII monitoring is disabled [ 830.424486][T26843] bond8 (unregistering): Released all slaves [ 830.615328][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 830.689805][T26864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5404'. [ 830.770013][T26864] team1: entered promiscuous mode [ 830.776456][T26864] team1: entered allmulticast mode [ 830.782242][T26864] 8021q: adding VLAN 0 to HW filter on device team1 [ 831.130495][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5412'. [ 831.413230][T26894] tipc: Enabled bearer , priority 0 [ 831.452319][T26894] syzkaller0: entered promiscuous mode [ 831.477577][T26894] syzkaller0: entered allmulticast mode [ 831.652420][T26908] wg1 speed is unknown, defaulting to 1000 [ 831.655423][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 831.670122][T26894] tipc: Resetting bearer [ 831.687744][T26908] lo speed is unknown, defaulting to 1000 [ 831.700672][T26893] tipc: Resetting bearer [ 831.753875][T26893] tipc: Disabling bearer [ 831.903956][T26919] wg1 speed is unknown, defaulting to 1000 [ 832.041238][T26919] lo speed is unknown, defaulting to 1000 [ 832.112181][T26932] tipc: Enabled bearer , priority 0 [ 832.183906][T26935] syzkaller0: entered promiscuous mode [ 832.203993][T26935] syzkaller0: entered allmulticast mode [ 832.487626][T26948] RDS: rds_bind could not find a transport for ::ffff:172.20.20.26, load rds_tcp or rds_rdma? [ 832.644534][T26932] tipc: Resetting bearer [ 832.666618][T26930] tipc: Resetting bearer [ 832.695310][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 832.762949][T26930] tipc: Disabling bearer [ 832.856445][T26934] wg1 speed is unknown, defaulting to 1000 [ 832.867383][T26934] lo speed is unknown, defaulting to 1000 [ 833.021282][T26973] wg1 speed is unknown, defaulting to 1000 [ 833.050671][T26973] lo speed is unknown, defaulting to 1000 [ 833.372187][T26986] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 833.460706][T26988] __nla_validate_parse: 3 callbacks suppressed [ 833.460725][T26988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5435'. [ 833.735372][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 834.090270][T27006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 834.157226][T27012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5442'. [ 834.247526][T27019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5444'. [ 834.775447][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 834.917910][T27056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5452'. [ 834.935312][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 834.968334][T27056] tipc: Enabled bearer , priority 0 [ 835.101731][T27056] syzkaller0: entered promiscuous mode [ 835.107772][T27056] syzkaller0: entered allmulticast mode [ 835.271681][T27080] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.5457'. [ 835.297408][T27080] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 835.576967][T27103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5463'. [ 835.817789][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 836.856901][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 837.416760][T27103] ip6gretap2: entered promiscuous mode [ 837.422360][T27103] ip6gretap2: entered allmulticast mode [ 837.430763][T27053] tipc: Resetting bearer [ 837.511431][T27053] tipc: Disabling bearer [ 837.525589][ T1577] tipc: Node number set to 4017983795 [ 837.559910][T27110] sctp: [Deprecated]: syz.3.5466 (pid 27110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 837.559910][T27110] Use struct sctp_sack_info instead [ 837.856452][T27128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5472'. [ 837.882741][T27129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 837.890052][T27129] IPv6: NLM_F_CREATE should be set when creating new route [ 837.895337][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 837.921954][T27128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 837.954486][T27135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5473'. [ 838.015861][T27137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5473'. [ 838.063096][T27144] netlink: 'syz.2.5475': attribute type 33 has an invalid length. [ 838.081953][T27135] tipc: Enabled bearer , priority 0 [ 838.104417][T27137] tipc: Enabling of bearer rejected, already enabled [ 838.107620][T27144] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5475'. [ 838.126950][T27135] syzkaller0: entered promiscuous mode [ 838.132469][T27135] syzkaller0: entered allmulticast mode [ 838.229932][T27137] tipc: Resetting bearer [ 838.281818][T27135] tipc: Resetting bearer [ 838.334992][T27135] tipc: Disabling bearer [ 838.439541][T27166] 8021q: adding VLAN 0 to HW filter on device bond11 [ 838.462388][T27166] macvlan4: entered promiscuous mode [ 838.468678][T27166] macvlan4: entered allmulticast mode [ 838.478126][T27166] bond11: (slave macvlan4): Opening slave failed [ 838.873098][T27195] netlink: ct family unspecified [ 