last executing test programs: 2.92519462s ago: executing program 3 (id=1967): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000140)=0x8) 2.737383419s ago: executing program 0 (id=1970): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x15, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@struct={0x2, 0x3, 0x0, 0x4, 0x1, 0xfffffffc, [{0xc, 0x5, 0xb}, {0x0, 0x0, 0x1}, {0xc, 0x0, 0xfffffff7}]}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000480)=""/44, 0x4c, 0x2c, 0x1, 0x7}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x54, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0xfffffff4}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x3, 0x15, &(0x7f00000003c0)=""/21, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, r4, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x5, 0x800}, 0x10, r5, r6, 0x6, &(0x7f0000000b80)=[r7, r8, r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x3, 0xe, 0x1}, {0x5, 0x5, 0x8, 0x4}, {0x2, 0x3, 0x10, 0x9}, {0x3, 0x2, 0x7, 0x3}, {0x1, 0x4, 0xe, 0x3}, {0x4, 0x5, 0x7, 0x4}], 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000f00)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x27, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xe}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd9d6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000e40)='GPL\x00', 0xfffeffff, 0x5b, &(0x7f0000000e80)=""/91, 0x41000, 0x4c, '\x00', r13, 0x25, r6, 0x8, &(0x7f0000000f40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0x10, 0x5, 0xfffffff9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000fc0)=[{0x2, 0x3, 0x800, 0x5}, {0x0, 0x2, 0x7, 0x9}, {0x4, 0x3, 0x10, 0x55d8aee43db9ab31}, {0x3, 0x1, 0x4, 0xc}, {0x3, 0x4, 0x3, 0xa}], 0x10, 0xffff}, 0x94) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r14, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004020}, 0x2004c8c4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000001240)={@local, @local, 0xffffffffffffffff, "5db8ff0b4e646e2616f0ca9d227a0727605b25c43612547cb7a130e6c4ffdb07", 0x5, 0x6, 0x5, 0x3}, 0x3c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000012c0)={0x2, &(0x7f0000001280)=[{0xfffb, 0x2, 0x42}, {0xeba2, 0xc, 0x2, 0x3}]}, 0x10) r15 = accept4$ax25(r6, 0x0, &(0x7f0000001300), 0x80000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r15, 0x40049366, &(0x7f0000001340)) sendmsg$key(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2, 0x5, 0x4, 0x8, 0x17, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd29, 0x3507}, @sadb_x_sec_ctx={0xe, 0x18, 0x9, 0x6, 0x68, "d13601ddf6e63d32912bd3337d406d06726ccfe974186fc28f90939b4720e2256e90abc601252f16b92c8802e5f6895247ec481147420c0980e3701fac24820ba8dcfb4ecd5a95614b9311889907dabc20f5bac70b38ee3f82843690bc0673d904277cdc78a68e96"}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@mcast2, 0x25, 0x4, 0x8}]}, 0xb8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000001700)={'vlan0\x00', &(0x7f0000001600)=@ethtool_regs={0x4, 0x6, 0xd5, "2facc5fdd4316fd4e865493f257ef91ae1d4fb6ed9383e0055b48958c29f86967df3d6a2e04f86c4862b0972e98ee26c8a8b23f2dbe952baeab32fc911c1f155ae071b97bbed62fc4ef73f9fee618112fae3690893e30dd6515a6a3cefe6309b00d41e8af9f06783b54b8e5f8bc2b2936c68f0ee4bd1e9a5b6d2f73e7726a28404d902b35bfeca300493d8962a06745eec98d463850d3ab91428a1416a140fbef5d5e8fe62cadb0a8743c148844ffa95f8bf8f1ec4ec434c9d0453d8a0c643c565937666f12a4174b821ed7f97769b9a4212e20ffc"}}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0}, &(0x7f00000017c0)=0xc) sendmsg$nl_xfrm(r6, &(0x7f0000001ac0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001800)=@polexpire={0x250, 0x1b, 0x200, 0x70bd2b, 0x25dfdbfc, {{{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e21, 0x2f7, 0xa, 0x80, 0x20, 0x29, r13, r16}, {0x1, 0x4, 0x0, 0xffffffffffffff80, 0x5, 0xfffffffffffffc00, 0x9, 0x100000001}, {0x96, 0x4, 0x0, 0x3}, 0x100, 0x6e6bb0, 0x0, 0x0, 0x2}, 0x9}, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010100, 0x4d2, 0xe6}, 0x2, @in=@multicast2, 0x3501, 0x2, 0x0, 0x8, 0x800, 0x2}, {{@in=@dev, 0x4d4, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x1, 0x0, 0x40, 0xfffffffe, 0x2, 0x8}, {{@in6=@mcast1, 0x4d5, 0x82}, 0xa, @in=@private=0xa010102, 0x0, 0x2, 0x0, 0x0, 0xff, 0x9, 0x8}, {{@in6=@remote, 0x4d2, 0xff}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2, 0x8, 0xfffffffd, 0x3}, {{@in=@multicast1, 0x4d3, 0x62}, 0xa, @in6=@local, 0x3504, 0x4, 0x1, 0xc7, 0x801, 0x5, 0x9}]}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}}, @coaddr={0x14, 0xe, @in=@multicast1}, @proto={0x5, 0x19, 0xff}, @tfcpad={0x8, 0x16, 0x2}, @coaddr={0x14, 0xe, @in=@multicast2}]}, 0x250}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) sendmsg$kcm(r6, &(0x7f0000001d80)={&(0x7f0000001b00)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b80)="e37b422ba18a085dba0aece74afdb3d20da93a6c03ffce90a09ac2e4756f246e11d7e527428d283e6a6a9b16f6ad03834715f57684a1b9e7cbfd48debb2a12a18de650177d5f9a3f532a50bc66cdcab01c786c464cda852a87693f9b264395a437034e241b414105db751675f5561d76b3ea204565f63a4bf37a6d92b41656f475abc33b1661884553357f4e9439688a54c8c2c7b44ea26aeed3348513fb793045178b1fd51b4c0bfdb299197dc84f834d22e835d09ee36e2a1f5498ddd76f0305e51c68b8271fe14cff87", 0xcb}, {&(0x7f0000001c80)="548ed316db321302a1aae1142c56b42060bf45f3c26975b8d759993ed076a9cb7abd8b584a842cd0ef8080c12cac1255aefb94bc36646186e8f08b1ed092355b19cdc78be8345a9d4562", 0x4a}], 0x2, &(0x7f0000001d40)}, 0x44) sendmsg$key(r6, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x2, 0x1, 0x4, 0x4, 0x9, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x4, 0x60000000, 0x1000, 0x8}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd2a, 0x3507}]}, 0x48}}, 0x8800) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x10, 0x3f8, 0x20, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x2400c010) 2.64399608s ago: executing program 0 (id=1974): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc040006) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="18000000700001000000000000000000070000002843"], 0x18}}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000080)=0x7ff, 0x4) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r9, 0xff0a, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0xffffffffffffffa0) 2.503627562s ago: executing program 0 (id=1976): shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xe, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) 2.234390263s ago: executing program 2 (id=1980): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xffffffffffffff02) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000000) unshare(0x200) (async) unshare(0x200) 2.065123891s ago: executing program 3 (id=1981): r0 = socket(0xa, 0xa, 0x8) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0xd7, 0xbd, 0x0, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x7800, 0x40, 0x7}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x69}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x26b, 0xa28b, 0x7}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x2}, @union={0xc, 0x1, 0x0, 0x5, 0x0, 0x61bc, [{0xe, 0x0, 0xfffffffb}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x69, 0x4}, @datasec={0xc, 0x9, 0x0, 0xf, 0x1, [{0x5, 0xfffffff7, 0x7}, {0x3, 0x3, 0x5}, {0x1, 0xfff, 0x7fff}, {0x3, 0x101, 0x7}, {0x1, 0x1, 0x20}, {0x5, 0x8, 0x1}, {0x4, 0x5, 0x81}, {0x4, 0x9, 0x9}, {0x1, 0x0, 0x80000000}], "cc"}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @func={0xd, 0x0, 0x0, 0xc, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000440)=""/217, 0xf3, 0xd9, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x18, 0x1, 0x7fff, 0x900, r4, 0x8001, '\x00', r2, r5, 0x1, 0x2, 0x1, 0xa}, 0x50) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000600), &(0x7f0000000640)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x80) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000780)={0x4, 0x202, 0x7, 0x10001, 0x0}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000800)={r7, 0xd8, "d5b295903f197e6e5b4611580fbbefc386b523a50a4e3f92f7b877c3221affe9e7947e9a4a50e1bc16b3a1e72eb7604fd7bd53ae69707364a0cc01ebc9ff282a64c2aa9aa69e52e7abee52e69474e487ab86ed33f442e3dcd71a2e4f13e340286be02ceb10233d976168e81a628a075b19bf96ca429a0482d35922d944c5de4cc1892792eca9ffb373ff239249dcb466812a82ddddb8bec71371173715dc6a9822fc8ecd1efee64de23dbcff96ce059442b8ba2b27b4978a14f7cb458cfbe3357a7b6e15e163f7c8674dad08819caacdd4dbeb2e4bb23d0c"}, &(0x7f0000000900)=0xe0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c0}, 0x20000084) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, 0x1406, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x10, 0x3f2, 0x20, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000001) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x1405, 0x400, 0x70bd2c, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c5}, 0x40880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x4000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001000)={r8, 0xff80, 0x1, [0xb83]}, 0xa) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r12, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4008080) pselect6(0x40, &(0x7f0000001180)={0x0, 0xa, 0x7, 0x132, 0x80000000, 0x200, 0x7, 0x7}, &(0x7f00000011c0)={0x0, 0x1, 0xfffffffffffffff7, 0x5f283d00, 0x1000, 0x7, 0x8893, 0x10000}, &(0x7f0000001200)={0x1, 0x9, 0x401, 0x0, 0x14cd, 0x800, 0x7bec, 0x400}, &(0x7f0000001240)={0x77359400}, &(0x7f00000012c0)={&(0x7f0000001280)={[0x3]}, 0x8}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000001300), 0x4) 1.854215821s ago: executing program 4 (id=1982): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="646b94d3343e286ae4fed085fb7316c8418471f9c5de28193c995385eb89ad9af7c4d1eef484bca5a351cf38ae7925ae47f016738c92012b8165fae82267b1db7a4bf5e6629f6831ada43376b6b189416feb1c3db5309b9b297636a336fbbc1ed003a2a73ff2733eddb99e0443d5a0195f85eb00550c6aaefbe2ba3988840ce18b1bf770d4aff1e63cf701bfe6494b36d254b3e26faa48f69c934b77786430879d628ff8954019b8824991950297d9f47e9fcfefb05f3b9a67bcc111d668220d4aa9aabd90f2e596d804d289f765b1034e1ec169f5cb88356790b0d0b9dc0f57bde3d6ad48f5d8d90d79aa2ac89dbdffc512cadfec8f8e231c8223a656a281c1475dc3d9f19c16bb2bb44713a52f23020db1eb9f15199d6211c5adeb7f3865cc5f2ac1f8bd82bc86c4321ff7e8d875e5c4", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250200000008000200020000000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0002800600"], 0x24}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x1, 0xfffffffffffff9d5, 0x6}) connect$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x203c101}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@getneigh={0x14, 0x1e, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="b951", 0x2}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x20040800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b00200846a00000000000000000000000000000000000000fc02000000000000000000fe18ded83800000000004e2000"/69, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000001000000000000000bf5a416000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100030300000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xc, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x140f, 0xee70877cfbc8a0b9, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) 1.802276044s ago: executing program 2 (id=1983): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="510003000000", 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000200", @ANYRES16=r4, @ANYBLOB="080026bd700000dcdf250500000008000900040000000500060007000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000004) r5 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000200)=0xc63b, 0x4) r6 = socket(0x21, 0x2, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000040), 0x10) sendmsg$netlink(r7, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000880)=ANY=[], 0x218}, {0x0}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r9, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x7}, 0x80000002}], 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x4d728000) 1.766868919s ago: executing program 4 (id=1985): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r2, 0x0, 0x100) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x1e) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0xf, @private0, 0x4}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4, 0x6, 0x1000, 0x5, 0x1, 0x4}, 0x14) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000001c0)) connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="af8b0613ca5492da7d112fa1d5a34c3b7f046f43084454978d3820e78b28384f64b911999c52c46318856a96994a", 0x2e}, {&(0x7f0000001980)="85a086f4f51c9ef2bc9ec54b2a037637083c7449d131e12e538e3e48c546a71f23a2fc7ccc0806b4832da26e4a10f9a2f8b93b20650ceec7f6a8cf91b0b45e717208a9dc3d03a0050025c2c63556463a83d079ea0b01e1ea0703767e1bc9497c20d43cdb73813249aa2ab106372e9627bebeb73a9bc143bcdf661529227408665a03d622db1bff074113a6d9a3bc20751c9e4d4e5ed8e3384633946fa195ea06f7e94a39a26a4d82be01ccf946a31b56bab28b902a43c835419f31f32314f087ec6b69dc1f59a7feca83f26a47bba1fb9df1139c0ef68e589b1286120ae51ede322a371f9bb745c7209583309d1e36937309b76b8ed891509f219b58893bb768796d6842fffecd87aeb67a5ee9c472162b31fe6a6605ddae34948eb730e302b34a2df018df5c4bf139cbdfa537c3a3cbbbdb7bc31e42dca2b59baea51d733d5218e3646d7e126c7761b90c876aab724fb5b685ee7a0b7d084376f031a937c9563196b4d54730047eab557d4df62c8cdc05172eee16d15c89930dc9d214244b5079ea488cb0a2198e1dffeb33fdf06ae1459947c5999eceecd5bf09356c2ee0aacf62ac5d82c8e2c73feb40ab1e329d1a002598d019a5ec30d01af8ca421a9e7ce0d94d6bbae6fae22ff8d9ec0ef82491365e5f48fc84f1a9fd2e4d63789e8314ee18141417db58a85a5870a06f29c7e5fefec5a03b40144def32e205c464ebc5696be7515223a021d7a2fdf190c9839972d77f2d402411bddbf66a27ef8a5023f25da4304c7d21b1260b47e63a8136575a55b53abb5f938eba5df844aabad95d20dba183f27242a83bfee4bf17b5d014c39c26d7dd6cd8f664b27fb732e12af1e2f852564c1aadf8f03cab7b0a19fd3aa709c21a34206ed192a5e08606285f570dea9d42939d4caf7f0293fbf61d86e0b7357c13e20dc6440ab40bae999f6a0f36ed909ce85c62dce9ee7685c83aa4ce1298853e8cb369647a494db75f63b3eacbb66a5b7567afbdee3d000c514bef965a82202ff9d9425d3b9814e92dfda3da484422fc61175f7f950c803a63fc8b32bca407f01f99139fb23b6772ecfb149edbeec81235592fbfce4837680a88c2d34fbb2c29a8e0baa6d46233273558ffc439a4cba34130acfe2845d3898196881aa7e5c8ebebed79bfa23aa855dcc9d9d269e168bf20d93ec5b8f17d93fcf081faf2a40b3fa12905b6b1f36a7298a8056f365ff5b01295d55164ccf47fb60069d9a85d573b1bbe31d829eea61281e8c732ce35c1f3fe37d4b8ff82bdbfe2511a9823ec8fd4063769078bfac5b13dd2bf3c7b65da99861f60df276e2289c10617ccc84375fb475bab18936fddf0904542e84402ca2f7655099afa2e1e94e763e15e40480360880144b4d41d2b17ddaed582a4245435544429bc478425c48c468bc0d933781fedcbf9a519ddd11ad931e861f2c6da741f0043e2025e99e93bcfc353891c9ae744d37430e46719510ef6b993ee47866f44475c9b7f22ceed0e2f3a2ebd1391da9c66c1e25c888dcf0e723f8648f44940896f0167d8b74fc0303471342bda81d7e8e8bf3cc37e92b8d3103e702dd5a9d0a38c4adc59aee4fa3b1b427847b68c35d42452b047cef4e30906235c374c8da3b93d7058e470d4e193b83f218884707c5291c58e16f7c7687abcaf3b73c46f824749dfa4066fbadd660de783d9a23db7065e16c491a626556becf7fac51b99c115f4539b553eebe80a8e80e9f2061cff4fe4279c3fdbb525bd46bbef48de8b97fdd4b1c3b668182135638e8db7203837421a8833705332be64f755c2ae6acf607c50a7e3938f6299547dfffaf9780566278865bd2b4f16f94deeba8e09f3770f4ef490636de5736b9dfd8d13150e777f4886a49833930bfbeab10a8272df0ff2f2fbe557efdcc2f1cb9aa5fc2b50e569d99d0eb4a33f2a3cbb44d24d22f4ecb73118a78d85fbe69c4196e48d2c59fe51b05e321e3f8dd61a523be07b1d1359cd6681227bf51a58767a9221cb41ff38799132725355d7c6b1aa6d8aa903f043905690577e80938bc359fbb6a1df7f0411ab4c00909870e152866c7d1de2ce524f4cdbb07b908625dd55d4c59f571d56b58047cd7c8afb516dd0d1c04f1eb3f91b36249d271efd9b9777d7dfdfdbd8b291ce67dc3cbe7c1a56f4f4a00af391babf57a2f9afa293ddf3c57cc31d05236617bb27693a527080f2df966544fcc3a77bbc31235fec4ae3fd5d2f4dfad60d53ff1092a9658099fd5019727f31386a43cbc37243ec1c595897417672e4b6ebfffdbdeba0ff34c1f79b22b3fb97c205c404691c8010133d29650b7e985c69bddb318aa5488cf59e4cf593fa29d2d4b2c842980df9b1400d7ae5498c699e8eaeedf53328647f0383ea67e9b9186abf8b40c1e8939ad4cae14df6e51ca1b68484c82c7816cd1afc124c5fd4976ce377884fa79df629593f7d6a1d6dc8e5c5d36e0427749f8cf74a856a2fe47930fdece5c010f2f09fb2ed5fdde52510f349d38f304cadfcb2b31ee5661553261253a44b5bfadbae0ce2ab78598064db7879ac3049c01e6e668b56c9e848e0bc7689399fe57c0b0ec3be793e588a805f80584b19c2f760e3cd623ba26fa044181e96d862a551d4c25660ce99bb32b4a700365271a286e64ca5b33f4f18bd8f9738204e864b7b4d64ce348e965b4b1922aef510c76cec8dcfdaac5f29367654c60ca24fe1cc2a251b08b671680ae9f2200e3fe14b3211c93da52d454b096596540fdc7e9ea1dff1197f545cc674b5018eb543baa4f41a5ff7473e14f51d083bb76ac4aa703bf94420a35316e3ae8df5b824983d75da0005d01469e61697bd584e4403d82d3c6ba9971b8212a2fbe4c1054472fd245e5242ef03313fb3108852b0baf63a161f87dd047a3247aaa9bf110ac8f1d2a85c0647db3fa4538dcadfede2f85a48fe80969ccee9f7117ba63e1da55ccea6905466c3d98b4eb9caab295b41ae9f0b4535f91bfd0aec60d639e77724f7fa6f8bf474b8b0fe14dce8f0af2754b2f4c80d30f928dffc48471c43dd3952b53e44b49d07a3b69f21a50f893be27e67abb9b743291db02ec7f6432793a5a1c0e3b0a3e1ddbdcf81894f6eb9235c725247a92517f6830c29c2879de34bdb0938c6c77e9c5ecb9118b41553619769fc2678497ea95e36df075b7b3d5a2987d413d38185a2c59e8dac99f162d841881f8af94b06b8730dff82557661fbe149c2edd3b2c5226f930d161f05fc0ae49eda6f04fd3de647e5ddc4ce128daaf5a5f4663e7b0242989dab1e774593097d577dee3f79224ffafc70347f22beaa38a8d3a7ccc94d26f43529c6337c7bab8ab84da349b367a04656628b78ae97afd03a4f8b822e3c91e2f5ceb129d2c7ec8d0d8a789c45ca85cf22c493aa8c3569548b9fce5e2411ce4e688f6b52123065239ab0dceedd2a30a91667741860fe99099a63d7b2c47cafa30deb136a6966e46cacc338994655f5b69f132f4f230aa06ecb5da8a5b84babfd4229c069129f5b72e2142a874c13fae9c399c5a64a709f7ab918f23640b66b362d118b6784b2b4afef937663b54eafc8e1a7431e01fc4cca62965e6c457d1781b0b32dc7a180c69235589f6c7253a51488136173e579b20b73541e2aa8f158453e2d1bd8c33096e5ad0fb810afb6fb87b841fe355af420fe367c162cb4532255ca11d91b95b97b0386edd77ff905b8cf8c51abd8d678606d90fdc0a06d12b9e3365a93cb2cbe1f0180f546c5994ec46fe67001f8d37b87fd98d57b4b44a2d1cdaa6269e7375715573684fa165da5a76a1d51867cceb86f82c9f67e827e3190f383a2b52ee20b27f54b4902e3f7f975cba117d87440a34d5c90a4bda7243acaad669d280b3713bac8c37d5170b2e845d3dc3e710785567c94c597526e3bea1b9da062bb6bb5d3ab81f921c3abee84df88e75cd982abab465950af772606962b6c976230938cbb1fa83cb4dd07915c739a8dd975b46584cba29b6e1e67ea0eb270a5a0c777c647101c089acc68a951508e24468897161e591dbac1e33a95517c9a1465daf0973236a81dc17561326dc630554c66507c919bc4c574c089451c754bdda370b0d5e05dfe470001bede53599ec0fa29a659d6b4c4f5e633c1c7dce6611a05e8468bddf9de7a8614f46d949cce3ddfe18ba5e18fbd2add50c463839add94e38503f8794327d06d4032e91e78e7550f1b64c591dc6244d6cc301f89dc6b995241aa3b2d305ae608400371aa0aec72fa48b541a067456791dc76828037ad6248908438ea791645a2852f986c943105157b1b694fdd46e4d0d387279e27ec74fac642e88f17f21d8849bd7cfb4cca80c6b2549e2d29eb05e55995533c59b6c44e428853c0f7adb7c5f56b7ae4f8760a6b4711e865c1ca34fad00d1e14887da0b0ad0c49cacd48b13025988845195e415883dcece3fc983f7c2dbade49ee76e3821307d14323d11d64e033ddeb30fd5f3e16562a88ecd052662aa9af369898cbdcd3ecd6efbb62d3aef7e278c3639fa3183a423aabdb305a91b2c94890e966df17fb764521e516aa015d49c91b53262e3fbc5b7b58e6d324900dad44a301ae42e9db4722e5935d578b9c657fe4f8c2dc9b4a1526c22ac830615385a54278b54fdce27f0c56f89ec962a7391b29eb54ffe9c45f3ca76c430dc3240361296018d3bb445d2791442990e7b3ca819d69c8044c6e07e635eca897db2f6ef846a9b368a8d1e96758f5ec6857560c7e991036f53656c8decf55bd4509343156968298d9c6d6fde593e7bbebf7a6bf91fd9d70d9793259b88f241ef829572b2fb3b1b0c072eb10970b8c394d1d83bf1752e47c505937788c9ce6bf3f3cccca41905bd69e26b6dd9d3ba5f46a1fced3fb00c5bdde5473e90a2f0d7623b6e98c33f45d78047e08d2747054f9f1d0f2e5370ec03fb346687808e0e6aa8a6b8ba3663f6730ca9ff0923cd8562ed3254eec009e41c2a96b8f341dd7aa89448b4c6341654512c8c4e1d5f220a1a54f4556c1194210b595306787619c14227c19260bbdb5067f3784ecbcd880ce3cb04df50e22da10b627ee1f0aef03f389ff5c18d3545d08031a46f7aa341790d2b0d8dfa11903331caeb05d128acf9d5d7e44cdd88db547737e86ba8eb358e69a5fca39cd9deac787ae54e2404cc3dacc8cbf7fcd5db8ea116aa0bc1ae8cf8241a641e6d4277b7e317672c6893dc1f6921fa6b3d7fb7008a9cb93e18b39844a9d8534a847af39066641e5389e435f06d9ef3b2cece7847d666d8c60bcb3d878bea6484f71d14d529fd0875af4b6710994751f8ad02f2585a4c1c74d39bb2bb1030f6b9e698e963cc66fe0f51b1b28a9a994fdcffe2399360d9e7c576623d9397d383b6dc427a405e92a02061c81ce50fb36020f9e5103a9f0cd90a7ada946b2bf24da63f02710dc35bff4e06815be53f3cdbefa3ab12388529f023642ef82614b149bc197b74c20e59e655b1d6d5fdfc133045d84e391b882f890306969826d67bf267ee802780a465c43e5f7361f9cf35d84ce9bf6fd039b43f2b20ad191ec6bb4408a016ac681ee5ed9a7a350d4771a1dd6b0df1ad12fe6da485c2de233ae5fe975b331700ca7fddf215cc05a8e418fa7b966fedd31d2e02c18e21d312b1af2d195fabdea85f457e09fe5184cd7f671e7fe747e2583fd1311bc97f20042aa56b2f9dea22314a2d6fdf93fdad6a1ebf140db35e0f9e96cdaed25be9356c01d14c862d1cbfee956146112656296304f5d3421c7a1b9841c0a6733d47b8dd6c842cb28e746ad12425c363608afef0b23ed91c2278aec966b3e6256f9166c33b60423846fc4db3f9200a8ca190b606c55b087cacaa146ea158124e81acf950f0184ae15955a2c521743e0442527a702e789ebb09cbc1d8f0a3b321528177a70e414df5a0dc1d8b83dcac4e5d6584c7b3eb735acb1157ccaf82a0b3b8e4414fe59532dc0a4eb236f1030878963cb2a7f59680190", 