last executing test programs: 7.902624475s ago: executing program 3 (id=3802): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}, @md5sig={0x1d, 0x12, "ac3272000000006f00"}]}}}}}}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0xa, 0x41, 0x22eb, 'vcan0\x00', 'ip6erspan0\x00', 'veth1_vlan\x00', 'pimreg1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffff, 0x20a6, 0x5, 0x0, 0x0, "d2087b7dc92e705014fc68c8a276c0428fba4768be0363319ea0fc17f972d825e64577b4b397641d19a1df5d303312945df71b3fb485a691ecee3f2da953564a"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x1ee) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7) 7.66239989s ago: executing program 3 (id=3806): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 6.687412112s ago: executing program 3 (id=3812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x25, 0x1, 0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x75}, 0x38) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xb, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) write$cgroup_int(r7, &(0x7f0000000200)=0x8, 0x12) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a000008000280040010800a378160082eb76eae0a78a3edb2460a0e55a3cbc982ff2667a253fcef5ec13b3378b5aa08ea4f63727a28a2483f46"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.559471683s ago: executing program 2 (id=3813): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r6 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 5.966938217s ago: executing program 0 (id=3815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.380808766s ago: executing program 2 (id=3818): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) 5.04245486s ago: executing program 0 (id=3819): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket(0x28, 0x6, 0x0) sendto(r2, &(0x7f0000000d00)="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", 0x1000, 0x0, &(0x7f0000000180)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xfff2, 0x1}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x800020000000005) accept4$llc(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r10, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x4040010) 4.554226947s ago: executing program 3 (id=3821): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}, @md5sig={0x1d, 0x12, "ac3272000000006f00"}]}}}}}}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0xa, 0x41, 0x22eb, 'vcan0\x00', 'ip6erspan0\x00', 'veth1_vlan\x00', 'pimreg1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffff, 0x20a6, 0x5, 0x0, 0x0, "d2087b7dc92e705014fc68c8a276c0428fba4768be0363319ea0fc17f972d825e64577b4b397641d19a1df5d303312945df71b3fb485a691ecee3f2da953564a"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x1ee) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7) 4.225616371s ago: executing program 1 (id=3822): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x0, 0x0, 0x148, 0x1b0, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {}, 0x84, 0x0, 0x60}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x6, [0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e31, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4ea0, 0x4622, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e21], [0x4e24, 0x4e22], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x2, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) 4.104413995s ago: executing program 2 (id=3823): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xa}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0), 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000002400010300000000800000001100000004002f80787f079f85320f8ccfa6acd3e51eb721b5c0bd53ce14a3cafff4c04d45bd9f2fc3816845955a4e3fe43d10fa1c813fe2b450abf4a1cf790f3eeb34779b2cf6ce4aa65cfb2f51d19c641afdb0f5f63b3ef7967ec3d51cc8fd830322ef28299040e17baa0788e1cdf701b5ebb2f8a3ee0ad0f8a2aff1745b927e2d0b165639f9f810e2896b987c7027f94a9a44579b2f67b1ba827ebcd38a2cd1689205b4288b41a00d67cdf3be383814e82ca16b740a746fce0ebc5f0c82ecc1baab51c64fbf0658c755a07e33f2e609eceb1edfcbce1531b05f4b09"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.050673459s ago: executing program 0 (id=3824): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000001"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r3, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 4.031864727s ago: executing program 1 (id=3825): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x804) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x3) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="df3b46a1330000000000000000000000000000f1bfb4aa068fc60c48ae2cd8ab1fcc903b7ebd3bf583aaa8d7c8db6df62ecfbbbf9d88e22299fc6bf8966fde2978d207040000001fc672f220fb612483c7392064f03ec88c0d80463164cc66bad573b1862f7e9dd8c88d2a5ad193407968b7cc9beb08c875", 0x78}], 0x1}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.976001359s ago: executing program 4 (id=3826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf27235cb8dee9c5c}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)={0x7b0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x471, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x77c, 0x111, 0x0, 0x1, {0x778, 0x5, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xdca27adb98797559}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x600}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x7b0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r9, 0x1, 0x70bd25, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmsg(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x40c4) sendmmsg$unix(r11, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r14 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r13, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv4_newnexthop={0x78, 0x68, 0x300, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x4, 0x0, 0x1}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x2}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 3.966874311s ago: executing program 3 (id=3827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0x73, 0x8000, 0x4, 0x7}, {{@in=@multicast2, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edd368c1e65048d64970de32616d7e48bf9d74a053ee84fbd12d85f7ef6497dd9ce2dc31152584d1fbf54787d6e8ade09b8b53dff30a3cf7d80e81f351bdb3bcd7228917e90b70fca3014129a9564a2533cdf098542d2b72d3f727b5b15ee196edabe396375e70c06d28f89f9d431dd01017ff43e59ebb1fdcb04291026f1aa5dd973d37883f382ca6ec71abeb535a93522bb4b72b05bfff729ce3c98d9b157dc942a560e7fccd1119f0e5407747c87e5d1359a77e3c689a50a08b881f5da3c29dc7742897398ba090cd1317759f8fb7968745db5850"], 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r6, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000040)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xdc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000850055090100000000009500000000000000185b000000000000000000000000000018360000010000000000000000000000bf91000000000000b7020000011e00008500000084000000b7000000000000009500000000008000"/128], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 3.51386149s ago: executing program 0 (id=3828): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 3.31471862s ago: executing program 2 (id=3829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.190730815s ago: executing program 1 (id=3830): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x10005}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r3, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005, 0x810, r4, 0x6400b000) accept$inet6(r4, 0x0, &(0x7f00000011c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000000)={0x21, 0x3}) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) write$cgroup_int(r5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 2.987097004s ago: executing program 4 (id=3831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x9e, &(0x7f0000000180)=""/158, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "a4893660695177b89dfaefb4ae615f9a5be7120e9cc429f4781102b64885cf92bfa3c0c0c1e9ea966450c2a4a618548ad38c68e03acf838d9d8502c612d4c2af245f3c7a76d05ecdd93148f9d8557d61d222e32694c0ed53d3690dd9344e901c055c57508fa0636c0b2ad73585662d8f057ca6e8cf8a4266fc3bda"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000895) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x1, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, 0x1000}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40) 2.799886257s ago: executing program 3 (id=3832): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040400) unshare(0x62020080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES8=r2, @ANYRESOCT=r6, @ANYRESHEX=r6, @ANYRESHEX, @ANYRESOCT=r6, @ANYRES8, @ANYRESHEX], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.461127179s ago: executing program 0 (id=3833): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 2.245087124s ago: executing program 2 (id=3834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x7fff, @private0, 0x4}}}, &(0x7f00000000c0)=0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0xa5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000eda482"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4094) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 2.185394884s ago: executing program 1 (id=3835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='tlb_flush\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='rxrpc_rx_icmp\x00'}, 0x18) write(0xffffffffffffffff, &(0x7f0000000500)="cbb7537e0100288b957fe50064f1e611292a89df594317fd81132f53ef3b6a287175ba9edecbe0e220e7d1ce0ec845913ef61a8efb23bbb31b7ae2e3f9c22fcc1ea0c4caeca48aabf6e0212c2c1b8d84a471238b46414c1f0d1edc9ffefbe364957b6b06d3aad9ae49b552597ef36ff815efac32fdc9fb3bdf3d64faf9cc9af79ef879bfa0b354b3096b22ab8fd06e9ec8a4ce32627ff83371efd7002341281bffcefa8522b8e40e5368cb69142a97edfe2160b9413257f46e800b5eb3aa57620d94c31895b2d0b8cf9f773a56adaff7a89be19cf2e6acbdf30ec413759ff23fd6df0e72b698016ad8085bae58cee05000"/252, 0xfc) write(r5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdb0c9818858cebec5bef0350ec7991df25250000000e0021006e657464657673696d0000000f00"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000440)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) writev(r10, &(0x7f00000000c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.111997715s ago: executing program 4 (id=3836): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x900, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b924, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffe0, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4008800) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 541.390795ms ago: executing program 4 (id=3837): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}, @md5sig={0x1d, 0x12, "ac3272000000006f00"}]}}}}}}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000580], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0xa, 0x41, 0x22eb, 'vcan0\x00', 'ip6erspan0\x00', 'veth1_vlan\x00', 'pimreg1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0xffff, 0x20a6, 0x5, 0x0, 0x0, "d2087b7dc92e705014fc68c8a276c0428fba4768be0363319ea0fc17f972d825e64577b4b397641d19a1df5d303312945df71b3fb485a691ecee3f2da953564a"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x1ee) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7) 535.886365ms ago: executing program 1 (id=3838): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000001"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r3, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 529.181822ms ago: executing program 0 (id=3839): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) recvmsg(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935", 0x8d}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) r3 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x9c) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000180)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r7, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 376.459429ms ago: executing program 2 (id=3840): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000b80)={{0x0, 0xfffffffffffffff6, 0x4, 0x6, 0x0, 0x3, 0x3042, 0x7, 0x2, 0x8f, 0x0, 0x200, 0xffffffffffffffff, 0x80, 0x70}}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r3], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 271.434044ms ago: executing program 1 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) unshare(0x62040200) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 268.479687ms ago: executing program 4 (id=3842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x4040004) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x810) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000000)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 0s ago: executing program 4 (id=3843): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0xfc, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xec, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3"]}]}, 0xfc}, {0x0}], 0x2}, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) kernel console output (not intermixed with test programs): new maximum fragment MTU (-320) [ 428.464530][T15430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.475880][T15430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.487735][T15430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.540809][T15416] delete_channel: no stack [ 428.568516][T15432] lo speed is unknown, defaulting to 1000 [ 428.576109][T15432] wg1 speed is unknown, defaulting to 1000 [ 428.818240][T15451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2702'. [ 428.858906][T15455] gretap1: entered allmulticast mode [ 428.865754][T15459] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2703'. [ 428.887383][T15451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2702'. [ 428.975236][T15462] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53078 - 0 [ 429.150581][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 429.277060][T15462] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53078 - 0 [ 429.440651][T15462] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53078 - 0 [ 429.518276][T15462] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53078 - 0 [ 429.545076][T15472] lo speed is unknown, defaulting to 1000 [ 429.584118][T15475] lo speed is unknown, defaulting to 1000 [ 429.602943][T15472] wg1 speed is unknown, defaulting to 1000 [ 429.667967][T15475] wg1 speed is unknown, defaulting to 1000 [ 429.739910][T15480] bond0: Caught tx_queue_len zero misconfig [ 429.874402][ T1168] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53078 - 0 [ 429.935155][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53078 - 0 [ 430.045948][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53078 - 0 [ 430.129923][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53078 - 0 [ 430.216823][T15496] lo speed is unknown, defaulting to 1000 [ 430.255179][T15496] wg1 speed is unknown, defaulting to 1000 [ 430.347432][T15506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2713'. [ 430.383471][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 431.030230][T15514] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 431.226452][T15516] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 431.271829][T15516] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 431.400189][T15518] bond9: (slave gretap1): making interface the new active one [ 431.418633][T15518] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 431.459595][T15514] macvlan2: entered promiscuous mode [ 431.467927][T15514] macvlan2: entered allmulticast mode [ 431.474749][T15514] bond9: entered promiscuous mode [ 431.479956][T15514] gretap1: entered promiscuous mode [ 431.491608][T15514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 431.521754][T15514] bond9: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 431.551748][T15514] bond9: left promiscuous mode [ 431.569096][T15514] gretap1: left promiscuous mode [ 431.793644][T15531] lo speed is unknown, defaulting to 1000 [ 431.801404][T15531] wg1 speed is unknown, defaulting to 1000 [ 431.976814][T15530] sctp: [Deprecated]: syz.2.2719 (pid 15530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.976814][T15530] Use struct sctp_sack_info instead [ 432.005274][T15514] syz.1.2715 (15514) used greatest stack depth: 15384 bytes left [ 432.489865][T15558] lo speed is unknown, defaulting to 1000 [ 432.508913][T15558] wg1 speed is unknown, defaulting to 1000 [ 432.737551][T15563] lo speed is unknown, defaulting to 1000 [ 432.777685][T15563] wg1 speed is unknown, defaulting to 1000 [ 433.107094][T15570] syz.3.2726 (15570) used obsolete PPPIOCDETACH ioctl [ 433.160689][T15575] __nla_validate_parse: 6 callbacks suppressed [ 433.160705][T15575] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2728'. [ 433.189450][T15573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2728'. [ 433.443288][T15571] lo speed is unknown, defaulting to 1000 [ 433.451645][T15571] wg1 speed is unknown, defaulting to 1000 [ 433.952572][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 433.963075][T15587] lo