last executing test programs: 14m1.274747485s ago: executing program 1 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x10) 14m0.901831978s ago: executing program 1 (id=544): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 14m0.674965908s ago: executing program 1 (id=548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 14m0.488889843s ago: executing program 1 (id=549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x4044041) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1}, 0x2}], 0x1, 0x10100, 0x0) 14m0.32348678s ago: executing program 1 (id=552): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r1, 0x0, 0xf03a0001) 14m0.062559188s ago: executing program 1 (id=556): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 13m59.703362259s ago: executing program 32 (id=556): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 13m52.961662538s ago: executing program 2 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 13m52.726760237s ago: executing program 2 (id=639): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 13m52.565445752s ago: executing program 2 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) unshare(0x64000600) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000596d1ad978fa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) 13m51.817724132s ago: executing program 2 (id=652): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x22020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x119, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x119, 0x0, @opaque="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"}}}}, 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000140)) 13m51.55292577s ago: executing program 2 (id=656): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1e, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x6, 0x8000, 0x100000, 0x1, 0x7ff, 0x1, 0x10000, 0x9, 0x0, 0x10000, 0x4, 0x9, 0x6, 0x5, 0x10, 0x1000, 0x200, 0x1, 0x0, 0x4, 0xa0, 0x32d4, 0xa, 0x80000000, 0x10000, 0x4f7, 0x0, 0x9, 0x3, 0xfffffff5, 0x7, 0x3, 0x4, 0x80ed, 0x7fff, 0xfffffff9, 0x4, 0x4, 0x6, 0x0, 0xb6, 0xee5, 0x43, 0x2, 0xfffffffb, 0x1, 0x1ff, 0x3, 0x9, 0x4, 0x1, 0x905, 0x7, 0x6, 0x3, 0x1, 0x7, 0xffffffff, 0x58, 0x9, 0x7ff, 0xad, 0x2, 0xffffff61, 0x8a8, 0x1, 0x0, 0x8, 0x5, 0xffff8000, 0x100, 0x3, 0xffffffff, 0x4, 0xb, 0x1, 0x8, 0x10001, 0x302160e2, 0x0, 0x1, 0xff, 0x4, 0x80, 0x3, 0x4, 0x1, 0x7, 0x1, 0x7ff, 0xfffffffc, 0x81, 0x7, 0x66d3, 0xffffffff, 0xef2, 0x9, 0x6, 0x7fffffff, 0xe52, 0x7, 0x4, 0x400, 0x0, 0xffffffff, 0x7fffffff, 0x3, 0x2, 0x0, 0x2, 0x9265, 0x3, 0x8, 0xff, 0xb58, 0xe3, 0x0, 0x7000, 0x9ae, 0x2, 0x0, 0x550, 0x2, 0x59, 0x4ca, 0x559b, 0x0, 0x2, 0x2, 0x400, 0x37, 0x1ff, 0x1, 0x6, 0x4, 0xc40, 0x1, 0x1, 0x74, 0xee, 0x9, 0x10000, 0x401, 0xc, 0x59b1, 0xd114, 0xf, 0x7, 0x4, 0xff, 0x80, 0x620a, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffbff, 0x43, 0x7, 0x8, 0x2, 0x38a9, 0xd85, 0x8, 0x3, 0x38, 0x4404, 0x1, 0x1020, 0x3ff, 0xf4d, 0x63ae, 0xffffff00, 0xffffffff, 0x9, 0x81, 0xd8, 0x8, 0x1, 0xc1e4, 0xfffffff8, 0x8, 0x3, 0xb, 0x7, 0x1, 0x0, 0x6, 0xc, 0x9, 0xfffffff9, 0xe, 0x0, 0x5, 0x8, 0x8, 0x0, 0x66, 0x7, 0x8, 0x1, 0x3, 0x8, 0x0, 0x6, 0x80, 0x6, 0x68f, 0x7, 0x3, 0x7, 0x8, 0xfff, 0x2, 0xe7d, 0x4, 0x4, 0x3, 0x7, 0x9, 0x4, 0x1ff, 0xfffffffd, 0xf45b, 0x8, 0x76, 0x1, 0x2, 0x0, 0x4, 0x326, 0x8, 0x8, 0x80000000, 0x30000, 0x2, 0x800000, 0x1e, 0x40, 0x5, 0x4, 0x9, 0x2, 0xffff, 0x80000001, 0x8, 0x1c000000, 0x84d1, 0xff, 0x84, 0x9, 0x2, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xf, 0x4ef, 0x4, 0x2, 0x4, 0x511, 0x1, 0x1, 0x10001, 0x3, 0x7fff, 0x40, 0x7, 0x6, 0x9, 0xe67, 0xfffffff8, 0xf9, 0x4, 0x7, 0x7, 0x2, 0x7, 0x5, 0x6, 0x6, 0xfffffffd, 0x81, 0x8, 0x6, 0x9, 0x5, 0x2, 0x8001, 0x7, 0xadc3, 0xd, 0x4, 0x1, 0x7, 0xf3fc, 0x800, 0x5, 0x7, 0xb, 0x6, 0x101, 0x8, 0x2d1c, 0x10, 0x6, 0x3, 0x1, 0x6, 0x1, 0x7fffffff, 0xb, 0x7, 0xfffffffe, 0x6, 0x7f, 0x100, 0x1, 0xffffffff, 0xd, 0x800, 0x9, 0x3, 0xd15, 0x0, 0x3, 0x5, 0x8, 0x0, 0x3, 0x4, 0x7, 0x40, 0x10, 0x3, 0xfffffffb, 0x8, 0x46, 0xffffffff, 0x0, 0x8, 0xf41, 0x80000000, 0xfffffffc, 0x8, 0x6, 0x7, 0x40, 0x7f, 0x94, 0xe2d, 0x1, 0x9, 0x909b, 0xffffff01, 0xfffffff8, 0x5, 0xfffff649, 0x100, 0x0, 0x7, 0x5, 0xffff5eb8, 0x62, 0xb, 0x7, 0xf, 0xffff, 0xfffffc01, 0xfffffffd, 0x2, 0x9, 0x3, 0xff, 0x2, 0x8, 0x8, 0xb5b, 0x7, 0x8000, 0x7, 0x3ff, 0x3, 0x2d, 0xffff71a8, 0xffff, 0x1000, 0x7, 0x5, 0x9, 0x8cd7, 0x1, 0x7, 0x7, 0xf, 0x0, 0x3, 0x1, 0x2, 0x800, 0x8001, 0x5, 0x3, 0x6, 0xba2, 0x2, 0x4, 0x1, 0x2, 0x1, 0x1, 0x0, 0x7d4a0d25, 0x1, 0x6, 0x8, 0x3916, 0x4, 0xccab, 0xfffffffa, 0x2, 0xfffffffc, 0x1000, 0x80000000, 0x0, 0xe6, 0x5, 0x8, 0xa5e6, 0x1, 0x8, 0x1, 0x40f, 0x7, 0x7, 0x6, 0x4, 0xabd4, 0xfffffffb, 0x0, 0x6, 0x5, 0x4, 0x5, 0xfffffff9, 0x7, 0x1, 0x4, 0x7, 0x9, 0xfff, 0x0, 0x5, 0xfffffffa, 0xff, 0x4, 0x8, 0x8, 0x2, 0x6, 0x8, 0x23ab, 0x0, 0xe296, 0x3, 0x80000000, 0xe749, 0x2, 0x5, 0x7fff, 0x3ff, 0x2, 0x81, 0x2, 0x2c0f, 0x8, 0x7, 0x0, 0x2, 0x9, 0x9, 0x2, 0x1, 0x1, 0x7096514c, 0x6, 0xdabf, 0x7, 0x5, 0x5, 0x10c4, 0x3ff, 0x0, 0x0, 0x3, 0x4095, 0x2, 0x8, 0x80000001, 0x8, 0x1bd5, 0x3, 0xb, 0x3, 0x0, 0x4, 0x2b0e, 0x7fffffff, 0x7bf9, 0x6]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x850}}, 0x0) 13m51.011188251s ago: executing program 2 (id=664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d583", 0xb8}, {&(0x7f0000000a80)="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", 0x1e2}], 0x5, 0x0, 0x0, 0x4044004}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 13m50.604894947s ago: executing program 33 (id=664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d583", 0xb8}, {&(0x7f0000000a80)="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", 0x1e2}], 0x5, 0x0, 0x0, 0x4044004}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 13m50.599758093s ago: executing program 5 (id=557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x18) accept$packet(0xffffffffffffffff, 0x0, 0x0) 13m50.551187674s ago: executing program 34 (id=557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x18) accept$packet(0xffffffffffffffff, 0x0, 0x0) 12.249739652s ago: executing program 7 (id=7058): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000ee66c53538", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000060000000000000009000000900600010f000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000680)=[{0x4, 0x2, 0xd, 0xa}, {0x2, 0x2, 0x8, 0x1}, {0x2, 0x4, 0x9, 0xa}, {0x0, 0x5, 0x8, 0x9}, {0x1, 0x4, 0xe, 0x8}, {0x1, 0x3, 0xb, 0x1}, {0x1, 0x4, 0x8, 0xb}, {0x3, 0x5, 0x6, 0xc}, {0x2, 0x1, 0xc, 0x4}], 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa0000000060a0b0400000000000000000200000074000480700001800a0001006c696d69740000006000028008000540000000000800034000000004080005400000000008000540000000000c000240000000000000000308000340000000d60c000140000000000000000408000540000000000c000240000000000000ffff08000340000000000900010073797a30000000000900020073797a32"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000840)={&(0x7f0000000800)=""/46, 0x21000, 0x0, 0x3, 0x2}, 0x20) r6 = socket(0x2, 0x6, 0x0) r7 = socket(0x28, 0x805, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) getpeername$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa002a008}) close(0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) 10.920439318s ago: executing program 7 (id=7067): socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) 9.837014474s ago: executing program 7 (id=7074): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 7.05093375s ago: executing program 0 (id=7080): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$kcm(0x1e, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, 0x0, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r11 = openat$cgroup_pressure(r6, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pressure(r11, 0x0, 0x0) close(r7) close(r11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000004060104000000000000000007000005050001000f000000050001000700000005000100070000000900020073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) socket$unix(0x1, 0x1, 0x0) 6.416478532s ago: executing program 3 (id=7081): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xb}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x81}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}]}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000"], 0x0, 0x6e, 0x0, 0x1}, 0x28) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240)="29b0", 0x2000cc0, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r9, &(0x7f00000001c0)="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", &(0x7f0000000040)=""/30}, 0x20) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r13, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r13, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 6.077145607s ago: executing program 0 (id=7083): unshare(0x2a020400) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r6, 0x0, 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 5.671693574s ago: executing program 3 (id=7085): epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[], 0x20) 5.483452239s ago: executing program 7 (id=7086): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000005000000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110080001000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) 5.318290109s ago: executing program 3 (id=7087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2}, &(0x7f00000001c0)=0xc) mmap(&(0x7f0000793000/0x3000)=nil, 0x3000, 0x300000b, 0x810, r0, 0xc1ea6000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x25dfdbfb}, 0x20}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) write$tun(r5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xfb5) 5.117190195s ago: executing program 0 (id=7089): unshare(0x2a020400) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r6, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 4.812823339s ago: executing program 3 (id=7090): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@null, @remote, @bcast, @default, @default, @default, @null, @rose]}, &(0x7f0000000340)=0x48, 0x80400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000380)={r2}, &(0x7f00000004c0)=0x8) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.240052533s ago: executing program 0 (id=7095): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8=0xffffffffffffffff], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x7105, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRESOCT=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40010) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0xffff, 0x0, 0x0, {0xa, 0x4e22, 0x5, @private1, 0xab}}}, 0x32) unshare(0x20000400) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000c80)={0xa, 0x0, 0x0, @remote, 0xa872}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb010018000000000000001000f8001000000000000000010000000000000e4500000000000000005f2e00"], 0x0, 0x2c, 0x0, 0x0, 0x5}, 0x28) 3.037968261s ago: executing program 4 (id=7096): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401002abd700002dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107c000000000007000000000000009500000000000000c2058b8a6c0bfceb46af027f03bc71e36d8061adc1ef9ded15420ba2e71c5f9c2a0262b002b919d30bf6e40582d9bf2d5297b68be76034a956a2206a6a32739799c21d54fbc5872c160c839bd301d913fb01c103f3b7bd1bfc0b33d8e797b4d1c0c708924d567015fc2e3d41cc5b569e15f4aa714a39ec98610166acc7dac98e463acf5b168653e3f52528e394eaf7786d17e76c6709c15da46117f58366a9b60947ea042a00b313a6dc82"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf2501000000080005000100000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x2081}, 0x20004080) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "03ac360a63bca4bc", "6b5e1428d69abae22f8833509d1e95ef", "420b00cf", "a02acd744f062c8c"}, 0x28) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/211, 0xd3, 0x0, &(0x7f0000000740)=""/221, 0xdd}, &(0x7f0000000280)=0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "56ab9cd790995b8c", "a1f02cd525ffd9ae255057e462e2d052", "2e4fddcf", "852ed6718e2db879"}, 0x28) setsockopt$sock_int(r5, 0x1, 0x2b, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x55fe, 0x1, 0x1, 0xc, 0xc26, 0x6}, &(0x7f0000000380)=0x20) 2.899852846s ago: executing program 3 (id=7097): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) 2.761757157s ago: executing program 3 (id=7098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000480)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 2.520192564s ago: executing program 4 (id=7099): unshare(0x2a020400) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r6, 0x0, 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 2.457243505s ago: executing program 7 (id=7100): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, 0x0, 0x60000000) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xccb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='br_fdb_add\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000790116005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{0x7ff, 0x0, 0x8}, {0x1, 0x25, 0xa, 0x9}, {0x6, 0x7, 0x2, 0xe}]}, 0x10) 2.418072252s ago: executing program 6 (id=7101): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x2000c851, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r1 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 1.60132636s ago: executing program 4 (id=7102): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x30c, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a4000000000090002"], 0x364}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x18c, 0x203, 0x1e0, 0x19030000, 0x2f8, 0x2e0, 0x2e0, 0x2f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x198, 0x1e0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, [0xff, 0xff, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x8}, [0xff000000, 0x0, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xff], 0x80, 0x0, 0x0, 0x4e24, 0x4e21, 0x4e21, 0x4e20, 0x0, 0x844}, 0x180, 0xa10, 0x4e23, 0x4e24, 0x4e20, 0x4e21}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 1.306893082s ago: executing program 6 (id=7103): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e80200001000200027bd7000fddbdf25fe800000000000000000000000000043ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/686], 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x4c040) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000040)="9c0e9e085911", 0x6}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="adc79706ffbc16f214000000800000000000000007000000"], 0x18}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004100)={0x18, 0x42, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x4000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x2, 0x4, 0x3c8, 0xffffffff, 0x208, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x5, 0x1, 0x4, {0x92}}}, @common=@srh={{0x30}, {0x2e, 0x0, 0x80, 0x0, 0x0, 0x0, 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0x0, 0xffffffff], [0xff, 0x0, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'bridge0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r6, @ANYBLOB="2503000000000000000016000000140001"], 0x5f}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x5, 0x2378e939}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000024}, 0xc1) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010) 1.08371853s ago: executing program 6 (id=7104): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[], 0x144}}, 0x20000000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8948, &(0x7f0000000300)={'bond0\x00', 0xb}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000200)=ANY=[], 0x1c) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4000) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000100)=0x8) close(0x3) 936.198229ms ago: executing program 4 (id=7105): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000b40)={r7, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f8", 0x5c}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x18) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000dbd625174bc93b"], 0x14}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r10, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r12, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x0, &(0x7f0000000980)=[r10, r11, r10, r10, r10, 0xffffffffffffffff, r10, r10, 0x1]}, 0x94) close(r4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r2, @ANYBLOB="0df49af09208"], 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r13, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) r15 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) 732.424571ms ago: executing program 6 (id=7106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10) 613.748445ms ago: executing program 0 (id=7107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0x9, 0xb5}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7e, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@ipmr_newroute={0x30, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x80, 0x0, 0x0, 0xd9, 0xfe, 0x7, 0xfe, 0x8, 0x200}, [@RTA_NH_ID={0x8, 0x1e, 0xe}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x44}}, 0x40048a4) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x30, r15, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040804}, 0xc0) socket$kcm(0x11, 0x3, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r16) sendmsg$NL802154_CMD_GET_WPAN_PHY(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r16) 429.111621ms ago: executing program 6 (id=7108): unshare(0x24060400) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x3c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000)=r3, 