last executing test programs: 5.119524514s ago: executing program 0 (id=1352): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='ip_vti0\x00') r1 = socket(0x10, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}, {0xa, 0x4e20, 0x62b86a44, @mcast1, 0x8}, 0x0, {[0x6, 0x400, 0x10001, 0xf, 0x1480000, 0x9, 0xffffffff, 0x9]}}, 0x5c) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 4.702507802s ago: executing program 0 (id=1356): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000f3ff01000000000000277b00000100000000000000080000"], 0x0, 0x2a, 0x0, 0x1}, 0x20) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) socketpair(0x1a, 0x4, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x3, 0x5, {{0x43, 0x4, 0x0, 0x8, 0x10c, 0x67, 0x0, 0x35, 0x4, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x7d, [@dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @loopback]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0x3, [0x3b8c, 0x1, 0x2, 0x8]}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x0, [{@empty, 0x80000001}, {@private=0xa010102, 0x411}]}, @timestamp_prespec={0x44, 0x4c, 0x81, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@loopback, 0x100}, {@rand_addr=0x64010101, 0xd}, {@rand_addr=0x64010102, 0xd1}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x100}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x8001}]}, @lsrr={0x83, 0x17, 0xc0, [@broadcast, @empty, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp_addr={0x44, 0x4c, 0x20, 0x1, 0x2, [{@local, 0x7}, {@multicast1, 0x36c}, {@private=0xa010102, 0x10000}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x5}, {@multicast2, 0x3ede50a7}, {@multicast2, 0xd052}, {@local, 0x7f}, {@private=0xa010102, 0x2}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "85d4"}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x34, 0x29, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {0xffff, 0x2}, {0xd, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0xf, 0xf3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000300)={'vxcan1\x00', {0x2, 0x0, @initdev}}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r9, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)={0x3c, r12, 0xb97534d5fe9704cf, 0x70bd2d, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xfffffff5}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x41d}]}, 0x3c}}, 0x0) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15, 0x3, 0x1, 0xfffffffc}]}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r16}, &(0x7f00000006c0), &(0x7f0000000700)=r15}, 0x20) shutdown(r14, 0x0) (async) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r17, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0xc0004) 4.556018586s ago: executing program 0 (id=1358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800a3330fc6484c4c60f40000040000181100007447c86473fe68102fa869dcc8a24e5c23299054", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) 4.268368378s ago: executing program 0 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) (async) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) (async) sendmsg$nl_generic(r2, 0x0, 0x0) unshare(0x44000000) close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="8f8e040002008f005eaca9e7726401142906051dd4aa47eef3580255826492fd7a929af4038b70efea6ad5671c209eae3d1a86e2ae54e40d6073cd0957a7c0b51fae83f07bc693816300f752ee408a6ca3d2708884efcb741b6f7af67f23ddccf076e78fcda0e097830ce2b28d743dda3f9017a7f75307eb0abd55a020390e0feb145417e956b58899d5a7d2f28515bc0d34dfdc3a43fcd3882ab8c5bd95d47529065792701033"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202c020000000000300012800b00010065727370616e00002000028008000400ffffff7f060071001f00000004001200"], 0x50}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0xed, &(0x7f0000000180)={@multicast, @broadcast, @void, {@llc_tr={0x11, {@llc={0x7e, 0xf0, "db", "9f990d99788ca53f669ad38696e77791c919619695a00c7f2ccdeafca968cdc8ca9118a6f06342ad8a535f6168209413c134ff65711341f03ab06e1cf399537b96d5650fe858c115bfeb3b78ee7d30fe58dbe0eedb3fe406959b7d73057df01f06aa871ea5fbafe99514213ac9d0c0652fc21e17e054e5c0c7448664870fe8b93a4ab1a2bbe71b055f58468ff3e3df96273a83661f453aba07d3455030b067a495fbc8682358a64311da51cddbe1332298d88da53b401f915c96d9d302c26cfc70ec45941a9ddeca71522a9990d1b236277d3d77c4e014811e4a8da5"}}}}}, 0x0) (async) syz_emit_ethernet(0xed, &(0x7f0000000180)={@multicast, @broadcast, @void, {@llc_tr={0x11, {@llc={0x7e, 0xf0, "db", "9f990d99788ca53f669ad38696e77791c919619695a00c7f2ccdeafca968cdc8ca9118a6f06342ad8a535f6168209413c134ff65711341f03ab06e1cf399537b96d5650fe858c115bfeb3b78ee7d30fe58dbe0eedb3fe406959b7d73057df01f06aa871ea5fbafe99514213ac9d0c0652fc21e17e054e5c0c7448664870fe8b93a4ab1a2bbe71b055f58468ff3e3df96273a83661f453aba07d3455030b067a495fbc8682358a64311da51cddbe1332298d88da53b401f915c96d9d302c26cfc70ec45941a9ddeca71522a9990d1b236277d3d77c4e014811e4a8da5"}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2.382480042s ago: executing program 3 (id=1373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="02100000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ee9a1c0d5e2429dc74207a52058bf1a6ff146931650bee43d77bc65d5c4253800bba83d83f19fcb988a0683255ac15e1e7a68aec9aba2f879211958b468440d71319e6c05dfc294f4b2618e2a860d16252a293f5a29059a38089f335", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000003c0)={'raw\x00', 0x0, [0x7, 0x2, 0x3, 0x9, 0x4d]}, &(0x7f0000000100)=0x54) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="000400000000000002004e20e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e20ac1e000100ca8a08268711fc30db591b2b92e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000"/400], 0x190) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000220000000a000100777006003131"], 0x20}}, 0x2000c094) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 2.185780149s ago: executing program 0 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000180100002020692500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e62a0000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r7}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001400b59500000000000000000a000000eb9674b4e260b4faf8646ea24307c6", @ANYRES32=0x0], 0x18}}, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000380), 0x2, 0x0) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0xb, 0x2, 0x3, 0x2}, 0x10}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 2.184770585s ago: executing program 1 (id=1377): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x17, 0x1, 0xf0bd29, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x1000004, 0x8000000, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24044010) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f00000001c0)={@default, @default}) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="3ffb99b81d3a0378f44122"], 0x14}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, r2, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.110977034s ago: executing program 4 (id=1378): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x54}}, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dbdbff, {0x7, 0x0, 0x0, r3, 0x40, 0x4c, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x10, 0x7, 0x8, 0x4, {{0x28, 0x4, 0x3, 0x22, 0xa0, 0x68, 0x0, 0x91, 0x4, 0x0, @multicast1, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x1, [{@broadcast, 0x79}]}, @timestamp={0x44, 0x1c, 0xce, 0x0, 0x5, [0x0, 0x2, 0x5, 0x0, 0xcc42, 0xfffffffe]}, @end, @cipso={0x86, 0x55, 0x2, [{0x7, 0x5, "5d898d"}, {0x2, 0x10, "abe62d8096fcbbf9460f06d63a2a"}, {0x5, 0x9, "c6005a9ff63a11"}, {0x1, 0x6, "15b03b61"}, {0x0, 0xd, "a1806a6d1331e1767c43ea"}, {0x7, 0xa, "5af9ce136ae63190"}, {0x1, 0x3, 'Z'}, {0x1, 0xa, "8d401144a09163b1"}, {0x1, 0x7, "9187914baa"}]}, @ssrr={0x89, 0x7, 0xcf, [@rand_addr=0x64010100]}, @noop]}}}}}) 1.862980472s ago: executing program 2 (id=1380): syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa6700000000000000210000001008907803ed107cf19d61f6b0b8ac14f2a2018e167180a1ba712ed95042cb787518cb2fbc69dbda64c42463cb34a8cec902c31c61a9130e86f75f493932"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1) 1.714438359s ago: executing program 4 (id=1381): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0xffffffff, 0x0, 0xd, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0xffff, 0x1512, 0x52, 0x1, 0x92f, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @loopback, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0ffffff0000000003000010850000002c00000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x355}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xffffffffffffff62, 0x0, &(0x7f00000001c0)="41070000008e38d0da03b47cd45121564e04", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES64=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) r5 = socket(0x1d, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xfff3}, {0x1, 0xf}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7c, 0x1, 0x4, 0x173, 0x2, 0xbd, 0x3, 0x2}}, {0x8, 0x2, [0x80, 0xb]}}, {{0x1c, 0x1, {0x2, 0x8, 0x7, 0xb, 0x0, 0x9, 0x6, 0x5}}, {0xe, 0x2, [0x279, 0x5, 0x1e35, 0x0, 0x4]}}, {{0x1c, 0x1, {0xb7, 0x9, 0x7ed, 0xd60, 0x2, 0x81, 0x7fff, 0x8}}, {0x14, 0x2, [0xc0, 0x4, 0x8003, 0x3, 0x7, 0x2, 0x8, 0x2a54]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48051}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x2, 0x2, 0xf7fffff9) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r11 = socket(0x1f, 0xa, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {}, {0xb, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000804c}, 0x20004804) 1.202780502s ago: executing program 0 (id=1382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000080)=0xfe, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000898"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x1843}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c000000180001801400026e6576653100000000000000000010000380080002000600000004000400000000"], 0x3c}}, 0x4004) writev(r4, &(0x7f0000003500), 0x0) 1.199353793s ago: executing program 1 (id=1383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x4000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) 1.131505136s ago: executing program 2 (id=1384): write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018240000", @ANYRES32, @ANYBLOB="00000000090000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x44, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r3 = socket(0xa, 0x3, 0x502) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfffb}, {0x7, 0x1}, {0x8, 0xfff2}}, [{0x4}]}, 0x28}}, 0x0) getpeername$packet(r3, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x3, 0x0, 0x0, @private1, @empty, 0x8, 0x10, 0x4, 0x2}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="80010000", @ANYRESOCT=r6, @ANYBLOB="00002cbd7000ffdbdf25150000003400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="348f668583735cd203df3ce3846fc05d418b07bd5b552b4321394e4e3b61ec65c917daa6cba032bdb6", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000300020000000c0001800800030001000000540001801400020073797a5f74756e0000000000000000001400020076657468305f746f5f68737200000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="2000018008000300010000001400020077673100000000000000000000000000440001800800030002000000140002006261746164765f736c6176655f3000001400020063616966300000000000000000000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="500001801400020074756e6c3000000000000000000000000800030002000000140002006272696467655f736c6176655f3100001400020076657468305f746f5f687372000000000800030002000000"], 0x180}, 0x1, 0x0, 0x0, 0x44810}, 0x40802) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c400000095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01000000040000000000040000200800020005"], 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) write(0xffffffffffffffff, &(0x7f0000001180)="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", 0xa00) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="ecff0000f0ff00003f00000040000000420000005f81d4e87e9f89b09075fdd4b318ebae1ce0d80fffc25ac916c876281b469a34ba453a03864518e2e2eaeaacbcf6277c6e1f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r10}, 0x38) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r13 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r13, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r10, &(0x7f0000000180)="7685", 0x0}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 986.144623ms ago: executing program 4 (id=1385): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x840) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r8, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r9], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0xe, 0x0, 0x9, 0x0, 0x9, 0xba7, 0xffffffff}, 0x1c) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r10, &(0x7f0000000040)='&', &(0x7f0000000280)=""/6}, 0x20) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) 982.148521ms ago: executing program 1 (id=1386): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000140), 0x0}, 0x20) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 980.812137ms ago: executing program 3 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="ad49fa326f3abd418520a45d39756e1bc25d266ebc97cc81a1d595d4172d95e69453e763db37aa642b756cb5f997974b60d0a213de86aa687daed36c23a4fea468e96e9ade73f9c2cbe266f80b02f75a8f987b9ee59a224211e951283e06b2ffcf104ad395f6b975f3b36b98ae7a2d2e26bb2725b90b9f400267b45dfc3fc444880c", @ANYRES16=r2, @ANYBLOB="000328bd7000ffd9df2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010010}, 0x240448c1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="ad49fa326f3abd418520a45d39756e1bc25d266ebc97cc81a1d595d4172d95e69453e763db37aa642b756cb5f997974b60d0a213de86aa687daed36c23a4fea468e96e9ade73f9c2cbe266f80b02f75a8f987b9ee59a224211e951283e06b2ffcf104ad395f6b975f3b36b98ae7a2d2e26bb2725b90b9f400267b45dfc3fc444880c", @ANYRES16=r2, @ANYBLOB="000328bd7000ffd9df2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010010}, 0x240448c1) (async) 946.528577ms ago: executing program 2 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000011dfff00000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000, r9}, 0x38) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r10}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0xfffffffd}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x24, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9d84, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x1, 0x3, 0x1, 0x5, 0x4, 0x40, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x1, 0x1, 0x3, 0x7, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x0, 0xd, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r13, 0x400, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 812.337992ms ago: executing program 1 (id=1389): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000005d40)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x6, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x7a}, 0xf, 0x2, 0x6, 0x7, 0x3, 'syz0\x00', "0571434b6b3de67cfa299848ed68f663de3b48ba2007173ab6730905a3b417b0", "2de94a3b374c123c1a71733f48285ca0873e51bd6034eadd6b5fac77e27f82b8", [{0x0, 0x7, {0x1, 0x8}}, {0x7, 0x6, {0x3, 0x6}}, {0x6, 0x5, {0x0, 0x68}}, {0x82e3, 0x3, {0x2, 0x5}}, {0x21, 0x3}, {0x6, 0x4, {0x1, 0xfffffff7}}, {0x7, 0x1, {0x1, 0x9}}, {0x401, 0xc1a, {0x1, 0x2}}, {0x3, 0x7, {0x3, 0x9}}, {0x4, 0xea, {0x0, 0x8}}, {0x7, 0x3, {0x1, 0x200}}, {0x5, 0x5, {0x3, 0x2}}, {0x2, 0xd, {0x1, 0xfff}}, {0xfffc, 0xfffe, {0x1, 0x1ff}}, {0x3, 0x0, {0x2, 0x69}}, {0xb1, 0x475e, {0x2, 0x2}}, {0x7, 0x24, {0x2, 0x3}}, {0x30e3, 0x1, {0x1, 0x80000001}}, {0x8000, 0x8001, {0x2, 0x5}}, {0x9, 0x80, {0x3, 0xe64}}, {0x2, 0x5, {0x3, 0x66e3}}, {0x10, 0x1181, {0x0, 0xfff}}, {0x8, 0x5, {0x2, 0xe}}, {0x80, 0x2, {0x2}}, {0x2, 0x8, {0x2, 0x61c3d588}}, {0x9, 0x9, {0x0, 0x6}}, {0x8, 0x6, {0x0, 0xfff}}, {0x3, 0x13, {0x2}}, {0x2, 0x1, {0x3, 0xe}}, {0xfffa, 0x2, {0x1, 0x3}}, {0x2, 0x7, {0x0, 0x3}}, {0x0, 0xb054, {0x3, 0xcf}}, {0x5, 0x200, {0x2, 0x3}}, {0xfffb, 0x8, {0x2, 0x7fffffff}}, {0xa, 0xa, {0x1, 0x8}}, {0x1, 0x401, {0x1, 0x2}}, {0x77, 0x1, {0x3, 0x5}}, {0x3, 0x6, {0xfd48b7a836976d95, 0x8}}, {0x0, 0x4, {0x1, 0xabd}}, {0xa, 0xc}]}}}]}, 0x268}}, 0x24040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x5, 0x4, 0x4, 0x82, 0xffffffffffffffff, 0x8, '\x00', r6, r7, 0x4, 0x2}, 0x50) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 766.274358ms ago: executing program 3 (id=1390): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x46}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000200)=0x28) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xc62}, 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x40, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}], @NL80211_ATTR_FRAME={0x123, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x436}, @device_b, @device_a, @from_mac, {0x0, 0xaf}}, 0x6, @random=0x100, 0x10, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0xd}, @val={0x4, 0x6, {0xe, 0x2, 0x1, 0xffff}}, @val={0x6, 0x2, 0x473}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x1}}, [{0xdd, 0x10, "35c2615ccd1350d3521285d5c80ddc28"}, {0xdd, 0xcc, "fdb47f4950f113a5fc7f2522f122c5ccf299720b47fc2a13f96e010de401a1982ad92160e8a4b54fbfb5ba58c971abbcb882fa01f717c38769d4572df2ef2052631f9a16ed4847a8635b6be99563278cd7ce8475fe71ed30b3ed3ba4171bad579b2ef80b60b2d500a9f6320614f4cf40d42f9eacd60c28746467f9bea1c100aa54a137316709f1ae827558df125d1a858b8cac181a8ba673ab3258ff693cf88e9f090fc7ee7b81dda1429100b2b4a99edb6d75d6b250b5f899bf3d347323f233778ad8e68294cc15fa63e1c4"}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc9c8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c1}], @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000001}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r5, 0x208, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2d}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x48094) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000007c0)=@fragment={0x33, 0x0, 0x0, 0x0, 0x0, 0x8, 0x66}, 0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000800)={0x1, 0x9}) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@getae={0x184, 0x1f, 0x10, 0x70bd26, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d4, 0x2, 0x32}, @in=@remote, 0x0, 0x3501}, [@proto={0x5, 0x19, 0x3c}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@loopback}, @algo_auth={0x119, 0x1, {{'sha512_mb\x00'}, 0x688, "7e54ec10671daf617f19b2cec72134006ba4d905714ace239475fd03b967ea45ddf69b7ad48f2ad54deeb6ebad06974424afc12bc15e28c9940cfb524d67f5b7b255a82064198e93941bd65fd63884c581392a17ca13d125540aecd238487c5c9ea009d8a1985ab36deca2aba7b312737b09ce25070d374e0b20a12604e1230a33c4e9a06d83545e3fbaf007e91da33c18c74d812c14fdb45608203542ffba26a8afdef2ee1237c5c37748b4981d299bf46c352876e25ac3875352099195290fcc7826c68e245d5c27d0b4054f02a824d4"}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x40060) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x4, 0xc84e, 0x1, 0x9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x15b}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0xc081) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1, 0xc, &(0x7f0000000e00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @exit], &(0x7f0000000e80)='syzkaller\x00', 0xfffff800, 0x3c, &(0x7f0000000ec0)=""/60, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1b, r1, 0x8, &(0x7f0000000f00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0x1, 0x4, 0x200}, 0x10, 0xffffffffffffffff, r1, 0xa, &(0x7f0000000f80)=[r1, r1], &(0x7f0000000fc0)=[{0x0, 0x2, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x5, 0x2, 0x1, 0x9}, {0x2, 0x1, 0x10, 0x7}, {0x2, 0x1, 0xa, 0x1}, {0x3, 0x1, 0x5, 0xa}, {0x1, 0x4, 0x6, 0x3}, {0x3, 0x2, 0x10, 0x2}, {0x1, 0x5, 0xc, 0x3}, {0x4, 0x1, 0x7, 0x8}], 