speed is unknown, defaulting to 1000 [ 434.022276][T15595] netlink: 'syz.2.2733': attribute type 30 has an invalid length. [ 434.034647][T15587] wg1 speed is unknown, defaulting to 1000 [ 434.123875][ T740] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.162310][ T740] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.202583][ T740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.211308][ T740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.821649][T15606] lo speed is unknown, defaulting to 1000 [ 434.831329][T15606] wg1 speed is unknown, defaulting to 1000 [ 435.170864][T15598] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 435.286993][T15598] bond12 (unregistering): Released all slaves [ 435.416386][T15627] net_ratelimit: 12 callbacks suppressed [ 435.416404][T15627] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 435.591036][T15630] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2738'. [ 435.593154][T15607] lo speed is unknown, defaulting to 1000 [ 435.631831][T15607] wg1 speed is unknown, defaulting to 1000 [ 435.830660][T15630] bond0 (unregistering): Released all slaves [ 436.245877][T15658] netlink: 'syz.0.2741': attribute type 12 has an invalid length. [ 436.268209][T15658] netlink: 'syz.0.2741': attribute type 4 has an invalid length. [ 436.508829][T15655] lo speed is unknown, defaulting to 1000 [ 436.536303][T15655] wg1 speed is unknown, defaulting to 1000 [ 436.566680][T15664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.567798][T15662] lo speed is unknown, defaulting to 1000 [ 436.607878][T15662] wg1 speed is unknown, defaulting to 1000 [ 437.115580][T15674] lo speed is unknown, defaulting to 1000 [ 437.170442][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 437.210307][T15680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.225999][T15680] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 437.270100][ T9] lo speed is unknown, defaulting to 1000 [ 437.278782][T15674] wg1 speed is unknown, defaulting to 1000 [ 437.366105][ T9] syz2: Port: 1 Link ACTIVE [ 437.384073][T15686] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.395985][T15686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.657336][T15702] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2750'. [ 437.687148][T15700] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 437.840557][T15704] sctp: [Deprecated]: syz.1.2751 (pid 15704) Use of int in maxseg socket option. [ 437.840557][T15704] Use struct sctp_assoc_value instead [ 437.927976][T15702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.967551][T15702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.069388][T15702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 438.285522][T15702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.316303][T15702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.357486][T15702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 438.447115][T15702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.457956][T15702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.468398][T15702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 438.489847][T15716] lo speed is unknown, defaulting to 1000 [ 438.529680][T15716] wg1 speed is unknown, defaulting to 1000 [ 438.537153][T15712] lo speed is unknown, defaulting to 1000 [ 438.570174][T15702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.581563][T15702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.592217][T15702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 438.622905][T15712] wg1 speed is unknown, defaulting to 1000 [ 438.736454][T15728] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2756'. [ 438.762421][T15728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.860225][ T1168] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.869344][ T1168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 438.878605][ T1168] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 438.916573][ T1168] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.925047][ T1168] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 438.935548][ T1168] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 438.979880][ T1168] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.988423][ T1168] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 438.997082][ T1168] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 439.088871][ T1168] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.099164][ T1168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 439.110084][ T1168] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 439.166764][T15740] netlink: 'syz.1.2761': attribute type 10 has an invalid length. [ 439.208458][T15740] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 439.334535][T15752] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.384683][T15752] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.437156][T15752] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.693012][T15747] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2762'. [ 439.702859][T15747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.762438][ T5835] Bluetooth: hci0: command tx timeout [ 439.927956][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 439.964592][T15752] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.991182][T15752] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 440.014631][T15752] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.251775][T15752] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.273751][T15752] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 440.284023][T15752] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.354839][T15770] lo speed is unknown, defaulting to 1000 [ 440.395869][T15752] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.431303][T15752] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 440.446254][T15752] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.493297][T15770] wg1 speed is unknown, defaulting to 1000 [ 440.534430][T15783] lo speed is unknown, defaulting to 1000 [ 440.557155][T15783] wg1 speed is unknown, defaulting to 1000 [ 440.704582][T15788] 8021q: adding VLAN 0 to HW filter on device bond12 [ 440.740915][T15790] bond12: (slave veth29): Enslaving as an active interface with an up link [ 440.789483][T15792] bond0: Device is already in use. [ 440.919994][T15795] lo speed is unknown, defaulting to 1000 [ 440.928202][T15795] wg1 speed is unknown, defaulting to 1000 [ 441.114340][T15802] netlink: 'syz.0.2775': attribute type 10 has an invalid length. [ 441.184747][T15802] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 441.419088][T15799] lo speed is unknown, defaulting to 1000 [ 441.434153][T15799] wg1 speed is unknown, defaulting to 1000 [ 441.469162][T15816] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2776'. [ 441.500248][T15816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.770440][T15813] lo speed is unknown, defaulting to 1000 [ 441.833554][ T11] block nbd1: Possible stuck request ffff888024bc0540: control (read@0,1024B). Runtime 150 seconds [ 441.845208][ T11] block nbd1: Possible stuck request ffff888024bc0700: control (read@1024,1024B). Runtime 150 seconds [ 441.857128][ T11] block nbd1: Possible stuck request ffff888024bc08c0: control (read@2048,1024B). Runtime 150 seconds [ 441.869587][ T11] block nbd1: Possible stuck request ffff888024bc0a80: control (read@3072,1024B). Runtime 150 seconds [ 441.935962][T15813] wg1 speed is unknown, defaulting to 1000 [ 441.973292][T15822] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2780'. [ 441.983770][T15822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.459476][T15836] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 442.638287][T15840] 8021q: adding VLAN 0 to HW filter on device bond10 [ 442.719980][T15843] bond10: (slave veth19): Enslaving as an active interface with an up link [ 442.904393][T15853] ip6tnl0: Caught tx_queue_len zero misconfig [ 443.090736][T15853] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2787'. [ 443.171319][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 443.214356][T15853] hsr_slave_0: left promiscuous mode [ 443.417374][T15868] lo speed is unknown, defaulting to 1000 [ 443.425304][T15868] wg1 speed is unknown, defaulting to 1000 [ 443.642599][ T30] audit: type=1800 audit(1763792414.280:17): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2790" name="memory.events" dev="tmpfs" ino=2793 res=0 errno=0 [ 443.835986][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 443.847159][T15893] netlink: 'syz.0.2792': attribute type 10 has an invalid length. [ 443.874129][T15893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2792'. [ 443.978531][ T1168] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 444.008466][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2794'. [ 444.122493][T15893] team0: Port device geneve0 added [ 444.177905][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.510376][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.533111][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.554695][T15905] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2795'. [ 444.565755][T15905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.621676][T15914] 8021q: adding VLAN 0 to HW filter on device bond8 [ 444.658668][T15918] bond8: (slave veth19): Enslaving as an active interface with an up link [ 444.712276][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.768806][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.813892][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.844736][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.867720][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.913673][T15929] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2800'. [ 444.935988][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2800'. [ 445.752107][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 445.760180][ C1] lec:lec_tx_timeout: lec0 [ 446.071078][T15958] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 446.133708][T15952] lo speed is unknown, defaulting to 1000 [ 446.153764][T15952] wg1 speed is unknown, defaulting to 1000 [ 446.314062][T15966] 8021q: adding VLAN 0 to HW filter on device bond13 [ 446.445199][T15971] bond13: (slave veth31): Enslaving as an active interface with an up link [ 446.660462][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2813'. [ 446.697123][T15972] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2811'. [ 446.732294][T15972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.766168][T15974] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2810'. [ 446.796777][T15974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.820277][T15983] tipc: Enabling of bearer rejected, already enabled [ 446.844716][T15981] tipc: Resetting bearer [ 446.903418][T15987] syzkaller0: Caught tx_queue_len zero misconfig [ 446.927223][T15990] netlink: 'syz.3.2814': attribute type 39 has an invalid length. [ 447.205949][T15995] lo speed is unknown, defaulting to 1000 [ 447.228589][T15995] wg1 speed is unknown, defaulting to 1000 [ 447.391320][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'. [ 447.718486][T16023] lo speed is unknown, defaulting to 1000 [ 447.741265][T16023] wg1 speed is unknown, defaulting to 1000 [ 447.753139][T16022] lo speed is unknown, defaulting to 1000 [ 448.081905][T16022] wg1 speed is unknown, defaulting to 1000 [ 448.130393][T16032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.288855][T16033] netlink: 'syz.0.2825': attribute type 12 has an invalid length. [ 448.457390][T16039] lo speed is unknown, defaulting to 1000 [ 448.465538][T16039] wg1 speed is unknown, defaulting to 1000 [ 448.769369][T16024] lo speed is unknown, defaulting to 1000 [ 448.777194][T16024] wg1 speed is unknown, defaulting to 1000 [ 448.931864][T16051] __nla_validate_parse: 2 callbacks suppressed [ 448.931882][T16051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2828'. [ 448.970514][T16050] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 449.219173][T16050] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 449.237509][T16055] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2829'. [ 449.261695][T16058] tipc: Enabled bearer , priority 0 [ 449.292809][T16058] syzkaller0: entered promiscuous mode [ 449.298282][T16058] syzkaller0: entered allmulticast mode [ 449.327810][T16050] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 449.603835][T16050] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 449.646195][T16057] tipc: Resetting bearer [ 449.696258][T16057] tipc: Disabling bearer [ 449.813985][T16067] lo speed is unknown, defaulting to 1000 [ 449.839778][ T1168] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 449.874025][T16067] wg1 speed is unknown, defaulting to 1000 [ 449.874081][ T6214] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 449.945463][ T1168] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 450.105000][ T1168] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 450.987114][T16081] tipc: Enabled bearer , priority 0 [ 451.013462][T16084] syzkaller0: entered promiscuous mode [ 451.024571][T16084] syzkaller0: entered allmulticast mode [ 451.113820][T16087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2834'. [ 451.266422][T16094] tipc: Resetting bearer [ 451.598399][T16101] lo speed is unknown, defaulting to 1000 [ 451.604440][T16099] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2838'. [ 451.624190][T16099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.651609][T16079] tipc: Resetting bearer [ 451.676168][T16079] tipc: Disabling bearer [ 451.696084][T16101] wg1 speed is unknown, defaulting to 1000 [ 451.836133][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 451.933130][T16115] tipc: New replicast peer: 255.255.255.255 [ 451.940001][T16115] tipc: Enabled bearer , priority 10 [ 451.949749][T16115] netlink: 'syz.1.2843': attribute type 11 has an invalid length. [ 451.957738][T16115] netlink: 'syz.1.2843': attribute type 11 has an invalid length. [ 451.966122][T16115] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2843'. [ 451.998565][T16115] bridge12: entered promiscuous mode [ 452.004384][T16115] bridge12: entered allmulticast mode [ 452.173652][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 452.185258][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 452.195215][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 452.215700][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 452.653197][T16140] tipc: Bearer : already 2 bearers with priority 10 [ 452.700258][T16140] tipc: Bearer : trying with adjusted priority [ 452.778828][T16140] tipc: Enabling of bearer rejected, failed to enable media [ 452.882845][T16146] macvlan0: entered allmulticast mode [ 452.917470][T16146] veth1_vlan: entered allmulticast mode [ 452.984749][T16146] tipc: Resetting bearer [ 453.020307][T16146] tipc: Resetting bearer [ 453.046985][T16141] lo speed is unknown, defaulting to 1000 [ 453.061836][T16141] wg1 speed is unknown, defaulting to 1000 [ 453.648262][T16160] lo speed is unknown, defaulting to 1000 [ 453.665732][T16160] wg1 speed is unknown, defaulting to 1000 [ 453.694354][T16163] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.821003][T16163] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.893462][T16168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.004337][T16163] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.116164][T16163] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.227987][T16173] __nla_validate_parse: 10 callbacks suppressed [ 454.228003][T16173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2856'. [ 454.260776][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.350072][T16173] netlink: 'syz.1.2856': attribute type 29 has an invalid length. [ 454.360677][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.438283][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.472840][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.706019][T16188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 454.764587][T16192] netlink: 'syz.1.2861': attribute type 10 has an invalid length. [ 454.822902][T16195] netlink: 'syz.1.2861': attribute type 1 has an invalid length. [ 454.871502][T16193] lo speed is unknown, defaulting to 1000 [ 454.905998][T16193] wg1 speed is unknown, defaulting to 1000 [ 455.214502][T16203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.223779][T16203] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 455.407811][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2864'. [ 455.443597][T16209] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2865'. [ 455.543983][T16208] lo speed is unknown, defaulting to 1000 [ 455.561073][T16208] wg1 speed is unknown, defaulting to 1000 [ 455.959921][T16214] lo speed is unknown, defaulting to 1000 [ 455.968769][T16214] wg1 speed is unknown, defaulting to 1000 [ 456.139728][T16224] netlink: 'syz.0.2868': attribute type 3 has an invalid length. [ 