last executing test programs: 4m2.802718918s ago: executing program 2 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x8a, 0x8, 0x5, 0x30, @mcast2, @loopback, 0x7, 0x730, 0x80000000}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000040)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x72, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x80, 0x38}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) 4m2.667766204s ago: executing program 2 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$can_j1939(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)="fa4188adbb3d6523a6", 0x9}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x2, 0x4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x9}, {0xfff3}}}, 0x24}}, 0x0) 4m1.473772173s ago: executing program 0 (id=1350): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) (async) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0xfd, 0x0, @remote}, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0x40000ae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async) poll(&(0x7f0000000040)=[{r0, 0x2020}, {r0, 0x20}, {r0, 0x1600}], 0x3, 0x6) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 4m1.44879011s ago: executing program 4 (id=1351): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @remote}, "b7f9445df6dde2b3"}}}}}, 0x32) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) 4m1.309214629s ago: executing program 0 (id=1353): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d38}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x8, 0x2, 0xe, 0x81, "6f4a90d50acfaadedd1493b349eb6b3997350d54ee683eda5e5301e815a86a63034f53817d751cd075ef4162ffa6ce3fc78e1ae1bb8acf4a917a41b62f3eee888a50d96eceb88d2e75adecccb99dedbf6d1a48cb47902aa52322c2953916afd6a6aed2713afb57f29b316ca5700533a955d1821a6cc1b93c71e6463766248bf4"}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0xffff, @l2={'ib', 0x3a, 'geneve1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req={0x324b, 0x4, 0x8001, 0x4}, 0x10) sendmsg$inet(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4m1.091451793s ago: executing program 2 (id=1354): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061102c0000000000950000006f000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m0.719922476s ago: executing program 4 (id=1355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x2d, 0x44, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0x4, [{@empty, 0x7}, {@multicast2, 0x6}, {@multicast2, 0x1}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000100)=0x8f1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 4m0.594344113s ago: executing program 2 (id=1357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}]}}}]}, 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xfffffffb, 0x1, 0x7, 0x2068, r0, 0x9, '\x00', r3, r4, 0x1, 0x0, 0x4, 0xd}, 0x50) (async) r6 = socket(0x2a, 0x2, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0xf) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendto$packet(r6, &(0x7f00000000c0)="c87329448efbd68185da969b9264ca0ea5894a35695ef687d2c14e7dad1cd066e5ed11c5cdcc71ceb7cf15ca823fdcdba9152036a9f3ccb44db93ff3086cd8884b852e40ada6776e5f33d3ffc006fe34334e731d8ee60e670c0deaff5f6804fb018e66def4c3427f6c979c23d8adc45d5d098db37f", 0x75, 0x20008805, &(0x7f0000000480)={0x11, 0x16, r8, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r5}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETLINK(r11, 0x400454cd, 0x336) (async) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "29f764864ce3536c"}, 0x2}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x3, 0x0, 0x0, "0000000000000004"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4b, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "19bc3340488836aaa131694a4cb097b6acc6773e"}}]}, 0x164}}, 0x0) (async) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r6) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x78, r13, 0x100, 0x9, 0x25dfdbfc}, 0x78}, 0x1, 0x0, 0x0, 0x40000d4}, 0x8014) (async) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) 4m0.502175327s ago: executing program 0 (id=1359): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a00"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2c, r2, 0x8e8bb22fc1e1814f, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtfilter={0x190, 0x2c, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0x2, 0xfff8}, {0x6, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_flow={{0x9}, {0x12c, 0x2, [@TCA_FLOW_ACT={0x104, 0x9, 0x0, 0x1, [@m_simple={0x100, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0xd3, 0x6, "ef26ba101f4f044f6c496c88e529df9fdfbf2c603df5101afb1d3e6c036c33920583861f22e539d42f58279395df448ee179a1e25f7ba3a3a2c95cc57d8b1c9d7d41aa296392c74b883d8209953e5fc4fb1f314dc220f438d57bc5659eec0f1b9a0233911507076f68e5a7d28aed12122d739831a680873214f90a4bf379f45c065b3fc433635d94556d067fa22ebce8fd6572c86e72306800dbc21a1693e4a2a6c4f48240c069c32961cdb847ffe3009986c51b690d27a55496a7d0d349e9018379430ce242420b17b40bb0427040"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd55}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x46}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0x9}]}}]}, 0x190}}, 0x0) 4m0.478014077s ago: executing program 4 (id=1360): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) 4m0.252090191s ago: executing program 0 (id=1361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xf, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x7d, 0x1, 0x10}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="50e500001000110400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e0003000000030000000500170000000000"], 0x50}}, 0x0) 4m0.248365658s ago: executing program 4 (id=1363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c0012800900010069070070000000000c0006001100462f0000"], 0x3c}}, 0x0) 4m0.126003886s ago: executing program 4 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'netdevsim0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="090006000802110000000001"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r1, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_FRAME_MATCH={0x9c, 0x5b, "286d3cdb67e1eecebcc3a753eaea3ad1f45f726a9c34a96c88d4f6f8f56796bc1ec27ab3991b70471ea9fbd72509d121bb0e3fc219a7c3752f9e39a7720a8047ac1f23ce9e88c9a1415a95e6d019fcbc61682a3bd9c809672885e0134de0a549c3b571374af41862c1b26cf99c7811deb8e9e60dcbd3088f3efe4c5cea5fdc3d33325125834eabb6ea991efe5070fcc350daae6492e48476"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x72bd26, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x4044080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4m0.106129512s ago: executing program 0 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000001a00)=""/4088, 0xff8}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x4}, 0x3}], 0x3, 0x40010020, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x6c}}, 0x0) 4m0.02389777s ago: executing program 2 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000140007800800114000000000050015000c0000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x0, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r4, 0x4, r4}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m59.794624048s ago: executing program 0 (id=1368): pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) 3m59.239214581s ago: executing program 32 (id=1368): pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) 3m59.222732059s ago: executing program 4 (id=1372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3m58.91911329s ago: executing program 33 (id=1372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3m58.889447509s ago: executing program 2 (id=1373): syz_emit_ethernet(0x107, &(0x7f0000000140)={@empty, @multicast, @void, {@generic={0x6003, "7f5f8fd071871ce0651400df8dc11451f31d19013e00bb762661f786ec7c2e053bb7aca8a2348569363e76c63ec9ecf37af8f6a08c3f6fe136238f5b9604df3412911b2423eef18f5831e24382a4157e637f93134964c8d2d96633ff6701c1b21893eefc57f4f24167ea47315e6837fea8646c8308df64c45e2a3260e4185e76ac6689ed47ba9dd303ed851f3dd14bc4815043ada37f8906650fdba15bd1fce314db6443957fc0ca9f999da1f5abe16c9554226c91ea0085853c0c60a74ddee490b545ddd8f81fc7339ad76496df67a884a832d8688625e6deee350672f03476e2e1faa4b79db4e42d508e1256518010ac4b4ac4a354559f5b"}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) syz_emit_ethernet(0x107, &(0x7f0000000140)={@empty, @multicast, @void, {@generic={0x6003, "7f5f8fd071871ce0651400df8dc11451f31d19013e00bb762661f786ec7c2e053bb7aca8a2348569363e76c63ec9ecf37af8f6a08c3f6fe136238f5b9604df3412911b2423eef18f5831e24382a4157e637f93134964c8d2d96633ff6701c1b21893eefc57f4f24167ea47315e6837fea8646c8308df64c45e2a3260e4185e76ac6689ed47ba9dd303ed851f3dd14bc4815043ada37f8906650fdba15bd1fce314db6443957fc0ca9f999da1f5abe16c9554226c91ea0085853c0c60a74ddee490b545ddd8f81fc7339ad76496df67a884a832d8688625e6deee350672f03476e2e1faa4b79db4e42d508e1256518010ac4b4ac4a354559f5b"}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008000) (async) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) (async) 3m58.519461242s ago: executing program 34 (id=1373): syz_emit_ethernet(0x107, &(0x7f0000000140)={@empty, @multicast, @void, {@generic={0x6003, "7f5f8fd071871ce0651400df8dc11451f31d19013e00bb762661f786ec7c2e053bb7aca8a2348569363e76c63ec9ecf37af8f6a08c3f6fe136238f5b9604df3412911b2423eef18f5831e24382a4157e637f93134964c8d2d96633ff6701c1b21893eefc57f4f24167ea47315e6837fea8646c8308df64c45e2a3260e4185e76ac6689ed47ba9dd303ed851f3dd14bc4815043ada37f8906650fdba15bd1fce314db6443957fc0ca9f999da1f5abe16c9554226c91ea0085853c0c60a74ddee490b545ddd8f81fc7339ad76496df67a884a832d8688625e6deee350672f03476e2e1faa4b79db4e42d508e1256518010ac4b4ac4a354559f5b"}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) syz_emit_ethernet(0x107, &(0x7f0000000140)={@empty, @multicast, @void, {@generic={0x6003, "7f5f8fd071871ce0651400df8dc11451f31d19013e00bb762661f786ec7c2e053bb7aca8a2348569363e76c63ec9ecf37af8f6a08c3f6fe136238f5b9604df3412911b2423eef18f5831e24382a4157e637f93134964c8d2d96633ff6701c1b21893eefc57f4f24167ea47315e6837fea8646c8308df64c45e2a3260e4185e76ac6689ed47ba9dd303ed851f3dd14bc4815043ada37f8906650fdba15bd1fce314db6443957fc0ca9f999da1f5abe16c9554226c91ea0085853c0c60a74ddee490b545ddd8f81fc7339ad76496df67a884a832d8688625e6deee350672f03476e2e1faa4b79db4e42d508e1256518010ac4b4ac4a354559f5b"}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008000) (async) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) (async) 4.935951469s ago: executing program 7 (id=4167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) setsockopt$packet_int(r4, 0x107, 0x1f, &(0x7f0000000080)=0xfff, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000a02000ad8000000060a01030000000000000000004021937adbe7598645c79be078cdae99e1d79e8f9dd37f94ae6c567c2826f02ed6a499a66b02aab061c6cbc89eb3c5a62c0618f6ac508c51a16618225fb028de0374c39d2dc183dfe7909cff3b5b0cc70c3675c3dbdd907e8c69f6b8fc05a18d681cdf392900001e35524129387a9c3563f77d9993b734da4efd1d6eb8590000004800048030000180080001006e6174002400080007400000002008000140000000010800044000000003140001800e000100636f6e6e6c696d6974000000140000001100010000000000000000000500000a"], 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0xd, 0x3, "a1784b8550b226b7ef"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 3.992124973s ago: executing program 7 (id=4180): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x8000, 0x2, 0x0, 0x101, 0x0, 0xb, 0x9, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x7}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) 3.883658066s ago: executing program 5 (id=4182): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@gettfilter={0x64, 0x2e, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff, 0xffff}, {0xfff3, 0xa}, {0x7, 0xc}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xffffff00}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0xb, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) (async) socket$kcm(0x21, 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@gettfilter={0x64, 0x2e, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff, 0xffff}, {0xfff3, 0xa}, {0x7, 0xc}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xffffff00}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0xb, 0x0, &(0x7f0000000640)) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) (async) 3.83974008s ago: executing program 7 (id=4183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r5, @ANYBLOB="000096000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x4}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x100, 0xffff0001, 0x0, 0x8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000081c0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x4}, {0x2, 0xffff}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r7, 0xa766a7c8fe1ddd32, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb41}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x4001) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000040)={r3, @rand_addr=0x64090102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) (async) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r5, @ANYBLOB="000096000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x4}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x100, 0xffff0001, 0x0, 0x8000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000081c0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x4}, {0x2, 0xffff}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r7, 0xa766a7c8fe1ddd32, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb41}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x4001) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000040)={r3, @rand_addr=0x64090102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) 3.697441387s ago: executing program 1 (id=4184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x24040fed, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x7ffff, 0x5d) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x15, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f46e226a84b2294b5453e4e856"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 3.496008927s ago: executing program 6 (id=4186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x2b, 0x80801, 0x0) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x3, 0x2, 0x81}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}, @policy_type={0xa}]}, 0xac}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.387172668s ago: executing program 3 (id=4187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x7c}}, 0x4880) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x247e}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000090000000000000000000000000a04000000060a0b0400000000000000000200fffe28000480240001800900010068617368000000001400028008000140000000030800000008000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) 3.386814386s ago: executing program 7 (id=4188): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r10, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) close(r9) socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x802, 0xffffffed, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x1, 0x3, 0x3}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004001}, 0x4044) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) 2.628038515s ago: executing program 6 (id=4189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x48, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x48}}, 0x20000080) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r5, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x80000004, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 2.519690509s ago: executing program 5 (id=4190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x88, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x65, 0x33, @beacon={{{}, {0xde1}}, 0x3, @random=0x1, 0x1, @void, @val, @void, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x34}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf30, 0x0, 0x49, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x7, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf6}}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0xfffffffd, 0xfffffffc}, 0x10}, 0x94) 2.030877209s ago: executing program 1 (id=4191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x10c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xdc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xd0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x74, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe800"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x2, 0x6, "ebe6"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd48}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x8000}, {0x558a, 0x5, 0x71, 0x6, 0x8, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) 1.992583951s ago: executing program 3 (id=4192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r3, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0xfffffffd, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x46fb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 1.915641563s ago: executing program 5 (id=4193): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 1.872268141s ago: executing program 6 (id=4194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "ebffffffff00", "4b8b4e0802ff03fbe3c7a6f875981e00", "85372e3c", "090000e6ff00"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000040)=""/66, 0x42) splice(r0, 0x0, r1, 0x0, 0x7ffd, 0xe) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 1.815912693s ago: executing program 3 (id=4195): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20044010) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x40851) 1.629231357s ago: executing program 5 (id=4196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000012c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x0) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000012c0)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) 1.628639818s ago: executing program 1 (id=4197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.581735384s ago: executing