last executing test programs: 6.471347414s ago: executing program 0 (id=3168): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.290642022s ago: executing program 0 (id=3170): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x5}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03c835821dc23e7a14b84388f480e95e", 0x10}], 0x1}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 5.854575281s ago: executing program 0 (id=3173): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0700000000000000000000002a9feb276e2156e531416905423f4c0bec199ac93b2c5097b07ac76ffa22158c0402c6274aae5f509515bf8d61b8b25d733c502beb53b5fc9e829bd635ce0ab753f065cd1984901606d623", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4004054) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) bind$bt_hci(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) 5.456666861s ago: executing program 4 (id=3175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x5, 0x200, 0x2, @private1, @rand_addr=' \x01\x00', 0x7, 0x1, 0x1, 0x80}}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x4) r13 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r13, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r13, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r14, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000640)={0x28, r15, 0x109, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r15, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x34a53e0b}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4080) listen(r13, 0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r16, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r13, 0x0, 0x0) 5.025096638s ago: executing program 4 (id=3179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x40000, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="cdf17fa21b117b8df9a8ea5b87fc3a6e405fca71558e536f75eb", @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb26fe97}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x124}}, 0x0) 4.861381842s ago: executing program 1 (id=3180): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) (async) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x5d) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f00000006c0)="0ce058df79f5e4d4cc9b9655d8ad2fa9a50cf124d1c639f495328147908c7ca83c4db50e8c0ca3f8a1c1a681dee1a392d68165c3d34da07155ce3258312bcb7a07cc6a467fbd80ee023d01ce5dd581beff5a97b219410757763a8e4b1a10059cfafa3bc9ba45221b41eb522322ded70dacb6aa0cb4a88ca64db1697e81a17e8c58b273c22487250874eb350bb98b2b1362b6c33c807677cf51bde28bf4aa28818b6919d278e587cb753ff3ba332c722eaaf737d005b8c33a439d918fb1bd65abd3ec01491a9e0384cc3ffaa953b395c48fdb5860b758f8bbfdc0d3b01c599f8d3f9ab9909c3a26cf3fa4ee168bfa9c7f2cb9a8b587018eb13dfdf517e4864f89f65b1266ecbc150e2ec5affdb637f9d2961319f661efd93f55211c83dce50f9b74e07365cdfc2d09166b7707dfc480f2d201d5cb33392e584623beb17c52d37dccef5df756efc706cedcba75ee26de576e5465a10012ca0738a2153b78a5b4f0fd191ab3a75342ddd34cade8eb2c180fb3a4cb97fb6b9fc04b764e80a51ade8e3809a432150cdf1d6a637e3ee16c0badfd1ef193aa24202ac6e3f4288b67a3b2f4ed3ddd6021a957afa4594fe9e9193df30dadc8ded70592e55791a58d545f833567b348167a634dd2022dd284afa258083dfc7f5e0e8b1727a05578db83292283159282d97b320388c610ff6826a29051d24d080c2d1fc12ebf0c9e9175ad117406d16601f6ce5acc7105334cc9e96f4bc8a093e799007ab7179713ad01c146434e8b3b019ee99412b991d0b622e938f6ec475963e681517b7d7d18ab50a752c57d4ca14224433350d221e52542c7fea9363536e1e3118d1dff7df5e70d0beb38c734de97e4e796a3cff7eee8a84f59fdee3eec7ae147d70f54933e7467d4545c68b258a49e644181f1f82d6149adb40f9