456.279002][T16228] lo speed is unknown, defaulting to 1000 [ 456.286686][T16228] wg1 speed is unknown, defaulting to 1000 [ 456.373685][T16224] lo: Caught tx_queue_len zero misconfig [ 456.379356][T16224] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2868'. [ 456.526175][T16233] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 456.622270][T16240] veth0: entered promiscuous mode [ 456.636516][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2871'. [ 456.670393][T16238] lo speed is unknown, defaulting to 1000 [ 456.725805][T16238] wg1 speed is unknown, defaulting to 1000 [ 456.753710][T16243] netlink: 'syz.1.2870': attribute type 16 has an invalid length. [ 456.767795][T16243] netlink: 'syz.1.2870': attribute type 17 has an invalid length. [ 456.779088][T16239] netlink: 'syz.4.2871': attribute type 11 has an invalid length. [ 456.872254][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 456.910195][T16243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.932716][T16243] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.951661][T16243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.123629][T16249] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 457.296019][T16250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.327881][T16249] netlink: 'syz.3.2873': attribute type 10 has an invalid length. [ 457.361853][T16249] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 457.406411][T16249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.471209][T16249] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 457.493139][T16240] veth0: left promiscuous mode [ 457.872568][T16267] netlink: 'syz.4.2876': attribute type 4 has an invalid length. [ 457.947841][ T5827] lo speed is unknown, defaulting to 1000 [ 457.950557][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 457.979814][ T5827] syz2: Port: 1 Link DOWN [ 458.034460][T16264] lo speed is unknown, defaulting to 1000 [ 458.047777][T16264] wg1 speed is unknown, defaulting to 1000 [ 458.056686][T16266] syzkaller0: left promiscuous mode [ 458.061903][T16266] syzkaller0: left allmulticast mode [ 458.067918][T16266] tipc: Resetting bearer [ 458.393727][T16283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2882'. [ 458.407984][T16281] TCP: TCP_TX_DELAY enabled [ 458.456325][T16280] lo speed is unknown, defaulting to 1000 [ 458.465667][T16281] syzkaller0: entered promiscuous mode [ 458.489460][T16281] syzkaller0: entered allmulticast mode [ 458.509558][T16280] wg1 speed is unknown, defaulting to 1000 [ 458.780737][T16285] lo speed is unknown, defaulting to 1000 [ 458.814013][T16285] wg1 speed is unknown, defaulting to 1000 [ 459.473991][ T30] audit: type=1800 audit(1763792430.110:18): pid=16301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2885" name="memory.events" dev="tmpfs" ino=2815 res=0 errno=0 [ 459.626303][T16310] lo speed is unknown, defaulting to 1000 [ 459.654907][T16313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 459.683925][T16310] wg1 speed is unknown, defaulting to 1000 [ 459.945768][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 460.027242][T16318] lo speed is unknown, defaulting to 1000 [ 460.083657][T16324] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 460.113429][T16318] wg1 speed is unknown, defaulting to 1000 [ 460.166047][T16328] netlink: 'syz.0.2893': attribute type 10 has an invalid length. [ 460.221782][T16329] netlink: 'syz.0.2893': attribute type 1 has an invalid length. [ 460.522563][T16335] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2895'. [ 460.606840][T16335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.681789][T16342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'. [ 460.875285][T16344] lo speed is unknown, defaulting to 1000 [ 460.914720][T16344] wg1 speed is unknown, defaulting to 1000 [ 461.324655][T16360] bond14 (unregistering): Released all slaves [ 461.844038][T16380] pimreg: entered allmulticast mode [ 461.849855][T16371] lo speed is unknown, defaulting to 1000 [ 461.893915][T16371] wg1 speed is unknown, defaulting to 1000 [ 462.161587][T16386] lo speed is unknown, defaulting to 1000 [ 462.220079][T16392] lo speed is unknown, defaulting to 1000 [ 462.238565][T16386] wg1 speed is unknown, defaulting to 1000 [ 462.273997][T16392] wg1 speed is unknown, defaulting to 1000 [ 462.403943][T16399] bond0: Device is already in use. [ 462.670599][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 463.284944][T16418] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2913'. [ 463.303760][T16418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.495191][T16413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.611312][T16421] netlink: 'syz.1.2914': attribute type 3 has an invalid length. [ 463.657777][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'. [ 463.789708][T16413] netlink: 'syz.1.2914': attribute type 5 has an invalid length. [ 463.810743][T16429] tipc: New replicast peer: 255.255.255.255 [ 463.844836][T16429] tipc: Enabled bearer , priority 10 [ 463.851405][T16425] netlink: 'syz.3.2917': attribute type 1 has an invalid length. [ 463.866288][T16425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2917'. [ 464.039335][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2922'. [ 464.065291][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2922'. [ 464.132665][T16441] netlink: 'syz.4.2921': attribute type 10 has an invalid length. [ 464.209359][T16441] 8021q: adding VLAN 0 to HW filter on device ` [ 464.242565][T16441] bond0: (slave `): Enslaving as an active interface with an up link [ 465.146129][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2930'. [ 465.267199][T16468] netlink: 'syz.1.2924': attribute type 11 has an invalid length. [ 465.275333][T16468] netlink: 'syz.1.2924': attribute type 11 has an invalid length. [ 465.283486][T16468] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2924'. [ 465.810711][T16464] vlan4: entered promiscuous mode [ 465.836787][T16447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.849350][T16464] vlan4: entered allmulticast mode [ 465.859305][T16464] hsr_slave_1: entered allmulticast mode [ 466.106667][T16474] netlink: 'syz.2.2932': attribute type 13 has an invalid length. [ 466.122123][T16474] netlink: 'syz.2.2932': attribute type 17 has an invalid length. [ 466.492932][T16474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.624492][T16490] netlink: 'syz.3.2936': attribute type 10 has an invalid length. [ 466.666894][T16474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.737366][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'. [ 466.754778][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2935'. [ 466.785254][T16471] lo speed is unknown, defaulting to 1000 [ 466.828023][T16474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.831189][T16471] wg1 speed is unknown, defaulting to 1000 [ 466.934324][T16497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2937'. [ 467.106458][T16509] netlink: 'syz.0.2938': attribute type 3 has an invalid length. [ 467.122148][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 467.206950][T16514] bond0: Master is either lo or non-ether device [ 467.219464][T16516] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2943'. [ 467.236473][T16516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2943'. [ 467.749887][T16527] lo speed is unknown, defaulting to 1000 [ 467.760301][T16527] wg1 speed is unknown, defaulting to 1000 [ 468.137792][T16544] lo speed is unknown, defaulting to 1000 [ 468.216502][T16544] wg1 speed is unknown, defaulting to 1000 [ 468.394592][T16559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2954'. [ 468.593416][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 469.404191][T16571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.418950][T16571] bond0: (slave rose0): Enslaving as an active interface with an up link [ 469.455646][T16576] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 469.479644][T16582] rdma_rxe: rxe_newlink: failed to add lo [ 470.369912][T16605] __nla_validate_parse: 2 callbacks suppressed [ 470.369930][T16605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2965'. [ 470.866500][ T30] audit: type=1800 audit(1763792441.500:19): pid=16617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2966" name="memory.events" dev="tmpfs" ino=2884 res=0 errno=0 [ 471.172318][T16625] lo speed is unknown, defaulting to 1000 [ 471.179775][T16625] wg1 speed is unknown, defaulting to 1000 [ 471.400201][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 471.526545][T16642] lo speed is unknown, defaulting to 1000 [ 471.532091][T16651] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2975'. [ 471.704243][T16642] wg1 speed is unknown, defaulting to 1000 [ 471.912705][ T11] block nbd1: Possible stuck request ffff888024bc0540: control (read@0,1024B). Runtime 180 seconds [ 471.923684][ T11] block nbd1: Possible stuck request ffff888024bc0700: control (read@1024,1024B). Runtime 180 seconds [ 471.938677][ T11] block nbd1: Possible stuck request ffff888024bc08c0: control (read@2048,1024B). Runtime 180 seconds [ 471.949944][ T11] block nbd1: Possible stuck request ffff888024bc0a80: control (read@3072,1024B). Runtime 180 seconds [ 472.270224][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2977'. [ 472.496496][T16663] lo speed is unknown, defaulting to 1000 [ 472.518379][T16663] wg1 speed is unknown, defaulting to 1000 [ 472.777607][T16671] lo speed is unknown, defaulting to 1000 [ 472.787712][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2990'. [ 472.829261][T16671] wg1 speed is unknown, defaulting to 1000 [ 472.996562][T16674] lo speed is unknown, defaulting to 1000 [ 473.552530][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2980'. [ 473.992741][T16674] wg1 speed is unknown, defaulting to 1000 [ 473.998703][T16676] lo speed is unknown, defaulting to 1000 [ 474.016840][T16676] wg1 speed is unknown, defaulting to 1000 [ 474.405917][T16707] lo speed is unknown, defaulting to 1000 [ 474.414540][T16707] wg1 speed is unknown, defaulting to 1000 [ 474.642258][T16708] lo speed is unknown, defaulting to 1000 [ 474.650015][T16708] wg1 speed is unknown, defaulting to 1000 [ 475.043437][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 475.143811][T16716] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.230326][T16723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2991'. [ 475.281012][T16716] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.357671][T16716] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.582858][T16716] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.938256][T16744] lo speed is unknown, defaulting to 1000 [ 475.945860][T16744] wg1 speed is unknown, defaulting to 1000 [ 476.137289][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.213591][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.238759][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.508083][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.670527][T16763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3001'. [ 476.768481][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'. [ 476.872434][T16758] lo speed is unknown, defaulting to 1000 [ 476.903152][T16758] wg1 speed is unknown, defaulting to 1000 [ 477.148067][T16773] lo speed is unknown, defaulting to 1000 [ 477.196843][T16773] wg1 speed is unknown, defaulting to 1000 [ 477.430278][T16788] lo speed is unknown, defaulting to 1000 [ 477.465754][T16788] wg1 speed is unknown, defaulting to 1000 [ 477.711194][T16797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3012'. [ 477.894033][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3013'. [ 477.930614][T16807] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 477.965047][T16777] lo speed is unknown, defaulting to 1000 [ 477.975688][T16777] wg1 speed is unknown, defaulting to 1000 [ 478.097969][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3016'. [ 478.155979][T16814] bond13 (unregistering): Released all slaves [ 478.243576][T16818] Ï: option downdelay: invalid value (18446744073709547007) [ 478.261452][T16818] Ï: option downdelay: allowed values 0 - 2147483647 [ 478.274447][T16818] Ï (unregistering): Released all slaves [ 478.786855][T16846] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3023'. [ 478.912792][T16851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3025'. [ 478.990766][T16848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3023'. [ 479.016626][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'. [ 479.029660][T16848] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 479.088975][ T12] IPVS: stopping backup sync thread 16807 ... [ 479.165169][T16854] vlan2: entered allmulticast mode [ 479.332329][T16855] syz_tun (unregistering): left promiscuous mode [ 479.411006][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3024'. [ 479.459960][T16857] geneve0: entered promiscuous mode [ 479.602676][T16860] lo speed is unknown, defaulting to 1000 [ 479.610337][T16860] wg1 speed is unknown, defaulting to 1000 [ 479.944884][T16883] lo speed is unknown, defaulting to 1000 [ 479.952646][T16883] wg1 speed is unknown, defaulting to 1000 [ 480.354035][T16891] tipc: Resetting bearer [ 480.384134][T16891] bond8: left promiscuous mode [ 480.388924][T16891] bridge2: left promiscuous mode [ 480.412644][T16891] bond8: left allmulticast mode [ 480.432381][T16891] bridge2: left allmulticast mode [ 480.448878][T16891] vlan0: left promiscuous mode [ 480.467392][T16891] vlan0: left allmulticast mode [ 480.502564][T16891] hsr_slave_1: left allmulticast mode [ 480.522618][T16891] geneve4: left promiscuous mode [ 480.596149][T16892] hsr_slave_0: left promiscuous mode [ 480.642416][T16892] hsr_slave_1: left promiscuous mode [ 480.689046][ T1168] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 53078 - 0 [ 480.698707][ T1168] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 480.739316][ T1168] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 53078 - 0 [ 480.762346][ T1168] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 480.779354][ T1168] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 53078 - 0 [ 480.788695][ T1168] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 481.078513][ T1168] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 53078 - 0 [ 481.102048][ T1168] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 481.444589][T16931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 481.484441][T16928] lo speed is unknown, defaulting to 1000 [ 481.523719][T16928] wg1 speed is unknown, defaulting to 1000 [ 481.649225][T16943] No such timeout policy "syz1" [ 481.968200][T16952] lo speed is unknown, defaulting to 1000 [ 481.975964][T16952] wg1 speed is unknown, defaulting to 1000 [ 482.277334][T16959] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 482.566782][T16959] 8021q: adding VLAN 0 to HW filter on device bond11 [ 482.684820][T16962] 8021q: adding VLAN 0 to HW filter on device bond11 [ 482.723457][T16962] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 482.783621][T16962] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 482.952969][T16963] veth21: entered promiscuous mode [ 482.994093][T16963] bond11: (slave veth21): Enslaving as an active interface with a down link [ 483.437452][T16973] lo speed is unknown, defaulting to 1000 [ 483.456674][T16973] wg1 speed is unknown, defaulting to 1000 [ 483.894261][T16986] lo speed is unknown, defaulting to 1000 [ 483.983036][T16986] wg1 speed is unknown, defaulting to 1000 [ 484.328887][T17004] netlink: 'syz.0.3055': attribute type 1 has an invalid length. [ 484.339456][T17004] netlink: 'syz.0.3055': attribute type 2 has an invalid length. [ 484.488382][T17001] lo speed is unknown, defaulting to 1000 [ 484.496236][T17001] wg1 speed is unknown, defaulting to 1000 [ 484.638667][T17004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.272345][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 485.440902][T17024] lo speed is unknown, defaulting to 1000 [ 485.462346][T17024] wg1 speed is unknown, defaulting to 1000 [ 485.557222][T17036] lo speed is unknown, defaulting to 1000 [ 485.611308][T17038] batadv1: entered promiscuous mode [ 485.724212][T17036] wg1 speed is unknown, defaulting to 1000 [ 485.762560][T17041] __nla_validate_parse: 2 callbacks suppressed [ 485.762576][T17041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3061'. [ 486.256881][T17041] lo speed is unknown, defaulting to 1000 [ 486.323585][T17041] wg1 speed is unknown, defaulting to 1000 [ 486.364964][T17050] lo speed is unknown, defaulting to 1000 [ 486.550488][T17050] wg1 speed is unknown, defaulting to 1000 [ 486.644936][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3066'. [ 486.697073][T17055] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 486.721516][T17055] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 486.762827][T17055] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 487.392793][T17069] lo speed is unknown, defaulting to 1000 [ 