program 3 (id=4198): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4004010) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @f={0x4b, 0x2, 0x2, 0x81, {0x81, 0x1, '\''}, 0x1}}, 0xb) 1.542378929s ago: executing program 7 (id=4199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01902eeda653214cfbbe7e9d4317747ce7b6713fa1d0faf816123d79792d82fff1c363b507000001000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = epoll_create1(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2a}, 0x20) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x10000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xd4, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x541}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x7f, 0xc, 0x8, 0x3, 0xd, 0x7, 0x5, 0x343b, 0x4, 0x0]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffe9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x79c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x13, 0x400, 0x8]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44080}, 0x2c040810) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0000000}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r9) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x24}}, 0x64000) socketpair(0x21, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r12, 0x80047437, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000001400)={'virt_wifi0\x00', @random="0600"}) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5094b5413b2f20a9b0bdc52c0c04c0a6b002", @ANYRES16=r13, @ANYBLOB="010425bd7000fddbdf250200000008000100000000000f000a00766972745f776966693000000c000300ffffff7f000000000c00050004000000000000000c0002000200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x1) 1.403922569s ago: executing program 5 (id=4200): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000000202050000000000000000000500000408000b0073697000480001800c00028005000100110000002c00018014000300fe8800000000000000000000000000011719e2ecbd485ed014000400fe8800000000000000000000000000010c000280050001003a000000080004400000000c0600074000040000"], 0x74}, 0x1, 0x0, 0x0, 0x4004008}, 0x800) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6800000010000305000000000000000000000000b642b59acf22d8d60a0d6418cdb816b3ff8b608b7ec1b08c71a107badfabd66b998bcf9e4766582077978f4f4ccfd6b9c70e69d86824161c6b9161160b5873f02203280ec5025e63fa1952e41bafc0c4fb0ed47472f30668bc005a5f68e24d7adff63dfe1cc231094c56984160", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000240005800a000400aaaaaaaaaabb000008000300000000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x1a) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r8) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000000)) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f00000001c0)={{0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e20, 0x2, 'rr\x00', 0x4, 0x0, 0x9}, {@remote, 0x4e24, 0x2000, 0x9, 0xfc8f9c75, 0x5}}, 0x44) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x74, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x5, @remote, 0x1a04}, @in6={0xa, 0x4e20, 0xad, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9162}, @in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e22, 0x87f, @private1, 0x101}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x5, 0x4, 0x7, r11}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600010000000000000000000a00c3"], 0x18}}, 0x0) 1.312412427s ago: executing program 6 (id=4201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 1.022239916s ago: executing program 1 (id=4202): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x9, 0x1, 0xfe, 0x8, 0x0, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x103, 0x4) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x7, 0xff}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) 496.215342ms ago: executing program 3 (id=4203): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000640)) 495.671474ms ago: executing program 5 (id=4204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x4000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-ce\x00'}, 0x58) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x200, 0x4, 0xfffffc98, r3}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0x4, 0x51, &(0x7f00000001c0)="d3f58a604802a5a6b70b127884e796fe0a8898ce33dca31af87b132a0c72fac366f425558717e0fd97a5e2108725d515bfe15c497a6b2e2769a6fecf533006bb15fc9c2c9744fa2ce6325bb3ca01c23d47", 0x0, 0x1}, {0x4, 0x5e, &(0x7f0000000240)="e5789204f6b2c140df2657973e58bbb2ec7ec3bf26cf6671377e4777409e65f320cbb7361619a975b8cfc2dfb94b379f7790c246465b00e6af59b677c3d20d384bb6768cef788882cb1d2fc4e61de048052a3b7993167a66221f8a25f3bc", 0x1}, {0x2, 0x51, &(0x7f00000002c0)="e4ddc561a86683b5f18fcc96244c601651cac7e56b4457ff62f8c13d3071b60e8562646d0935616d9db2d5bcfa25e096505faac484a1ba782b4183eb7128e09275c48ebf4210b4840fe0758c9f28fc8241", 0x0, 0x1}]}) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000400)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @empty, 0x2}}, 0x24) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000700)={0x2}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}]}, 0x2c}}, 0x4048885) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000880)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000940)=0x84) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r10, 0x89e0, &(0x7f0000000980)) ioctl$SIOCGETSGCNT(r10, 0x89e1, &(0x7f00000009c0)={@dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010101}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000a00)=r5, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000a40)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0xa67, 0xe3, 0x3, 0x1}, {0x1, 0xdd, 0xf4, 0x8}, {0xdeec, 0x6, 0xf4, 0x2}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000b00)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x96c, 0xfffff17e, 0x1, 0xfd5, 0x2}, &(0x7f0000000bc0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000c00)={r11, 0xef22}, &(0x7f0000000c40)=0x8) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000c80)={0x80}) getpeername$tipc(r5, &(0x7f0000000d40)=@name, &(0x7f0000000d80)=0x10) 465.177004ms ago: executing program 6 (id=4205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 64) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21, 0x800000}, 0x28) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (rerun: 64) close(r4) socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$vsock_stream(r3, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='net_dev_start_xmit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r7) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000009c0)={0x30, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x82}, 0x1, 0x0, 0x0, 0x810}, 0x80) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r1, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) 252.136169ms ago: executing program 3 (id=4206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) (async) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000980)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xc, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (rerun: 64) 124.023238ms ago: executing program 7 (id=4207): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x5, 0x6, 0x1, 0x8000, 0x58, 0xd115, 0x77}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@loopback, 0x1800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x40800) 122.69724ms ago: executing program 6 (id=4208): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x2, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newneigh={0x8c, 0x1c, 0x400, 0x70bd2c, 0x25dfdbfb, {0xb789073ef492469e, 0x0, 0x0, 0x0, 0x8, 0x30, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @random="8002239591a7"}, @NDA_CACHEINFO={0x14, 0x3, {0xef6, 0x7, 0xb75d, 0x7}}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x2, 0x18e4, 0x8}}, @NDA_FLAGS_EXT={0x8}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_PROBES={0x8, 0x4, 0x7}, @NDA_PROTOCOL={0x5, 0xc, 0x2}, @NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_LINK_NETNSID={0x8, 0xa, 0xe}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200400d1}, 0x0) 97.101221ms ago: executing program 1 (id=4209): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x4b, "2cd0d14177ad48847d1467ed70ca10eed95df09c293288775666da32beb740c4236b1a05b74cc75ed842afd86eca4ae738f96d0d60520a31bffc9946a3e54bed63509b60912331f392c9795c4301f8d43c820eea8f7b5387e1096193a0ec629a30b905f10c7f26d41b39b040b4e3d8647f593f6f9f555092a069007c32e89cf5"}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) 0s ago: executing program 1 (id=4210): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl(r3, 0x3, &(0x7f0000000000)) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket(0x1e, 0x805, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async, rerun: 64) connect$tipc(r5, &(0x7f0000000000)=@id, 0x10) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) (async) getsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): cess `syz.5.2408'. [ 303.562101][T14460] 8021q: VLANs not supported on ip6tnl0 [ 303.585730][T14470] netlink: 'syz.6.2414': attribute type 1 has an invalid length. [ 303.622669][T14472] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2415'. [ 303.709396][T14470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.778790][T14474] bond2: (slave gretap2): making interface the new active one [ 303.791151][T14474] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 304.057030][T14500] netlink: 'syz.6.2422': attribute type 1 has an invalid length. [ 304.088458][T14500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.550668][T14522] veth0_to_team: entered promiscuous mode [ 304.584096][T14522] veth0_to_team: entered allmulticast mode [ 304.828527][T14533] netlink: 'syz.3.2434': attribute type 15 has an invalid length. [ 304.837100][T14536] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 305.048582][T14555] netlink: 'syz.7.2437': attribute type 1 has an invalid length. [ 305.111939][T14557] netlink: 'syz.1.2436': attribute type 23 has an invalid length. [ 305.240779][T14555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.336512][T14561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.344195][T14561] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 305.368948][T14561] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 305.706786][T14585] netlink: 'syz.7.2443': attribute type 2 has an invalid length. [ 305.795560][T14585] nbd: must specify at least one socket [ 305.836879][T14552] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 306.105369][T14607] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 306.224824][T14614] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 306.347710][T14618] xt_HMARK: spi-set and port-set can't be combined [ 306.995514][T14641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.629832][T14683] __nla_validate_parse: 12 callbacks suppressed [ 307.629852][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2474'. [ 307.959020][T14697] netlink: 'syz.5.2481': attribute type 4 has an invalid length. [ 308.372264][T14687] infiniband syz1: set down [ 308.384135][T14687] infiniband syz1: added bond0 [ 308.575175][T14687] RDS/IB: syz1: added [ 308.583604][T14687] smc: adding ib device syz1 with port count 1 [ 308.606742][T14687] smc: ib device syz1 port 1 has pnetid [ 308.785422][T14733] netlink: 'syz.1.2489': attribute type 3 has an invalid length. [ 309.065302][T14748] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 309.120719][T14748] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 309.189053][T14754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2494'. [ 309.208037][T14757] netlink: 'syz.7.2496': attribute type 1 has an invalid length. [ 309.405662][T14764] !€ÿ: renamed from bond_slave_0 (while UP) [ 309.551093][T14769] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2501'. [ 309.720062][T14773] gre1: entered promiscuous mode [ 309.735246][T14773] gre1: entered allmulticast mode [ 309.924177][T14783] netlink: 'syz.6.2507': attribute type 83 has an invalid length. [ 310.465014][T14809] netlink: 'syz.7.2515': attribute type 5 has an invalid length. [ 310.491127][T14809] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2515'. [ 310.746909][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 310.773360][T14818] netlink: 'syz.5.2516': attribute type 10 has an invalid length. [ 310.786547][T14818] netlink: 207928 bytes leftover after parsing attributes in process `syz.5.2516'. [ 310.796077][T14818] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 310.811734][T14818] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 311.125681][T14837] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2522'. [ 311.326636][T14845] netlink: 4120 bytes leftover after parsing attributes in process `syz.5.2524'. [ 311.373543][T14845] openvswitch: netlink: Flow key attr not present in new flow. [ 311.380483][T14847] netlink: 'syz.6.2523': attribute type 1 has an invalid length. [ 311.546151][T14847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.603606][T14857] netlink: 184 bytes leftover after parsing attributes in process `syz.7.2526'. [ 311.645937][T14851] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2525'. [ 311.857198][T14864] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 311.878774][T14867] netlink: 'syz.5.2529': attribute type 11 has an invalid length. [ 311.892450][T14867] netlink: 'syz.5.2529': attribute type 11 has an invalid length. [ 312.303321][T14882] tipc: Enabled bearer , priority 0 [ 312.364045][T14876] tipc: Resetting bearer [ 312.489611][T14884] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.535217][T14889] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 312.545556][T14889] bond5: (slave macvlan5): Enslaving as a backup interface with a down link [ 312.565875][T14875] tipc: Resetting bearer [ 313.431472][ T9878] tipc: Node number set to 3167367311 [ 314.359632][T14875] tipc: Disabling bearer [ 314.377935][T14896] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 314.600564][T14917] __nla_validate_parse: 2 callbacks suppressed [ 314.600587][T14917] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2540'. [ 314.631720][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2541'. [ 314.895735][T14933] IPVS: length: 219 != 24 [ 314.917773][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2543'. [ 315.140202][T14942] wg1: entered promiscuous mode [ 315.177517][T14942] wg1: entered allmulticast mode [ 315.743341][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2555'. [ 315.816375][T14972] syzkaller1: entered promiscuous mode [ 315.827501][T14972] syzkaller1: entered allmulticast mode [ 315.849754][T14972] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 316.297845][T15000] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2564'. [ 316.308144][T15000] 0ªî{X¹¦: entered promiscuous mode [ 316.322014][T15000] 0ªî{X¹¦: left allmulticast mode [ 316.333749][T15001] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2565'. [ 316.388448][T15000] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2564'. [ 316.402553][T15000] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 316.422381][T15000] 1ªî{X¹¦: left promiscuous mode [ 316.434462][T15000] 1ªî{X¹¦: entered allmulticast mode [ 316.446546][T15000] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.862961][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 317.160780][T15039] openvswitch: netlink: Key 6 has unexpected len 5 expected 2 [ 317.190553][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2579'. [ 317.268114][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2577'. [ 317.347926][T15053] netlink: 'syz.3.2582': attribute type 8 has an invalid length. [ 317.419224][T15055] netlink: 'syz.3.2582': attribute type 8 has an invalid length. [ 317.592164][T15063] netlink: 'syz.6.2585': attribute type 10 has an invalid length. [ 318.077654][T15090] bridge_slave_1: default FDB implementation only supports local addresses [ 318.322988][T15097] netlink: 'syz.3.2595': attribute type 5 has an invalid length. [ 318.455809][T15108] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 319.225733][T15151] syz.7.2610: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.244740][T15151] CPU: 1 UID: 0 PID: 15151 Comm: syz.7.2610 Not tainted syzkaller #0 PREEMPT(full) [ 319.244769][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.244782][T15151] Call Trace: [ 319.244790][T15151] [ 319.244800][T15151] dump_stack_lvl+0x189/0x250 [ 319.244834][T15151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.244859][T15151] ? __pfx__printk+0x10/0x10 [ 319.244888][T15151] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 319.244918][T15151] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 319.244944][T15151] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 319.244971][T15151] warn_alloc+0x214/0x310 [ 319.245002][T15151] ? stack_depot_save_flags+0x40/0x860 [ 319.245036][T15151] ? __pfx_warn_alloc+0x10/0x10 [ 319.245070][T15151] ? kasan_save_track+0x4f/0x80 [ 319.245097][T15151] ? xskq_create+0x56/0x170 [ 319.245115][T15151] ? xsk_init_queue+0xb0/0x110 [ 319.245132][T15151] ? xsk_setsockopt+0x4dc/0x8d0 [ 319.245160][T15151] ? do_sock_setsockopt+0x17c/0x1b0 [ 319.245183][T15151] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 319.245206][T15151] ? do_syscall_64+0xfa/0x3b0 [ 319.245228][T15151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.245258][T15151] __vmalloc_node_range_noprof+0x125/0x12f0 [ 319.245323][T15151] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.245361][T15151] ? __kasan_kmalloc+0x93/0xb0 [ 319.245393][T15151] vmalloc_user_noprof+0xad/0xf0 [ 319.245422][T15151] ? xskq_create+0xbf/0x170 [ 319.245444][T15151] xskq_create+0xbf/0x170 [ 319.245475][T15151] xsk_init_queue+0xb0/0x110 [ 319.245497][T15151] xsk_setsockopt+0x4dc/0x8d0 [ 319.245531][T15151] ? __pfx_xsk_setsockopt+0x10/0x10 [ 319.245562][T15151] ? __pfx_aa_sk_perm+0x10/0x10 [ 319.245598][T15151] ? aa_sock_opt_perm+0xff/0x1b0 [ 319.245623][T15151] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 