0x10, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001140)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x40000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001280)) bpf$ENABLE_STATS(0x20, &(0x7f00000012c0), 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r8) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x58, r10, 0x35, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x880) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001480)=@req={0x6, 0x41ce, 0xa1, 0x10001}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f0000001500)={0xaef, 0x8, [0x4, 0x10000, 0xfffffffffffffb35, 0x4], &(0x7f00000014c0)=[0x0]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) 580.324517ms ago: executing program 4 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xe, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x24, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x6bf3528de22f1b8a}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x6, 0x5}}]}}]}, 0x50}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 513.05953ms ago: executing program 3 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) 451.389315ms ago: executing program 2 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, 0x7, 0x4a, &(0x7f00000003c0)=""/74, 0x0, 0x31, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0xcf79, 0xfd3d}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) (rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x100, 0xf3e2, 0x28}, 0x50) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000009000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a323dfc00004f21bc8f3cecfbc6bc0d0000080041007278650014003300767863616e3100"/68], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 32) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x104, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xd4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x9, 0x7, 0x7, 0x9, 0x6, 0x8, 0x80, 0x9, 0x1, 0x4, 0x7, 0xb, 0xf, 0x1, 0x5, 0xa], 0x1, [0x7fff, 0x3, 0x8, 0x4, 0x4, 0x2, 0x4, 0x7, 0xa188, 0x8, 0x9, 0x1, 0x5, 0x2, 0x8, 0x1], [0x40, 0xe, 0x40, 0x1, 0x5, 0xf, 0x3, 0x81cf, 0x4, 0x1, 0x1000, 0x2, 0x6, 0x3, 0x1d, 0xffff]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x8], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0x104}}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x54}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 382.603703ms ago: executing program 4 (id=1394): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000d6ab35b2000000000000000000000000000043632884bdb6080a68b4fe0438afae0993d87188d926378923c79303422edc5efca72354801f89727906a41d9d3ba58fa5e7208b7da9078ea13c84465fa59262426b47f92eb2731dad9b3b302277080061e3796dbae5f26c3b0b36c40533aa2afb8ebbaf1f31c70631ba9511f9123a6107b6d9b6a03c4a57363c8993be7be7dd9bbca88cc8bef608", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000063000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x2) (async) listen(r5, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0002000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0002000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r8, 0x0, 0x40}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r8, 0x0, 0x40}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r9, @ANYBLOB="040027bd7000fddbdf2502000000040001805000068014000400fc02000000000000000000000000000114000400fe8000000000000000000000000000aa050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES32=r10, @ANYBLOB="2800068014000400ff0200000000000000000000000000010600010002000000060005004e2100000c00068008000700", @ANYRES32=0x0, @ANYBLOB="080003000200000008000400ff7c3349928410b00000005bda6c30b1ab283a1a3aa4a0af0fa78a6bf311ee7f053260746198c5c76d5af945b2980299822a5ae0533824531728458cd9be0b658b2d254e8555c57648b5b15cc30003284700000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 369.955613ms ago: executing program 1 (id=1395): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42ea00, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x10}) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a0000000000006102000000000000180000000000000000009500"/40], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x19, 0x0, &(0x7f00000005c0)="b9ff0303000d698cb89e40f008006000000e00001100630277", 0x0, 0x19, 0x2000000, 0x0, 0xffffffffffffff9a, &(0x7f0000000440), &(0x7f0000000680)="b477c37a106d5991b6f4be171e79cdf213529265589606c0e5469934d5b8ce54546470a1033e83b6c3978a44b86a4f913660464196cffc147628cdec941fd1008f62dc6921f1f362672cdc31bf8884958baab9d69e4fe28459a9840828db2bbf5837d828041b5aaa49c3dba61086846115a8b6e2472198b0887fb03913908e63288eb4e60ff53438b50552316600c4ab4f12873526a5be1cd7abdb8ee145c3079330bf4911cc1bb735e88f321e9fc26a5792fc5b2f52860ae0dc60e6f7341919a065e49692d5a6055535df0c3cc1"}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x691a, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 334.753193ms ago: executing program 3 (id=1396): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x8c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x42, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f545479b86389af1677ed7812f19b0014cc7170783fd6b27e63e13ff49da"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f489c56331ea60ab9", 0xdc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 258.856289ms ago: executing program 2 (id=1397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000c00)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xb8b86be5165abc0a) 238.14349ms ago: executing program 1 (id=1398): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x2, 0x1}, 0xc) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {0xe, 0x8}, {0xfff3, 0x5b52c777c144f3a3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xc3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x30}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0xf, 0x2, 0x9}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x1}, 0x2}, 0x18) socket$tipc(0x1e, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000280)=0x6, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000005c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x25c, 0x14, 0x300, 0x70bd27, 0x25dfdbfe, {0x25, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "2e959e86665edc0500a9f5ac26"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "4bc753a532cba5176bc46a72275502eb0a27d68bb6b59b8141f30defa28a9fa667e948d65ec139b53bd88e8c5c22a8d215d52262e6a52a6d3d7c184217e89654e43a4d4b365f7b24dce58417ae4acf1ce4ec"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "fd63e2e0ef80caed1249"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "4324e0eb63e0fa712a736b934661050ed3450e4510657e6dc212f2507ecfd972aae10467de81f80367374c74a2c142f488dc5a4edd56cfa1eb632951ae14fd6ca63e84444104745e0e24947cc3492dc07a8eeab92e040decae3585619fe27a11f12e1ac149124f4b9580fe1897fd7bc21d9f67690489fe1fdbe9734e79e18134b5d891d9e04b4134591b208345295c4b0d53b937c67753e598a0f4baf213bc308ed8a3d0790d49de3fdc8c2c"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "c39ac477e54b53ccff334ee886c9cfc4e4109a4ff16bb09ca5968047e62a9dacc6e0731db2b977a13bb8627ffda7591504282add493c7d3cd3c98db345a1faceef3833a716a6a78d9fd34e9d55fccdee5ab8aa538eedeeb38e7893c6ce73740f9c61c81597ab2744e3893a1e59a052"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "5fe56c5b75c3440a75a049dbf11bf992a215aec6514a9c2c4290b41a10b1797fd1e9bf04668eab3ca7d181fdab1c984b852dc41b7d459855d2393bef1e31815f4a12fe91e79203ee4d920cf12373acc2bb262f7f44bb1de8ee4631cb1c03f98bd9476193fe1a2e7bf4dbde86db48363c414923b02b51cc2f021d037141918bbc282d787ace0c9a22ac0b42cfec391ecdc8205eb50c25bb3c5ae4d0de55ecffd003"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x200008d4}, 0x880) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x22, 0x80000, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe8, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcc, 0xbe, "1bb63f5c68185780ccb16d608c170a75f9985861de4aa628174780ff83b0ee225d054e0fb76c76982f9674d0a56bb02af373a42105fd1170caa180a873d39b763c71b34213179b21326022c8dfbc944a65dda074747f8caa9107bd9f469f776a5eb2da1ab186ac13da260419ff886a62481e774c0aa07e5af94c39e3deea1facecf6ff30dc84cc47e4e5f9c48ae22f6ea82ddfdb15b764a01eb898cb4b62ee53d915907054753c048271de13d036316f728ffdb11a04e1ab2029ff058e7280e5edcdb0673e0fb3ee"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000008) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8890) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb8, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000c00)={'netpci0\x00', {0x2, 0x0, @multicast1}}) r9 = epoll_create1(0x0) close(r9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = accept4$tipc(r3, &(0x7f0000000c80)=@id, &(0x7f0000000cc0)=0x10, 0x80000) bind$tipc(r10, 0x0, 0x0) recvmsg(r0, &(0x7f00000014c0)={&(0x7f0000000d00)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000d80)=""/248, 0xf8}, {&(0x7f0000000e80)=""/59, 0x3b}, {&(0x7f0000000ec0)=""/211, 0xd3}, {&(0x7f0000000fc0)=""/255, 0xff}, {&(0x7f00000010c0)=""/242, 0xf2}, {&(0x7f00000011c0)=""/241, 0xf1}, {&(0x7f00000012c0)=""/247, 0xf7}], 0x7, &(0x7f0000001440)=""/108, 0x6c}, 0x100) 223.367784ms ago: executing program 3 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket(0x29, 0x5, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x10000008}) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_STATION(r10, 0x0, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0xfffffffb) 103.136513ms ago: executing program 2 (id=1400): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x1458, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x11}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6003}, @NL80211_ATTR_FRAME={0x1100, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac=@device_b, {0x9, 0x1}, @device_a, @value={0x1, 0x0, 0x3, 0x1, 0xf6}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x1000, "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"}, {@device_b, @device_a, 0xb7, "06e5bb9e0079e79b27dfd58c4ab4717f81b6e2e7ea0a4ef44f1bfa7b4fc0b6e3ced79ec023e06fb8d152b9e33e58a2ef86b040cf936011e2b7dd382c5ac475f6d234576d26203a7ae3eba4fcc91b990030e1ff8bc43b5dd3f4202f37f1260e37fea5cc08e40574d274d7be8e4839e3d80dd7d7e40e5cfe06138719c245ccec55af846f22b604276604828e673df67400da93beefb76b74ae3654bae313e25945f782c039c3949a658f02661511b49e8c222ef99190061b"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x19}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x304, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_b, @broadcast, {0x5, 0xd}, @device_b, @value={0x2, 0x1, 0x1, 0x0, 0x5}, @value=@ver_80211n={0x0, 0xd8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa01}]}, 0x1458}, 0x1, 0x0, 0x0, 0x4000}, 0x4000041) 0s ago: executing program 4 (id=1401): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): 0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.958522][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.973210][ T5833] veth0_macvtap: entered promiscuous mode [ 92.003935][ T5826] veth0_macvtap: entered promiscuous mode [ 92.028038][ T5833] veth1_macvtap: entered promiscuous mode [ 92.044151][ T5826] veth1_macvtap: entered promiscuous mode [ 92.119684][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.158431][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.166612][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.188739][ T5838] Bluetooth: hci0: command tx timeout [ 92.198451][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.205272][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.233335][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.245873][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.255569][ T5838] Bluetooth: hci1: command tx timeout [ 92.255904][ T5844] Bluetooth: hci3: command tx timeout [ 92.263545][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.300171][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.309174][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.335262][ T5844] Bluetooth: hci2: command tx timeout [ 92.335413][ T5838] Bluetooth: hci4: command tx timeout [ 92.359842][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.368371][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.376159][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.379297][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.408594][ T5832] veth0_vlan: entered promiscuous mode [ 92.418168][ T5829] veth0_vlan: entered promiscuous mode [ 92.424005][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.433311][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.497642][ T5832] veth1_vlan: entered promiscuous mode [ 92.529778][ T5829] veth1_vlan: entered promiscuous mode [ 92.547700][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.584215][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.600891][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.623746][ T5832] veth0_macvtap: entered promiscuous mode [ 92.694697][ T5832] veth1_macvtap: entered promiscuous mode [ 92.703535][ T5949] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 92.711286][ T5949] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.734249][ T5949] .`: renamed from bond0 (while UP) [ 92.775268][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.792085][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.802497][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.812999][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.832011][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.896871][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.918453][ T5829] veth0_macvtap: entered promiscuous mode [ 92.948556][ T5829] veth1_macvtap: entered promiscuous mode [ 92.986602][ T1118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.987251][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.995962][ T1118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012085][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.116177][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.122389][ T1118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.136417][ T1118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174164][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.189720][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.224032][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.284744][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.303669][ T5958] Zero length message leads to an empty skb [ 93.324155][ T5953] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.333355][ T5958] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 93.355179][ T5953] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.420214][ T5958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.487846][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.495173][ T1118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.503944][ T1118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.519151][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.542821][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.550620][ T1118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.564241][ T1118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583374][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.595291][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.603160][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.613286][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.687860][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.696573][ T5953] wg1 speed is unknown, defaulting to 1000 [ 93.726197][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.751506][ T5964] netlink: 'syz.1.8': attribute type 7 has an invalid length. [ 93.765366][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.790724][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.801295][ T5964] netlink: 'syz.1.8': attribute type 8 has an invalid length. [ 94.003003][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.025630][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 94.034821][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.160715][ T5974] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.188057][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 94.213204][ T5970] netlink: 'syz.1.11': attribute type 13 has an invalid length. [ 94.213868][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.237259][ T5970] netlink: 'syz.1.11': attribute type 17 has an invalid length. [ 94.255323][ T5844] Bluetooth: hci0: command tx timeout [ 94.266221][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.334806][ T5844] Bluetooth: hci3: command tx timeout [ 94.335413][ T53] Bluetooth: hci1: command tx timeout [ 94.415085][ T53] Bluetooth: hci2: command tx timeout [ 94.425761][ T53] Bluetooth: hci4: command tx timeout [ 94.439979][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13'. [ 94.463325][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.471749][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.747271][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.771874][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.077512][ T61] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.104052][ T61] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.157184][ T61] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.171344][ T61] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.274101][ T5980] wg1 speed is unknown, defaulting to 1000 [ 95.549423][ T5991] xfrm0: entered promiscuous mode [ 95.558312][ T5991] xfrm0: entered allmulticast mode [ 95.630105][ T5994] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 95.675274][ T5996] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 95.679325][ T5995] wg1 speed is unknown, defaulting to 1000 [ 95.689103][ T5994] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.758609][ T5998] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 96.070404][ T6001] wg1 speed is unknown, defaulting to 1000 [ 96.070442][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 96.498308][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 97.738397][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 98.141135][ T6034] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 98.149319][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 98.230778][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 98.846282][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 98.891276][ T6052] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 99.114791][ T6065] tipc: Started in network mode [ 99.147570][ T6065] tipc: Node identity f255952a89c4, cluster identity 4711 [ 99.171935][ T6065] tipc: Enabled bearer , priority 0 [ 99.180091][ T6063] syzkaller0: entered promiscuous mode [ 99.189079][ T6063] syzkaller0: entered allmulticast mode [ 99.256199][ T6063] tipc: Resetting bearer [ 99.330150][ T6063] tipc: Disabling bearer [ 99.461716][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.498202][ T6077] bond0: (slave rose0): Enslaving as an active interface with an up link [ 99.528392][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 99.557413][ T6080] wg1 speed is unknown, defaulting to 1000 [ 99.563627][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 100.065909][ T6107] tipc: New replicast peer: 255.255.255.255 [ 100.072632][ T6107] tipc: Enabled bearer , priority 10 [ 101.185764][ T5836] tipc: Node number set to 2073138474 [ 101.407218][ T6144] openvswitch: netlink: Key type 93 is out of range max 32 [ 101.705875][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 102.047069][ T6167] syzkaller1: entered promiscuous mode [ 102.052611][ T6167] syzkaller1: entered allmulticast mode [ 102.331902][ T6178] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 102.613226][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.474661][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 