487.424922][T17069] wg1 speed is unknown, defaulting to 1000 [ 487.884191][T17084] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.925047][T17084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.969048][T17085] lo speed is unknown, defaulting to 1000 [ 487.977686][T17085] wg1 speed is unknown, defaulting to 1000 [ 488.054474][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'. [ 488.196433][T17093] netlink: 'syz.4.3074': attribute type 21 has an invalid length. [ 488.204573][T17093] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3074'. [ 488.259311][T17093] netlink: 'syz.4.3074': attribute type 5 has an invalid length. [ 488.283943][T17093] netlink: 'syz.4.3074': attribute type 6 has an invalid length. [ 488.312623][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 488.332023][T17093] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3074'. [ 488.526524][T17106] bond0: Device is already in use. [ 488.598863][T17105] bond13: option arp_validate: invalid value (18446744073491447809) [ 488.625714][T17105] bond13 (unregistering): Released all slaves [ 488.644742][T17115] netlink: 'syz.3.3078': attribute type 13 has an invalid length. [ 488.653387][T17111] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 489.137893][T17119] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 489.147649][ T1168] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.157434][ T1168] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.459262][ T1168] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.479113][ T1168] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.561667][T17116] lo speed is unknown, defaulting to 1000 [ 489.584230][T17116] wg1 speed is unknown, defaulting to 1000 [ 489.586332][T17127] tipc: Enabled bearer , priority 0 [ 489.627413][T17134] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3084'. [ 489.649452][T17134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.713143][T17125] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 489.924791][T17124] tipc: Disabling bearer [ 489.999018][T17150] tipc: Enabling of bearer rejected, already enabled [ 490.021003][T17152] netlink: 'syz.3.3087': attribute type 11 has an invalid length. [ 490.034883][T17152] netlink: 'syz.3.3087': attribute type 11 has an invalid length. [ 490.043879][T17152] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3087'. [ 490.133736][T17139] lo speed is unknown, defaulting to 1000 [ 490.146062][T17141] lo speed is unknown, defaulting to 1000 [ 490.147372][T17139] wg1 speed is unknown, defaulting to 1000 [ 490.207348][T17141] wg1 speed is unknown, defaulting to 1000 [ 490.435563][T17146] bridge0: entered promiscuous mode [ 490.453548][T17146] bridge0: entered allmulticast mode [ 490.582159][T17165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3089'. [ 490.584646][T17163] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 490.606295][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 490.613074][T17163] bond0 (unregistering): Released all slaves [ 490.988527][T17179] lo speed is unknown, defaulting to 1000 [ 491.021309][T17179] wg1 speed is unknown, defaulting to 1000 [ 491.122948][T17185] netlink: 'syz.3.3096': attribute type 6 has an invalid length. [ 491.171849][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'. [ 491.271697][T17187] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3097'. [ 491.283643][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.308290][T17189] lo speed is unknown, defaulting to 1000 [ 491.339985][T17189] wg1 speed is unknown, defaulting to 1000 [ 491.471085][T17195] lo speed is unknown, defaulting to 1000 [ 491.479734][T17195] wg1 speed is unknown, defaulting to 1000 [ 492.616117][ T30] audit: type=1800 audit(1763792463.250:20): pid=17209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3100" name="memory.events" dev="tmpfs" ino=3172 res=0 errno=0 [ 492.907096][T17227] netlink: 'syz.1.3108': attribute type 6 has an invalid length. [ 492.940277][T17230] lo speed is unknown, defaulting to 1000 [ 492.992636][T17230] wg1 speed is unknown, defaulting to 1000 [ 493.018644][T17236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3112'. [ 493.183192][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 493.199529][T17240] netlink: 'syz.4.3109': attribute type 12 has an invalid length. [ 493.235870][T17243] siw: device registration error -23 [ 493.435920][T17244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3112'. [ 493.616627][T17237] netlink: 'syz.4.3109': attribute type 4 has an invalid length. [ 493.958802][T17261] IPVS: set_ctl: invalid protocol: 50 172.20.20.23:20003 [ 494.301523][T17276] netlink: 'syz.4.3117': attribute type 12 has an invalid length. [ 494.628352][T17280] wg1 speed is unknown, defaulting to 1000 [ 494.765854][T17287] batadv0: entered promiscuous mode [ 494.923070][T17287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3123'. [ 495.195531][T17287] wg1 speed is unknown, defaulting to 1000 [ 495.383317][T17301] netlink: 'syz.1.3125': attribute type 21 has an invalid length. [ 495.590668][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 495.598974][T17301] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3125'. [ 495.607555][T17308] netlink: 'syz.0.3127': attribute type 6 has an invalid length. [ 495.618801][T17310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3124'. [ 495.628165][T17310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3124'. [ 495.814921][T17294] wg1 speed is unknown, defaulting to 1000 [ 495.996808][T17321] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 496.207714][T17321] __nla_validate_parse: 4 callbacks suppressed [ 496.207733][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3128'. [ 496.541157][T17344] wg1 speed is unknown, defaulting to 1000 [ 497.532729][T17362] wg1 speed is unknown, defaulting to 1000 [ 497.834477][T17372] wg1 speed is unknown, defaulting to 1000 [ 497.965259][T17378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3147'. [ 498.576534][T17369] wg1 speed is unknown, defaulting to 1000 [ 498.864925][T17391] ip6tnl1: entered promiscuous mode [ 498.907468][ T5835] Bluetooth: hci4: link tx timeout [ 498.908555][T17390] batman_adv: batadv0: Adding interface: macsec0 [ 498.912855][ T5835] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 498.929057][T17390] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.995424][T17390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.022079][T17390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.042273][T17390] batman_adv: batadv0: Interface activated: macsec0 [ 499.511189][T17388] veth7: entered promiscuous mode [ 499.716899][T17394] wg1 speed is unknown, defaulting to 1000 [ 499.893551][T17400] tipc: Enabled bearer , priority 0 [ 499.918672][T17400] syzkaller0: entered promiscuous mode [ 499.943147][T17400] syzkaller0: entered allmulticast mode [ 500.314494][T17414] tipc: Resetting bearer [ 500.595978][T17422] wg1 speed is unknown, defaulting to 1000 [ 500.695074][T17399] tipc: Resetting bearer [ 500.716562][T17399] tipc: Disabling bearer [ 500.839689][T17427] wg1 speed is unknown, defaulting to 1000 [ 500.870099][T17429] wg1 speed is unknown, defaulting to 1000 [ 500.953264][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 501.179231][T17436] wg1 speed is unknown, defaulting to 1000 [ 501.366136][T17445] veth0: entered promiscuous mode [ 501.374396][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 501.478466][ T30] audit: type=1800 audit(1763792472.110:21): pid=17439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3162" name="memory.events" dev="tmpfs" ino=3323 res=0 errno=0 [ 501.530380][T17447] veth0: left promiscuous mode [ 501.824771][T17447] wg1 speed is unknown, defaulting to 1000 [ 501.993497][ T11] block nbd1: Possible stuck request ffff888024bc0540: control (read@0,1024B). Runtime 210 seconds [ 502.004652][ T11] block nbd1: Possible stuck request ffff888024bc0700: control (read@1024,1024B). Runtime 210 seconds [ 502.015969][ T11] block nbd1: Possible stuck request ffff888024bc08c0: control (read@2048,1024B). Runtime 210 seconds [ 502.028192][ T11] block nbd1: Possible stuck request ffff888024bc0a80: control (read@3072,1024B). Runtime 210 seconds [ 502.149568][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'. [ 502.245710][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3170'. [ 502.318544][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'. [ 502.430302][T17468] wg1 speed is unknown, defaulting to 1000 [ 503.069783][T17483] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 503.361117][T17493] wg1 speed is unknown, defaulting to 1000 [ 503.591814][T17497] wg1 speed is unknown, defaulting to 1000 [ 503.771584][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3177'. [ 503.910653][T17502] vlan1: entered allmulticast mode [ 504.143978][T17509] wg1 speed is unknown, defaulting to 1000 [ 504.379109][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 504.381264][T17515] wg1 speed is unknown, defaulting to 1000 [ 504.769038][T17525] bridge0: port 2(gretap0) entered blocking state [ 504.796375][T17525] bridge0: port 2(gretap0) entered disabled state [ 504.825151][T17525] gretap0: entered allmulticast mode [ 504.860123][T17525] gretap0: entered promiscuous mode [ 504.887875][T17525] bridge0: port 2(gretap0) entered blocking state [ 504.894505][T17525] bridge0: port 2(gretap0) entered forwarding state [ 505.160347][T17528] wg1 speed is unknown, defaulting to 1000 [ 505.213196][T17536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3187'. [ 505.306550][T17538] wg1 speed is unknown, defaulting to 1000 [ 506.233075][T17564] netlink: 'syz.2.3192': attribute type 1 has an invalid length. [ 506.334657][T17561] wg1 speed is unknown, defaulting to 1000 [ 506.388715][T17564] 8021q: adding VLAN 0 to HW filter on device bond9 [ 506.480883][T17565] bond9: (slave veth21): Enslaving as an active interface with an up link [ 506.712071][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.720117][ C1] lec:lec_tx_timeout: lec0 [ 506.824275][T17562] wg1 speed is unknown, defaulting to 1000 [ 507.187840][T17584] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3197'. [ 507.293387][T17582] wg1 speed is unknown, defaulting to 1000 [ 507.673627][T17598] wg1 speed is unknown, defaulting to 1000 [ 508.518371][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3205'. [ 508.871941][T17630] wg1 speed is unknown, defaulting to 1000 [ 509.425295][T17646] netlink: 'syz.2.3207': attribute type 6 has an invalid length. [ 509.515416][T17649] netlink: 'syz.2.3207': attribute type 6 has an invalid length. [ 509.986195][T17662] netlink: 'syz.1.3210': attribute type 10 has an invalid length. [ 510.044298][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'. [ 510.060396][T17665] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 510.198682][T17667] wg1 speed is unknown, defaulting to 1000 [ 510.521723][T17681] netlink: 'syz.4.3215': attribute type 13 has an invalid length. [ 510.557633][T17681] netlink: 'syz.4.3215': attribute type 17 has an invalid length. [ 510.576479][T17678] wg1 speed is unknown, defaulting to 1000 [ 510.681297][T17688] netlink: 'syz.2.3218': attribute type 6 has an invalid length. [ 510.749625][T17690] netlink: 'syz.2.3218': attribute type 6 has an invalid length. [ 510.907657][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'. [ 510.978974][T17697] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 511.083262][T17696] wg1 speed is unknown, defaulting to 1000 [ 511.104098][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3220'. [ 511.203614][T17704] wg1 speed is unknown, defaulting to 1000 [ 511.206814][T17713] netlink: 'syz.3.3222': attribute type 10 has an invalid length. [ 511.298601][T17716] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 511.547820][T17720] wg1 speed is unknown, defaulting to 1000 [ 511.681838][T17734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.907510][T17734] wg1 speed is unknown, defaulting to 1000 [ 512.051645][T17746] wg1 speed is unknown, defaulting to 1000 [ 512.154224][T17739] wg1 speed is unknown, defaulting to 1000 [ 512.474591][T17756] wg1 speed is unknown, defaulting to 1000 [ 513.487527][T17776] wg1 speed is unknown, defaulting to 1000 [ 513.763891][T17790] netlink: 'syz.4.3234': attribute type 10 has an invalid length. [ 513.824880][T17793] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 514.192684][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 514.306772][T17808] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3239'. [ 514.354048][T17810] netlink: 'syz.1.3238': attribute type 4 has an invalid length. [ 514.386537][T17810] netlink: 'syz.1.3238': attribute type 4 has an invalid length. [ 514.390158][T17811] wg1 speed is unknown, defaulting to 1000 [ 514.938409][T17810] tipc: Resetting bearer [ 514.974650][T17810] veth1_vlan: left allmulticast mode [ 515.047651][T17810] batman_adv: batadv0: Interface deactivated: macsec0 [ 515.113143][T17817] wg1 speed is unknown, defaulting to 1000 [ 515.282417][T17824] wg1 speed is unknown, defaulting to 1000 [ 515.314452][T17828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3242'. [ 515.659606][T17835] wg1 speed is unknown, defaulting to 1000 [ 515.922278][T17841] wg1 speed is unknown, defaulting to 1000 [ 516.346678][T17860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3250'. [ 516.393697][T17859] batadv1: entered promiscuous mode [ 516.501655][T17851] wg1 speed is unknown, defaulting to 1000 [ 516.621207][T17868] netlink: 'syz.2.3252': attribute type 11 has an invalid length. [ 516.650945][T17868] netlink: 'syz.2.3252': attribute type 11 has an invalid length. [ 516.711087][T17868] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3252'. [ 516.768537][T17863] wg1 speed is unknown, defaulting to 1000 [ 516.949816][T17866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.142154][T17878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3254'. [ 517.164295][T17854] wg1 speed is unknown, defaulting to 1000 [ 517.541436][T17884] wg1 speed is unknown, defaulting to 1000 [ 518.035099][ T30] audit: type=1800 audit(1763792488.660:22): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3257" name="memory.events" dev="tmpfs" ino=3428 res=0 errno=0 [ 518.506004][T17897] wg1 speed is unknown, defaulting to 1000 [ 518.595549][T17905] wg1 speed is unknown, defaulting to 1000 [ 519.258519][T17923] wg1 speed is unknown, defaulting to 1000 [ 519.333096][T17925] netlink: 'syz.4.3266': attribute type 6 has an invalid length. [ 519.342221][T17925] netlink: 'syz.4.3266': attribute type 6 has an invalid length. [ 519.582677][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'. [ 519.905193][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 521.014261][T17972] wg1 speed is unknown, defaulting to 1000 [ 521.106165][T17982] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3274'. [ 521.118291][T17982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.348763][T17987] wg1 speed is unknown, defaulting to 1000 [ 521.518618][T17992] netlink: 'syz.3.3277': attribute type 6 has an invalid length. [ 521.527775][T17992] netlink: 'syz.3.3277': attribute type 6 has an invalid length. [ 521.627816][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 522.240690][T18009] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 522.316082][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 522.406012][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 522.590737][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3286'. [ 522.761017][T18026] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3287'. [ 522.790969][T18026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.861125][T18031] wg1 speed is unknown, defaulting to 1000 [ 523.053690][T18036] netlink: 'syz.3.3290': attribute type 6 has an invalid length. [ 523.104286][T18036] netlink: 'syz.3.3290': attribute type 6 has an invalid length. [ 523.157181][T18037] netlink: 'syz.4.3289': attribute type 16 has an invalid length. [ 523.165394][T18037] netlink: 'syz.4.3289': attribute type 17 has an invalid length. [ 523.358394][T18050] IPv6: NLM_F_REPLACE set, but no existing node found! [ 523.366469][T18046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3293'. [ 523.476069][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'. [ 523.546079][ T6216] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 523.564512][ T6216] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 523.596052][ T6216] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 523.620852][ T6216] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 523.667503][T18051] wg1 speed is unknown, defaulting to 1000 [ 523.880781][T18064] wg1 speed is unknown, defaulting to 1000 [ 524.087523][T18066] netlink: 'syz.0.3298': attribute type 16 has an invalid length. [ 524.147739][T18066] netlink: 'syz.0.3298': attribute type 17 has an invalid length. [ 524.206306][T18069] wg1 speed is unknown, defaulting to 1000 [ 