319.245646][T15151] ? __pfx_xsk_setsockopt+0x10/0x10 [ 319.245679][T15151] do_sock_setsockopt+0x17c/0x1b0 [ 319.245710][T15151] __x64_sys_setsockopt+0x13f/0x1b0 [ 319.245741][T15151] do_syscall_64+0xfa/0x3b0 [ 319.245763][T15151] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.245784][T15151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.245804][T15151] ? clear_bhb_loop+0x60/0xb0 [ 319.245830][T15151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.245848][T15151] RIP: 0033:0x7f129d98eec9 [ 319.245867][T15151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.245884][T15151] RSP: 002b:00007f129e802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.245908][T15151] RAX: ffffffffffffffda RBX: 00007f129dbe5fa0 RCX: 00007f129d98eec9 [ 319.245922][T15151] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 319.245934][T15151] RBP: 00007f129da11f91 R08: 0000000000000004 R09: 0000000000000000 [ 319.245947][T15151] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.245959][T15151] R13: 00007f129dbe6038 R14: 00007f129dbe5fa0 R15: 00007ffef5ac86a8 [ 319.245994][T15151] [ 319.246995][T15151] Mem-Info: [ 319.551614][T15151] active_anon:5044 inactive_anon:0 isolated_anon:0 [ 319.551614][T15151] active_file:3275 inactive_file:39976 isolated_file:0 [ 319.551614][T15151] unevictable:768 dirty:63 writeback:0 [ 319.551614][T15151] slab_reclaimable:11953 slab_unreclaimable:126521 [ 319.551614][T15151] mapped:30259 shmem:1366 pagetables:1221 [ 319.551614][T15151] sec_pagetables:0 bounce:0 [ 319.551614][T15151] kernel_misc_reclaimable:0 [ 319.551614][T15151] free:1296098 free_pcp:13800 free_cma:0 [ 319.602983][T15151] Node 0 active_anon:20176kB inactive_anon:0kB active_file:13100kB inactive_file:159700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121036kB dirty:248kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13912kB pagetables:4740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 319.637861][T15151] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 319.642957][T15156] syzkaller1: entered promiscuous mode [ 319.713904][T15156] syzkaller1: entered allmulticast mode [ 319.723726][T15151] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.811485][T15151] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 319.817348][T15151] Node 0 DMA32 free:1275652kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19828kB inactive_anon:0kB active_file:13100kB inactive_file:158124kB unevictable:1536kB writepending:248kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:41476kB local_pcp:20300kB free_cma:0kB [ 319.869260][T15151] lowmem_reserve[]: 0 0 1 1 1 [ 319.876434][T15151] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 319.907868][T15151] lowmem_reserve[]: 0 0 0 0 0 [ 319.924159][T15166] __nla_validate_parse: 9 callbacks suppressed [ 319.924179][T15166] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2613'. [ 319.936424][T15151] Node 1 Normal free:3893496kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14560kB local_pcp:5472kB free_cma:0kB [ 320.022899][T15151] lowmem_reserve[]: 0 0 0 0 0 [ 320.063437][T15151] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.102637][T15151] Node 0 DMA32: 1449*4kB (UME) 210*8kB (UME) 133*16kB (UM) 230*32kB (UME) 114*64kB (UME) 29*128kB (UME) 3*256kB (UM) 184*512kB (UME) 121*1024kB (U) 14*2048kB (UME) 244*4096kB (M) = 1274948kB [ 320.182415][T15151] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 320.199439][T15175] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2618'. [ 320.281309][T15151] Node 1 Normal: 212*4kB (UME) 49*8kB (UME) 38*16kB (UME) 150*32kB (UME) 36*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3893496kB [ 320.361257][T15151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.388422][T15151] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.424800][T15151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.446681][T15151] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.489413][T15151] 44614 total pagecache pages [ 320.498973][T15151] 0 pages in swap cache [ 320.503553][ T25] block nbd1: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 150 seconds [ 320.509401][T15151] Free swap = 124996kB [ 320.514639][ T25] block nbd1: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 150 seconds [ 320.529929][T15151] Total swap = 124996kB [ 320.530252][ T25] block nbd1: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 150 seconds [ 320.545805][ T25] block nbd1: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 150 seconds [ 320.558529][T15202] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 320.558567][T15151] 2097051 pages RAM [ 320.574339][T15151] 0 pages HighMem/MovableOnly [ 320.579103][T15151] 425672 pages reserved [ 320.585171][T15151] 0 pages cma reserved [ 320.601410][T15202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.657775][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2625'. [ 320.780723][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2628'. [ 320.842984][T15216] netlink: 184 bytes leftover after parsing attributes in process `syz.7.2626'. [ 320.861753][T15216] xt_socket: unknown flags 0xd0 [ 320.975776][T15227] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2632'. [ 321.208911][T15235] RDS: rds_bind could not find a transport for ::ffff:172.20.20.63, load rds_tcp or rds_rdma? [ 321.235917][T15243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2638'. [ 321.240909][T15237] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2636'. [ 321.253318][T15238] RDS: rds_bind could not find a transport for ::ffff:172.20.20.63, load rds_tcp or rds_rdma? [ 321.375402][T15254] netlink: 'syz.3.2639': attribute type 10 has an invalid length. [ 321.442028][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 321.720683][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'. [ 321.897672][T15289] FAULT_INJECTION: forcing a failure. [ 321.897672][T15289] name failslab, interval 1, probability 0, space 0, times 0 [ 321.990168][T15289] CPU: 0 UID: 0 PID: 15289 Comm: syz.7.2647 Not tainted syzkaller #0 PREEMPT(full) [ 321.990201][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.990214][T15289] Call Trace: [ 321.990230][T15289] [ 321.990239][T15289] dump_stack_lvl+0x189/0x250 [ 321.990270][T15289] ? __pfx____ratelimit+0x10/0x10 [ 321.990293][T15289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.990318][T15289] ? __pfx__printk+0x10/0x10 [ 321.990354][T15289] ? __pfx___might_resched+0x10/0x10 [ 321.990380][T15289] should_fail_ex+0x414/0x560 [ 321.990416][T15289] should_failslab+0xa8/0x100 [ 321.990450][T15289] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 321.990480][T15289] ? __alloc_skb+0x112/0x2d0 [ 321.990509][T15289] __alloc_skb+0x112/0x2d0 [ 321.990536][T15289] bcm_tx_send+0xa9/0x5f0 [ 321.990565][T15289] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.990592][T15289] ? __pfx_bcm_tx_send+0x10/0x10 [ 321.990632][T15289] bcm_sendmsg+0x4c8/0x6a0 [ 321.990667][T15289] ? __pfx_bcm_sendmsg+0x10/0x10 [ 321.990702][T15289] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.990725][T15289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.990749][T15289] ? __pfx_bcm_sendmsg+0x10/0x10 [ 321.990777][T15289] __sock_sendmsg+0x219/0x270 [ 321.990813][T15289] ____sys_sendmsg+0x505/0x830 [ 321.990847][T15289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.990884][T15289] ? import_iovec+0x74/0xa0 [ 321.990916][T15289] ___sys_sendmsg+0x21f/0x2a0 [ 321.990945][T15289] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.991014][T15289] ? __fget_files+0x2a/0x420 [ 321.991031][T15289] ? __fget_files+0x3a0/0x420 [ 321.991062][T15289] __x64_sys_sendmsg+0x19b/0x260 [ 321.991092][T15289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.991130][T15289] ? __pfx_ksys_write+0x10/0x10 [ 321.991160][T15289] ? rcu_is_watching+0x15/0xb0 [ 321.991192][T15289] ? do_syscall_64+0xbe/0x3b0 [ 321.991226][T15289] do_syscall_64+0xfa/0x3b0 [ 321.991248][T15289] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.991270][T15289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.991290][T15289] ? clear_bhb_loop+0x60/0xb0 [ 321.991316][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.991335][T15289] RIP: 0033:0x7f129d98eec9 [ 321.991354][T15289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.991372][T15289] RSP: 002b:00007f129e802038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.991394][T15289] RAX: ffffffffffffffda RBX: 00007f129dbe5fa0 RCX: 00007f129d98eec9 [ 321.991409][T15289] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 321.991422][T15289] RBP: 00007f129e802090 R08: 0000000000000000 R09: 0000000000000000 [ 321.991435][T15289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.991446][T15289] R13: 00007f129dbe6038 R14: 00007f129dbe5fa0 R15: 00007ffef5ac86a8 [ 321.991481][T15289] [ 322.316842][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 322.606947][T15309] netlink: 'syz.7.2654': attribute type 19 has an invalid length. [ 322.624560][T15309] netlink: 'syz.7.2654': attribute type 19 has an invalid length. [ 322.625545][T15310] netlink: 'syz.1.2653': attribute type 7 has an invalid length. [ 322.642810][ T1073] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.652024][ T63] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.671365][ T63] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.746543][T15313] netlink: 'syz.6.2655': attribute type 12 has an invalid length. [ 322.760784][T15313] netlink: 'syz.6.2655': attribute type 29 has an invalid length. [ 322.770545][ T1073] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.960521][T15325] vlan2: entered promiscuous mode [ 322.995170][T15325] vlan2: entered allmulticast mode [ 323.018735][T15325] hsr_slave_1: entered allmulticast mode [ 323.060355][T15335] netlink: 'syz.1.2659': attribute type 28 has an invalid length. [ 323.088775][T15335] netlink: 'syz.1.2659': attribute type 3 has an invalid length. [ 323.768883][T15378] netlink: 'syz.5.2675': attribute type 12 has an invalid length. [ 323.775400][T15379] netlink: 'syz.1.2676': attribute type 5 has an invalid length. [ 323.849398][T15378] netlink: 'syz.5.2675': attribute type 12 has an invalid length. [ 323.928171][T15379] geneve2: entered promiscuous mode [ 323.935699][T15379] geneve2: entered allmulticast mode [ 323.951905][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 323.969062][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 324.032190][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 324.081283][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 325.113827][T15444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.152707][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.483431][T15464] IPVS: ip_vs_edit_dest(): server weight less than zero [ 325.856194][T15485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.928855][T15485] batadv1: entered allmulticast mode [ 326.133080][T15498] __nla_validate_parse: 22 callbacks suppressed [ 326.133100][T15498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2709'. [ 326.195745][T15501] veth1_macvtap: left promiscuous mode [ 326.329649][T15508] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2711'. [ 326.363187][T15508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2711'. [ 326.466164][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2711'. [ 326.770860][T15515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.013919][T15533] team0: Device veth1_macvtap failed to register rx_handler [ 327.106697][T15536] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 327.550563][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2722'. [ 327.697015][T15566] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2726'. [ 328.063493][T15571] syzkaller0: entered promiscuous mode [ 328.069066][T15571] syzkaller0: entered allmulticast mode [ 328.462348][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2731'. [ 328.558499][T15588] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2733'. [ 328.600068][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2734'. [ 328.648933][T15588] validate_nla: 3 callbacks suppressed [ 328.648956][T15588] netlink: 'syz.5.2733': attribute type 1 has an invalid length. [ 329.163879][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2742'. [ 329.446960][T15619] netlink: 'syz.7.2745': attribute type 1 has an invalid length. [ 329.464330][T15619] netlink: 'syz.7.2745': attribute type 2 has an invalid length. [ 329.503486][T15619] netlink: 'syz.7.2745': attribute type 1 has an invalid length. [ 329.644349][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.655522][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.664059][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.673581][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.682319][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.258723][T15641] netlink: 'syz.6.2749': attribute type 4 has an invalid length. [ 331.064014][T15683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.091066][T15689] syzkaller1: entered promiscuous mode [ 331.103150][T15689] syzkaller1: entered allmulticast mode [ 331.455263][T15704] __nla_validate_parse: 1 callbacks suppressed [ 331.455283][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2769'. [ 331.602904][T15622] chnl_net:caif_netlink_parms(): no params data found [ 331.623922][T15711] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2771'. [ 331.641339][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2771'. [ 331.781392][ T5877] Bluetooth: hci5: command tx timeout [ 331.863166][T15716] netlink: 'syz.7.2772': attribute type 10 has an invalid length. [ 332.588456][T15622] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.611438][T15622] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.623395][T15622] bridge_slave_0: entered allmulticast mode [ 332.641662][T15622] bridge_slave_0: entered promiscuous mode [ 332.669298][T15622] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.721127][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.767997][T15622] bridge_slave_1: entered allmulticast mode [ 332.813603][T15622] bridge_slave_1: entered promiscuous mode [ 332.997016][T15622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.013195][T15622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.241689][T15760] netlink: 'syz.3.2783': attribute type 21 has an invalid length. [ 333.323669][T15762] netlink: 'syz.6.2784': attribute type 7 has an invalid length. [ 333.409024][T15622] team0: Port device team_slave_0 added [ 333.449654][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2784'. [ 333.454615][T15622] team0: Port device team_slave_1 added [ 333.473260][T15762] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2784'. [ 333.642997][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2784'. [ 333.652875][T15762] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2784'. [ 333.786564][T15622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.793959][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.825379][T15622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.854724][ T5875] Bluetooth: hci5: command tx timeout [ 333.872255][T15622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.879282][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.912050][T15622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.016937][T15784] syzkaller0: entered promiscuous mode [ 334.022729][T15784] syzkaller0: entered allmulticast mode [ 334.150586][T15622] hsr_slave_0: entered promiscuous mode [ 334.193233][T15622] hsr_slave_1: entered promiscuous mode [ 334.199763][T15622] debugfs: 'hsr0' already exists in 'hsr' [ 334.222957][T15788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.237971][T15622] Cannot create hsr debugfs directory [ 334.734730][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 334.740856][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 334.978269][T15828] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20003 [ 334.999326][T15622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.148322][T15622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.236039][T15622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.358105][T15622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 335.384470][T15815] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 335.781922][T15856] veth1_to_bond: entered allmulticast mode [ 335.821501][T15622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 335.880621][T15622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.919046][T15622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.931309][ T5870] Bluetooth: hci5: command tx timeout [ 335.958755][T15622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.046849][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2819'. [ 336.085263][T15878] netlink: 'syz.3.2818': attribute type 2 has an invalid length. [ 336.119517][T15879] netlink: 'syz.3.2818': attribute type 2 has an invalid length. [ 336.135901][T15854] veth1_to_bond: left allmulticast mode [ 336.286688][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2820'. [ 336.384335][T15889] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 336.547081][T15622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.608512][T15622] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.676088][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.683384][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.773287][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2827'. [ 336.785118][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.792392][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.832069][T15902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2827'. [ 336.871887][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 336.935279][T15909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.035436][T15902] macvlan0 (unregistering): left promiscuous mode [ 337.129278][T15902] vlan0 (unregistering): left allmulticast mode [ 337.136316][T15902] veth0_vlan (unregistering): left allmulticast mode [ 337.144585][T15902] vlan0 (unregistering): left promiscuous mode [ 337.231659][T15909] bond3: entered allmulticast mode [ 337.237378][T15909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.245278][T15909] bridge0: port 1(bond3) entered blocking state [ 337.251938][T15909] bridge0: port 1(bond3) entered disabled state [ 337.261500][T15909] bond3: entered promiscuous mode [ 337.271056][T15912] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 337.417474][T15922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2832'. [ 337.441574][T15926] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2834'. [ 337.450593][T15926] netlink: 21 bytes leftover after parsing attributes in process `syz.5.2834'. [ 337.460858][T15926] netlink: 21 bytes leftover after parsing attributes in process `syz.5.2834'. [ 337.518741][T15622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.877737][T15947] tipc: Enabled bearer , priority 0 [ 338.011433][ T5870] Bluetooth: hci5: command tx timeout [ 338.041122][T15947] syzkaller0: entered promiscuous mode [ 338.051054][T15947] syzkaller0: entered allmulticast mode [ 338.058394][T15947] tipc: Resetting bearer [ 338.093386][T15946] tipc: Resetting bearer [ 338.288225][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2845'. [ 338.486165][T15974] netlink: 'syz.7.2848': attribute type 1 has an invalid length. [ 338.609022][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2848'. [ 340.109018][T15946] tipc: Disabling bearer [ 340.148545][T15974] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 340.306735][T15622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.556173][T15622] veth0_vlan: entered promiscuous mode [ 340.624757][T15622] veth1_vlan: entered promiscuous mode [ 340.787482][T15622] veth0_macvtap: entered promiscuous mode [ 340.822329][T15622] veth1_macvtap: entered promiscuous mode [ 340.884018][T15622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.912967][T15622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.946826][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.996653][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.020905][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.059730][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.228538][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.260866][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.304637][T13518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.321029][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2861'. [ 341.326938][T13518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.751561][T16038] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 342.080992][T16048] netlink: 'syz.5.2867': attribute type 1 has an invalid length. [ 342.127676][T16048] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2867'. [ 342.476266][T16063] team0: Port device bridge1 added [ 342.514301][T16067] team0: Port device bridge2 added [ 342.689575][T16071] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 342.703716][T16073] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2875'. [ 342.728964][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2875'. [ 342.935652][T16085] netlink: 'syz.7.2877': attribute type 23 has an invalid length. [ 343.076670][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 343.163846][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 343.300528][T16104] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2881'. [ 343.333914][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 343.351468][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2880'. [ 343.372494][T16101] netlink: 'syz.3.2880': attribute type 11 has an invalid length. [ 343.622757][T16114] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2886'. [ 343.630309][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 344.405522][T16161] syzkaller1: entered promiscuous mode [ 344.425690][T16161] syzkaller1: entered allmulticast mode [ 344.549545][T16167] ipvlan3: entered promiscuous mode [ 344.662295][T16167] bridge0: port 2(ipvlan3) entered blocking state [ 344.690454][T16167] bridge0: port 2(ipvlan3) entered disabled state [ 344.718173][T16167] ipvlan3: entered allmulticast mode [ 344.731645][T16175] delete_channel: no stack [ 344.750339][T16167] bridge0: entered allmulticast mode [ 344.777348][T16167] ipvlan3: left allmulticast mode [ 344.795403][T16167] bridge0: left allmulticast mode [ 344.864210][T16182] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.905109][T16168] 0ªî{X¹¦: renamed from gretap0 [ 344.929642][T16168] 0ªî{X¹¦: entered allmulticast mode [ 344.938637][T16168] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 344.942242][T16184] netlink: 'syz.6.2904': attribute type 33 has an invalid length. [ 345.354955][T16199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.450371][T16234] tipc: Started in network mode [ 346.467597][T16234] tipc: Node identity 9e49dd66448b, cluster identity 4711 [ 346.506007][T16234] tipc: Enabled bearer , priority 0 [ 346.522455][T16238] syzkaller0: entered promiscuous mode [ 346.528189][T16238] syzkaller0: entered allmulticast mode [ 346.687260][T16233] tipc: Resetting bearer [ 346.719310][T16240] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 346.754931][T16240] nbd: error processing sock list [ 346.760336][T16240] block nbd0: shutting down sockets [ 346.783100][T16233] tipc: Disabling bearer [ 347.109948][T16253] syzkaller0: entered promiscuous mode [ 347.141664][T16253] syzkaller0: entered allmulticast mode [ 347.204319][T16253] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 347.329621][T16253] __nla_validate_parse: 9 callbacks suppressed [ 347.329646][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 347.775355][T16274] team0: Device gtp0 is of different type [ 347.989037][T16279] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 348.034380][T16279] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 348.365213][T16288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2935'. [ 348.487834][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.515224][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.524739][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.540012][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.549458][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.659232][T16299] netlink: 'syz.5.2939': attribute type 6 has an invalid length. [ 348.893189][T16313] netlink: 'syz.6.2943': attribute type 1 has an invalid length. [ 348.970612][T16309] syzkaller0: entered promiscuous mode [ 348.993778][T16309] syzkaller0: entered allmulticast mode [ 349.076159][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2941'. [ 349.092950][T16313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.123602][T16309] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2941'. [ 349.155144][T16316] veth3: entered promiscuous mode [ 349.178040][T16316] bond4: (slave veth3): Enslaving as an active interface with an up link [ 349.196403][T16309] gretap1: entered promiscuous mode [ 349.202012][T16309] gretap1: entered allmulticast mode [ 349.517910][T16334] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 349.539683][T16334] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 350.580516][ T25] block nbd1: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 180 seconds [ 350.591722][ T25] block nbd1: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 180 seconds [ 350.603107][ T25] block nbd1: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 180 seconds [ 350.614350][ T25] block nbd1: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 180 seconds [ 350.653589][ T5870] Bluetooth: hci0: command tx timeout [ 351.720599][T16354] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2954'. [ 352.051472][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2957'. [ 352.160153][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2959'. [ 352.225996][T16369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.335646][T16374] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 352.394814][T16372] net veth1_virt_wifi .: renamed from virt_wifi0 [ 352.655509][T16384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2962'. [ 352.731688][ T5870] Bluetooth: hci0: command tx timeout [ 352.973648][T16291] chnl_net:caif_netlink_parms(): no params data found [ 353.091884][T16399] netlink: 'syz.5.2967': attribute type 4 has an invalid length. [ 353.143670][T16402] netlink: 'syz.5.2967': attribute type 4 has an invalid length. [ 353.340133][T16407] netlink: 'syz.7.2969': attribute type 21 has an invalid length. [ 353.359747][T16407] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2969'. [ 353.383898][T16291] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.391529][T16291] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.410570][T16291] bridge_slave_0: entered allmulticast mode [ 353.429981][T16291] bridge_slave_0: entered promiscuous mode [ 353.450110][T16407] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2969'. [ 353.470041][T16291] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.489231][T16291] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.508522][T16291] bridge_slave_1: entered allmulticast mode [ 353.526041][T16291] bridge_slave_1: entered promiscuous mode [ 353.613406][T16410] 8021q: VLANs not supported on lo [ 353.702123][T16291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.747830][T16291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.944038][T16291] team0: Port device team_slave_0 added [ 353.981042][T16291] team0: Port device team_slave_1 added [ 354.142145][T16291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.172452][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.273133][T16291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.319541][T16291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.326745][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.363638][T16291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.587103][T16291] hsr_slave_0: entered promiscuous mode [ 354.606532][T16291] hsr_slave_1: entered promiscuous mode [ 354.613765][T16291] debugfs: 'hsr0' already exists in 'hsr' [ 354.624595][T16291] Cannot create hsr debugfs directory [ 354.811959][ T5870] Bluetooth: hci0: command tx timeout [ 355.028864][T16291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 355.147004][T16463] bond0: option ad_select: unable to set because the bond device is up [ 355.207441][T16466] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2984'. [ 355.250404][T16291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 355.424307][T16291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 355.486393][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2986'. [ 355.496412][T16472] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2986'. [ 355.521075][T16475] bridge1: entered allmulticast mode [ 355.534139][T16477] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 355.608668][T16479] IPv6: sit1: Disabled Multicast RS [ 355.652064][T16479] sit1: entered allmulticast mode [ 356.044604][T16291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.066019][T16493] syzkaller1: entered promiscuous mode [ 356.073387][T16493] syzkaller1: entered allmulticast mode [ 356.089617][T16291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.143015][T16291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.181869][T16291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.384129][T16505] netlink: 'syz.5.2993': attribute type 12 has an invalid length. [ 356.396157][T16505] netlink: 'syz.5.2993': attribute type 29 has an invalid length. [ 356.405429][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2993'. [ 356.450387][T16505] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2993'. [ 356.483193][T16505] netlink: 'syz.5.2993': attribute type 1 has an invalid length. [ 356.637633][T16520] netlink: 'syz.7.2995': attribute type 1 has an invalid length. [ 356.698955][T16520] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2995'. [ 356.715376][T16524] netlink: 'syz.5.2997': attribute type 1 has an invalid length. [ 356.901047][ T5870] Bluetooth: hci0: command tx timeout [ 356.925082][T16528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.984903][T16529] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 357.031080][T16291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.060690][T16540] netlink: 'syz.7.3001': attribute type 27 has an invalid length. [ 357.107301][T16291] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.161696][T13518] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.168988][T13518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.220454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.227736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.254885][T16546] netlink: 'syz.1.3003': attribute type 5 has an invalid length. [ 357.316834][T16543] veth11: entered allmulticast mode [ 357.371436][T16550] netlink: 'syz.1.3003': attribute type 5 has an invalid length. [ 357.440957][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3006'. [ 357.453406][T16559] netlink: 'syz.6.3006': attribute type 14 has an invalid length. [ 357.465115][T16559] netlink: 'syz.6.3006': attribute type 13 has an invalid length. [ 357.795054][T16571] __nla_validate_parse: 1 callbacks suppressed [ 357.795077][T16571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3009'. [ 357.872246][T16566] bond7: (slave gretap2): making interface the new active one [ 357.884448][T16566] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 358.484745][T16291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.582958][T16291] veth0_vlan: entered promiscuous mode [ 358.600304][T16291] veth1_vlan: entered promiscuous mode [ 358.674719][T16602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.721954][T16291] veth0_macvtap: entered promiscuous mode [ 358.759228][T16291] veth1_macvtap: entered promiscuous mode [ 358.828184][T16291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.917347][T16608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.943692][T16291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.012172][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.022062][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.045505][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.085598][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.242107][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3021'. [ 359.299787][T16620] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3022'. [ 359.359604][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.411298][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.499991][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.525056][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.567983][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3024'. [ 359.736495][T16639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2930'. [ 359.957312][T16645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3029'. [ 360.183791][T16654] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3032'. [ 360.232435][T16654] nbd: illegal input index -8454144 [ 360.428013][T16659] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 360.547921][T16671] macvtap1: entered promiscuous mode [ 360.592552][T16671] macvtap1: entered allmulticast mode [ 360.607911][T16671] bond_slave_0: entered promiscuous mode [ 360.620709][T16671] bond_slave_1: entered promiscuous mode [ 360.694597][T16671] bond0: entered allmulticast mode [ 360.699913][T16671] bond_slave_0: entered allmulticast mode [ 360.715062][T16671] bond_slave_1: entered allmulticast mode [ 360.720967][T16671] bond0: entered promiscuous mode [ 360.737421][T16671] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 360.753274][T16671] team0: Device macvtap1 failed to register rx_handler [ 360.766509][T16671] bond0: left allmulticast mode [ 360.775621][T16671] bond_slave_0: left allmulticast mode [ 360.788176][T16671] bond_slave_1: left allmulticast mode [ 360.795906][T16671] bond0: left promiscuous mode [ 360.806242][T16671] bond_slave_0: left promiscuous mode [ 360.811829][T16671] bond_slave_1: left promiscuous mode [ 360.830102][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 361.039924][T16686] tipc: Enabled bearer , priority 0 [ 361.382132][T16690] syzkaller0: entered promiscuous mode [ 361.401333][T16690] syzkaller0: entered allmulticast mode [ 361.469530][T16683] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3041'. [ 361.527454][T16686] tipc: Resetting bearer [ 361.554258][T16712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3043'. [ 361.630932][T16679] tipc: Resetting bearer [ 361.712362][T16679] tipc: Disabling bearer [ 361.969867][T16723] validate_nla: 4 callbacks suppressed [ 361.969887][T16723] netlink: 'syz.3.3047': attribute type 2 has an invalid length. [ 362.117184][T16729] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 362.305590][T16732] netlink: 'syz.6.3052': attribute type 3 has an invalid length. [ 362.583805][T16759] RDS: rds_bind could not find a transport for fe88::7, load rds_tcp or rds_rdma? [ 362.935032][T16776] sit1: entered promiscuous mode [ 362.955633][T16776] sit1: entered allmulticast mode [ 363.094286][T16784] pim6reg1: entered promiscuous mode [ 363.129517][T16784] pim6reg1: entered allmulticast mode [ 363.173262][T16791] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 363.883832][T16831] openvswitch: netlink: Multiple metadata blocks provided [ 364.482703][T16858] Bluetooth: MGMT ver 1.23 [ 364.501751][T16858] __nla_validate_parse: 5 callbacks suppressed [ 364.501774][T16858] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3090'. [ 364.568589][T16862] netlink: 'syz.1.3089': attribute type 1 has an invalid length. [ 364.592087][T16861] netlink: 'syz.7.3091': attribute type 21 has an invalid length. [ 364.616766][T16861] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3091'. [ 364.642097][T16862] netlink: 'syz.1.3089': attribute type 2 has an invalid length. [ 