0x108e}, {&(0x7f0000000240)="3d2bb07dc92f8e41a6d4af861d416cec26191babfbd9f3e632bd2f365319990ba5d661ff02fdfd5ee8a9803a4e3e0e042f068ac577c7f4474eb2601892057ea5ea81e6313c9e09f841cb4900bd77055c4c405392f07507b32a8a62fca10ec51becc7cc13de5f73ca9c345684dcbae1a728f2fc78c9e24eeddd97375be7fd80912ca4b74e40e7b77f258399b00f194128a159e18703e9a5b980350f582fe10cf7a6b151635876d4965ff79cbacee8ce199db2ced29cfaa4b57486d846d5b3f7d5c9fd65d1da122bbd6d6adf84795e203f7026e822e51a0050aec025c301f25c9a0c4ff44fb94f7c4fc3a0c2ce193a0eeff6", 0xf1}], 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) sendmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x40844) 1.574159497s ago: executing program 2 (id=1986): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1, &(0x7f0000000440)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{0x0}, {&(0x7f0000001980)=""/111, 0x6f}], 0x2}, 0x10}], 0x1, 0x10000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRESDEC=r6, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000300)={0xd, 0x5, 0x8, 0xffffffffffffffff, 0x5ae3, 0x8}) 1.572045494s ago: executing program 0 (id=1987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@delqdisc={0xa8, 0x25, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {0xffff, 0x10}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x0, 0x81, 0x0, 0x7}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xec}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x873}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xff, 0xc9, 0x0, 0x2, 0x3eb, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xe, 0x9, 0x3ff, 0x0, 0x7, 0x6, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x4008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="11b1f4fffcffffff852000000100000032810600350a0000d8f2ded87038d1390564790f76c7228fdd17a87ce0d5054f776336b5f04db824f73c79bcafc2e52541ae2de0c5ad66dfd902f3dd9336278c79025438bed1c1c786ad8a80176cb51a89dee6334444f75b50d50ad1d6819b4e80fbcf35f20a54cfef0eae1ebb8db579dc5f372b6db20a1b2b3af97e18"], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) r12 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r9, 0x8229}, {r11, 0x200}, {r12, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r15, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r16, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) 1.524793304s ago: executing program 1 (id=1988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r4, &(0x7f0000000040), 0x9) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000007f000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="100000001200050104000000ffdb56c56dc8c418e2831c2d1826fcdf25"], 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000e6d617a06664000000000d02000000040000000000000802000000000000006100"], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r8}, 0x10) (async) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) listen(r0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) socket$netlink(0x10, 0x3, 0x12) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) 1.445426954s ago: executing program 4 (id=1989): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x40d0, &(0x7f0000000140)={0xa, 0x4e23, 0x8040000, @mcast2, 0xfffffffc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) unshare(0x22020600) ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0x9da6]}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_proto_private(r3, 0x89e0, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) close(0x3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 1.338302649s ago: executing program 1 (id=1990): pipe(&(0x7f0000000440)={0xffffffffffffffff}) read$alg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x2b, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet6(r4, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @loopback, 0x2}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) writev(r1, &(0x7f0000000400), 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.337800425s ago: executing program 1 (id=1991): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.302010524s ago: executing program 0 (id=1992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fc67fa1bd684afd2130e899c05047ffe0000", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x840000000002, 0x6, 0xff) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x2}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x0, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.191000812s ago: executing program 3 (id=1993): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x155, 0x8001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0x16}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0xc000) 993.6856ms ago: executing program 3 (id=1994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x10, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a600000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6(0xa, 0x3, 0x3c) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"]) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="13", 0x1}, {&(0x7f00000012c0)="d6", 0x1}], 0x2}, 0x4051) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ac9a", 0x2}], 0x1}, 0x20040800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000000)="a85c20438fba1356fbbd23aef999", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042022eb"], 0x7a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000008000000dd000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000001c07ff0ec8b7ae4a9be7e547e5f77f752c171f6f34c1bfcafa314ad3aeb835efc6be60f84c786fd69072c4340d18a9bf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r10}, 0x10) 657.604698ms ago: executing program 2 (id=1995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7400000006658ee693eafc6e93e34e7ff10a09040000000000000000020000070900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800044000000000000000080006402000000108000340fffffffd080007400000000c08000140000000014de00000110001000000000000751f4ca5c144c229bb78ca5c61895374f3268f873d2a681a9a45b9a8f3421be5d33e4fcb3322628fbf93a47a974f546db11ba317193ca6ea"], 0x9c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x4, 0x3ff, 0xc, 0xfffff801, 0xb9}, 0x14) 562.788547ms ago: executing program 3 (id=1996): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c021}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @local}}}, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000140)=0xa, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002000", @ANYRES32=0x0, @ANYBLOB="8e"], 0x38}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 553.943794ms ago: executing program 2 (id=1997): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) socketpair(0x3e, 0x6, 0xfff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000b0ab", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf255c0000000c009900000000003700000008006b003700000008006b000a00000008006b005a00000008006b0037000000"], 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x84) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x1}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x4008904}, 0x40841) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='/\x00', @ANYRES16=r10, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES16=r2, @ANYRES64=r9], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x40000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) 552.847397ms ago: executing program 4 (id=1998): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$llc(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) socketpair(0x18, 0x1, 0x9, &(0x7f0000001200)) r3 = accept4(r2, 0x0, 0x0, 0x80000) write(r3, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x80001, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x480, 0x2c, 0xd27, 0x703d24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x454, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x5, 0x4, 0x5, {0xa5, 0x0, 0x1, 0x4, 0xd6, 0x3}, {0x9, 0x2, 0x6, 0x7ff, 0x6, 0xfffffffc}, 0x5, 0x189d, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x0, 0x7ff, 0x100, 0x80, 0x1, 0x4, 0x7de9, 0xfffffd13, 0xdb, 0x2, 0x80000001, 0x4, 0xa, 0xdc, 0xe, 0x8, 0x3, 0xb, 0x3, 0x1, 0x4, 0x1, 0x9, 0x9, 0x4, 0x944c00, 0x0, 0x8, 0x5, 0xe1, 0x3ff, 0x7, 0x8, 0xe7be, 0x4, 0x1, 0x2, 0x2cf, 0x7, 0x401, 0x432, 0x5, 0x5, 0x5, 0x4, 0x8, 0xffff5a9a, 0x6, 0x181a, 0x7, 0x1, 0x1, 0x80000000, 0x10000, 0x10, 0x10001, 0x2, 0x9, 0xe20, 0x2, 0x4, 0x5, 0xdfc9, 0x0, 0x1, 0x6, 0x8, 0x40000000, 0x6, 0xe, 0x6e, 0x2, 0xf5, 0x0, 0x7, 0x7, 0x0, 0x4ba, 0x10000, 0x9, 0x8000, 0x0, 0x6, 0x8, 0xfff, 0x1d, 0x6, 0xe7d, 0x7, 0xd517, 0x0, 0x6, 0xb, 0x4, 0x2dc, 0x4, 0xe, 0xaa, 0x9, 0x2db3, 0x5a29, 0x0, 0x659, 0x72, 0xfb4, 0xe1, 0x31, 0x1, 0x6000000, 0x6, 0x4, 0x4, 0x7f, 0x1e59, 0x4, 0x7, 0x4, 0x100, 0x80, 0xe9c, 0x4, 0x7, 0x1, 0xd0, 0x8000, 0x2, 0x7, 0x401, 0xb1, 0x2, 0xfffffffa, 0x9b, 0xd, 0x3, 0x0, 0x9, 0x4, 0x7fffffff, 0x7c, 0xffffffff, 0x4, 0xa, 0x5, 0x84f, 0x4, 0x5, 0x2, 0x57d, 0x7, 0xc, 0x0, 0xfff, 0x40, 0x7, 0x9, 0xfffffffe, 0x5, 0xdb3e, 0x3, 0xb, 0x81, 0xfffffffb, 0x1, 0x8, 0x6, 0x101, 0x2, 0x0, 0x643, 0xfffff376, 0x41a5, 0x8, 0xff, 0x2, 0x7, 0x22c, 0x8001, 0x8000, 0x7, 0x9, 0x8, 0x3, 0x8d3c, 0x3, 0x76e0fdac, 0xd1, 0x0, 0x0, 0xa5b, 0x8, 0x1, 0x2, 0xc8b, 0x4, 0x100, 0xea6, 0x19, 0x7fff, 0xffff, 0x4, 0x9, 0x1ff, 0x8, 0x165, 0x8, 0x8, 0x81, 0xa11c, 0x100, 0x4, 0x3a6b94c2, 0x2, 0x1, 0x347c, 0x81, 0xffff, 0x1, 0x2, 0x2, 0x8, 0xf6, 0x3, 0x3a, 0x7, 0x9f, 0x7f, 0x9, 0x3, 0x1, 0x3, 0xfffffff8, 0x8, 0x0, 0xb8c0, 0x5, 0x13, 0x2, 0xffffffff, 0x9, 0x8, 0x6, 0x8001, 0x5, 0x6, 0x1691, 0x6422, 0x3, 0x10, 0x3, 0x388, 0x6, 0x5, 0x8, 0xffffffc0]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r7, &(0x7f0000000040)="05000000010000", 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x5}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @union={0x4, 0x2, 0x0, 0x5, 0x1, 0x800, [{0x2, 0x3, 0x8001}, {0x0, 0x0, 0x1000}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x42}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {0x3, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xa50}}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000240)=""/122, 0xac, 0x7a, 0x0, 0x2000000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 374.299809ms ago: executing program 1 (id=1999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0xff, 0x8, 0x6, 0x10000, 0x1, 0x3be2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/253, 0xfd}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f0000000800)=""/207, 0xcf}], 0x4, &(0x7f00000003c0)=""/154, 0x9a}, 0x8}], 0x1, 0x40002041, &(0x7f00000006c0)={0x0, 0x3938700}) (rerun: 64) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xd, 0x0, 0x0, 0xca05, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xfb}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3f80000, '\x00', 0x0, r1, 0x5, 0x3, 0x3}, 0x50) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r5, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0xc001) 362.125294ms ago: executing program 2 (id=2000): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c", @ANYRES16=r3, @ANYRES16=r2], 0x21c}}, 0x0) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r2, &(0x7f00000006c0)=r9, 0x12) 283.277748ms ago: executing program 1 (id=2001): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600)=r2, 0x4) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e700000000800000000000000000bd310000080000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB="80aa9f2d28c8880bb8400e087c271cacbf8fffae862aca9d1b4588b4b95b6d1b926a7fcddfc7120e945dab1a32cb502f902c8240bd57d90c6015e40f3d6cbd899be8075f1aa0ca96ff265d486edb354fbfc68c07324aa00c253f3b99f54edddc273acbd9c61789cf84cd4e6a69c3d6f1115dd6634821fdb75cce7c144293a607405697c3784308f3ccee988dcaa1295da9c5ff762888ef4ecd857dc07e3abab9039175d3a26066"], 0x3c}}, 0x0) (async) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r5) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x100004, 0x620104, 0xb, 0x1}, 0x50) (async) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r9, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) bind$ax25(r9, &(0x7f0000000480)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8, 0x4}, 0x38) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="00000000000000000800000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r11, 0x0, 0xffffffff}, 0x18) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 279.703701ms ago: executing program 3 (id=2002): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="11eb534bfc0baf745837da8888a8", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x20004040) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000180), &(0x7f0000000040)=@udp=r6, 0x1}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r12, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/112, 0x46}, {&(0x7f00000006c0)=""/4085, 0xff5}], 0x2}, 0x3}], 0x1, 0x2101, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r4, 0x7e, 0x8000000000000000, 0x7ff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 236.264076ms ago: executing program 0 (id=2003): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000200fd1900008500000000000000", @ANYRES32, @ANYBLOB="000000382280ff001700"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="c890000000000000000000b6cf000000870a00000508000340000010040400068006001240000300"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) socket$nl_route(0x10, 0x3, 0x0) 225.792517ms ago: executing program 4 (id=2004): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x20}}, 0x0) 10.364897ms ago: executing program 1 (id=2005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x25, 0x5, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 4 (id=2006): syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000140)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f00000001c0), &(0x7f0000000000)=0x6e, 0x100800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000140)=0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) (async) pipe(&(0x7f0000000040)) (async) accept4$unix(r4, &(0x7f00000001c0), &(0x7f0000000000)=0x6e, 0x100800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.3.385'. [ 103.006657][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 103.106106][ T7427] bridge0: port 3(vlan2) entered blocking state [ 103.115953][ T7427] bridge0: port 3(vlan2) entered disabled state [ 103.124020][ T7439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.387'. [ 103.124065][ T7427] vlan2: entered allmulticast mode [ 103.139354][ T7427] bridge0: entered allmulticast mode [ 103.147451][ T7427] vlan2: left allmulticast mode [ 103.160447][ T7427] bridge0: left allmulticast mode [ 104.289147][ T7474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.397'. [ 104.361876][ T7474] netlink: 'syz.0.397': attribute type 11 has an invalid length. [ 104.964939][ T7514] bridge_slave_1: left allmulticast mode [ 104.973136][ T7514] bridge_slave_1: left promiscuous mode [ 104.979836][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.981162][ T5865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 104.998072][ T7514] bridge_slave_0: left allmulticast mode [ 105.005023][ T7514] bridge_slave_0: left promiscuous mode [ 105.012025][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.427425][ T7488] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 106.221002][ T7581] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 106.484734][ T7591] __nla_validate_parse: 12 callbacks suppressed [ 106.484756][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 106.699777][ T7596] netlink: 'syz.2.433': attribute type 4 has an invalid length. [ 106.768470][ T7597] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 106.840203][ T7597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.433'. [ 107.252920][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 107.335715][ T7636] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 107.398388][ T7641] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20004 [ 107.561408][ T7660] netlink: 'syz.2.443': attribute type 2 has an invalid length. [ 107.569262][ T7660] netlink: 119 bytes leftover after parsing attributes in process `syz.2.443'. [ 108.193249][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 108.284556][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 108.331784][ T5865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.350491][ T7623] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.562445][ T7701] netlink: 180 bytes leftover after parsing attributes in process `syz.0.462'. [ 108.884579][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 109.126404][ T7749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.473'. [ 109.143564][ T7748] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.194699][ T7753] tipc: Started in network mode [ 109.199709][ T7753] tipc: Node identity 565ab325e8e8, cluster identity 4711 [ 109.220673][ T7753] tipc: Enabled bearer , priority 0 [ 109.229193][ T7753] syzkaller0: entered promiscuous mode [ 109.237146][ T7753] syzkaller0: entered allmulticast mode [ 109.248450][ T7748] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.272618][ T7756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.475'. [ 109.319064][ T7748] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.360117][ T7759] tipc: Enabled bearer , priority 0 [ 109.396354][ T7764] syzkaller0: entered promiscuous mode [ 109.401919][ T7764] syzkaller0: entered allmulticast mode [ 109.412835][ T7748] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.503661][ T7758] tipc: Resetting bearer [ 109.562205][ T7758] tipc: Disabling bearer [ 109.576070][ T7769] bond_slave_0: entered promiscuous mode [ 109.582080][ T7769] bond_slave_1: entered promiscuous mode [ 109.588614][ T7769] macvlan2: entered promiscuous mode [ 109.594946][ T7769] bond0: entered promiscuous