0x62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100100}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = socket$inet6(0xa, 0x80003, 0xff) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="3f4ee96f23bec133b97f8c53658afa4c410000000000000001303874cf5171b975251d11781efe702bfb489cef92059908af0bdff4351ea404fa", @ANYRES64=0x0], 0x10) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, 0x0) 269.531702ms ago: executing program 4 (id=7109): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 212.611706ms ago: executing program 0 (id=7110): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) socket$kcm(0x10, 0x2, 0x4) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014004000000001006261746164760000040002800c001a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x168, 0x1, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xd}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x400}]}, @NFQA_PAYLOAD={0xdd, 0xa, "866b03efb6ec88c5f74429cd1348cbef479125f6ebb2c5a86e48a93a74836be89907ddda8ef7c816b3c2963ae8108d66b90ec7c89c470cde295f6711d43a8709f665a9370c2e81da308a4076e027adb0650cbaa39d3a8e6ff4680d42a49a2644ba58ec2b891df4fe2960422277f5228066cbbc4b0262667461fa4da42936e34156c572f3eac06fad44300c9fd969211a0b85804d939d23d3ba9f55fe6b73b7486065842aa714b147b1359c160f96307b6a77861ed0a9444a9ad30b66629a479663a8f1aa9a416a5ca3a9b41fc07852eb8c97bc95874ec780e1"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000040)=0xc, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 184.980886ms ago: executing program 6 (id=7111): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x2, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='cq_poll\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000072c0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x1, 0x24008000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x780, 0x10, 0x800, 0x80000, {{0x27, 0x4, 0x1, 0x4, 0x9c, 0x65, 0x0, 0xa, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4c, 0x98, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x9}, {@remote, 0x7}, {@broadcast, 0x1}, {@private=0xa010100, 0x3}, {@empty, 0xfffffff8}, {@local, 0x7}, {@multicast1, 0x7}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x1, [{@private=0xa010101, 0x879}, {@rand_addr=0x64010102, 0xeba}]}, @noop, @timestamp={0x44, 0x24, 0x60, 0x0, 0x5, [0x9, 0x0, 0x7fffffff, 0xffff, 0x9, 0x3, 0x2, 0xc]}]}}}}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000340)=r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair(0x27, 0x2, 0x3, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r13, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0xdc}, 0x1, 0x0, 0x0, 0x801}, 0x440c1) 110.278524ms ago: executing program 4 (id=7112): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x30c, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a4000000000090002"], 0x364}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x18c, 0x203, 0x1e0, 0x19030000, 0x2f8, 0x2e0, 0x2e0, 0x2f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x198, 0x1e0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, [0xff, 0xff, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x8}, [0xff000000, 0x0, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xff], 0x80, 0x0, 0x0, 0x4e24, 0x4e21, 0x4e21, 0x4e20, 0x0, 0x844}, 0x180, 0xa10, 0x4e23, 0x4e24, 0x4e20, 0x4e21}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 0s ago: executing program 7 (id=7113): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 1][T21274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 624.300874][T21274] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 624.300887][T21274] warn_alloc+0x214/0x310 [ 624.300900][T21274] ? __pfx_warn_alloc+0x10/0x10 [ 624.300916][T21274] ? __get_vm_area_node+0x28f/0x300 [ 624.300931][T21274] ? fq_pie_init+0x430/0x840 [ 624.300946][T21274] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 624.300972][T21274] ? up_write+0x1c4/0x420 [ 624.300983][T21274] ? tcf_block_get_ext+0x8d4/0x17d0 [ 624.300999][T21274] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 624.301016][T21274] ? rcu_is_watching+0x15/0xb0 [ 624.301027][T21274] ? fq_pie_init+0x430/0x840 [ 624.301038][T21274] ? fq_pie_init+0x430/0x840 [ 624.301048][T21274] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 624.301061][T21274] ? fq_pie_init+0x430/0x840 [ 624.301073][T21274] ? tcf_block_get+0x67/0xa0 [ 624.301086][T21274] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 624.301103][T21274] fq_pie_init+0x430/0x840 [ 624.301125][T21274] ? __pfx_fq_pie_init+0x10/0x10 [ 624.301146][T21274] qdisc_create+0x7a9/0xea0 [ 624.301188][T21274] tc_modify_qdisc+0x1538/0x20e0 [ 624.301218][T21274] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 624.301248][T21274] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 624.301260][T21274] rtnetlink_rcv_msg+0x779/0xb70 [ 624.301269][T21274] ? __lock_acquire+0xab9/0xd20 [ 624.301280][T21274] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 624.301288][T21274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.301307][T21274] netlink_rcv_skb+0x208/0x470 [ 624.301315][T21274] ? __lock_acquire+0xab9/0xd20 [ 624.301325][T21274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.301334][T21274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.301350][T21274] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.301364][T21274] netlink_unicast+0x82c/0x9e0 [ 624.301382][T21274] ? __pfx_netlink_unicast+0x10/0x10 [ 624.301396][T21274] ? netlink_sendmsg+0x642/0xb30 [ 624.301404][T21274] ? skb_put+0x11b/0x210 [ 624.301417][T21274] netlink_sendmsg+0x805/0xb30 [ 624.301431][T21274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.301443][T21274] ? aa_sock_msg_perm+0x94/0x160 [ 624.301454][T21274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.301464][T21274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.301474][T21274] __sock_sendmsg+0x219/0x270 [ 624.301488][T21274] ____sys_sendmsg+0x505/0x830 [ 624.301503][T21274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.301519][T21274] ? import_iovec+0x74/0xa0 [ 624.301534][T21274] ___sys_sendmsg+0x21f/0x2a0 [ 624.301547][T21274] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.301582][T21274] ? __fget_files+0x2a/0x420 [ 624.301596][T21274] ? __fget_files+0x3a0/0x420 [ 624.301621][T21274] __x64_sys_sendmsg+0x19b/0x260 [ 624.301642][T21274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.301672][T21274] ? rcu_is_watching+0x15/0xb0 [ 624.301696][T21274] ? do_syscall_64+0xbe/0x3b0 [ 624.301718][T21274] do_syscall_64+0xfa/0x3b0 [ 624.301728][T21274] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.301737][T21274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.301747][T21274] ? clear_bhb_loop+0x60/0xb0 [ 624.301759][T21274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.301769][T21274] RIP: 0033:0x7f1deb98e9a9 [ 624.301779][T21274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.301787][T21274] RSP: 002b:00007f1dec83a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.301799][T21274] RAX: ffffffffffffffda RBX: 00007f1debbb5fa0 RCX: 00007f1deb98e9a9 [ 624.301806][T21274] RDX: 000000002000400c RSI: 0000200000000300 RDI: 000000000000000e [ 624.301813][T21274] RBP: 00007f1deba10d69 R08: 0000000000000000 R09: 0000000000000000 [ 624.301819][T21274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.301825][T21274] R13: 0000000000000000 R14: 00007f1debbb5fa0 R15: 00007ffd40ae6fc8 [ 624.301841][T21274] [ 624.301846][T21274] Mem-Info: [ 624.731431][T21274] active_anon:3941 inactive_anon:0 isolated_anon:0 [ 624.731431][T21274] active_file:1477 inactive_file:40063 isolated_file:0 [ 624.731431][T21274] unevictable:797 dirty:397 writeback:0 [ 624.731431][T21274] slab_reclaimable:11638 slab_unreclaimable:273563 [ 624.731431][T21274] mapped:32245 shmem:1382 pagetables:1008 [ 624.731431][T21274] sec_pagetables:0 bounce:0 [ 624.731431][T21274] kernel_misc_reclaimable:0 [ 624.731431][T21274] free:1123786 free_pcp:30701 free_cma:0 [ 624.779466][T21274] Node 0 active_anon:15764kB inactive_anon:0kB active_file:5908kB inactive_file:160052kB unevictable:1652kB isolated(anon):0kB isolated(file):0kB mapped:128980kB dirty:1584kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13620kB pagetables:3876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 624.816564][T21274] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 624.848697][T21274] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.881107][T21274] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 624.887116][T21274] Node 0 DMA32 free:578288kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15700kB inactive_anon:0kB active_file:5908kB inactive_file:158500kB unevictable:1652kB writepending:1584kB present:3129332kB managed:2558316kB mlocked:116kB bounce:0kB free_pcp:105912kB local_pcp:78692kB free_cma:0kB [ 624.919931][T21274] lowmem_reserve[]: 0 0 1 1 1 [ 624.925940][T21274] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1552kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 624.955560][T21274] lowmem_reserve[]: 0 0 0 0 0 [ 624.960302][T21274] Node 1 Normal free:3909432kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8736kB local_pcp:4512kB free_cma:0kB [ 624.994645][T21274] lowmem_reserve[]: 0 0 0 0 0 [ 624.999408][T21274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 625.018789][T21274] Node 0 DMA32: 4170*4kB (UME) 2793*8kB (UME) 1632*16kB (UME) 1676*32kB (UME) 176*64kB (UME) 64*128kB (UME) 27*256kB (UME) 9*512kB (UME) 21*1024kB (UME) 7*2048kB (UME) 96*4096kB (UM) = 578800kB [ 625.046227][T21274] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 625.061040][T21274] Node 1 Normal: 210*4kB (UME) 48*8kB (UME) 31*16kB (UME) 216*32kB (UME) 78*64kB (UME) 10*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 949*4096kB (ME) = 3909432kB [ 625.086407][T21274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 625.098148][T21274] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 625.115938][T21274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 625.129864][T21274] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 625.141627][T21274] 44169 total pagecache pages [ 625.151636][T21274] 0 pages in swap cache [ 625.158751][T21274] Free swap = 124996kB [ 625.167206][T21274] Total swap = 124996kB [ 625.171454][T21274] 2097051 pages RAM [ 625.177548][T21274] 0 pages HighMem/MovableOnly [ 625.186855][T21274] 425430 pages reserved [ 625.191030][T21274] 0 pages cma reserved [ 625.931570][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5254'. [ 626.046837][T21319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5256'. [ 626.362919][T21328] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 627.016102][T21335] netlink: 'syz.6.5262': attribute type 1 has an invalid length. [ 627.031680][T21335] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5262'. [ 627.074612][T21341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.110113][T21344] tipc: Enabled bearer , priority 0 [ 627.139569][T21335] xt_CT: No such helper "snmp" [ 627.159460][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5262'. [ 627.182112][T21335] tipc: Enabling of bearer rejected, failed to enable media [ 627.203217][T21339] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 627.237830][T21339] tipc: Resetting bearer [ 627.266977][T21338] tipc: Disabling bearer [ 627.311168][T21347] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 627.486425][T21359] lo speed is unknown, defaulting to 1000 [ 627.696918][T21353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5268'. [ 627.742661][T21353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5268'. [ 629.236170][T21357] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5269'. [ 629.764731][ T9270] wlan0: Trigger new scan to find an IBSS to join [ 631.138234][T21439] batadv0 (unregistering): left promiscuous mode [ 631.230923][T21442] lo speed is unknown, defaulting to 1000 [ 631.701416][T21463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.766307][T21464] netlink: 'syz.4.5292': attribute type 2 has an invalid length. [ 631.845868][T21464] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5292'. [ 631.983864][T21469] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 632.010936][T21469] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 632.036145][T21471] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3370752435/3370752437 [ 632.098607][T21474] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3370752435/3370752437 [ 632.223927][T21474] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3370752435/3370752437 [ 632.513683][T21483] netlink: 'syz.3.5299': attribute type 1 has an invalid length. [ 632.717569][T21490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5299'. [ 632.809594][ T9278] wlan0: Trigger new scan to find an IBSS to join [ 633.353761][T12600] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 362 sec [ 633.544352][T21509] bond0: (slave bond18): Releasing backup interface [ 633.699054][T21509] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 633.794853][T21517] netlink: 'syz.7.5307': attribute type 1 has an invalid length. [ 633.808923][T21517] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5307'. [ 633.934516][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5307'. [ 633.979715][T21523] tipc: Enabling of bearer rejected, failed to enable media [ 634.011122][T21517] xt_CT: No such helper "snmp" [ 634.281354][T21531] lo speed is unknown, defaulting to 1000 [ 634.947732][T21545] syzkaller0: entered promiscuous mode [ 634.972509][T21545] syzkaller0: entered allmulticast mode [ 635.210073][T21549] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 635.288583][T21553] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5316'. [ 635.588975][T21543] lo speed is unknown, defaulting to 1000 [ 635.663483][T21563] netlink: 'syz.6.5320': attribute type 2 has an invalid length. [ 635.758727][ T62] wlan0: Trigger new scan to find an IBSS to join [ 635.899320][T21565] netlink: 'syz.4.5315': attribute type 2 has an invalid length. [ 635.972169][T21575] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5315'. [ 636.200129][T21579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5320'. [ 636.392152][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 636.783824][ T9278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.871039][T21580] lo speed is unknown, defaulting to 1000 [ 637.171823][T21600] netlink: 'syz.6.5325': attribute type 20 has an invalid length. [ 637.427705][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5326'. [ 638.348939][T21632] syzkaller0: entered promiscuous mode [ 638.355669][T21632] syzkaller0: entered allmulticast mode [ 638.389228][T21632] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 638.504064][T21634] lo speed is unknown, defaulting to 1000 [ 639.053379][T21641] lo speed is unknown, defaulting to 1000 [ 639.947685][T21650] lo speed is unknown, defaulting to 1000 [ 640.039968][T21656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5338'. [ 640.254128][T21657] bond10 (unregistering): Released all slaves [ 640.512324][T21663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5336'. [ 640.596078][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5342'. [ 640.614472][T21668] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5342'. [ 640.624672][T21668] netlink: 'syz.6.5342': attribute type 9 has an invalid length. [ 640.667603][T21671] syzkaller0: entered promiscuous mode [ 640.685994][T21671] syzkaller0: entered allmulticast mode [ 640.739334][T21671] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 641.135068][T21680] tipc: Enabling of bearer rejected, failed to enable media [ 641.738649][T21686] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5346'. [ 642.417276][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5352'. [ 642.433794][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5351'. [ 642.453883][T21701] netlink: 'syz.3.5351': attribute type 5 has an invalid length. [ 642.490560][T21701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5351'. [ 642.490574][T21704] netlink: 'syz.6.5353': attribute type 1 has an invalid length. [ 642.511659][T21700] bond12 (unregistering): Released all slaves [ 642.594365][T21704] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5353'. [ 642.655232][T21710] netlink: 'syz.6.5355': attribute type 1 has an invalid length. [ 642.703990][T21710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5355'. [ 642.731486][T21705] xt_hashlimit: max too large, truncated to 1048576 [ 642.763853][T21705] No such timeout policy "syz1" [ 642.776560][T21710] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5355'. [ 642.878607][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5354'. [ 642.898773][T21714] tipc: Enabling of bearer rejected, failed to enable media [ 642.977207][T21718] netlink: 'syz.4.5357': attribute type 1 has an invalid length. [ 643.198707][T21725] rdma_rxe: rxe_newlink: failed to add lo [ 643.199169][T21718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5357'. [ 643.243511][T21724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.380390][T21732] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 643.538569][T21734] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5363'. [ 643.694711][T21740] tipc: Resetting bearer [ 643.781337][T12598] lo speed is unknown, defaulting to 1000 [ 643.788128][T12598] syz0: Port: 1 Link DOWN [ 643.793719][T12598] lo speed is unknown, defaulting to 1000 [ 643.846067][T12597] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 424 sec [ 643.868028][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5366'. [ 643.897332][T21744] bond10 (unregistering): Released all slaves [ 644.206407][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5368'. [ 644.704731][T21767] netlink: 'syz.3.5371': attribute type 1 has an invalid length. [ 644.802447][T21769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.925308][T21775] syzkaller0: entered promiscuous mode [ 644.930980][T21775] syzkaller0: entered allmulticast mode [ 645.033309][T21779] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 645.226531][T21778] lo speed is unknown, defaulting to 1000 [ 646.362427][T21804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.469885][T21804] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 646.817676][T21815] batadv1: entered promiscuous mode [ 646.890016][T21815] batadv1: entered allmulticast mode [ 647.031012][T21819] syzkaller0: entered promiscuous mode [ 647.073745][T21819] syzkaller0: entered allmulticast mode [ 647.208211][T21821] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 647.715589][T21827] __nla_validate_parse: 5 callbacks suppressed [ 647.715607][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5387'. [ 647.989392][T21840] lo speed is unknown, defaulting to 1000 [ 648.013662][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5389'. [ 648.069598][T21848] syzkaller0: entered promiscuous mode [ 648.093661][T21848] syzkaller0: entered allmulticast mode [ 648.211157][T21852] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 648.326683][T21862] netlink: 'syz.0.5395': attribute type 9 has an invalid length. [ 648.373584][T21862] netlink: 'syz.0.5395': attribute type 7 has an invalid length. [ 648.383662][T21862] netlink: 'syz.0.5395': attribute type 8 has an invalid length. [ 649.051474][T21860] lo speed is unknown, defaulting to 1000 [ 649.209746][T21884] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 649.361551][T21890] netlink: 'syz.3.5402': attribute type 2 has an invalid length. [ 649.413041][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5401'. [ 650.164947][T21891] tipc: Resetting bearer [ 650.169477][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5405'. [ 650.978313][T21929] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5411'. [ 650.995850][T21929] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5411'. [ 651.010494][T21929] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5411'. [ 651.111037][T21932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5411'. [ 651.274819][ T5848] Bluetooth: hci0: command tx timeout [ 651.560850][T21940] lo speed is unknown, defaulting to 1000 [ 651.858140][T21947] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 652.077559][T21955] syzkaller0: entered promiscuous mode [ 652.098368][T21955] syzkaller0: entered allmulticast mode [ 652.286379][T21955] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 652.859345][T21975] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5421'. [ 652.927602][T21980] netlink: 'syz.7.5421': attribute type 29 has an invalid length. [ 652.967719][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5418'. [ 653.441022][T22005] netlink: 'syz.4.5424': attribute type 2 has an invalid length. [ 653.509331][T22007] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5424'. [ 653.964569][T21988] lo speed is unknown, defaulting to 1000 [ 655.313605][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5428'. [ 655.338903][T22028] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 655.357650][T22023] netlink: 'syz.3.5430': attribute type 1 has an invalid length. [ 655.372296][T22023] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5430'. [ 655.511727][T22031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5430'. [ 655.521064][T22031] tipc: Enabling of bearer rejected, failed to enable media [ 655.561532][T22023] xt_CT: No such helper "snmp" [ 655.623548][T22037] netlink: 'syz.4.5434': attribute type 2 has an invalid length. [ 655.967693][T22057] netlink: 'syz.0.5438': attribute type 2 has an invalid length. [ 656.008604][T22050] syzkaller0: entered promiscuous mode [ 656.021312][T22050] syzkaller0: entered allmulticast mode [ 656.038068][T22058] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5438'. [ 656.123464][T22050] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 656.962520][T22072] syzkaller0: entered promiscuous mode [ 656.968022][T22072] syzkaller0: entered allmulticast mode [ 657.094692][T22072] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 657.216093][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5446'. [ 657.333184][T22083] bond12 (unregistering): Released all slaves [ 657.464503][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5448'. [ 657.570707][T22096] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 657.592206][T22096] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 657.709686][T22102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5452'. [ 657.739895][T22094] bond16 (unregistering): Released all slaves [ 657.878145][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5455'. [ 657.953048][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5456'. [ 658.092142][T22124] syzkaller0: entered promiscuous mode [ 658.097649][T22124] syzkaller0: entered allmulticast mode [ 658.203699][T22121] lo speed is unknown, defaulting to 1000 [ 658.495434][T22137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5463'. [ 658.540910][T22135] bond12 (unregistering): Released all slaves [ 658.597530][T22131] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 659.437239][T22168] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5471'. [ 659.906848][T22162] bond11 (unregistering): Released all slaves [ 660.006286][T22156] lo speed is unknown, defaulting to 1000 [ 660.260612][T22152] Failed to register nexthop notifier [ 660.471342][T22178] bond10 (unregistering): Released all slaves [ 660.560880][T22182] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5475'. [ 660.574978][T22181] syzkaller0: entered promiscuous mode [ 660.592746][T22181] syzkaller0: entered allmulticast mode [ 660.707472][T22181] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 660.738643][T22188] lo speed is unknown, defaulting to 1000 [ 660.808972][T22192] syzkaller0: entered promiscuous mode [ 660.820626][T22192] syzkaller0: entered allmulticast mode [ 660.943867][T22192] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 661.110539][T22201] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5482'. [ 661.424195][T22209] netlink: 'syz.3.5484': attribute type 2 has an invalid length. [ 661.503502][T22210] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5484'. [ 661.947524][T22217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5487'. [ 662.435575][T22217] lo speed is unknown, defaulting to 1000 [ 662.801008][T22233] syzkaller0: entered promiscuous mode [ 662.808277][T22233] syzkaller0: entered allmulticast mode [ 662.899283][T22235] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 663.279660][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5492'. [ 663.548452][T22249] syzkaller0: entered promiscuous mode [ 663.563033][T22249] syzkaller0: entered allmulticast mode [ 663.633155][T22250] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 664.170196][T22264] lo speed is unknown, defaulting to 1000 [ 664.377686][T22273] syzkaller0: entered promiscuous mode [ 664.386927][T22273] syzkaller0: entered allmulticast mode [ 664.446066][T22273] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 664.448909][T22277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5504'. [ 664.610068][T22277] bond16 (unregistering): Released all slaves [ 664.738868][T22282] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 664.891245][T22291] netlink: 'syz.3.5508': attribute type 2 has an invalid length. [ 664.893419][T22287] lo speed is unknown, defaulting to 1000 [ 664.928852][T22291] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5508'. [ 665.316948][T22289] lo speed is unknown, defaulting to 1000 [ 665.601595][T22313] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 666.532921][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5527'. [ 666.969394][T22343] syzkaller0: entered promiscuous mode [ 666.982243][T22343] syzkaller0: entered allmulticast mode [ 667.039319][T22343] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 667.473780][T22365] netlink: 'syz.0.5536': attribute type 2 has an invalid length. [ 667.532470][T22367] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5536'. [ 668.807506][T22402] netlink: 'syz.0.5545': attribute type 10 has an invalid length. [ 668.807926][T22400] syzkaller0: entered promiscuous mode [ 668.842985][T22400] syzkaller0: entered allmulticast mode [ 668.887337][T22401] bond11 (unregistering): Released all slaves [ 668.928489][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5547'. [ 669.039002][T22410] lo speed is unknown, defaulting to 1000 [ 669.042003][ T1338] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 669.464543][T22423] netlink: 'syz.4.5553': attribute type 2 has an invalid length. [ 669.530618][T22423] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5553'. [ 670.961200][T22450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5560'. [ 670.987366][T22446] bond16 (unregistering): Released all slaves [ 671.300688][T22456] bond16 (unregistering): Released all slaves [ 671.337049][T22463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5563'. [ 671.380678][T22465] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5566'. [ 671.475736][T22465] bond11 (unregistering): Released all slaves [ 671.543691][T22467] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 671.887413][T22484] bond16 (unregistering): Released all slaves [ 671.904988][T22493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5574'. [ 672.101385][T22502] syzkaller0: entered promiscuous mode [ 672.118350][T22502] syzkaller0: entered allmulticast mode [ 672.213751][T22508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5582'. [ 672.223852][T22502] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 672.277775][T22508] bond10 (unregistering): Released all slaves [ 672.479862][T22518] netlink: 'syz.7.5584': attribute type 13 has an invalid length. [ 672.488577][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5584'. [ 672.500511][T22517] syzkaller0: entered promiscuous mode [ 672.506936][T22517] syzkaller0: entered allmulticast mode [ 672.531551][T22517] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 672.608641][T22519] lo speed is unknown, defaulting to 1000 [ 672.956651][T12601] page_pool_release_retry() stalled pool shutdown: id 71, 3329 inflight 483 sec [ 673.110587][T22533] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5590'. [ 673.328141][T22537] bond12 (unregistering): Released all slaves [ 673.420565][T22545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5591'. [ 673.434740][T22513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.637349][T22542] lo speed is unknown, defaulting to 1000 [ 673.923752][T22551] bond11 (unregistering): Released all slaves [ 674.149726][T22530] netlink: 'syz.4.5590': attribute type 4 has an invalid length. [ 674.338152][T22556] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 674.404602][T22559] __nla_validate_parse: 1 callbacks suppressed [ 674.404621][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5597'. [ 674.935555][T22578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5601'. [ 675.225677][T22586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5605'. [ 675.388815][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5605'. [ 675.516890][T22588] bond16 (unregistering): Released all slaves [ 675.821639][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5609'. [ 675.963412][T22600] bond11 (unregistering): Released all slaves [ 676.260070][T22609] lo speed is unknown, defaulting to 1000 [ 676.885035][T22620] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 677.125983][T22612] lo speed is unknown, defaulting to 1000 [ 677.166985][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5615'. [ 678.488452][T22643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5621'. [ 678.521380][T22644] sch_tbf: peakrate 4 is lower than or equals to rate 6 ! [ 678.529947][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5619'. [ 678.654103][T22650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5621'. [ 678.703106][T22643] bond16 (unregistering): Released all slaves [ 679.077338][T22655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 679.176737][T22667] bond16 (unregistering): Released all slaves [ 679.489582][T22676] lo speed is unknown, defaulting to 1000 [ 679.886639][T22689] __nla_validate_parse: 2 callbacks suppressed [ 679.886658][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5635'. [ 680.533145][T22682] lo speed is unknown, defaulting to 1000 [ 680.869898][T22699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5639'. [ 682.143343][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5643'. [ 682.446410][T22730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5647'. [ 682.535731][T22730] bond16 (unregistering): Released all slaves [ 682.779093][T22741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5650'. [ 682.920312][T22741] bond16 (unregistering): Released all slaves [ 682.974813][T22754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5650'. [ 683.049540][T22743] lo speed is unknown, defaulting to 1000 [ 683.072455][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 683.687046][T22763] lo speed is unknown, defaulting to 1000 [ 683.787900][T22769] syzkaller0: entered promiscuous mode [ 683.796942][T22769] syzkaller0: entered allmulticast mode [ 684.160859][T22773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5661'. [ 684.300531][T22773] bond16 (unregistering): Released all slaves [ 684.849180][T22786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5663'. [ 684.887264][T22789] lo speed is unknown, defaulting to 1000 [ 685.556282][T22799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5666'. [ 685.700139][T22799] bond20 (unregistering): Released all slaves [ 685.707611][T22804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5666'. [ 685.923158][T22801] lo speed is unknown, defaulting to 1000 [ 686.000051][T22812] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 686.064478][T22812] bridge14: left promiscuous mode [ 686.088297][T22812] veth11: left promiscuous mode [ 686.125209][T22812] macvtap1: left promiscuous mode [ 686.189592][T22812] macvtap1: left allmulticast mode [ 686.220947][T22812] veth1: left promiscuous mode [ 686.825483][T22835] lo speed is unknown, defaulting to 1000 [ 686.886906][T22843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5674'. [ 687.513775][T22852] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 688.117213][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5680'. [ 688.160801][T22872] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 688.511947][T22881] lo speed is unknown, defaulting to 1000 [ 688.729696][T22886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5689'. [ 688.893659][T22888] bond12 (unregistering): Released all slaves [ 689.006078][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5689'. [ 689.514514][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 689.755474][T22913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5691'. [ 689.790114][T22913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5691'. [ 690.049353][T22926] syzkaller0: entered promiscuous mode [ 690.055876][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5693'. [ 690.082438][T22926] syzkaller0: entered allmulticast mode [ 690.177908][T22928] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 690.273546][T22932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5699'. [ 690.596611][T22931] bond16 (unregistering): Released all slaves [ 690.818352][T22941] __nla_validate_parse: 1 callbacks suppressed [ 690.818369][T22941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5701'. [ 690.937753][T22949] bond20 (unregistering): Released all slaves [ 690.987262][T22954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5701'. [ 691.170401][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'. [ 693.753714][T12601] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 423 sec [ 694.060035][T23044] syzkaller0: entered promiscuous mode [ 694.066384][T23044] syzkaller0: entered allmulticast mode [ 694.087381][T23044] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 694.172905][T23048] netlink: 'syz.3.5729': attribute type 2 has an invalid length. [ 694.193853][T23048] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5729'. [ 694.437044][T23050] 8021q: adding VLAN 0 to HW filter on device bond11 [ 694.481344][T23056] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5730'. [ 694.529675][T23050] bond10: (slave bond11): Enslaving as an active interface with an up link [ 694.608183][T23056] 8021q: adding VLAN 0 to HW filter on device bond10 [ 694.876889][T23061] lo speed is unknown, defaulting to 1000 [ 696.829938][T23110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5743'. [ 697.026859][T23106] 8021q: adding VLAN 0 to HW filter on device bond13 [ 697.078626][T23106] bond12: (slave bond13): Enslaving as an active interface with an up link [ 697.134209][T23102] bond12: (slave gretap4): Enslaving as an active interface with an up link [ 697.154020][T23110] 8021q: adding VLAN 0 to HW filter on device bond12 [ 697.261088][T23127] netlink: 'syz.6.5748': attribute type 2 has an invalid length. [ 697.283251][T23127] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5748'. [ 