838.878760][T27195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.935291][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 838.958315][T27204] netlink: 'syz.1.5486': attribute type 12 has an invalid length. [ 839.016726][T27204] netlink: 'syz.1.5486': attribute type 4 has an invalid length. [ 839.063750][T27203] tipc: Enabled bearer , priority 0 [ 839.097489][T27203] syzkaller0: entered promiscuous mode [ 839.118722][T27203] syzkaller0: entered allmulticast mode [ 839.211778][T27203] tipc: Resetting bearer [ 839.307986][T27197] tipc: Resetting bearer [ 839.366405][T27197] tipc: Disabling bearer [ 839.819766][T27232] macsec0: entered promiscuous mode [ 839.830206][T27232] macsec0: left promiscuous mode [ 839.913790][T27235] __nla_validate_parse: 1 callbacks suppressed [ 839.913807][T27235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5494'. [ 839.975211][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 840.083891][T27234] netlink: 'syz.3.5490': attribute type 5 has an invalid length. [ 840.221518][T27242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5498'. [ 840.256611][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5496'. [ 840.957740][ T5949] lo speed is unknown, defaulting to 1000 [ 840.960076][T27265] lo: Caught tx_queue_len zero misconfig [ 840.963635][ T5949] syz2: Port: 1 Link ACTIVE [ 841.015516][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 841.097671][T27273] tipc: Enabled bearer , priority 0 [ 841.120162][T27275] syzkaller0: entered promiscuous mode [ 841.126786][T27275] syzkaller0: entered allmulticast mode [ 841.172157][T27262] tipc: Resetting bearer [ 841.206372][T27260] tipc: Resetting bearer [ 841.234201][T27260] tipc: Disabling bearer [ 841.335294][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 841.401771][T27293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5508'. [ 841.413595][T27295] netlink: 'syz.2.5509': attribute type 1 has an invalid length. [ 841.423301][T27295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5509'. [ 841.446207][T27293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5508'. [ 841.892977][T27316] netlink: 'syz.1.5514': attribute type 4 has an invalid length. [ 842.055295][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 842.429108][T27345] netlink: 'syz.3.5524': attribute type 1 has an invalid length. [ 842.437871][T27345] netlink: 'syz.3.5524': attribute type 1 has an invalid length. [ 842.454805][T27345] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.5524'. [ 842.492520][T27348] wg1 speed is unknown, defaulting to 1000 [ 842.502001][T27347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5525'. [ 842.509431][T27348] lo speed is unknown, defaulting to 1000 [ 842.647402][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5527'. [ 842.727969][T27353] wg1 speed is unknown, defaulting to 1000 [ 842.737735][T27352] netlink: 'syz.5.5526': attribute type 3 has an invalid length. [ 842.747440][T27352] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5526'. [ 842.817147][T27353] lo speed is unknown, defaulting to 1000 [ 843.095185][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 843.142914][T27388] nbd: nbd1 already in use [ 843.149083][T27388] block nbd1: NBD_DISCONNECT [ 843.153851][T27388] block nbd1: Send disconnect failed -32 [ 843.161215][T27388] block nbd1: shutting down sockets [ 843.171144][T27384] delete_channel: no stack [ 843.299539][T27391] netlink: 'syz.0.5536': attribute type 5 has an invalid length. [ 843.351866][T27394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.141516][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 844.473599][T19431] nr0 (unregistering): left promiscuous mode [ 844.479820][T19431] bond_slave_0: left promiscuous mode [ 844.485564][T19431] @0Ù: left promiscuous mode [ 844.491747][T19431] nr0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.503003][T19431] nr0 (unregistering): (slave c@0Ù): Releasing backup interface [ 844.517777][T19431] nr0 (unregistering): Released all slaves [ 844.546694][T19431] bond0 (unregistering): Released all slaves [ 844.742098][T19431] bond1 (unregistering): Released all slaves [ 844.905561][T19431] æÿîÿ: left promiscuous mode [ 845.106393][T27466] netlink: 'syz.1.5546': attribute type 12 has an invalid length. [ 845.162556][T27460] netlink: 'syz.0.5548': attribute type 10 has an invalid length. [ 845.174213][T27460] team0: Port device syz_tun added [ 845.175321][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 845.200381][T19431] : left promiscuous mode [ 845.226368][T27467] netlink: 'syz.3.5549': attribute type 2 has an invalid length. [ 845.254642][T27466] netlink: 'syz.1.5546': attribute type 4 has an invalid length. [ 845.280573][T19431] tipc: Disabling bearer [ 845.292592][T19431] tipc: Left network mode [ 845.650336][T27478] wg1 speed is unknown, defaulting to 1000 [ 845.661942][T27478] lo speed is unknown, defaulting to 1000 [ 845.711384][T27493] bond4: option mode: unable to set because the bond device has