103.564998][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 104.084159][ T6230] netlink: 'syz.1.66': attribute type 13 has an invalid length. [ 104.145653][ T6230] netlink: 'syz.1.66': attribute type 17 has an invalid length. [ 104.426135][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.483715][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.596051][ T6230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.622370][ T6233] xfrm0: entered promiscuous mode [ 104.629021][ T6233] xfrm0: entered allmulticast mode [ 104.885357][ T6247] sctp: [Deprecated]: syz.3.69 (pid 6247) Use of int in maxseg socket option. [ 104.885357][ T6247] Use struct sctp_assoc_value instead [ 105.025751][ T6251] netlink: 'syz.2.71': attribute type 5 has an invalid length. [ 105.475965][ T6260] wg1 speed is unknown, defaulting to 1000 [ 105.544279][ T6262] wg1 speed is unknown, defaulting to 1000 [ 105.560643][ T6266] syzkaller0: entered promiscuous mode [ 105.594575][ T6266] syzkaller0: entered allmulticast mode [ 105.766041][ T6276] syz_tun: entered allmulticast mode [ 106.005671][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 106.074665][ T6296] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 106.086394][ T3492] bond0: (slave bond_slave_0): interface is now down [ 106.124726][ T3492] bond0: (slave bond_slave_1): interface is now down [ 106.134608][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.84'. [ 106.151766][ T6259] syz_tun: left allmulticast mode [ 106.167709][ T3492] bond0: now running without any active interface! [ 106.330526][ T6303] netlink: 224 bytes leftover after parsing attributes in process `syz.1.84'. [ 106.421761][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 106.565295][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 106.596043][ T5987] IPVS: starting estimator thread 0... [ 106.622259][ T6306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 106.647208][ T6315] netlink: 'syz.0.86': attribute type 13 has an invalid length. [ 106.700814][ T6312] pimreg3: entered allmulticast mode [ 106.895705][ T6314] IPVS: using max 27 ests per chain, 64800 per kthread [ 106.936475][ T6310] netlink: 'syz.0.86': attribute type 3 has an invalid length. [ 106.944843][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.952652][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.072996][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.089252][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.240858][ T6330] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 107.345190][ T5836] wg1 speed is unknown, defaulting to 1000 [ 107.351544][ T5836] syz0: Port: 1 Link DOWN [ 107.362394][ T1105] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.413839][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 107.424282][ T1105] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.641203][ T1105] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.666718][ T6355] trusted_key: syz.3.95 sent an empty control message without MSG_MORE. [ 107.678296][ T1105] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.892016][ T6359] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 107.952492][ T6359] bridge1: entered promiscuous mode [ 107.958465][ T6359] bridge1: entered allmulticast mode [ 107.984852][ T6365] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 108.072680][ T6366] syztnl0: entered promiscuous mode [ 108.077448][ T6372] netlink: 'syz.2.100': attribute type 32 has an invalid length. [ 108.110248][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 108.900545][ T6410] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 109.111013][ T6413] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 109.130287][ T6413] bond0 (unregistering): Released all slaves [ 109.397923][ T6422] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 109.412008][ T6422] netlink: 232 bytes leftover after parsing attributes in process `syz.4.114'. [ 109.573246][ T6430] netlink: 84 bytes leftover after parsing attributes in process `syz.3.117'. [ 109.660279][ T5940] IPVS: starting estimator thread 0... [ 109.666785][ T6437] netlink: 'syz.4.118': attribute type 3 has an invalid length. [ 109.685377][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.116'. [ 109.710764][ T6435] wg1 speed is unknown, defaulting to 1000 [ 109.774551][ T6436] IPVS: using max 26 ests per chain, 62400 per kthread [ 110.488563][ T6443] wg1 speed is unknown, defaulting to 1000 [ 110.547444][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 110.585538][ T6453] netlink: 284 bytes leftover after parsing attributes in process `syz.4.121'. [ 110.621263][ T6450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.859933][ T6460] bond0: (slave gre0): Error: Device type is different from other slaves [ 110.895120][ T6460] netlink: 'syz.3.124': attribute type 39 has an invalid length. [ 111.260480][ T6471] Cannot find add_set index 0 as target [ 111.286227][ T6475] rdma_rxe: rxe_newlink: failed to add lo [ 111.454194][ T6477] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 111.487519][ T6477] bond1 (unregistering): Released all slaves [ 111.588668][ T6474] wg1 speed is unknown, defaulting to 1000 [ 111.899824][ T6494] netlink: 96 bytes leftover after parsing attributes in process `syz.1.132'. [ 112.067799][ T6494] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.132'. [ 112.135694][ T6511] macsec1: entered promiscuous mode [ 112.141070][ T6511] macsec1: entered allmulticast mode [ 112.227004][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 112.620135][ T6532] ªªªªªª: renamed from wg2 (while UP) [ 112.711818][ T6529] wg1 speed is unknown, defaulting to 1000 [ 112.721988][ T6537] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.766637][ T6526] syz.1.139 (6526) used greatest stack depth: 17320 bytes left [ 112.980803][ T6544] wg1 speed is unknown, defaulting to 1000 [ 113.237548][ T6546] wg1 speed is unknown, defaulting to 1000 [ 113.269130][ T6555] geneve3: entered promiscuous mode [ 113.275114][ T6555] geneve3: entered allmulticast mode [ 113.300687][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 113.333899][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.145'. [ 113.597986][ T6552] wg1 speed is unknown, defaulting to 1000 [ 113.690279][ T6567] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 113.718941][ T6564] wg1 speed is unknown, defaulting to 1000 [ 113.802437][ T6569] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 113.861966][ T3492] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 113.878450][ T6567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.987363][ T6569] veth3: entered promiscuous mode [ 113.995038][ T1046] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 114.005430][ T6569] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 114.333576][ T3492] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 114.503794][ T6598] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20004 [ 115.462100][ T6634] wg1 speed is unknown, defaulting to 1000 [ 115.466032][ T6636] __nla_validate_parse: 1 callbacks suppressed [ 115.466053][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 115.505317][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 115.514173][ T6636] netlink: 'syz.3.166': attribute type 14 has an invalid length. [ 115.525304][ T6636] netlink: 'syz.3.166': attribute type 11 has an invalid length. [ 115.672585][ T6652] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 115.685225][ T6653] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 115.821109][ T6655] sctp: [Deprecated]: syz.2.169 (pid 6655) Use of int in max_burst socket option deprecated. [ 115.821109][ T6655] Use struct sctp_assoc_value instead [ 115.870384][ T6671] netlink: zone id is out of range [ 115.878583][ T3492] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 115.910971][ T6669] netlink: 52 bytes leftover after parsing attributes in process `syz.1.171'. [ 116.136801][ T6684] xt_CT: No such helper "snmp" [ 116.530951][ T6700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.619071][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 116.694130][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'. [ 116.855059][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 117.338653][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 117.394064][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 117.407115][ T6742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.190'. [ 117.633174][ T6745] netlink: 'syz.0.186': attribute type 29 has an invalid length. [ 117.662916][ T6743] wg1 speed is unknown, defaulting to 1000 [ 118.280932][ T6775] syzkaller0: entered promiscuous mode [ 118.308204][ T6790] xt_cgroup: path and classid specified [ 118.309075][ T6775] syzkaller0: entered allmulticast mode [ 118.671086][ T6798] wg1 speed is unknown, defaulting to 1000 [ 118.943540][ T6809] wg1 speed is unknown, defaulting to 1000 [ 119.289786][ T6829] wg1 speed is unknown, defaulting to 1000 [ 119.367742][ T6845] bond2: Unable to set up delay as MII monitoring is disabled [ 119.388953][ T6849] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 119.404873][ T6849] netlink: 244 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.407156][ T6845] bond2 (unregistering): Released all slaves [ 119.540070][ T6862] bridge1: entered promiscuous mode [ 119.551635][ T6862] bridge1: entered allmulticast mode [ 119.568291][ T6862] team0: Port device bridge1 added [ 119.950847][ T6885] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 120.032984][ T1861] IPVS: starting estimator thread 0... [ 120.093794][ T6896] sctp: [Deprecated]: syz.2.226 (pid 6896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.093794][ T6896] Use struct sctp_sack_info instead [ 120.144574][ T6894] IPVS: using max 26 ests per chain, 62400 per kthread [ 120.343812][ T6910] batadv1: entered promiscuous mode [ 120.350850][ T6910] batadv1: entered allmulticast mode [ 120.681789][ T6923] syzkaller1: entered promiscuous mode [ 120.689802][ T6923] syzkaller1: entered allmulticast mode [ 121.629130][ T6958] __nla_validate_parse: 3 callbacks suppressed [ 121.629150][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 122.029515][ T6974] xt_cgroup: xt_cgroup: no path or classid specified [ 122.337209][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 122.623862][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.245'. [ 122.688360][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 123.807401][ T7034] wg1 speed is unknown, defaulting to 1000 [ 124.404122][ T1105] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 124.854069][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 125.160801][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 125.441850][ T7116] bridge1: entered promiscuous mode [ 125.442496][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 125.448125][ T7116] bridge1: entered allmulticast mode [ 125.477993][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 125.513212][ T7123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.285'. [ 125.541432][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 125.669042][ T7132] netlink: 'syz.1.287': attribute type 14 has an invalid length. [ 125.680561][ T7132] tipc: Enabling of bearer rejected, failed to enable media [ 125.779794][ T7134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.866059][ T7146] FAULT_INJECTION: forcing a failure. [ 125.866059][ T7146] name failslab, interval 1, probability 0, space 0, times 1 [ 125.879625][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(full) [ 125.879655][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.879677][ T7146] Call Trace: [ 125.879686][ T7146] [ 125.879696][ T7146] dump_stack_lvl+0x189/0x250 [ 125.879739][ T7146] ? __pfx____ratelimit+0x10/0x10 [ 125.879764][ T7146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.879794][ T7146] ? __pfx__printk+0x10/0x10 [ 125.879823][ T7146] ? __pfx___might_resched+0x10/0x10 [ 125.879852][ T7146] should_fail_ex+0x414/0x560 [ 125.879891][ T7146] should_failslab+0xa8/0x100 [ 125.879915][ T7146] __kmalloc_noprof+0xcb/0x7f0 [ 125.879943][ T7146] ? kfree+0x4d/0x6d0 [ 125.879965][ T7146] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 125.880002][ T7146] tomoyo_realpath_from_path+0xe3/0x5d0 [ 125.880037][ T7146] ? tomoyo_domain+0xd9/0x130 [ 125.880074][ T7146] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 125.880100][ T7146] tomoyo_path_number_perm+0x1e8/0x5a0 [ 125.880128][ T7146] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.880197][ T7146] ? __fget_files+0x2a/0x420 [ 125.880223][ T7146] ? __fget_files+0x3a0/0x420 [ 125.880248][ T7146] ? __fget_files+0x2a/0x420 [ 125.880273][ T7146] security_file_ioctl+0xcb/0x2d0 [ 125.880301][ T7146] __se_sys_ioctl+0x47/0x170 [ 125.880332][ T7146] do_syscall_64+0xfa/0xfa0 [ 125.880357][ T7146] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.880383][ T7146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.880404][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 125.880430][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.880451][ T7146] RIP: 0033:0x7f6cf318efc9 [ 125.880476][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.880499][ T7146] RSP: 002b:00007f6cf400b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.880521][ T7146] RAX: ffffffffffffffda RBX: 00007f6cf33e5fa0 RCX: 00007f6cf318efc9 [ 125.880536][ T7146] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 125.880549][ T7146] RBP: 00007f6cf400b090 R08: 0000000000000000 R09: 0000000000000000 [ 125.880561][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.880573][ T7146] R13: 00007f6cf33e6038 R14: 00007f6cf33e5fa0 R15: 00007ffeea29a668 [ 125.880608][ T7146] [ 125.880622][ T7146] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.269795][ T7150] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 126.287078][ T7152] netlink: 'syz.1.289': attribute type 11 has an invalid length. [ 126.296341][ T7152] netlink: 'syz.1.289': attribute type 11 has an invalid length. [ 126.305449][ T7151] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 126.416008][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.501854][ T7163] syzkaller0: entered promiscuous mode [ 126.513405][ T7163] syzkaller0: entered allmulticast mode [ 126.773624][ T7184] FAULT_INJECTION: forcing a failure. [ 126.773624][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 126.786821][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.4.303 Not tainted syzkaller #0 PREEMPT(full) [ 126.786849][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.786863][ T7184] Call Trace: [ 126.786871][ T7184] [ 126.786880][ T7184] dump_stack_lvl+0x189/0x250 [ 126.786916][ T7184] ? __pfx____ratelimit+0x10/0x10 [ 126.786942][ T7184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.786972][ T7184] ? __pfx__printk+0x10/0x10 [ 126.786998][ T7184] ? __pfx___might_resched+0x10/0x10 [ 126.787014][ T7184] ? fs_reclaim_acquire+0x7d/0x100 [ 126.787041][ T7184] should_fail_ex+0x414/0x560 [ 126.787068][ T7184] should_failslab+0xa8/0x100 [ 126.787084][ T7184] __kmalloc_noprof+0xcb/0x7f0 [ 126.787105][ T7184] ? tomoyo_encode+0x28b/0x550 [ 126.787132][ T7184] tomoyo_encode+0x28b/0x550 [ 126.787159][ T7184] tomoyo_realpath_from_path+0x58d/0x5d0 [ 126.787184][ T7184] ? tomoyo_domain+0xd9/0x130 [ 126.787211][ T7184] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 126.787231][ T7184] tomoyo_path_number_perm+0x1e8/0x5a0 [ 126.787252][ T7184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.787299][ T7184] ? __fget_files+0x2a/0x420 [ 126.787316][ T7184] ? __fget_files+0x3a0/0x420 [ 126.787329][ T7184] ? __fget_files+0x2a/0x420 [ 126.787345][ T7184] security_file_ioctl+0xcb/0x2d0 [ 126.787364][ T7184] __se_sys_ioctl+0x47/0x170 [ 126.787385][ T7184] do_syscall_64+0xfa/0xfa0 [ 126.787402][ T7184] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.787420][ T7184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.787435][ T7184] ? clear_bhb_loop+0x60/0xb0 [ 126.787452][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.787475][ T7184] RIP: 0033:0x7f6cf318efc9 [ 126.787488][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.787501][ T7184] RSP: 002b:00007f6cf400b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.787517][ T7184] RAX: ffffffffffffffda RBX: 00007f6cf33e5fa0 RCX: 00007f6cf318efc9 [ 126.787528][ T7184] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 126.787537][ T7184] RBP: 00007f6cf400b090 R08: 0000000000000000 R09: 0000000000000000 [ 126.787546][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.787555][ T7184] R13: 00007f6cf33e6038 R14: 00007f6cf33e5fa0 R15: 00007ffeea29a668 [ 126.787579][ T7184] [ 126.787595][ T7184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.074620][ T7191] __nla_validate_parse: 5 callbacks suppressed [ 127.074635][ T7191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.304'. [ 127.091272][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 127.105887][ T7191] gretap0: entered promiscuous mode [ 127.325730][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 127.354056][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 127.480663][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 127.497395][ T7208] netlink: 14 bytes leftover after parsing attributes in process `syz.2.312'. [ 127.573403][ T7208] hsr_slave_0: left promiscuous mode [ 127.616166][ T7208] hsr_slave_1: left promiscuous mode [ 127.616753][ T7215] FAULT_INJECTION: forcing a failure. [ 127.616753][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 127.642414][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.1.315 Not tainted syzkaller #0 PREEMPT(full) [ 127.642444][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.642456][ T7215] Call Trace: [ 127.642464][ T7215] [ 127.642473][ T7215] dump_stack_lvl+0x189/0x250 [ 127.642508][ T7215] ? __pfx____ratelimit+0x10/0x10 [ 127.642532][ T7215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.642562][ T7215] ? __pfx__printk+0x10/0x10 [ 127.642590][ T7215] ? __pfx___might_resched+0x10/0x10 [ 127.642612][ T7215] ? fs_reclaim_acquire+0x7d/0x100 [ 127.642651][ T7215] should_fail_ex+0x414/0x560 [ 127.642688][ T7215] should_failslab+0xa8/0x100 [ 127.642712][ T7215] __kmalloc_noprof+0xcb/0x7f0 [ 127.642741][ T7215] ? tomoyo_encode+0x28b/0x550 [ 127.642780][ T7215] tomoyo_encode+0x28b/0x550 [ 127.642818][ T7215] tomoyo_realpath_from_path+0x58d/0x5d0 [ 127.642854][ T7215] ? tomoyo_domain+0xd9/0x130 [ 127.642893][ T7215] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 127.642920][ T7215] tomoyo_path_number_perm+0x1e8/0x5a0 [ 127.642950][ T7215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.643020][ T7215] ? __fget_files+0x2a/0x420 [ 127.643046][ T7215] ? __fget_files+0x3a0/0x420 [ 127.643087][ T7215] ? __fget_files+0x2a/0x420 [ 127.643107][ T7215] security_file_ioctl+0xcb/0x2d0 [ 127.643135][ T7215] __se_sys_ioctl+0x47/0x170 [ 127.643165][ T7215] do_syscall_64+0xfa/0xfa0 [ 127.643189][ T7215] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.643215][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.643235][ T7215] ? clear_bhb_loop+0x60/0xb0 [ 127.643261][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.643281][ T7215] RIP: 0033:0x7f5455b8efc9 [ 127.643299][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.643316][ T7215] RSP: 002b:00007f5456a98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.643345][ T7215] RAX: ffffffffffffffda RBX: 00007f5455de5fa0 RCX: 00007f5455b8efc9 [ 127.643360][ T7215] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 127.643374][ T7215] RBP: 00007f5456a98090 R08: 0000000000000000 R09: 0000000000000000 [ 127.643387][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.643398][ T7215] R13: 00007f5455de6038 R14: 00007f5455de5fa0 R15: 00007fff9cae03c8 [ 127.643431][ T7215] [ 127.643454][ T7215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.725567][ T7218] netlink: 'syz.4.317': attribute type 6 has an invalid length. [ 127.762903][ T7219] netlink: 64 bytes leftover after parsing attributes in process `syz.0.316'. [ 127.766922][ T7216] netlink: 120 bytes leftover after parsing attributes in process `syz.3.313'. [ 127.770356][ T7219] block nbd0: not configured, cannot reconfigure [ 128.174862][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 128.406608][ T7247] syzkaller0: entered promiscuous mode [ 128.419903][ T7247] syzkaller0: entered allmulticast mode [ 128.451713][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.479505][ T7253] netlink: 596 bytes leftover after parsing attributes in process `syz.4.326'. [ 128.709087][ T7258] block nbd0: server does not support multiple connections per device. [ 128.726195][ T7258] block nbd0: shutting down sockets [ 128.858450][ T7266] FAULT_INJECTION: forcing a failure. [ 128.858450][ T7266] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.882169][ T7270] tipc: Enabling of bearer rejected, failed to enable media [ 128.914143][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.0.330 Not tainted syzkaller #0 PREEMPT(full) [ 128.914173][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.914187][ T7266] Call Trace: [ 128.914195][ T7266] [ 128.914204][ T7266] dump_stack_lvl+0x189/0x250 [ 128.914241][ T7266] ? __pfx____ratelimit+0x10/0x10 [ 128.914266][ T7266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.914296][ T7266] ? __pfx__printk+0x10/0x10 [ 128.914333][ T7266] should_fail_ex+0x414/0x560 [ 128.914374][ T7266] _copy_to_user+0x31/0xb0 [ 128.914404][ T7266] simple_read_from_buffer+0xe1/0x170 [ 128.914442][ T7266] proc_fail_nth_read+0x1b3/0x220 [ 128.914473][ T7266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.914503][ T7266] ? rw_verify_area+0x2a6/0x4d0 [ 128.914530][ T7266] ? __lock_acquire+0xab9/0xd20 [ 128.914547][ T7266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.914575][ T7266] vfs_read+0x200/0xa30 [ 128.914602][ T7266] ? fdget_pos+0x247/0x320 [ 128.914626][ T7266] ? __pfx___mutex_lock+0x10/0x10 [ 128.914655][ T7266] ? __pfx_vfs_read+0x10/0x10 [ 128.914684][ T7266] ? __fget_files+0x2a/0x420 [ 128.914709][ T7266] ? __fget_files+0x3a0/0x420 [ 128.914727][ T7266] ? __fget_files+0x2a/0x420 [ 128.914758][ T7266] ksys_read+0x145/0x250 [ 128.914791][ T7266] ? __pfx_ksys_read+0x10/0x10 [ 128.914825][ T7266] ? do_syscall_64+0xbe/0xfa0 [ 128.914855][ T7266] do_syscall_64+0xfa/0xfa0 [ 128.914880][ T7266] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.914905][ T7266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.914926][ T7266] ? clear_bhb_loop+0x60/0xb0 [ 128.914953][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.914981][ T7266] RIP: 0033:0x7ffbc718d9dc [ 128.915001][ T7266] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.915018][ T7266] RSP: 002b:00007ffbc80f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.915041][ T7266] RAX: ffffffffffffffda RBX: 00007ffbc73e5fa0 RCX: 00007ffbc718d9dc [ 128.915057][ T7266] RDX: 000000000000000f RSI: 00007ffbc80f80a0 RDI: 0000000000000005 [ 128.915070][ T7266] RBP: 00007ffbc80f8090 R08: 0000000000000000 R09: 0000000000000000 [ 128.915083][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.915095][ T7266] R13: 00007ffbc73e6038 R14: 00007ffbc73e5fa0 R15: 00007ffd78b002a8 [ 128.915131][ T7266] [ 129.310193][ T7278] raw_sendmsg: syz.1.336 forgot to set AF_INET. Fix it! [ 129.703558][ T7308] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 129.711781][ T7308] NCSI netlink: No device for ifindex 0 [ 129.950820][ T7325] wg1 speed is unknown, defaulting to 1000 [ 129.968807][ T7327] openvswitch: netlink: Key type 39 is out of range max 32 [ 129.979089][ T7327] netlink: 'syz.2.349': attribute type 23 has an invalid length. [ 130.245158][ T7331] wg1 speed is unknown, defaulting to 1000 [ 130.561711][ T7333] wg1 speed is unknown, defaulting to 1000 [ 131.273429][ T7376] netlink: 'syz.0.361': attribute type 83 has an invalid length. [ 131.329168][ T7388] netlink: 'syz.3.362': attribute type 13 has an invalid length. [ 131.345537][ T7388] netlink: 'syz.3.362': attribute type 17 has an invalid length. [ 131.581974][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.817154][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.839402][ T7388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.005618][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.019075][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.114828][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.123774][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.148191][ T7394] wg1 speed is unknown, defaulting to 1000 [ 132.198928][ T7420] __nla_validate_parse: 79 callbacks suppressed [ 132.198955][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 132.226484][ T7422] netlink: 'syz.2.370': attribute type 3 has an invalid length. [ 132.234191][ T7422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.370'. [ 132.300947][ T7420] bond0: entered promiscuous mode [ 132.306172][ T7420] bond_slave_0: entered promiscuous mode [ 132.330588][ T7420] bond_slave_1: entered promiscuous mode [ 132.346347][ T7420] batadv0: entered promiscuous mode [ 132.364059][ T7420] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 132.381590][ T7420] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 132.799044][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 132.822788][ T7434] wg1 speed is unknown, defaulting to 1000 [ 132.830076][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 132.915049][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.921898][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.347623][ T7466] tipc: Started in network mode [ 133.359308][ T7466] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 133.394196][ T7466] tipc: Enabling of bearer rejected, failed to enable media [ 134.066915][ T7495] x_tables: duplicate entry at hook 1 [ 134.112887][ T7498] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 134.153848][ T7498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.263696][ T7504] Cannot find add_set index 0 as target [ 134.268829][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 134.400820][ T7514] netlink: 'syz.4.394': attribute type 9 has an invalid length. [ 134.410984][ T7514] netlink: 'syz.4.394': attribute type 6 has an invalid length. [ 134.435310][ T7514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'. [ 134.439891][ T7516] Bluetooth: MGMT ver 1.23 [ 134.451724][ T7514] xt_hashlimit: max too large, truncated to 1048576 [ 135.062516][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 135.174162][ T7552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.403'. [ 135.209821][ T7552] netlink: 76 bytes leftover after parsing attributes in process `syz.1.403'. [ 135.405444][ T7558] ip6gre1: entered allmulticast mode [ 135.569076][ T7568] bridge_slave_0: left allmulticast mode [ 135.586366][ T7568] bridge_slave_0: left promiscuous mode [ 135.599438][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.618346][ T7568] bridge_slave_1: left allmulticast mode [ 135.633084][ T7568] bridge_slave_1: left promiscuous mode [ 135.653329][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.686430][ T7568] bond0: (slave bond_slave_0): Releasing backup interface [ 135.718599][ T7568] bond0: (slave bond_slave_1): Releasing backup interface [ 135.757311][ T7568] team0: Port device team_slave_0 removed [ 135.793455][ T7568] team0: Port device team_slave_1 removed [ 135.813211][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.833762][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.856495][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.876242][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.923067][ T7568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.091637][ T7580] netlink: 6 bytes leftover after parsing attributes in process `syz.4.413'. [ 136.104621][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 136.115840][ T7580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.667964][ T7623] sock: sock_set_timeout: `syz.1.424' (pid 7623) tries to set negative timeout [ 136.718124][ T7625] tipc: Started in network mode [ 136.723066][ T7625] tipc: Node identity ac14140f, cluster identity 4711 [ 136.735070][ T7625] tipc: New replicast peer: 255.255.255.255 [ 136.741763][ T7625] tipc: Enabled bearer , priority 10 [ 136.820368][ T7623] wg1 speed is unknown, defaulting to 1000 [ 136.999363][ T7640] netlink: 'syz.0.431': attribute type 9 has an invalid length. [ 137.301880][ T7654] __nla_validate_parse: 2 callbacks suppressed [ 137.301899][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 137.349006][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 137.358431][ T7656] netlink: 48 bytes leftover after parsing attributes in process `syz.2.438'. [ 137.420942][ T7656] netlink: 'syz.2.438': attribute type 16 has an invalid length. [ 137.429061][ T7656] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.438'. [ 137.657716][ T7659] netlink: 'syz.0.437': attribute type 11 has an invalid length. [ 137.670284][ T7659] netlink: 'syz.0.437': attribute type 11 has an invalid length. [ 137.692318][ T7659] netlink: 224 bytes leftover after parsing attributes in process `syz.0.437'. [ 137.860643][ T5916] tipc: Node number set to 2886997007 [ 137.867682][ T7671] syzkaller0: entered promiscuous mode [ 137.876521][ T7671] syzkaller0: entered allmulticast mode [ 137.949393][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 138.242359][ T7697] syzkaller1: entered promiscuous mode [ 138.252638][ T7697] syzkaller1: entered allmulticast mode [ 138.575711][ T7713] netlink: 'syz.4.453': attribute type 9 has an invalid length. [ 138.604291][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 138.642074][ T7711] netlink: 'syz.1.452': attribute type 13 has an invalid length. [ 138.642584][ T7713] netlink: 84 bytes leftover after parsing attributes in process `syz.4.453'. [ 139.061346][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 139.202311][ T5987] IPVS: starting estimator thread 0... [ 139.232237][ T50] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.265746][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.289548][ T7732] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.297762][ T7734] IPVS: using max 25 ests per chain, 60000 per kthread [ 139.356120][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.385521][ T50] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.395191][ T7740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.457'. [ 139.853125][ T7756] wg1 speed is unknown, defaulting to 1000 [ 139.937987][ T7763] wg1 speed is unknown, defaulting to 1000 [ 140.696791][ T7786] team0: Port device team_slave_0 removed [ 140.907627][ T1105] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.931098][ T1105] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.047121][ T1105] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.062642][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.102050][ T30] audit: type=1800 audit(1761347108.455:2): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.477" name="blkio.bfq.time_recursive" dev="tmpfs" ino=529 res=0 errno=0 [ 141.138203][ T7808] wg1 speed is unknown, defaulting to 1000 [ 141.244823][ T7822] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 142.398172][ T7844] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 142.619035][ T7844] bond3 (unregistering): Released all slaves [ 142.881896][ T7859] __nla_validate_parse: 4 callbacks suppressed [ 142.881917][ T7859] netlink: 68 bytes leftover after parsing attributes in process `syz.4.489'. [ 143.018689][ T7863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.489'. [ 143.056276][ T7865] netlink: 'syz.3.490': attribute type 5 has an invalid length. [ 143.184186][ T7869] smc: net device bond0 applied user defined pnetid SYZ0 [ 143.228427][ T7865] smc: net device bond0 erased user defined pnetid SYZ0 [ 143.356990][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 143.979168][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 144.088708][ T7905] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 144.292400][ T7904] netlink: 'syz.1.502': attribute type 11 has an invalid length. [ 144.303950][ T7904] netlink: 'syz.1.502': attribute type 11 has an invalid length. [ 144.319131][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 144.334600][ T7904] netlink: 224 bytes leftover after parsing attributes in process `syz.1.502'. [ 144.396982][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 144.413777][ T7918] netlink: 'syz.2.508': attribute type 2 has an invalid length. [ 144.672786][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 144.711890][ T7929] netlink: 88 bytes leftover after parsing attributes in process `syz.2.509'. [ 144.988956][ T7947] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 145.014869][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.519'. [ 145.046816][ T7947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.105744][ T7951] block nbd0: shutting down sockets [ 145.175530][ T7947] x_tables: duplicate underflow at hook 4 [ 145.440453][ T7975] syzkaller0: entered promiscuous mode [ 145.482399][ T7975] syzkaller0: entered allmulticast mode [ 145.550375][ T7980] batadv1: entered promiscuous mode [ 145.575957][ T7980] batadv1: entered allmulticast mode [ 145.603511][ T7975] tipc: Enabled bearer , priority 0 [ 145.616093][ T7969] tipc: Resetting bearer [ 145.682346][ T7969] tipc: Disabling bearer [ 145.992843][ T8003] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 146.162572][ T8011] wg1 speed is unknown, defaulting to 1000 [ 146.319025][ T8012] wg1 speed is unknown, defaulting to 1000 [ 146.557532][ T8024] netlink: 'syz.2.539': attribute type 23 has an invalid length. [ 147.068458][ T8047] netlink: 'syz.1.546': attribute type 12 has an invalid length. [ 147.163104][ T8053] nbd: must specify at least one socket [ 147.339822][ T8060] wg1 speed is unknown, defaulting to 1000 [ 147.373144][ T8066] netlink: 'syz.1.548': attribute type 8 has an invalid length. [ 147.494546][ T8066] wg1 speed is unknown, defaulting to 1000 [ 147.560435][ T8075] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 147.660720][ T8075] bond2: entered promiscuous mode [ 147.669226][ T8075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.730820][ T8079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.740127][ T8079] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 147.751757][ T8079] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 147.767388][ T8083] x_tables: duplicate underflow at hook 1 [ 147.821010][ T8079] bond2: (slave gre1): making interface the new active one [ 147.832947][ T8079] gre1: entered promiscuous mode [ 147.840384][ T8079] bond2: (slave gre1): Enslaving as an active interface with an up link [ 147.947038][ T8085] __nla_validate_parse: 8 callbacks suppressed [ 147.947056][ T8085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.553'. [ 148.060271][ T8089] netlink: 'syz.3.554': attribute type 11 has an invalid length. [ 148.431202][ T8107] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 148.456792][ T8106] wg1 speed is unknown, defaulting to 1000 [ 148.467030][ T8107] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 148.514248][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 148.803044][ T8109] wg1 speed is unknown, defaulting to 1000 [ 149.486393][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 149.649550][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.566'. [ 149.982215][ T8161] netlink: 'syz.2.573': attribute type 8 has an invalid length. [ 150.044074][ T8143] wg1 speed is unknown, defaulting to 1000 [ 150.060181][ T8163] veth6: entered promiscuous mode [ 150.075249][ T8163] veth6: entered allmulticast mode [ 150.209627][ T8161] wg1 speed is unknown, defaulting to 1000 [ 150.320132][ T1861] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 150.339930][ T1861] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 150.933992][ T8191] team_slave_1: entered promiscuous mode [ 150.966354][ T8191] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.030526][ T8192] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 151.223371][ T8202] wg1 speed is unknown, defaulting to 1000 [ 151.454687][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 151.548708][ T8226] xt_TCPMSS: Only works on TCP SYN packets [ 151.840736][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 151.887350][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.592'. [ 152.012424][ T8237] gretap1: entered promiscuous mode [ 152.196023][ T8248] Bluetooth: MGMT ver 1.23 [ 152.220530][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 153.295555][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 153.714091][ T8328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.111398][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 154.464854][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.472761][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.557928][ T8342] team_slave_1: left promiscuous mode [ 154.891850][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.919317][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.352841][ T8342] veth3: left promiscuous mode [ 155.359890][ T8342] bridge1: left promiscuous mode [ 155.424116][ T8342] veth6: left promiscuous mode [ 155.497383][ T8352] syzkaller1: entered promiscuous mode [ 155.503152][ T8352] syzkaller1: entered allmulticast mode [ 155.534777][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.558043][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.567261][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 155.608148][ T8389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 155.698803][ T8391] netlink: 116 bytes leftover after parsing attributes in process `syz.3.635'. [ 155.728779][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.750729][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.963745][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 155.982995][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 156.173492][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 156.226886][ T8420] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 156.700700][ T8420] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 156.720207][ T8403] wg1 speed is unknown, defaulting to 1000 [ 156.868523][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.647'. [ 156.904508][ T8422] sock: sock_set_timeout: `syz.2.645' (pid 8422) tries to set negative timeout [ 157.299592][ T8442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.650'. [ 157.355619][ T8449] x_tables: duplicate underflow at hook 2 [ 157.773476][ T8462] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.280145][ T8481] wg1 speed is unknown, defaulting to 1000 [ 158.384707][ T8484] syzkaller0: entered promiscuous mode [ 158.397779][ T8484] syzkaller0: entered allmulticast mode [ 159.434973][ T8496] x_tables: duplicate underflow at hook 1 [ 160.686470][ T8522] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 160.815761][ T8520] geneve3: entered promiscuous mode [ 160.868523][ T8522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.877886][ T8523] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 160.922725][ T8498] wg1 speed is unknown, defaulting to 1000 [ 160.929045][ T3492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 160.955557][ T3492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 161.055699][ T3492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 161.096300][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 