mode [ 109.604539][ T7769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.619643][ T1146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.692980][ T6833] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.735403][ T6824] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.762666][ T6833] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.782164][ T7747] tipc: Resetting bearer [ 109.809961][ T7747] tipc: Disabling bearer [ 109.855312][ T7780] nbd: must specify a size in bytes for the device [ 109.866724][ T7782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.961720][ T7785] bond0 (unregistering): left promiscuous mode [ 109.973961][ T7785] bond_slave_0: left promiscuous mode [ 109.990126][ T7785] bond_slave_1: left promiscuous mode [ 110.035116][ T7785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.046488][ T7785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.058873][ T7785] bond0 (unregistering): Released all slaves [ 110.075880][ T7790] geneve2: entered promiscuous mode [ 110.083194][ T6825] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.093273][ T6825] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.102414][ T6825] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.112092][ T6825] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.215949][ T7797] bond0: (slave bond_slave_0): Releasing backup interface [ 110.228360][ T7797] bond_slave_0: left promiscuous mode [ 110.246639][ T7797] bond0: (slave bond_slave_1): Releasing backup interface [ 110.262004][ T7797] bond_slave_1: left promiscuous mode [ 110.284106][ T7797] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 110.309303][ T7797] team0: Port device team_slave_0 removed [ 110.319848][ T7797] team0: Failed to send options change via netlink (err -105) [ 110.333068][ T7797] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 110.344392][ T7797] team0: Port device team_slave_1 removed [ 110.351568][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.359729][ T7797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.369358][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.386087][ T7797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.403884][ T7797] bond1: (slave macvlan2): Removing an active aggregator [ 110.413993][ T7797] bond1: (slave macvlan2): Releasing backup interface [ 110.477834][ T7800] team0: Failed to send options change via netlink (err -105) [ 110.500097][ T7800] team0: Mode changed to "loadbalance" [ 110.511541][ T7801] netlink: 'syz.1.488': attribute type 14 has an invalid length. [ 111.090226][ T7849] netlink: 'syz.2.501': attribute type 21 has an invalid length. [ 111.105514][ T7849] ipvlan1: entered promiscuous mode [ 111.114375][ T7849] bridge0: port 2(ipvlan1) entered blocking state [ 111.123031][ T7849] bridge0: port 2(ipvlan1) entered disabled state [ 111.135581][ T7849] ipvlan1: entered allmulticast mode [ 111.142678][ T7849] gretap0: entered allmulticast mode [ 111.151877][ T7849] ipvlan1: left allmulticast mode [ 111.158413][ T7849] gretap0: left allmulticast mode [ 111.584162][ T7884] __nla_validate_parse: 13 callbacks suppressed [ 111.584179][ T7884] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.516'. [ 111.600896][ T7884] netlink: zone id is out of range [ 111.606142][ T7884] netlink: zone id is out of range [ 111.613537][ T7884] netlink: get zone limit has 8 unknown bytes [ 111.622413][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 111.721249][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 111.735179][ T7892] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 111.794402][ T7898] syzkaller0: entered promiscuous mode [ 111.800001][ T7898] syzkaller0: entered allmulticast mode [ 111.813846][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.518'. [ 112.123299][ T7920] tipc: Enabling of bearer rejected, failed to enable media [ 112.357496][ T7928] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 112.439109][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 112.518143][ T7938] netlink: 60 bytes leftover after parsing attributes in process `syz.1.530'. [ 112.543288][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.531'. [ 112.553351][ T7941] netlink: 'syz.0.531': attribute type 7 has an invalid length. [ 112.562991][ T7941] netlink: 'syz.0.531': attribute type 8 has an invalid length. [ 112.571593][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 112.702595][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.530'. [ 112.719946][ T7959] tipc: Enabled bearer , priority 0 [ 112.729710][ T7958] syzkaller0: entered promiscuous mode [ 112.754613][ T7958] syzkaller0: entered allmulticast mode [ 112.781515][ T7958] tipc: Resetting bearer [ 112.861497][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 112.897575][ T7957] tipc: Resetting bearer [ 112.899660][ T7969] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:0 [ 112.938094][ T7957] tipc: Disabling bearer [ 113.160891][ T7977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.168984][ T7977] bond0: (slave bond3): Enslaving as an active interface with an up link [ 113.690492][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 114.410467][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 114.442240][ T7979] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 115.277717][ T8057] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 115.728423][ T8080] netlink: 'syz.3.566': attribute type 13 has an invalid length. [ 115.741235][ T8080] netlink: 'syz.3.566': attribute type 17 has an invalid length. [ 115.807506][ T8080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.829370][ T8082] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 115.847767][ T8082] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.091563][ T8080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.573531][ T8099] netlink: 'syz.1.571': attribute type 21 has an invalid length. [ 116.581953][ T8099] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.590401][ T8099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.597729][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 116.605147][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 116.612615][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 116.647961][ T8102] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 116.665870][ T8102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.005591][ T8120] __nla_validate_parse: 4 callbacks suppressed [ 117.005612][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 117.143813][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 117.144281][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 117.169514][ T8126] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 117.179964][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 117.199108][ T8119] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.580'. [ 117.208974][ T8119] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 117.218167][ T8119] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 117.290657][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.297642][ T8060] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 117.305968][ T8070] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 117.367380][ T8137] netlink: 14 bytes leftover after parsing attributes in process `syz.0.585'. [ 117.406115][ T8141] netlink: 15 bytes leftover after parsing attributes in process `syz.4.586'. [ 117.454690][ T8133] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 117.484402][ T8137] bond0 (unregistering): (slave bond3): Releasing backup interface [ 117.506630][ T8137] bond0 (unregistering): Released all slaves [ 117.573989][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.581947][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.613002][ T8148] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.587'. [ 117.688787][ T8138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.706371][ T8138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.791761][ T8138] geneve2: left promiscuous mode [ 117.807081][ T8138] geneve2: left allmulticast mode [ 117.845746][ T8167] netlink: 25 bytes leftover after parsing attributes in process `syz.2.588'. [ 117.862477][ T8144] geneve2: entered promiscuous mode [ 117.916378][ T6831] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.953672][ T6831] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.012961][ T6831] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.016986][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 118.042295][ T6831] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.077423][ T6824] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.119505][ T6824] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.307862][ T6824] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.320940][ T6824] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.451687][ T8199] tipc: Enabled bearer , priority 0 [ 118.459018][ T8198] tipc: Enabling of bearer rejected, already enabled [ 118.496758][ T8195] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 118.504810][ T8201] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 118.543963][ T8199] syzkaller0: entered promiscuous mode [ 118.550065][ T8199] syzkaller0: entered allmulticast mode [ 118.656489][ T8199] tipc: Resetting bearer [ 118.666159][ T8199] tipc: Disabling bearer [ 118.853540][ T8215] veth0: entered promiscuous mode [ 118.860574][ T8215] veth0: left promiscuous mode [ 119.108583][ T8227] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 119.438067][ T8231] netlink: 'syz.0.603': attribute type 7 has an invalid length. [ 119.536176][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.624153][ T8209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 119.950825][ T8255] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 119.974851][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.984465][ T8255] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 121.117740][ T8285] sctp: [Deprecated]: syz.3.616 (pid 8285) Use of int in maxseg socket option. [ 121.117740][ T8285] Use struct sctp_assoc_value instead [ 121.418288][ T8298] lo speed is unknown, defaulting to 1000 [ 121.426611][ T8298] lo speed is unknown, defaulting to 1000 [ 121.476155][ T8298] lo speed is unknown, defaulting to 1000 [ 121.512228][ T8298] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.541385][ T8298] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.569493][ T8298] lo speed is unknown, defaulting to 1000 [ 121.580154][ T8298] lo speed is unknown, defaulting to 1000 [ 121.588787][ T8298] lo speed is unknown, defaulting to 1000 [ 121.623478][ T8298] lo speed is unknown, defaulting to 1000 [ 121.651875][ T8298] lo speed is unknown, defaulting to 1000 [ 122.042921][ T8325] bridge6: entered allmulticast mode [ 122.219459][ T8335] __nla_validate_parse: 15 callbacks suppressed [ 122.219478][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 122.650627][ T8353] nbd0: detected capacity change from 0 to 127 [ 122.677523][ T8224] Set syz1 is full, maxelem 65536 reached [ 122.863500][ T8367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.130464][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 123.347718][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 123.359224][ T8381] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.400023][ T51] block nbd0: Receive control failed (result -104) [ 123.442415][ T6825] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 123.483859][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 123.492022][ T6825] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 123.541835][ T6825] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 123.564427][ T6825] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 123.570733][ T8394] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 123.598204][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 123.607965][ T8394] netlink: 224 bytes leftover after parsing attributes in process `syz.2.642'. [ 123.670598][ T8405] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 123.892112][ T8416] lo speed is unknown, defaulting to 1000 [ 124.128000][ T8439] IPVS: length: 49 != 24 [ 124.211180][ T8444] syzkaller1: entered promiscuous mode [ 124.224680][ T8444] syzkaller1: entered allmulticast mode [ 124.290128][ T8452] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 124.341317][ T8452] bond3: entered promiscuous mode [ 124.368084][ T8452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.446375][ T8452] bond3: (slave bridge7): making interface the new active one [ 124.473186][ T8452] bridge7: entered promiscuous mode [ 124.479846][ T8452] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 124.496246][ T8457] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 124.560010][ T8472] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.637974][ T8478] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.663'. [ 124.650230][ T8478] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.663'. [ 124.679862][ T8472] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.760642][ T8486] openvswitch: netlink: Message has 1 unknown bytes. [ 124.774534][ T8486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.822102][ T8472] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.885347][ T8472] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.894621][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.046254][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.670'. [ 125.067814][ T6831] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.088702][ T6831] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.127547][ T6832] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.145609][ T6832] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.159160][ T8504] macvlan1: entered promiscuous mode [ 125.165799][ T8504] ipvlan0: entered promiscuous mode [ 125.173080][ T8504] ipvlan0: left promiscuous mode [ 125.178616][ T8504] macvlan1: left promiscuous mode [ 125.304541][ T8513] ip6erspan0: entered allmulticast mode [ 125.338824][ T8513] netlink: del zone limit has 4 unknown bytes [ 125.840346][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 125.842689][ T8558] lo speed is unknown, defaulting to 1000 [ 125.868827][ T8557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 126.279364][ T8595] lo speed is unknown, defaulting to 1000 [ 126.553329][ T8607] lo speed is unknown, defaulting to 1000 [ 127.090068][ T8627] netlink: 596 bytes leftover after parsing attributes in process `syz.1.708'. [ 127.117175][ T8624] lo speed is unknown, defaulting to 1000 [ 127.316166][ T8632] __nla_validate_parse: 1 callbacks suppressed [ 127.316189][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 127.369856][ T8632] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 127.425079][ T8628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.442854][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 127.668247][ T8647] bond0: entered promiscuous mode [ 127.675449][ T8647] bond_slave_0: entered promiscuous mode [ 127.684068][ T8647] bond_slave_1: entered promiscuous mode [ 127.690182][ T8647] batadv0: entered promiscuous mode [ 127.700967][ T8647] dummy0: entered promiscuous mode [ 127.707686][ T8647] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 127.719781][ T8647] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 127.734497][ T8647] hsr1: entered promiscuous mode [ 127.740077][ T8647] hsr1: entered allmulticast mode [ 127.746640][ T8647] bond0: entered allmulticast mode [ 127.754728][ T8647] bond_slave_0: entered allmulticast mode [ 127.761325][ T8647] bond_slave_1: entered allmulticast mode [ 127.767370][ T8647] batadv0: entered allmulticast mode [ 127.780615][ T8647] dummy0: entered allmulticast mode [ 128.178773][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 128.498995][ T8677] lo speed is unknown, defaulting to 1000 [ 128.549024][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.724'. [ 128.649564][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.704726][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.710782][ T8698] syzkaller1: entered allmulticast mode [ 128.764213][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.817921][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.849562][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.914690][ T8710] netlink: 'syz.4.730': attribute type 10 has an invalid length. [ 128.927948][ T8714] netlink: 'syz.3.729': attribute type 8 has an invalid length. [ 129.083047][ T8724] netlink: 112 bytes leftover after parsing attributes in process `syz.2.733'. [ 129.332209][ T8731] lo speed is unknown, defaulting to 1000 [ 129.445685][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 129.646435][ T8756] vlan2: entered promiscuous mode [ 129.657316][ T8756] bridge0: entered promiscuous mode [ 129.694940][ T8753] lo speed is unknown, defaulting to 1000 [ 129.959101][ T8774] netlink: 208128 bytes leftover after parsing attributes in process `syz.3.745'. [ 129.972561][ T8774] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 129.977951][ T8770] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 130.168808][ T8785] tipc: Enabled bearer , priority 0 [ 130.198685][ T8785] tipc: Resetting bearer [ 130.217692][ T8784] tipc: Disabling bearer [ 130.473848][ T8796] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 130.492307][ T8813] netlink: 'syz.2.750': attribute type 4 has an invalid length. [ 130.507611][ T8796] netlink: 140 bytes leftover after parsing attributes in process `syz.3.748'. [ 130.544115][ T8808] netlink: 'syz.2.750': attribute type 4 has an invalid length. [ 130.566139][ T8809] lo speed is unknown, defaulting to 1000 [ 130.574362][ T8796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.748'. [ 130.691821][ T8819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.747418][ T8830] bridge_slave_0: left allmulticast mode [ 130.753348][ T8830] bridge_slave_0: left promiscuous mode [ 130.759182][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.773702][ T8830] bond0: (slave bond_slave_0): Releasing backup interface [ 130.785730][ T8830] bond0: (slave bond_slave_1): Releasing backup interface [ 130.804920][ T8830] team0: Port device team_slave_0 removed [ 130.817534][ T8830] team0: Port device team_slave_1 removed [ 130.825803][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.835866][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.844922][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.853126][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.866705][ T8830] bond1: (slave veth3): Releasing active interface [ 130.881648][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 130.916655][ T6832] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.926152][ T6832] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.941918][ T6832] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.950853][ T6832] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.234494][ T5231] udevd[5231]: worker [5872] terminated by signal 33 (Unknown signal 33) [ 131.244964][ T5231] udevd[5231]: worker [5872] failed while handling '/devices/virtual/block/loop0' [ 131.352709][ T8862] netlink: 'syz.0.763': attribute type 12 has an invalid length. [ 131.414541][ T8864] ip6tnl2: entered promiscuous mode [ 131.419983][ T8864] ip6tnl2: entered allmulticast mode [ 131.428888][ T8864] team0: Device ip6tnl2 is of different type [ 131.495280][ T8867] tipc: Enabled bearer , priority 0 [ 131.523879][ T8867] syzkaller0: entered promiscuous mode [ 131.542414][ T8867] syzkaller0: entered allmulticast mode [ 131.581330][ T8867] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.629465][ T8867] tipc: Resetting bearer [ 131.653644][ T8866] tipc: Resetting bearer [ 131.667740][ T8866] tipc: Disabling bearer [ 131.793108][ T8884] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 131.973190][ T8895] tipc: Enabled bearer , priority 0 [ 131.988712][ T8895] syzkaller0: entered promiscuous mode [ 131.998850][ T8895] syzkaller0: entered allmulticast mode [ 132.019118][ T8895] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.030685][ T8893] tipc: Resetting bearer [ 132.064869][ T8893] tipc: Disabling bearer [ 132.825952][ T8944] __nla_validate_parse: 9 callbacks suppressed [ 132.825975][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.788'. [ 132.856232][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.790'. [ 133.238920][ T8958] netlink: 68 bytes leftover after parsing attributes in process `syz.2.794'. [ 133.293102][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.299642][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.304946][ T8961] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 133.386292][ T8967] tipc: Started in network mode [ 133.391364][ T8967] tipc: Node identity 7245f5111cf2, cluster identity 4711 [ 133.398789][ T8967] tipc: Enabled bearer , priority 0 [ 133.407879][ T8967] syzkaller0: entered promiscuous mode [ 133.414529][ T8967] syzkaller0: entered allmulticast mode [ 133.434981][ T8967] tipc: Resetting bearer [ 133.447199][ T8966] tipc: Resetting bearer [ 133.465490][ T8966] tipc: Disabling bearer [ 133.586411][ T8981] vlan0: entered promiscuous mode [ 133.598373][ T8981] lo speed is unknown, defaulting to 1000 [ 133.609796][ T8981] lo speed is unknown, defaulting to 1000 [ 133.616926][ T8981] lo speed is unknown, defaulting to 1000 [ 133.647916][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 133.766306][ T8981] infiniband syz0: set down [ 133.772221][ T980] lo speed is unknown, defaulting to 1000 [ 133.778360][ T8981] infiniband syz0: added lo [ 133.820402][ T8981] RDS/IB: syz0: added [ 133.830661][ T8981] smc: adding ib device syz0 with port count 1 [ 133.843956][ T8981] smc: ib device syz0 port 1 has pnetid [ 133.851082][ T8981] lo speed is unknown, defaulting to 1000 [ 133.857589][ T980] lo speed is unknown, defaulting to 1000 [ 133.993413][ T8981] lo speed is unknown, defaulting to 1000 [ 134.142095][ T8981] lo speed is unknown, defaulting to 1000 [ 134.274813][ T8981] lo speed is unknown, defaulting to 1000 [ 134.409941][ T8981] lo speed is unknown, defaulting to 1000 [ 134.487167][ T9057] netlink: 80 bytes leftover after parsing attributes in process `syz.2.816'. [ 134.667077][ T9075] lo speed is unknown, defaulting to 1000 [ 134.668014][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 134.675650][ T9075] lo speed is unknown, defaulting to 1000 [ 134.730938][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.823'. [ 134.811595][ T9089] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.826'. [ 134.913215][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 134.936860][ T9099] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 134.947287][ T9099] bridge9: entered allmulticast mode [ 135.058899][ T9103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.830'. [ 135.462382][ T9137] netlink: 'syz.2.838': attribute type 13 has an invalid length. [ 135.463877][ T9118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.470849][ T9137] netlink: 'syz.2.838': attribute type 17 has an invalid length. [ 135.507460][ T9118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.599739][ T9118] bridge4: left allmulticast mode [ 135.615141][ T9118] geneve2: left promiscuous mode [ 135.645273][ T9137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.674499][ T9135] sctp: [Deprecated]: syz.1.840 (pid 9135) Use of int in max_burst socket option. [ 135.674499][ T9135] Use struct sctp_assoc_value instead [ 135.691163][ T9044] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.714227][ T9044] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.737663][ T9044] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.751069][ T9044] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.761821][ T9044] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.771866][ T9044] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.794234][ T9127] lo speed is unknown, defaulting to 1000 [ 135.822147][ T9044] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.832907][ T9044] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.843978][ T9127] lo speed is unknown, defaulting to 1000 [ 136.195277][ T9174] syz_tun: entered promiscuous mode [ 136.200843][ T9174] syz_tun: entered allmulticast mode [ 136.388920][ T9190] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 136.423805][ T9190] netlink: 'syz.3.857': attribute type 99 has an invalid length. [ 136.816616][ T9218] gretap1: entered promiscuous mode [ 136.930173][ T9228] lo speed is unknown, defaulting to 1000 [ 136.937860][ T9228] lo speed is unknown, defaulting to 1000 [ 137.064918][ T9237] bond0: (slave batadv0): Releasing backup interface [ 137.073292][ T9237] batadv0: left promiscuous mode [ 137.078531][ T9237] batadv0: left allmulticast mode [ 137.085527][ T9237] bridge_slave_0: left allmulticast mode [ 137.091900][ T9237] bridge_slave_0: left promiscuous mode [ 137.097829][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.107140][ T9237] bond0: (slave bond_slave_0): Releasing backup interface [ 137.115580][ T9237] bond_slave_0: left promiscuous mode [ 137.121789][ T9237] bond_slave_0: left allmulticast mode [ 137.128354][ T9237] bond0: (slave bond_slave_1): Releasing backup interface [ 137.137945][ T9237] bond_slave_1: left promiscuous mode [ 137.145927][ T9237] bond_slave_1: left allmulticast mode [ 137.153361][ T9237] team0: Port device team_slave_0 removed [ 137.161167][ T9237] team0: Port device team_slave_1 removed [ 137.167252][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.175319][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.185133][ T9237] bond3: (slave bridge7): Releasing backup interface [ 137.192457][ T9237] bridge7: left promiscuous mode [ 137.457220][ T9201] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 137.625578][ T9259] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 137.804405][ T9275] lo speed is unknown, defaulting to 1000 [ 137.824329][ T9275] lo speed is unknown, defaulting to 1000 [ 137.882824][ T9284] __nla_validate_parse: 17 callbacks suppressed [ 137.882844][ T9284] netlink: 232 bytes leftover after parsing attributes in process `syz.2.884'. [ 137.911972][ T9287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.885'. [ 137.938036][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 138.061240][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 138.094941][ T9296] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 138.103129][ T9296] netlink: 'syz.3.887': attribute type 2 has an invalid length. [ 138.279767][ T9309] block nbd1: Unsupported socket: shutdown callout must be supported. [ 138.409501][ T9316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.893'. [ 138.447366][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 138.456991][ T9317] netlink: 'syz.2.893': attribute type 30 has an invalid length. [ 138.477105][ T9042] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.487189][ T9042] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.505222][ T9042] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.519413][ T9042] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.555589][ T9324] netlink: 96 bytes leftover after parsing attributes in process `syz.2.895'. [ 138.625270][ T9327] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.637478][ T9327] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.702458][ T9327] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.715657][ T9327] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.791722][ T9327] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.803655][ T9327] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.860703][ T9327] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.888727][ T9327] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.019295][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 139.022118][ T9044] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.029186][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 139.039967][ T9044] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.073440][ T9044] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.081907][ T9044] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.102916][ T9044] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.115050][ T9044] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.123736][ T9044] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.132744][ T9044] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.162795][ T9342] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 139.255226][ T9353] lo: entered allmulticast mode [ 139.266773][ T9354] netlink: 64 bytes leftover after parsing attributes in process `syz.1.902'. [ 139.273091][ T9352] lo: left allmulticast mode [ 139.285473][ T9354] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 139.453830][ T9358] veth1_to_bridge: left promiscuous mode [ 139.663639][ T9358] geneve2: left promiscuous mode [ 139.710133][ T8154] lo speed is unknown, defaulting to 1000 [ 139.733988][ T8154] syz1: Port: 1 Link DOWN [ 139.783150][ T9042] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.813893][ T9042] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.842163][ T9042] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.874650][ T9042] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.896630][ T9042] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.917933][ T9042] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.946387][ T9356] lo speed is unknown, defaulting to 1000 [ 139.955473][ T9373] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 139.991438][ T9042] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.019388][ T9042] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.051854][ T9042] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.081263][ T9356] lo speed is unknown, defaulting to 1000 [ 140.095338][ T9042] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.115148][ T9042] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.127628][ T9384] netlink: 'syz.1.910': attribute type 6 has an invalid length. [ 140.138227][ T9042] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.237579][ T9389] syzkaller1: entered promiscuous mode [ 140.265197][ T9389] syzkaller1: entered allmulticast mode [ 140.362346][ T9397] macsec1: entered promiscuous mode [ 140.367991][ T9397] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 140.375974][ T9397] macsec1: entered allmulticast mode [ 140.382668][ T9397] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 140.686663][ T9422] sctp: [Deprecated]: syz.0.922 (pid 9422) Use of int in max_burst socket option. [ 140.686663][ T9422] Use struct sctp_assoc_value instead [ 140.800035][ T9429] syzkaller0: entered promiscuous mode [ 140.808216][ T9429] syzkaller0: entered allmulticast mode [ 141.086528][ T9451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.335293][ T9465] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 141.771140][ T9499] lo speed is unknown, defaulting to 1000 [ 141.777697][ T9499] lo speed is unknown, defaulting to 1000 [ 142.241302][ T9504] tipc: Enabled bearer , priority 0 [ 142.248859][ T9504] syzkaller0: entered promiscuous mode [ 142.261034][ T9504] syzkaller0: entered allmulticast mode [ 142.275194][ T9504] tipc: Resetting bearer [ 142.293276][ T9503] tipc: Resetting bearer [ 142.318914][ T9503] tipc: Disabling bearer [ 142.470954][ T9508] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 142.898647][ T9524] lo speed is unknown, defaulting to 1000 [ 142.929298][ T9524] lo speed is unknown, defaulting to 1000 [ 143.157594][ T9532] lo speed is unknown, defaulting to 1000 [ 143.219300][ T9532] lo speed is unknown, defaulting to 1000 [ 143.370867][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 143.383101][ T9511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 143.538561][ T9555] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 143.612455][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 144.046626][ T9584] __nla_validate_parse: 11 callbacks suppressed [ 144.046647][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.970'. [ 144.082352][ T9584] batman_adv: batadv0: Adding interface: dummy0 [ 144.093575][ T9584] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.120570][ T9584] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 144.138472][ T9591] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 144.152113][ T9591] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 144.172173][ T9589] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 144.195118][ T9584] batman_adv: batadv0: Adding interface: ip6gretap1 [ 144.205011][ T9584] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.232770][ T9584] batman_adv: batadv0: Interface activated: ip6gretap1 [ 144.298437][ T9591] syzkaller0: mtu less than device minimum [ 144.307051][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 144.337142][ T8157] IPVS: starting estimator thread 0... [ 144.348749][ T9599] netlink: 128 bytes leftover after parsing attributes in process `syz.4.975'. [ 144.367068][ T9029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.390084][ T9029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.440644][ T9603] IPVS: using max 38 ests per chain, 91200 per kthread [ 144.454454][ T9605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.976'. [ 144.486322][ T9599] syz.4.975 (9599) used greatest stack depth: 17992 bytes left [ 144.508363][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 144.575902][ T9610] lo speed is unknown, defaulting to 1000 [ 144.583105][ T9610] lo speed is unknown, defaulting to 1000 [ 144.633328][ T9611] lo speed is unknown, defaulting to 1000 [ 144.665498][ T9611] lo speed is unknown, defaulting to 1000 [ 144.925656][ T9624] tipc: Enabled bearer , priority 0 [ 144.963977][ T9624] syzkaller0: entered promiscuous mode [ 144.970003][ T9624] syzkaller0: entered allmulticast mode [ 144.977614][ T9624] tipc: Resetting bearer [ 145.001754][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.978'. [ 145.025328][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'. [ 145.039521][ T9621] tipc: Resetting bearer [ 145.098666][ T9611] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 145.185541][ T9621] tipc: Disabling bearer [ 145.214130][ T9629] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.360409][ T9645] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 145.393473][ T9645] netlink: 2 bytes leftover after parsing attributes in process `syz.0.989'. [ 145.394766][ T9643] netlink: 'syz.2.988': attribute type 21 has an invalid length. [ 145.405025][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 145.484367][ T9645] team0: entered promiscuous mode [ 145.499268][ T9645] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.588129][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.992'. [ 145.740850][ T9666] ipvlan2: entered promiscuous mode [ 145.746846][ T9666] ipvlan2: entered allmulticast mode [ 145.753283][ T9666] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 145.825187][ T9044] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.846353][ T9044] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.869506][ T9044] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.888556][ T9044] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.250405][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 153.130996][ T55] block nbd0: Possible stuck request ffff8880250e5080: control (read@0,1024B). Runtime 30 seconds [ 153.142180][ T55] block nbd0: Possible stuck request ffff8880250e5240: control (read@1024,1024B). Runtime 30 seconds [ 153.153833][ T55] block nbd0: Possible stuck request ffff8880250e5400: control (read@2048,1024B). Runtime 30 seconds [ 153.166100][ T55] block nbd0: Possible stuck request ffff8880250e55c0: control (read@3072,1024B). Runtime 30 seconds [ 183.211180][ T55] block nbd0: Possible stuck request ffff8880250e5080: control (read@0,1024B). Runtime 60 seconds [ 183.223214][ T55] block nbd0: Possible stuck request ffff8880250e5240: control (read@1024,1024B). Runtime 60 seconds [ 183.234301][ T55] block nbd0: Possible stuck request ffff8880250e5400: control (read@2048,1024B). Runtime 60 seconds [ 183.245432][ T55] block nbd0: Possible stuck request ffff8880250e55c0: control (read@3072,1024B). Runtime 60 seconds [ 191.690696][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 191.690723][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 191.696996][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 194.733087][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.740876][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.028748][ T9696] __nla_validate_parse: 1 callbacks suppressed [ 210.028768][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1005'. [ 210.061317][ T9700] lo speed is unknown, defaulting to 1000 [ 210.068097][ T9700] lo speed is unknown, defaulting to 1000 [ 210.133943][ T9703] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 210.157436][ T9703] team0: Device dummy0 failed to register rx_handler [ 210.186307][ T9696] lo speed is unknown, defaulting to 1000 [ 210.187524][ T9703] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 210.193879][ T9698] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 210.626071][ T9714] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1009'. [ 210.704101][ T9696] lo speed is unknown, defaulting to 1000 [ 211.301125][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 211.348782][ T9700] netlink: 'syz.4.1007': attribute type 13 has an invalid length. [ 211.359196][ T9700] netlink: 'syz.4.1007': attribute type 17 has an invalid length. [ 211.429244][ T9700] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 211.448059][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 211.586329][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'. [ 211.682569][ T9726] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 211.729256][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 211.823266][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 211.855538][ T9738] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1015'. [ 211.904525][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1015'. [ 211.946735][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 211.990460][ T9746] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 212.016203][ T9746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.035897][ T9746] bond4: (slave geneve3): making interface the new active one [ 212.045255][ T9746] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 212.207548][ T9767] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.252172][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 212.259557][ T9709] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 212.262160][ T9767] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.338506][ T9767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.418280][ T9767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.560866][ T9041] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 212.569304][ T9041] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 212.580746][ T9780] sctp: [Deprecated]: syz.0.1028 (pid 9780) Use of int in maxseg socket option. [ 212.580746][ T9780] Use struct sctp_assoc_value instead [ 212.582478][ T9041] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 212.606219][ T9041] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 212.679574][ T9784] netlink: 'syz.2.1029': attribute type 9 has an invalid length. [ 212.740920][ T9788] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 213.047267][ T9795] lo speed is unknown, defaulting to 1000 [ 213.062085][ T9795] lo speed is unknown, defaulting to 1000 [ 213.300643][ T9757] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.318900][ T55] block nbd0: Possible stuck request ffff8880250e5080: control (read@0,1024B). Runtime 90 seconds [ 213.337116][ T55] block nbd0: Possible stuck request ffff8880250e5240: control (read@1024,1024B). Runtime 90 seconds [ 213.348941][ T55] block nbd0: Possible stuck request ffff8880250e5400: control (read@2048,1024B). Runtime 90 seconds [ 213.360632][ T55] block nbd0: Possible stuck request ffff8880250e55c0: control (read@3072,1024B). Runtime 90 seconds [ 213.473858][ T980] IPVS: starting estimator thread 0... [ 213.539275][ T9826] lo speed is unknown, defaulting to 1000 [ 213.575186][ T9826] lo speed is unknown, defaulting to 1000 [ 213.591498][ T9822] IPVS: using max 38 ests per chain, 91200 per kthread [ 214.085680][ T9847] bond0: entered promiscuous mode [ 214.092045][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.105489][ T9847] bond0 (unregistering): Released all slaves [ 214.134877][ T9848] tipc: Enabled bearer , priority 0 [ 214.157265][ T9848] tipc: Resetting bearer [ 214.389902][ T9860] netdevsim netdevsim4: Direct firmware load for Z@¦Š‹Â'=‡Ñy‹øƒè»S"}?