slaves [ 845.907730][T27501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.208643][T19431] dummy0: left promiscuous mode [ 846.215305][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 846.280459][T19431] hsr_slave_0: left promiscuous mode [ 846.298952][T19431] macsec0: left allmulticast mode [ 846.378301][T19431] pimreg (unregistering): left allmulticast mode [ 846.470887][T19431] pimreg3 (unregistering): left allmulticast mode [ 846.505684][T27528] netlink: 'syz.3.5566': attribute type 21 has an invalid length. [ 846.519144][T27528] __nla_validate_parse: 2 callbacks suppressed [ 846.519164][T27528] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5566'. [ 846.934570][ T30] audit: type=1800 audit(1764530644.665:6): pid=27533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5567" name="memory.events" dev="tmpfs" ino=2245 res=0 errno=0 [ 847.027946][T19431] team0 (unregistering): Port device team_slave_1 removed [ 847.106381][T19431] team0 (unregistering): Port device team_slave_0 removed [ 847.221622][T27543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5568'. [ 847.232607][T27543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5568'. [ 847.255369][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 847.931886][T27528] netlink: 'syz.3.5566': attribute type 4 has an invalid length. [ 847.955195][T27528] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5566'. [ 847.999286][T27543] macvlan0: entered allmulticast mode [ 848.004975][T27543] veth1_vlan: entered allmulticast mode [ 848.152880][T27545] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5569'. [ 848.295312][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 848.390941][T27551] syzkaller0: entered promiscuous mode [ 848.405374][T27551] syzkaller0: entered allmulticast mode [ 848.445840][T19431] IPVS: stop unused estimator thread 0... [ 848.593559][T27563] Cannot find del_set index 2 as target [ 848.717964][T27570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5576'. [ 848.878924][T27576] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5580'. [ 848.943481][T27580] sock: sock_timestamping_bind_phc: sock not bind to device [ 849.087459][T27578] netlink: set zone limit has 4 unknown bytes [ 849.214108][T27589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5584'. [ 849.239260][T27589] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5584'. [ 849.249865][T27589] tipc: Invalid UDP bearer configuration [ 849.249917][T27589] tipc: Enabling of bearer rejected, failed to enable media [ 849.335208][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 849.374035][T27594] sctp: [Deprecated]: syz.1.5586 (pid 27594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 849.374035][T27594] Use struct sctp_sack_info instead [ 849.416457][T27597] netlink: 'syz.1.5586': attribute type 1 has an invalid length. [ 849.426431][T27595] netlink: 'syz.1.5586': attribute type 1 has an invalid length. [ 849.524635][T27597] 8021q: adding VLAN 0 to HW filter on device bond11 [ 849.593118][T27603] netlink: 'syz.3.5588': attribute type 1 has an invalid length. [ 849.655517][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 849.715233][T27603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 849.746528][T27611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5588'. [ 849.808391][T27606] bond5: (slave gretap1): making interface the new active one [ 849.842642][T27606] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 850.370381][T27611] bond5 (unregistering): (slave gretap1): Releasing active interface [ 850.375244][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 850.396762][T27611] bond5 (unregistering): Released all slaves [ 850.437308][T19431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.459757][T19431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.684844][T27624] pim6reg1: entered promiscuous mode [ 850.714698][T27624] pim6reg1: entered allmulticast mode [ 850.771589][T19436] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 851.415202][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 851.602837][T27649] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 851.655682][T27655] netlink: 'syz.5.5600': attribute type 21 has an invalid length. [ 851.683985][T27662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 851.690157][T27655] __nla_validate_parse: 3 callbacks suppressed [ 851.690175][T27655] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5600'. [ 851.727080][T27655] netlink: 'syz.5.5600': attribute type 4 has an invalid length. [ 851.779408][T27655] netlink: 'syz.5.5600': attribute type 5 has an invalid length. [ 851.807932][T27655] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5600'. [ 851.837539][T27668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 851.839728][T27673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5605'. [ 851.848781][T27668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'. [ 851.866725][T27668] netlink: 'syz.0.5604': attribute