364.691826][T16861] netlink: 'syz.7.3091': attribute type 5 has an invalid length. [ 364.716528][T16861] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3091'. [ 364.740374][T16861] netlink: 'syz.7.3091': attribute type 21 has an invalid length. [ 364.752498][T16859] netlink: 'syz.1.3089': attribute type 1 has an invalid length. [ 364.757267][T16861] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3091'. [ 364.798904][T16861] netlink: 'syz.7.3091': attribute type 5 has an invalid length. [ 364.809210][T16861] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3091'. [ 364.849501][T16861] netlink: 'syz.7.3091': attribute type 21 has an invalid length. [ 364.869983][T16861] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3091'. [ 364.873666][T16873] tipc: Enabled bearer , priority 0 [ 364.907715][T16861] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3091'. [ 364.930956][T16861] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3091'. [ 364.933719][T16873] syzkaller0: entered promiscuous mode [ 364.973957][T16873] syzkaller0: entered allmulticast mode [ 365.006421][T16861] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3091'. [ 365.035277][T16861] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3091'. [ 365.070613][T16873] tipc: Resetting bearer [ 365.160174][T16872] tipc: Resetting bearer [ 365.193539][T16872] tipc: Disabling bearer [ 366.315119][T16946] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 367.748090][T17021] validate_nla: 126 callbacks suppressed [ 367.748109][T17021] netlink: 'syz.1.3136': attribute type 11 has an invalid length. [ 367.779268][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.788391][T17015] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.945249][T17015] wg1: left promiscuous mode [ 367.950985][T17015] wg1: left allmulticast mode [ 367.978654][T17034] netlink: 'syz.3.3140': attribute type 1 has an invalid length. [ 368.020402][T17015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.040872][T17015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.162323][T17015] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 368.254145][T17015] veth3: left promiscuous mode [ 368.288846][T17020] batadv_slave_1: entered promiscuous mode [ 368.299026][T17020] batman_adv: batadv0: Adding interface: macsec1 [ 368.307214][T17020] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.343357][T17020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.362881][T17020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.376888][T17020] batman_adv: batadv0: Interface activated: macsec1 [ 368.646306][T17035] bond1: (slave geneve2): making interface the new active one [ 368.690428][T17035] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 368.730728][ T63] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.760612][ T63] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.780424][ T63] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.791783][ T63] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.984306][ T63] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.010630][ T63] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.030728][ T63] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.062634][ T63] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.082733][ T63] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.097567][ T63] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.132927][ T63] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.227265][ T63] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 369.854366][T17126] netlink: 'syz.1.3162': attribute type 1 has an invalid length. [ 370.118518][T17140] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 370.956932][T17181] IPv6: NLM_F_CREATE should be specified when creating new route [ 370.966536][T17181] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 371.000217][T17185] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 371.010899][T17185] wg1: Master is either lo or non-ether device [ 371.414806][T17207] __nla_validate_parse: 141 callbacks suppressed [ 371.414827][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3189'. [ 371.493995][T17213] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 371.552600][T17207] veth0_macvtap: left promiscuous mode [ 371.667721][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'. [ 371.729704][T17224] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.894165][T17224] bridge_slave_1 (unregistering): left allmulticast mode [ 371.912177][T17224] bridge_slave_1 (unregistering): left promiscuous mode [ 371.925481][T17224] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.125721][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3199'. [ 372.288528][T17257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3201'. [ 372.333938][T17258] openvswitch: netlink: Flow actions attr not present in new flow. [ 372.396834][T17262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3203'. [ 372.463202][ T3195] IPVS: starting estimator thread 0... [ 372.489951][T17262] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3203'. [ 372.539503][T17262] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3203'. [ 372.577445][T17264] IPVS: using max 26 ests per chain, 62400 per kthread [ 373.172033][T17286] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3210'. [ 373.372929][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3213'. [ 373.384184][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3213'. [ 374.133400][T17341] netlink: 'syz.5.3223': attribute type 10 has an invalid length. [ 375.055977][T17369] netlink: 'syz.5.3230': attribute type 7 has an invalid length. [ 375.064787][T17369] netlink: 'syz.5.3230': attribute type 8 has an invalid length. [ 375.404613][T17368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.499616][T17384] tipc: Started in network mode [ 375.511600][T17384] tipc: Node identity 46b85d58d39f, cluster identity 4711 [ 375.533839][T17384] tipc: Enabled bearer , priority 0 [ 375.598525][T17376] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 375.635021][T17376] tipc: Resetting bearer [ 375.766677][T17389] syzkaller0: entered promiscuous mode [ 375.787455][T17389] syzkaller0: entered allmulticast mode [ 375.852748][T17375] tipc: Resetting bearer [ 375.958864][T17375] tipc: Disabling bearer [ 376.022355][T17411] netlink: 'syz.5.3242': attribute type 8 has an invalid length. [ 376.056506][T17409] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.063023][T17106] IPVS: starting estimator thread 0... [ 376.198599][T17416] IPVS: using max 28 ests per chain, 67200 per kthread [ 376.472388][T17437] __nla_validate_parse: 6 callbacks suppressed [ 376.472410][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3252'. [ 376.538980][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3252'. [ 376.618736][T17442] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3250'. [ 376.649006][T17442] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3250'. [ 376.724897][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 376.878422][T17454] team0: Caught tx_queue_len zero misconfig [ 377.233852][T17469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.358149][T17472] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 377.386774][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'. [ 377.786819][T17484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.892527][T17493] delete_channel: no stack [ 377.946579][T17492] delete_channel: no stack [ 378.128046][T17507] netlink: 'syz.5.3276': attribute type 1 has an invalid length. [ 378.481840][T17523] nbd5: detected capacity change from 0 to 63 [ 378.581572][T17526] block nbd5: NBD_DISCONNECT [ 378.589685][T17526] block nbd5: Disconnected due to user request. [ 378.620512][ T5921] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.630481][ T5921] Buffer I/O error on dev nbd5, logical block 0, async page read [ 378.639931][ T5921] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.649629][T17526] block nbd5: shutting down sockets [ 378.660858][ T5921] Buffer I/O error on dev nbd5, logical block 1, async page read [ 378.842609][ T55] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 378.853399][ T55] Buffer I/O error on dev nbd5, logical block 2, async page read [ 378.861883][ T55] Buffer I/O error on dev nbd5, logical block 3, async page read [ 378.872525][ T5921] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.882419][ T5921] Buffer I/O error on dev nbd5, logical block 0, async page read [ 378.890553][ T5921] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.900449][ T5921] Buffer I/O error on dev nbd5, logical block 1, async page read [ 378.911515][ T5921] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.920717][ T5921] Buffer I/O error on dev nbd5, logical block 2, async page read [ 378.929123][ T5921] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.938631][ T5921] Buffer I/O error on dev nbd5, logical block 3, async page read [ 378.948353][ T5921] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.958038][ T5921] Buffer I/O error on dev nbd5, logical block 0, async page read [ 378.966296][ T5921] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.982815][ T5921] Buffer I/O error on dev nbd5, logical block 1, async page read [ 378.990908][ T5921] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.006877][ T5921] ldm_validate_partition_table(): Disk read failed. [ 379.019309][ T5921] Dev nbd5: unable to read RDB block 0 [ 379.027982][ T5921] nbd5: unable to read partition table [ 379.166520][ T5921] ldm_validate_partition_table(): Disk read failed. [ 379.203467][ T5921] Dev nbd5: unable to read RDB block 0 [ 379.257388][ T5921] nbd5: unable to read partition table [ 379.362520][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3286'. [ 379.728011][T17548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.734094][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 379.806701][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 379.850386][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3290'. [ 380.101828][T17567] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 380.332440][T17574] openvswitch: netlink: Actions may not be safe on all matching packets [ 380.495716][T17578] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 380.671422][ T25] block nbd1: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 210 seconds [ 380.692439][ T25] block nbd1: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 210 seconds [ 380.703882][ T25] block nbd1: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 210 seconds [ 380.714988][ T25] block nbd1: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 210 seconds [ 381.579189][T17628] __nla_validate_parse: 2 callbacks suppressed [ 381.579209][T17628] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3311'. [ 381.580443][T17626] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3310'. [ 381.944395][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 381.962520][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 381.985795][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 382.005707][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 382.290464][T17649] netlink: 'syz.3.3318': attribute type 13 has an invalid length. [ 382.508762][T17656] xt_l2tp: invalid flags combination: 8 [ 382.549248][T17649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.987050][T17674] netlink: 'syz.7.3324': attribute type 83 has an invalid length. [ 383.081496][T17679] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3324'. [ 383.127510][T17681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3327'. [ 383.267741][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3328'. [ 383.395206][T17687] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 383.491644][T17695] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3332'. [ 383.521646][T17695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.875568][T17710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.435492][T17728] veth0: entered promiscuous mode [ 384.473596][T17728] batadv_slave_1: entered promiscuous mode [ 384.484075][T17728] batman_adv: batadv0: Adding interface: macsec1 [ 384.490710][T17728] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 384.513680][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.525254][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.535870][T17728] batman_adv: batadv0: Interface activated: macsec1 [ 384.549772][T17727] veth0: left promiscuous mode [ 385.109091][T17745] netlink: 'syz.7.3348': attribute type 4 has an invalid length. [ 386.107525][T17769] netlink: 'syz.3.3354': attribute type 7 has an invalid length. [ 386.135829][T17769] netlink: 'syz.3.3354': attribute type 8 has an invalid length. [ 386.246325][T17769] gretap0: entered promiscuous mode [ 386.313931][T17769] batadv_slave_1: entered promiscuous mode [ 386.348153][T17769] gretap0: left promiscuous mode [ 386.403918][T17769] batadv_slave_1: left promiscuous mode [ 386.502750][T17775] tipc: Enabled bearer , priority 0 [ 386.659659][T17775] tipc: Disabling bearer [ 387.096610][T17783] __nla_validate_parse: 8 callbacks suppressed [ 387.096633][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 387.134785][T17531] Set syz1 is full, maxelem 65536 reached [ 387.156159][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3360'. [ 387.519405][T17806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3366'. [ 387.619957][T17813] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3367'. [ 387.684533][T17813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.691879][T17813] IPv6: NLM_F_CREATE should be set when creating new route [ 387.798701][T17822] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 387.967163][T17831] tipc: MTU too low for tipc bearer [ 387.997830][T17834] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 388.027847][T17835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3375'. [ 388.062371][T17830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3371'. [ 389.060468][T17882] bond0: (slave batadv0): Releasing backup interface [ 389.094631][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3392'. [ 389.127362][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3392'. [ 389.137218][T17882] bond0: (slave bond_slave_0): Releasing backup interface [ 389.188141][T17882] bond0: (slave bond_slave_1): Releasing backup interface [ 389.217525][T17882] team0: Port device team_slave_0 removed [ 389.259349][T17882] team0: Port device team_slave_1 removed [ 389.286154][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.308287][T17882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.320525][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.329104][T17882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.349698][T17882] bond3: left promiscuous mode [ 389.356043][T17882] bridge0: port 1(bond3) entered disabled state [ 389.593075][T17907] netlink: 'syz.1.3396': attribute type 62 has an invalid length. [ 389.609143][T17909] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 389.631808][T17907] netlink: 'syz.1.3396': attribute type 1 has an invalid length. [ 389.675661][T17907] netlink: 'syz.1.3396': attribute type 2 has an invalid length. [ 390.005540][T17931] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3405'. [ 390.022537][T17931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.384493][T17943] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3410'. [ 390.437861][T17942] bridge_slave_0: left allmulticast mode [ 390.450345][T17945] netlink: 'syz.1.3412': attribute type 10 has an invalid length. [ 390.473765][T17942] bridge_slave_0: left promiscuous mode [ 390.512087][T17942] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.546429][T17942] bridge_slave_1: left allmulticast mode [ 390.560620][T17942] bridge_slave_1: left promiscuous mode [ 390.582195][T17942] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.609497][T17942] bond0: (slave bond_slave_0): Releasing backup interface [ 390.648063][T17942] bond0: (slave bond_slave_1): Releasing backup interface [ 390.657466][T17955] netlink: 'syz.6.3414': attribute type 1 has an invalid length. [ 390.667159][T17955] nbd: error processing sock list [ 390.672698][T17955] block nbd0: shutting down sockets [ 390.700356][T17942] team0: Port device team_slave_0 removed [ 390.716162][T17942] team0: Port device team_slave_1 removed [ 390.731120][T17942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.739494][T17942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.759514][T17942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.768782][T17942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.800640][T17942] bond1: (slave geneve2): Releasing active interface [ 390.830002][T17945] dummy0: entered promiscuous mode [ 390.836900][T17945] bridge0: port 2(dummy0) entered blocking state [ 390.844175][T17945] bridge0: port 2(dummy0) entered disabled state [ 390.850899][T17945] dummy0: entered allmulticast mode [ 390.858958][T17945] bridge0: port 2(dummy0) entered blocking state [ 390.865547][T17945] bridge0: port 2(dummy0) entered forwarding state [ 390.887377][ T1164] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 390.922672][ T1164] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 390.961864][ T1164] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.001316][ T1164] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.069450][T17966] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 