ªGlAò»a^îv;監u´—bÝ TÂ,ƒqêZV;“ failed with error -2 [ 214.449494][ T9860] netdevsim netdevsim4: Falling back to sysfs fallback for: Z@¦Š‹Â'=‡Ñy‹øƒè»S"}?ªGlAò»a^îv;監u´—bÝ TÂ,ƒqêZV;“ [ 214.526125][ T9871] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 214.588346][ T9871] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 214.619747][ T9871] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 214.693743][ T9871] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 214.726365][ T9879] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 214.785455][ T9041] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 214.820076][ T9042] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 214.833461][ T9042] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 214.851292][ T9042] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 215.045433][ T9893] IPVS: length: 49 != 24 [ 215.051990][ T9893] __nla_validate_parse: 13 callbacks suppressed [ 215.052008][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 215.140812][ T980] tipc: Node number set to 2183528009 [ 215.237393][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 215.600194][ T9923] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1067'. [ 215.753830][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 215.776953][ T9934] macvlan2: entered promiscuous mode [ 215.783221][ T9934] macvlan2: entered allmulticast mode [ 215.789225][ T9934] bond0: (slave macvlan2): Opening slave failed [ 215.872839][ T9941] tipc: Enabled bearer , priority 0 [ 215.881210][ T9941] syzkaller0: entered promiscuous mode [ 215.886779][ T9941] syzkaller0: entered allmulticast mode [ 215.898507][ T9943] lo speed is unknown, defaulting to 1000 [ 215.905238][ T9941] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 215.913946][ T9943] lo speed is unknown, defaulting to 1000 [ 215.923081][ T9941] tipc: Resetting bearer [ 215.937028][ T9941] tipc: Resetting bearer [ 215.955295][ T9941] tipc: Disabling bearer [ 216.079080][ T9947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.079080][ T9946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.138672][ T9943] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1072'. [ 216.455861][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 216.495039][ T9972] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 216.519026][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 216.556157][ T9972] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 216.635471][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 216.672674][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 216.688392][ T9984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'. [ 216.745307][ T9988] gretap2: entered allmulticast mode [ 216.746647][ T9992] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 216.772471][ T9992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.795920][ T9992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.803606][ T9992] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 216.816204][ T9992] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 216.823855][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 216.830756][ T9912] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 216.858107][ T9996] macvlan2: entered promiscuous mode [ 216.865608][ T9996] macvlan2: entered allmulticast mode [ 216.872587][ T9996] bond4: entered promiscuous mode [ 216.878458][ T9996] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.892372][ T9996] bond4: left promiscuous mode [ 217.437909][T10024] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 217.578432][T10029] lo speed is unknown, defaulting to 1000 [ 217.605499][T10029] lo speed is unknown, defaulting to 1000 [ 217.688382][T10035] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 217.734209][T10044] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 218.310521][T10054] ÿ: renamed from bond_slave_0 [ 218.553891][T10073] netlink: 'syz.2.1109': attribute type 21 has an invalid length. [ 218.586020][T10076] netlink: 'syz.2.1109': attribute type 21 has an invalid length. [ 218.757653][T10074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.778961][T10074] bond0: (slave rose0): Enslaving as an active interface with an up link [ 218.956972][T10090] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 219.115883][T10098] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 219.143841][T10098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.770835][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 219.928461][T10156] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 219.953324][T10165] syz_tun: entered allmulticast mode [ 219.984426][T10165] syz_tun (unregistering): left allmulticast mode [ 220.091176][T10172] netlink: 'syz.0.1134': attribute type 11 has an invalid length. [ 220.096613][T10168] lo speed is unknown, defaulting to 1000 [ 220.106940][T10168] lo speed is unknown, defaulting to 1000 [ 220.125608][T10170] tipc: Enabling of bearer rejected, media not registered [ 220.141027][T10167] lo speed is unknown, defaulting to 1000 [ 220.233348][T10178] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 220.247314][T10178] team0: left promiscuous mode [ 220.386310][T10188] __nla_validate_parse: 22 callbacks suppressed [ 220.386333][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 220.437199][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 220.469733][T10167] lo speed is unknown, defaulting to 1000 [ 220.505423][T10192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1141'. [ 220.560625][T10195] netlink: 416 bytes leftover after parsing attributes in process `syz.2.1143'. [ 220.618667][T10195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1143'. [ 220.654140][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 220.688416][T10204] netlink: 'syz.0.1146': attribute type 4 has an invalid length. [ 220.739204][T10211] netlink: 'syz.0.1146': attribute type 4 has an invalid length. [ 220.835140][ T980] lo speed is unknown, defaulting to 1000 [ 220.854509][ T8163] lo speed is unknown, defaulting to 1000 [ 220.956069][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 221.290965][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 221.626445][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 221.743408][T10244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1156'. [ 221.836826][T10247] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20003 [ 222.010312][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 222.016988][T10200] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 222.634906][T10296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.647028][T10296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.705847][T10296] bond0: (slave batadv0): Releasing backup interface [ 223.277650][T10326] netlink: 'syz.4.1180': attribute type 7 has an invalid length. [ 223.522092][T10346] lo speed is unknown, defaulting to 1000 [ 223.529632][T10346] lo speed is unknown, defaulting to 1000 [ 223.565103][T10349] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 224.481384][T10414] bond2: left promiscuous mode [ 224.511371][T10414] bridge6: left allmulticast mode [ 224.525397][T10414] bond3: left promiscuous mode [ 224.543577][T10414] ip6erspan0: left allmulticast mode [ 224.561563][T10414] hsr1: left promiscuous mode [ 224.566321][T10414] hsr1: left allmulticast mode [ 224.582447][T10414] bond0: left allmulticast mode [ 224.610568][T10414] dummy0: left allmulticast mode [ 224.628655][T10414] bridge9: left allmulticast mode [ 224.645511][T10427] @ÿþ€: renamed from veth0_vlan [ 224.683671][T10420] tipc: Resetting bearer [ 224.703046][T10420] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 224.714140][T10420] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 224.724337][T10420] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 224.735101][T10420] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 224.744411][T10420] macsec1: left promiscuous mode [ 224.749898][T10420] macsec1: left allmulticast mode [ 225.617557][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 230.326993][ T9044] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.338268][ T9044] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.358507][ T9044] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.371227][ T9045] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.391131][T10474] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 230.398915][T10474] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 230.406570][T10476] __nla_validate_parse: 14 callbacks suppressed [ 230.406591][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 230.410096][T10474] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 230.570178][T10488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1218'. [ 230.606422][T10488] netlink: 4352 bytes leftover after parsing attributes in process `syz.3.1218'. [ 230.672450][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 230.694926][T10494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1225'. [ 230.717489][T10492] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 230.750926][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 230.769550][T10487] lo speed is unknown, defaulting to 1000 [ 230.776782][T10487] lo speed is unknown, defaulting to 1000 [ 230.868758][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 230.993347][T10505] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 231.037496][T10503] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 231.145522][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 231.263919][T10520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1231'. [ 231.317359][T10525] netlink: 'syz.2.1233': attribute type 1 has an invalid length. [ 231.346400][T10525] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 231.357366][T10528] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 231.402964][T10532] siw: device registration error -23 [ 231.412645][T10528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.445062][T10535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.467801][T10535] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.483977][T10535] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 231.757132][T10546] syzkaller1: entered allmulticast mode [ 231.798632][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 231.812921][T10549] lo speed is unknown, defaulting to 1000 [ 231.839773][T10552] gtp0: entered promiscuous mode [ 231.846785][T10549] lo speed is unknown, defaulting to 1000 [ 232.304643][T10579] rdma_op ffff88807ecaf1f0 conn xmit_rdma 0000000000000000 [ 233.072122][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 233.093147][T10522] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.231802][T10634] lo speed is unknown, defaulting to 1000 [ 233.239281][T10634] lo speed is unknown, defaulting to 1000 [ 233.338625][T10646] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 233.458291][T10646] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 233.572233][T10652] macsec0: entered promiscuous mode [ 233.577602][T10652] team0: entered promiscuous mode [ 233.585693][T10652] team_slave_0: entered promiscuous mode [ 233.592251][T10652] team_slave_1: entered promiscuous mode [ 234.075700][T10681] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 234.105920][T10681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.114616][T10681] bond5: (slave bond6): making interface the new active one [ 234.123822][T10681] bond5: (slave bond6): Enslaving as an active interface with an up link [ 234.176319][T10681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.207624][T10687] netlink: 'syz.0.1279': attribute type 4 has an invalid length. [ 234.639476][T10698] openvswitch: netlink: Actions may not be safe on all matching packets [ 234.816725][T10708] tipc: Enabling of bearer rejected, failed to enable media [ 234.941163][T10719] netlink: 'syz.2.1290': attribute type 11 has an invalid length. [ 235.079638][T10727] 8021q: VLANs not supported on ip6_vti0 [ 235.143492][T10734] vlan0: entered promiscuous mode [ 235.153676][T10735] tipc: Enabling of bearer rejected, failed to enable media [ 235.333635][T10743] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.361290][T10469] IPVS: starting estimator thread 0... [ 235.450383][T10747] IPVS: using max 47 ests per chain, 112800 per kthread [ 235.527845][T10755] bond5: (slave bond6): Releasing backup interface [ 235.637562][T10759] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 235.648193][T10759] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 235.651082][T10761] __nla_validate_parse: 25 callbacks suppressed [ 235.651102][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 235.869122][T10778] netlink: 'syz.3.1309': attribute type 12 has an invalid length. [ 236.200698][T10789] syz0: rxe_newlink: already configured on lo [ 236.245531][T10788] lo speed is unknown, defaulting to 1000 [ 236.256182][T10788] lo speed is unknown, defaulting to 1000 [ 236.363374][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1316'. [ 236.461287][T10801] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 236.638004][T10814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1321'. [ 236.673301][T10822] syzkaller0: entered promiscuous mode [ 236.679056][T10822] syzkaller0: entered allmulticast mode [ 236.703431][T10814] block nbd1: server does not support multiple connections per device. [ 236.712511][T10814] block nbd1: shutting down sockets [ 236.719909][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 236.963993][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 236.985342][T10842] macsec0: entered promiscuous mode [ 236.991063][T10842] bond0: entered promiscuous mode [ 236.996277][ T30] audit: type=1107 audit(1756173951.927:4): pid=10843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 237.012262][T10842] bond0: left promiscuous mode [ 237.190580][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 237.199837][T10857] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1336'. [ 237.298236][T10872] tipc: Enabled bearer , priority 0 [ 237.309374][T10872] syzkaller0: entered promiscuous mode [ 237.315200][T10872] syzkaller0: entered allmulticast mode [ 237.326732][T10872] tipc: Resetting bearer [ 237.334390][T10871] tipc: Resetting bearer [ 237.342179][T10871] tipc: Disabling bearer [ 237.749580][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 237.943657][T10910] FAULT_INJECTION: forcing a failure. [ 237.943657][T10910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.958502][T10910] CPU: 0 UID: 0 PID: 10910 Comm: syz.2.1350 Not tainted syzkaller #0 PREEMPT(full) [ 237.958532][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.958544][T10910] Call Trace: [ 237.958551][T10910] [ 237.958559][T10910] dump_stack_lvl+0x189/0x250 [ 237.958590][T10910] ? __pfx____ratelimit+0x10/0x10 [ 237.958674][T10910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.958696][T10910] ? __pfx__printk+0x10/0x10 [ 237.958726][T10910] ? rcu_is_watching+0x15/0xb0 [ 237.958747][T10910] should_fail_ex+0x414/0x560 [ 237.958773][T10910] _copy_to_user+0x31/0xb0 [ 237.958796][T10910] simple_read_from_buffer+0xe1/0x170 [ 237.958827][T10910] proc_fail_nth_read+0x1b3/0x220 [ 237.958850][T10910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.958874][T10910] ? rw_verify_area+0x2a6/0x4d0 [ 237.958897][T10910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.958919][T10910] vfs_read+0x1fd/0xa30 [ 237.958942][T10910] ? fdget_pos+0x247/0x320 [ 237.958961][T10910] ? __pfx___mutex_lock+0x10/0x10 [ 237.958979][T10910] ? __pfx_vfs_read+0x10/0x10 [ 237.959008][T10910] ? __fget_files+0x3a0/0x420 [ 237.959023][T10910] ? __fget_files+0x2a/0x420 [ 237.959044][T10910] ksys_read+0x145/0x250 [ 237.959069][T10910] ? __pfx_ksys_read+0x10/0x10 [ 237.959096][T10910] ? rcu_is_watching+0x15/0xb0 [ 237.959115][T10910] do_syscall_64+0xfa/0x3b0 [ 237.959133][T10910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.959151][T10910] ? clear_bhb_loop+0x60/0xb0 [ 237.959172][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.959192][T10910] RIP: 0033:0x7f9b1b98d5fc [ 237.959210][T10910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 237.959228][T10910] RSP: 002b:00007f9b1c8db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.959251][T10910] RAX: ffffffffffffffda RBX: 00007f9b1bbb5fa0 RCX: 00007f9b1b98d5fc [ 237.959267][T10910] RDX: 000000000000000f RSI: 00007f9b1c8db0a0 RDI: 0000000000000004 [ 237.959279][T10910] RBP: 00007f9b1c8db090 R08: 0000000000000000 R09: 0000000000000000 [ 237.959291][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.959303][T10910] R13: 00007f9b1bbb6038 R14: 00007f9b1bbb5fa0 R15: 00007ffeedc1acd8 [ 237.959325][T10910] [ 238.346462][T10932] openvswitch: netlink: Flow key attr not present in new flow. [ 238.367720][T10933] gtp0: entered promiscuous mode [ 238.375406][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 238.490523][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 238.497819][T10850] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 238.517166][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 238.857157][T10969] netlink: 'syz.1.1363': attribute