524.321361][T18066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.394159][T18080] netlink: 'syz.3.3300': attribute type 5 has an invalid length. [ 524.544093][T18080] geneve3: entered promiscuous mode [ 524.556483][T18080] geneve3: entered allmulticast mode [ 524.748178][T18083] IPVS: Scheduler module ip_vs_sip not found [ 524.881329][ T740] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 524.912275][ T740] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 525.008539][ T740] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 525.034185][ T740] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 525.043060][T18083] IPVS: length: 141 != 8 [ 525.201749][T18097] __nla_validate_parse: 2 callbacks suppressed [ 525.201765][T18097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3304'. [ 525.379477][T18103] netlink: 'syz.0.3305': attribute type 6 has an invalid length. [ 525.392857][T18103] netlink: 'syz.0.3305': attribute type 6 has an invalid length. [ 525.524347][T18106] wg1 speed is unknown, defaulting to 1000 [ 525.919308][T18126] wg1 speed is unknown, defaulting to 1000 [ 526.335272][T18139] wg1 speed is unknown, defaulting to 1000 [ 526.343771][T18140] tipc: Enabled bearer , priority 0 [ 526.431451][T18140] syzkaller0: entered promiscuous mode [ 526.453541][T18140] syzkaller0: entered allmulticast mode [ 526.517700][T18140] tipc: Resetting bearer [ 526.529008][T18137] tipc: Resetting bearer [ 526.567025][T18137] tipc: Disabling bearer [ 527.285066][T18181] netlink: 'syz.1.3318': attribute type 6 has an invalid length. [ 527.324216][T18177] wg1 speed is unknown, defaulting to 1000 [ 527.334603][T18184] netlink: 'syz.2.3317': attribute type 8 has an invalid length. [ 527.341256][T18181] netlink: 'syz.1.3318': attribute type 6 has an invalid length. [ 527.439093][T18179] wg1 speed is unknown, defaulting to 1000 [ 527.495936][T18184] wg1 speed is unknown, defaulting to 1000 [ 528.440075][ T30] audit: type=1800 audit(1763792499.070:23): pid=18202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3321" name="memory.events" dev="tmpfs" ino=3378 res=0 errno=0 [ 528.949544][T18216] syzkaller0: entered promiscuous mode [ 528.956331][T18216] syzkaller0: entered allmulticast mode [ 529.315557][T18226] wg1 speed is unknown, defaulting to 1000 [ 529.417190][T18230] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 529.540486][T18232] wg1 speed is unknown, defaulting to 1000 [ 529.738873][T18241] netlink: 'syz.4.3329': attribute type 6 has an invalid length. [ 529.773476][T18237] wg1 speed is unknown, defaulting to 1000 [ 529.787615][T18241] netlink: 'syz.4.3329': attribute type 6 has an invalid length. [ 529.877032][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 530.363567][T18252] wg1 speed is unknown, defaulting to 1000 [ 530.449635][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3331'. [ 530.648801][T18259] wg1 speed is unknown, defaulting to 1000 [ 530.961640][T18265] wg1 speed is unknown, defaulting to 1000 [ 531.381841][T18278] wg1 speed is unknown, defaulting to 1000 [ 531.388423][T18280] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 531.474891][T18274] wg1 speed is unknown, defaulting to 1000 [ 531.738311][T18282] wg1 speed is unknown, defaulting to 1000 [ 532.018826][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3339'. [ 532.023548][T18286] wg1 speed is unknown, defaulting to 1000 [ 532.061586][T18287] macvtap1: entered promiscuous mode [ 532.067904][T18287] batadv0: entered promiscuous mode [ 532.078762][T18287] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 532.082181][ T11] block nbd1: Possible stuck request ffff888024bc0540: control (read@0,1024B). Runtime 240 seconds [ 532.096415][ T11] block nbd1: Possible stuck request ffff888024bc0700: control (read@1024,1024B). Runtime 240 seconds [ 532.108025][ T11] block nbd1: Possible stuck request ffff888024bc08c0: control (read@2048,1024B). Runtime 240 seconds [ 532.120033][ T11] block nbd1: Possible stuck request ffff888024bc0a80: control (read@3072,1024B). Runtime 240 seconds [ 532.120635][T18287] batadv0: left promiscuous mode [ 532.450954][T18289] wg1 speed is unknown, defaulting to 1000 [ 532.725299][T18300] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3350'. [ 532.755569][T18300] vlan0: entered allmulticast mode [ 532.791190][T18300] erspan0: entered allmulticast mode [ 533.176187][T18311] wg1 speed is unknown, defaulting to 1000 [ 533.215717][T18319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 533.287709][T18312] wg1 speed is unknown, defaulting to 1000 [ 534.225469][T18334] wg1 speed is unknown, defaulting to 1000 [ 534.437473][T18333] netlink: 'syz.2.3346': attribute type 54 has an invalid length. [ 534.503181][T18335] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3347'. [ 534.843168][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3351'. [ 535.044958][T18353] wg1 speed is unknown, defaulting to 1000 [ 535.080115][T18352] wg1 speed is unknown, defaulting to 1000 [ 535.353874][T18196] Set syz1 is full, maxelem 65536 reached [ 536.084107][T18373] wg1 speed is unknown, defaulting to 1000 [ 536.387042][T18379] bond0: Device is already in use. [ 536.571036][T18386] wg1 speed is unknown, defaulting to 1000 [ 536.741861][T18392] macvlan1: entered promiscuous mode [ 536.761687][T18392] macvlan1: left promiscuous mode [ 538.112248][T18400] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 538.132893][T18397] siw: device registration error -23 [ 538.178592][T18396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3363'. [ 538.187684][T18396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3363'. [ 541.676503][T18417] netlink: 'syz.1.3369': attribute type 10 has an invalid length. [ 541.689905][T18417] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 541.870320][T18426] bond0: Device is already in use. [ 541.896363][T18427] tipc: Failed to remove unknown binding: 66,1,1/3955595535:3883550082/3883550084 [ 541.909378][T18427] tipc: Failed to remove unknown binding: 66,1,1/3955595535:3883550082/3883550084 [ 541.929091][T18427] tipc: Failed to remove unknown binding: 66,1,1/3955595535:3883550082/3883550084 [ 542.195280][T18431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.204369][T18431] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.219983][T18431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.381941][ T6214] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 542.391073][ T6214] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 542.411329][ T6214] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 542.437036][T18419] wg1 speed is unknown, defaulting to 1000 [ 542.506424][ T6214] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 542.816958][T18437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3374'. [ 542.933044][T18439] wg1 speed is unknown, defaulting to 1000 [ 543.287299][T18447] wg1 speed is unknown, defaulting to 1000 [ 543.819320][T18459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.197103][T18443] netlink: 'syz.1.3376': attribute type 5 has an invalid length. [ 544.354874][T18464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3379'. [ 544.425947][T18466] netlink: 'syz.4.3380': attribute type 10 has an invalid length. [ 544.434286][T18466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3380'. [ 544.472182][T18466] batadv0: entered promiscuous mode [ 544.477401][T18466] batadv0: entered allmulticast mode [ 544.522701][T18466] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 544.595932][T18471] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 544.620433][T18471] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 544.640795][T18466] x_tables: duplicate underflow at hook 2 [ 544.655603][T18473] tipc: Enabling of bearer rejected, failed to enable media [ 544.676267][T18473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3381'. [ 544.709363][T18473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3381'. [ 544.799148][T18467] netlink: 'syz.4.3380': attribute type 21 has an invalid length. [ 544.802201][T18473] macvlan0: entered allmulticast mode [ 544.824669][T18473] veth1_vlan: entered allmulticast mode [ 544.836292][T18467] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3380'. [ 545.148192][T18487] wg1 speed is unknown, defaulting to 1000 [ 545.245645][T18495] tipc: Enabling of bearer rejected, already enabled [ 545.255014][T18495] syzkaller0: entered promiscuous mode [ 545.260491][T18495] syzkaller0: entered allmulticast mode [ 545.267183][T18495] tipc: Resetting bearer [ 545.650460][T18506] netlink: 'syz.3.3390': attribute type 13 has an invalid length. [ 545.672515][T18506] netlink: 'syz.3.3390': attribute type 17 has an invalid length. [ 545.772178][T18366] Set syz1 is full, maxelem 65536 reached [ 545.787683][T18502] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3388'. [ 545.804938][T18506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.843488][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 546.006248][T18506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.404401][T18511] wg1 speed is unknown, defaulting to 1000 [ 546.593224][T18521] netlink: 'syz.0.3394': attribute type 10 has an invalid length. [ 546.726584][T18525] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 546.868213][T18524] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3395'. [ 546.885773][T18524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.069068][T18531] tipc: Enabling of bearer rejected, already enabled [ 547.109646][T18529] bond0: Device is already in use. [ 547.454334][T18533] netlink: 'syz.1.3398': attribute type 13 has an invalid length. [ 547.508398][T18541] tipc: Can't bind to reserved service type 1 [ 547.515122][T18543] wg1 speed is unknown, defaulting to 1000 [ 547.530861][T18547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3404'. [ 547.546844][T18541] netlink: 'syz.3.3402': attribute type 39 has an invalid length. [ 547.586456][T18549] netlink: 'syz.0.3401': attribute type 13 has an invalid length. [ 547.598338][T18550] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3402'. [ 547.617199][T18550] netlink: 'syz.3.3402': attribute type 5 has an invalid length. [ 548.369993][T18549] tipc: Resetting bearer [ 548.500604][T18561] wg1 speed is unknown, defaulting to 1000 [ 548.619582][T18565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 548.794597][T18575] syzkaller0: entered promiscuous mode [ 548.800274][T18575] syzkaller0: entered allmulticast mode [ 548.827538][T18572] tipc: Enabled bearer , priority 0 [ 548.858408][T18571] tipc: Resetting bearer [ 548.910612][T18571] tipc: Disabling bearer [ 549.288159][T18595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.303339][T17510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.476988][T18593] wg1 speed is unknown, defaulting to 1000 [ 549.632519][T18595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.972527][T18595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.218814][T18602] wg1 speed is unknown, defaulting to 1000 [ 550.313984][T18595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.335310][T18595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.411769][T18615] wg1 speed is unknown, defaulting to 1000 [ 550.414034][T18616] __nla_validate_parse: 3 callbacks suppressed [ 550.414049][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 550.872768][T18631] wg1 speed is unknown, defaulting to 1000 [ 550.922775][T18628] wg1 speed is unknown, defaulting to 1000 [ 551.059116][T18636] netlink: 'syz.1.3421': attribute type 6 has an invalid length. [ 551.105041][T18636] netlink: 'syz.1.3421': attribute type 6 has an invalid length. [ 551.287591][T18639] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3422'. [ 551.347151][T18639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.551907][T18650] netlink: 'syz.4.3425': attribute type 10 has an invalid length. [ 551.661706][T18652] tipc: Enabled bearer , priority 0 [ 551.684200][T18655] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 551.734644][T18654] syzkaller0: entered promiscuous mode [ 551.740133][T18654] syzkaller0: entered allmulticast mode [ 551.790213][T18642] wg1 speed is unknown, defaulting to 1000 [ 551.814527][T18646] tipc: Resetting bearer [ 551.877542][T18646] tipc: Disabling bearer [ 551.927621][T18661] tipc: Enabled bearer , priority 0 [ 551.952470][T18657] syzkaller0: entered promiscuous mode [ 551.962314][T18657] syzkaller0: entered allmulticast mode [ 552.024670][T18663] netlink: 'syz.4.3427': attribute type 12 has an invalid length. [ 552.068079][T18669] netlink: 'syz.4.3427': attribute type 4 has an invalid length. [ 552.093208][T18657] tipc: Resetting bearer [ 552.230769][T18656] tipc: Resetting bearer [ 552.257219][T18656] tipc: Disabling bearer [ 552.285533][T18664] wg1 speed is unknown, defaulting to 1000 [ 552.869161][T18688] netlink: 'syz.2.3433': attribute type 6 has an invalid length. [ 552.882072][T18688] netlink: 'syz.2.3433': attribute type 6 has an invalid length. [ 553.115473][T18693] batadv0: left promiscuous mode [ 553.135629][T18693] batadv0: left allmulticast mode [ 553.149526][T18693] bond3: left promiscuous mode [ 553.155036][T18693] bond3: left allmulticast mode [ 553.162485][T18693] bond4: left allmulticast mode [ 553.176803][T18693] bond5: left promiscuous mode [ 553.182365][T18693] wireguard0: left promiscuous mode [ 553.189379][T18693] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 553.199103][T18693] vlan2: left allmulticast mode [ 553.204334][T18693] veth1: left allmulticast mode [ 553.209474][T18693] bridge4: left allmulticast mode [ 553.217539][T18693] bridge5: left promiscuous mode [ 553.222849][T18693] bridge5: left allmulticast mode [ 553.229575][T18693] geneve2: left promiscuous mode [ 553.278784][T18699] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3436'. [ 553.294952][T18699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.317303][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 553.344647][T18694] wg1 speed is unknown, defaulting to 1000 [ 553.354001][T18693] hsr_slave_0: left promiscuous mode [ 553.474557][T18698] wg1 speed is unknown, defaulting to 1000 [ 553.728322][T18714] wg1 speed is unknown, defaulting to 1000 [ 553.788459][T18718] tipc: Enabled bearer , priority 0 [ 553.835422][T18718] syzkaller0: entered promiscuous mode [ 553.850173][T18718] syzkaller0: entered allmulticast mode [ 554.036738][T18718] tipc: Resetting bearer [ 554.070450][T18717] tipc: Resetting bearer [ 554.108188][T18717] tipc: Disabling bearer [ 554.354205][T18735] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 554.879565][T18738] wg1 speed is unknown, defaulting to 1000 [ 555.169306][T18761] netlink: 'syz.2.3447': attribute type 10 has an invalid length. [ 555.226183][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 555.238418][T18761] netlink: 'syz.2.3447': attribute type 1 has an invalid length. [ 555.269919][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 555.334272][T18754] wg1 speed is unknown, defaulting to 1000 [ 555.569956][T18771] wg1 speed is unknown, defaulting to 1000 [ 556.217664][T18788] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3450'. [ 556.240652][T18788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.256171][T18789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3452'. [ 556.417704][T18792] wg1 speed is unknown, defaulting to 1000 [ 557.175780][T18809] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3457'. [ 557.218712][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.230543][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.416760][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'. [ 557.952473][T18831] wg1 speed is unknown, defaulting to 1000 [ 558.260140][T18845] syzkaller0: entered promiscuous mode [ 558.269001][T18845] syzkaller0: entered allmulticast mode [ 558.410167][T18838] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3462'. [ 558.543172][T18838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.746471][T18851] netlink: 'syz.2.3464': attribute type 5 has an invalid length. [ 558.814158][T18858] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 559.021855][T18866] tipc: Enabled bearer , priority 0 [ 559.033111][T18867] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3468'. [ 559.057576][T18867] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 559.072802][T18866] tipc: Resetting bearer [ 559.078414][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3471'. [ 559.098157][T18865] tipc: Disabling bearer [ 559.156227][T18869] wg1 speed is unknown, defaulting to 1000 [ 559.225718][T18871] veth9: entered promiscuous mode [ 559.260840][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.273858][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.311122][T18881] x_tables: duplicate underflow at hook 1 [ 559.556036][T18886] wg1 speed is unknown, defaulting to 1000 [ 560.057814][T18901] nbd: nbd0 already in use [ 560.196727][T18896] wg1 speed is unknown, defaulting to 1000 [ 