697.299366][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5749'. [ 697.359624][T23130] lo speed is unknown, defaulting to 1000 [ 697.930506][T23138] lo speed is unknown, defaulting to 1000 [ 698.015275][T23149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5755'. [ 698.082279][T23154] tipc: Enabling of bearer rejected, failed to enable media [ 698.225133][T23154] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 698.610116][T23161] lo speed is unknown, defaulting to 1000 [ 699.481703][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5766'. [ 700.147016][T23202] 8021q: adding VLAN 0 to HW filter on device bond13 [ 700.186852][T23202] bond12: (slave bond13): Enslaving as an active interface with an up link [ 700.204946][T23194] syzkaller0: entered promiscuous mode [ 700.210741][T23194] syzkaller0: entered allmulticast mode [ 700.246279][T23202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5773'. [ 700.290023][T23194] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 700.320967][T23202] 8021q: adding VLAN 0 to HW filter on device bond12 [ 700.400880][T23218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5775'. [ 700.410060][T23212] 8021q: adding VLAN 0 to HW filter on device bond15 [ 700.413255][T23212] bond14: (slave bond15): Enslaving as an active interface with an up link [ 700.504710][T23218] 8021q: adding VLAN 0 to HW filter on device bond14 [ 700.836376][T23225] lo speed is unknown, defaulting to 1000 [ 701.036090][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 701.577035][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5781'. [ 701.815332][T23251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5786'. [ 702.446754][T23259] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5787'. [ 702.486291][T23258] 8021q: adding VLAN 0 to HW filter on device bond12 [ 702.541072][T23258] bond11: (slave bond12): Enslaving as an active interface with an up link [ 702.635591][T23259] 8021q: adding VLAN 0 to HW filter on device bond11 [ 702.835135][T23266] tipc: Enabling of bearer rejected, failed to enable media [ 702.865921][T23266] syzkaller0: entered promiscuous mode [ 702.871420][T23266] syzkaller0: entered allmulticast mode [ 702.938678][T23266] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 703.195247][T23280] lo speed is unknown, defaulting to 1000 [ 703.588294][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5798'. [ 704.118195][T23301] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5802'. [ 704.153771][T12597] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 484 sec [ 704.179476][T23305] 8021q: adding VLAN 0 to HW filter on device bond15 [ 704.189133][T23305] bond14: (slave bond15): Enslaving as an active interface with an up link [ 704.208223][T23301] 8021q: adding VLAN 0 to HW filter on device bond14 [ 704.273164][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5803'. [ 705.486265][T23332] lo speed is unknown, defaulting to 1000 [ 705.823756][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5815'. [ 705.993196][T23342] lo speed is unknown, defaulting to 1000 [ 706.332100][T23367] netlink: 'syz.3.5818': attribute type 2 has an invalid length. [ 706.341173][T23367] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5818'. [ 706.879393][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5819'. [ 707.415924][T23371] Failed to register nexthop notifier [ 707.534303][T23384] tipc: Enabling of bearer rejected, failed to enable media [ 707.578031][T23384] syzkaller0: entered promiscuous mode [ 707.598003][T23384] syzkaller0: entered allmulticast mode [ 707.718254][T23384] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 707.921688][T23397] lo speed is unknown, defaulting to 1000 [ 708.828707][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5841'. [ 709.220455][T23437] syzkaller0: entered promiscuous mode [ 709.236531][T23437] syzkaller0: entered allmulticast mode [ 709.266270][T23437] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 710.175800][T23475] netlink: 'syz.7.5855': attribute type 2 has an invalid length. [ 710.191431][T23475] netlink: 240 bytes leftover after parsing attributes in process `syz.7.5855'. [ 710.973208][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5861'. [ 711.297971][T23503] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 711.673887][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5867'. [ 711.875947][T23531] netlink: 'syz.3.5870': attribute type 2 has an invalid length. [ 711.950517][T23535] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5870'. [ 712.158246][T23532] lo speed is unknown, defaulting to 1000 [ 712.771253][T23542] netlink: 'syz.7.5874': attribute type 2 has an invalid length. [ 712.831402][T23545] netlink: 240 bytes leftover after parsing attributes in process `syz.7.5874'. [ 714.911210][T23590] lo speed is unknown, defaulting to 1000 [ 715.274944][T23597] netlink: 'syz.7.5889': attribute type 2 has an invalid length. [ 715.330426][T23602] netlink: 240 bytes leftover after parsing attributes in process `syz.7.5889'. [ 715.493265][T23605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5891'. [ 715.953494][T23615] tipc: Enabling of bearer rejected, failed to enable media [ 715.974612][T23615] syzkaller0: entered promiscuous mode [ 715.980106][T23615] syzkaller0: entered allmulticast mode [ 715.999690][T23616] netlink: 'syz.3.5893': attribute type 2 has an invalid length. [ 716.088036][T23619] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5893'. [ 716.490787][T23611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5892'. [ 717.166661][ T30] audit: type=1800 audit(1753327294.825:5): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5892" name="cgroup.controllers" dev="tmpfs" ino=6051 res=0 errno=0 [ 717.529328][T23652] syzkaller0: entered promiscuous mode [ 717.536096][T23652] syzkaller0: entered allmulticast mode [ 717.593279][T23652] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 717.844730][T23656] lo speed is unknown, defaulting to 1000 [ 718.060555][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5906'. [ 718.406322][T23664] lo speed is unknown, defaulting to 1000 [ 718.467590][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5909'. [ 719.102228][T23670] lo speed is unknown, defaulting to 1000 [ 720.375082][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5917'. [ 721.037292][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5920'. [ 721.301964][T23729] lo speed is unknown, defaulting to 1000 [ 721.528956][T23738] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5930'. [ 721.577842][T23738] batadv0: entered promiscuous mode [ 721.593672][T23738] batadv0: entered allmulticast mode [ 721.759549][T23732] lo speed is unknown, defaulting to 1000 [ 721.798577][T23738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5930'. [ 722.199729][T23751] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 722.615784][T23748] lo speed is unknown, defaulting to 1000 [ 722.794584][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5934'. [ 723.052276][T23769] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 723.488261][T23778] lo speed is unknown, defaulting to 1000 [ 723.820131][T23788] syzkaller0: entered promiscuous mode [ 723.827249][T23788] syzkaller0: entered allmulticast mode [ 723.899180][T23788] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 724.006296][T23783] lo speed is unknown, defaulting to 1000 [ 724.386416][T23797] lo speed is unknown, defaulting to 1000 [ 725.359935][T23808] syzkaller0: entered promiscuous mode [ 725.371484][T23808] syzkaller0: entered allmulticast mode [ 725.417237][T23808] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 725.569427][T23814] syzkaller0: entered promiscuous mode [ 725.578665][T23814] syzkaller0: entered allmulticast mode [ 725.767452][T23821] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 725.925464][T23826] lo speed is unknown, defaulting to 1000 [ 726.191512][T23838] netlink: 'syz.4.5958': attribute type 2 has an invalid length. [ 726.253867][T23839] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5958'. [ 727.275541][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5962'. [ 727.517623][T23854] lo speed is unknown, defaulting to 1000 [ 727.594033][T23856] syzkaller0: entered promiscuous mode [ 727.599529][T23856] syzkaller0: entered allmulticast mode [ 727.751689][T23856] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 728.230051][T23866] syzkaller0: entered promiscuous mode [ 728.235739][T23866] syzkaller0: entered allmulticast mode [ 728.297669][T23864] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 728.456328][T23872] lo speed is unknown, defaulting to 1000 [ 728.643594][T23883] netlink: 'syz.3.5974': attribute type 2 has an invalid length. [ 728.666421][T23883] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5974'. [ 730.298391][T23906] syzkaller0: entered promiscuous mode [ 730.306567][T23906] syzkaller0: entered allmulticast mode [ 730.417895][T23906] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 730.647255][T23919] tipc: Enabling of bearer rejected, already enabled [ 730.666923][T23919] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 731.048898][T23935] netlink: 'syz.4.5985': attribute type 2 has an invalid length. [ 731.059227][T23935] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5985'. [ 731.488497][T23938] lo speed is unknown, defaulting to 1000 [ 732.161094][T23952] tipc: Enabled bearer , priority 0 [ 732.177973][T23952] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 732.197863][T23952] tipc: Resetting bearer [ 732.261279][T23951] tipc: Disabling bearer [ 732.314925][T23959] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 732.386133][T23961] lo speed is unknown, defaulting to 1000 [ 732.420247][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'. [ 733.084648][ T9278] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 733.162361][T23982] netlink: 'syz.6.6002': attribute type 2 has an invalid length. [ 733.217560][T23985] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6002'. [ 733.276594][T12597] page_pool_release_retry() stalled pool shutdown: id 71, 3329 inflight 543 sec [ 733.771516][T23993] lo speed is unknown, defaulting to 1000 [ 734.250893][T24001] tipc: Enabled bearer , priority 0 [ 734.271332][T24001] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 734.294355][T24003] syzkaller0: entered promiscuous mode [ 734.299853][T24003] syzkaller0: entered allmulticast mode [ 734.419618][T24004] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 734.651571][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6009'. [ 734.851660][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6010'. [ 735.654984][T24037] syzkaller0: entered promiscuous mode [ 735.660608][T24037] syzkaller0: entered allmulticast mode [ 735.711282][T24037] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 736.063278][T24053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6022'. [ 736.310720][T24057] netlink: 'syz.6.6024': attribute type 2 has an invalid length. [ 736.776935][T24072] bond16 (unregistering): Released all slaves [ 736.821203][T24076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6031'. [ 737.311474][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6034'. [ 737.550562][T24102] tipc: Enabled bearer , priority 0 [ 737.561756][T24102] syzkaller0: entered promiscuous mode [ 737.588236][T24102] syzkaller0: entered allmulticast mode [ 737.655875][T24102] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 737.670587][T24101] tipc: Resetting bearer [ 737.777213][T24101] tipc: Disabling bearer [ 738.139343][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6038'. [ 738.311639][T24124] syzkaller0: entered promiscuous mode [ 738.321498][T24124] syzkaller0: entered allmulticast mode [ 738.400022][T24126] bond13 (unregistering): Released all slaves [ 738.444468][T24124] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 738.461423][T24130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6044'. [ 738.670285][T24134] lo speed is unknown, defaulting to 1000 [ 738.708647][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6047'. [ 738.901201][T24139] bond20 (unregistering): Released all slaves [ 738.930007][T24152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6048'. [ 739.111607][T24149] tipc: Enabled bearer , priority 0 [ 739.161761][T24153] syzkaller0: entered promiscuous mode [ 739.204861][T24153] syzkaller0: entered allmulticast mode [ 739.262543][T24141] tipc: Resetting bearer [ 739.295255][T24141] tipc: Disabling bearer [ 739.723509][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6055'. [ 740.047835][T24188] netlink: 'syz.7.6059': attribute type 9 has an invalid length. [ 740.085475][T24188] netlink: 'syz.7.6059': attribute type 7 has an invalid length. [ 740.103516][T24188] netlink: 'syz.7.6059': attribute type 8 has an invalid length. [ 740.145517][T24187] lo speed is unknown, defaulting to 1000 [ 740.614617][T24198] syzkaller0: entered promiscuous mode [ 740.620236][T24198] syzkaller0: entered allmulticast mode [ 741.083756][T24209] lo speed is unknown, defaulting to 1000 [ 743.402769][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6081'. [ 743.968234][T24267] lo speed is unknown, defaulting to 1000 [ 744.388452][T24275] lo speed is unknown, defaulting to 1000 [ 745.170555][T24286] lo speed is unknown, defaulting to 1000 [ 746.023165][T24295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6090'. [ 746.474515][T24301] lo speed is unknown, defaulting to 1000 [ 746.987246][T24312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6096'. [ 747.107623][T24314] bond20 (unregistering): Released all slaves [ 747.178068][T24317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6097'. [ 747.193384][T24318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6096'. [ 747.286917][T24317] bond16 (unregistering): Released all slaves [ 747.340674][T24323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6097'. [ 747.635205][T24331] tipc: Enabling of bearer rejected, already enabled [ 747.676692][T24330] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 747.784349][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6102'. [ 747.891261][T24336] lo speed is unknown, defaulting to 1000 [ 748.275758][T24345] tipc: Enabled bearer , priority 0 [ 748.284563][T24345] syzkaller0: entered promiscuous mode [ 748.290126][T24345] syzkaller0: entered allmulticast mode [ 748.347659][T24345] tipc: Resetting bearer [ 748.381806][T24344] tipc: Resetting bearer [ 748.457814][T24344] tipc: Disabling bearer [ 748.568230][T24356] netlink: 'syz.0.6107': attribute type 2 has an invalid length. [ 748.632792][T24358] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6107'. [ 749.385587][T24371] tipc: Enabling of bearer rejected, already enabled [ 749.408648][T24371] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 750.111734][T24391] lo speed is unknown, defaulting to 1000 [ 750.169827][T24396] tipc: Enabling of bearer rejected, already enabled [ 750.259611][T24396] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 750.628728][T24399] lo speed is unknown, defaulting to 1000 [ 750.874332][T24418] netlink: 'syz.7.6124': attribute type 2 has an invalid length. [ 750.930814][T24420] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6124'. [ 751.780733][T24427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6128'. [ 751.889991][T24427] bond16 (unregistering): Released all slaves [ 751.927330][T24430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6128'. [ 752.260442][T24439] tipc: Enabled bearer , priority 0 [ 752.273864][T24439] tipc: Resetting bearer [ 752.328352][T24438] tipc: Disabling bearer [ 752.519672][T24443] tipc: Enabled bearer , priority 0 [ 752.542930][T24443] syzkaller0: entered promiscuous mode [ 752.548431][T24443] syzkaller0: entered allmulticast mode [ 752.583259][T24443] tipc: Resetting bearer [ 752.597253][T24442] tipc: Resetting bearer [ 752.676281][T24442] tipc: Disabling bearer [ 752.752310][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6135'. [ 752.915522][T24458] lo speed is unknown, defaulting to 1000 [ 753.367159][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6140'. [ 753.460738][T24474] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6141'. [ 753.617545][T24474] bond16 (unregistering): Released all slaves [ 753.644517][T24480] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6141'. [ 754.073516][T12600] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 483 sec [ 755.168818][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6153'. [ 755.268979][T24523] bond13 (unregistering): Released all slaves [ 755.325549][T24529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6153'. [ 755.518190][T24535] tipc: Enabled bearer , priority 0 [ 755.544397][T24535] tipc: Resetting bearer [ 755.617175][T24534] tipc: Disabling bearer [ 755.697386][T24549] netlink: 'syz.7.6160': attribute type 2 has an invalid length. [ 755.743259][T24549] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6160'. [ 756.066726][T24560] lo speed is unknown, defaulting to 1000 [ 757.937648][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6172'. [ 758.080669][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6175'. [ 758.156896][T24606] bond16 (unregistering): Released all slaves [ 758.225095][T24611] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6175'. [ 758.406747][T24615] lo speed is unknown, defaulting to 1000 [ 758.480420][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6176'. [ 