ecd7880b67d34eb9dbcb06aace61279686471512b122367c8b152fd0d25a20c8b9f561e67791f913df0735fee8514382ed7670d00f2477d377bb38365620b3adf7368f0a321b0fe3c81af73033bfa0a7b002107831600025cac0e0407968cd8475213f8504a84c06a5204a991a82df96aa5c6ee94f8940122793fcb04a45808abd7d61ec43111f85d01b7f0b175bc5c4d12bb32ea1dccb9b2c1ebc642c550219caf4394f959e755e669ad2955af29d2b07de4948ab6c1f56a94081247cfd30c6e33d4a3d0d6803145e9066c75cbbe5abb9d22f3f6f24053cdfd332de1dfa2ff51bd95ce70243cb7bf52d4d3f843c33a70540ce9a7eb5e43875c7202f55aa7563234e691d3f7aa6440a3747f34c779a46d95236748bc4c11a612aad748045567df0965831b324bc67d032af7b2fd23bc273f47aa61444c6c3f26dba077fe38b903c6d2d3adc13ebdccb721cd62f39b14de128874d0c08c147c7a621b7eb13919fc0faa4627aedde3f7853776a7b98a791524b334a2a7fa291ab93beec3cf9b3ba732849df327ddec92c707942a88d9bfbcf3ee518211031426308666920a7dfa59cd70c9be02456d0e2b9d6eef644966b31e88bec6fce1ae65e5d2d4cbe601fc20b98911b34be4800108257ec05943daddd434ca712ba2f2377936cf55e41786fa4f84bbf470aa58ebe0aa35ee2723f08b8dbe33b70437f5499008f7bd303aaf82cab8f26af866dcc1a007c3aa472024a2d4770ad407477d8626c8b6473370b0daa4770779d5da4b8e9bfab7e2343c1c9bbea14a6ab2d61abd6becd2460cfb12fb13b929f23854a0ff7e9a4375cc5aa16b5b6b7037ef4330b5f9196a7b170339e156933ff105ab29d02ce40f01912ba17e6d60d6584b15a5944983449c4ac616196c431badc23937198d192a73d807ca120f4085903aa51467454b6df735c2b93224e4917332104095d5a38aa28d15f8fa7ad4f4e0be04a2191d2fa4047c3d90b9c617d8094bbd4c00698f647df8e06ca2e6a71e0a484d07fa41d42a221962eeb1b4f3f9fc832300f4ee69e74512416499b6816ed9c12a5d19d7a6edfa3f48c09fce22b88d9e5a1d5ff6b95ea7e703eb2c665e42a82beed170cab24f937e548e58767747e155388d678c923d81058d2b4dfc976df9b929a749c2c8db9785338eda308c116ea769966d923fe51609476b6607fc6014517cdcfc7280909d1c238dd651ed3e68e25384d32a794e31f5bb71cf05bddbfb3d16513b7a032d1356f80aaae3f07c09a41192a9be413642bf06ed556017a460f92e785df42e9128ac910b91e4e2ee47cef872cc8913ad61924aa1ccbb99b452ff468cbaf8f0223bdba71107a5c0fca2bda2fc285194d75d8ff553b56dfbb9800374d7063c5852331833879f26849b46e734dfcf02d6feb2fbd81ee29f06750b00974a307a55fcf2c20d9a310a7f3f701f2e3988b645965244a6fcdf288ce8b46e4dbf0332cb8544a8e324a4b678128e8dacefda964873a9d65832628d41e97384476f079d5ce822998c887bd1b78bdda4111587f3f8b702bb75bf1c99644416a59cb2267689fc1650b9c9351ef967597b2e3d7c04362bd8be41c6614d5cc145b05fdaaa9ce0c181a1a59515460c37b1d689a5ed3532e6614f7293c94b2d5b2edfbfcffe969187423dd101010f8a0addb59a2df6f837a35e834efc66fc551add8afeae6ce5f38ec465cc2bf85ffb8ab9fd2816b99f08f2b3667d257e687b1947b8633645ac95302123a50ec0f988a87bb93a8d651f67cc2b3be34597e0ab14d6ebfc9c251a6fcd3475b40b43c63079a81b402d1fd404f88a08bb081406fe60fe75c24856b85a4a128fd55fc3f600963371bb4d299296487e2515850b4cd5825adb94a631aec16a8d0bc509e756863e6c97853c5d7085a1fb63fd253efc40914d07012bec2ee1f2f74b7c158d3e51f1e371c3fca9e0d430e31a3be6309460a293474c9f072f54c9a92c4c993cd9953d167d3dc6663dda62c60fcdf292adb306f0db7dd268b611c96b95de4dc4555d9c0298752c613d7ba79189a93809fe6f9f5c599197a07788d5bf8110244e533bbdfc310ed2d8e533258380d69b31b63bf6c8d04f6491bdcc1b48ac7127096fe484bd594b0cf586e2d8f02811fb6fd79ee9a2a932988193b08f78bc46742a79cef3e2cf5dc92539c8d1607e1780c7dc7a8379efa8fa2610f740d43119c3add502a11da071ea99eb8fb8d908e38bccbeb08199a749c18a81e5ca61b2acb5ac8fe71b6a8ebb64a907ac7465662aa8a8edcb923e04e1b6b6b36d776408fd2f2fbe3cb1b07b408ae232c433379d475b3d1a2705603030c72e756519d9c73edf9ca9a6ee2f3f3726354fa3fda0015eaf267ec208c25eed4463c226fcfb529848c4493991aa02f104c6606d1385e155fae6299974429f4a9ca2eb3991f74b53df560266c91a8a960e9cd6a26093004772", 0x961, 0x20000001, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, 