560.628807][T18913] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3480'. [ 560.747315][T18913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.076559][T18920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3482'. [ 561.235852][T18918] wg1 speed is unknown, defaulting to 1000 [ 561.245381][T18925] vlan1: entered allmulticast mode [ 561.458401][T18929] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3484'. [ 561.965914][T18940] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 561.993559][T18940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3487'. [ 562.021355][T18940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3487'. [ 562.138727][T18948] wg1 speed is unknown, defaulting to 1000 [ 562.155204][ T11] block nbd1: Possible stuck request ffff888024bc0540: control (read@0,1024B). Runtime 270 seconds [ 562.171914][ T11] block nbd1: Possible stuck request ffff888024bc0700: control (read@1024,1024B). Runtime 270 seconds [ 562.185595][ T11] block nbd1: Possible stuck request ffff888024bc08c0: control (read@2048,1024B). Runtime 270 seconds [ 562.197639][ T11] block nbd1: Possible stuck request ffff888024bc0a80: control (read@3072,1024B). Runtime 270 seconds [ 562.213283][T18950] dvmrp0: entered allmulticast mode [ 562.491067][T18962] wg1 speed is unknown, defaulting to 1000 [ 562.595943][T18967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3495'. [ 562.800465][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 562.966639][T18974] netlink: 'syz.2.3496': attribute type 6 has an invalid length. [ 562.982436][T18972] wg1 speed is unknown, defaulting to 1000 [ 562.993420][T18974] netlink: 'syz.2.3496': attribute type 6 has an invalid length. [ 563.356301][T18980] wg1 speed is unknown, defaulting to 1000 [ 564.006890][T18989] macvlan2: entered promiscuous mode [ 564.034664][T18989] vlan0: entered promiscuous mode [ 564.142965][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 564.233881][T19002] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 564.342620][T18989] vlan0 (unregistering): left promiscuous mode [ 564.581188][T18989] tipc: Disabling bearer [ 564.785957][T19016] netlink: 'syz.3.3506': attribute type 1 has an invalid length. [ 564.879328][T19016] 8021q: adding VLAN 0 to HW filter on device bond13 [ 565.017021][T19026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3508'. [ 565.245797][T19037] netlink: 'syz.1.3510': attribute type 6 has an invalid length. [ 565.279720][T19020] vlan2: entered allmulticast mode [ 565.296727][T19020] bond13: (slave vlan2): Opening slave failed [ 565.301563][T19040] netlink: 'syz.1.3510': attribute type 6 has an invalid length. [ 565.544901][T19045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3513'. [ 565.642721][T19051] ¾x9ÿ: renamed from bridge_slave_0 [ 565.761037][T19055] smc: net device geneve0 applied user defined pnetid SYZ0 [ 566.039778][T19059] wg1 speed is unknown, defaulting to 1000 [ 566.168300][T19067] wg1: entered promiscuous mode [ 566.176145][T19067] wg1: entered allmulticast mode [ 566.239829][T19072] syzkaller0: left promiscuous mode [ 566.273196][T19072] veth7: left promiscuous mode [ 566.342569][T19072] veth9: left promiscuous mode [ 566.370827][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'. [ 566.693854][T19077] wg1 speed is unknown, defaulting to 1000 [ 567.046220][T19079] nbd2: detected capacity change from 0 to 63 [ 567.059698][T19081] block nbd2: NBD_DISCONNECT [ 567.084534][T19081] block nbd2: Disconnected due to user request. [ 567.103202][T19081] block nbd2: shutting down sockets [ 567.285055][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.315847][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.403365][T19107] : renamed from bond_slave_0 [ 567.419360][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 567.464895][T19087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3520'. [ 567.509743][T19087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3520'. [ 567.589910][T19111] netlink: 'syz.2.3523': attribute type 6 has an invalid length. [ 567.620129][T19111] netlink: 'syz.2.3523': attribute type 6 has an invalid length. [ 567.812051][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.820081][ C1] lec:lec_tx_timeout: lec0 [ 567.959236][T19124] netlink: 'syz.3.3524': attribute type 10 has an invalid length. [ 567.978385][T19116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3525'. [ 568.003662][T19126] bond1: option mode: unable to set because the bond device has slaves [ 568.040678][T19124] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 568.055644][T19126] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 568.344813][T19139] netlink: 'syz.0.3528': attribute type 12 has an invalid length. [ 568.397455][T19138] wg1 speed is unknown, defaulting to 1000 [ 568.400639][T19139] netlink: 'syz.0.3528': attribute type 4 has an invalid length. [ 568.520299][T19134] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3529'. [ 568.713699][T19134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.291257][T19149] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 569.411466][T19149] 8021q: adding VLAN 0 to HW filter on device bond10 [ 569.494398][T19153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.651210][T19155] 8021q: adding VLAN 0 to HW filter on device bond10 [ 569.660063][T19155] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 569.677279][T19155] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 569.880389][T19160] bond0: (slave veth11): Enslaving as an active interface with an up link [ 569.947542][T19149] veth23: entered promiscuous mode [ 569.957659][T19149] bond10: (slave veth23): Enslaving as an active interface with a down link [ 569.989997][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.010659][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.049060][T19168] sctp: [Deprecated]: syz.1.3537 (pid 19168) Use of int in maxseg socket option. [ 570.049060][T19168] Use struct sctp_assoc_value instead [ 570.165680][T19146] wg1 speed is unknown, defaulting to 1000 [ 570.190238][T19158] wg1 speed is unknown, defaulting to 1000 [ 570.431489][T19184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3539'. [ 570.656290][T19187] wg1 speed is unknown, defaulting to 1000 [ 570.681278][ T30] audit: type=1800 audit(1763792541.310:24): pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3538" name="memory.events" dev="tmpfs" ino=3507 res=0 errno=0 [ 571.558942][T19205] wg1 speed is unknown, defaulting to 1000 [ 571.782921][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 571.854852][T19216] validate_nla: 1 callbacks suppressed [ 571.854869][T19216] netlink: 'syz.1.3548': attribute type 1 has an invalid length. [ 571.936619][T19218] bond0: Master is either lo or non-ether device [ 572.066092][T19216] 8021q: adding VLAN 0 to HW filter on device bond12 [ 572.100320][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3550'. [ 572.137979][T19220] bond12: (slave veth25): Enslaving as an active interface with an up link [ 572.356382][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3551'. [ 572.466651][T19231] wg1 speed is unknown, defaulting to 1000 [ 572.561134][T19245] bond14 (unregistering): Released all slaves [ 572.674344][ T30] audit: type=1800 audit(1763792543.300:25): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3554" name="memory.events" dev="tmpfs" ino=3704 res=0 errno=0 [ 573.014920][T19254] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.3555'. [ 573.135221][T19253] wg1 speed is unknown, defaulting to 1000 [ 573.175481][T19260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3555'. [ 573.585246][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3558'. [ 573.704566][T19267] wg1 speed is unknown, defaulting to 1000 [ 574.239514][T19286] wg1 speed is unknown, defaulting to 1000 [ 574.385298][T19275] delete_channel: no stack [ 574.525314][T19295] netlink: 'syz.4.3563': attribute type 1 has an invalid length. [ 574.590682][T19298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3564'. [ 574.612524][T19293] wg1 speed is unknown, defaulting to 1000 [ 574.660030][T19295] 8021q: adding VLAN 0 to HW filter on device bond14 [ 574.757524][T19300] bond14: (slave veth33): Enslaving as an active interface with an up link [ 574.820180][T19298] veth13: entered promiscuous mode [ 575.232274][ T6221] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 575.993079][T19329] bond13 (unregistering): Released all slaves [ 576.002869][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'. [ 576.248911][T19342] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3570'. [ 576.281301][T19342] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3570'. [ 576.342351][T19342] netlink: 'syz.1.3570': attribute type 5 has an invalid length. [ 576.382752][T19342] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3570'. [ 576.411754][T19346] wg1 speed is unknown, defaulting to 1000 [ 576.639123][T19351] xt_CT: No such helper "snmp_trap" [ 577.119996][T19367] wg1 speed is unknown, defaulting to 1000 [ 577.173263][T19376] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3575'. [ 577.214745][T19376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.331802][T19373] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 577.378721][T19373] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 577.416993][T19373] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 577.981874][T19391] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3578'. [ 577.999584][T19391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.188218][T19395] syzkaller0: entered promiscuous mode [ 578.212991][T19395] syzkaller0: entered allmulticast mode [ 578.301639][T19403] wg1 speed is unknown, defaulting to 1000 [ 578.337051][T19404] nbd: nbd0 already in use [ 578.348359][T19404] block nbd0: NBD_DISCONNECT [ 578.362153][T19404] block nbd0: Send disconnect failed -32 [ 578.367803][T19404] block nbd0: shutting down sockets [ 578.439748][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 578.578827][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 578.749292][T19411] wg1 speed is unknown, defaulting to 1000 [ 578.767471][T19422] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 579.470492][T19444] netlink: 'syz.2.3588': attribute type 13 has an invalid length. [ 579.542385][T19434] wg1 speed is unknown, defaulting to 1000 [ 579.659878][T19444] bridge0: port 2(gretap0) entered disabled state [ 580.183317][T19444] batman_adv: batadv0: Interface deactivated: dummy0 [ 580.199242][T19444] veth1_macvtap: left allmulticast mode [ 580.285802][T19444] batman_adv: batadv0: Interface deactivated: macsec1 [ 580.312955][T17510] Bluetooth: hci4: command 0x0405 tx timeout [ 580.409956][T19457] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3589'. [ 580.419902][T19457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.433469][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 580.448543][ T5827] wg1 speed is unknown, defaulting to 1000 [ 580.462425][ T5827] syz0: Port: 1 Link DOWN [ 580.485141][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3591'. [ 580.620549][T19464] 8021q: adding VLAN 0 to HW filter on device bond11 [ 580.632805][T19467] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3592'. [ 580.656948][T19464] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 580.669362][T19467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.915343][T19474] wg1 speed is unknown, defaulting to 1000 [ 581.260288][T19491] wg1 speed is unknown, defaulting to 1000 [ 582.399084][T17510] Bluetooth: hci4: command 0x0405 tx timeout [ 583.032508][T19541] wg1 speed is unknown, defaulting to 1000 [ 583.262654][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3605'. [ 583.351735][T19548] bond0: Master is either lo or non-ether device [ 583.453349][T19552] wg1 speed is unknown, defaulting to 1000 [ 583.467712][T19550] wg1 speed is unknown, defaulting to 1000 [ 584.013954][T19569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3612'. [ 584.029488][T19568] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3611'. [ 584.052690][T19569] team0: No ports can be present during mode change [ 584.078524][T19569] Set syz1 is full, maxelem 65536 reached [ 584.580940][T19571] wg1 speed is unknown, defaulting to 1000 [ 584.586137][T19583] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3615'. [ 584.609760][T19583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.911444][T19604] netlink: 'syz.4.3620': attribute type 2 has an invalid length. [ 584.962457][T19604] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3620'. [ 585.202742][T19599] nbd3: detected capacity change from 0 to 63 [ 585.207341][T19605] bond14: entered promiscuous mode [ 585.230941][T19601] block nbd3: NBD_DISCONNECT [ 585.281309][T19605] bond14: entered allmulticast mode [ 585.306186][T19605] 8021q: adding VLAN 0 to HW filter on device bond14 [ 585.329946][T19601] block nbd3: Disconnected due to user request. [ 585.440747][T19613] wg1 speed is unknown, defaulting to 1000 [ 585.560583][T19601] block nbd3: shutting down sockets [ 585.747525][T19624] wg1 speed is unknown, defaulting to 1000 [ 585.878646][T19632] svc: failed to register nfsdv3 RPC service (errno 111). [ 585.906921][T19632] svc: failed to register nfsaclv3 RPC service (errno 111). [ 585.929791][T19637] wg1 speed is unknown, defaulting to 1000 [ 586.138428][T19641] wg1 speed is unknown, defaulting to 1000 [ 586.635532][T19647] wg1 speed is unknown, defaulting to 1000 [ 586.915147][T19669] netlink: 'syz.1.3630': attribute type 4 has an invalid length. [ 586.984891][T19665] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3629'. [ 587.022231][T19665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.160919][T19669] ip6_vti0: Caught tx_queue_len zero misconfig [ 587.877936][T19696] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 587.939493][T19692] wg1 speed is unknown, defaulting to 1000 [ 588.034575][T19702] dummy0: entered allmulticast mode [ 588.075035][T17510] Bluetooth: hci4: command 0x0405 tx timeout [ 588.784437][T19722] netlink: 'syz.2.3638': attribute type 12 has an invalid length. [ 588.794571][T19722] netlink: 'syz.2.3638': attribute type 4 has an invalid length. [ 588.861165][T19721] wg1 speed is unknown, defaulting to 1000 [ 589.190617][T19731] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 589.272742][T19731] 8021q: adding VLAN 0 to HW filter on device bond13 [ 589.390780][T19734] bond13: (slave veth27): Enslaving as an active interface with an up link [ 590.152228][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 590.766269][T19737] netlink: 'syz.2.3646': attribute type 1 has an invalid length. [ 590.786908][T19739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3647'. [ 590.832677][T19745] netlink: 'syz.4.3644': attribute type 4 has an invalid length. [ 590.987027][T19752] wg1 speed is unknown, defaulting to 1000 [ 591.291739][T19767] wg1 speed is unknown, defaulting to 1000 [ 591.685861][T19775] netlink: 'syz.1.3655': attribute type 1 has an invalid length. [ 591.726074][T19775] 8021q: adding VLAN 0 to HW filter on device bond14 [ 591.790574][T19778] bond14: (slave veth29): Enslaving as an active interface with an up link [ 591.809470][T19777] wg1 speed is unknown, defaulting to 1000 [ 592.124076][T19785] pim6reg1: entered promiscuous mode [ 592.133879][T19785] pim6reg1: entered allmulticast mode [ 592.232414][ T11] block nbd1: Possible stuck request ffff888024bc0540: control (read@0,1024B). Runtime 300 seconds [ 592.243390][ T11] block nbd1: Possible stuck request ffff888024bc0700: control (read@1024,1024B). Runtime 300 seconds [ 592.255195][ T11] block nbd1: Possible stuck request ffff888024bc08c0: control (read@2048,1024B). Runtime 300 seconds [ 592.266604][ T11] block nbd1: Possible stuck request ffff888024bc0a80: control (read@3072,1024B). Runtime 300 seconds [ 592.288860][T19784] pim6reg1: entered promiscuous mode [ 592.301835][T19795] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 592.307270][T19784] pim6reg1: entered allmulticast mode [ 592.466427][T19779] delete_channel: no stack [ 592.626581][T19802] wg1 speed is unknown, defaulting to 1000 [ 592.686130][T19809] netlink: 'syz.3.3665': attribute type 4 has an invalid length. [ 592.741154][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3666'. [ 592.853615][T19816] netlink: 'syz.2.3667': attribute type 1 has an invalid length. [ 592.900482][T19816] 8021q: adding VLAN 0 to HW filter on device bond12 [ 592.941434][T19816] bond12: (slave veth25): Enslaving as an active interface with an up link [ 593.554969][T19831] bond0: Master is either lo or non-ether device [ 593.791444][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3673'. [ 593.792894][T19836] wg1 speed is unknown, defaulting to 1000 [ 593.956449][T19841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3672'. [ 594.135172][T19854] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3676'. [ 594.189334][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3676'. [ 