type 15 has an invalid length. [ 851.884178][T27666] lo speed is unknown, defaulting to 1000 [ 851.886824][T27674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 851.893162][T27673] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5605'. [ 851.989504][T27668] tipc: Enabled bearer , priority 0 [ 852.140477][T27676] syzkaller0: entered promiscuous mode [ 852.148978][T27676] syzkaller0: entered allmulticast mode [ 852.174396][T27668] tipc: Resetting bearer [ 852.196276][T27667] tipc: Resetting bearer [ 852.238061][T27667] tipc: Disabling bearer [ 852.309317][T27688] syzkaller0: entered promiscuous mode [ 852.314835][T27688] syzkaller0: entered allmulticast mode [ 852.314972][T27697] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5611'. [ 852.455617][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 852.538765][T27708] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5614'. [ 852.549787][T27708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5614'. [ 853.501141][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 854.535377][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 855.044642][T27738] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 855.050574][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 855.082134][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 855.117635][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 855.128341][T27748] netlink: 'syz.3.5622': attribute type 1 has an invalid length. [ 855.416112][T27737] infiniband syz1: set down [ 855.420920][T27737] infiniband syz1: added xfrm0 [ 855.448170][T27748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 855.470637][T27751] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 855.495839][T27737] RDS/IB: syz1: added [ 855.499982][T27737] smc: adding ib device syz1 with port count 1 [ 855.509572][T27737] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 855.555583][ T5915] xfrm0 speed is unknown, defaulting to 1000 [ 855.562065][ T1577] xfrm0 speed is unknown, defaulting to 1000 [ 855.571348][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 855.575485][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 855.618886][T27760] lo speed is unknown, defaulting to 1000 [ 855.808091][T27767] netlink: 'syz.3.5624': attribute type 10 has an invalid length. [ 855.838016][T27760] xfrm0 speed is unknown, defaulting to 1000 [ 855.930871][T27768] lo speed is unknown, defaulting to 1000 [ 855.973689][T27771] lo speed is unknown, defaulting to 1000 [ 856.198219][T27779] lo speed is unknown, defaulting to 1000 [ 856.259104][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 856.299566][T27780] lo speed is unknown, defaulting to 1000 [ 856.313683][T27786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 856.615480][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 856.627083][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 856.709200][T27793] __nla_validate_parse: 5 callbacks suppressed [ 856.709217][T27793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5631'. [ 856.839425][T27795] xt_TCPMSS: Only works on TCP SYN packets [ 856.897170][T27768] xfrm0 speed is unknown, defaulting to 1000 [ 857.140243][T27779] xfrm0 speed is unknown, defaulting to 1000 [ 857.456065][T27780] xfrm0 speed is unknown, defaulting to 1000 [ 857.655576][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 857.837938][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 858.183130][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 858.421926][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 858.609287][T27818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5640'. [ 858.622459][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 858.653140][T27818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5640'. [ 858.695485][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 858.814809][T27737] xfrm0 speed is unknown, defaulting to 1000 [ 859.330938][T19432] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.343730][T19432] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.355065][T19432] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.367211][T19432] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.506743][T27828] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5644'. [ 859.523036][T27828] lo: entered allmulticast mode [ 859.552693][T27828] dvmrp8: entered allmulticast mode [ 859.564196][T27828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5644'. [ 859.579692][T27827] lo: left allmulticast mode [ 859.735637][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 859.917414][T27834] FAULT_INJECTION: forcing a failure. [ 859.917414][T27834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.919061][T27834] [ 859.919070][T27834] ====================================================== [ 859.919077][T27834] WARNING: possible circular locking dependency detected [ 859.919091][T27834] syzkaller #0 Not tainted [ 859.919100][T27834] ------------------------------------------------------ [ 859.919108][T27834] syz.3.5646/27834 is trying to acquire lock: [ 859.919118][T27834] ffffffff8df31660 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 859.919168][T27834] [ 859.919168][T27834] but task is already holding lock: [ 859.919174][T27834] ffff8880b893a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 859.919211][T27834] [ 859.919211][T27834] which lock already depends on the new lock. [ 859.919211][T27834] [ 859.919217][T27834] [ 859.919217][T27834] the existing dependency chain (in reverse order) is: [ 859.919225][T27834] [ 859.919225][T27834] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 859.919255][T27834] lock_acquire+0x120/0x360 [ 859.919271][T27834] _raw_spin_lock_nested+0x32/0x50 [ 859.919289][T27834] raw_spin_rq_lock_nested+0x2a/0x140 [ 859.919305][T27834] task_rq_lock+0xbc/0x470 [ 859.919320][T27834] cgroup_move_task+0x92/0x2a0 [ 859.919338][T27834] css_set_move_task+0x658/0x9e0 [ 859.919358][T27834] cgroup_post_fork+0x1ef/0x790 [ 859.919377][T27834] copy_process+0x3862/0x3c00 [ 859.919394][T27834] kernel_clone+0x21e/0x840 [ 859.919412][T27834] user_mode_thread+0xdd/0x140 [ 859.919429][T27834] rest_init+0x23/0x300 [ 859.919449][T27834] start_kernel+0x3ae/0x410 [ 859.919468][T27834] x86_64_start_reservations+0x24/0x30 [ 859.919484][T27834] x86_64_start_kernel+0x143/0x1c0 [ 859.919499][T27834] common_startup_64+0x13e/0x147 [ 859.919519][T27834] [ 859.919519][T27834] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 859.919543][T27834] lock_acquire+0x120/0x360 [ 859.919558][T27834] _raw_spin_lock_irqsave+0xa7/0xf0 [ 859.919574][T27834] try_to_wake_up+0x67/0x12b0 [ 859.919594][T27834] __wake_up_common_lock+0x137/0x1f0 [ 859.919614][T27834] tty_port_default_wakeup+0xfb/0x170 [ 859.919630][T27834] serial8250_tx_chars+0x72e/0x970 [ 859.919652][T27834] serial8250_handle_irq+0x633/0xbb0 [ 859.919672][T27834] serial8250_default_handle_irq+0xbf/0x200 [ 859.919689][T27834] serial8250_interrupt+0x8d/0x180 [ 859.919707][T27834] __handle_irq_event_percpu+0x295/0xab0 [ 859.919727][T27834] handle_irq_event+0x8b/0x1e0 [ 859.919747][T27834] handle_edge_irq+0x23b/0xa10 [ 859.919765][T27834] __common_interrupt+0x141/0x1f0 [ 859.919787][T27834] common_interrupt+0xb6/0xe0 [ 859.919809][T27834] asm_common_interrupt+0x26/0x40 [ 859.919824][T27834] set_pte_range+0x5e5/0x700 [ 859.919844][T27834] filemap_map_pages+0xfcd/0x2000 [ 859.919860][T27834] __handle_mm_fault+0x347e/0x5400 [ 859.919879][T27834] handle_mm_fault+0x40a/0x8e0 [ 859.919898][T27834] do_user_addr_fault+0xa7c/0x1380 [ 859.919914][T27834] exc_page_fault+0x82/0x100 [ 859.919930][T27834] asm_exc_page_fault+0x26/0x30 [ 859.919945][T27834] [ 859.919945][T27834] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 859.919968][T27834] lock_acquire+0x120/0x360 [ 859.919983][T27834] _raw_spin_lock_irqsave+0xa7/0xf0 [ 859.919998][T27834] __wake_up_common_lock+0x2f/0x1f0 [ 859.920018][T27834] tty_port_default_wakeup+0xfb/0x170 [ 859.920033][T27834] serial8250_tx_chars+0x72e/0x970 [ 859.920052][T27834] serial8250_handle_irq+0x633/0xbb0 [ 859.920073][T27834] serial8250_default_handle_irq+0xbf/0x200 [ 859.920089][T27834] serial8250_interrupt+0x8d/0x180 [ 859.920106][T27834] __handle_irq_event_percpu+0x295/0xab0 [ 859.920127][T27834] handle_irq_event+0x8b/0x1e0 [ 859.920146][T27834] handle_edge_irq+0x23b/0xa10 [ 859.920169][T27834] __common_interrupt+0x141/0x1f0 [ 859.920190][T27834] common_interrupt+0xb6/0xe0 [ 859.920210][T27834] asm_common_interrupt+0x26/0x40 [ 859.920230][T27834] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 859.920253][T27834] uart_port_unlock_deref+0x111/0x2f0 [ 859.920273][T27834] uart_write+0xe8/0x130 [ 859.920292][T27834] n_tty_write+0xd27/0x1200 [ 859.920308][T27834] file_tty_write+0x559/0xa20 [ 859.920327][T27834] vfs_write+0x5c9/0xb30 [ 859.920347][T27834] ksys_write+0x145/0x250 [ 859.920366][T27834] do_syscall_64+0xfa/0xfa0 [ 859.920383][T27834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.920398][T27834] [ 859.920398][T27834] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 859.920422][T27834] lock_acquire+0x120/0x360 [ 859.920437][T27834] _raw_spin_lock_irqsave+0xa7/0xf0 [ 859.920453][T27834] serial8250_console_write+0x17e/0x1ba0 [ 859.920475][T27834] console_flush_all+0x6f3/0xb10 [ 859.920493][T27834] console_unlock+0xbb/0x190 [ 859.920511][T27834] vprintk_emit+0x4c5/0x590 [ 859.920528][T27834] _printk+0xcf/0x120 [ 859.920543][T27834] register_console+0xa8b/0xf90 [ 859.920563][T27834] univ8250_console_init+0x3a/0x70 [ 859.920579][T27834] console_init+0x10e/0x430 [ 859.920594][T27834] start_kernel+0x254/0x410 [ 859.920613][T27834] x86_64_start_reservations+0x24/0x30 [ 859.920629][T27834] x86_64_start_kernel+0x143/0x1c0 [ 859.920644][T27834] common_startup_64+0x13e/0x147 [ 859.920663][T27834] [ 859.920663][T27834] -> #0 (console_owner){-.-.