0x0, 0x0) (async) unshare(0x6a040000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x8040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x440088c4) 4.693248894s ago: executing program 1 (id=3182): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xd}, 0x94) 4.661686006s ago: executing program 4 (id=3183): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000440)=0x1e) (async) unshare(0x6a040000) (async) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x57a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x42}}, 0x6008814) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000c96fd35d000000008100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff6d0fb702000008000000b70300000800000085000000060000003500f4ff00000000180100002020702500000000002020207b1af8ff00000000bfa100000000100007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.625821706s ago: executing program 0 (id=3184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="500200001600010025bd7000ffdbdf2500000000000000000000000000000000fe8800010000000000000000000001014e2100004e240007020020a001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x250}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="500200001600010025bd7000ffdbdf2500000000000000000000000000000000fe8800010000000000000000000001014e2100004e240007020020a001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x250}}, 0x0) (async) 1.608746146s ago: executing program 1 (id=3185): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r1, 0x0, 0x6, 0x0, &(0x7f0000000400)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d2802aa59a68cd17c0e7f23d6d000000", 0x20}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0xc880) recvmmsg(r3, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180080000000800450000b0000000000011907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f195c54011060bcf1f54f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b40000000000000069107700000000000400000000000100950000000000000088a94fcb2dbc3e75c158affa3ed4", @ANYRES16=0x0, @ANYRES8=r6, @ANYRESHEX=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f0000000840)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0xb5f}]}, 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x0, 0x0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x9, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x6, 0x0, 0x0, @loopback, @mcast1, 0x20, 0x0, 0x1, 0xda02}}) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r11, @ANYRES32=r8, @ANYBLOB='*\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="3a949112e692823be823fe3eb9e2b2a4083ca9514ef325fa757241c467d8c2684e887442d4706386c0955769395a39ed0eae2fde0a14db45ccb11e1430efc464fb158730cf5acfe5729862b16af1a3d263f5c574bd6b904ee24d4166f3b086fc5483e975b961", @ANYRES64=r10], 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000200)={r6, 0xffffffff80000000, 0x1, 0x5}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB, @ANYRES32=r13, @ANYBLOB, @ANYRES64=r10], 0x20) 1.608209087s ago: executing program 3 (id=3186): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x28, 0x43, 0x2, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xa, 0x5a, 0x0, 0x0, @str='%+\'\')\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) 1.506715068s ago: executing program 0 (id=3188): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x980}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x4, 0x0, 0x1, 0x7, r2}, &(0x7f0000000300)=0x10) 1.055826657s ago: executing program 3 (id=3189): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@local}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="be8f582d6dfba3bde912d61139d2ed941d4d56dbbb004756313f0ecba1b6a831710d38c43880cfe1eeaab5815042974956e73d5702c3d8f4412e20ddcdafedd13ee531a3f813371a0224358f8b382808a4c81d675cf7fe540496df792145a2ade033b730b4fa01e7ea0f1eb42a4bc0202d5895eb105d5794462d5909708c92f1b8d4ae58ee445bce7add29f184bb6a51e11aace7536d", 0x96) 1.054619861s ago: executing program 4 (id=3190): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x0, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000b}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 1.053943748s ago: executing program 3 (id=3191): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r1 = socket(0x2b, 0x80801, 0x1) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000500)={0x0, 0xb1c9, 0x4, "d945c52c"}, 0xc) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x400, 0xfffc, @empty}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x4000) (async) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x2c, @multicast2, 0x4e22, 0x1, 'fo\x00', 0x22, 0xf, 0x53}, 0x2c) 1.052994794s ago: executing program 0 (id=3192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a31000000000800410073690076657468305f746f5f62726964676500ebed761f676b657c00d3510aadc1dd7efebb75ef8e3f22b28523e6acc459705463d99f605ac60fbab83ef06c3f0607e4b77a55e268e07f1c6d8a3834ae36d1996bc17b3fcd8ff69f676f0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_delroute={0x44, 0x19, 0x503, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x10, 0x81, 0xfc, 0x2, 0xfd, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_IIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40841}, 0x4008802) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) ioctl$sock_netdev_private(r4, 0x8943, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xa4, '\x00', 0x567c4e8f, 0x1ff, 0x7, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) 1.047435676s ago: executing program 3 (id=3194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000c00)="0589c14a7ecadc087b27fd10dae3f2080000000000b5fae6ee4ad7a51dddfdb4d9ed51976706000000000000006c8d182bedfd7d48bd8f95a6f566eef25d320c6f9bd076173c6dda1cae777cd48dda733909f341ddf98d4263f76340f21e4eb34f613c65d82c1aaa5e6168aaa3d143ed91d60abdff97cc13423f0ab7084e136b574673fe45406b89dd4449bd2874d9d05272e55f1b32b13d421bd22c71ad932b62351701e24cb2d593b9cdabd14970c599b014801d682905caa1873377a552c06ea6ad473cc7619b9ef4bb03a299d7e408575285b2c18958b3629195b6358989d3804e4e74b18cd04cb16354ab7c37fb0e53204fe9b8b2c9bf6406c0e014564e1472bfdd8005adf60f1467f17008609b06bd0a002e87e39965b7a59e12d28af86a22066dbdcc53321335845c70084eb66c092747aaaf3d1c1a508cd860650a6e9db059bf4cb6c89f7d2894b944d3cd5208b09a8da4cc1f0465933303007cf10b2a10a855359661bb36643500e8540a1f8993520ed129b293b14c686965aa315281dfcbde2c556ed715799568d030d2b67829bcc69532db775e24e96e4a0bbd13e4624f49225dd0fa7da25f3ba865d12d7ef85a69a86ff4bc29602738ec9b25effad883", 0x1c3) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010000002100000000000000000000008580000075220000a500000023000000a9"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='afs_call_state\x00', r3, 0x0, 0x1}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x2010, r1, 0x721ef000) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xf, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x85}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r11, &(0x7f0000007a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x338}}], 0x1, 0x20000000) splice(r8, 0x0, r10, 0x0, 0xf3a, 