594.198873][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3676'. [ 594.213630][T19851] netlink: 'syz.0.3676': attribute type 4 has an invalid length. [ 594.843417][T19864] netlink: 'syz.0.3680': attribute type 11 has an invalid length. [ 594.851512][T19864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3680'. [ 596.276202][T19849] wg1 speed is unknown, defaulting to 1000 [ 596.346454][T19872] netlink: 'syz.3.3681': attribute type 4 has an invalid length. [ 596.367416][T19870] IPVS: Scheduler module ip_vs_sip not found [ 596.464123][T19873] IPVS: length: 141 != 8 [ 596.629770][T19885] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 596.640406][T19879] wg1 speed is unknown, defaulting to 1000 [ 596.723719][T19888] tipc: Enabling of bearer rejected, already enabled [ 596.769228][T19891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'. [ 596.926074][T19890] wg1 speed is unknown, defaulting to 1000 [ 597.106980][T19891] vlan1: entered allmulticast mode [ 597.113079][T19891] bridge12: port 1(vlan1) entered blocking state [ 597.134721][T19891] bridge12: port 1(vlan1) entered disabled state [ 597.159359][T19891] vlan1: entered promiscuous mode [ 597.370679][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 597.423677][T19903] wg1 speed is unknown, defaulting to 1000 [ 597.424939][T19909] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 597.458942][T19911] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 598.860287][T19939] tipc: Enabled bearer , priority 0 [ 598.890180][T19939] tipc: Resetting bearer [ 598.939995][T19938] tipc: Disabling bearer [ 598.980349][T19942] tipc: Enabled bearer , priority 0 [ 598.987867][T19941] syzkaller0: entered promiscuous mode [ 598.993913][T19941] syzkaller0: entered allmulticast mode [ 599.044469][T19941] tipc: Resetting bearer [ 599.060367][T19940] tipc: Resetting bearer [ 599.085249][T19940] tipc: Disabling bearer [ 599.105367][T19950] netlink: 'syz.2.3702': attribute type 4 has an invalid length. [ 599.114566][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.148691][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.160890][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.163727][T19953] netlink: 'syz.4.3704': attribute type 15 has an invalid length. [ 599.184264][T19947] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 599.208473][T19949] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3703'. [ 599.220993][T19954] xt_TCPMSS: Only works on TCP SYN packets [ 599.229231][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.238882][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.251198][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.259324][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.267390][T19947] wg1 speed is unknown, defaulting to 1000 [ 599.386426][T19961] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3705'. [ 599.417237][T19961] 0ªX¹¦À: renamed from caif0 [ 599.425876][T19961] 0ªX¹¦À: entered allmulticast mode [ 599.431319][T19961] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 599.453170][T19958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3705'. [ 599.464822][T19958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3705'. [ 599.791281][T19968] wg1 speed is unknown, defaulting to 1000 [ 599.804314][T19968] wg1 speed is unknown, defaulting to 1000 [ 600.182425][T19980] wg1: entered promiscuous mode [ 600.187323][T19980] wg1: entered allmulticast mode [ 600.665406][T19994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3713'. [ 601.191326][T20000] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3715'. [ 601.227166][T20000] netlink: 'syz.4.3715': attribute type 7 has an invalid length. [ 601.244357][T20002] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 601.261714][T20000] netlink: 'syz.4.3715': attribute type 8 has an invalid length. [ 601.317714][T20004] tipc: Enabled bearer , priority 0 [ 601.332556][T20004] syzkaller0: entered promiscuous mode [ 601.338171][T20004] syzkaller0: entered allmulticast mode [ 601.485741][T20009] SET target dimension over the limit! [ 601.512900][T18168] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.525532][T20004] tipc: Resetting bearer [ 601.542458][T20003] tipc: Resetting bearer [ 601.583431][T20003] tipc: Disabling bearer [ 601.652195][T18168] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.670734][T18168] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.693091][ T6214] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.718061][T20014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3719'. [ 601.804175][T20014] veth27: entered promiscuous mode [ 601.839981][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.855733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.733174][T20028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'. [ 602.771379][T20028] : entered promiscuous mode [ 602.809524][T20032] netlink: 'syz.0.3722': attribute type 1 has an invalid length. [ 602.821882][T20031] netlink: 'syz.4.3727': attribute type 1 has an invalid length. [ 602.858481][T20032] bond13: entered promiscuous mode [ 602.868282][T20032] 8021q: adding VLAN 0 to HW filter on device bond13 [ 602.934456][T20031] 8021q: adding VLAN 0 to HW filter on device bond15 [ 602.951840][T20033] netlink: 'syz.3.3724': attribute type 10 has an invalid length. [ 602.964355][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 603.026118][T20028] 8021q: adding VLAN 0 to HW filter on device bond13 [ 603.057199][T20028] bond13: (slave gre2): The slave device specified does not support setting the MAC address [ 603.067823][T20028] bond13: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 603.067918][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'. [ 603.087739][T20028] bond13: (slave gre2): Opening slave failed [ 603.128080][T20041] bond15: (slave veth35): Enslaving as an active interface with a down link [ 603.149622][T20044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.272751][ T5835] Bluetooth: hci0: command tx timeout [ 603.479761][T20062] netlink: 'syz.3.3731': attribute type 1 has an invalid length. [ 603.585366][T20067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.592662][T20067] IPv6: NLM_F_CREATE should be set when creating new route [ 603.599876][T20067] IPv6: NLM_F_CREATE should be set when creating new route [ 603.613494][T20067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.622529][T20062] bond15: entered promiscuous mode [ 603.628083][T20062] 8021q: adding VLAN 0 to HW filter on device bond15 [ 603.657982][T20065] 8021q: adding VLAN 0 to HW filter on device bond15 [ 603.666527][T20065] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address [ 603.688874][T20065] bond15: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 603.728941][T20065] bond15: (slave wireguard0): making interface the new active one [ 603.742495][T20065] wireguard0: entered promiscuous mode [ 603.763988][T20065] bond15: (slave wireguard0): Enslaving as an active interface with an up link [ 603.800789][T20067] bond15: (slave wireguard1): The slave device specified does not support setting the MAC address [ 603.940727][T20067] bond15: (slave wireguard1): Enslaving as a backup interface with an up link [ 603.951795][T20071] tipc: Enabling of bearer rejected, already enabled [ 603.961196][T20072] syzkaller0: entered promiscuous mode [ 603.988592][T20072] tipc: Resetting bearer [ 604.094290][T20082] bond0: Device is already in use. [ 604.174162][T20085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3736'. [ 604.237173][T20083] wg1 speed is unknown, defaulting to 1000 [ 604.299134][T20085] veth27: entered promiscuous mode [ 604.357624][T20083] wg1 speed is unknown, defaulting to 1000 [ 604.415618][T20094] netlink: 'syz.2.3739': attribute type 1 has an invalid length. [ 604.526798][T20094] 8021q: adding VLAN 0 to HW filter on device bond13 [ 604.644914][T20104] netlink: 'syz.4.3740': attribute type 3 has an invalid length. [ 604.727664][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'. [ 604.750061][T20098] bond13: (slave veth27): Enslaving as an active interface with a down link [ 604.903521][T20096] wg1: left promiscuous mode [ 604.908136][T20096] wg1: left allmulticast mode [ 604.926247][T20096] veth15: left promiscuous mode [ 604.932623][T20096] geneve3: left promiscuous mode [ 604.937736][T20096] geneve3: left allmulticast mode [ 604.944691][T20096] bridge12: left promiscuous mode [ 604.950207][T20096] bridge12: left allmulticast mode [ 604.962730][T20096] veth21: left promiscuous mode [ 604.968456][T20096] ip6tnl1: left promiscuous mode [ 604.988197][T20108] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 605.052305][ T5937] wg1 speed is unknown, defaulting to 1000 [ 605.058146][ T5937] syz: Port: 1 Link DOWN [ 605.752287][T20119] nbd0: detected capacity change from 0 to 63 [ 605.779934][T20120] block nbd0: NBD_DISCONNECT [ 605.851268][T20120] block nbd0: Disconnected due to user request. [ 605.872442][T20120] block nbd0: shutting down sockets [ 605.909129][T20119] bond14: entered promiscuous mode [ 605.946690][T20119] bond14: entered allmulticast mode [ 605.976168][T20119] 8021q: adding VLAN 0 to HW filter on device bond14 [ 606.012541][T20130] bond0: Device is already in use. [ 606.381379][T20143] netlink: 'syz.2.3752': attribute type 1 has an invalid length. [ 606.382072][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3751'. [ 606.623520][T20156] pim6reg1: entered promiscuous mode [ 606.628901][T20156] pim6reg1: entered allmulticast mode [ 606.647971][T20146] nbd: nbd1 already in use [ 606.653590][T20146] block nbd1: NBD_DISCONNECT [ 606.659300][T20146] block nbd1: Send disconnect failed -32 [ 606.665353][T20146] block nbd1: shutting down sockets [ 606.751813][ C1] blk_print_req_error: 138 callbacks suppressed [ 606.751830][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.767299][ C1] buffer_io_error: 138 callbacks suppressed [ 606.767315][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 606.781097][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.790211][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 606.798087][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.807202][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 606.815067][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.824190][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 606.835103][T10754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.850234][T10754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 606.862510][T10754] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.871914][T10754] Buffer I/O error on dev nbd1, logical block 1, async page read [ 606.881542][T10754] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.890849][T10754] Buffer I/O error on dev nbd1, logical block 2, async page read [ 606.899150][T10754] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.911834][T10754] Buffer I/O error on dev nbd1, logical block 3, async page read [ 606.949737][T10754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.959497][T10754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 606.967859][T10754] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.976992][T10754] Buffer I/O error on dev nbd1, logical block 1, async page read [ 606.988567][T10754] ldm_validate_partition_table(): Disk read failed. [ 606.997306][T10754] Dev nbd1: unable to read RDB block 0 [ 607.005139][T10754] nbd1: unable to read partition table [ 607.018127][T10754] ldm_validate_partition_table(): Disk read failed. [ 607.034178][T10754] Dev nbd1: unable to read RDB block 0 [ 607.041647][T10754] nbd1: unable to read partition table [ 607.123703][T10754] udevd[10754]: failed to send result of seq 20629 to main daemon: Connection refused [ 607.296366][T20157] wg1 speed is unknown, defaulting to 1000 [ 607.332312][T20157] wg1 speed is unknown, defaulting to 1000 [ 607.564128][T20173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3759'. [ 607.578798][T20154] delete_channel: no stack [ 607.778536][T20176] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 607.795933][T20176] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 607.806716][T20176] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 607.870113][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'. [ 607.897456][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'. [ 608.289924][T20190] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 608.381268][T20186] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 608.409399][T20191] wg1 speed is unknown, defaulting to 1000 [ 608.418693][T20186] eql: remember to turn off Van-Jacobson compression on your slave devices [ 608.558903][T20201] netlink: 'syz.1.3769': attribute type 1 has an invalid length. [ 608.577737][T20186] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 608.604627][T20191] wg1 speed is unknown, defaulting to 1000 [ 608.792385][T20201] 8021q: adding VLAN 0 to HW filter on device bond15 [ 608.941553][T20210] wg1 speed is unknown, defaulting to 1000 [ 608.987498][T20213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3771'. [ 609.148025][T20210] wg1 speed is unknown, defaulting to 1000 [ 609.322329][T20218] wg1 speed is unknown, defaulting to 1000 [ 609.358745][T20218] wg1 speed is unknown, defaulting to 1000 [ 609.918215][ T30] audit: type=1800 audit(1763792580.550:26): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3773" name="memory.events" dev="tmpfs" ino=3835 res=0 errno=0 [ 610.559962][T20235] wg1 speed is unknown, defaulting to 1000 [ 610.576096][T20235] wg1 speed is unknown, defaulting to 1000 [ 610.646995][T20242] netlink: 'syz.1.3778': attribute type 13 has an invalid length. [ 610.655355][T20242] netlink: 'syz.1.3778': attribute type 17 has an invalid length. [ 610.663665][T20243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3777'. [ 610.780770][T20218] netlink: 'syz.4.3772': attribute type 6 has an invalid length. [ 610.864741][T20242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.270167][T20242] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.303258][T20242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.532342][T20250] wg1 speed is unknown, defaulting to 1000 [ 611.613158][T20250] wg1 speed is unknown, defaulting to 1000 [ 612.116881][T20276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3785'. [ 612.329332][T20278] svc: failed to register nfsdv3 RPC service (errno 111). [ 612.340986][T20278] svc: failed to register nfsaclv3 RPC service (errno 111). [ 613.130713][T20290] wg1 speed is unknown, defaulting to 1000 [ 613.160657][T20290] wg1 speed is unknown, defaulting to 1000 [ 613.262904][T20296] wg1 speed is unknown, defaulting to 1000 [ 613.319506][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 613.556468][T20304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3790'. [ 613.738653][T20296] wg1 speed is unknown, defaulting to 1000 [ 613.982147][T20310] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3791'. [ 614.291029][T20326] wg1 speed is unknown, defaulting to 1000 [ 614.328844][T20326] wg1 speed is unknown, defaulting to 1000 [ 614.332367][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 614.383204][T20330] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3804'. [ 614.825817][T20341] netlink: 'syz.1.3796': attribute type 12 has an invalid length. [ 615.135456][T20344] wg1 speed is unknown, defaulting to 1000 [ 615.187890][T20344] wg1 speed is unknown, defaulting to 1000 [ 615.298873][T20353] netlink: 'syz.0.3798': attribute type 13 has an invalid length. [ 615.310615][T20353] netlink: 'syz.0.3798': attribute type 17 has an invalid length. [ 615.456189][T20353] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.501709][T20353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.950071][T20354] wg1 speed is unknown, defaulting to 1000 [ 615.965302][T20353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.018153][T20354] wg1 speed is unknown, defaulting to 1000 [ 616.029697][T20353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.111290][ T30] audit: type=1800 audit(1763792586.740:27): pid=20360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3800" name="memory.events" dev="tmpfs" ino=3863 res=0 errno=0 [ 616.431034][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3805'. [ 616.449472][T20366] wg1 speed is unknown, defaulting to 1000 [ 616.453767][T20372] xfrm0: entered promiscuous mode [ 616.460741][T20372] xfrm0: entered allmulticast mode [ 616.469206][T20374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3803'. [ 616.529585][T20366] wg1 speed is unknown, defaulting to 1000 [ 616.633648][T20376] wg1 speed is unknown, defaulting to 1000 [ 616.673484][T20376] wg1 speed is unknown, defaulting to 1000 [ 616.681722][T20383] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3807'. [ 616.944198][T20386] tipc: Enabling of bearer rejected, already enabled [ 617.747924][ T30] audit: type=1800 audit(1763792588.380:28): pid=20397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3811" name="cgroup.controllers" dev="tmpfs" ino=3874 