}-{0:0}: [ 859.920686][T27834] validate_chain+0xb9b/0x2140 [ 859.920704][T27834] __lock_acquire+0xab9/0xd20 [ 859.920718][T27834] lock_acquire+0x120/0x360 [ 859.920733][T27834] console_flush_all+0x69c/0xb10 [ 859.920751][T27834] console_unlock+0xbb/0x190 [ 859.920769][T27834] vprintk_emit+0x4c5/0x590 [ 859.920785][T27834] _printk+0xcf/0x120 [ 859.920799][T27834] should_fail_ex+0x3f5/0x560 [ 859.920820][T27834] strncpy_from_user+0x36/0x290 [ 859.920840][T27834] strncpy_from_user_nofault+0x72/0x150 [ 859.920858][T27834] bpf_probe_read_compat_str+0xe2/0x180 [ 859.920877][T27834] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 859.920891][T27834] bpf_trace_run2+0x284/0x4b0 [ 859.920904][T27834] __bpf_trace_tlb_flush+0xf5/0x150 [ 859.920925][T27834] trace_tlb_flush+0x115/0x140 [ 859.920945][T27834] switch_mm_irqs_off+0x54a/0x7b0 [ 859.920965][T27834] __schedule+0x110e/0x4cc0 [ 859.920981][T27834] preempt_schedule_irq+0xb5/0x150 [ 859.920998][T27834] irqentry_exit+0x6f/0x90 [ 859.921015][T27834] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 859.921031][T27834] netlink_deliver_tap+0x17/0x1b0 [ 859.921050][T27834] netlink_unicast+0x7fa/0x9e0 [ 859.921065][T27834] netlink_sendmsg+0x805/0xb30 [ 859.921083][T27834] __sock_sendmsg+0x21c/0x270 [ 859.921105][T27834] ____sys_sendmsg+0x505/0x830 [ 859.921122][T27834] ___sys_sendmsg+0x21f/0x2a0 [ 859.921140][T27834] __x64_sys_sendmsg+0x19b/0x260 [ 859.921158][T27834] do_syscall_64+0xfa/0xfa0 [ 859.921175][T27834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.921190][T27834] [ 859.921190][T27834] other info that might help us debug this: [ 859.921190][T27834] [ 859.921196][T27834] Chain exists of: [ 859.921196][T27834] console_owner --> &p->pi_lock --> &rq->__lock [ 859.921196][T27834] [ 859.921223][T27834] Possible unsafe locking scenario: [ 859.921223][T27834] [ 859.921229][T27834] CPU0 CPU1 [ 859.921242][T27834] ---- ---- [ 859.921248][T27834] lock(&rq->__lock); [ 859.921260][T27834] lock(&p->pi_lock); [ 859.921273][T27834] lock(&rq->__lock); [ 859.921286][T27834] lock(console_owner); [ 859.921298][T27834] [ 859.921298][T27834] *** DEADLOCK *** [ 859.921298][T27834] [ 859.921304][T27834] 4 locks held by syz.3.5646/27834: [ 859.921315][T27834] #0: ffff8880b893a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 859.921356][T27834] #1: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 859.921394][T27834] #2: ffffffff8df316c0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 859.921432][T27834] #3: ffffffff8de18f90 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 859.921475][T27834] [ 859.921475][T27834] stack backtrace: [ 859.921486][T27834] CPU: 1 UID: 0 PID: 27834 Comm: syz.3.5646 Not tainted syzkaller #0 PREEMPT(full) [ 859.921506][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 859.921517][T27834] Call Trace: [ 859.921523][T27834] [ 859.921530][T27834] dump_stack_lvl+0x189/0x250 [ 859.921554][T27834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.921575][T27834] ? __pfx__printk+0x10/0x10 [ 859.921593][T27834] ? print_lock_name+0xde/0x100 [ 859.921612][T27834] print_circular_bug+0x2ee/0x310 [ 859.921634][T27834] check_noncircular+0x134/0x160 [ 859.921657][T27834] validate_chain+0xb9b/0x2140 [ 859.921687][T27834] __lock_acquire+0xab9/0xd20 [ 859.921706][T27834] ? console_flush_all+0x13a/0xb10 [ 859.921726][T27834] lock_acquire+0x120/0x360 [ 859.921741][T27834] ? console_flush_all+0x13a/0xb10 [ 859.921766][T27834] ? do_raw_spin_unlock+0x122/0x240 [ 859.921788][T27834] ? console_flush_all+0x13a/0xb10 [ 859.921808][T27834] console_flush_all+0x69c/0xb10 [ 859.921835][T27834] ? console_flush_all+0x13a/0xb10 [ 859.921857][T27834] ? console_flush_all+0x13a/0xb10 [ 859.921881][T27834] ? __pfx_console_flush_all+0x10/0x10 [ 859.921906][T27834] ? is_printk_cpu_sync_owner+0x32/0x40 [ 859.921937][T27834] console_unlock+0xbb/0x190 [ 859.921955][T27834] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 859.921982][T27834] ? __pfx_console_unlock+0x10/0x10 [ 859.922006][T27834] vprintk_emit+0x4c5/0x590 [ 859.922027][T27834] ? __pfx_vprintk_emit+0x10/0x10 [ 859.922046][T27834] ? trace_event_buffer_commit+0x264/0x7b0 [ 859.922075][T27834] _printk+0xcf/0x120 [ 859.922091][T27834] ? __pfx____ratelimit+0x10/0x10 [ 859.922110][T27834] ? __pfx__printk+0x10/0x10 [ 859.922128][T27834] ? rcu_is_watching+0x15/0xb0 [ 859.922147][T27834] ? trace_bpf_trace_printk+0x7a/0x1d0 [ 859.922165][T27834] ? bpf_bprintf_cleanup+0x7a/0xa0 [ 859.922183][T27834] should_fail_ex+0x3f5/0x560 [ 859.922208][T27834] strncpy_from_user+0x36/0x290 [ 859.922236][T27834] strncpy_from_user_nofault+0x72/0x150 [ 859.922257][T27834] bpf_probe_read_compat_str+0xe2/0x180 [ 859.922277][T27834] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 859.922294][T27834] ? bpf_trace_run2+0x186/0x4b0 [ 859.922309][T27834] ? __pfx___cant_migrate+0x10/0x10 [ 859.922334][T27834] bpf_trace_run2+0x284/0x4b0 [ 859.922349][T27834] ? bpf_trace_run2+0x186/0x4b0 [ 859.922365][T27834] ? __pfx_bpf_trace_run2+0x10/0x10 [ 859.922389][T27834] ? __pfx_css_rstat_updated+0x10/0x10 [ 859.922409][T27834] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 