type 16 has an invalid length. [ 238.865938][T10969] netlink: 'syz.1.1363': attribute type 17 has an invalid length. [ 238.890433][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 238.920425][T10969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.929024][T10969] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.943771][T10969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.253368][T10990] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 239.264071][T10937] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 239.388616][T11001] FAULT_INJECTION: forcing a failure. [ 239.388616][T11001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.402620][T11001] CPU: 0 UID: 0 PID: 11001 Comm: syz.3.1379 Not tainted syzkaller #0 PREEMPT(full) [ 239.402650][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.402662][T11001] Call Trace: [ 239.402669][T11001] [ 239.402676][T11001] dump_stack_lvl+0x189/0x250 [ 239.402702][T11001] ? __pfx____ratelimit+0x10/0x10 [ 239.402784][T11001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.402801][T11001] ? __pfx__printk+0x10/0x10 [ 239.402816][T11001] ? __might_fault+0xb0/0x130 [ 239.402833][T11001] ? rcu_is_watching+0x15/0xb0 [ 239.402845][T11001] should_fail_ex+0x414/0x560 [ 239.402862][T11001] _copy_from_user+0x2d/0xb0 [ 239.402876][T11001] ___sys_sendmsg+0x158/0x2a0 [ 239.402890][T11001] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.402911][T11001] ? __fget_files+0x2a/0x420 [ 239.402920][T11001] ? __fget_files+0x3a0/0x420 [ 239.402932][T11001] __x64_sys_sendmsg+0x19b/0x260 [ 239.402945][T11001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.402960][T11001] ? __pfx_ksys_write+0x10/0x10 [ 239.402976][T11001] ? rcu_is_watching+0x15/0xb0 [ 239.402987][T11001] do_syscall_64+0xfa/0x3b0 [ 239.402998][T11001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.403010][T11001] ? clear_bhb_loop+0x60/0xb0 [ 239.403023][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.403034][T11001] RIP: 0033:0x7fa5e2b8ebe9 [ 239.403047][T11001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.403057][T11001] RSP: 002b:00007fa5e0dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.403072][T11001] RAX: ffffffffffffffda RBX: 00007fa5e2db5fa0 RCX: 00007fa5e2b8ebe9 [ 239.403086][T11001] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 239.403094][T11001] RBP: 00007fa5e0dee090 R08: 0000000000000000 R09: 0000000000000000 [ 239.403102][T11001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.403109][T11001] R13: 00007fa5e2db6038 R14: 00007fa5e2db5fa0 R15: 00007ffebf7dbb98 [ 239.403122][T11001] [ 239.622680][T11004] lo speed is unknown, defaulting to 1000 [ 239.629481][T11004] lo speed is unknown, defaulting to 1000 [ 239.722656][T11007] bridge7: entered promiscuous mode [ 240.078143][T11023] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 240.209092][T11038] FAULT_INJECTION: forcing a failure. [ 240.209092][T11038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.224317][T11038] CPU: 1 UID: 0 PID: 11038 Comm: syz.3.1391 Not tainted syzkaller #0 PREEMPT(full) [ 240.224347][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.224359][T11038] Call Trace: [ 240.224366][T11038] [ 240.224374][T11038] dump_stack_lvl+0x189/0x250 [ 240.224402][T11038] ? __pfx____ratelimit+0x10/0x10 [ 240.224429][T11038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.224451][T11038] ? __pfx__printk+0x10/0x10 [ 240.224473][T11038] ? rcu_is_watching+0x15/0xb0 [ 240.224492][T11038] ? lock_acquire+0x5f/0x360 [ 240.224518][T11038] ? __might_fault+0xb0/0x130 [ 240.224543][T11038] ? rcu_is_watching+0x15/0xb0 [ 240.224563][T11038] should_fail_ex+0x414/0x560 [ 240.224605][T11038] _copy_from_user+0x2d/0xb0 [ 240.224629][T11038] __copy_msghdr+0x3c5/0x5b0 [ 240.224651][T11038] ___sys_sendmsg+0x1a5/0x2a0 [ 240.224672][T11038] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.224706][T11038] ? __fget_files+0x2a/0x420 [ 240.224722][T11038] ? __fget_files+0x3a0/0x420 [ 240.224741][T11038] __x64_sys_sendmsg+0x19b/0x260 [ 240.224760][T11038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.224785][T11038] ? __pfx_ksys_write+0x10/0x10 [ 240.224811][T11038] ? rcu_is_watching+0x15/0xb0 [ 240.224828][T11038] do_syscall_64+0xfa/0x3b0 [ 240.224845][T11038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.224863][T11038] ? clear_bhb_loop+0x60/0xb0 [ 240.224883][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.224899][T11038] RIP: 0033:0x7fa5e2b8ebe9 [ 240.224916][T11038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.224932][T11038] RSP: 002b:00007fa5e0dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.224954][T11038] RAX: ffffffffffffffda RBX: 00007fa5e2db5fa0 RCX: 00007fa5e2b8ebe9 [ 240.224968][T11038] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 240.224981][T11038] RBP: 00007fa5e0dee090 R08: 0000000000000000 R09: 0000000000000000 [ 240.224992][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.225003][T11038] R13: 00007fa5e2db6038 R14: 00007fa5e2db5fa0 R15: 00007ffebf7dbb98 [ 240.225024][T11038] [ 240.724494][T11056] __nla_validate_parse: 8 callbacks suppressed [ 240.724523][T11056] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1395'. [ 240.934950][T11065] batman_adv: batadv0: Adding interface: ip6gretap1 [ 240.956372][T11065] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.984211][T11065] batman_adv: batadv0: Interface activated: ip6gretap1 [ 241.160788][T11086] nbd1: detected capacity change from 0 to 63 [ 241.169432][T11090] FAULT_INJECTION: forcing a failure. [ 241.169432][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 241.190703][ T51] block nbd1: Receive control failed (result -32) [ 241.219142][T11090] CPU: 0 UID: 0 PID: 11090 Comm: syz.0.1406 Not tainted syzkaller #0 PREEMPT(full) [ 241.219173][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.219183][T11090] Call Trace: [ 241.219191][T11090] [ 241.219198][T11090] dump_stack_lvl+0x189/0x250 [ 241.219225][T11090] ? __pfx____ratelimit+0x10/0x10 [ 241.219252][T11090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.219273][T11090] ? __pfx__printk+0x10/0x10 [ 241.219298][T11090] ? fs_reclaim_acquire+0x7d/0x100 [ 241.219326][T11090] ? rcu_is_watching+0x15/0xb0 [ 241.219343][T11090] ? __pfx___might_resched+0x10/0x10 [ 241.219360][T11090] ? lock_acquire+0x5f/0x360 [ 241.219387][T11090] should_fail_ex+0x414/0x560 [ 241.219414][T11090] should_failslab+0xa8/0x100 [ 241.219441][T11090] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.219465][T11090] ? security_capable+0x7e/0x2e0 [ 241.219501][T11090] ? __alloc_skb+0x112/0x2d0 [ 241.219520][T11090] __alloc_skb+0x112/0x2d0 [ 241.219537][T11090] netlink_sendmsg+0x5c6/0xb30 [ 241.219560][T11090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.219578][T11090] ? aa_sock_msg_perm+0xf1/0x1d0 [ 241.219596][T11090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.219617][T11090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.219635][T11090] __sock_sendmsg+0x21c/0x270 [ 241.219661][T11090] ____sys_sendmsg+0x505/0x830 [ 241.219683][T11090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.219701][T11090] ? __might_fault+0xb0/0x130 [ 241.219730][T11090] ? import_iovec+0x74/0xa0 [ 241.219752][T11090] ___sys_sendmsg+0x21f/0x2a0 [ 241.219773][T11090] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.219808][T11090] ? __fget_files+0x2a/0x420 [ 241.219824][T11090] ? __fget_files+0x3a0/0x420 [ 241.219845][T11090] __x64_sys_sendmsg+0x19b/0x260 [ 241.219867][T11090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.219892][T11090] ? __pfx_ksys_write+0x10/0x10 [ 241.219915][T11090] ? rcu_is_watching+0x15/0xb0 [ 241.219936][T11090] ? rcu_is_watching+0x15/0xb0 [ 241.219955][T11090] do_syscall_64+0xfa/0x3b0 [ 241.219974][T11090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.219993][T11090] ? clear_bhb_loop+0x60/0xb0 [ 241.220013][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.220031][T11090] RIP: 0033:0x7ff7ee98ebe9 [ 241.220049][T11090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.220066][T11090] RSP: 002b:00007ff7ef7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.220089][T11090] RAX: ffffffffffffffda RBX: 00007ff7eebb5fa0 RCX: 00007ff7ee98ebe9 [ 241.220104][T11090] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 241.220117][T11090] RBP: 00007ff7ef7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 241.220129][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.220141][T11090] R13: 00007ff7eebb6038 R14: 00007ff7eebb5fa0 R15: 00007ffc17547e58 [ 241.220163][T11090] [ 241.538767][T11094] _ÐZ`Ô€@: entered promiscuous mode [ 241.632487][T11111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1411'. [ 241.660752][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1411'. [ 241.837540][T11133] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1418'. [ 241.842791][T11132] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1418'. [ 241.858866][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1418'. [ 241.859461][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 241.915184][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1417'. [ 241.962207][T11138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.006079][T11144] netlink: 'syz.0.1419': attribute type 11 has an invalid length. [ 242.095479][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 242.134024][T11145] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 242.246452][T11153] _ÐZ`Ô€@S: entered promiscuous mode [ 242.331573][T11160] tipc: Enabled bearer , priority 0 [ 242.339532][T11160] syzkaller0: entered promiscuous mode [ 242.345495][T11160] syzkaller0: entered allmulticast mode [ 242.358697][T11160] tipc: Resetting bearer [ 242.397186][T11158] tipc: Resetting bearer [ 242.415012][T11158] tipc: Disabling bearer [ 242.578386][T11174] lo speed is unknown, defaulting to 1000 [ 242.586274][T11174] lo speed is unknown, defaulting to 1000 [ 242.593852][T11175] lo speed is unknown, defaulting to 1000 [ 242.705857][T11182] FAULT_INJECTION: forcing a failure. [ 242.705857][T11182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.742089][T11182] CPU: 0 UID: 0 PID: 11182 Comm: syz.0.1432 Not tainted syzkaller #0 PREEMPT(full) [ 242.742121][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.742133][T11182] Call Trace: [ 242.742141][T11182] [ 242.742150][T11182] dump_stack_lvl+0x189/0x250 [ 242.742178][T11182] ? __pfx____ratelimit+0x10/0x10 [ 242.742226][T11182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.742248][T11182] ? __pfx__printk+0x10/0x10 [ 242.742273][T11182] ? __might_fault+0xb0/0x130 [ 242.742301][T11182] ? rcu_is_watching+0x15/0xb0 [ 242.742322][T11182] should_fail_ex+0x414/0x560 [ 242.742349][T11182] _copy_from_iter+0x1db/0x16f0 [ 242.742371][T11182] ? rcu_is_watching+0x15/0xb0 [ 242.742390][T11182] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 242.742417][T11182] ? __pfx__copy_from_iter+0x10/0x10 [ 242.742445][T11182] ? __build_skb_around+0x257/0x3e0 [ 242.742476][T11182] ? netlink_sendmsg+0x642/0xb30 [ 242.742493][T11182] ? skb_put+0x11b/0x210 [ 242.742512][T11182] netlink_sendmsg+0x6b2/0xb30 [ 242.742534][T11182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.742562][T11182] ? aa_sock_msg_perm+0xf1/0x1d0 [ 242.742582][T11182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.742602][T11182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.742620][T11182] __sock_sendmsg+0x21c/0x270 [ 242.742647][T11182] ____sys_sendmsg+0x505/0x830 [ 242.742670][T11182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.742688][T11182] ? __might_fault+0xb0/0x130 [ 242.742716][T11182] ? import_iovec+0x74/0xa0 [ 242.742739][T11182] ___sys_sendmsg+0x21f/0x2a0 [ 242.742760][T11182] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.742799][T11182] ? __fget_files+0x2a/0x420 [ 242.742815][T11182] ? __fget_files+0x3a0/0x420 [ 242.742837][T11182] __x64_sys_sendmsg+0x19b/0x260 [ 242.742858][T11182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.742882][T11182] ? __pfx_ksys_write+0x10/0x10 [ 242.742905][T11182] ? rcu_is_watching+0x15/0xb0 [ 242.742925][T11182] ? rcu_is_watching+0x15/0xb0 [ 242.742943][T11182] do_syscall_64+0xfa/0x3b0 [ 242.742962][T11182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.742981][T11182] ? clear_bhb_loop+0x60/0xb0 [ 242.743003][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.743022][T11182] RIP: 0033:0x7ff7ee98ebe9 [ 242.743039][T11182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.743058][T11182] RSP: 002b:00007ff7ef7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.743081][T11182] RAX: ffffffffffffffda RBX: 00007ff7eebb5fa0 RCX: 00007ff7ee98ebe9 [ 242.743097][T11182] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 242.743110][T11182] RBP: 00007ff7ef7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 242.743122][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.743134][T11182] R13: 00007ff7eebb6038 R14: 00007ff7eebb5fa0 R15: 00007ffc17547e58 [ 242.743158][T11182] [ 242.744683][T11175] lo speed is unknown, defaulting to 1000 [ 243.284028][T11199] veth2: entered promiscuous mode [ 243.290463][T11199] veth2: entered allmulticast mode [ 243.383197][ T55] block nbd0: Possible stuck request ffff8880250e5080: control (read@0,1024B). Runtime 120 seconds [ 243.394350][ T55] block nbd0: Possible stuck request ffff8880250e5240: control (read@1024,1024B). Runtime 120 seconds [ 243.405809][ T55] block nbd0: Possible stuck request ffff8880250e5400: control (read@2048,1024B). Runtime 120 seconds [ 243.417051][ T55] block nbd0: Possible stuck request ffff8880250e55c0: control (read@3072,1024B). Runtime 120 seconds [ 243.649257][T11228] tipc: Started in network mode [ 243.655424][T11228] tipc: Node identity ac1414aa, cluster identity 4711 [ 243.692939][T11228] tipc: Enabling of bearer rejected, failed to enable media [ 243.933916][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 243.965584][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'. [ 244.004525][T11242] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 244.170389][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.177255][T11254] lo speed is unknown, defaulting to 1000 [ 244.206841][T11254] lo speed is unknown, defaulting to 1000 [ 244.207429][T11249] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 244.254007][T11263] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 244.393470][T11277] tipc: Enabled bearer , priority 0 [ 244.419524][T11281] lo speed is unknown, defaulting to 1000 [ 244.440995][T11281] lo speed is unknown, defaulting to 1000 [ 244.447088][T11275] tipc: Resetting bearer [ 244.493724][T11275] tipc: Disabling bearer [ 244.541111][T11281] lo speed is unknown, defaulting to 1000 [ 244.602537][T11281] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 244.663340][T11281] lo speed is unknown, defaulting to 1000 [ 244.698087][T11281] lo speed is unknown, defaulting to 1000 [ 244.715996][T11281] lo speed is unknown, defaulting to 1000 [ 244.726626][T11281] lo speed is unknown, defaulting to 1000 [ 244.748291][T11281] lo speed is unknown, defaulting to 1000 [ 244.839618][T11301] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 244.998460][T11315] ksmbd: Unknown IPC event: 3, ignore. [ 245.012905][T11315] sctp: [Deprecated]: syz.0.1466 (pid 11315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.012905][T11315] Use struct sctp_sack_info instead [ 245.081517][T11259] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 245.186422][T11323] ip6tnl1: entered promiscuous mode [ 245.199798][T11323] ip6tnl1: entered allmulticast mode [ 245.253611][T11323] netlink: 'syz.1.1469': attribute type 13 has an invalid length. [ 245.379311][T11323] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 245.524572][T11352] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 245.535524][T11352] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 245.616033][T11360] FAULT_INJECTION: forcing a failure. [ 245.616033][T11360] name failslab, interval 1, probability 0, space 0, times 0 [ 245.631773][T11360] CPU: 0 UID: 0 PID: 11360 Comm: syz.2.1478 Not tainted syzkaller #0 PREEMPT(full) [ 245.631802][T11360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.631815][T11360] Call Trace: [ 245.631822][T11360] [ 245.631829][T11360] dump_stack_lvl+0x189/0x250 [ 245.631858][T11360] ? __pfx____ratelimit+0x10/0x10 [ 245.631884][T11360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.631906][T11360] ? __pfx__printk+0x10/0x10 [ 245.631931][T11360] ? genl_family_rcv_msg_doit+0x267/0x300 [ 245.631956][T11360] ? __pfx___might_resched+0x10/0x10 [ 245.631972][T11360] ? lock_acquire+0x5f/0x360 [ 245.632000][T11360] should_fail_ex+0x414/0x560 [ 245.632027][T11360] should_failslab+0xa8/0x100 [ 245.632055][T11360] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 245.632081][T11360] ? __alloc_skb+0x112/0x2d0 [ 245.632099][T11360] __alloc_skb+0x112/0x2d0 [ 245.632118][T11360] netlink_ack+0x146/0xa50 [ 245.632143][T11360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.632163][T11360] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 245.632184][T11360] ? __pfx_nl80211_post_doit+0x10/0x10 [ 245.632220][T11360] ? __asan_memcpy+0x40/0x70 [ 245.632240][T11360] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.632270][T11360] netlink_rcv_skb+0x28c/0x470 [ 245.632298][T11360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.632321][T11360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.632355][T11360] ? lock_release+0x4b/0x3e0 [ 245.632385][T11360] ? down_read+0x1ad/0x2e0 [ 245.632406][T11360] genl_rcv+0x28/0x40 [ 245.632426][T11360] netlink_unicast+0x82c/0x9e0 [ 245.632452][T11360] ? __pfx_netlink_unicast+0x10/0x10 [ 245.632476][T11360] ? netlink_sendmsg+0x642/0xb30 [ 245.632495][T11360] netlink_sendmsg+0x805/0xb30 [ 245.632515][T11360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.632533][T11360] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.632551][T11360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.632571][T11360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.632589][T11360] __sock_sendmsg+0x21c/0x270 [ 245.632615][T11360] ____sys_sendmsg+0x505/0x830 [ 245.632639][T11360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.632658][T11360] ? __might_fault+0xb0/0x130 [ 245.632688][T11360] ? import_iovec+0x74/0xa0 [ 245.632713][T11360] ___sys_sendmsg+0x21f/0x2a0 [ 245.632741][T11360] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.632779][T11360] ? __fget_files+0x2a/0x420 [ 245.632796][T11360] ? __fget_files+0x3a0/0x420 [ 245.632817][T11360] __x64_sys_sendmsg+0x19b/0x260 [ 245.632838][T11360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.632877][T11360] ? __pfx_ksys_write+0x10/0x10 [ 245.632900][T11360] ? rcu_is_watching+0x15/0xb0 [ 245.632920][T11360] ? rcu_is_watching+0x15/0xb0 [ 245.632939][T11360] do_syscall_64+0xfa/0x3b0 [ 245.632958][T11360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.632976][T11360] ? clear_bhb_loop+0x60/0xb0 [ 245.632997][T11360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.633015][T11360] RIP: 0033:0x7f9b1b98ebe9 [ 245.633032][T11360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.633050][T11360] RSP: 002b:00007f9b1c8db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.633072][T11360] RAX: ffffffffffffffda RBX: 00007f9b1bbb5fa0 RCX: 00007f9b1b98ebe9 [ 245.633087][T11360] RDX: 0000000004040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 