0x9) epoll_pwait(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x101, &(0x7f0000000340)={[0xe]}, 0x8) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000240)={0x1, 0x10, 0x5}) write(r7, 0x0, 0x0) close(r9) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="43001000", @ANYRES16=r2, @ANYBLOB="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"/294], 0x12c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) 1.04520662s ago: executing program 2 (id=3195): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) recvmsg(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/161, 0xa1}], 0x7, &(0x7f0000000500)=""/78, 0x4e}, 0x123) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xb2ad9fb1bfbfce0b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) recvmsg(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/161, 0xa1}], 0x7, &(0x7f0000000500)=""/78, 0x4e}, 0x123) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x9) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r3) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xb2ad9fb1bfbfce0b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) (async) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) (async) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) 889.886004ms ago: executing program 2 (id=3197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008001) 685.571274ms ago: executing program 1 (id=3198): unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r1, 0x0, 0x0, 0x1b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="0109000000000000001301240b49acdbfee1c03eba05e2120069646765698ab22ba9af6b5d27ee0b7d092a923f2085c5c2d68090f254587252a86c5525"], 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x705f40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x2c, 0x4, 0x1) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x8, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000240)=r2, 0x4) 653.718552ms ago: executing program 3 (id=3199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240004000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="020c77060a25a4bfe0858d21a89fd30877eefacd0e04626ca1d22a0148e38d8960b13c73875df20761ef7f7e0837b050cdbca775bce3d90d8f8fd3ff2bcaf572e12598557a72cddeaebd14da3abfa6e6ef41ca9d7e9400c877a773886d29f8aa0394e6952f035b3ad6014af5764661541f782e265b98514686bc684b0d42064611f288ad265024ef009f55ee6d3cfcfbb3e9cfdf1ada302077638431da8e08ad8a77d6208b6899143e84de6ee50e2f2938df1dcd30ea20d2f3e3b9bd887974311bb0fa4f0a7c1f", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4048050) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x28, 0x140b, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x408c4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r10, &(0x7f0000003c40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x30000, @empty, 0x8}, 0x1c, 0x0}}, {{&(0x7f00000020c0)={0xa, 0x4e20, 0xd031, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, 0x1c, 0x0}}], 0x2, 0x20000048) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000002fc0)=[{{&(0x7f0000000540)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x24000045) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e714000085000000060000009500000000000000643f49290d5a5097001164b385b3f9ab1d2ac84a85a42e5aec7a66af34248818742945917d6f9fdf3dfa6a442899575d9f25727c0b1b19c8db6865892a8353379d267c559aa59dace5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendto$inet6(r11, &(0x7f0000000040)="3b96", 0x2, 0x4000844, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @remote, 0x1}, 0x1c) shutdown(r11, 0x1) 535.158072ms ago: executing program 2 (id=3200): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1c, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x150}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7ff}}]}, {0x0, [0x4f, 0x2e, 0x61, 0x71, 0x61]}}, &(0x7f0000000300)=""/92, 0x37, 0x5c, 0x0, 0x7, 0x10000}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r9, 0x0, 0x0, 0x1) sendto$inet6(r0, &(0x7f0000000400)='X', 0x1, 0xf2b7f380259bfe62, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 475.68526ms ago: executing program 4 (id=3201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100000ebfa30000000000000703000004feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200030000001d440000000000006b0a00fe000000007303feff00000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0300000000000000200012800b00010065727370616e00001000028004001200080014003f000000"], 0x40}}, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fc5dc28"], 0xdd12}], 0x1}, 0x20048821) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000130a010100000000921a00000b9d0079460c0006400000000000000001000000000000000000000020d03be6e68bb4838bec5b527adc5062e75e23e57e8be81aaa35a402d0dc6ab84461ca"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x40040b5) 433.852877ms ago: executing program 2 (id=3202): socket$rds(0x15, 0x5, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @private1, 0x61f}}, 0x24) sendto$rxrpc(r0, &(0x7f0000000040)="5839539dfce314e2b0d40d1e089893374654100ae0fa8b92a932e2871e7c260d1b485674f11af8fefffd56619982e3666b6a2c0c065c49809b5ed760c4199fe898b94e646ef691f34077b61a1f4224793e93831483e1c1004ec59f9dcb9b3775be4078886c567238e3473210804d927c0933441aeacf89d6cc93055115a17540f8d084c8ffb362e24081", 0x8a, 0x8800, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x1, 0x10, @loopback, 0xfffff714}}, 0x24) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xcb, "e46bd68410d46a28a11343686b02683f9a43fd71749cdc92d0a67310fe554fe476f51ab647a1a6c5d4225ff08ed5309500ee4833b597b52a3ba2a6c1247725f101c77b36ac543c9198ea7ac725df8127501399a9633d45324dab49da3a5bbffdcedc946aa54a3ec7d6a3adf4ccefa72926892432a46cb4d115f4d56f6e0f5311e694a09721d13efd1364ac2f9560a45afb09dce8a09e2cfc60f0b9f3a486e3fd2185c267983a8821186426eec9eb085f8cdeeeeec4cfe5902857732c21e8d7bc366a13e07590e98a564349"}, &(0x7f0000000240)=0xd3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x7fff, 0x0, 0x9, 0x0, r1}, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}, @in6={0xa, 0x4e22, 0x2, @empty, 0x8}], 0x38) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}]}}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x8}, 0x20004014) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x6, 0xe, 0x0, 0x9, 0xffffffffffffffff, 0x5b37, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xb}, 0x50) (async) r7 = openat$cgroup_ro(r4, &(0x7f0000000880)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8, r0}, 0x18) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x3b7c, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x1d, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x0, 0xa, 0x9, 0x6, 0xc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x7ff, 0xe3, &(0x7f0000000680)=""/227, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x6, 0x11, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000ac0)=[r6, r7, r8, r9, r10, r12, r13], &(0x7f0000000b00)=[{0x3, 0x4, 0x2, 0xb}, {0x5, 0x3, 0xc, 0x2}, {0x0, 0x4, 0x7, 0xf}, {0x2, 0x2, 0x10, 0x1}, {0x0, 0x4, 0x5}, {0x0, 0x3, 0x5, 0x3}, {0x3, 0x1, 0xe, 0x6}, {0x4, 0x2, 0x8, 0x7}], 0x10, 0xfffffffe}, 