161.913778][ T8527] wg1 speed is unknown, defaulting to 1000 [ 162.040677][ T8537] wg1 speed is unknown, defaulting to 1000 [ 162.424021][ T8557] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 162.518213][ T8557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.579474][ T8558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.596273][ T8558] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 162.618206][ T8558] bond3: (slave vcan1): Error -95 calling set_mac_address [ 162.703468][ T8557] veth9: entered promiscuous mode [ 162.728442][ T8567] veth11: entered promiscuous mode [ 162.879540][ T8580] __nla_validate_parse: 1 callbacks suppressed [ 162.879559][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.685'. [ 163.122984][ T8594] wg1 speed is unknown, defaulting to 1000 [ 163.137060][ T8595] delete_channel: no stack [ 163.293067][ T8602] wg1 speed is unknown, defaulting to 1000 [ 163.720065][ T8610] wg1 speed is unknown, defaulting to 1000 [ 163.760132][ T8629] wg1 speed is unknown, defaulting to 1000 [ 164.198570][ T8642] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 164.208027][ T8642] netlink: 228 bytes leftover after parsing attributes in process `syz.2.700'. [ 164.538333][ T8656] syz.1.703 (8656) used obsolete PPPIOCDETACH ioctl [ 164.782460][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 164.897660][ T8675] netlink: 'syz.2.710': attribute type 21 has an invalid length. [ 164.908929][ T8675] netlink: 128 bytes leftover after parsing attributes in process `syz.2.710'. [ 164.920629][ T8675] netlink: 'syz.2.710': attribute type 5 has an invalid length. [ 164.928739][ T8675] netlink: 'syz.2.710': attribute type 6 has an invalid length. [ 164.936640][ T8675] netlink: 3 bytes leftover after parsing attributes in process `syz.2.710'. [ 164.968258][ T8679] xt_l2tp: v2 doesn't support IP mode [ 165.123853][ T8688] tipc: Started in network mode [ 165.129960][ T8688] tipc: Node identity 4a68827092fd, cluster identity 4711 [ 165.137354][ T8688] tipc: Enabled bearer , priority 0 [ 165.157760][ T8688] syzkaller0: entered promiscuous mode [ 165.163286][ T8688] syzkaller0: entered allmulticast mode [ 165.201659][ T8688] tipc: Resetting bearer [ 165.226740][ T8688] openvswitch: netlink: IP tunnel dst address not specified [ 165.239399][ T8687] tipc: Resetting bearer [ 165.266172][ T8687] tipc: Disabling bearer [ 165.290960][ T8692] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.299051][ T8692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.306525][ T8692] IPv6: NLM_F_CREATE should be set when creating new route [ 165.434922][ T8698] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 165.525409][ T8706] tipc: Enabling of bearer rejected, failed to enable media [ 165.742663][ T8717] wg1 speed is unknown, defaulting to 1000 [ 165.946045][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 165.965910][ T8723] team0: entered promiscuous mode [ 165.971204][ T8723] team_slave_0: entered promiscuous mode [ 165.985886][ T8723] team_slave_1: entered promiscuous mode [ 166.015026][ T8723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.023557][ T8723] team0: left promiscuous mode [ 166.028783][ T8723] team_slave_0: left promiscuous mode [ 166.034342][ T8723] team_slave_1: left promiscuous mode [ 166.107098][ T8728] wg1 speed is unknown, defaulting to 1000 [ 166.339764][ T8745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.729'. [ 166.392371][ T8743] wg1 speed is unknown, defaulting to 1000 [ 166.425423][ T8751] netlink: 240 bytes leftover after parsing attributes in process `syz.2.730'. [ 166.548168][ T8760] Bluetooth: MGMT ver 1.23 [ 166.554232][ T8760] netlink: 44 bytes leftover after parsing attributes in process `syz.2.733'. [ 166.566923][ T8760] netlink: 'syz.2.733': attribute type 5 has an invalid length. [ 166.586764][ T8760] ip6erspan0: entered promiscuous mode [ 166.604102][ T8761] syzkaller0: entered promiscuous mode [ 166.612129][ T8761] syzkaller0: entered allmulticast mode [ 166.951485][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 167.110731][ T8785] bridge_slave_1: left allmulticast mode [ 167.126947][ T8785] bridge_slave_1: left promiscuous mode [ 167.132841][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.148545][ T8785] bridge_slave_0: left allmulticast mode [ 167.154609][ T8785] bridge_slave_0: left promiscuous mode [ 167.160424][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.298589][ T8787] net veth1_virt_wifi ªªªªªÿÿ: renamed from virt_wifi0 [ 167.450133][ T8794] wg1 speed is unknown, defaulting to 1000 [ 167.475468][ T8799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 167.747625][ T8807] wg1 speed is unknown, defaulting to 1000 [ 167.920787][ T8821] syz_tun: entered allmulticast mode [ 167.981838][ T8821] wg1 speed is unknown, defaulting to 1000 [ 168.165666][ T8820] syz_tun: left allmulticast mode [ 168.429009][ T8836] __nla_validate_parse: 2 callbacks suppressed [ 168.429029][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 168.451128][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 168.669550][ T8849] netlink: 'syz.2.754': attribute type 12 has an invalid length. [ 168.740993][ T8846] netlink: 'syz.2.754': attribute type 4 has an invalid length. [ 169.566991][ T8878] netlink: 'syz.4.758': attribute type 4 has an invalid length. [ 169.625528][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 169.705916][ T8878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.713316][ T8878] IPv6: NLM_F_CREATE should be set when creating new route [ 169.720704][ T8878] IPv6: NLM_F_CREATE should be set when creating new route [ 169.728153][ T8878] IPv6: NLM_F_CREATE should be set when creating new route [ 170.386364][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 170.405216][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 170.422263][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 170.710314][ T8911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.907149][ T8929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.773'. [ 170.921606][ T8929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.773'. [ 170.985318][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 171.043257][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 171.052782][ T8938] netlink: 'syz.1.774': attribute type 18 has an invalid length. [ 171.261485][ T8946] syzkaller0: entered promiscuous mode [ 171.267342][ T8946] syzkaller0: entered allmulticast mode [ 171.930608][ T8972] netlink: 'syz.2.787': attribute type 4 has an invalid length. [ 172.033855][ T8972] wg1 speed is unknown, defaulting to 1000 [ 172.390303][ T8990] wg1 speed is unknown, defaulting to 1000 [ 173.366469][ T9013] wg1: entered promiscuous mode [ 173.375072][ T9013] wg1: entered allmulticast mode [ 173.394986][ T9010] syzkaller1: entered promiscuous mode [ 173.414339][ T9010] syzkaller1: entered allmulticast mode [ 173.545016][ T9017] syzkaller1: entered promiscuous mode [ 173.551692][ T9017] syzkaller1: entered allmulticast mode [ 173.828235][ T9032] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 173.920033][ T9036] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 173.964249][ T9036] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 174.080340][ T9058] __nla_validate_parse: 9 callbacks suppressed [ 174.080360][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 174.113735][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 174.160671][ T9032] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 174.269648][ T9064] syz_tun: entered allmulticast mode [ 174.441000][ T9068] wg1 speed is unknown, defaulting to 1000 [ 174.590096][ T9075] wg1 speed is unknown, defaulting to 1000 [ 174.940293][ T9078] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.967781][ T9078] netlink: 132 bytes leftover after parsing attributes in process `syz.4.817'. [ 174.990150][ T9078] netlink: 'syz.4.817': attribute type 29 has an invalid length. [ 175.015097][ T9078] netlink: 'syz.4.817': attribute type 29 has an invalid length. [ 175.093706][ T9083] netlink: 3 bytes leftover after parsing attributes in process `syz.2.819'. [ 175.125864][ T9083] 0ªX¹¦À: renamed from caif0 [ 175.133754][ T9083] 0ªX¹¦À: entered allmulticast mode [ 175.149865][ T9083] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 175.170689][ T9063] syz_tun: left allmulticast mode [ 175.387293][ T9088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.642080][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.823'. [ 175.751887][ T9109] netlink: 'syz.4.825': attribute type 16 has an invalid length. [ 176.060505][ T9115] wg1 speed is unknown, defaulting to 1000 [ 176.248952][ T9125] netlink: 240 bytes leftover after parsing attributes in process `syz.1.829'. [ 176.268938][ T9125] netlink: 72 bytes leftover after parsing attributes in process `syz.1.829'. [ 176.447632][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.831'. [ 176.837870][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'. [ 176.851423][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 177.363385][ T9169] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 177.417629][ T9176] netlink: 'syz.4.842': attribute type 13 has an invalid length. [ 177.427409][ T9175] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 177.521857][ T9180] openvswitch: netlink: Message has 2712 unknown bytes. [ 177.533949][ T9180] netlink: 'syz.0.843': attribute type 11 has an invalid length. [ 177.742497][ T9193] netlink: 'syz.0.847': attribute type 14 has an invalid length. [ 177.819207][ T9193] netlink: 'syz.0.847': attribute type 39 has an invalid length. [ 177.943976][ T9204] netlink: 'syz.2.850': attribute type 9 has an invalid length. [ 178.606063][ T9256] gtp0: entered promiscuous mode [ 178.612041][ T9256] gtp0: entered allmulticast mode [ 179.104632][ T9283] __nla_validate_parse: 14 callbacks suppressed [ 179.104678][ T9283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.872'. [ 179.134251][ T9289] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 179.237254][ T9285] wg1 speed is unknown, defaulting to 1000 [ 179.489711][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.878'. [ 179.998633][ T9334] tipc: Can't bind to reserved service type 1 [ 180.323801][ T9351] bond0: option lp_interval: invalid value (0) [ 180.331204][ T9351] bond0: option lp_interval: allowed values 1 - 2147483647 [ 180.342224][ T9351] bond0 (unregistering): Released all slaves [ 180.410603][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 180.428497][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 180.473725][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 180.585823][ T9370] SET target dimension over the limit! [ 180.708821][ T9375] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 180.720823][ T9375] bond0 (unregistering): Released all slaves [ 180.848081][ T9381] netlink: 'syz.2.901': attribute type 12 has an invalid length. [ 180.856173][ T9381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.901'. [ 180.901502][ T9387] ip6tnl1: entered promiscuous mode [ 180.913248][ T9387] ip6tnl1: entered allmulticast mode [ 181.002900][ T9388] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 181.059517][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 181.273250][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 181.416925][ T9410] wg1 speed is unknown, defaulting to 1000 [ 181.534626][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 181.939819][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.917'. [ 182.114860][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 182.226533][ T9447] lo: entered promiscuous mode [ 182.258102][ T9447] tunl0: entered promiscuous mode [ 182.265344][ T9447] gre0: entered promiscuous mode [ 182.273133][ T9447] gretap0: left promiscuous mode [ 182.279867][ T9447] gretap0: entered promiscuous mode [ 182.293711][ T9447] erspan0: entered promiscuous mode [ 182.313250][ T9447] ip_vti0: entered promiscuous mode [ 182.326090][ T9447] ip6_vti0: entered promiscuous mode [ 182.337772][ T9447] sit0: entered promiscuous mode [ 182.360364][ T9447] ip6tnl0: entered promiscuous mode [ 182.400803][ T9447] ip6gre0: entered promiscuous mode [ 182.421111][ T9447] syz_tun: entered promiscuous mode [ 182.431556][ T9447] ip6gretap0: entered promiscuous mode [ 182.440455][ T9447] bridge0: entered promiscuous mode [ 182.456508][ T9447] vcan0: entered promiscuous mode [ 182.475608][ T9447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.488850][ T9447] team0: entered promiscuous mode [ 182.496342][ T9447] team_slave_1: entered promiscuous mode [ 182.502409][ T9447] bridge1: entered promiscuous mode [ 182.509437][ T9447] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.520298][ T9447] nlmon0: entered promiscuous mode [ 182.534265][ T9447] caif0: entered promiscuous mode [ 182.540017][ T9447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.831698][ T9470] tipc: Enabled bearer , priority 0 [ 182.843817][ T9466] tipc: Resetting bearer [ 182.876182][ T9471] syzkaller0: entered promiscuous mode [ 182.881814][ T9471] syzkaller0: entered allmulticast mode [ 184.649568][ T9491] __nla_validate_parse: 1 callbacks suppressed [ 184.649586][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 184.709674][ T9501] batadv1: entered promiscuous mode [ 184.723141][ T9501] batadv1: entered allmulticast mode [ 184.751125][ T9460] tipc: Resetting bearer [ 184.777022][ T9460] tipc: Disabling bearer [ 185.037992][ T9518] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 185.045920][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 185.057532][ T9518] batadv_slave_1: entered promiscuous mode [ 185.079131][ T9517] batadv_slave_1: left promiscuous mode [ 185.311488][ T9530] bond4: Removing last arp target with arp_interval on [ 185.990370][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 186.036137][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 186.241433][ T9565] wg1 speed is unknown, defaulting to 1000 [ 186.267481][ T5838] Bluetooth: hci2: link tx timeout [ 186.276917][ T5838] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 186.286911][ T5838] Bluetooth: hci2: link tx timeout [ 186.292784][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.301928][ T5838] Bluetooth: hci2: link tx timeout [ 186.307406][ T5838] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 186.315869][ T5838] Bluetooth: hci2: link tx timeout [ 186.322621][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.336307][ T5838] Bluetooth: hci2: link tx timeout [ 186.341547][ T5838] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 186.349723][ T5838] Bluetooth: hci2: link tx timeout [ 186.355208][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.363096][ T5838] Bluetooth: hci2: link tx timeout [ 186.368398][ T5838] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 186.376298][ T5838] Bluetooth: hci2: link tx timeout [ 186.381506][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.873664][ T9585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.952'. [ 187.156814][ T9598] wg1 speed is unknown, defaulting to 1000 [ 188.217468][ T9657] tipc: Enabled bearer , priority 0 [ 188.239294][ T9657] syzkaller0: entered promiscuous mode [ 188.245450][ T9657] syzkaller0: entered allmulticast mode [ 188.256615][ T9657] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.294007][ T9656] tipc: Resetting bearer [ 188.335947][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 188.343950][ T9656] tipc: Disabling bearer [ 188.538830][ T9668] tipc: Enabled bearer , priority 0 [ 188.567151][ T9668] syzkaller0: entered promiscuous mode [ 188.572697][ T9668] syzkaller0: entered allmulticast mode [ 188.669091][ T9668] tipc: Resetting bearer [ 188.677594][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 188.689231][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 188.737043][ T9668] tipc: Disabling bearer [ 188.757720][ T9673] veth0: entered promiscuous mode [ 188.764521][ T9673] bond0: entered promiscuous mode [ 188.771223][ T9673] debugfs: 'hsr1' already exists in 'hsr' [ 188.777636][ T9673] Cannot create hsr debugfs directory [ 188.783309][ T9673] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 188.843372][ T5987] IPVS: starting estimator thread 0... [ 188.871393][ T9680] netlink: 'syz.1.977': attribute type 58 has an invalid length. [ 188.882866][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 188.955479][ T9676] IPVS: using max 28 ests per chain, 67200 per kthread [ 189.067397][ T9686] netlink: 100 bytes leftover after parsing attributes in process `syz.0.976'. [ 189.345196][ T9694] veth3: entered promiscuous mode [ 189.395308][ T9696] syzkaller0: entered promiscuous mode [ 189.403237][ T9696] syzkaller0: entered allmulticast mode [ 190.013900][ T9714] netlink: 'syz.2.986': attribute type 3 has an invalid length. [ 190.286632][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 190.414476][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 190.521645][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.559354][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 190.596481][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.598878][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 190.625126][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.632271][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.680982][ T9742] smc: net device bond_slave_1 applied user defined pnetid SYZ2 [ 190.705070][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.712191][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.743535][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.750818][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.971443][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.983129][ T9731] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.040824][ T9747] tipc: Started in network mode [ 191.064597][ T9747] tipc: Node identity c2b616edb96, cluster identity 4711 [ 191.075206][ T9747] tipc: Enabled bearer , priority 0 [ 191.092260][ T9747] tipc: Enabling of bearer rejected, already enabled [ 191.136544][ T9747] tipc: Enabling of bearer rejected, already enabled [ 191.155301][ T9747] tipc: Enabling of bearer rejected, already enabled [ 191.224169][ T9748] tipc: Disabling bearer [ 191.317346][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 191.363665][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 191.535228][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 191.583811][ T9782] ipvlan2: entered allmulticast mode [ 191.618042][ T9782] veth0_vlan: entered allmulticast mode [ 191.771311][ T9792] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 191.798428][ T9792] bond4 (unregistering): Released all slaves [ 191.979871][ T9806] bond0: Removing last arp target with arp_interval on [ 191.991083][ T9806] bond0: entered promiscuous mode [ 191.996993][ T9806] bond0: entered allmulticast mode [ 192.007279][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.171621][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 192.403240][ T9831] FAULT_INJECTION: forcing a failure. [ 192.403240][ T9831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.418294][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.1.1018 Not tainted syzkaller #0 PREEMPT(full) [ 192.418324][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.418338][ T9831] Call Trace: [ 192.418347][ T9831] [ 192.418357][ T9831] dump_stack_lvl+0x189/0x250 [ 192.418405][ T9831] ? __pfx____ratelimit+0x10/0x10 [ 192.418430][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.418459][ T9831] ? __pfx__printk+0x10/0x10 [ 192.418482][ T9831] ? __might_fault+0xb0/0x130 [ 192.418525][ T9831] should_fail_ex+0x414/0x560 [ 192.418563][ T9831] _copy_from_iter+0x1de/0x1790 [ 192.418594][ T9831] ? rcu_is_watching+0x15/0xb0 [ 192.418623][ T9831] ? kmalloc_reserve+0xbd/0x290 [ 192.418656][ T9831] ? __pfx__copy_from_iter+0x10/0x10 [ 192.418680][ T9831] ? __build_skb_around+0x262/0x3f0 [ 192.418720][ T9831] ? netlink_sendmsg+0x642/0xb30 [ 192.418738][ T9831] ? skb_put+0x11b/0x210 [ 192.418774][ T9831] netlink_sendmsg+0x6b2/0xb30 [ 192.418804][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.418828][ T9831] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.418861][ T9831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.418882][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.418903][ T9831] __sock_sendmsg+0x21c/0x270 [ 192.418934][ T9831] ____sys_sendmsg+0x505/0x830 [ 192.418962][ T9831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.418994][ T9831] ? import_iovec+0x74/0xa0 [ 192.419025][ T9831] ___sys_sendmsg+0x21f/0x2a0 [ 192.419049][ T9831] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.419111][ T9831] ? __fget_files+0x2a/0x420 [ 192.419130][ T9831] ? __fget_files+0x3a0/0x420 [ 192.419162][ T9831] __x64_sys_sendmsg+0x19b/0x260 [ 192.419187][ T9831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.419220][ T9831] ? __pfx_ksys_write+0x10/0x10 [ 192.419255][ T9831] ? do_syscall_64+0xbe/0xfa0 [ 192.419285][ T9831] do_syscall_64+0xfa/0xfa0 [ 192.419309][ T9831] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.419335][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.419357][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 192.419384][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.419405][ T9831] RIP: 0033:0x7f5455b8efc9 [ 192.419432][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.419449][ T9831] RSP: 002b:00007f5456a98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.419480][ T9831] RAX: ffffffffffffffda RBX: 00007f5455de5fa0 RCX: 00007f5455b8efc9 [ 192.419496][ T9831] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 192.419509][ T9831] RBP: 00007f5456a98090 R08: 0000000000000000 R09: 0000000000000000 [ 192.419522][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.419534][ T9831] R13: 00007f5455de6038 R14: 00007f5455de5fa0 R15: 00007fff9cae03c8 [ 192.419570][ T9831] [ 193.154195][ T9860] tc_dump_action: action bad kind [ 193.160094][ T9859] tc_dump_action: action bad kind [ 193.335673][ T9867] FAULT_INJECTION: forcing a failure. [ 193.335673][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 193.357053][ T9870] netlink: 'syz.0.1030': attribute type 5 has an invalid length. [ 193.380828][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.4.1031 Not tainted syzkaller #0 PREEMPT(full) [ 193.380858][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.380870][ T9867] Call Trace: [ 193.380878][ T9867] [ 193.380886][ T9867] dump_stack_lvl+0x189/0x250 [ 193.380919][ T9867] ? __pfx____ratelimit+0x10/0x10 [ 193.380944][ T9867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.380973][ T9867] ? __pfx__printk+0x10/0x10 [ 193.381001][ T9867] ? __lock_acquire+0xab9/0xd20 [ 193.381028][ T9867] should_fail_ex+0x414/0x560 [ 193.381067][ T9867] should_failslab+0xa8/0x100 [ 193.381091][ T9867] kmem_cache_alloc_noprof+0x74/0x6e0 [ 193.381122][ T9867] ? skb_clone+0x212/0x3a0 [ 193.381151][ T9867] skb_clone+0x212/0x3a0 [ 193.381178][ T9867] __netlink_deliver_tap+0x404/0x850 [ 193.381226][ T9867] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.381262][ T9867] netlink_deliver_tap+0x19c/0x1b0 [ 193.381297][ T9867] netlink_unicast+0x7fa/0x9e0 [ 193.381337][ T9867] ? __pfx_netlink_unicast+0x10/0x10 [ 193.381369][ T9867] ? netlink_sendmsg+0x642/0xb30 [ 193.381398][ T9867] ? skb_put+0x11b/0x210 [ 193.381436][ T9867] netlink_sendmsg+0x805/0xb30 [ 193.381467][ T9867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.381491][ T9867] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.381525][ T9867] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.381546][ T9867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.381566][ T9867] __sock_sendmsg+0x21c/0x270 [ 193.381596][ T9867] ____sys_sendmsg+0x505/0x830 [ 193.381624][ T9867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.381657][ T9867] ? import_iovec+0x74/0xa0 [ 193.381688][ T9867] ___sys_sendmsg+0x21f/0x2a0 [ 193.381712][ T9867] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.381775][ T9867] ? __fget_files+0x2a/0x420 [ 193.381794][ T9867] ? __fget_files+0x3a0/0x420 [ 193.381831][ T9867] __x64_sys_sendmsg+0x19b/0x260 [ 193.381857][ T9867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.381889][ T9867] ? __pfx_ksys_write+0x10/0x10 [ 193.381924][ T9867] ? do_syscall_64+0xbe/0xfa0 [ 193.381955][ T9867] do_syscall_64+0xfa/0xfa0 [ 193.381980][ T9867] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.382007][ T9867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.382028][ T9867] ? clear_bhb_loop+0x60/0xb0 [ 193.382054][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.382074][ T9867] RIP: 0033:0x7f6cf318efc9 [ 193.382093][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.382110][ T9867] RSP: 002b:00007f6cf400b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.382133][ T9867] RAX: ffffffffffffffda RBX: 00007f6cf33e5fa0 RCX: 00007f6cf318efc9 [ 193.382148][ T9867] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.382162][ T9867] RBP: 00007f6cf400b090 R08: 0000000000000000 R09: 0000000000000000 [ 193.382174][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.382186][ T9867] R13: 00007f6cf33e6038 R14: 00007f6cf33e5fa0 R15: 00007ffeea29a668 [ 193.382222][ T9867] [ 193.382422][ T9867] netlink: 'syz.4.1031': attribute type 4 has an invalid length. [ 193.703566][ T9867] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1031'. [ 193.719768][ T9867] .`: renamed from bond0 (while UP) [ 193.755480][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 193.800443][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 194.341296][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348169][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.555261][ T9899] tipc: Enabling of bearer rejected, failed to enable media [ 194.972446][ T9926] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 194.986078][ T9926] FAULT_INJECTION: forcing a failure. [ 194.986078][ T9926] name failslab, interval 1, probability 0, space 0, times 0 [ 194.999297][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.1.1048 Not tainted syzkaller #0 PREEMPT(full) [ 194.999328][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.999341][ T9926] Call Trace: [ 194.999350][ T9926] [ 194.999358][ T9926] dump_stack_lvl+0x189/0x250 [ 194.999390][ T9926] ? __pfx____ratelimit+0x10/0x10 [ 194.999412][ T9926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.999441][ T9926] ? __pfx__printk+0x10/0x10 [ 194.999467][ T9926] ? __pfx___might_resched+0x10/0x10 [ 194.999490][ T9926] ? fs_reclaim_acquire+0x7d/0x100 [ 194.999528][ T9926] should_fail_ex+0x414/0x560 [ 194.999567][ T9926] should_failslab+0xa8/0x100 [ 194.999590][ T9926] kmem_cache_alloc_node_noprof+0x77/0x710 [ 194.999622][ T9926] ? __alloc_skb+0x112/0x2d0 [ 194.999651][ T9926] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 194.999685][ T9926] __alloc_skb+0x112/0x2d0 [ 194.999722][ T9926] rtmsg_ifinfo_build_skb+0x84/0x260 [ 194.999759][ T9926] rtnetlink_event+0x1b7/0x270 [ 194.999796][ T9926] notifier_call_chain+0x1b6/0x3e0 [ 194.999832][ T9926] netif_set_mtu_ext+0x594/0x7d0 [ 194.999860][ T9926] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 194.999878][ T9926] ? __mutex_trylock_common+0x153/0x260 [ 194.999909][ T9926] ? __lock_acquire+0xab9/0xd20 [ 194.999948][ T9926] netif_set_mtu+0xa4/0x150 [ 194.999966][ T9926] ? __pfx_netif_set_mtu+0x10/0x10 [ 195.000003][ T9926] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 195.000043][ T9926] dev_set_mtu+0x126/0x260 [ 195.000068][ T9926] bond_change_mtu+0x143/0x530 [ 195.000096][ T9926] ? ip6_route_dev_notify+0x9a/0x5b0 [ 195.000122][ T9926] ? __pfx_bond_change_mtu+0x10/0x10 [ 195.000145][ T9926] ? notifier_call_chain+0x3bf/0x3e0 [ 195.000178][ T9926] netif_set_mtu_ext+0x512/0x7d0 [ 195.000197][ T9926] ? __lock_acquire+0xab9/0xd20 [ 195.000223][ T9926] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 195.000242][ T9926] ? finish_task_switch+0x18b/0x950 [ 195.000298][ T9926] ? nla_strscpy+0x10f/0x170 [ 195.000324][ T9926] do_setlink+0x91a/0x41c0 [ 195.000360][ T9926] ? bpf_trace_run2+0x322/0x4b0 [ 195.000392][ T9926] ? __pfx_do_setlink+0x10/0x10 [ 195.000408][ T9926] ? bpf_trace_run2+0x186/0x4b0 [ 195.000443][ T9926] ? __pfx_bpf_trace_run2+0x10/0x10 [ 195.000495][ T9926] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 195.000520][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.000547][ T9926] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 195.000570][ T9926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 195.000599][ T9926] ? rcu_is_watching+0x15/0xb0 [ 195.000628][ T9926] ? __mutex_lock+0xd3b/0x1350 [ 195.000660][ T9926] ? __mutex_lock+0x5bb/0x1350 [ 195.000693][ T9926] ? rtnl_newlink+0x8e9/0x1c80 [ 195.000726][ T9926] ? __pfx___mutex_lock+0x10/0x10 [ 195.000765][ T9926] ? ns_capable+0x8a/0xf0 [ 195.000790][ T9926] ? rtnl_link_get_net_capable+0x16a/0x350 [ 195.000815][ T9926] rtnl_newlink+0x1619/0x1c80 [ 195.000860][ T9926] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.000898][ T9926] ? is_bpf_text_address+0x26/0x2b0 [ 195.000928][ T9926] ? is_bpf_text_address+0x292/0x2b0 [ 195.000950][ T9926] ? is_bpf_text_address+0x26/0x2b0 [ 195.000978][ T9926] ? __lock_acquire+0xab9/0xd20 [ 195.001013][ T9926] ? __lock_acquire+0xab9/0xd20 [ 195.001057][ T9926] ? is_bpf_text_address+0x26/0x2b0 [ 195.001086][ T9926] ? is_bpf_text_address+0x292/0x2b0 [ 195.001109][ T9926] ? is_bpf_text_address+0x26/0x2b0 [ 195.001142][ T9926] ? __lock_acquire+0xab9/0xd20 [ 195.001192][ T9926] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.001224][ T9926] rtnetlink_rcv_msg+0x7cf/0xb70 [ 195.001254][ T9926] ? __lock_acquire+0xab9/0xd20 [ 195.001285][ T9926] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 195.001315][ T9926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.001366][ T9926] netlink_rcv_skb+0x208/0x470 [ 195.001397][ T9926] ? __lock_acquire+0xab9/0xd20 [ 195.001418][ T9926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.001452][ T9926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.001498][ T9926] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.001541][ T9926] netlink_unicast+0x82f/0x9e0 [ 195.001581][ T9926] ? __pfx_netlink_unicast+0x10/0x10 [ 195.001614][ T9926] ? netlink_sendmsg+0x642/0xb30 [ 195.001631][ T9926] ? skb_put+0x11b/0x210 [ 195.001669][ T9926] netlink_sendmsg+0x805/0xb30 [ 195.001700][ T9926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.001724][ T9926] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.001757][ T9926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.001778][ T9926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.001799][ T9926] __sock_sendmsg+0x21c/0x270 [ 195.001830][ T9926] ____sys_sendmsg+0x505/0x830 [ 195.001859][ T9926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.001892][ T9926] ? import_iovec+0x74/0xa0 [ 195.001923][ T9926] ___sys_sendmsg+0x21f/0x2a0 [ 195.001948][ T9926] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.002013][ T9926] ? __fget_files+0x2a/0x420 [ 195.002033][ T9926] ? __fget_files+0x3a0/0x420 [ 195.002066][ T9926] __x64_sys_sendmsg+0x19b/0x260 [ 195.002091][ T9926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.002125][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 195.002161][ T9926] ? do_syscall_64+0xbe/0xfa0 [ 195.002192][ T9926] do_syscall_64+0xfa/0xfa0 [ 195.002216][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.002241][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.002270][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 195.002297][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.002318][ T9926] RIP: 0033:0x7f5455b8efc9 [ 195.002338][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.002355][ T9926] RSP: 002b:00007f5456a98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.002378][ T9926] RAX: ffffffffffffffda RBX: 00007f5455de5fa0 RCX: 00007f5455b8efc9 [ 195.002393][ T9926] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 195.002406][ T9926] RBP: 00007f5456a98090 R08: 0000000000000000 R09: 0000000000000000 [ 195.002419][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.002431][ T9926] R13: 00007f5455de6038 R14: 00007f5455de5fa0 R15: 00007fff9cae03c8 [ 195.002467][ T9926] [ 195.607204][ T9926] net_ratelimit: 23 callbacks suppressed [ 195.607232][ T9926] wlan1: mtu less than device minimum [ 195.733916][ T9952] netlink: 'syz.4.1054': attribute type 10 has an invalid length. [ 195.743428][ T9952] wlan1: mtu less than device minimum [ 195.749347][ T9952] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 195.858053][ T9956] bridge6: entered promiscuous mode [ 195.863336][ T9956] bridge6: entered allmulticast mode [ 195.872063][ T9956] team0: Port device bridge6 added [ 195.947738][ T9961] netlink: 'syz.0.1055': attribute type 21 has an invalid length. [ 195.995080][ T9961] __nla_validate_parse: 3 callbacks suppressed [ 195.995101][ T9961] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1055'. [ 196.055464][ T9969] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 196.162792][ T9961] netlink: 'syz.0.1055': attribute type 4 has an invalid length. [ 196.196983][ T9961] netlink: 'syz.0.1055': attribute type 5 has an invalid length. [ 196.226207][ T9983] netlink: 'syz.3.1063': attribute type 4 has an invalid length. [ 196.234196][ T9983] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1063'. [ 196.235817][ T9961] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1055'. [ 196.304079][ T9976] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 196.340867][ T9972] wg1 speed is unknown, defaulting to 1000 [ 196.407915][ T9983] FAULT_INJECTION: forcing a failure. [ 196.407915][ T9983] name failslab, interval 1, probability 0, space 0, times 0 [ 196.421709][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.3.1063 Not tainted syzkaller #0 PREEMPT(full) [ 196.421744][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.421757][ T9983] Call Trace: [ 196.421764][ T9983] [ 196.421772][ T9983] dump_stack_lvl+0x189/0x250 [ 196.421804][ T9983] ? __pfx____ratelimit+0x10/0x10 [ 196.421827][ T9983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.421853][ T9983] ? __pfx__printk+0x10/0x10 [ 196.421876][ T9983] ? __pfx___might_resched+0x10/0x10 [ 196.421898][ T9983] ? fs_reclaim_acquire+0x7d/0x100 [ 196.421932][ T9983] should_fail_ex+0x414/0x560 [ 196.421970][ T9983] should_failslab+0xa8/0x100 [ 196.421991][ T9983] kmem_cache_alloc_node_noprof+0x77/0x710 [ 196.422018][ T9983] ? __alloc_skb+0x112/0x2d0 [ 196.422044][ T9983] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 196.422074][ T9983] __alloc_skb+0x112/0x2d0 [ 196.422107][ T9983] rtmsg_ifinfo_build_skb+0x84/0x260 [ 196.422140][ T9983] rtnetlink_event+0x1b7/0x270 [ 196.422172][ T9983] notifier_call_chain+0x1b6/0x3e0 [ 196.422203][ T9983] netif_set_mtu_ext+0x594/0x7d0 [ 196.422220][ T9983] ? __lock_acquire+0xab9/0xd20 [ 196.422244][ T9983] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 196.422261][ T9983] ? finish_task_switch+0x18b/0x950 [ 196.422307][ T9983] ? nla_strscpy+0x10f/0x170 [ 196.422329][ T9983] do_setlink+0x91a/0x41c0 [ 196.422345][ T9983] ? rcu_is_watching+0x15/0xb0 [ 196.422378][ T9983] ? __schedule+0x17ae/0x4cc0 [ 196.422405][ T9983] ? __lock_acquire+0xab9/0xd20 [ 196.422425][ T9983] ? __pfx_do_setlink+0x10/0x10 [ 196.422442][ T9983] ? __lock_acquire+0xab9/0xd20 [ 196.422482][ T9983] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 196.422503][ T9983] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.422527][ T9983] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 196.422548][ T9983] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.422574][ T9983] ? rcu_is_watching+0x15/0xb0 [ 196.422599][ T9983] ? __mutex_lock+0xd3b/0x1350 [ 196.422628][ T9983] ? __mutex_lock+0x5bb/0x1350 [ 196.422657][ T9983] ? rtnl_newlink+0x8e9/0x1c80 [ 196.422688][ T9983] ? __pfx___mutex_lock+0x10/0x10 [ 196.422722][ T9983] ? ns_capable+0x8a/0xf0 [ 196.422744][ T9983] ? rtnl_link_get_net_capable+0x16a/0x350 [ 196.422766][ T9983] rtnl_newlink+0x1619/0x1c80 [ 196.422791][ T9983] ? ____sys_sendmsg+0x505/0x830 [ 196.422821][ T9983] ? __pfx_rtnl_newlink+0x10/0x10 [ 196.422872][ T9983] ? kasan_quarantine_put+0xdd/0x220 [ 196.422898][ T9983] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.422927][ T9983] ? nlmon_xmit+0xb0/0x100 [ 196.422948][ T9983] ? kmem_cache_free+0x19b/0x690 [ 196.422985][ T9983] ? __local_bh_enable_ip+0x12d/0x1c0 [ 196.423006][ T9983] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.423029][ T9983] ? __local_bh_enable_ip+0x12d/0x1c0 [ 196.423049][ T9983] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 196.423074][ T9983] ? __dev_queue_xmit+0x284/0x3740 [ 196.423097][ T9983] ? __dev_queue_xmit+0x284/0x3740 [ 196.423119][ T9983] ? __dev_queue_xmit+0x1bfb/0x3740 [ 196.423149][ T9983] ? __lock_acquire+0xab9/0xd20 [ 196.423193][ T9983] ? __pfx_rtnl_newlink+0x10/0x10 [ 196.423220][ T9983] rtnetlink_rcv_msg+0x7cf/0xb70 [ 196.423251][ T9983] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 196.423278][ T9983] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.423304][ T9983] ? ref_tracker_free+0x63a/0x7d0 [ 196.423322][ T9983] ? __asan_memcpy+0x40/0x70 [ 196.423346][ T9983] ? __pfx_ref_tracker_free+0x10/0x10 [ 196.423381][ T9983] netlink_rcv_skb+0x208/0x470 [ 196.423413][ T9983] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.423442][ T9983] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.423483][ T9983] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.423520][ T9983] netlink_unicast+0x82f/0x9e0 [ 196.423556][ T9983] ? __pfx_netlink_unicast+0x10/0x10 [ 196.423585][ T9983] ? netlink_sendmsg+0x642/0xb30 [ 196.423600][ T9983] ? skb_put+0x11b/0x210 [ 196.423633][ T9983] netlink_sendmsg+0x805/0xb30 [ 196.423660][ T9983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.423681][ T9983] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.423712][ T9983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.423730][ T9983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.423749][ T9983] __sock_sendmsg+0x21c/0x270 [ 196.423776][ T9983] ____sys_sendmsg+0x505/0x830 [ 196.423801][ T9983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.423829][ T9983] ? import_iovec+0x74/0xa0 [ 196.423857][ T9983] ___sys_sendmsg+0x21f/0x2a0 [ 196.423879][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.423936][ T9983] ? __fget_files+0x2a/0x420 [ 196.423953][ T9983] ? __fget_files+0x3a0/0x420 [ 196.423981][ T9983] __x64_sys_sendmsg+0x19b/0x260 [ 196.424004][ T9983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.424034][ T9983] ? __pfx_ksys_write+0x10/0x10 [ 196.424065][ T9983] ? do_syscall_64+0xbe/0xfa0 [ 196.424093][ T9983] do_syscall_64+0xfa/0xfa0 [ 196.424116][ T9983] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.424138][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.424156][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 196.424184][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.424202][ T9983] RIP: 0033:0x7f3a7e18efc9 [ 196.424221][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.424237][ T9983] RSP: 002b:00007f3a7efd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.424258][ T9983] RAX: ffffffffffffffda RBX: 00007f3a7e3e5fa0 RCX: 00007f3a7e18efc9 [ 196.424272][ T9983] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 196.424284][ T9983] RBP: 00007f3a7efd9090 R08: 0000000000000000 R09: 0000000000000000 [ 196.424296][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.424306][ T9983] R13: 00007f3a7e3e6038 R14: 00007f3a7e3e5fa0 R15: 00007ffc515f2018 [ 196.424340][ T9983] [ 197.003022][ T9983] .