245.633100][T11360] RBP: 00007f9b1c8db090 R08: 0000000000000000 R09: 0000000000000000 [ 245.633112][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.633124][T11360] R13: 00007f9b1bbb6038 R14: 00007f9b1bbb5fa0 R15: 00007ffeedc1acd8 [ 245.633147][T11360] [ 247.073915][T11388] nbd: must specify a size in bytes for the device [ 247.121058][T11394] __nla_validate_parse: 9 callbacks suppressed [ 247.121081][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1488'. [ 247.130579][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 247.143702][T11285] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.170126][T11324] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.268769][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 247.283896][T11404] FAULT_INJECTION: forcing a failure. [ 247.283896][T11404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.326172][T11404] CPU: 1 UID: 0 PID: 11404 Comm: syz.0.1491 Not tainted syzkaller #0 PREEMPT(full) [ 247.326200][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.326211][T11404] Call Trace: [ 247.326218][T11404] [ 247.326227][T11404] dump_stack_lvl+0x189/0x250 [ 247.326255][T11404] ? __pfx____ratelimit+0x10/0x10 [ 247.326283][T11404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.326305][T11404] ? __pfx__printk+0x10/0x10 [ 247.326334][T11404] ? rcu_is_watching+0x15/0xb0 [ 247.326355][T11404] should_fail_ex+0x414/0x560 [ 247.326383][T11404] _copy_to_user+0x31/0xb0 [ 247.326407][T11404] simple_read_from_buffer+0xe1/0x170 [ 247.326447][T11404] proc_fail_nth_read+0x1b3/0x220 [ 247.326470][T11404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.326491][T11404] ? rw_verify_area+0x2a6/0x4d0 [ 247.326513][T11404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.326530][T11404] vfs_read+0x1fd/0xa30 [ 247.326552][T11404] ? fdget_pos+0x247/0x320 [ 247.326569][T11404] ? __pfx___mutex_lock+0x10/0x10 [ 247.326586][T11404] ? __pfx_vfs_read+0x10/0x10 [ 247.326615][T11404] ? __fget_files+0x3a0/0x420 [ 247.326631][T11404] ? __fget_files+0x2a/0x420 [ 247.326651][T11404] ksys_read+0x145/0x250 [ 247.326675][T11404] ? __pfx_ksys_read+0x10/0x10 [ 247.326700][T11404] ? rcu_is_watching+0x15/0xb0 [ 247.326718][T11404] do_syscall_64+0xfa/0x3b0 [ 247.326734][T11404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.326753][T11404] ? clear_bhb_loop+0x60/0xb0 [ 247.326773][T11404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.326791][T11404] RIP: 0033:0x7ff7ee98d5fc [ 247.326809][T11404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.326828][T11404] RSP: 002b:00007ff7ef7d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.326850][T11404] RAX: ffffffffffffffda RBX: 00007ff7eebb5fa0 RCX: 00007ff7ee98d5fc [ 247.326865][T11404] RDX: 000000000000000f RSI: 00007ff7ef7d90a0 RDI: 0000000000000005 [ 247.326877][T11404] RBP: 00007ff7ef7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 247.326889][T11404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.326900][T11404] R13: 00007ff7eebb6038 R14: 00007ff7eebb5fa0 R15: 00007ffc17547e58 [ 247.326922][T11404] [ 247.631982][T11417] lo speed is unknown, defaulting to 1000 [ 247.775923][T11417] lo speed is unknown, defaulting to 1000 [ 247.855771][T11423] lo speed is unknown, defaulting to 1000 [ 248.178692][T11423] lo speed is unknown, defaulting to 1000 [ 248.294122][T11435] lo speed is unknown, defaulting to 1000 [ 248.547208][T11435] lo speed is unknown, defaulting to 1000 [ 248.558809][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 248.621949][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 248.942800][T11463] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1504'. [ 249.277744][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 249.373431][T11485] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1511'. [ 249.410978][T11472] lo speed is unknown, defaulting to 1000 [ 249.806758][T11472] lo speed is unknown, defaulting to 1000 [ 250.029325][T11507] dummy0: entered promiscuous mode [ 250.037332][T11507] macsec0: entered promiscuous mode [ 250.045549][T11507] macsec0: entered allmulticast mode [ 250.052012][T11507] dummy0: entered allmulticast mode [ 250.059607][T11507] dummy0: left allmulticast mode [ 250.065198][T11507] dummy0: left promiscuous mode [ 250.079829][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1517'. [ 250.217951][T11518] tipc: Enabling of bearer rejected, already enabled [ 250.253927][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1521'. [ 250.387707][T11526] bond0 (unregistering): Released all slaves [ 250.680138][T11553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 250.756945][T11559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.215764][T10469] lo speed is unknown, defaulting to 1000 [ 251.223496][T10469] syz2: Port: 1 Link DOWN [ 251.230399][ T9043] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.249535][ T9043] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.260155][ T9043] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.273535][ T9043] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.282934][ T9043] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.293268][ T9043] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.306550][ T9043] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.307061][T11594] netlink: 'syz.0.1536': attribute type 9 has an invalid length. [ 251.315440][ T9043] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.795505][T11613] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 252.108650][T11634] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 252.128165][T11634] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 252.179296][T11647] __nla_validate_parse: 5 callbacks suppressed [ 252.179317][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1546'. [ 252.224221][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 252.245612][T11648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1546'. [ 252.304723][T11659] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 252.401599][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 252.577087][T11690] lo speed is unknown, defaulting to 1000 [ 252.611566][T11688] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 252.666996][T11694] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 252.679593][T11688] bond1: (slave vti1): The slave device specified does not support setting the MAC address [ 252.692022][T11688] bond1: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 252.705113][T11688] bond1: (slave vti1): making interface the new active one [ 252.713804][T11688] bond1: (slave vti1): Enslaving as an active interface with an up link [ 252.743783][T11690] lo speed is unknown, defaulting to 1000 [ 252.830514][T11700] batman_adv: batadv0: Removing interface: dummy0 [ 252.851218][T11700] team0: Port device team_slave_0 removed [ 252.863204][T11700] team0: Port device team_slave_1 removed [ 252.876070][T11700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.895909][T11700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.907404][T11700] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 252.915605][T11700] batman_adv: batadv0: Removing interface: ip6gretap1 [ 252.927481][T11700] bond1: (slave vti1): Releasing backup interface [ 253.336856][T11730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1568'. [ 253.449821][T11734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1572'. [ 253.505669][T11743] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 253.567466][T11744] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1573'. [ 253.597602][T11744] batadv1: entered promiscuous mode [ 253.603614][T11744] batadv1: entered allmulticast mode [ 253.715475][T11744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1573'. [ 253.850357][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 253.857088][T11632] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 253.863436][T11665] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 253.967001][T11758] tipc: Enabled bearer , priority 0 [ 253.975035][T11759] tipc: Enabling of bearer rejected, already enabled [ 253.984726][T11758] syzkaller0: entered promiscuous mode [ 253.990936][T11758] syzkaller0: entered allmulticast mode [ 254.004014][T11757] tipc: Resetting bearer [ 254.014830][T11757] tipc: Disabling bearer [ 254.069218][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 254.209453][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 254.234679][T11786] tipc: Enabling of bearer rejected, already enabled [ 254.386488][T11791] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 254.666864][T11814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.694714][T11816] lo speed is unknown, defaulting to 1000 [ 254.829995][T11833] vlan2: entered allmulticast mode [ 254.839909][T11833] veth1: entered allmulticast mode [ 254.845903][T11833] batman_adv: batadv0: Adding interface: vlan2 [ 254.852808][T11833] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.879433][T11833] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 254.921352][T11816] lo speed is unknown, defaulting to 1000 [ 254.997654][T11845] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 255.008474][T11845] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 255.164821][T11846] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 255.186789][T11846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.194365][T11849] tipc: Enabled bearer , priority 0 [ 255.207950][T11846] vlan2: entered allmulticast mode [ 255.214231][T11846] veth1: entered allmulticast mode [ 255.225876][T11845] vlan2: entered allmulticast mode [ 255.235956][T11849] tipc: Resetting bearer [ 255.244700][T11847] delete_channel: no stack [ 255.251255][T11847] tipc: Disabling bearer [ 255.325031][T11852] tipc: Enabled bearer , priority 0 [ 255.669514][T11890] syzkaller0: entered promiscuous mode [ 255.675132][T11890] syzkaller0: entered allmulticast mode [ 255.683046][T11889] tipc: Enabled bearer , priority 0 [ 255.717965][T11894] macsec1: entered allmulticast mode [ 255.724992][T11894] ip6gretap0: entered allmulticast mode [ 255.732939][T11894] ip6gretap0: left allmulticast mode [ 255.745605][T11891] tipc: Resetting bearer [ 255.762050][T11891] tipc: Disabling bearer [ 255.939231][T11909] tipc: Resetting bearer [ 256.173552][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.180132][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.410791][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 256.417622][T11836] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 256.440549][T10453] tipc: Node number set to 3199382309 [ 256.790002][T11904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 256.799333][T11986] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 256.995058][T12008] pim6reg1: entered promiscuous mode [ 257.018427][T12008] pim6reg1: entered allmulticast mode [ 257.053056][T12013] tipc: Enabled bearer , priority 0 [ 257.065761][T12013] syzkaller0: entered promiscuous mode [ 257.072097][T12013] syzkaller0: entered allmulticast mode [ 257.224969][T12023] __nla_validate_parse: 24 callbacks suppressed [ 257.225038][T12023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1655'. [ 257.246319][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1655'. [ 257.257439][T12023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1655'. [ 257.267587][T12012] tipc: Resetting bearer [ 257.272092][T12023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1655'. [ 257.298247][T12012] tipc: Disabling bearer [ 257.317466][T12019] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 257.351792][T12031] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1656'. [ 257.376603][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 257.507695][T12042] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 257.547513][T12042] bridge0: port 1(erspan0) entered blocking state [ 257.556376][T12042] bridge0: port 1(erspan0) entered disabled state [ 257.565613][T12042] erspan0: entered allmulticast mode [ 257.572347][T12042] erspan0: entered promiscuous mode [ 257.580050][T12042] erspan0: left allmulticast mode [ 257.586415][T12050] netlink: 'syz.1.1662': attribute type 13 has an invalid length. [ 257.594416][T12050] netlink: 'syz.1.1662': attribute type 17 has an invalid length. [ 257.602935][T12042] erspan0: left promiscuous mode [ 257.608237][T12042] bridge0: port 1(erspan0) entered disabled state [ 257.674467][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.682514][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.692974][T12050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.709687][T12053] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1661'. [ 257.734265][T12056] lo speed is unknown, defaulting to 1000 [ 257.878697][T12056] lo speed is unknown, defaulting to 1000 [ 257.914567][T12065] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1666'. [ 258.073192][T12071] syzkaller1: entered promiscuous mode [ 258.078809][T12071] syzkaller1: entered allmulticast mode [ 258.242983][T12085] lo speed is unknown, defaulting to 1000 [ 258.304821][T12085] lo speed is unknown, defaulting to 1000 [ 258.437439][T12087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1668'. [ 258.446577][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 258.597590][T12096] can: request_module (can-proto-0) failed. [ 259.074997][T12137] lo speed is unknown, defaulting to 1000 [ 259.370530][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 259.426152][T12137] lo speed is unknown, defaulting to 1000 [ 259.523820][T12114] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.621006][T12139] netlink: 'syz.3.1679': attribute type 13 has an invalid length. [ 259.648804][T12139] netlink: 'syz.3.1679': attribute type 17 has an invalid length. [ 259.707540][T12139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.718413][T12139] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.726157][T12139] tipc: Resetting bearer [ 259.733131][T12139] tipc: Resetting bearer [ 259.741238][T12139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.766623][T10467] lo speed is unknown, defaulting to 1000 [ 259.779852][T10467] syz0: Port: 1 Link ACTIVE [ 259.826768][T10467] lo speed is unknown, defaulting to 1000 [ 260.076564][T12180] netlink: 'syz.0.1691': attribute type 21 has an invalid length. [ 260.311771][T12193] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 260.368834][T12199] tipc: Enabled bearer , priority 0 [ 260.404454][T12198] tipc: Disabling bearer [ 261.713914][T12259] lo speed is unknown, defaulting to 1000 [ 261.878674][T12259] lo speed is unknown, defaulting to 1000 [ 262.026679][T12280] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 262.304733][T12288] __nla_validate_parse: 11 callbacks suppressed [ 262.304755][T12288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1724'. [ 262.336443][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 262.360418][T12202] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.397796][T12250] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 263.469471][T12324] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1735'. [ 263.497157][T12326] netlink: 'syz.0.1737': attribute type 22 has an invalid length. [ 263.555642][T12329] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 263.580710][T12337] syzkaller1: entered promiscuous mode [ 263.586371][T12337] syzkaller1: entered allmulticast mode [ 263.634627][T12336] tipc: Enabled bearer , priority 0 [ 263.646062][T12337] syzkaller0: entered promiscuous mode [ 263.653566][T12337] syzkaller0: entered allmulticast mode [ 263.683809][T12337] tipc: Resetting bearer [ 263.694886][T12337] tipc: Disabling bearer [ 263.714881][T12346] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1742'. [ 263.803148][T12346] netlink: 'syz.4.1742': attribute type 3 has an invalid length. [ 263.926013][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 264.119344][T12376] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1747'. [ 264.129109][T12376] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1747'. [ 264.154277][T12378] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1745'. [ 264.244959][T12383] pimreg: entered allmulticast mode [ 264.369781][T12332] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 264.828444][T12405] dvmrp8: entered allmulticast mode [ 264.840640][T12401] dvmrp8: left allmulticast mode [ 264.963764][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 265.009322][T12411] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 265.106632][T12422] tipc: Enabling of bearer rejected, failed to enable media [ 265.924635][T12438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1765'. [ 265.937880][T12438] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1765'. [ 266.139202][T12455] netlink: 'syz.3.1769': attribute type 2 has an invalid length. [ 266.411855][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 266.424223][T12395] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 266.445911][T12432] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 266.699804][T12493] lo speed is unknown, defaulting to 1000 [ 266.781047][T12496] tipc: Enabling of bearer rejected, failed to enable media [ 266.973857][T12493] lo speed is unknown, defaulting to 1000 [ 267.163053][T12520] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 267.180100][T12529] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 267.199037][T12532] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 267.239655][T12529] vlan3: entered promiscuous mode [ 267.250140][T12529] bridge0: entered promiscuous mode [ 268.023875][T12526] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 268.318526][T12571] can: request_module (can-proto-4) failed. [ 268.375954][T12580] __nla_validate_parse: 5 callbacks suppressed [ 268.375975][T12580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1802'. [ 268.657354][T12596] lo speed is unknown, defaulting to 1000 [ 268.799288][T12596] lo speed is unknown, defaulting to 1000 [ 269.200978][T12606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1810'. [ 269.210075][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 270.033149][T12622] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 270.042182][T12622] bridge7: entered allmulticast mode [ 270.090386][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 270.097621][T12582] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 270.115833][T12591] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 270.264109][T12632] netlink: 'syz.0.1816': attribute type 3 has an invalid length. [ 270.278311][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 270.292823][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 270.302829][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1819'. [ 270.342560][T12631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 270.493051][T12643] lo speed is unknown, defaulting to 1000 [ 270.501014][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1821'. [ 270.780685][T12664] netlink: 'syz.1.1828': attribute type 2 has an invalid length. [ 270.825386][T12664] þ`Ì: entered promiscuous mode [ 270.869464][T12643] lo speed is unknown, defaulting to 1000 [ 270.888883][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 270.916442][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 271.017296][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 