391.090890][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.120108][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.139489][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.158732][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.180412][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.207836][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.230547][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.264097][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.299793][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.318014][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.349772][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.408077][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.457016][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.483620][T17982] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.501815][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.590061][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.634276][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.648577][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.665092][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.705931][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.737852][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.795720][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.796504][T17992] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.841105][T17992] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 391.862293][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.865415][T17992] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 391.912129][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.948337][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.965159][T17992] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.975305][T17992] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 391.979686][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.985534][T17992] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.042154][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.075885][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.107366][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.132603][T17992] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.134318][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.150444][T17992] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 392.162723][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.164721][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.174590][T17992] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.199185][T18003] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 392.203623][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.208907][T18009] netlink: 'syz.5.3431': attribute type 5 has an invalid length. [ 392.225713][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.231733][T18009] __nla_validate_parse: 9 callbacks suppressed [ 392.231752][T18009] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3431'. [ 392.347815][T17992] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.387307][T18014] netlink: 'syz.6.3432': attribute type 7 has an invalid length. [ 392.396025][T17992] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 392.402738][T18016] netlink: 'syz.5.3433': attribute type 1 has an invalid length. [ 392.418159][T18016] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3433'. [ 392.426514][T17992] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.438656][T18014] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3432'. [ 392.620095][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 392.700453][ T1164] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.731888][ T1164] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 392.754660][ T1164] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 392.797057][T18025] 8021q: VLANs not supported on wg1 [ 392.829772][T18027] tipc: Enabling of bearer rejected, failed to enable media [ 392.876442][ T36] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.890781][ T36] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 392.901357][ T36] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 392.964907][T18036] team0: entered promiscuous mode [ 392.981468][T18036] team0: entered allmulticast mode [ 393.064866][ T1164] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.085346][ T1164] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 393.096025][ T1164] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 393.109737][T18043] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3441'. [ 393.142618][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3442'. [ 393.159955][ T63] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.182162][ T63] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 393.190506][ T63] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 393.276057][T18055] netlink: 'syz.5.3444': attribute type 7 has an invalid length. [ 393.293502][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3445'. [ 393.312285][T18056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3445'. [ 393.386463][T18062] netlink: 696 bytes leftover after parsing attributes in process `syz.7.3446'. [ 393.400175][T18059] delete_channel: no stack [ 393.436847][T18056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.523104][T18063] tipc: Enabled bearer , priority 0 [ 393.568951][T18063] syzkaller0: entered promiscuous mode [ 393.586253][T18063] syzkaller0: entered allmulticast mode [ 393.622329][T18063] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 393.704281][T18079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.788890][T18063] tipc: Resetting bearer [ 393.834001][T18061] tipc: Resetting bearer [ 393.878958][T18061] tipc: Disabling bearer [ 393.925595][T18086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.153553][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3457'. [ 394.240823][ T6048] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.267697][ T6048] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.570409][ T6048] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.606884][ T6048] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.903405][T18134] netlink: 'syz.6.3468': attribute type 3 has an invalid length. [ 395.079206][T18137] tipc: Enabled bearer , priority 0 [ 395.115592][T18137] syzkaller0: entered promiscuous mode [ 395.155604][T18137] syzkaller0: entered allmulticast mode [ 395.365610][T18154] tipc: Resetting bearer [ 395.413252][T18137] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 395.502763][T18135] tipc: Resetting bearer [ 395.544191][T18135] tipc: Disabling bearer [ 396.358838][T18202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.654881][T18224] netlink: 'syz.5.3493': attribute type 1 has an invalid length. [ 396.791120][T18226] wg1 speed is unknown, defaulting to 1000 [ 396.833037][T18226] wg1 speed is unknown, defaulting to 1000 [ 396.866572][T18226] wg1 speed is unknown, defaulting to 1000 [ 396.939705][T18226] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 397.035962][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.062069][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.077458][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.097726][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.128516][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.155629][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.181553][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.197084][T18226] wg1 speed is unknown, defaulting to 1000 [ 397.426399][T18250] __nla_validate_parse: 8 callbacks suppressed [ 397.426420][T18250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3505'. [ 397.805892][T18275] xt_socket: unknown flags 0xe4 [ 397.847022][T18283] TCP: TCP_TX_DELAY enabled [ 397.847697][T18286] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 397.897263][T18286] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 397.918058][T18286] tipc: Started in network mode [ 397.930504][T18286] tipc: Node identity 080211000001, cluster identity 4711 [ 397.950781][T18286] tipc: Enabled bearer , priority 0 [ 398.072601][T18291] openvswitch: netlink: Missing valid actions attribute. [ 398.085994][T18291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.152853][T18296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3520'. [ 398.233630][T18296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3520'. [ 398.281570][T18296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3520'. [ 398.328668][T18306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3524'. [ 398.438077][T18315] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3525'. [ 398.491621][T18318] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3525'. [ 398.901707][T18343] netlink: 'syz.1.3533': attribute type 1 has an invalid length. [ 398.910078][T18343] netlink: 'syz.1.3533': attribute type 2 has an invalid length. [ 398.930859][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3531'. [ 399.046102][T18347] netlink: 'syz.6.3534': attribute type 12 has an invalid length. [ 399.058493][T18347] netlink: 'syz.6.3534': attribute type 29 has an invalid length. [ 399.067030][T18347] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3534'. [ 399.071834][ T9871] tipc: Node number set to 134418688 [ 399.077632][T18347] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3534'. [ 399.573806][T18363] tipc: Enabled bearer , priority 0 [ 399.609603][T18363] syzkaller0: entered promiscuous mode [ 399.626121][T18363] syzkaller0: entered allmulticast mode [ 399.710270][T18370] vxcan2: entered promiscuous mode [ 399.762143][T18374] tipc: Resetting bearer [ 399.843330][T18362] tipc: Resetting bearer [ 399.958655][T18362] tipc: Disabling bearer [ 400.407413][T18399] geneve3: entered promiscuous mode [ 400.450299][T18409] warn_alloc: 1 callbacks suppressed [ 400.450320][T18409] syz.5.3554: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 400.450334][T18399] geneve3: entered allmulticast mode [ 400.502684][T18409] ,cpuset=/,mems_allowed=0-1 [ 400.534682][T18409] CPU: 1 UID: 0 PID: 18409 Comm: syz.5.3554 Not tainted syzkaller #0 PREEMPT(full) [ 400.534712][T18409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.534729][T18409] Call Trace: [ 400.534738][T18409] [ 400.534747][T18409] dump_stack_lvl+0x189/0x250 [ 400.534781][T18409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.534807][T18409] ? __pfx__printk+0x10/0x10 [ 400.534848][T18409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.534874][T18409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.534901][T18409] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 400.534929][T18409] warn_alloc+0x214/0x310 [ 400.534962][T18409] ? stack_depot_save_flags+0x40/0x860 [ 400.534996][T18409] ? __pfx_warn_alloc+0x10/0x10 [ 400.535030][T18409] ? kasan_save_track+0x4f/0x80 [ 400.535057][T18409] ? xskq_create+0x56/0x170 [ 400.535075][T18409] ? xsk_init_queue+0xb0/0x110 [ 400.535091][T18409] ? xsk_setsockopt+0x4dc/0x8d0 [ 400.535120][T18409] ? do_sock_setsockopt+0x17c/0x1b0 [ 400.535144][T18409] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 400.535166][T18409] ? do_syscall_64+0xfa/0x3b0 [ 400.535187][T18409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.535218][T18409] __vmalloc_node_range_noprof+0x125/0x12f0 [ 400.535284][T18409] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.535322][T18409] ? __kasan_kmalloc+0x93/0xb0 [ 400.535354][T18409] vmalloc_user_noprof+0xad/0xf0 [ 400.535384][T18409] ? xskq_create+0xbf/0x170 [ 400.535406][T18409] xskq_create+0xbf/0x170 [ 400.535429][T18409] xsk_init_queue+0xb0/0x110 [ 400.535452][T18409] xsk_setsockopt+0x4dc/0x8d0 [ 400.535486][T18409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 400.535518][T18409] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.535554][T18409] ? aa_sock_opt_perm+0xff/0x1b0 [ 400.535579][T18409] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 400.535601][T18409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 400.535634][T18409] do_sock_setsockopt+0x17c/0x1b0 [ 400.535665][T18409] __x64_sys_setsockopt+0x13f/0x1b0 [ 400.535696][T18409] do_syscall_64+0xfa/0x3b0 [ 400.535718][T18409] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.535739][T18409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.535760][T18409] ? clear_bhb_loop+0x60/0xb0 [ 400.535785][T18409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.535811][T18409] RIP: 0033:0x7fd5c438eec9 [ 400.535836][T18409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.535853][T18409] RSP: 002b:00007fd5c52c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 400.535875][T18409] RAX: ffffffffffffffda RBX: 00007fd5c45e5fa0 RCX: 00007fd5c438eec9 [ 400.535890][T18409] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 400.535902][T18409] RBP: 00007fd5c4411f91 R08: 0000000000000004 R09: 0000000000000000 [ 400.535914][T18409] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.535927][T18409] R13: 00007fd5c45e6038 R14: 00007fd5c45e5fa0 R15: 00007ffc307ebc18 [ 400.535961][T18409] [ 400.535975][T18409] Mem-Info: [ 400.879107][T18409] active_anon:4998 inactive_anon:0 isolated_anon:0 [ 400.879107][T18409] active_file:3403 inactive_file:40012 isolated_file:0 [ 400.879107][T18409] unevictable:768 dirty:69 writeback:0 [ 400.879107][T18409] slab_reclaimable:12581 slab_unreclaimable:148301 [ 400.879107][T18409] mapped:29241 shmem:1381 pagetables:1230 [ 400.879107][T18409] sec_pagetables:0 bounce:0 [ 400.879107][T18409] kernel_misc_reclaimable:0 [ 400.879107][T18409] free:1268708 free_pcp:17188 free_cma:0 [ 400.957670][T18419] netlink: 'syz.3.3557': attribute type 11 has an invalid length. [ 401.011426][T18409] Node 0 active_anon:19676kB inactive_anon:0kB active_file:13612kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116964kB dirty:276kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15264kB pagetables:4632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.097923][T18409] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.133662][T18409] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.175858][T18409] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 401.183759][T18409] Node 0 DMA32 free:1168072kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19932kB inactive_anon:0kB active_file:13612kB inactive_file:158268kB unevictable:1536kB writepending:288kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:51904kB local_pcp:19156kB free_cma:0kB [ 401.293676][ T6048] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.303839][T18409] lowmem_reserve[]: 0 0 1 1 1 [ 401.322894][ T3195] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.326143][T18409] Node 0 [ 401.331486][ T6048] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.371356][T18409] Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 401.424717][T18409] lowmem_reserve[]: 0 0 0 0 0 [ 401.429786][T18409] Node 1 Normal free:3895060kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13088kB local_pcp:4992kB free_cma:0kB [ 401.471981][ T3195] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.489651][T18409] lowmem_reserve[]: 0 0 0 0 0 [ 401.494751][T18409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.508551][T18409] Node 0 DMA32: 1708*4kB (UM) 467*8kB (UME) 276*16kB (UM) 177*32kB (UME) 90*64kB (UM) 46*128kB (UM) 17*256kB (UME) 70*512kB (UME) 122*1024kB (UM) 6*2048kB (UM) 234*4096kB (UM) = 1168168kB [ 401.532401][T18409] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 401.549490][T18409] Node 1 Normal: 211*4kB (UME) 49*8kB (UME) 38*16kB (UME) 179*32kB (UME) 46*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3895060kB [ 401.572164][T18409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.582004][T18409] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.591723][T18409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.650503][T18409] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.673083][T18409] 44780 total pagecache pages [ 401.677978][T18409] 0 pages in swap cache [ 401.686506][T18409] Free swap = 124996kB [ 401.690834][T18409] Total swap = 124996kB [ 401.698334][T18409] 2097051 pages RAM [ 401.707543][T18409] 0 pages HighMem/MovableOnly [ 401.714825][T18409] 425672 pages reserved [ 401.719397][T18409] 0 pages cma reserved [ 401.861830][ T9871] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.960481][T18455] bond8: entered promiscuous mode [ 401.965717][T18455] bond8: entered allmulticast mode [ 401.972445][T18455] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.990257][T18458] netlink: 'syz.3.3570': attribute type 83 has an invalid length. [ 402.469243][T18481] vlan2: entered allmulticast mode [ 402.482096][T18483] netlink: 'syz.6.3578': attribute type 23 has an invalid length. [ 402.493932][T18481] bond0: entered allmulticast mode [ 402.499160][T18481] bond_slave_0: entered allmulticast mode [ 402.518588][T18481] bond_slave_1: entered allmulticast mode [ 402.622103][T18490] netlink: 'syz.3.3581': attribute type 16 has an invalid length. [ 402.656910][T18490] netlink: 'syz.3.3581': attribute type 17 has an invalid length. [ 402.769927][T18490] team0: left promiscuous mode [ 402.779348][T18490] team0: left allmulticast mode [ 402.787565][T18490] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.798578][T18490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.838940][T18493] tipc: Enabled bearer , priority 0 [ 402.857850][T18493] syzkaller0: entered promiscuous mode [ 402.871430][T18493] syzkaller0: entered allmulticast mode [ 403.092313][T18514] netlink: 'syz.7.3587': attribute type 21 has an invalid length. [ 403.203282][T18520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.205479][T18500] __nla_validate_parse: 8 callbacks suppressed [ 403.205501][T18500] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3584'. [ 403.287557][T18491] tipc: Resetting bearer [ 403.337700][T18491] tipc: Disabling bearer [ 403.650644][T18539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3595'. [ 403.842438][T18549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.919338][T18553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.118795][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3605'. [ 404.130912][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'. [ 404.345427][T18578] : entered promiscuous mode [ 404.663980][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3612'. [ 404.676702][T18600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3612'. [ 404.714529][T18599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.821440][T18598] delete_channel: no stack [ 405.061735][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 405.108307][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3619'. [ 405.245704][T18624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.257773][T18624] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3621'. [ 405.354941][T18630] openvswitch: netlink: IP tunnel dst address not specified [ 405.374946][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 405.419064][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 405.515422][T18634] netlink: 'syz.3.3625': attribute type 6 has an invalid length. [ 405.662270][T18646] netlink: 'syz.6.3629': attribute type 1 has an invalid length. [ 405.790468][T18650] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 405.805552][T18650] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 405.874178][T18646] gretap3: entered promiscuous mode [ 405.886198][T18646] bond6: (slave gretap3): making interface the new active one [ 405.900748][T18646] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 406.018876][T18662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.060294][T18667] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 406.210317][T18672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.398520][T18740] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 407.416751][ T3195] IPVS: starting estimator thread 0... [ 407.522087][T18745] IPVS: using max 25 ests per chain, 60000 per kthread [ 407.694473][T18758] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.487179][T18798] __nla_validate_parse: 15 callbacks suppressed [ 408.487201][T18798] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3676'. [ 408.613096][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3679'. [ 408.674394][T18807] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3678'. [ 408.747007][T18807] netlink: 6 bytes leftover after parsing attributes in process `syz.7.3678'. [ 409.280475][T18835] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3685'. [ 409.284802][T18786] wg1 speed is unknown, defaulting to 1000 [ 409.291009][T18834] sctp: [Deprecated]: syz.1.3684 (pid 18834) Use of int in max_burst socket option deprecated. [ 409.291009][T18834] Use struct sctp_assoc_value instead [ 409.437887][T18835] team_slave_0: entered promiscuous mode [ 409.444662][T18835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3685'. [ 409.937199][T18843] tipc: Enabled bearer , priority 0 [ 409.945245][T18843] vcan0: entered promiscuous mode [ 409.950621][T18843] vcan0: entered allmulticast mode [ 409.957929][T18843] netlink: 'syz.7.3689': attribute type 2 has an invalid length. [ 409.969272][T18843] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 410.014787][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3688'. [ 410.056648][T18843] tipc: Resetting bearer [ 410.176724][T18842] tipc: Disabling bearer [ 410.209607][T18846] netlink: 'syz.5.3690': attribute type 1 has an invalid length. [ 410.218214][T18847] netlink: 'syz.5.3690': attribute type 1 has an invalid length. [ 410.226606][T18846] netlink: 'syz.5.3690': attribute type 2 has an invalid length. [ 410.244553][T18847] netlink: 'syz.5.3690': attribute type 2 has an invalid length. [ 410.281267][T18847] netlink: 'syz.5.3690': attribute type 1 has an invalid length. [ 410.289080][T18847] netlink: 1156 bytes leftover after parsing attributes in process `syz.5.3690'. [ 410.340354][T18846] netlink: 'syz.5.3690': attribute type 1 has an invalid length. [ 410.359690][T18846] netlink: 1156 bytes leftover after parsing attributes in process `syz.5.3690'. [ 410.697243][T18874] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 410.731869][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3698'. [ 410.741452][ T25] block nbd1: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 240 seconds [ 410.752780][ T25] block nbd1: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 240 seconds [ 410.765310][ T25] block nbd1: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 240 seconds [ 410.776791][ T25] block nbd1: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 240 seconds [ 410.825467][T18874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.126329][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.129724][T18891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.145394][T18890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.167270][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.423114][T18899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 411.825924][T18906] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 411.920424][T18913] syzkaller0: entered promiscuous mode [ 411.975740][T18913] syzkaller0: entered allmulticast mode [ 412.501854][T18946] netlink: 'syz.3.3719': attribute type 11 has an invalid length. [ 412.651348][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.651421][T18954] netlink: 'syz.5.3721': attribute type 1 has an invalid length. [ 412.877733][T18954] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 412.938943][T18965] veth13: entered promiscuous mode [ 412.955203][T18965] bond9: (slave veth13): Enslaving as a backup interface with a down link [ 413.091739][T18973] netlink: 'syz.3.3725': attribute type 21 has an invalid length. [ 413.205795][T18980] openvswitch: netlink: Unknown key attributes 2 [ 413.214078][T18980] rose0: left promiscuous mode [ 413.226116][T18981] netlink: 'syz.3.3728': attribute type 1 has an invalid length. [ 413.449011][T18985] veth1_macvtap: left promiscuous mode [ 413.498160][T18988] __nla_validate_parse: 5 callbacks suppressed [ 413.498180][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3729'. [ 413.788933][T18998] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3734'. [ 413.987970][T19008] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.375787][T19037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3743'. [ 414.794363][T19048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.496474][T19091] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3756'. [ 415.602271][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3758'. [ 415.720083][T19099] validate_nla: 3 callbacks suppressed [ 415.720105][T19099] netlink: 'syz.7.3760': attribute type 11 has an invalid length. [ 415.742163][T19101] netlink: 'syz.3.3761': attribute type 11 has an invalid length. [ 415.777986][T19102] netlink: 'syz.3.3761': attribute type 11 has an invalid length. [ 415.802179][T19103] netlink: 'syz.7.3760': attribute type 11 has an invalid length. [ 415.827638][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3761'. [ 415.890410][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3764'. [ 415.930418][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3765'. [ 416.017370][T19117] netlink: 'syz.7.3765': attribute type 11 has an invalid length. [ 416.323307][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 416.339322][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3769'. [ 417.879114][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.892118][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.905849][T19223] atomic_op ffff888047efb998 conn xmit_atomic 0000000000000000 [ 417.918502][T19223] netlink: 'syz.7.3796': attribute type 3 has an invalid length. [ 417.967839][T19227] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 418.303326][T19245] netdevsim netdevsim6 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 418.670175][T19266] __nla_validate_parse: 3 callbacks suppressed [ 418.670193][T19266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'. [ 418.943219][T19285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'. [ 418.978272][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 419.242067][T19290] netlink: 'syz.1.3818': attribute type 12 has an invalid length. [ 419.249953][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 419.253592][T19294] netlink: 'syz.3.3820': attribute type 1 has an invalid length. [ 419.306738][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.306907][T19290] netlink: 'syz.1.3818': attribute type 12 has an invalid length. [ 419.346829][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.375919][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 419.385415][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.428353][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.506276][T19303] tipc: Enabling of bearer rejected, failed to enable media [ 419.599463][T19305] tipc: Resetting bearer [ 419.626368][T19307] netlink: 5636 bytes leftover after parsing attributes in process `syz.6.3823'. [ 419.650402][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 419.680733][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 419.928382][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3827'. [ 420.223464][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3832'. [ 420.280519][T19340] netlink: 'syz.1.3833': attribute type 21 has an invalid length. [ 420.372360][T19338] af_packet: tpacket_rcv: packet too big, clamped from 3614 to 4294967272. macoff=96 [ 421.473039][T19409] tipc: Enabling of bearer rejected, already enabled [ 421.642835][T19424] netlink: zone id is out of range [ 421.659795][T19424] netlink: del zone limit has 4 unknown bytes [ 422.699395][T19485] validate_nla: 2 callbacks suppressed [ 422.699414][T19485] netlink: 'syz.1.3870': attribute type 4 has an invalid length. [ 422.759326][T19485] netlink: 'syz.1.3870': attribute type 4 has an invalid length. [ 423.363073][T19520] netlink: zone id is out of range [ 423.550333][T19533] netlink: 'syz.6.3888': attribute type 11 has an invalid length. [ 423.560197][T19531] netlink: 'syz.1.3886': attribute type 21 has an invalid length. [ 423.570136][T19533] sctp: [Deprecated]: syz.6.3888 (pid 19533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.570136][T19533] Use struct sctp_sack_info instead [ 423.587388][T19531] netlink: 'syz.1.3886': attribute type 6 has an invalid length. [ 423.608895][T19537] netlink: 'syz.7.3889': attribute type 29 has an invalid length. [ 423.622333][T19541] netlink: 'syz.1.3886': attribute type 21 has an invalid length. [ 423.650086][T19541] netlink: 'syz.1.3886': attribute type 6 has an invalid length. [ 423.673271][T19541] __nla_validate_parse: 17 callbacks suppressed [ 423.673305][T19541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3886'. [ 423.812192][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 423.934840][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3890'. [ 423.977430][T19560] netlink: 'syz.6.3891': attribute type 2 has an invalid length. [ 424.010051][T19560] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3891'. [ 424.039419][T19560] nbd: must specify a device to reconfigure [ 424.649701][T19565] bridge0: port 2(dummy0) entered disabled state [ 424.656409][T19565] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.115654][T19565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.137687][T19565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.524713][T19565] sit1: left promiscuous mode [ 425.543974][T19565] batman_adv: batadv0: Interface deactivated: macsec1 [ 425.691349][ T6048] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.731551][ T6048] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.768557][ T6048] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.811307][ T6048] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.823105][ T1146] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.841491][ T1146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.883636][ T1146] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.893508][T19593] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3898'. [ 425.899385][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3899'. [ 425.921732][ T1146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.315743][T19620] netlink: 'syz.6.3907': attribute type 1 has an invalid length. [ 426.711694][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3913'. [ 426.749372][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3913'. [ 426.958479][T19645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3914'. [ 427.138926][T19653] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3918'. [ 427.261479][T19653] team0: Port device geneve0 added [ 427.371575][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 427.390162][T19675] tipc: Invalid UDP bearer configuration [ 427.390223][T19675] tipc: Enabling of bearer rejected, failed to enable media [ 427.823453][T19692] validate_nla: 2 callbacks suppressed [ 427.823472][T19692] netlink: 'syz.6.3929': attribute type 10 has an invalid length. [ 428.039936][T19706] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 429.128212][T19742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.309681][T19752] __nla_validate_parse: 5 callbacks suppressed [ 429.309703][T19752] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3946'. [ 429.329982][T19749] tipc: Enabled bearer , priority 0 [ 429.353036][T19749] syzkaller0: entered promiscuous mode [ 429.368877][T19749] syzkaller0: entered allmulticast mode [ 429.449132][T19749] tipc: Resetting bearer [ 429.485451][T19759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.496656][T19747] tipc: Resetting bearer [ 429.557977][T19747] tipc: Disabling bearer [ 430.045874][T19787] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3956'. [ 430.056007][T19786] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3956'. [ 430.331411][ T5870] Bluetooth: hci0: command tx timeout [ 430.834345][T19820] ip6gre1: entered allmulticast mode [ 430.897506][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3967'. [ 431.445410][T19855] netlink: 'syz.3.3977': attribute type 1 has an invalid length. [ 431.519076][T19855] bond2: (slave gretap2): making interface the new active one [ 431.533685][T19855] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 431.597086][T19855] netlink: 'syz.3.3977': attribute type 3 has an invalid length. [ 431.615482][T19855] delete_channel: no stack [ 431.808339][T19874] netlink: 'syz.3.3982': attribute type 21 has an invalid length. [ 431.817703][T19874] netlink: 'syz.3.3982': attribute type 6 has an invalid length. [ 431.826147][T19874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3982'. [ 431.838165][T19874] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3982'. [ 431.998636][T19879] tipc: Enabled bearer , priority 0 [ 432.070174][T19882] tipc: Resetting bearer [ 432.146030][T19879] tipc: Disabling bearer [ 432.334434][T19894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.340866][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3989'. [ 432.348611][T19894] nft_compat: unsupported protocol 0 [ 432.639149][T19908] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 432.655378][T19905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.675570][T19908] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3993'. [ 432.723692][T19905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.735037][T19908] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 433.029945][T19905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.061100][T19905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.106847][T19927] tipc: Enabled bearer , priority 0 [ 433.256600][T19905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.278029][T19905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.316190][T19927] tipc: Disabling bearer [ 433.399631][T19905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.428153][T19905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.467357][T19947] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4002'. [ 433.504320][T19948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4002'. [ 433.829347][ T1146] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.847027][ T1146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.943182][T19969] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 433.966178][T19970] netlink: 'syz.1.4008': attribute type 1 has an invalid length. [ 433.980408][T19970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.995728][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.005011][T19969] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.042646][ T1146] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.065354][ T1146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.098474][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.115659][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.167253][ T1146] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.201277][ T1146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.391637][T19991] __nla_validate_parse: 5 callbacks suppressed [ 434.391658][T19991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4013'. [ 434.467628][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4013'. [ 434.513933][T13518] batman_adv: batadv0: IGMP Querier appeared [ 434.520031][T13518] batman_adv: batadv0: MLD Querier appeared [ 434.542610][T20001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.845679][T20019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.856878][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4021'. [ 435.474282][T20049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4030'. [ 436.074890][T20082] netlink: 212264 bytes leftover after parsing attributes in process `syz.7.4039'. [ 436.133956][T20086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.134985][T20087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.173797][T20081] veth9: entered allmulticast mode [ 436.301073][T20093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4045'. [ 436.355681][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4044'. [ 436.369911][T20093] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4045'. [ 436.819624][T20119] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4053'. [ 436.925149][T20124] netlink: 'syz.5.4055': attribute type 29 has an invalid length. [ 436.938512][T20124] netlink: 'syz.5.4055': attribute type 29 has an