`: renamed from bond0 (while UP) [ 197.149996][ T9975] IPv6: sit4: Disabled Multicast RS [ 197.368635][T10005] wg1 speed is unknown, defaulting to 1000 [ 197.404898][T10011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'. [ 197.414188][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1068'. [ 197.436343][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 197.448919][T10010] netem: unknown loss type 0 [ 197.454944][T10010] netem: change failed [ 197.462716][T10011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.500090][T10015] pim6reg: entered allmulticast mode [ 197.649178][T10025] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 197.658923][T10024] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 197.708428][T10025] bond2: entered promiscuous mode [ 197.714128][T10025] bond2: entered allmulticast mode [ 197.750694][T10028] bond2: (slave ip6gretap2): making interface the new active one [ 197.771427][T10028] ip6gretap2: entered promiscuous mode [ 197.778109][T10028] ip6gretap2: entered allmulticast mode [ 197.785452][T10028] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 197.854094][T10037] wg1 speed is unknown, defaulting to 1000 [ 198.755772][T10067] netlink: 'syz.0.1084': attribute type 10 has an invalid length. [ 198.764235][T10067] wlan1: mtu less than device minimum [ 198.770388][T10067] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 198.932826][T10076] netlink: 'syz.1.1087': attribute type 4 has an invalid length. [ 198.941174][T10076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1087'. [ 198.975441][T10076] wlan1: mtu less than device minimum [ 199.133078][T10080] .`: (slave dummy0): Enslaving as an active interface with an up link [ 199.247249][T10092] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1093'. [ 199.257269][T10096] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1094'. [ 199.318444][T10092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1093'. [ 199.748318][T10096] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.765153][T10096] bond_slave_0: left promiscuous mode [ 199.780151][T10096] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.796980][T10096] bond_slave_1: left promiscuous mode [ 199.806055][T10096] .` (unregistering): Released all slaves [ 199.863943][T10100] syzkaller0: entered promiscuous mode [ 199.895056][T10100] syzkaller0: entered allmulticast mode [ 200.210418][T10125] validate_nla: 2 callbacks suppressed [ 200.210439][T10125] netlink: 'syz.4.1102': attribute type 10 has an invalid length. [ 200.486953][T10137] wg1 speed is unknown, defaulting to 1000 [ 200.548812][T10142] netlink: 'syz.3.1103': attribute type 22 has an invalid length. [ 200.559598][T10140] wg1 speed is unknown, defaulting to 1000 [ 200.571254][T10147] No such timeout policy "syz0" [ 200.708152][T10142] netlink: 'syz.3.1103': attribute type 22 has an invalid length. [ 200.742346][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.793149][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.826083][ T61] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.860292][ T61] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.871324][T10143] wg1 speed is unknown, defaulting to 1000 [ 201.680462][T10185] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 201.688871][T10185] wlan1: mtu less than device minimum [ 201.694294][T10185] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 201.701841][T10187] __nla_validate_parse: 3 callbacks suppressed [ 201.701858][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 201.756946][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 201.783966][T10187] macvtap1: entered promiscuous mode [ 201.792860][T10190] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1118'. [ 201.802471][T10187] macvtap1: entered allmulticast mode [ 201.810470][T10187] bridge0: entered allmulticast mode [ 201.844914][T10188] gretap1: entered promiscuous mode [ 201.850272][T10188] gretap1: entered allmulticast mode [ 202.138244][T10204] wg1 speed is unknown, defaulting to 1000 [ 202.255012][T10211] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 202.329668][T10209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.389937][T10205] wg1 speed is unknown, defaulting to 1000 [ 202.745349][T10221] netlink: 'syz.1.1126': attribute type 6 has an invalid length. [ 203.079518][T10232] xt_addrtype: ipv6 does not support BROADCAST matching [ 203.355919][ T30] audit: type=1800 audit(1761347170.715:3): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1130" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1106 res=0 errno=0 [ 203.431677][T10247] syzkaller1: entered promiscuous mode [ 203.438667][T10247] syzkaller1: entered allmulticast mode [ 203.457296][T10253] netlink: 'syz.3.1131': attribute type 10 has an invalid length. [ 203.512297][T10253] wlan1: mtu less than device minimum [ 203.519323][T10253] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 204.212358][T10283] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 204.463077][T10289] wg1 speed is unknown, defaulting to 1000 [ 204.645501][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1143'. [ 204.665274][T10290] netlink: 'syz.1.1141': attribute type 2 has an invalid length. [ 204.665820][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 204.674207][T10290] netlink: 'syz.1.1141': attribute type 5 has an invalid length. [ 204.974572][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 205.392066][T10308] lo: entered promiscuous mode [ 205.438758][T10308] tunl0: entered promiscuous mode [ 205.444301][T10308] gre0: entered promiscuous mode [ 205.491445][T10308] gretap0: entered promiscuous mode [ 205.497691][T10308] erspan0: entered promiscuous mode [ 205.503608][T10308] ip_vti0: entered promiscuous mode [ 205.510011][T10308] ip6_vti0: entered promiscuous mode [ 205.516268][T10308] sit0: entered promiscuous mode [ 205.522616][T10308] ip6tnl0: entered promiscuous mode [ 205.529419][T10308] ip6gre0: entered promiscuous mode [ 205.538569][T10308] syz_tun: entered promiscuous mode [ 205.546463][T10308] ip6gretap0: entered promiscuous mode [ 205.553046][T10308] bond0: entered promiscuous mode [ 205.558734][T10308] bond_slave_0: entered promiscuous mode [ 205.564952][T10308] bond_slave_1: entered promiscuous mode [ 205.572380][T10308] team0: entered promiscuous mode [ 205.579954][T10308] team_slave_0: entered promiscuous mode [ 205.591489][T10308] team_slave_1: entered promiscuous mode [ 205.602951][T10308] dummy0: entered promiscuous mode [ 205.612294][T10308] nlmon0: entered promiscuous mode [ 205.619638][T10308] 0ªX¹¦À: entered promiscuous mode [ 205.625305][T10308] 0ªX¹¦À: left allmulticast mode [ 205.630289][T10308] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 205.652503][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 205.662856][T10314] netlink: 'syz.0.1146': attribute type 10 has an invalid length. [ 205.670305][T10316] gretap0: entered promiscuous mode [ 205.676444][T10316] macsec2: entered promiscuous mode [ 205.681833][T10316] macsec2: entered allmulticast mode [ 205.702631][T10316] gretap0: entered allmulticast mode [ 205.721187][T10316] gretap0: left allmulticast mode [ 205.735680][T10316] gretap0: left promiscuous mode [ 205.833275][T10314] wlan1: mtu less than device minimum [ 205.860534][T10314] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 206.135382][T10342] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 206.904333][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 207.084118][T10390] wg1 speed is unknown, defaulting to 1000 [ 207.092848][T10392] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 207.161778][T10392] xt_hashlimit: max too large, truncated to 1048576 [ 207.307511][T10399] netlink: 'syz.3.1160': attribute type 10 has an invalid length. [ 207.345136][T10399] wlan1: mtu less than device minimum [ 207.372936][T10399] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 207.516106][T10392] wg1 speed is unknown, defaulting to 1000 [ 208.289665][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 208.463329][T10430] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 208.555967][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 208.584252][T10430] bond3 (unregistering): Released all slaves [ 208.620985][T10442] openvswitch: netlink: Key type 39 is out of range max 32 [ 208.630434][T10442] xt_hashlimit: max too large, truncated to 1048576 [ 208.773368][T10435] hsr_slave_1 (unregistering): left promiscuous mode [ 209.223437][T10464] netlink: 'syz.3.1171': attribute type 10 has an invalid length. [ 209.273141][T10478] wg1 speed is unknown, defaulting to 1000 [ 209.279687][T10464] wlan1: mtu less than device minimum [ 209.334494][T10464] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 210.314760][T10511] bridge_slave_0: invalid flags given to default FDB implementation [ 210.353790][T10513] wg1 speed is unknown, defaulting to 1000 [ 210.498298][T10524] x_tables: duplicate underflow at hook 3 [ 211.178469][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1193'. [ 211.225400][T10541] wg1 speed is unknown, defaulting to 1000 [ 211.410222][T10558] netlink: 'syz.4.1195': attribute type 4 has an invalid length. [ 211.423188][T10558] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1195'. [ 211.598708][T10562] wg1 speed is unknown, defaulting to 1000 [ 211.723347][T10561] wg1 speed is unknown, defaulting to 1000 [ 211.775049][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 211.781225][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 211.786464][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 211.848706][T10567] tipc: Enabled bearer , priority 0 [ 212.041685][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 212.093996][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 212.256844][T10577] tipc: Resetting bearer [ 212.283054][T10580] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1200'. [ 212.310927][T10566] tipc: Disabling bearer [ 212.651659][T10590] wg1 speed is unknown, defaulting to 1000 [ 212.661495][T10594] nbd: socks must be embedded in a SOCK_ITEM attr [ 212.952794][T10610] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 213.077052][T10614] siw: device registration error -23 [ 213.182174][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'. [ 213.192553][T10614] wg1 speed is unknown, defaulting to 1000 [ 213.206083][T10616] netlink: 'syz.0.1213': attribute type 9 has an invalid length. [ 213.221300][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1215'. [ 213.233508][T10616] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1213'. [ 213.270839][T10624] netlink: 'syz.3.1214': attribute type 4 has an invalid length. [ 213.302379][T10627] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 213.322737][T10621] netlink: 'syz.1.1215': attribute type 27 has an invalid length. [ 213.335508][T10628] netlink: 'syz.3.1214': attribute type 4 has an invalid length. [ 213.637823][T10642] wg1 speed is unknown, defaulting to 1000 [ 213.754009][T10643] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1218'. [ 214.335026][T10663] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 214.343302][T10663] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1225'. [ 214.369002][T10665] tipc: Enabled bearer , priority 0 [ 214.376881][T10665] syzkaller0: entered promiscuous mode [ 214.382390][T10665] syzkaller0: entered allmulticast mode [ 214.423184][T10665] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 214.651265][T10670] tipc: Resetting bearer [ 214.703633][T10664] tipc: Resetting bearer [ 214.762251][T10664] tipc: Disabling bearer [ 214.913987][T10691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'. [ 215.119503][T10696] wg1 speed is unknown, defaulting to 1000 [ 215.317362][T10714] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 215.350110][T10714] smc: adding net device bond0 with user defined pnetid SYZ2 [ 215.360572][T10714] bond0: entered promiscuous mode [ 215.366628][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.381045][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1237'. [ 215.403921][T10714] bond0: entered allmulticast mode [ 215.714294][T10739] hsr_slave_0: left promiscuous mode [ 215.726058][T10739] hsr_slave_1: left promiscuous mode [ 215.892787][T10747] netlink: 'syz.2.1243': attribute type 13 has an invalid length. [ 215.901337][T10747] netlink: 'syz.2.1243': attribute type 17 has an invalid length. [ 215.910075][T10747] lo: left promiscuous mode [ 215.923562][T10747] tunl0: left promiscuous mode [ 215.930442][T10747] gre0: left promiscuous mode [ 215.938507][T10747] gretap0: left promiscuous mode [ 215.951235][T10747] erspan0: left promiscuous mode [ 215.961262][T10747] ip_vti0: left promiscuous mode [ 215.967529][T10747] ip6_vti0: left promiscuous mode [ 215.973433][T10747] sit0: left promiscuous mode [ 215.980716][T10747] ip6tnl0: left promiscuous mode [ 215.987680][T10747] ip6gre0: left promiscuous mode [ 215.994005][T10747] syz_tun: left promiscuous mode [ 216.007424][T10747] ip6gretap0: left promiscuous mode [ 216.020174][T10747] bond0: left promiscuous mode [ 216.027475][T10747] bond_slave_0: left promiscuous mode [ 216.033093][T10747] bond_slave_1: left promiscuous mode [ 216.043974][T10747] team0: left promiscuous mode [ 216.049384][T10747] team_slave_0: left promiscuous mode [ 216.055431][T10747] team_slave_1: left promiscuous mode [ 216.066372][T10747] dummy0: left promiscuous mode [ 216.073409][T10747] nlmon0: left promiscuous mode [ 216.081275][T10747] 0ªX¹¦À: left promiscuous mode [ 216.086656][T10747] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 216.375095][T10746] wg1 speed is unknown, defaulting to 1000 [ 216.576859][T10768] wg1 speed is unknown, defaulting to 1000 [ 216.613528][T10771] syzkaller0: entered promiscuous mode [ 216.619851][T10771] syzkaller0: entered allmulticast mode [ 216.783084][T10781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.792396][T10782] wg1 speed is unknown, defaulting to 1000 [ 217.520123][T10815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.680089][T10815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.944139][T10815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.109051][T10815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.208074][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.239438][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.289825][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.396054][T10372] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.518880][T10845] netlink: 'syz.4.1266': attribute type 28 has an invalid length. [ 218.548184][T10845] __nla_validate_parse: 10 callbacks suppressed [ 218.548206][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 218.592670][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 218.736103][T10853] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 218.862632][T10865] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 218.998183][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 219.367853][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 219.384124][T10899] batadv0: entered promiscuous mode [ 219.400703][T10899] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 219.648166][T10912] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.656099][T10912] tipc: Enabled bearer , priority 10 [ 219.667873][T10913] netlink: 'syz.2.1287': attribute type 11 has an invalid length. [ 219.795136][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.812207][T10919] wg1 speed is unknown, defaulting to 1000 [ 219.936488][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.074529][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.247965][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.384755][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.525305][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.641062][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'. [ 220.670352][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'. [ 220.679701][ T8382] tipc: Node number set to 4227858433 [ 220.816190][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.831071][T10941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1295'. [ 221.012045][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 221.503256][T10945] wg1: left promiscuous mode [ 221.514872][T10945] wg1: left allmulticast mode [ 221.615151][T10945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.624502][ C0] net_ratelimit: 1 callbacks suppressed [ 221.624525][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.636663][T10945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.766416][T10945] ip6gre1: left allmulticast mode [ 221.846964][T10945] ip6erspan0: left promiscuous mode [ 221.872257][T10945] bond2: left promiscuous mode [ 221.877929][T10945] ip6gretap2: left promiscuous mode [ 221.883462][T10945] bond2: left allmulticast mode [ 221.889201][T10945] ip6gretap2: left allmulticast mode [ 221.902942][T10946] wg1 speed is unknown, defaulting to 1000 [ 221.910456][T10951] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 221.966322][ T1046] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.998379][ T1046] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.018575][ T1046] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.050332][ T1046] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.163523][T10971] netlink: zone id is out of range [ 222.664432][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.881067][T11010] netlink: 'syz.1.1312': attribute type 13 has an invalid length. [ 222.889182][T11010] netlink: 'syz.1.1312': attribute type 17 has an invalid length. [ 223.082134][T11023] netlink: 'syz.3.1316': attribute type 2 has an invalid length. [ 223.109603][T11023] netlink: 'syz.3.1316': attribute type 4 has an invalid length. [ 223.118370][T11023] netlink: 'syz.3.1316': attribute type 8 has an invalid length. [ 223.126881][T11023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1316'. [ 223.674261][T11010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.682474][T11010] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.693075][T11010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.709951][T11009] wg1 speed is unknown, defaulting to 1000 [ 223.715944][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.897137][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 223.932551][T11030] netlink: 'syz.2.1318': attribute type 30 has an invalid length. [ 224.018795][T10418] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.105106][T10418] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.124796][T10418] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.241292][T10418] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.514226][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 224.613672][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1327'. [ 224.655907][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 224.698842][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 224.717417][T11064] tipc: Enabled bearer , priority 0 [ 224.734611][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.776509][T11064] syzkaller0: entered promiscuous mode [ 224.782792][T11064] syzkaller0: entered allmulticast mode [ 224.805069][T11071] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 224.815502][T11071] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 225.112573][T11097] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 225.268372][T11113] bridge_slave_0: left allmulticast mode [ 225.274099][T11113] bridge_slave_0: left promiscuous mode [ 225.280653][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.290319][T11113] bridge_slave_1: left allmulticast mode [ 225.296285][T11113] bridge_slave_1: left promiscuous mode [ 225.302103][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.320130][T11113] bond0: (slave bond_slave_0): Releasing backup interface [ 225.331902][T11113] bond0: (slave bond_slave_1): Releasing backup interface [ 225.345428][T11113] team0: Port device team_slave_0 removed [ 225.353365][T11113] team0: Port device team_slave_1 removed [ 225.360322][T11113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.368911][T11113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.379805][T11113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.416090][T11055] tipc: Resetting bearer [ 225.443403][T11055] tipc: Disabling bearer [ 225.458786][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 225.784430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.835663][T11131] wg1 speed is unknown, defaulting to 1000 [ 225.983998][T11125] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 226.085308][T11141] ÿ: renamed from bond_slave_0 [ 226.109884][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1344'. [ 226.578482][T11165] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 226.580028][T11166] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 226.770643][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 226.818458][T11170] bond2: (slave veth5): Enslaving as an active interface with a down link [ 226.824614][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.951304][T11184] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 226.962874][T11182] bridge7: port 1(veth3) entered blocking state [ 226.979435][T11182] bridge7: port 1(veth3) entered disabled state [ 226.989259][T11182] veth3: entered allmulticast mode [ 227.005653][T11182] veth3: entered promiscuous mode [ 227.045972][T11193] gretap1: entered allmulticast mode [ 227.072991][T11176] bridge7: port 2(veth0_to_bond) entered blocking state [ 227.085853][T11176] bridge7: port 2(veth0_to_bond) entered disabled state [ 227.093751][T11176] veth0_to_bond: entered allmulticast mode [ 227.103247][T11176] veth0_to_bond: entered promiscuous mode [ 227.146284][T11192] vlan2: entered allmulticast mode [ 227.151533][T11192] veth1: entered allmulticast mode [ 227.157510][T11192] bridge7: port 3(vlan2) entered blocking state [ 227.163975][T11192] bridge7: port 3(vlan2) entered disabled state [ 227.172965][T11192] vlan2: entered promiscuous mode [ 227.178722][T11192] veth1: entered promiscuous mode [ 227.281260][T11210] xt_policy: too many policy elements [ 227.385570][ T30] audit: type=1107 audit(1761347194.735:4): pid=11206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 227.479728][T11215] wg1 speed is unknown, defaulting to 1000 [ 227.587924][T11232] x_tables: duplicate underflow at hook 3 [ 227.651227][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 227.670190][T11225] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 227.864550][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.853222][T11224] wg1 speed is unknown, defaulting to 1000 [ 228.862610][T11236] geneve2: entered promiscuous mode [ 228.894721][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.936017][ T1046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 47651 - 0 [ 228.945919][ T1046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 47651 - 0 [ 228.973721][ T1046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 47651 - 0 [ 229.010806][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 229.044519][T11240] wg1 speed is unknown, defaulting to 1000 [ 229.050551][ T1046] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 47651 - 0 [ 229.142868][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 229.159211][T11254] tipc: Enabled bearer , priority 0 [ 229.168094][T11254] syzkaller0: entered promiscuous mode [ 229.173582][T11254] syzkaller0: entered allmulticast mode [ 229.227696][T11254] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.285329][T11254] tipc: Resetting bearer [ 229.292127][T11254] netlink: 'syz.4.1371': attribute type 11 has an invalid length. [ 229.316846][T11253] tipc: Resetting bearer [ 229.334157][T11253] tipc: Disabling bearer [ 229.336928][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1375'. [ 229.623350][T11276] wg1 speed is unknown, defaulting to 1000 [ 229.860971][T11288] x_tables: duplicate underflow at hook 1 [ 229.934476][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.945186][T11288] can: request_module (can-proto-0) failed. [ 230.672852][T11309] netlink: 'syz.4.1385': attribute type 2 has an invalid length. [ 230.701931][T11309] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 230.780941][T11317] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 230.821567][T11309] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1385'. [ 230.825152][T11317] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 230.843782][T11309] nbd: couldn't find a device at index 0 [ 230.856798][T11309] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 230.984421][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.472494][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 231.512254][T11358] wlan0 speed is unknown, defaulting to 1000 [ 231.568483][T11355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.576868][T11358] wlan0 speed is unknown, defaulting to 1000 [ 231.614232][ C1] ------------[ cut here ]------------ [ 231.614445][T11358] wlan0 speed is unknown, defaulting to 1000 [ 231.619943][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 231.637063][ C1] WARNING: CPU: 1 PID: 5829 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 231.641737][T11358] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 231.647771][ C1] Modules linked in: [ 231.647804][ C1] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 231.647830][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.647846][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 231.647884][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 73 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f 37 c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 231.647905][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 231.647929][ C1] RAX: bd3190fbcf280c00 RBX: 000000000000000c RCX: ffff88807bfddac0 [ 231.647947][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 231.647963][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 231.647980][ C1] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88802869c3e8 [ 231.648000][ C1] R13: 0000000000000000 R14: ffff88807cb40e80 R15: ffff88807cb43138 [ 231.648018][ C1] FS: 000055555e991500(0000) GS:ffff888126241000(0000) knlGS:0000000000000000 [ 231.648040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.735032][T11355] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.740314][T11355] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 231.743035][ C1] CR2: 0000000000000000 CR3: 000000002d7fa000 CR4: 00000000003526f0 [ 231.743062][ C1] Call Trace: [ 231.743073][ C1] [ 231.756729][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 231.760087][ C1] rate_control_send_low+0x1a7/0x7b0 [ 231.810481][ C1] rate_control_get_rate+0x20b/0x5d0 [ 231.815850][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 231.821677][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 231.828037][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.833511][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 231.839289][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 231.845002][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 231.850487][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 231.856159][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 231.861663][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 231.867812][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 231.873422][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 231.880722][ C1] __iterate_interfaces+0x2ab/0x590 [ 231.885965][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 231.892056][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 231.899369][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 231.905507][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 231.912638][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 231.917868][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 231.923680][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 231.928913][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 231.934947][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 231.940678][ C1] ? read_tsc+0x9/0x20 [ 231.944802][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 231.950645][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 231.955829][ C1] handle_softirqs+0x286/0x870 [ 231.960615][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 231.965430][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 231.970758][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 231.976120][ C1] __irq_exit_rcu+0xca/0x1f0 [ 231.980733][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 231.985981][ C1] irq_exit_rcu+0x9/0x30 [ 231.990290][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 231.995963][ C1] [ 231.998903][ C1] [ 232.001858][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.007896][ C1] RIP: 0010:pfn_valid+0x119/0x490 [ 232.012944][ C1] Code: 2d 63 75 ff 84 c0 74 7d e8 64 19 8f ff 4d 85 ff 75 11 e8 5a 19 8f ff eb 3d e8 53 19 8f ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 57 ce f4 ff 49 8b 2f 48 89 ee [ 232.032616][ C1] RSP: 0018:ffffc900041f7310 EFLAGS: 00000a06 [ 232.034736][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.038760][ C1] RAX: ffffffff8230ea8c RBX: ffffffff8230ea4a RCX: ffff88807bfddac0 [ 232.053621][ C1] RDX: 0000000000000000 RSI: ffffffff8bbf0440 RDI: ffffffff8bbf0400 [ 232.062113][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8230ea4a [ 232.070169][ C1] R10: dffffc0000000000 R11: fffff940003638c9 R12: dffffc0000000000 [ 232.078191][ C1] R13: 1ffff11027fff4b4 R14: 000000000006c719 R15: ffff88813fffa5a0 [ 232.086207][ C1] ? pfn_valid+0xba/0x490 [ 232.090559][ C1] ? pfn_valid+0xba/0x490 [ 232.094947][ C1] ? pfn_valid+0xfc/0x490 [ 232.099307][ C1] page_table_check_set+0x25/0x730 [ 232.104472][ C1] ? __page_table_check_ptes_set+0x290/0x2f0 [ 232.110505][ C1] copy_pmd_range+0x4b9b/0x7f00 [ 232.115424][ C1] ? unwind_get_return_address+0x4d/0x90 [ 232.121100][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 232.126359][ C1] ? __lock_acquire+0xab9/0xd20 [ 232.131240][ C1] copy_page_range+0xc14/0x1270 [ 232.136127][ C1] ? __lock_acquire+0xab9/0xd20 [ 232.141014][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 232.146365][ C1] ? up_write+0x1c4/0x420 [ 232.150708][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 232.157516][ C1] dup_mmap+0xf4c/0x1b10 [ 232.161804][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 232.166536][ C1] ? mm_init+0xd74/0xfa0 [ 232.170805][ C1] copy_mm+0x13c/0x4b0 [ 232.174934][ C1] copy_process+0x1706/0x3c00 [ 232.179679][ C1] ? copy_process+0x97f/0x3c00 [ 232.184532][ C1] ? __pfx_copy_process+0x10/0x10 [ 232.189623][ C1] kernel_clone+0x21e/0x840 [ 232.194163][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 232.199318][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 232.204429][ C1] ? count_memcg_event_mm+0x21/0x260 [ 232.209764][ C1] __x64_sys_clone+0x18b/0x1e0 [ 232.214612][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 232.219966][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 232.225347][ C1] ? do_syscall_64+0xbe/0xfa0 [ 232.230076][ C1] do_syscall_64+0xfa/0xfa0 [ 232.234683][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.239928][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.246090][ C1] ? clear_bhb_loop+0x60/0xb0 [ 232.250832][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.256798][ C1] RIP: 0033:0x7f6cf3185713 [ 232.261252][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 232.280919][ C1] RSP: 002b:00007ffeea29a8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 232.289409][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6cf3185713 [ 232.297443][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 232.305478][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 232.313471][ C1] R10: 000055555e9917d0 R11: 0000000000000246 R12: 0000000000000000 [ 232.321479][ C1] R13: 00000000000927c0 R14: 0000000000038745 R15: 00007ffeea29aa80 [ 232.329530][ C1] [ 232.332590][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.340060][ C1] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 232.349522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.359672][ C1] Call Trace: [ 232.362958][ C1] [ 232.365809][ C1] dump_stack_lvl+0x99/0x250 [ 232.370415][ C1] ? __asan_memcpy+0x40/0x70 [ 232.375022][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.380254][ C1] ? __pfx__printk+0x10/0x10 [ 232.384871][ C1] vpanic+0x237/0x6d0 [ 232.388889][ C1] ? __pfx_vpanic+0x10/0x10 [ 232.393421][ C1] panic+0xb9/0xc0 [ 232.397161][ C1] ? __pfx_panic+0x10/0x10 [ 232.401621][ C1] __warn+0x31b/0x4b0 [ 232.405620][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 232.411274][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 232.416932][ C1] report_bug+0x2be/0x4f0 [ 232.421278][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 232.426929][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 232.432579][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 232.438237][ C1] handle_bug+0x84/0x160 [ 232.442512][ C1] exc_invalid_op+0x1a/0x50 [ 232.447034][ C1] asm_exc_invalid_op+0x1a/0x20 [ 232.451892][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 232.458165][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 73 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f 37 c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 232.477787][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 232.483870][ C1] RAX: bd3190fbcf280c00 RBX: 000000000000000c RCX: ffff88807bfddac0 [ 232.491856][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 232.499837][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 232.507822][ C1] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88802869c3e8 [ 232.515805][ C1] R13: 0000000000000000 R14: ffff88807cb40e80 R15: ffff88807cb43138 [ 232.523804][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 232.529467][ C1] rate_control_send_low+0x1a7/0x7b0 [ 232.534777][ C1] rate_control_get_rate+0x20b/0x5d0 [ 232.540104][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 232.545927][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 232.552265][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 232.557651][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 232.563381][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 232.569040][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 232.574508][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 232.580069][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 232.585534][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 232.591635][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 232.597198][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 232.604435][ C1] __iterate_interfaces+0x2ab/0x590 [ 232.609646][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 232.615726][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 232.622938][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 232.629110][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 232.636154][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 232.641366][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 232.647181][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 232.652415][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 232.658431][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 232.664156][ C1] ? read_tsc+0x9/0x20 [ 232.668245][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 232.674070][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 232.679196][ C1] handle_softirqs+0x286/0x870 [ 232.683990][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 232.688779][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 232.694101][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 232.699332][ C1] __irq_exit_rcu+0xca/0x1f0 [ 232.703954][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 232.709180][ C1] irq_exit_rcu+0x9/0x30 [ 232.713433][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 232.719077][ C1] [ 232.722017][ C1] [ 232.724952][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.730944][ C1] RIP: 0010:pfn_valid+0x119/0x490 [ 232.735984][ C1] Code: 2d 63 75 ff 84 c0 74 7d e8 64 19 8f ff 4d 85 ff 75 11 e8 5a 19 8f ff eb 3d e8 53 19 8f ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 57 ce f4 ff 49 8b 2f 48 89 ee [ 232.755602][ C1] RSP: 0018:ffffc900041f7310 EFLAGS: 00000a06 [ 232.761679][ C1] RAX: ffffffff8230ea8c RBX: ffffffff8230ea4a RCX: ffff88807bfddac0 [ 232.769661][ C1] RDX: 0000000000000000 RSI: ffffffff8bbf0440 RDI: ffffffff8bbf0400 [ 232.777638][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8230ea4a [ 232.785616][ C1] R10: dffffc0000000000 R11: fffff940003638c9 R12: dffffc0000000000 [ 232.793595][ C1] R13: 1ffff11027fff4b4 R14: 000000000006c719 R15: ffff88813fffa5a0 [ 232.801579][ C1] ? pfn_valid+0xba/0x490 [ 232.805926][ C1] ? pfn_valid+0xba/0x490 [ 232.810269][ C1] ? pfn_valid+0xfc/0x490 [ 232.814620][ C1] page_table_check_set+0x25/0x730 [ 232.819744][ C1] ? __page_table_check_ptes_set+0x290/0x2f0 [ 232.825769][ C1] copy_pmd_range+0x4b9b/0x7f00 [ 232.830635][ C1] ? unwind_get_return_address+0x4d/0x90 [ 232.836313][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 232.841531][ C1] ? __lock_acquire+0xab9/0xd20 [ 232.846405][ C1] copy_page_range+0xc14/0x1270 [ 232.851262][ C1] ? __lock_acquire+0xab9/0xd20 [ 232.856139][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 232.861439][ C1] ? up_write+0x1c4/0x420 [ 232.865778][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 232.872572][ C1] dup_mmap+0xf4c/0x1b10 [ 232.876848][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 232.881565][ C1] ? mm_init+0xd74/0xfa0 [ 232.885838][ C1] copy_mm+0x13c/0x4b0 [ 232.889930][ C1] copy_process+0x1706/0x3c00 [ 232.894635][ C1] ? copy_process+0x97f/0x3c00 [ 232.899419][ C1] ? __pfx_copy_process+0x10/0x10 [ 232.904471][ C1] kernel_clone+0x21e/0x840 [ 232.908999][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 232.914146][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 232.919225][ C1] ? count_memcg_event_mm+0x21/0x260 [ 232.924539][ C1] __x64_sys_clone+0x18b/0x1e0 [ 232.929324][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 232.934654][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 232.939972][ C1] ? do_syscall_64+0xbe/0xfa0 [ 232.944767][ C1] do_syscall_64+0xfa/0xfa0 [ 232.949287][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.954497][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.960573][ C1] ? clear_bhb_loop+0x60/0xb0 [ 232.965255][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.971145][ C1] RIP: 0033:0x7f6cf3185713 [ 232.975570][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 232.995622][ C1] RSP: 002b:00007ffeea29a8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 233.004049][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6cf3185713 [ 233.012025][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 233.020001][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 233.027974][ C1] R10: 000055555e9917d0 R11: 0000000000000246 R12: 0000000000000000 [ 233.035947][ C1] R13: 00000000000927c0 R14: 0000000000038745 R15: 00007ffeea29aa80 [ 233.043945][ C1] [ 233.047337][ C1] Kernel Offset: disabled [ 233.051673][ C1] Rebooting in 86400 seconds..