758.620969][T24626] netlink: 'syz.7.6178': attribute type 2 has an invalid length. [ 758.632438][T24626] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6178'. [ 758.982138][T24630] tipc: Enabled bearer , priority 0 [ 759.003915][T24630] syzkaller0: entered promiscuous mode [ 759.009502][T24630] syzkaller0: entered allmulticast mode [ 759.073280][T24630] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 759.188547][T24629] tipc: Resetting bearer [ 759.354428][T24629] tipc: Disabling bearer [ 760.120610][T24665] netlink: 'syz.7.6188': attribute type 2 has an invalid length. [ 760.277608][T24666] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6188'. [ 761.020341][T24671] lo speed is unknown, defaulting to 1000 [ 761.818695][T24674] lo speed is unknown, defaulting to 1000 [ 762.985041][T24710] lo speed is unknown, defaulting to 1000 [ 762.991438][T24721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6205'. [ 763.164587][T24721] bond16 (unregistering): Released all slaves [ 763.173708][T24727] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6205'. [ 763.349946][T24729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6204'. [ 763.794138][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6206'. [ 764.473091][T12600] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 545 sec [ 764.575874][T24757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6212'. [ 764.706665][T24762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6217'. [ 764.816645][T24762] bond16 (unregistering): Released all slaves [ 764.880550][T24763] lo speed is unknown, defaulting to 1000 [ 764.882640][T24766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6217'. [ 765.898120][ T44] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 766.148949][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6219'. [ 766.946042][T24780] Failed to register nexthop notifier [ 767.169786][T24807] netlink: 'syz.3.6224': attribute type 2 has an invalid length. [ 767.191769][T24807] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6224'. [ 767.209849][T24812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6229'. [ 767.289364][T24814] bond13 (unregistering): Released all slaves [ 767.330038][T24818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6231'. [ 767.387643][T24818] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6231'. [ 767.413488][T24812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6229'. [ 767.515976][T24820] lo speed is unknown, defaulting to 1000 [ 768.080036][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6234'. [ 768.189529][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6235'. [ 768.207935][T24843] lo speed is unknown, defaulting to 1000 [ 768.663141][T24858] netlink: 'syz.0.6240': attribute type 2 has an invalid length. [ 768.743341][T24859] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6240'. [ 768.999727][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6242'. [ 769.587926][T24847] lo speed is unknown, defaulting to 1000 [ 770.158398][T24888] netlink: 'syz.6.6246': attribute type 2 has an invalid length. [ 771.236736][T24909] __nla_validate_parse: 1 callbacks suppressed [ 771.236754][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6250'. [ 771.390801][T24891] lo speed is unknown, defaulting to 1000 [ 772.069342][T24928] tipc: Enabled bearer , priority 0 [ 772.083286][T24928] syzkaller0: entered promiscuous mode [ 772.089079][T24928] syzkaller0: entered allmulticast mode [ 772.104186][T24928] tipc: Resetting bearer [ 772.155022][T24927] tipc: Resetting bearer [ 772.206287][T24927] tipc: Disabling bearer [ 772.238371][T24935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6255'. [ 772.507204][T24941] tipc: Enabled bearer , priority 0 [ 772.565445][T24941] syzkaller0: entered promiscuous mode [ 772.601148][T24941] syzkaller0: entered allmulticast mode [ 772.688220][T24941] tipc: Resetting bearer [ 772.700867][T24939] tipc: Resetting bearer [ 772.727786][T24939] tipc: Disabling bearer [ 772.839357][T24946] lo speed is unknown, defaulting to 1000 [ 773.556752][T24963] lo speed is unknown, defaulting to 1000 [ 773.744973][T24969] netlink: 'syz.6.6268': attribute type 13 has an invalid length. [ 773.765429][T24969] netlink: 'syz.6.6268': attribute type 17 has an invalid length. [ 773.892820][T24971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6268'. [ 773.981167][T24975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.145392][T24969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.190777][T24975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.239005][T24969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.547458][T24970] lo speed is unknown, defaulting to 1000 [ 774.568949][T24986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6266'. [ 775.487889][T24999] tipc: Enabling of bearer rejected, already enabled [ 775.745886][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6273'. [ 776.003639][T25007] netlink: 'syz.0.6275': attribute type 1 has an invalid length. [ 776.168297][T25007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6275'. [ 776.254802][T25007] 8021q: adding VLAN 0 to HW filter on device bond16 [ 776.645130][T25025] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6280'. [ 776.745877][T25029] wireguard0: entered promiscuous mode [ 776.751384][T25029] wireguard0: entered allmulticast mode [ 776.762008][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6281'. [ 777.284818][T25041] tipc: Enabled bearer , priority 0 [ 777.320106][T25040] lo speed is unknown, defaulting to 1000 [ 777.482825][T25041] syzkaller0: entered promiscuous mode [ 777.488940][T25041] syzkaller0: entered allmulticast mode [ 777.509545][T25041] tipc: Resetting bearer [ 777.597938][T25039] tipc: Resetting bearer [ 777.638224][T25039] tipc: Disabling bearer [ 777.761173][T25050] lo speed is unknown, defaulting to 1000 [ 777.945093][T25056] netlink: 'syz.7.6288': attribute type 1 has an invalid length. [ 778.123107][T25061] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6288'. [ 778.227400][T25061] 8021q: adding VLAN 0 to HW filter on device bond16 [ 778.348167][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6287'. [ 778.547294][T25078] netlink: 'syz.6.6290': attribute type 2 has an invalid length. [ 778.612255][T25080] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6290'. [ 778.766223][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6292'. [ 779.663887][T25093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6295'. [ 780.105635][T25102] lo speed is unknown, defaulting to 1000 [ 780.412195][T25111] tipc: Enabled bearer , priority 0 [ 780.440317][T25111] syzkaller0: entered promiscuous mode [ 780.460232][T25111] syzkaller0: entered allmulticast mode [ 780.477517][T25111] tipc: Resetting bearer [ 780.517157][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6299'. [ 780.527686][T25108] tipc: Resetting bearer [ 780.567978][T25118] netlink: 'syz.4.6301': attribute type 1 has an invalid length. [ 780.577013][T25108] tipc: Disabling bearer [ 780.866069][T25118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6301'. [ 781.159518][T25118] 8021q: adding VLAN 0 to HW filter on device bond20 [ 781.524684][T25141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6304'. [ 781.583606][T25140] xt_SECMARK: invalid mode: 0 [ 782.078491][T25156] tipc: Enabling of bearer rejected, already enabled [ 782.179317][T25161] netlink: 'syz.0.6316': attribute type 1 has an invalid length. [ 782.345833][T25161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6316'. [ 782.379359][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6314'. [ 782.404950][T25161] 8021q: adding VLAN 0 to HW filter on device bond17 [ 782.520811][T25170] lo speed is unknown, defaulting to 1000 [ 783.283190][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6322'. [ 783.556744][T25200] tipc: Enabling of bearer rejected, already enabled [ 783.571574][T25203] netlink: 'syz.0.6323': attribute type 2 has an invalid length. [ 783.698020][T25205] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6323'. [ 783.841538][T25209] netlink: 'syz.7.6327': attribute type 1 has an invalid length. [ 783.975802][T25213] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6327'. [ 784.228391][T25213] 8021q: adding VLAN 0 to HW filter on device bond17 [ 784.519054][T25222] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6330'. [ 784.613806][T25228] wireguard0: entered promiscuous mode [ 784.628351][T25228] wireguard0: entered allmulticast mode [ 785.559477][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6336'. [ 785.663186][T25257] lo speed is unknown, defaulting to 1000 [ 785.836869][T25260] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6339'. [ 785.915654][T25261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 785.986494][T25263] netlink: 'syz.0.6340': attribute type 1 has an invalid length. [ 786.050483][T25263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6340'. [ 786.062513][T25263] 8021q: adding VLAN 0 to HW filter on device bond18 [ 786.377217][T25278] netlink: 'syz.0.6342': attribute type 2 has an invalid length. [ 786.420167][T25278] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6342'. [ 786.709507][T25281] lo speed is unknown, defaulting to 1000 [ 788.333052][T25297] lo speed is unknown, defaulting to 1000 [ 788.978216][T25338] netlink: 'syz.3.6356': attribute type 2 has an invalid length. [ 789.037373][T25339] __nla_validate_parse: 1 callbacks suppressed [ 789.037390][T25339] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6356'. [ 789.455496][T25316] lo speed is unknown, defaulting to 1000 [ 790.147318][T25293] lo speed is unknown, defaulting to 1000 [ 790.193309][T25354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6362'. [ 790.317387][T25358] wireguard2: entered promiscuous mode [ 790.324231][T25358] wireguard2: entered allmulticast mode [ 790.448424][T25361] tipc: Enabling of bearer rejected, already enabled [ 790.495875][T25361] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) ! [ 791.062187][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6367'. [ 791.498587][T25381] netlink: 'syz.3.6370': attribute type 1 has an invalid length. [ 791.701335][T25387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6370'. [ 791.805773][T25387] 8021q: adding VLAN 0 to HW filter on device bond16 [ 792.456731][T25408] netlink: 'syz.4.6376': attribute type 2 has an invalid length. [ 792.520764][T25409] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6376'. [ 792.755932][T25413] lo speed is unknown, defaulting to 1000 [ 792.945378][T25418] tipc: Enabling of bearer rejected, failed to enable media [ 793.418251][T25400] Failed to register nexthop notifier [ 793.784941][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6379'. [ 793.796112][T25439] netlink: 'syz.0.6383': attribute type 1 has an invalid length. [ 793.835034][T12597] page_pool_release_retry() stalled pool shutdown: id 71, 3329 inflight 604 sec [ 793.951804][T25439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6383'. [ 793.978549][T25439] 8021q: adding VLAN 0 to HW filter on device bond19 [ 794.446686][T25452] netlink: 'syz.0.6386': attribute type 2 has an invalid length. [ 794.497197][T25453] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6386'. [ 794.973722][T25464] tipc: Enabled bearer , priority 0 [ 794.991586][T25464] syzkaller0: entered promiscuous mode [ 795.043301][T25464] syzkaller0: entered allmulticast mode [ 795.185403][T25467] tipc: Resetting bearer [ 795.213532][T25463] tipc: Resetting bearer [ 795.257030][T25463] tipc: Disabling bearer [ 795.449934][T25474] lo speed is unknown, defaulting to 1000 [ 795.928730][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6394'. [ 796.606814][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6398'. [ 796.819980][T25511] netlink: 'syz.7.6403': attribute type 1 has an invalid length. [ 797.026333][T25511] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6403'. [ 797.137979][T25511] 8021q: adding VLAN 0 to HW filter on device bond18 [ 797.783082][T25539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6409'. [ 797.888739][T25541] tipc: Enabled bearer , priority 0 [ 797.913402][T25541] syzkaller0: entered promiscuous mode [ 797.972138][T25541] syzkaller0: entered allmulticast mode [ 798.065377][T25541] tipc: Resetting bearer [ 798.092179][T25540] tipc: Resetting bearer [ 798.213651][T25540] tipc: Disabling bearer [ 798.306154][T25551] tipc: Enabled bearer , priority 0 [ 798.333865][ T9278] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 798.357974][T25551] syzkaller0: entered promiscuous mode [ 798.371238][T25551] syzkaller0: entered allmulticast mode [ 798.456621][T25551] tipc: Resetting bearer [ 798.477373][T25549] tipc: Resetting bearer [ 798.526107][T25549] tipc: Disabling bearer [ 798.579107][T25552] lo speed is unknown, defaulting to 1000 [ 799.272946][T25554] lo speed is unknown, defaulting to 1000 [ 799.494045][T25575] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 800.608531][T25593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6426'. [ 800.618231][T25593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6426'. [ 800.634142][T25593] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 801.696861][T25621] lo speed is unknown, defaulting to 1000 [ 802.139909][T25630] netlink: 'syz.6.6438': attribute type 1 has an invalid length. [ 802.413421][T25638] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6438'. [ 802.425798][T25638] 8021q: adding VLAN 0 to HW filter on device bond13 [ 802.453073][T25632] lo speed is unknown, defaulting to 1000 [ 802.550737][T25633] 8021q: adding VLAN 0 to HW filter on device bond14 [ 802.560981][T25633] bond13: (slave bond14): making interface the new active one [ 802.571375][T25633] bond13: (slave bond14): Enslaving as an active interface with an up link [ 803.466683][T25640] lo speed is unknown, defaulting to 1000 [ 803.670936][T25648] lo speed is unknown, defaulting to 1000 [ 803.824698][T25650] lo speed is unknown, defaulting to 1000 [ 803.961162][T25663] lo speed is unknown, defaulting to 1000 [ 804.290308][T25660] lo speed is unknown, defaulting to 1000 [ 806.223215][T25682] tipc: Enabled bearer , priority 0 [ 806.231420][T25682] syzkaller0: entered promiscuous mode [ 806.265830][T25682] syzkaller0: entered allmulticast mode [ 806.345312][T25682] tipc: Resetting bearer [ 806.383665][T25681] tipc: Resetting bearer [ 806.451549][T25681] tipc: Disabling bearer [ 806.540422][T25693] tipc: Enabled bearer , priority 0 [ 806.581380][T25693] syzkaller0: entered promiscuous mode [ 806.596854][T25693] syzkaller0: entered allmulticast mode [ 806.626327][T25698] netlink: 'syz.6.6452': attribute type 1 has an invalid length. [ 806.725931][T25702] 8021q: adding VLAN 0 to HW filter on device bond16 [ 806.735432][T25702] bond15: (slave bond16): making interface the new active one [ 806.744824][T25702] bond15: (slave bond16): Enslaving as an active interface with an up link [ 806.767378][T25693] tipc: Resetting bearer [ 806.778654][T25701] tipc: Enabled bearer , priority 0 [ 806.793729][T25701] syzkaller0: entered promiscuous mode [ 806.800248][T25701] syzkaller0: entered allmulticast mode [ 806.815587][T25698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6452'. [ 806.844601][T25692] tipc: Resetting bearer [ 806.878971][T25692] tipc: Disabling bearer [ 806.900693][T25698] 8021q: adding VLAN 0 to HW filter on device bond15 [ 806.924047][T25707] tipc: Resetting bearer [ 806.955183][T25700] tipc: Resetting bearer [ 807.023570][T25700] tipc: Disabling bearer [ 807.133017][T25719] netlink: 'syz.6.6459': attribute type 20 has an invalid length. [ 807.235072][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 807.249714][T25721] lo speed is unknown, defaulting to 1000 [ 807.504216][T25733] tipc: Enabling of bearer rejected, already enabled [ 808.095518][T25747] netlink: 'syz.0.6467': attribute type 2 has an invalid length. [ 808.129852][T25747] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6467'. [ 808.162374][T25749] netlink: 'syz.4.6468': attribute type 1 has an invalid length. [ 808.433972][T25753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6468'. [ 808.967193][T25760] netlink: 'syz.7.6469': attribute type 2 has an invalid length. [ 808.987976][T25760] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6469'. [ 809.046044][T25751] 8021q: adding VLAN 0 to HW filter on device bond22 [ 809.085820][T25751] bond21: (slave bond22): making interface the new active one [ 809.113756][T25751] bond21: (slave bond22): Enslaving as an active interface with an up link [ 809.181234][T25753] 8021q: adding VLAN 0 to HW filter on device bond21 [ 809.290294][T25764] netlink: 'syz.6.6471': attribute type 9 has an invalid length. [ 809.320228][T25764] netlink: 'syz.6.6471': attribute type 6 has an invalid length. [ 809.564533][T25773] netlink: 404 bytes leftover after parsing attributes in process `syz.4.6473'. [ 809.678655][T25770] lo speed is unknown, defaulting to 1000 [ 810.150564][T25790] tipc: Enabling of bearer rejected, already enabled [ 810.336422][T25797] netlink: 'syz.7.6478': attribute type 1 has an invalid length. [ 810.470498][T25792] lo speed is unknown, defaulting to 1000 [ 810.531531][T25797] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6478'. [ 810.568788][T25800] 8021q: adding VLAN 0 to HW filter on device bond21 [ 810.583849][T25800] bond20: (slave bond21): making interface the new active one [ 810.606548][T25800] bond20: (slave bond21): Enslaving as an active interface with an up