invalid length. [ 436.948516][T20124] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4055'. [ 439.127060][T20225] netlink: 'syz.3.4081': attribute type 1 has an invalid length. [ 439.166804][T20225] ip6tnl1: entered promiscuous mode [ 439.172324][T20225] ip6tnl1: entered allmulticast mode [ 439.491728][T20240] tipc: Enabled bearer , priority 12 [ 439.827955][T20263] netlink: 'syz.5.4096': attribute type 11 has an invalid length. [ 439.837758][T20263] __nla_validate_parse: 2 callbacks suppressed [ 439.837779][T20263] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4096'. [ 439.932099][T20270] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4097'. [ 440.045198][T20277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4099'. [ 440.084268][T20277] netlink: 'syz.5.4099': attribute type 7 has an invalid length. [ 440.172364][T20277] netlink: 'syz.5.4099': attribute type 8 has an invalid length. [ 440.230705][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4099'. [ 440.611403][T17095] tipc: Node number set to 3670203750 [ 440.814723][ T25] block nbd1: Possible stuck request ffff888025140000: control (read@0,1024B). Runtime 270 seconds [ 440.826658][ T25] block nbd1: Possible stuck request ffff8880251401c0: control (read@1024,1024B). Runtime 270 seconds [ 440.840373][ T25] block nbd1: Possible stuck request ffff888025140380: control (read@2048,1024B). Runtime 270 seconds [ 440.852647][ T25] block nbd1: Possible stuck request ffff888025140540: control (read@3072,1024B). Runtime 270 seconds [ 441.024333][T20306] netlink: 'syz.7.4105': attribute type 9 has an invalid length. [ 441.113665][T20313] netlink: 'syz.3.4107': attribute type 39 has an invalid length. [ 441.183344][T20306] sock: sock_timestamping_bind_phc: sock not bind to device [ 441.250960][T20320] netlink: 'syz.3.4107': attribute type 10 has an invalid length. [ 441.310071][T20306] netlink: 'syz.7.4105': attribute type 29 has an invalid length. [ 441.326393][T20312] netlink: 'syz.7.4105': attribute type 29 has an invalid length. [ 441.326775][T20319] netlink: 580 bytes leftover after parsing attributes in process `syz.6.4110'. [ 441.352572][T20320] veth1_macvtap: left promiscuous mode [ 442.055928][T20355] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4120'. [ 442.240484][T20287] wg1 speed is unknown, defaulting to 1000 [ 442.569366][T20382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4128'. [ 442.620663][T20379] pimreg3: entered allmulticast mode [ 442.690319][T20387] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.4128'. [ 443.238849][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4133'. [ 443.471709][T20417] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4137'. [ 443.549778][T20407] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 443.631782][T20421] pim6reg527: entered allmulticast mode [ 443.785568][T20430] netlink: 'syz.6.4141': attribute type 29 has an invalid length. [ 443.816886][T20430] netlink: 'syz.6.4141': attribute type 29 has an invalid length. [ 444.514017][T20476] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 444.643163][T20482] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.687153][T20488] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 444.721768][T20488] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 444.769262][T20492] IPVS: length: 162 != 24 [ 445.290652][T20516] validate_nla: 1 callbacks suppressed [ 445.290676][T20516] netlink: 'syz.6.4170': attribute type 18 has an invalid length. [ 445.448969][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.493352][T20522] veth0_to_bridge: entered promiscuous mode [ 445.503915][T20525] kthread_run failed with err -4 [ 445.509372][T20519] veth0_to_bridge: left promiscuous mode [ 445.676029][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.737609][T20536] delete_channel: no stack [ 445.864691][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.921864][T20540] netlink: 'syz.1.4179': attribute type 142 has an invalid length. [ 446.006488][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.213535][T20552] __nla_validate_parse: 5 callbacks suppressed [ 446.213556][T20552] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4183'. [ 446.266262][T20552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4183'. [ 446.444478][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4183'. [ 446.463631][T20559] sock: sock_timestamping_bind_phc: sock not bind to device [ 446.472937][T20554] bridge_slave_1: default FDB implementation only supports local addresses [ 446.481960][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 447.793242][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.807756][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.820711][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 447.836414][ T12] bond0 (unregistering): Released all slaves [ 447.853520][ T12] bond1 (unregistering): Released all slaves [ 447.870638][ T12] bond2 (unregistering): Released all slaves [ 447.892966][ T12] bond3 (unregistering): Released all slaves [ 447.923173][T20570] tipc: Enabled bearer , priority 0 [ 447.938025][T20579] syzkaller0: entered promiscuous mode [ 447.971751][T20579] syzkaller0: entered allmulticast mode [ 448.006449][T20584] tipc: Resetting bearer [ 448.120994][ T12] tipc: Disabling bearer [ 448.140640][ T12] tipc: Disabling bearer [ 448.168854][ T12] tipc: Left network mode [ 448.207422][T20584] tipc: Resetting bearer [ 448.218782][T20597] IPVS: persistence engine module ip_vs_pe_À not found [ 448.323024][T20584] tipc: Disabling bearer [ 448.425300][T20603] netdevsim netdevsim6 ÿÿÿÿÿÿ: left promiscuous mode [ 448.470436][T20603] gretap3: left promiscuous mode [ 448.567828][T13518] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 448.759294][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4201'. [ 448.760602][T20627] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4200'. [ 448.887659][T20626] macsec2: entered promiscuous mode [ 448.902881][T20626] bridge0: entered promiscuous mode [ 448.908650][T20626] macsec2: entered allmulticast mode [ 448.915051][T20626] bridge0: entered allmulticast mode [ 448.929627][T20626] bridge0: port 4(macsec2) entered blocking state [ 448.937440][T20626] bridge0: port 4(macsec2) entered disabled state [ 448.953827][T20626] bridge0: left allmulticast mode [ 448.959773][T20626] bridge0: left promiscuous mode [ 449.300569][T20629] netlink: 'syz.6.4201': attribute type 23 has an invalid length. [ 449.671624][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.692850][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.707791][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.725688][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.845774][ T12] veth0_macvtap: left promiscuous mode [ 449.862989][ T12] veth1_vlan: left promiscuous mode [ 449.889777][ T12] veth0_vlan: left promiscuous mode [ 450.050026][T20668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4210'. [ 450.211723][ T63] smc: removing ib device syz0 [ 451.029513][T17094] ================================================================== [ 451.037771][T17094] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 451.046703][T17094] Read of size 8 at addr ffff88807e4722e8 by task kworker/1:23/17094 [ 451.055127][T17094] [ 451.057493][T17094] CPU: 1 UID: 0 PID: 17094 Comm: kworker/1:23 Not tainted syzkaller #0 PREEMPT(full) [ 451.057520][T17094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.057535][T17094] Workqueue: events smc_ib_port_event_work [ 451.057572][T17094] Call Trace: [ 451.057582][T17094] [ 451.057592][T17094] dump_stack_lvl+0x189/0x250 [ 451.057619][T17094] ? rcu_is_watching+0x15/0xb0 [ 451.057639][T17094] ? __kasan_check_byte+0x12/0x40 [ 451.057678][T17094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.057701][T17094] ? rcu_is_watching+0x15/0xb0 [ 451.057720][T17094] ? lock_release+0x4b/0x3e0 [ 451.057752][T17094] ? __virt_addr_valid+0x1c8/0x5c0 [ 451.057778][T17094] ? __virt_addr_valid+0x4a5/0x5c0 [ 451.057806][T17094] print_report+0xca/0x240 [ 451.057826][T17094] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 451.057852][T17094] kasan_report+0x118/0x150 [ 451.057881][T17094] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 451.057912][T17094] __ethtool_get_link_ksettings+0x6e/0x190 [ 451.057941][T17094] ib_get_eth_speed+0x15e/0x7b0 [ 451.057969][T17094] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 451.058001][T17094] ? do_raw_spin_unlock+0x122/0x240 [ 451.058032][T17094] rxe_query_port+0x93/0x3b0 [ 451.058056][T17094] ib_query_port+0x170/0x830 [ 451.058086][T17094] smc_ib_port_event_work+0x15a/0x940 [ 451.058123][T17094] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.058142][T17094] ? process_scheduled_works+0x9ef/0x17b0 [ 451.058161][T17094] ? process_scheduled_works+0x9ef/0x17b0 [ 451.058182][T17094] process_scheduled_works+0xae1/0x17b0 [ 451.058219][T17094] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.058249][T17094] worker_thread+0x8a0/0xda0 [ 451.058285][T17094] kthread+0x70e/0x8a0 [ 451.058313][T17094] ? __pfx_worker_thread+0x10/0x10 [ 451.058333][T17094] ? __pfx_kthread+0x10/0x10 [ 451.058358][T17094] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.058377][T17094] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.058396][T17094] ? __pfx_kthread+0x10/0x10 [ 451.058422][T17094] ret_from_fork+0x439/0x7d0 [ 451.058444][T17094] ? __pfx_ret_from_fork+0x10/0x10 [ 451.058468][T17094] ? __switch_to_asm+0x39/0x70 [ 451.058494][T17094] ? __switch_to_asm+0x33/0x70 [ 451.058518][T17094] ? __pfx_kthread+0x10/0x10 [ 451.058543][T17094] ret_from_fork_asm+0x1a/0x30 [ 451.058578][T17094] [ 451.058586][T17094] [ 451.282856][T17094] Allocated by task 5880: [ 451.287196][T17094] kasan_save_track+0x3e/0x80 [ 451.291893][T17094] __kasan_kmalloc+0x93/0xb0 [ 451.296735][T17094] __kvmalloc_node_noprof+0x30d/0x5f0 [ 451.302142][T17094] alloc_netdev_mqs+0xa3/0x11b0 [ 451.307017][T17094] rtnl_create_link+0x31f/0xd10 [ 451.311900][T17094] rtnl_newlink_create+0x25c/0xb00 [ 451.317118][T17094] rtnl_newlink+0x16d6/0x1c70 [ 451.321809][T17094] rtnetlink_rcv_msg+0x7cf/0xb70 [ 451.326798][T17094] netlink_rcv_skb+0x205/0x470 [ 451.331703][T17094] netlink_unicast+0x82f/0x9e0 [ 451.336629][T17094] netlink_sendmsg+0x805/0xb30 [ 451.341421][T17094] __sock_sendmsg+0x219/0x270 [ 451.346133][T17094] __sys_sendto+0x3bd/0x520 [ 451.350678][T17094] __x64_sys_sendto+0xde/0x100 [ 451.355504][T17094] do_syscall_64+0xfa/0x3b0 [ 451.360051][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.365957][T17094] [ 451.368290][T17094] Freed by task 12: [ 451.372107][T17094] kasan_save_track+0x3e/0x80 [ 451.376798][T17094] kasan_save_free_info+0x46/0x50 [ 451.381857][T17094] __kasan_slab_free+0x5b/0x80 [ 451.386643][T17094] kfree+0x18e/0x440 [ 451.390640][T17094] device_release+0x9c/0x1c0 [ 451.395247][T17094] kobject_put+0x22b/0x480 [ 451.399763][T17094] netdev_run_todo+0xd2e/0xea0 [ 451.404628][T17094] default_device_exit_batch+0x81e/0x890 [ 451.410293][T17094] ops_undo_list+0x525/0x990 [ 451.414926][T17094] cleanup_net+0x4c5/0x800 [ 451.419362][T17094] process_scheduled_works+0xae1/0x17b0 [ 451.424974][T17094] worker_thread+0x8a0/0xda0 [ 451.429628][T17094] kthread+0x70e/0x8a0 [ 451.433728][T17094] ret_from_fork+0x439/0x7d0 [ 451.438345][T17094] ret_from_fork_asm+0x1a/0x30 [ 451.443223][T17094] [ 451.445556][T17094] The buggy address belongs to the object at ffff88807e472000 [ 451.445556][T17094] which belongs to the cache kmalloc-cg-4k of size 4096 [ 451.459963][T17094] The buggy address is located 744 bytes inside of [ 451.459963][T17094] freed 4096-byte region [ffff88807e472000, ffff88807e473000) [ 451.473864][T17094] [ 451.476200][T17094] The buggy address belongs to the physical page: [ 451.482621][T17094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e470 [ 451.491500][T17094] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 451.500033][T17094] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 451.507604][T17094] page_type: f5(slab) [ 451.511650][T17094] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 451.520345][T17094] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 451.528960][T17094] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 451.537651][T17094] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 451.546351][T17094] head: 00fff00000000003 ffffea0001f91c01 00000000ffffffff 00000000ffffffff [ 451.555142][T17094] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 451.563920][T17094] page dumped because: kasan: bad access detected [ 451.570364][T17094] page_owner tracks the page as allocated [ 451.576094][T17094] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5880, tgid 5880 (syz-executor), ts 95069426733, free_ts 94814556082 [ 451.597563][T17094] post_alloc_hook+0x240/0x2a0 [ 451.602352][T17094] get_page_from_freelist+0x21e4/0x22c0 [ 451.607919][T17094] __alloc_frozen_pages_noprof+0x181/0x370 [ 451.613736][T17094] alloc_pages_mpol+0x232/0x4a0 [ 451.618605][T17094] allocate_slab+0x8a/0x370 [ 451.623121][T17094] ___slab_alloc+0xbeb/0x1420 [ 451.627825][T17094] __kmalloc_noprof+0x305/0x4f0 [ 451.632698][T17094] __register_sysctl_table+0x72/0x1340 [ 451.638179][T17094] __addrconf_sysctl_register+0x328/0x4c0 [ 451.643922][T17094] addrconf_sysctl_register+0x168/0x1c0 [ 451.649523][T17094] ipv6_add_dev+0xd46/0x1370 [ 451.654151][T17094] addrconf_notify+0x794/0x1010 [ 451.659137][T17094] notifier_call_chain+0x1b3/0x3e0 [ 451.664357][T17094] register_netdevice+0x1608/0x1ae0 [ 451.669583][T17094] virt_wifi_newlink+0x428/0x860 [ 451.674546][T17094] rtnl_newlink_create+0x310/0xb00 [ 451.679679][T17094] page last free pid 5864 tgid 5864 stack trace: [ 451.686015][T17094] __free_frozen_pages+0xbc4/0xd30 [ 451.691217][T17094] __slab_free+0x303/0x3c0 [ 451.695652][T17094] qlist_free_all+0x97/0x140 [ 451.700257][T17094] kasan_quarantine_reduce+0x148/0x160 [ 451.705745][T17094] __kasan_slab_alloc+0x22/0x80 [ 451.710617][T17094] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 451.716007][T17094] alloc_netdev_mqs+0x8a0/0x11b0 [ 451.720968][T17094] rtnl_create_link+0x31f/0xd10 [ 451.725835][T17094] rtnl_newlink_create+0x25c/0xb00 [ 451.730968][T17094] rtnl_newlink+0x16d6/0x1c70 [ 451.735660][T17094] rtnetlink_rcv_msg+0x7cf/0xb70 [ 451.740623][T17094] netlink_rcv_skb+0x205/0x470 [ 451.745424][T17094] netlink_unicast+0x82f/0x9e0 [ 451.750208][T17094] netlink_sendmsg+0x805/0xb30 [ 451.754993][T17094] __sock_sendmsg+0x219/0x270 [ 451.759693][T17094] __sys_sendto+0x3bd/0x520 [ 451.764225][T17094] [ 451.766559][T17094] Memory state around the buggy address: [ 451.772201][T17094] ffff88807e472180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 451.780289][T17094] ffff88807e472200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.788360][T17094] >ffff88807e472280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.796874][T17094] ^ [ 451.804353][T17094] ffff88807e472300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.812514][T17094] ffff88807e472380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.820582][T17094] ================================================================== [ 452.038299][T17094] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 452.045593][T17094] CPU: 1 UID: 0 PID: 17094 Comm: kworker/1:23 Not tainted syzkaller #0 PREEMPT(full) [ 452.055174][T17094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.065272][T17094] Workqueue: events smc_ib_port_event_work [ 452.071144][T17094] Call Trace: [ 452.074470][T17094] [ 452.077444][T17094] dump_stack_lvl+0x99/0x250 [ 452.082082][T17094] ? __asan_memcpy+0x40/0x70 [ 452.086718][T17094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.092041][T17094] ? __pfx__printk+0x10/0x10 [ 452.096689][T17094] vpanic+0x281/0x750 [ 452.100728][T17094] ? preempt_schedule+0xae/0xc0 [ 452.105621][T17094] ? __pfx_vpanic+0x10/0x10 [ 452.110166][T17094] ? preempt_schedule_common+0x83/0xd0 [ 452.115668][T17094] ? preempt_schedule+0xae/0xc0 [ 452.120607][T17094] ? __pfx_preempt_schedule+0x10/0x10 [ 452.126012][T17094] panic+0xb9/0xc0 [ 452.129760][T17094] ? __pfx_panic+0x10/0x10 [ 452.134199][T17094] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 452.140198][T17094] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 452.146291][T17094] check_panic_on_warn+0x89/0xb0 [ 452.151259][T17094] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 452.157257][T17094] end_report+0x78/0x160 [ 452.161547][T17094] kasan_report+0x129/0x150 [ 452.166078][T17094] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 452.172080][T17094] __ethtool_get_link_ksettings+0x6e/0x190 [ 452.177911][T17094] ib_get_eth_speed+0x15e/0x7b0 [ 452.182903][T17094] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 452.188341][T17094] ? do_raw_spin_unlock+0x122/0x240 [ 452.193676][T17094] rxe_query_port+0x93/0x3b0 [ 452.198299][T17094] ib_query_port+0x170/0x830 [ 452.202911][T17094] smc_ib_port_event_work+0x15a/0x940 [ 452.208347][T17094] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.213602][T17094] ? process_scheduled_works+0x9ef/0x17b0 [ 452.219373][T17094] ? process_scheduled_works+0x9ef/0x17b0 [ 452.225118][T17094] process_scheduled_works+0xae1/0x17b0 [ 452.230725][T17094] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.236780][T17094] worker_thread+0x8a0/0xda0 [ 452.241421][T17094] kthread+0x70e/0x8a0 [ 452.245522][T17094] ? __pfx_worker_thread+0x10/0x10 [ 452.250647][T17094] ? __pfx_kthread+0x10/0x10 [ 452.255264][T17094] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.260484][T17094] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.265690][T17094] ? __pfx_kthread+0x10/0x10 [ 452.270388][T17094] ret_from_fork+0x439/0x7d0 [ 452.275083][T17094] ? __pfx_ret_from_fork+0x10/0x10 [ 452.280212][T17094] ? __switch_to_asm+0x39/0x70 [ 452.285117][T17094] ? __switch_to_asm+0x33/0x70 [ 452.290129][T17094] ? __pfx_kthread+0x10/0x10 [ 452.294945][T17094] ret_from_fork_asm+0x1a/0x30 [ 452.299866][T17094] [ 452.303240][T17094] Kernel Offset: disabled [ 452.307781][T17094] Rebooting in 86400 seconds..