859.922433][T27834] __bpf_trace_tlb_flush+0xf5/0x150 [ 859.922456][T27834] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 859.922484][T27834] trace_tlb_flush+0x115/0x140 [ 859.922507][T27834] switch_mm_irqs_off+0x54a/0x7b0 [ 859.922533][T27834] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 859.922554][T27834] ? psi_task_switch+0x4e3/0x880 [ 859.922578][T27834] __schedule+0x110e/0x4cc0 [ 859.922600][T27834] ? finish_task_switch+0x266/0x950 [ 859.922622][T27834] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.922641][T27834] ? finish_task_switch+0x266/0x950 [ 859.922667][T27834] ? __pfx___schedule+0x10/0x10 [ 859.922693][T27834] ? __lock_acquire+0xab9/0xd20 [ 859.922715][T27834] ? preempt_schedule_irq+0xaa/0x150 [ 859.922736][T27834] preempt_schedule_irq+0xb5/0x150 [ 859.922754][T27834] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 859.922778][T27834] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 859.922803][T27834] irqentry_exit+0x6f/0x90 [ 859.922822][T27834] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 859.922839][T27834] RIP: 0010:netlink_deliver_tap+0x17/0x1b0 [ 859.922867][T27834] Code: eb b1 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 f6 48 89 fb e8 7f 3f 58 f8 8b 35 e9 15 65 10 <48> 89 df e8 d1 5f ff ff 49 89 c7 e8 59 44 3f f8 48 8d 1d 00 00 00 [ 859.922883][T27834] RSP: 0018:ffffc90003bff798 EFLAGS: 00000293 [ 859.922898][T27834] RAX: ffffffff8967c431 RBX: ffff88802b3f2540 RCX: ffff88802b423c80 [ 859.922911][T27834] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff88802b3f2540 [ 859.922923][T27834] RBP: ffffc90003bff8b0 R08: ffff88806963d57f R09: 1ffff1100d2c7aaf [ 859.922936][T27834] R10: dffffc0000000000 R11: ffffed100d2c7ab0 R12: 1ffff1100fba14af [ 859.922949][T27834] R13: 0000000000000040 R14: ffff888067e5f3c0 R15: ffff888067e5f3c0 [ 859.922965][T27834] ? netlink_deliver_tap+0x11/0x1b0 [ 859.922988][T27834] ? netlink_deliver_tap+0x11/0x1b0 [ 859.923008][T27834] netlink_unicast+0x7fa/0x9e0 [ 859.923030][T27834] ? __pfx_netlink_unicast+0x10/0x10 [ 859.923048][T27834] ? netlink_sendmsg+0x6a2/0xb30 [ 859.923071][T27834] netlink_sendmsg+0x805/0xb30 [ 859.923095][T27834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.923117][T27834] ? aa_sock_msg_perm+0xf1/0x1d0 [ 859.923141][T27834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 859.923158][T27834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.923179][T27834] __sock_sendmsg+0x21c/0x270 [ 859.923204][T27834] ____sys_sendmsg+0x505/0x830 [ 859.923226][T27834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.923256][T27834] ? import_iovec+0x74/0xa0 [ 859.923278][T27834] ___sys_sendmsg+0x21f/0x2a0 [ 859.923298][T27834] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.923320][T27834] ? rcu_is_watching+0x15/0xb0 [ 859.923352][T27834] ? __fget_files+0x2a/0x420 [ 859.923368][T27834] ? __fget_files+0x3a0/0x420 [ 859.923389][T27834] __x64_sys_sendmsg+0x19b/0x260 [ 859.923410][T27834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.923438][T27834] ? do_syscall_64+0xbe/0xfa0 [ 859.923459][T27834] do_syscall_64+0xfa/0xfa0 [ 859.923478][T27834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.923588][T27834] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 859.923605][T27834] ? clear_bhb_loop+0x60/0xb0 [ 859.923624][T27834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.923711][T27834] RIP: 0033:0x7fa22b98f749 [ 859.923727][T27834] Code: Unable to access opcode bytes at 0x7fa22b98f71f. [ 859.923734][T27834] RSP: 002b:00007fa22c764038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.923752][T27834] RAX: ffffffffffffffda RBX: 00007fa22bbe5fa0 RCX: 00007fa22b98f749 [ 859.923765][T27834] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 859.923783][T27834] RBP: 00007fa22c764090 R08: 0000000000000000 R09: 0000000000000000 [ 859.923795][T27834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 859.923806][T27834] R13: 00007fa22bbe6038 R14: 00007fa22bbe5fa0 R15: 00007fffaf4e8d28 [ 859.923827][T27834] [ 861.329737][T27834] CPU: 1 UID: 0 PID: 27834 Comm: syz.3.5646 Not tainted syzkaller #0 PREEMPT(full) [ 861.329753][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.329761][T27834] Call Trace: [ 861.329768][T27834] [ 861.329775][T27834] dump_stack_lvl+0x189/0x250 [ 861.329794][T27834] ? __pfx____ratelimit+0x10/0x10 [ 861.329805][T27834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.329817][T27834] ? __pfx__printk+0x10/0x10 [ 861.329827][T27834] ? rcu_is_watching+0x15/0xb0 [ 861.329839][T27834] ? trace_bpf_trace_printk+0x7a/0x1d0 [ 861.329849][T27834] ? bpf_bprintf_cleanup+0x7a/0xa0 [ 861.329859][T27834] should_fail_ex+0x414/0x560 [ 861.329875][T27834] strncpy_from_user+0x36/0x290 [ 861.329889][T27834] strncpy_from_user_nofault+0x72/0x150 [ 861.329901][T27834] bpf_probe_read_compat_str+0xe2/0x180 [ 861.329915][T27834] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 861.329926][T27834] ? bpf_trace_run2+0x186/0x4b0 [ 