link [ 810.686661][T25797] 8021q: adding VLAN 0 to HW filter on device bond20 [ 810.808611][T25816] netlink: 'syz.3.6481': attribute type 2 has an invalid length. [ 810.828473][T25816] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6481'. [ 811.005742][T25821] netlink: 'syz.7.6483': attribute type 1 has an invalid length. [ 811.170926][T25827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6483'. [ 811.185479][T25811] can: request_module (can-proto-3) failed. [ 811.460929][T25824] 8021q: adding VLAN 0 to HW filter on device bond23 [ 811.475701][T25824] bond22: (slave bond23): making interface the new active one [ 811.484912][T25824] bond22: (slave bond23): Enslaving as an active interface with an up link [ 811.505589][T25827] 8021q: adding VLAN 0 to HW filter on device bond22 [ 812.142993][T25844] ipt_ECN: cannot use operation on non-tcp rule [ 812.553956][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 812.776632][T25856] netlink: 'syz.6.6493': attribute type 1 has an invalid length. [ 812.838355][T25856] bond17: entered promiscuous mode [ 812.866668][T25856] 8021q: adding VLAN 0 to HW filter on device bond17 [ 813.374803][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6496'. [ 813.438108][T25870] lo speed is unknown, defaulting to 1000 [ 813.741085][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6499'. [ 813.908892][T25878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6500'. [ 814.198560][T25893] lo speed is unknown, defaulting to 1000 [ 814.358924][T25895] 8021q: adding VLAN 0 to HW filter on device bond18 [ 814.410017][T25895] bond18: entered promiscuous mode [ 814.440213][T25895] bond0: (slave bond18): Enslaving as an active interface with an up link [ 814.622078][T25906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6506'. [ 814.633301][T12601] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 544 sec [ 815.115073][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6507'. [ 815.311248][T25923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6511'. [ 816.015718][T25944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6515'. [ 816.253672][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6517'. [ 816.284605][T25938] lo speed is unknown, defaulting to 1000 [ 816.769625][T25953] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6519'. [ 816.875704][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6518'. [ 817.111958][ T30] audit: type=1800 audit(1753327394.765:6): pid=25959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6519" name="memory.events" dev="tmpfs" ino=6398 res=0 errno=0 [ 817.353555][ T5848] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 817.493934][T25972] tipc: Enabled bearer , priority 0 [ 817.527891][T25972] syzkaller0: entered promiscuous mode [ 817.552033][T25972] syzkaller0: entered allmulticast mode [ 817.695223][T25973] tipc: Resetting bearer [ 817.738676][T25971] tipc: Resetting bearer [ 817.798346][T25971] tipc: Disabling bearer [ 818.188081][T25991] lo speed is unknown, defaulting to 1000 [ 819.097390][T26012] lo speed is unknown, defaulting to 1000 [ 819.349587][T26022] netlink: 'syz.3.6536': attribute type 27 has an invalid length. [ 819.832347][T26015] lo speed is unknown, defaulting to 1000 [ 820.129630][T26025] __nla_validate_parse: 2 callbacks suppressed [ 820.129647][T26025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6537'. [ 820.388124][T26034] netlink: 844 bytes leftover after parsing attributes in process `syz.6.6540'. [ 820.476296][T26034] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6540'. [ 821.088496][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 821.203207][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6546'. [ 821.394911][T26051] lo speed is unknown, defaulting to 1000 [ 822.628536][T26081] lo speed is unknown, defaulting to 1000 [ 823.149405][T26090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6555'. [ 823.937420][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6558'. [ 824.446154][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6560'. [ 824.505844][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6559'. [ 824.695804][T26123] lo speed is unknown, defaulting to 1000 [ 824.834405][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6564'. [ 824.905331][T26130] macvlan2: entered allmulticast mode [ 824.932136][T26130] veth1_vlan: entered allmulticast mode [ 825.047002][T12601] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 605 sec [ 825.265373][T26140] tipc: Enabled bearer , priority 0 [ 825.289582][T26140] syzkaller0: entered promiscuous mode [ 825.307729][T26140] syzkaller0: entered allmulticast mode [ 825.409633][T26135] lo speed is unknown, defaulting to 1000 [ 825.437199][T26140] tipc: Resetting bearer [ 825.482234][T26139] tipc: Resetting bearer [ 825.551610][T26139] tipc: Disabling bearer [ 825.887083][T26150] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6569'. [ 826.013080][T26153] wireguard0: entered promiscuous mode [ 826.018583][T26153] wireguard0: entered allmulticast mode [ 826.659822][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6571'. [ 827.513690][T26182] lo speed is unknown, defaulting to 1000 [ 827.950623][T26192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6577'. [ 828.223967][T26195] smc: removing net device bond0 with user defined pnetid SYZ2 [ 828.233755][T26195] bond0 (unregistering): Released all slaves [ 828.462626][T26204] bridge0: port 1(erspan0) entered blocking state [ 828.469782][T26204] bridge0: port 1(erspan0) entered disabled state [ 828.491677][T26204] erspan0: entered allmulticast mode [ 828.500612][T26204] erspan0: left allmulticast mode [ 828.784986][T26217] tipc: Resetting bearer [ 829.886249][T26241] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6590'. [ 830.071537][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6591'. [ 830.132214][T26258] netlink: 'syz.4.6593': attribute type 12 has an invalid length. [ 830.140066][T26258] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6593'. [ 830.321965][ T9270] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 831.089134][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6598'. [ 831.124307][T26281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6598'. [ 831.326158][T26289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6599'. [ 831.439809][T26293] lo speed is unknown, defaulting to 1000 [ 831.850031][T26305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6603'. [ 832.166613][T26300] lo speed is unknown, defaulting to 1000 [ 832.508103][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6606'. [ 833.154054][T26311] lo speed is unknown, defaulting to 1000 [ 835.211536][T26358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6615'. [ 835.655151][T26365] sctp: [Deprecated]: syz.3.6617 (pid 26365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 835.655151][T26365] Use struct sctp_sack_info instead [ 835.735135][T26365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6617'. [ 835.976087][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6618'. [ 836.473117][T26380] !: renamed from dummy0 (while UP) [ 836.569084][T26384] lo speed is unknown, defaulting to 1000 [ 837.540215][T26392] lo speed is unknown, defaulting to 1000 [ 838.577167][T26428] tipc: Enabling of bearer rejected, already enabled [ 839.463808][T26443] netlink: 'syz.7.6635': attribute type 1 has an invalid length. [ 839.501124][T26440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6634'. [ 839.593651][T26443] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6635'. [ 839.646159][T26447] 8021q: adding VLAN 0 to HW filter on device bond25 [ 839.684942][T26447] bond24: (slave bond25): making interface the new active one [ 839.713622][T26447] bond24: (slave bond25): Enslaving as an active interface with an up link [ 839.738110][T26443] 8021q: adding VLAN 0 to HW filter on device bond24 [ 839.798293][T26452] lo speed is unknown, defaulting to 1000 [ 840.441083][T26465] tipc: Enabling of bearer rejected, already enabled [ 840.564524][T26467] tipc: Enabled bearer , priority 0 [ 840.582744][T26467] syzkaller0: entered promiscuous mode [ 840.588256][T26467] syzkaller0: entered allmulticast mode [ 840.677385][T26467] tipc: Resetting bearer [ 840.698753][T26471] tipc: Enabling of bearer rejected, already enabled [ 840.736903][T26466] tipc: Resetting bearer [ 840.763635][T26466] tipc: Disabling bearer [ 840.885640][T26471] sch_tbf: peakrate 4 is lower than or equals to rate 6 ! [ 841.138200][T26483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6647'. [ 841.147372][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6647'. [ 841.289386][T26488] lo speed is unknown, defaulting to 1000 [ 842.416361][T26505] tipc: Enabled bearer , priority 0 [ 842.440068][T26505] syzkaller0: entered promiscuous mode [ 842.466894][T26505] syzkaller0: entered allmulticast mode [ 842.588944][T26505] tipc: Resetting bearer [ 842.607408][T26484] lo speed is unknown, defaulting to 1000 [ 842.649759][T26504] tipc: Resetting bearer [ 842.705626][T26504] tipc: Disabling bearer [ 843.018724][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6654'. [ 843.030645][T26512] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6654'. [ 843.210223][T26496] lo speed is unknown, defaulting to 1000 [ 843.290146][T26516] netlink: 'syz.7.6655': attribute type 1 has an invalid length. [ 843.420497][T26520] 8021q: adding VLAN 0 to HW filter on device bond26 [ 843.478698][T26516] veth19: entered promiscuous mode [ 843.490385][T26516] bond26: (slave veth19): Enslaving as a backup interface with a down link [ 843.499299][T26498] lo speed is unknown, defaulting to 1000 [ 843.508341][T26517] bond8: (slave bond9): Releasing backup interface [ 843.519182][T26517] bond10: (slave bond11): Releasing backup interface [ 843.535751][T26517] bond12: (slave bond13): Releasing backup interface [ 843.570477][T26517] bond14: (slave bond15): Releasing backup interface [ 843.581780][T26517] bond20: (slave bond21): Releasing backup interface [ 843.597681][T26517] bond22: (slave bond23): Releasing backup interface [ 843.609961][T26517] bond24: (slave bond25): Releasing backup interface [ 843.629810][T26517] bond26: (slave veth19): Releasing backup interface [ 843.796881][T26507] lo speed is unknown, defaulting to 1000 [ 844.175354][T26526] lo speed is unknown, defaulting to 1000 [ 844.939395][T26525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.215835][T26542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6661'. [ 846.290146][T26551] netlink: zone id is out of range [ 846.310502][T26551] netlink: zone id is out of range [ 846.341104][T26547] netlink: 'syz.7.6663': attribute type 2 has an invalid length. [ 846.350055][T26547] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6663'. [ 846.388909][T26551] netlink: zone id is out of range [ 846.405484][T26551] netlink: zone id is out of range [ 846.410825][T26551] netlink: zone id is out of range [ 846.459518][T26551] netlink: zone id is out of range [ 846.470725][T26551] netlink: zone id is out of range [ 846.482718][T26551] netlink: zone id is out of range [ 846.487861][T26551] netlink: zone id is out of range [ 846.500953][T26554] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6665'. [ 846.522746][T26551] netlink: zone id is out of range [ 846.549720][T26557] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6666'. [ 846.721480][T26560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6666'. [ 846.910209][T26567] netlink: 'syz.3.6669': attribute type 13 has an invalid length. [ 846.919621][T26567] netlink: 'syz.3.6669': attribute type 17 has an invalid length. [ 846.934172][T26566] netlink: 'syz.6.6670': attribute type 1 has an invalid length. [ 846.965696][T26566] netlink: 208 bytes leftover after parsing attributes in process `syz.6.6670'. [ 847.094122][T26570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6669'. [ 847.167074][T26571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.264685][T26577] siw: device registration error -23 [ 847.283965][T26578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.331499][T26567] 8021q: adding VLAN 0 to HW filter on device à [ 847.371552][T26571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.638407][T12592] lo speed is unknown, defaulting to 1000 [ 847.647115][T12592] syz0: Port: 1 Link ACTIVE [ 847.848729][ T10] lo speed is unknown, defaulting to 1000 [ 847.849234][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 847.879746][T26569] lo speed is unknown, defaulting to 1000 [ 847.949305][T26591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6674'. [ 848.204489][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.213614][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.228899][ T10] IPVS: starting estimator thread 0... [ 848.278415][T26594] netlink: 'syz.0.6675': attribute type 303 has an invalid length. [ 848.325527][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6675'. [ 848.340158][T26598] IPVS: using max 27 ests per chain, 64800 per kthread [ 848.726364][T26580] lo speed is unknown, defaulting to 1000 [ 848.905960][T26611] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6678'. [ 849.205599][T26601] lo speed is unknown, defaulting to 1000 [ 849.305016][T26600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.789890][T26623] lo speed is unknown, defaulting to 1000 [ 850.129638][T26627] siw: device registration error -23 [ 850.708603][T26645] netlink: 'syz.0.6686': attribute type 6 has an invalid length. [ 850.954235][T26656] netlink: 'syz.3.6687': attribute type 4 has an invalid length. [ 850.966622][T26640] batadv_slave_1: left promiscuous mode [ 851.013575][T26659] netlink: 'syz.3.6687': attribute type 4 has an invalid length. [ 851.160065][ T10] lo speed is unknown, defaulting to 1000 [ 851.170254][ T10] syz0: Port: 1 Link DOWN [ 851.230313][T26660] macvlan2: entered allmulticast mode [ 851.238376][T26660] veth1_vlan: entered allmulticast mode [ 851.319319][ T10] lo speed is unknown, defaulting to 1000 [ 851.348415][T12597] lo speed is unknown, defaulting to 1000 [ 851.359019][T12597] syz0: Port: 1 Link ACTIVE [ 851.729575][T26674] __nla_validate_parse: 4 callbacks suppressed [ 851.729593][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6690'. [ 851.832324][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 851.857833][T26674] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6690'. [ 851.900532][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6690'. [ 851.974805][T26674] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6690'. [ 851.997553][T26674] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6690'. [ 852.055223][T26684] net_ratelimit: 97 callbacks suppressed [ 852.055240][T26684] netlink: zone id is out of range [ 852.173691][T26684] netlink: zone id is out of range [ 852.239961][T26682] : entered promiscuous mode [ 852.271318][T26686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6693'. [ 852.335571][T26686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6693'. [ 852.336140][T26684] netlink: zone id is out of range [ 852.353338][T26687] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6693'. [ 852.372074][T26684] netlink: zone id is out of range [ 852.377220][T26684] netlink: zone id is out of range [ 852.412017][T26684] netlink: zone id is out of range [ 852.417160][T26684] netlink: zone id is out of range [ 852.453974][T26684] netlink: zone id is out of range [ 852.459136][T26684] netlink: zone id is out of range [ 852.471214][T26684] netlink: zone id is out of range [ 852.568758][T26691] lo speed is unknown, defaulting to 1000 [ 852.755363][T26703] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6696'. [ 852.767985][T26703] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6696'. [ 853.791527][T26699] lo speed is unknown, defaulting to 1000 [ 854.233804][T12597] page_pool_release_retry() stalled pool shutdown: id 71, 3329 inflight 664 sec [ 854.448339][T26743] netlink: 'syz.6.6705': attribute type 10 has an invalid length. [ 854.576336][T26746] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6 [ 854.611567][T26719] lo speed is unknown, defaulting to 1000 [ 854.912770][T26740] lo speed is unknown, defaulting to 1000 [ 855.099005][T26758] netlink: 'syz.3.6710': attribute type 3 has an invalid length. [ 855.142185][T26758] netlink: 'syz.3.6710': attribute type 2 has an invalid length. [ 855.257862][T26760] lo speed is unknown, defaulting to 1000 [ 855.289147][T26763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.925553][T26761] lo speed is unknown, defaulting to 1000 [ 856.269798][T26772] lo speed is unknown, defaulting to 1000 [ 857.459018][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.587749][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.618771][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.639477][T26784] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 858.043306][T26787] __nla_validate_parse: 11 callbacks suppressed [ 858.043325][T26787] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6717'. [ 858.357131][T26793] lo speed is unknown, defaulting to 1000 [ 858.991121][T26782] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.321198][T26782] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.541064][T26782] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.670354][T26809] netlink: 'syz.6.6722': attribute type 2 has an invalid length. [ 859.711367][T26809] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6722'. [ 859.944914][T26813] !: renamed from dummy0 (while UP) [ 860.135199][T26818] lo speed is