res=0 errno=0 [ 617.789355][T20404] wg1 speed is unknown, defaulting to 1000 [ 617.872998][T20404] wg1 speed is unknown, defaulting to 1000 [ 618.222599][T20412] netlink: 'syz.3.3812': attribute type 1 has an invalid length. [ 618.880757][ T30] audit: type=1800 audit(1763792589.510:29): pid=20417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3815" name="memory.events" dev="tmpfs" ino=3824 res=0 errno=0 [ 618.957763][T20430] wg1: left promiscuous mode [ 618.962824][T20430] wg1: left allmulticast mode [ 618.975769][T20430] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 619.024677][T20430] bridge1: left allmulticast mode [ 619.042342][T20430] team2: left promiscuous mode [ 619.068565][T20430] team2: left allmulticast mode [ 619.093392][T20430] vlan4: left allmulticast mode [ 619.098351][T20430] veth1: left allmulticast mode [ 619.122980][T20430] bond6: left promiscuous mode [ 619.127766][T20430] bond6: left allmulticast mode [ 619.153214][T20430] bridge5: left promiscuous mode [ 619.158175][T20430] bridge5: left allmulticast mode [ 619.175437][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 619.177951][T20430] geneve2: left promiscuous mode [ 619.195289][T20430] geneve2: left allmulticast mode [ 619.221221][T20430] vlan0: left allmulticast mode [ 619.236696][T20430] erspan0: left allmulticast mode [ 619.246259][T20435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3819'. [ 619.322708][T20430] veth23: left promiscuous mode [ 619.926808][T20432] hsr_slave_0: left promiscuous mode [ 619.961627][T20442] tipc: Enabling of bearer rejected, failed to enable media [ 620.251164][T20464] wg1 speed is unknown, defaulting to 1000 [ 620.293854][T20464] wg1 speed is unknown, defaulting to 1000 [ 620.416585][T20476] veth1_vlan (unregistering): left allmulticast mode [ 620.527127][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 620.628779][T20479] wg1: entered promiscuous mode [ 620.637317][T20479] wg1: entered allmulticast mode [ 621.020980][T20487] wg1 speed is unknown, defaulting to 1000 [ 621.064977][T20487] wg1 speed is unknown, defaulting to 1000 [ 621.500546][ T30] audit: type=1800 audit(1763792592.130:30): pid=20492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3829" name="memory.events" dev="tmpfs" ino=4017 res=0 errno=0 [ 621.587861][T20507] wg1 speed is unknown, defaulting to 1000 [ 621.691422][T20503] wg1 speed is unknown, defaulting to 1000 [ 621.754098][T20507] wg1 speed is unknown, defaulting to 1000 [ 622.033660][T20512] wg1 speed is unknown, defaulting to 1000 [ 622.150838][T20518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3835'. [ 622.186453][T20512] wg1 speed is unknown, defaulting to 1000 [ 622.219088][T20520] tipc: Enabled bearer , priority 0 [ 622.310814][T20523] tipc: Resetting bearer [ 622.365797][T20503] wg1 speed is unknown, defaulting to 1000 [ 622.612874][T20519] tipc: Disabling bearer [ 622.797646][T17510] Bluetooth: hci4: command 0x0405 tx timeout [ 624.009315][T20541] wg1 speed is unknown, defaulting to 1000 [ 624.053327][T20543] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 624.066940][T20543] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 624.078546][T20543] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 624.097160][T20541] wg1 speed is unknown, defaulting to 1000 [ 624.104200][T20545] wg1 speed is unknown, defaulting to 1000 [ 624.129530][T20545] wg1 speed is unknown, defaulting to 1000 [ 624.174092][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3841'. [ 624.232099][ C0] ------------[ cut here ]------------ [ 624.238029][ C0] ODEBUG: free active (active state 0) object: ffff88803090fc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 624.251446][ C0] WARNING: CPU: 0 PID: 20541 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 624.261055][ C0] Modules linked in: [ 624.265287][ C0] CPU: 0 UID: 0 PID: 20541 Comm: syz.2.3840 Not tainted syzkaller #0 PREEMPT(full) [ 624.274702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.284792][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 624.290630][ C0] Code: 4c 89 ff e8 17 e0 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 5a 3a f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 4f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 624.310352][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 624.316533][ C0] RAX: 958873c33d986e00 RBX: dffffc0000000000 RCX: ffff88802fc75ac0 [ 624.324621][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 624.332702][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 624.340682][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a39d970 [ 624.348684][ C0] R13: ffffffff8bbf1400 R14: ffff88803090fc90 R15: ffffffff8b6cf7e0 [ 624.356686][ C0] FS: 00007f7c368486c0(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 624.360058][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 624.365640][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.378111][ C0] CR2: 0000001b30c0cff8 CR3: 000000004dfe4000 CR4: 00000000003526f0 [ 624.386115][ C0] Call Trace: [ 624.389399][ C0] [ 624.392270][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 624.397859][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 624.403019][ C0] kfree+0x115/0x6d0 [ 624.406936][ C0] rose_timer_expiry+0x4cb/0x600 [ 624.411899][ C0] call_timer_fn+0x17e/0x5f0 [ 624.416519][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 624.422038][ C0] ? call_timer_fn+0xbe/0x5f0 [ 624.426727][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 624.431860][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.437107][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.442341][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 624.447824][ C0] __run_timer_base+0x61a/0x860 [ 624.452732][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 624.458123][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 624.464425][ C0] run_timer_softirq+0xb7/0x180 [ 624.469300][ C0] handle_softirqs+0x286/0x870 [ 624.474107][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 624.478889][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 624.484319][ C0] __irq_exit_rcu+0xca/0x1f0 [ 624.488923][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 624.494169][ C0] irq_exit_rcu+0x9/0x30 [ 624.498420][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 624.504089][ C0] [ 624.507029][ C0] [ 624.509970][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 624.516012][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 624.521308][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 5d d1 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 624.540966][ C0] RSP: 0018:ffffc9001a48f618 EFLAGS: 00000206 [ 624.547078][ C0] RAX: 958873c33d986e00 RBX: 0000000000000000 RCX: 958873c33d986e00 [ 624.555092][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f8695 RDI: ffffffff8bbf08e0 [ 624.563098][ C0] RBP: ffffffff822e7745 R08: 0000000000000000 R09: ffffffff822e7745 [ 624.571079][ C0] R10: ffff88804ccb0000 R11: fffffbfff1efa08f R12: 0000000000000002 [ 624.579094][ C0] R13: ffffffff8df3d6e0 R14: 0000000000000000 R15: 0000000000000246 [ 624.587101][ C0] ? percpu_ref_tryget+0x15/0x180 [ 624.592176][ C0] ? percpu_ref_tryget+0x15/0x180 [ 624.597223][ C0] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 624.603009][ C0] ? percpu_ref_tryget+0x15/0x180 [ 624.608045][ C0] percpu_ref_tryget+0x31/0x180 [ 624.612942][ C0] ? percpu_ref_tryget+0x15/0x180 [ 624.617986][ C0] get_mem_cgroup_from_objcg+0x108/0x1d0 [ 624.623681][ C0] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 624.629423][ C0] obj_cgroup_charge_pages+0xe/0xa0 [ 624.634672][ C0] obj_cgroup_charge_account+0xcf/0x660 [ 624.638405][ T30] audit: type=1800 audit(1763792595.270:31): pid=20556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3844" name="memory.events" dev="tmpfs" ino=3921 res=0 errno=0 [ 624.640229][ C0] ? obj_cgroup_charge_account+0x13b/0x660 [ 624.640266][ C0] __memcg_slab_post_alloc_hook+0x3db/0x7d0 [ 624.672411][ C0] __kvmalloc_node_noprof+0x6d8/0x910 [ 624.677803][ C0] ? alloc_netdev_mqs+0xa6/0x11b0 [ 624.682878][ C0] ? __mutex_lock+0x5bb/0x1350 [ 624.687658][ C0] alloc_netdev_mqs+0xa6/0x11b0 [ 624.692550][ C0] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 624.697943][ C0] __ip_tunnel_create+0x349/0x560 [ 624.703031][ C0] ? __pfx___ip_tunnel_create+0x10/0x10 [ 624.708592][ C0] ? net_generic+0x1e/0x240 [ 624.713156][ C0] ip_tunnel_init_net+0x2ba/0x800 [ 624.718203][ C0] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 624.723804][ C0] ? rcu_is_watching+0x15/0xb0 [ 624.728589][ C0] vti_init_net+0x2f/0x100 [ 624.733063][ C0] ops_init+0x35c/0x5c0 [ 624.737240][ C0] setup_net+0xfe/0x320 [ 624.741404][ C0] ? __pfx_setup_net+0x10/0x10 [ 624.746213][ C0] ? copy_net_ns+0x337/0x4e0 [ 624.750816][ C0] ? down_read_killable+0x1d1/0x350 [ 624.756071][ C0] ? preinit_net+0x47d/0x780 [ 624.760678][ C0] copy_net_ns+0x34e/0x4e0 [ 624.765146][ C0] create_new_namespaces+0x3f3/0x720 [ 624.770455][ C0] ? security_capable+0x7e/0x2e0 [ 624.775448][ C0] unshare_nsproxy_namespaces+0x11c/0x170 [ 624.781184][ C0] ksys_unshare+0x4c8/0x8c0 [ 624.785752][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 624.790809][ C0] __x64_sys_unshare+0x38/0x50 [ 624.795623][ C0] do_syscall_64+0xfa/0xfa0 [ 624.800138][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.805390][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.811466][ C0] ? clear_bhb_loop+0x60/0xb0 [ 624.816193][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.822121][ C0] RIP: 0033:0x7f7c3598f749 [ 624.826547][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.846195][ C0] RSP: 002b:00007f7c36848038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 624.854644][ C0] RAX: ffffffffffffffda RBX: 00007f7c35be6090 RCX: 00007f7c3598f749 [ 624.862644][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 624.870618][ C0] RBP: 00007f7c35a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 624.878622][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.886627][ C0] R13: 00007f7c35be6128 R14: 00007f7c35be6090 R15: 00007fffbc39bfe8 [ 624.894654][ C0] [ 624.897677][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 624.904959][ C0] CPU: 0 UID: 0 PID: 20541 Comm: syz.2.3840 Not tainted syzkaller #0 PREEMPT(full) [ 624.914340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.924397][ C0] Call Trace: [ 624.927658][ C0] [ 624.930481][ C0] dump_stack_lvl+0x99/0x250 [ 624.935055][ C0] ? __asan_memcpy+0x40/0x70 [ 624.939629][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.944806][ C0] ? __pfx__printk+0x10/0x10 [ 624.949382][ C0] vpanic+0x237/0x6d0 [ 624.953353][ C0] ? __pfx_vpanic+0x10/0x10 [ 624.957860][ C0] panic+0xb9/0xc0 [ 624.961558][ C0] ? __pfx_panic+0x10/0x10 [ 624.965974][ C0] __warn+0x31b/0x4b0 [ 624.969940][ C0] ? debug_print_object+0x16b/0x1e0 [ 624.975130][ C0] ? debug_print_object+0x16b/0x1e0 [ 624.980336][ C0] report_bug+0x2be/0x4f0 [ 624.984659][ C0] ? debug_print_object+0x16b/0x1e0 [ 624.989843][ C0] ? debug_print_object+0x16b/0x1e0 [ 624.995021][ C0] ? debug_print_object+0x16d/0x1e0 [ 625.000200][ C0] handle_bug+0x84/0x160 [ 625.004422][ C0] exc_invalid_op+0x1a/0x50 [ 625.008905][ C0] asm_exc_invalid_op+0x1a/0x20 [ 625.013733][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 625.019522][ C0] Code: 4c 89 ff e8 17 e0 92 fd 4d 8b 0f 48 c7 c7 80 12 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 5a 3a f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 37 4f ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 625.039141][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 625.045218][ C0] RAX: 958873c33d986e00 RBX: dffffc0000000000 RCX: ffff88802fc75ac0 [ 625.053169][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 625.061116][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 625.069071][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffffffff8a39d970 [ 625.077028][ C0] R13: ffffffff8bbf1400 R14: ffff88803090fc90 R15: ffffffff8b6cf7e0 [ 625.084991][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 625.090640][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 625.096212][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 625.101307][ C0] kfree+0x115/0x6d0 [ 625.105189][ C0] rose_timer_expiry+0x4cb/0x600 [ 625.110109][ C0] call_timer_fn+0x17e/0x5f0 [ 625.114678][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 625.120121][ C0] ? call_timer_fn+0xbe/0x5f0 [ 625.124776][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 625.129868][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.135049][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.140232][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 625.145690][ C0] __run_timer_base+0x61a/0x860 [ 625.150575][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 625.155968][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 625.162244][ C0] run_timer_softirq+0xb7/0x180 [ 625.167111][ C0] handle_softirqs+0x286/0x870 [ 625.171889][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 625.176677][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 625.181986][ C0] __irq_exit_rcu+0xca/0x1f0 [ 625.186584][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 625.191806][ C0] irq_exit_rcu+0x9/0x30 [ 625.196062][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 625.201713][ C0] [ 625.204648][ C0] [ 625.207584][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.213576][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 625.218876][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 5d d1 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 625.238485][ C0] RSP: 0018:ffffc9001a48f618 EFLAGS: 00000206 [ 625.244535][ C0] RAX: 958873c33d986e00 RBX: 0000000000000000 RCX: 958873c33d986e00 [ 625.252487][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f8695 RDI: ffffffff8bbf08e0 [ 625.260437][ C0] RBP: ffffffff822e7745 R08: 0000000000000000 R09: ffffffff822e7745 [ 625.268388][ C0] R10: ffff88804ccb0000 R11: fffffbfff1efa08f R12: 0000000000000002 [ 625.276341][ C0] R13: ffffffff8df3d6e0 R14: 0000000000000000 R15: 0000000000000246 [ 625.284293][ C0] ? percpu_ref_tryget+0x15/0x180 [ 625.289302][ C0] ? percpu_ref_tryget+0x15/0x180 [ 625.294312][ C0] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 625.300018][ C0] ? percpu_ref_tryget+0x15/0x180 [ 625.305023][ C0] percpu_ref_tryget+0x31/0x180 [ 625.309854][ C0] ? percpu_ref_tryget+0x15/0x180 [ 625.314869][ C0] get_mem_cgroup_from_objcg+0x108/0x1d0 [ 625.320533][ C0] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 625.326265][ C0] obj_cgroup_charge_pages+0xe/0xa0 [ 625.331449][ C0] obj_cgroup_charge_account+0xcf/0x660 [ 625.336981][ C0] ? obj_cgroup_charge_account+0x13b/0x660 [ 625.342773][ C0] __memcg_slab_post_alloc_hook+0x3db/0x7d0 [ 625.348658][ C0] __kvmalloc_node_noprof+0x6d8/0x910 [ 625.354016][ C0] ? alloc_netdev_mqs+0xa6/0x11b0 [ 625.359024][ C0] ? __mutex_lock+0x5bb/0x1350 [ 625.363773][ C0] alloc_netdev_mqs+0xa6/0x11b0 [ 625.368605][ C0] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 625.373976][ C0] __ip_tunnel_create+0x349/0x560 [ 625.379022][ C0] ? __pfx___ip_tunnel_create+0x10/0x10 [ 625.384587][ C0] ? net_generic+0x1e/0x240 [ 625.389106][ C0] ip_tunnel_init_net+0x2ba/0x800 [ 625.394147][ C0] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 625.399713][ C0] ? rcu_is_watching+0x15/0xb0 [ 625.404505][ C0] vti_init_net+0x2f/0x100 [ 625.408951][ C0] ops_init+0x35c/0x5c0 [ 625.413129][ C0] setup_net+0xfe/0x320 [ 625.417327][ C0] ? __pfx_setup_net+0x10/0x10 [ 625.422102][ C0] ? copy_net_ns+0x337/0x4e0 [ 625.426697][ C0] ? down_read_killable+0x1d1/0x350 [ 625.431912][ C0] ? preinit_net+0x47d/0x780 [ 625.436523][ C0] copy_net_ns+0x34e/0x4e0 [ 625.440961][ C0] create_new_namespaces+0x3f3/0x720 [ 625.446268][ C0] ? security_capable+0x7e/0x2e0 [ 625.451237][ C0] unshare_nsproxy_namespaces+0x11c/0x170 [ 625.456973][ C0] ksys_unshare+0x4c8/0x8c0 [ 625.461487][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 625.466504][ C0] __x64_sys_unshare+0x38/0x50 [ 625.471251][ C0] do_syscall_64+0xfa/0xfa0 [ 625.475733][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.480909][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.486956][ C0] ? clear_bhb_loop+0x60/0xb0 [ 625.491614][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.497483][ C0] RIP: 0033:0x7f7c3598f749 [ 625.501881][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.521469][ C0] RSP: 002b:00007f7c36848038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 625.529866][ C0] RAX: ffffffffffffffda RBX: 00007f7c35be6090 RCX: 00007f7c3598f749 [ 625.537821][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 625.545773][ C0] RBP: 00007f7c35a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 625.553725][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.561676][ C0] R13: 00007f7c35be6128 R14: 00007f7c35be6090 R15: 00007fffbc39bfe8 [ 625.569637][ C0] [ 625.572962][ C0] Kernel Offset: disabled [ 625.577272][ C0] Rebooting in 86400 seconds..