861.329935][T27834] ? __pfx___cant_migrate+0x10/0x10 [ 861.329949][T27834] bpf_trace_run2+0x284/0x4b0 [ 861.329958][T27834] ? bpf_trace_run2+0x186/0x4b0 [ 861.329966][T27834] ? __pfx_bpf_trace_run2+0x10/0x10 [ 861.329980][T27834] ? __pfx_css_rstat_updated+0x10/0x10 [ 861.329993][T27834] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 861.330006][T27834] __bpf_trace_tlb_flush+0xf5/0x150 [ 861.330020][T27834] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 861.330036][T27834] trace_tlb_flush+0x115/0x140 [ 861.330049][T27834] switch_mm_irqs_off+0x54a/0x7b0 [ 861.330064][T27834] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 861.330076][T27834] ? psi_task_switch+0x4e3/0x880 [ 861.330089][T27834] __schedule+0x110e/0x4cc0 [ 861.330102][T27834] ? finish_task_switch+0x266/0x950 [ 861.330115][T27834] ? lockdep_hardirqs_on+0x9c/0x150 [ 861.330127][T27834] ? finish_task_switch+0x266/0x950 [ 861.330146][T27834] ? __pfx___schedule+0x10/0x10 [ 861.330157][T27834] ? __lock_acquire+0xab9/0xd20 [ 861.330169][T27834] ? preempt_schedule_irq+0xaa/0x150 [ 861.330180][T27834] preempt_schedule_irq+0xb5/0x150 [ 861.330191][T27834] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 861.330204][T27834] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 861.330216][T27834] irqentry_exit+0x6f/0x90 [ 861.330226][T27834] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 861.330237][T27834] RIP: 0010:netlink_deliver_tap+0x17/0x1b0 [ 861.330252][T27834] Code: eb b1 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 f6 48 89 fb e8 7f 3f 58 f8 8b 35 e9 15 65 10 <48> 89 df e8 d1 5f ff ff 49 89 c7 e8 59 44 3f f8 48 8d 1d 00 00 00 [ 861.330261][T27834] RSP: 0018:ffffc90003bff798 EFLAGS: 00000293 [ 861.330271][T27834] RAX: ffffffff8967c431 RBX: ffff88802b3f2540 RCX: ffff88802b423c80 [ 861.330279][T27834] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff88802b3f2540 [ 861.330286][T27834] RBP: ffffc90003bff8b0 R08: ffff88806963d57f R09: 1ffff1100d2c7aaf [ 861.330294][T27834] R10: dffffc0000000000 R11: ffffed100d2c7ab0 R12: 1ffff1100fba14af [ 861.330301][T27834] R13: 0000000000000040 R14: ffff888067e5f3c0 R15: ffff888067e5f3c0 [ 861.330310][T27834] ? netlink_deliver_tap+0x11/0x1b0 [ 861.330323][T27834] ? netlink_deliver_tap+0x11/0x1b0 [ 861.330334][T27834] netlink_unicast+0x7fa/0x9e0 [ 861.330347][T27834] ? __pfx_netlink_unicast+0x10/0x10 [ 861.330357][T27834] ? netlink_sendmsg+0x6a2/0xb30 [ 861.330369][T27834] netlink_sendmsg+0x805/0xb30 [ 861.330383][T27834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.330395][T27834] ? aa_sock_msg_perm+0xf1/0x1d0 [ 861.330410][T27834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.330420][T27834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.330431][T27834] __sock_sendmsg+0x21c/0x270 [ 861.330446][T27834] ____sys_sendmsg+0x505/0x830 [ 861.330459][T27834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.330472][T27834] ? import_iovec+0x74/0xa0 [ 861.330485][T27834] ___sys_sendmsg+0x21f/0x2a0 [ 861.330496][T27834] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.330509][T27834] ? rcu_is_watching+0x15/0xb0 [ 861.330525][T27834] ? __fget_files+0x2a/0x420 [ 861.330535][T27834] ? __fget_files+0x3a0/0x420 [ 861.330546][T27834] __x64_sys_sendmsg+0x19b/0x260 [ 861.330558][T27834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.330573][T27834] ? do_syscall_64+0xbe/0xfa0 [ 861.330585][T27834] do_syscall_64+0xfa/0xfa0 [ 861.330596][T27834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.330605][T27834] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 861.330614][T27834] ? clear_bhb_loop+0x60/0xb0 [ 861.330625][T27834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.330634][T27834] RIP: 0033:0x7fa22b98f749 [ 861.330642][T27834] Code: Unable to access opcode bytes at 0x7fa22b98f71f. [ 861.330647][T27834] RSP: 002b:00007fa22c764038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.330657][T27834] RAX: ffffffffffffffda RBX: 00007fa22bbe5fa0 RCX: 00007fa22b98f749 [ 861.330664][T27834] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 861.330671][T27834] RBP: 00007fa22c764090 R08: 0000000000000000 R09: 0000000000000000 [ 861.330677][T27834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 861.330683][T27834] R13: 00007fa22bbe6038 R14: 00007fa22bbe5fa0 R15: 00007fffaf4e8d28 [ 861.330694][T27834] [ 861.332948][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 861.632704][T27837] siw: device registration error -23 [ 862.375195][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 863.415320][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 864.455196][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 865.495291][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.535289][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 867.575369][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 868.615230][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 869.655263][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available