unknown, defaulting to 1000 [ 860.392080][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 860.840026][T26819] lo speed is unknown, defaulting to 1000 [ 861.576991][T26852] netlink: 'syz.0.6729': attribute type 6 has an invalid length. [ 862.163923][T26868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6734'. [ 862.336073][T26858] netlink: 'syz.0.6732': attribute type 16 has an invalid length. [ 862.350276][T26828] lo speed is unknown, defaulting to 1000 [ 862.353282][T26858] netlink: 'syz.0.6732': attribute type 17 has an invalid length. [ 862.458788][T26858] net_ratelimit: 96 callbacks suppressed [ 862.458799][T26858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.760178][T26860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.835189][T26873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6735'. [ 862.854348][T26861] lo speed is unknown, defaulting to 1000 [ 862.968250][T26875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6735'. [ 863.449517][T26888] netlink: 'syz.0.6737': attribute type 2 has an invalid length. [ 863.458522][T26888] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6737'. [ 864.335075][T26893] netlink: 'syz.0.6740': attribute type 2 has an invalid length. [ 864.374078][T26893] : entered promiscuous mode [ 864.477567][T26902] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6742'. [ 864.489065][T26897] lo speed is unknown, defaulting to 1000 [ 864.720978][T26910] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6746'. [ 864.920955][T26915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6746'. [ 865.044416][T26908] lo speed is unknown, defaulting to 1000 [ 865.380621][T26917] lo speed is unknown, defaulting to 1000 [ 865.450948][T26920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6747'. [ 865.465441][T26920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6747'. [ 865.498220][T26920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6747'. [ 865.513420][T26919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6748'. [ 865.523242][T26920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6747'. [ 865.577410][T26919] netlink: 'syz.4.6748': attribute type 1 has an invalid length. [ 865.619960][T26919] 8021q: adding VLAN 0 to HW filter on device bond23 [ 865.755197][T26919] bond23: (slave gretap3): making interface the new active one [ 865.789360][T26919] bond23: (slave gretap3): Enslaving as an active interface with an up link [ 865.896634][T26919] syz.4.6748 (26919) used greatest stack depth: 16952 bytes left [ 866.264162][T26933] netlink: 'syz.4.6750': attribute type 2 has an invalid length. [ 866.293168][T26933] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6750'. [ 866.779830][T26942] netlink: 'syz.7.6753': attribute type 2 has an invalid length. [ 866.810627][T26944] netlink: 'syz.6.6754': attribute type 1 has an invalid length. [ 866.928607][T26947] 8021q: adding VLAN 0 to HW filter on device bond20 [ 866.939011][T26947] bond19: (slave bond20): making interface the new active one [ 866.947724][T26947] bond19: (slave bond20): Enslaving as an active interface with an up link [ 866.962790][T26944] 8021q: adding VLAN 0 to HW filter on device bond19 [ 867.041328][T26950] netlink: 'syz.6.6756': attribute type 10 has an invalid length. [ 867.209129][T26954] lo speed is unknown, defaulting to 1000 [ 868.204454][T26962] lo speed is unknown, defaulting to 1000 [ 868.670164][T26983] lo speed is unknown, defaulting to 1000 [ 869.018429][T26992] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 869.275324][T26986] lo speed is unknown, defaulting to 1000 [ 869.348780][T26999] netlink: 'syz.7.6767': attribute type 1 has an invalid length. [ 869.448889][T27001] 8021q: adding VLAN 0 to HW filter on device bond28 [ 869.457413][T26999] __nla_validate_parse: 2 callbacks suppressed [ 869.457428][T26999] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6767'. [ 869.479784][T27001] bond27: (slave bond28): making interface the new active one [ 869.490928][T27001] bond27: (slave bond28): Enslaving as an active interface with an up link [ 869.510394][T27003] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6767'. [ 869.530220][T27003] 8021q: adding VLAN 0 to HW filter on device bond27 [ 870.318489][T27010] lo speed is unknown, defaulting to 1000 [ 871.088518][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6772'. [ 871.525857][T27027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6771'. [ 871.999444][T27032] lo speed is unknown, defaulting to 1000 [ 872.296872][T27047] netlink: 'syz.7.6778': attribute type 1 has an invalid length. [ 872.430830][T27052] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6778'. [ 872.511739][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6778'. [ 872.556848][T27048] 8021q: adding VLAN 0 to HW filter on device bond30 [ 872.566319][T27048] bond29: (slave bond30): making interface the new active one [ 872.575685][T27048] bond29: (slave bond30): Enslaving as an active interface with an up link [ 872.629313][T27047] 8021q: adding VLAN 0 to HW filter on device bond29 [ 873.250525][T27060] lo speed is unknown, defaulting to 1000 [ 873.377396][T27067] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 873.917528][ T9278] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.976257][ T9278] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.030262][T27084] netlink: 'syz.6.6788': attribute type 13 has an invalid length. [ 874.039108][T27084] netlink: 'syz.6.6788': attribute type 17 has an invalid length. [ 874.054057][ T9278] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.076511][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6786'. [ 874.158736][T27084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.185901][T27084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.230019][T27090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.245530][ T9270] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.367676][T27084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.416237][T27094] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 874.427338][T27091] lo speed is unknown, defaulting to 1000 [ 874.438836][T27081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.454747][T27094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6790'. [ 874.465688][T27094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6790'. [ 874.587497][T27096] netlink: 'syz.3.6791': attribute type 1 has an invalid length. [ 874.731733][T27098] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address [ 874.749762][T27098] bond18: (slave vxcan1): Error -95 calling set_mac_address [ 874.914555][T27100] netlink: 'syz.4.6792': attribute type 1 has an invalid length. [ 875.005324][T27100] bond24 (unregistering): Released all slaves [ 875.033687][T12594] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 604 sec [ 875.197191][T27118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6796'. [ 875.271284][T27110] lo speed is unknown, defaulting to 1000 [ 875.542922][T27118] macvlan3: entered allmulticast mode [ 876.330119][T27136] lo speed is unknown, defaulting to 1000 [ 876.339261][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6799'. [ 876.472658][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 876.473610][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 877.038836][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 877.719777][T27141] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6801'. [ 877.846307][T27140] lo speed is unknown, defaulting to 1000 [ 878.044774][T27153] lo speed is unknown, defaulting to 1000 [ 878.239336][T27158] lo speed is unknown, defaulting to 1000 [ 878.844944][T27164] netlink: 'syz.3.6806': attribute type 1 has an invalid length. [ 878.908011][T27165] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6806'. [ 879.068182][T27164] bond19: entered promiscuous mode [ 879.098375][T27164] 8021q: adding VLAN 0 to HW filter on device bond19 [ 879.165300][T27164] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6806'. [ 879.200037][T27165] batadv0: entered promiscuous mode [ 879.223263][T27165] batadv0: entered allmulticast mode [ 879.273593][T27165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.306565][T27165] bond19: (slave batadv0): making interface the new active one [ 879.323381][T27165] bond19: (slave batadv0): Enslaving as an active interface with an up link [ 880.071334][T27182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6812'. [ 880.112854][T27186] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 880.155999][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6810'. [ 880.187190][T27185] macvlan4: entered allmulticast mode [ 880.216445][T27190] lo speed is unknown, defaulting to 1000 [ 880.339794][T27202] netlink: del zone limit has 4 unknown bytes [ 880.647475][T27207] netlink: 'syz.7.6818': attribute type 12 has an invalid length. [ 881.154218][T27218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6819'. [ 881.603184][T27237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6821'. [ 882.135740][T27243] lo speed is unknown, defaulting to 1000 [ 882.294208][T27256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6828'. [ 882.875264][T27266] tipc: Enabling of bearer rejected, already enabled [ 883.366400][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6832'. [ 883.455362][T27279] lo speed is unknown, defaulting to 1000 [ 883.841470][T27288] netlink: 'syz.3.6834': attribute type 1 has an invalid length. [ 883.898602][T27288] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6834'. [ 884.003154][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 884.119967][T27294] netlink: 'syz.6.6835': attribute type 1 has an invalid length. [ 884.147361][T27294] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6835'. [ 884.219533][T27294] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6835'. [ 884.415191][T27306] !: renamed from dummy0 (while UP) [ 884.684156][T27310] lo speed is unknown, defaulting to 1000 [ 884.884255][T27319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6842'. [ 885.040701][T27325] pimreg: entered allmulticast mode [ 885.101724][T27325] pimreg: left allmulticast mode [ 885.435365][T12594] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 666 sec [ 885.774002][T27326] lo speed is unknown, defaulting to 1000 [ 885.813436][T27343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6846'. [ 885.878205][T27343] macvlan3: entered allmulticast mode [ 886.870869][T27352] lo speed is unknown, defaulting to 1000 [ 887.449869][T27382] netlink: 'syz.4.6851': attribute type 1 has an invalid length. [ 887.717849][T27368] lo speed is unknown, defaulting to 1000 [ 888.411295][T27365] lo speed is unknown, defaulting to 1000 [ 890.470753][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6857'. [ 890.580060][T27415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6859'. [ 890.611324][T27409] lo speed is unknown, defaulting to 1000 [ 890.628366][T27419] netlink: zone id is out of range [ 890.659865][T27419] netlink: zone id is out of range [ 890.685261][T27415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6859'. [ 890.693345][T27419] netlink: zone id is out of range [ 890.713975][T27419] netlink: zone id is out of range [ 890.726114][T27421] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 890.748939][T27419] netlink: zone id is out of range [ 890.755771][T27419] netlink: zone id is out of range [ 890.761242][T27419] netlink: zone id is out of range [ 890.768568][T27419] netlink: zone id is out of range [ 890.779102][T27419] netlink: zone id is out of range [ 890.787824][T27419] netlink: zone id is out of range [ 890.878717][T27414] lo speed is unknown, defaulting to 1000 [ 890.970900][T27424] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6861'. [ 891.351473][T27433] netlink: 'syz.0.6864': attribute type 13 has an invalid length. [ 891.392109][T27433] netlink: 'syz.0.6864': attribute type 17 has an invalid length. [ 891.424604][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6863'. [ 891.597744][T27427] lo speed is unknown, defaulting to 1000 [ 892.121459][T27428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.436085][T27436] lo speed is unknown, defaulting to 1000 [ 893.954577][T27460] lo speed is unknown, defaulting to 1000 [ 895.200184][T27477] lo speed is unknown, defaulting to 1000 [ 895.784063][T27500] netlink: 'syz.7.6879': attribute type 2 has an invalid length. [ 895.857928][T27502] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6879'. [ 895.899243][T27499] lo speed is unknown, defaulting to 1000 [ 896.837356][T27497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.934103][T27512] lo speed is unknown, defaulting to 1000 [ 897.474774][T27509] lo speed is unknown, defaulting to 1000 [ 897.633877][T27506] lo speed is unknown, defaulting to 1000 [ 898.596909][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6890'. [ 899.300313][T27544] netlink: 'syz.6.6893': attribute type 10 has an invalid length. [ 899.330463][T27544] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6893'. [ 899.354773][T27544] net_ratelimit: 5 callbacks suppressed [ 899.354788][T27544] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 899.530606][T27547] lo speed is unknown, defaulting to 1000 [ 899.808595][T27558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6895'. [ 899.906556][T27553] lo speed is unknown, defaulting to 1000 [ 901.328096][T27586] lo speed is unknown, defaulting to 1000 [ 901.902598][T27591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.934374][T27581] lo speed is unknown, defaulting to 1000 [ 902.292199][T27592] lo speed is unknown, defaulting to 1000 [ 902.585430][T27609] lo speed is unknown, defaulting to 1000 [ 903.725037][T27622] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6907'. [ 904.761180][ T9273] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.790292][ T9273] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.820221][ T9273] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.873466][ T9273] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.077017][T27649] lo speed is unknown, defaulting to 1000 [ 905.810515][T27659] lo speed is unknown, defaulting to 1000 [ 905.903329][T27676] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 906.888473][T27693] lo speed is unknown, defaulting to 1000 [ 907.645026][T27692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.026735][T27728] lo speed is unknown, defaulting to 1000 [ 908.968601][T27740] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 909.425901][T27763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6937'. [ 909.522386][T27763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6937'. [ 909.552704][T27763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6937'. [ 909.610876][T27758] lo speed is unknown, defaulting to 1000 [ 909.632850][T27760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6937'. [ 910.311941][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 911.886997][T27819] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6948'. [ 911.931696][T27820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6946'. [ 912.072495][T27819] bond21: (slave bond22): Releasing backup interface [ 912.086152][T27819] bond23: (slave gretap3): Releasing active interface [ 912.128338][T27814] lo speed is unknown, defaulting to 1000 [ 912.712426][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 912.812608][T27824] lo speed is unknown, defaulting to 1000 [ 914.223112][T27862] lo speed is unknown, defaulting to 1000 [ 914.287673][T27637] page_pool_release_retry() stalled pool shutdown: id 71, 3329 inflight 724 sec [ 914.989451][T27871] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 915.103461][T27873] sctp: [Deprecated]: syz.0.6961 (pid 27873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 915.103461][T27873] Use struct sctp_sack_info instead [ 915.694543][T27882] lo speed is unknown, defaulting to 1000 [ 915.760289][T27894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6968'. [ 916.118099][T27886] lo speed is unknown, defaulting to 1000 [ 917.019915][T27906] lo speed is unknown, defaulting to 1000 [ 917.147471][T27910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6972'. [ 917.319347][T27914] pimreg: entered allmulticast mode [ 917.373857][T27914] pimreg: left allmulticast mode [ 917.857954][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6977'. [ 918.451289][T27943] netlink: 'syz.4.6981': attribute type 13 has an invalid length. [ 918.483223][T27943] netlink: 'syz.4.6981': attribute type 17 has an invalid length. [ 918.675988][T27947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6981'. [ 918.830559][T27950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.866566][T27943] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.881536][T27943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 918.908428][T27950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.039118][T27945] lo speed is unknown, defaulting to 1000 [ 919.109622][T27962] netlink: 'syz.3.6985': attribute type 13 has an invalid length. [ 919.133181][T27962] netlink: 'syz.3.6985': attribute type 17 has an invalid length. [ 919.148764][T27946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.175148][T27962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.485162][T27952] lo speed is unknown, defaulting to 1000 [ 919.819554][T27960] lo speed is unknown, defaulting to 1000 [ 920.194035][T27985] netlink: 'syz.4.6989': attribute type 21 has an invalid length. [ 920.310881][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6989'. [ 