271.041480][T12681] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 271.139876][T12690] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 271.154405][T12690] netlink: 'syz.0.1836': attribute type 1 has an invalid length. [ 271.249678][T12690] 8021q: adding VLAN 0 to HW filter on device bond10 [ 271.258268][T12690] bond9: (slave bond10): making interface the new active one [ 271.266714][T12690] bond9: (slave bond10): Enslaving as an active interface with an up link [ 271.282327][T12695] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.296152][T12695] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 271.619644][T12700] lo speed is unknown, defaulting to 1000 [ 271.757413][T12700] lo speed is unknown, defaulting to 1000 [ 271.844197][T12702] lo speed is unknown, defaulting to 1000 [ 272.149088][T12721] tipc: Enabling of bearer rejected, already enabled [ 272.209223][T12716] lo speed is unknown, defaulting to 1000 [ 272.286407][T12702] lo speed is unknown, defaulting to 1000 [ 272.292394][T12727] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 272.549333][T12747] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 272.566422][T12734] lo speed is unknown, defaulting to 1000 [ 272.572847][T12716] lo speed is unknown, defaulting to 1000 [ 272.816038][T12734] lo speed is unknown, defaulting to 1000 [ 273.044643][T12769] tipc: Enabled bearer , priority 0 [ 273.118275][T12759] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 273.166810][T12759] tipc: Resetting bearer [ 273.253700][T12758] tipc: Disabling bearer [ 273.451360][ T55] block nbd0: Possible stuck request ffff8880250e5080: control (read@0,1024B). Runtime 150 seconds [ 273.462754][ T55] block nbd0: Possible stuck request ffff8880250e5240: control (read@1024,1024B). Runtime 150 seconds [ 273.474142][ T55] block nbd0: Possible stuck request ffff8880250e5400: control (read@2048,1024B). Runtime 150 seconds [ 273.485540][ T55] block nbd0: Possible stuck request ffff8880250e55c0: control (read@3072,1024B). Runtime 150 seconds [ 274.123055][T12787] lo speed is unknown, defaulting to 1000 [ 274.247780][T12787] lo speed is unknown, defaulting to 1000 [ 274.331272][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 274.338171][T12762] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 274.347067][T12764] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 274.380592][T12775] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 274.413030][T12793] __nla_validate_parse: 3 callbacks suppressed [ 274.413049][T12793] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1866'. [ 274.507249][T12797] netlink: 'syz.0.1868': attribute type 39 has an invalid length. [ 274.746958][T12803] lo speed is unknown, defaulting to 1000 [ 274.907803][T12814] netlink: 'syz.0.1872': attribute type 3 has an invalid length. [ 274.939265][T12814] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 274.974742][T12814] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1872'. [ 275.027409][T12803] lo speed is unknown, defaulting to 1000 [ 275.305563][T12839] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 275.389846][ T30] audit: type=1800 audit(1756173990.317:5): pid=12845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1880" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1972 res=0 errno=0 [ 275.529995][T12854] netlink: 'syz.3.1883': attribute type 10 has an invalid length. [ 275.552629][T12854] tipc: Resetting bearer [ 275.686284][T12862] netlink: 'syz.3.1886': attribute type 13 has an invalid length. [ 275.709830][T12860] lo speed is unknown, defaulting to 1000 [ 275.845139][T12862] lo speed is unknown, defaulting to 1000 [ 275.952509][T12862] lo speed is unknown, defaulting to 1000 [ 275.994197][T12860] lo speed is unknown, defaulting to 1000 [ 276.078665][T12873] tipc: Enabling of bearer rejected, failed to enable media [ 276.212022][T12868] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1888'. [ 276.272614][T12868] lo speed is unknown, defaulting to 1000 [ 276.378318][T12868] lo speed is unknown, defaulting to 1000 [ 276.628366][T12888] lo speed is unknown, defaulting to 1000 [ 276.748572][T12903] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 276.758932][T12903] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1898'. [ 276.794203][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1897'. [ 276.912354][T12888] lo speed is unknown, defaulting to 1000 [ 277.047959][T12911] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 277.377695][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 277.420981][T12932] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 277.435998][ T9044] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.446743][T12932] netlink: 'syz.4.1909': attribute type 49 has an invalid length. [ 277.459527][ T9044] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.468227][ T9044] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.483505][ T9044] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.669631][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 277.851620][T12961] netlink: 'syz.1.1914': attribute type 12 has an invalid length. [ 277.894775][T12962] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 277.925988][T12962] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 277.996112][ T9044] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 278.007918][T12962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.068080][T12962] bond3 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 278.111373][T12962] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 278.138201][T12962] bond3 (unregistering): Released all slaves [ 278.187349][T12973] tipc: Enabled bearer , priority 0 [ 278.223964][T12980] syzkaller0: entered promiscuous mode [ 278.229663][T12980] syzkaller0: entered allmulticast mode [ 278.262021][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 278.340432][T12972] tipc: Resetting bearer [ 278.361065][T12972] tipc: Disabling bearer [ 278.628186][ T5861] Bluetooth: hci4: link tx timeout [ 278.634447][ T5861] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.142105][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1929'. [ 279.182382][T13010] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 279.216644][T13014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1932'. [ 279.445965][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 279.471744][T13037] gretap0: left promiscuous mode [ 279.478555][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 279.498271][T13039] netlink: 'syz.4.1940': attribute type 6 has an invalid length. [ 279.563453][T13042] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1942'. [ 279.586649][T13042] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1942'. [ 279.602177][T13045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.615575][T13042] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1942'. [ 279.778753][T13064] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 279.916325][T13078] tipc: Enabling of bearer rejected, failed to enable media [ 279.927348][T13066] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1948'. [ 279.933342][T13077] lo speed is unknown, defaulting to 1000 [ 280.132420][T13077] lo speed is unknown, defaulting to 1000 [ 280.154932][T13092] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1954'. [ 280.456334][T13108] netlink: 'syz.2.1956': attribute type 18 has an invalid length. [ 280.473970][T13108] netlink: 'syz.2.1956': attribute type 16 has an invalid length. [ 280.568416][T13112] delete_channel: no stack [ 280.655751][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 280.799429][T13110] delete_channel: no stack [ 280.810479][T13110] delete_channel: no stack [ 280.815174][T13110] delete_channel: no stack [ 280.824056][T13110] delete_channel: no stack [ 280.829814][T13110] delete_channel: no stack [ 280.835211][T13110] delete_channel: no stack [ 280.848415][T13110] delete_channel: no stack [ 280.853751][T13110] delete_channel: no stack [ 280.858614][T13110] delete_channel: no stack [ 280.914817][ T9044] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.950109][T13110] delete_channel: no stack [ 280.978402][T13110] delete_channel: no stack [ 280.999235][T13110] delete_channel: no stack [ 281.022557][T13110] delete_channel: no stack [ 281.035054][T13110] delete_channel: no stack [ 281.045189][T13110] delete_channel: no stack [ 281.057398][T13110] delete_channel: no stack [ 281.070076][T13110] delete_channel: no stack [ 281.078172][T13110] delete_channel: no stack [ 281.107534][T13110] delete_channel: no stack [ 281.119622][T13110] delete_channel: no stack [ 281.124665][T13110] delete_channel: no stack [ 281.130091][T13110] delete_channel: no stack [ 281.138929][T13110] delete_channel: no stack [ 281.145429][T13110] delete_channel: no stack [ 281.152644][T13110] delete_channel: no stack [ 281.157727][T13110] delete_channel: no stack [ 281.181485][T13116] delete_channel: no stack [ 281.186173][T13116] delete_channel: no stack [ 281.191263][T13116] delete_channel: no stack [ 281.195967][T13116] delete_channel: no stack [ 281.201834][T13116] delete_channel: no stack [ 281.206660][T13116] delete_channel: no stack [ 281.212489][T13116] delete_channel: no stack [ 281.217391][T13116] delete_channel: no stack [ 281.225844][T13116] delete_channel: no stack [ 281.231454][T13116] delete_channel: no stack [ 281.236369][T13116] delete_channel: no stack [ 281.243526][T13116] delete_channel: no stack [ 281.248594][T13116] delete_channel: no stack [ 281.254799][T13116] delete_channel: no stack [ 281.261349][T13116] delete_channel: no stack [ 281.266118][T13116] delete_channel: no stack [ 281.271327][T13116] delete_channel: no stack [ 281.275962][T13116] delete_channel: no stack [ 281.280902][T13116] delete_channel: no stack [ 281.286061][T13116] delete_channel: no stack [ 281.291181][T13116] delete_channel: no stack [ 281.296151][T13116] delete_channel: no stack [ 281.301032][T13116] delete_channel: no stack [ 281.305612][T13116] delete_channel: no stack [ 281.310280][T13116] delete_channel: no stack [ 281.314835][T13116] delete_channel: no stack [ 281.319328][T13116] delete_channel: no stack [ 281.324184][T13116] delete_channel: no stack [ 281.329093][T13116] delete_channel: no stack [ 281.333849][T13116] delete_channel: no stack [ 281.338337][T13116] delete_channel: no stack [ 281.343267][T13116] delete_channel: no stack [ 281.347790][T13116] delete_channel: no stack [ 281.352434][T13116] delete_channel: no stack [ 281.356968][T13116] delete_channel: no stack [ 281.361767][T13116] delete_channel: no stack [ 281.366307][T13116] delete_channel: no stack [ 281.371275][T13116] delete_channel: no stack [ 281.717792][T13170] netlink: 'syz.2.1973': attribute type 4 has an invalid length. [ 281.748835][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 281.766436][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 281.912168][T13182] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 282.084597][T13190] lo speed is unknown, defaulting to 1000 [ 282.164884][T13190] lo speed is unknown, defaulting to 1000 [ 282.818540][T13220] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 282.930374][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 283.073260][T13238] lo speed is unknown, defaulting to 1000 [ 283.125359][T13241] geneve3: entered promiscuous mode [ 283.142510][T13241] geneve3: entered allmulticast mode [ 283.263004][T13238] lo speed is unknown, defaulting to 1000 [ 283.921012][T13269] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 283.932651][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 283.941359][T13260] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 284.187207][T13281] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 284.218420][T13278] gtp0: entered promiscuous mode [ 284.240490][T13278] gtp0: entered allmulticast mode [ 284.391867][T13284] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 284.403835][T13284] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 284.413417][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.2.2000 Not tainted syzkaller #0 PREEMPT(full) [ 284.422924][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.433095][T13284] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 284.438770][T13284] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30 [ 284.458511][T13284] RSP: 0018:ffffc9000af36b70 EFLAGS: 00010206 [ 284.464720][T13284] RAX: 000000001fffe000 RBX: ffff88807eeb2538 RCX: 0000000000080000 [ 284.473342][T13284] RDX: ffffc9000d8ab000 RSI: 000000000001617a RDI: 000000000001617b [ 284.481373][T13284] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 284.489473][T13284] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff888027bebc28 [ 284.497479][T13284] R13: dffffc0000000000 R14: ffff888027bebc00 R15: 00000000ffff0000 [ 284.505576][T13284] FS: 00007f9b1c8ba6c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 284.514890][T13284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.521507][T13284] CR2: 00007fd784fffe9c CR3: 0000000052ec6000 CR4: 00000000003526f0 [ 284.529985][T13284] Call Trace: [ 284.533399][T13284] [ 284.536869][T13284] ? ipv6_mc_down+0x2a3/0x360 [ 284.541854][T13284] ipv6_mc_destroy_dev+0x45/0x5a0 [ 284.546932][T13284] addrconf_ifdown+0x139e/0x1880 [ 284.551914][T13284] ? tls_dev_event+0x717/0xec0 [ 284.556758][T13284] ? __pfx_addrconf_ifdown+0x10/0x10 [ 284.562100][T13284] ? lock_release+0x4b/0x3e0 [ 284.566785][T13284] ? net_generic+0x1e/0x240 [ 284.571420][T13284] ? __pfx_tls_dev_event+0x10/0x10 [ 284.576657][T13284] addrconf_notify+0x1bc/0x1010 [ 284.581561][T13284] notifier_call_chain+0x1b3/0x3e0 [ 284.586884][T13284] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 284.593334][T13284] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 284.600371][T13284] ? net_passive_dec+0x167/0x240 [ 284.605524][T13284] ? __pfx_net_passive_dec+0x10/0x10 [ 284.611188][T13284] ? nsim_destroy+0xe5/0x670 [ 284.615958][T13284] unregister_netdevice_queue+0x33c/0x380 [ 284.622138][T13284] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 284.628600][T13284] ? _raw_spin_unlock+0x28/0x50 [ 284.633653][T13284] ? simple_release_fs+0x9c/0xd0 [ 284.638792][T13284] nsim_destroy+0x1dd/0x670 [ 284.643303][T13284] __nsim_dev_port_del+0x14d/0x1b0 [ 284.648524][T13284] nsim_dev_reload_destroy+0x288/0x490 [ 284.654610][T13284] nsim_dev_reload_down+0x8a/0xc0 [ 284.659648][T13284] devlink_reload+0x1b3/0x8d0 [ 284.664715][T13284] ? __pfx_devlink_reload+0x10/0x10 [ 284.670139][T13284] ? apparmor_capable+0x137/0x1b0 [ 284.675443][T13284] ? bpf_lsm_capable+0x9/0x20 [ 284.680293][T13284] ? security_capable+0x7e/0x2e0 [ 284.685364][T13284] devlink_nl_reload_doit+0x9c2/0xd50 [ 284.690964][T13284] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 284.696883][T13284] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 284.703701][T13284] genl_family_rcv_msg_doit+0x215/0x300 [ 284.709404][T13284] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 284.716738][T13284] ? bpf_lsm_capable+0x9/0x20 [ 284.722493][T13284] ? security_capable+0x7e/0x2e0 [ 284.727652][T13284] genl_rcv_msg+0x60e/0x790 [ 284.732549][T13284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.737676][T13284] ? __kasan_slab_alloc+0x6c/0x80 [ 284.742991][T13284] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 284.749723][T13284] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 284.755658][T13284] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 284.762707][T13284] ? __netlink_lookup+0xbd/0x810 [ 284.767739][T13284] ? rcu_is_watching+0x15/0xb0 [ 284.772879][T13284] netlink_rcv_skb+0x205/0x470 [ 284.777684][T13284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.782738][T13284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.788153][T13284] ? lock_release+0x4b/0x3e0 [ 284.792769][T13284] ? down_read+0x1ad/0x2e0 [ 284.797365][T13284] genl_rcv+0x28/0x40 [ 284.801934][T13284] netlink_unicast+0x82c/0x9e0 [ 284.806754][T13284] ? __pfx_netlink_unicast+0x10/0x10 [ 284.812943][T13284] ? netlink_sendmsg+0x642/0xb30 [ 284.818912][T13284] ? skb_put+0x11b/0x210 [ 284.823192][T13284] netlink_sendmsg+0x805/0xb30 [ 284.828164][T13284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.833931][T13284] ? futex_unqueue+0x22/0x240 [ 284.839529][T13284] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.844667][T13284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.850233][T13284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.855959][T13284] __sock_sendmsg+0x21c/0x270 [ 284.861405][T13284] ____sys_sendmsg+0x505/0x830 [ 284.866444][T13284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.871835][T13284] ? import_iovec+0x74/0xa0 [ 284.876431][T13284] ___sys_sendmsg+0x21f/0x2a0 [ 284.881422][T13284] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.886824][T13284] ? futex_wait+0x285/0x360 [ 284.891361][T13284] ? __fget_files+0x2a/0x420 [ 284.896068][T13284] ? __fget_files+0x3a0/0x420 [ 284.900832][T13284] __x64_sys_sendmsg+0x19b/0x260 [ 284.906142][T13284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.911893][T13284] ? rcu_is_watching+0x15/0xb0 [ 284.916865][T13284] ? rcu_is_watching+0x15/0xb0 [ 284.921780][T13284] do_syscall_64+0xfa/0x3b0 [ 284.926350][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.932715][T13284] ? clear_bhb_loop+0x60/0xb0 [ 284.937826][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.944432][T13284] RIP: 0033:0x7f9b1b98ebe9 [ 284.948963][T13284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.969191][T13284] RSP: 002b:00007f9b1c8ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.978151][T13284] RAX: ffffffffffffffda RBX: 00007f9b1bbb6090 RCX: 00007f9b1b98ebe9 [ 284.986409][T13284] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c [ 284.994737][T13284] RBP: 00007f9b1ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 285.002886][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.011135][T13284] R13: 00007f9b1bbb6128 R14: 00007f9b1bbb6090 R15: 00007ffeedc1acd8 [ 285.019205][T13284] [ 285.022226][T13284] Modules linked in: [ 285.027539][T13284] ---[ end trace 0000000000000000 ]--- [ 285.072340][T13284] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 285.088920][T13284] Code: ff ff ff e8 ed 2b 41 01 89 c5 31 ff 89 c6 e8 62 00 87 f7 85 ed 74 40 e8 19 fc 86 f7 eb 05 e8 12 fc 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 cc 67 ea f7 4d 8b 27 49 8d 7f 30 [ 285.125433][T13284] RSP: 0018:ffffc9000af36b70 EFLAGS: 00010206 [ 285.137646][T13284] RAX: 000000001fffe000 RBX: ffff88807eeb2538 RCX: 0000000000080000 [ 285.151950][T13284] RDX: ffffc9000d8ab000 RSI: 000000000001617a RDI: 000000000001617b [ 285.161266][T13284] RBP: 0000000000000000 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 285.186168][T13284] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffff888027bebc28 [ 285.195016][T13284] R13: dffffc0000000000 R14: ffff888027bebc00 R15: 00000000ffff0000 [ 285.203744][T13284] FS: 00007f9b1c8ba6c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 285.213516][T13284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.221275][T13284] CR2: 0000000000000000 CR3: 0000000052ec6000 CR4: 00000000003526f0 [ 285.229696][T13284] Kernel panic - not syncing: Fatal exception [ 285.236509][T13284] Kernel Offset: disabled [ 285.240912][T13284] Rebooting in 86400 seconds..