920.353272][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6989'. [ 920.393478][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6989'. [ 920.446186][T27985] netlink: 'syz.4.6989': attribute type 6 has an invalid length. [ 920.487490][T27985] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6989'. [ 920.575852][T27984] lo speed is unknown, defaulting to 1000 [ 920.996255][T27979] lo speed is unknown, defaulting to 1000 [ 921.172682][T28005] netlink: 'syz.6.6991': attribute type 13 has an invalid length. [ 921.180541][T28005] netlink: 'syz.6.6991': attribute type 17 has an invalid length. [ 921.306198][T28005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 921.509751][T28003] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6991'. [ 921.632074][T28006] lo speed is unknown, defaulting to 1000 [ 923.710236][T28026] lo speed is unknown, defaulting to 1000 [ 924.565856][T28046] netlink: 'syz.0.7002': attribute type 13 has an invalid length. [ 924.588181][T28046] netlink: 'syz.0.7002': attribute type 17 has an invalid length. [ 924.670082][T28050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7003'. [ 924.770551][T28046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 924.973776][T28050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7003'. [ 924.978707][T28067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 925.029128][T28050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7003'. [ 925.059464][T28057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.098971][T28070] netlink: 'syz.3.7006': attribute type 1 has an invalid length. [ 925.107314][T28050] netlink: 'syz.4.7003': attribute type 3 has an invalid length. [ 925.124093][T28051] lo speed is unknown, defaulting to 1000 [ 925.142527][T28070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7006'. [ 925.170736][T28061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.244260][T28070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7006'. [ 925.375339][T28057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.276442][T28076] lo speed is unknown, defaulting to 1000 [ 927.487726][T28092] lo speed is unknown, defaulting to 1000 [ 927.801466][T28077] lo speed is unknown, defaulting to 1000 [ 928.145117][T28121] lo speed is unknown, defaulting to 1000 [ 930.129306][T28157] netlink: 'syz.3.7025': attribute type 1 has an invalid length. [ 930.209867][T28157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7025'. [ 930.211365][T28161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7025'. [ 930.229723][T28159] syzkaller1: entered promiscuous mode [ 930.243572][T28159] syzkaller1: entered allmulticast mode [ 930.347678][T28160] lo speed is unknown, defaulting to 1000 [ 931.290231][T28173] lo speed is unknown, defaulting to 1000 [ 931.515561][T28188] tipc: Resetting bearer [ 931.881021][T12597] lo speed is unknown, defaulting to 1000 [ 931.888997][T12597] syz0: Port: 1 Link DOWN [ 932.089412][T12597] lo speed is unknown, defaulting to 1000 [ 932.570687][T28192] lo speed is unknown, defaulting to 1000 [ 932.863758][T28221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7036'. [ 932.951625][T28222] tipc: Enabling of bearer rejected, already enabled [ 932.964571][T28211] lo speed is unknown, defaulting to 1000 [ 933.532845][T28224] lo speed is unknown, defaulting to 1000 [ 933.682211][T28232] netlink: 'syz.0.7038': attribute type 2 has an invalid length. [ 933.691284][T28232] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7038'. [ 934.993654][T28243] netlink: 'syz.4.7041': attribute type 13 has an invalid length. [ 935.037955][T28243] netlink: 'syz.4.7041': attribute type 17 has an invalid length. [ 935.113273][T12597] page_pool_release_retry() stalled pool shutdown: id 161, 3329 inflight 664 sec [ 935.247975][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7042'. [ 935.759541][T28243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.782066][T28246] lo speed is unknown, defaulting to 1000 [ 936.161602][T28255] rdma_rxe: rxe_newlink: failed to add bond0 [ 936.459282][T28268] lo speed is unknown, defaulting to 1000 [ 936.513006][T28271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.645653][T28279] netlink: 'syz.6.7048': attribute type 10 has an invalid length. [ 936.647515][T28271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.665274][T28279] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7048'. [ 936.665311][T28279] !: entered promiscuous mode [ 936.665367][T28279] !: entered allmulticast mode [ 936.665945][T28279] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 936.964641][T28271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.146957][T28296] netlink: 'syz.0.7049': attribute type 2 has an invalid length. [ 937.218871][T28298] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7049'. [ 937.503965][T28280] lo speed is unknown, defaulting to 1000 [ 938.226553][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7052'. [ 938.690048][T28313] macvlan5: entered allmulticast mode [ 938.758780][T28315] lo speed is unknown, defaulting to 1000 [ 939.234983][T28319] lo speed is unknown, defaulting to 1000 [ 939.409432][T28331] netlink: 'syz.7.7056': attribute type 1 has an invalid length. [ 939.446773][T28331] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7056'. [ 939.499044][T28331] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7056'. [ 940.152718][T28337] lo speed is unknown, defaulting to 1000 [ 940.568306][T28342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7059'. [ 940.609555][T28346] netlink: 'syz.0.7060': attribute type 1 has an invalid length. [ 940.752750][T28352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7060'. [ 940.776715][T28346] smc: adding net device bond0 with user defined pnetid SYZ2 [ 940.800724][T28346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.823620][T28355] netlink: 'syz.3.7061': attribute type 1 has an invalid length. [ 940.910365][T28357] 8021q: adding VLAN 0 to HW filter on device bond21 [ 940.919743][T28357] bond20: (slave bond21): making interface the new active one [ 940.929137][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7061'. [ 940.932804][T28357] bond20: (slave bond21): Enslaving as an active interface with an up link [ 940.960464][T28355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7061'. [ 940.986184][T28355] 8021q: adding VLAN 0 to HW filter on device bond20 [ 941.035486][T28353] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7060'. [ 941.185821][T28360] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 941.307552][T28369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7063'. [ 941.485523][T28369] bridge0: entered promiscuous mode [ 941.490845][T28369] bridge0: entered allmulticast mode [ 941.615064][T28378] lo speed is unknown, defaulting to 1000 [ 941.660666][T28380] netlink: 'syz.0.7066': attribute type 1 has an invalid length. [ 941.710096][T28380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7066'. [ 941.776156][T28380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7066'. [ 941.805546][T28383] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7069'. [ 942.797102][T28402] lo speed is unknown, defaulting to 1000 [ 944.084164][T28397] lo speed is unknown, defaulting to 1000 [ 944.419797][T28408] lo speed is unknown, defaulting to 1000 [ 944.482906][T28449] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7078'. [ 944.628025][T28449] bond11: (slave bond12): Releasing backup interface [ 944.651176][T28449] bond13: (slave bond14): Releasing backup interface [ 944.677663][T28449] bond15: (slave bond16): Releasing backup interface [ 944.703105][T28449] bond0: (slave bond18): Releasing backup interface [ 944.711420][T28449] bond18: left promiscuous mode [ 944.731727][T28449] bond19: (slave bond20): Releasing backup interface [ 944.830380][T28445] lo speed is unknown, defaulting to 1000 [ 945.515742][T12597] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 726 sec [ 946.066425][T28465] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7081'. [ 946.086738][T28465] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7081'. [ 946.105307][T28465] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7081'. [ 946.144960][T28463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7081'. [ 946.338626][T28468] lo speed is unknown, defaulting to 1000 [ 947.126034][T28486] lo speed is unknown, defaulting to 1000 [ 947.370081][T28498] netlink: 'syz.4.7088': attribute type 13 has an invalid length. [ 947.414090][T28498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7088'. [ 947.931671][T28485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.180732][T28509] netlink: 'syz.6.7091': attribute type 1 has an invalid length. [ 948.363661][T28509] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7091'. [ 948.421161][T28509] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7091'. [ 948.676306][T28517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7092'. [ 948.915481][T28520] netlink: 'syz.4.7094': attribute type 3 has an invalid length. [ 948.916059][T28495] Failed to register nexthop notifier [ 948.972104][T28520] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7094'. [ 949.474850][T28535] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7095'. [ 949.550367][T28530] lo speed is unknown, defaulting to 1000 [ 949.585217][T28535] bond12: (slave bond13): Releasing backup interface [ 949.598097][T28535] bond12: (slave bond13): the permanent HWaddr of slave - ba:c5:2d:fe:60:ee - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 949.650160][T28535] bond12: (slave gretap4): Releasing backup interface [ 949.673524][T28535] bond14: (slave bond15): Releasing backup interface [ 949.940617][T28540] lo speed is unknown, defaulting to 1000 [ 950.741532][T28545] lo speed is unknown, defaulting to 1000 [ 951.072728][T28567] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 951.507370][T28569] netlink: 'syz.6.7104': attribute type 10 has an invalid length. [ 951.797768][T28580] __nla_validate_parse: 1 callbacks suppressed [ 951.797786][T28580] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7107'. [ 951.910964][T28580] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7107'. [ 952.196928][T28588] netlink: 'syz.0.7110': attribute type 64 has an invalid length. [ 952.231570][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7110'. [ 952.384333][T28597] netlink: 'syz.7.7113': attribute type 1 has an invalid length. [ 952.488531][T28606] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7113'. [ 952.530821][T28588] veth1_vlan (unregistering): left allmulticast mode [ 952.570554][T28588] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 952.582467][T28588] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 952.592018][T28588] CPU: 1 UID: 0 PID: 28588 Comm: syz.0.7110 Not tainted 6.16.0-rc6-syzkaller-01669-g8aad37d16cff #0 PREEMPT(full) [ 952.604119][T28588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 952.614176][T28588] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 952.619825][T28588] Code: ff ff ff e8 63 67 43 01 89 c5 31 ff 89 c6 e8 f8 69 93 f7 85 ed 74 45 e8 af 65 93 f7 eb 05 e8 a8 65 93 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b2 74 f5 f7 49 8b 2c 24 49 8d 7c [ 952.622459][T28599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7112'. [ 952.639432][T28588] RSP: 0018:ffffc9001018ea00 EFLAGS: 00010206 [ 952.639456][T28588] RAX: 000000001fffe000 RBX: 1ffff1100aca4102 RCX: 0000000000080000 [ 952.639468][T28588] RDX: ffffc90004aa1000 RSI: 000000000003c27b RDI: 000000000003c27c [ 952.639479][T28588] RBP: 0000000000000001 R08: ffffffff8fa22ef7 R09: 1ffffffff1f445de [ 952.639491][T28588] R10: dffffc0000000000 R11: fffffbfff1f445df R12: 00000000ffff0000 [ 952.639502][T28588] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888056520810 [ 952.639515][T28588] FS: 00007f1dec83a6c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 952.703265][T28588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.709854][T28588] CR2: 0000001b3120eff8 CR3: 0000000039d2c000 CR4: 00000000003526f0 [ 952.717818][T28588] Call Trace: [ 952.721086][T28588] [ 952.724005][T28588] mld_clear_delrec+0x160/0x660 [ 952.728845][T28588] ipv6_mc_destroy_dev+0x45/0x5a0 [ 952.733851][T28588] ? addrconf_ifdown+0x1396/0x1880 [ 952.738948][T28588] addrconf_ifdown+0x139e/0x1880 [ 952.743870][T28588] ? tls_dev_event+0x717/0xec0 [ 952.748619][T28588] ? __pfx_addrconf_ifdown+0x10/0x10 [ 952.753888][T28588] addrconf_notify+0x1bc/0x1010 [ 952.758735][T28588] notifier_call_chain+0x1b3/0x3e0 [ 952.763835][T28588] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 952.770243][T28588] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 952.776993][T28588] ? netdev_upper_dev_unlink+0x91/0xd0 [ 952.782434][T28588] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 952.788394][T28588] ? macvlan_dellink+0x3d1/0x460 [ 952.793322][T28588] macvlan_device_event+0x7d2/0x860 [ 952.798501][T28588] ? __pfx_macvlan_device_event+0x10/0x10 [ 952.804212][T28588] notifier_call_chain+0x1b3/0x3e0 [ 952.809314][T28588] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 952.815720][T28588] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 952.822467][T28588] ? unregister_netdevice_queue+0x1b3/0x380 [ 952.828345][T28588] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 952.834574][T28588] ? __pfx_veth_dellink+0x10/0x10 [ 952.839581][T28588] rtnl_dellink+0x488/0x710 [ 952.844067][T28588] ? __pfx_rtnl_dellink+0x10/0x10 [ 952.849075][T28588] ? kasan_quarantine_put+0xdd/0x220 [ 952.854355][T28588] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.859561][T28588] ? __pfx_rtnl_dellink+0x10/0x10 [ 952.864565][T28588] rtnetlink_rcv_msg+0x7cf/0xb70 [ 952.869485][T28588] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 952.874575][T28588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 952.880014][T28588] ? ref_tracker_free+0x63a/0x7d0 [ 952.885108][T28588] ? __asan_memcpy+0x40/0x70 [ 952.889679][T28588] ? __pfx_ref_tracker_free+0x10/0x10 [ 952.895041][T28588] netlink_rcv_skb+0x208/0x470 [ 952.899790][T28588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 952.905232][T28588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 952.910499][T28588] ? netlink_deliver_tap+0x2e/0x1b0 [ 952.915677][T28588] netlink_unicast+0x82c/0x9e0 [ 952.920430][T28588] ? __pfx_netlink_unicast+0x10/0x10 [ 952.925708][T28588] ? netlink_sendmsg+0x642/0xb30 [ 952.930624][T28588] ? skb_put+0x11b/0x210 [ 952.934849][T28588] netlink_sendmsg+0x805/0xb30 [ 952.939596][T28588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.944862][T28588] ? aa_sock_msg_perm+0x94/0x160 [ 952.949871][T28588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 952.955137][T28588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.960404][T28588] __sock_sendmsg+0x219/0x270 [ 952.965070][T28588] ____sys_sendmsg+0x505/0x830 [ 952.969821][T28588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.975097][T28588] ? import_iovec+0x74/0xa0 [ 952.979587][T28588] ___sys_sendmsg+0x21f/0x2a0 [ 952.984245][T28588] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.989438][T28588] ? __fget_files+0x2a/0x420 [ 952.994008][T28588] ? __fget_files+0x3a0/0x420 [ 952.998757][T28588] __x64_sys_sendmsg+0x19b/0x260 [ 953.003678][T28588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.009126][T28588] ? do_syscall_64+0xbe/0x3b0 [ 953.013788][T28588] do_syscall_64+0xfa/0x3b0 [ 953.018271][T28588] ? lockdep_hardirqs_on+0x9c/0x150 [ 953.023484][T28588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.029531][T28588] ? clear_bhb_loop+0x60/0xb0 [ 953.034190][T28588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.040066][T28588] RIP: 0033:0x7f1deb98e9a9 [ 953.044461][T28588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.064059][T28588] RSP: 002b:00007f1dec83a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.072454][T28588] RAX: ffffffffffffffda RBX: 00007f1debbb5fa0 RCX: 00007f1deb98e9a9 [ 953.080406][T28588] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 953.088357][T28588] RBP: 00007f1deba10d69 R08: 0000000000000000 R09: 0000000000000000 [ 953.096308][T28588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.104270][T28588] R13: 0000000000000000 R14: 00007f1debbb5fa0 R15: 00007ffd40ae6fc8 [ 953.112240][T28588] [ 953.115255][T28588] Modules linked in: [ 953.121920][T28588] ---[ end trace 0000000000000000 ]--- [ 953.151994][T28588] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 953.157675][T28588] Code: ff ff ff e8 63 67 43 01 89 c5 31 ff 89 c6 e8 f8 69 93 f7 85 ed 74 45 e8 af 65 93 f7 eb 05 e8 a8 65 93 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b2 74 f5 f7 49 8b 2c 24 49 8d 7c [ 953.179541][T28588] RSP: 0018:ffffc9001018ea00 EFLAGS: 00010206 [ 953.190140][T28588] RAX: 000000001fffe000 RBX: 1ffff1100aca4102 RCX: 0000000000080000 [ 953.240376][T28588] RDX: ffffc90004aa1000 RSI: 000000000003c27b RDI: 000000000003c27c [ 953.249711][T28588] RBP: 0000000000000001 R08: ffffffff8fa22ef7 R09: 1ffffffff1f445de [ 953.258948][T28588] R10: dffffc0000000000 R11: fffffbfff1f445df R12: 00000000ffff0000 [ 953.268475][T28588] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888056520810 [ 953.277739][T28588] FS: 00007f1dec83a6c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 953.287935][T28588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.296037][T28588] CR2: 0000001b311f6ff8 CR3: 0000000039d2c000 CR4: 00000000003526f0 [ 953.305363][T28588] Kernel panic - not syncing: Fatal exception [ 953.311711][T28588] Kernel Offset: disabled [ 953.316013][T28588] Rebooting in 86400 seconds..