0x94) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r14, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000cc0)="2fb3f3fcef4d3292cce2a4bdf88035c30da4392e6695aa2004e82cc227b47e7175f251cadb9f1b11311f528e0d304b25b1fe5d4f115f3f", 0x37}, {&(0x7f0000000d00)="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", 0x1000}], 0x2, &(0x7f0000001d40)=[{0xc0, 0xff, 0x4, "ad1084f2c7cd1f93b0099b78c6aa25621f3231d57a1d90ac12e783b80d65f7cb6ed09c24f8530df9c19f60d0f4f922ab0377c2021d5f038625cfb303ac8226bbd8a088bb076f01a1141d4fe5dd5eabb0a9e0d5f28e7f1cfe6033047dd203b74d61b6d2c546771feb37abb2099f1959df262c18e1c7826c40b667ecbb9be7ec4a6e81d5a35304a72de919d651964873e78f2336e7e5669016c33aff391c14afe4d1883d2c5ac2cc61181cdda40f5a"}, {0x108, 0x29, 0x4a30, "c23f27cbc79a674e9067f663447a25d2e763024a8f83ec68c29aa046e4f1284ac4ab27d229841e2660526f133e7163ab0a7b7fd9a0629463ffe3fcdc5f4158c87f5f5369fd0673f070c8d1660bc6455f9fc28311a7fd3c905c0b76bb2469a4d9e9f6597e24c2e3f0c1e4392d77e8cd4a3aab9063c4c39849523ded4ad2220ded93ace3cb3408efa51f7a4fce4c39dafeaf9f6cb04f5d0889ba63bceb7452e71e7fb2fc77a41220fe583ed16b73dbef89a318a848b2dd44a76da364b5515337ccf07aff5a57b50d60c6e56ae3266ff2257f6f6e5b26bb2c075bb830e482da4bd094250da2181b45fa86bd3c96f5cd47f4a87671"}, {0xe0, 0x0, 0xa, "301053c6e801dafcd1f9dc1fb8c0b663f4b890d3c2af6ec7e366b1ad401eb0d93a0b93f91c409b6d7c4f3586cd33ed3d93f5dcbd2a50dd7a38f596db19be288c0990ecbef8f3cbf89620182445443edeada00e4c5fd30031d1dba032f7934eba21ee4f71594ab3163154363b4b5275b3f5fc99989ce3aa65515eb7e0e956db3b6bd7225768853e605b62d6f7ca246dcc5d813f790752b2e20e5116beb8ad17ab84f5124d19c0d34fd056daf76df50fcaadc9a4141caad6e89b1be9eae452f693fcef9be316184e023dfb7b9d2555b1"}, {0xd0, 0x0, 0xffffff00, "c96b90b2d9739ea7a52a46fcaf7733765d5a4402d2c0282e40d6b683ee0ed479a3bb9dc9fa4b19f760c4d25071dc0ab25fa69675ea686f4a6a33ec141abcc354651dd620ad72fedca5db414484111ae80dde965af4026f837e7b893f768253e3e04c4a0732275aa8a4c08eb38d0ad5fac2f7f4359ccd9c64e74eedbe93c499fc59f45c5c5031a0edc7d913fa3b4fc238d2047771b920a285f09a01dd371bd9ccf57c1f3c7bbf77a1236bc22102d0c6a4cdca1e5bba8646e656fcf7cb19a15f"}, {0xe8, 0x111, 0x9, "a8770ec6a353d7227dca7ff3764a467823f517fd63acdbcd951bd799e9b4a3222239de8dc6a97f551661cd2041cda77ffea8d9b198547ae8c56f48639fb7d9a9df5a0bc1bfd7a50e98b8c98cd7223e14557aa4053832973348ce96e9f13fda2bb87ac9a3ec66124b0e2e78b883ee319fa876b0951949ad1615f7eaadb659e949c48aa1217a82a8bf49434612d2f16d4b0101fd718c6dd318f26171a5c59795902093a4857009101f7641184e27cfd0193f60a576c94990598c2f5204cdddef2bcf4fc8ba64be761c12b513bf45ea31c08a8882c1"}, {0x90, 0x11, 0x40, "0dda9c4ab36b0e52c3af0c7a0eb4535e4ebca09b3ac65c7fe68947e7c41732a54fefc3c4b0c27863a4f695ea2ad65a09347b783f977ff40a1911183914659ab7d26ea82d2fb8e21618e8908b8ee64d3cbf06e344df24605f3f6d3d098b18f0ffe883e6390cfb2b72b3eadd14c020f653b0320deed010ee64c746cf7510cd"}], 0x4f0}}, {{&(0x7f0000002240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000002340)=[{&(0x7f00000022c0)="8915b6c1c5b2d214c44b3c6aa90eda7c6c0f4c97a4594d3a4c1350fb1db9b17a979891feb074a502ca2d5df43431cef4d86b47a481b25aeaacccbd3f3c63671f2f94ec90d281817ba936f00219ba7317472217e369847db92393f2326285be21900d01ce0d94db07c4527c6d162aba77a9b1", 0x72}], 0x1}}, {{&(0x7f0000002380)=@x25, 0x80, &(0x7f0000003540)=[{&(0x7f0000002400)="33d5b75914ec014aaa70358953731c25148428fe80920e83885dad1c6cbf0147c78b179e331c2eb6c801d051f8818acb39dc995534b9b0a5c306fbad5e36556350022f0ab9fee008b40a83f22b7e9b27c34f726fedf6b39d88994b5adec9bf6814607df49fcabef9b141a7336b2f473946c0574659814514b0a0b05ca2a978d7c8153bdd072726f0165bbd5d655ffd8267d95df188bd90725e074dfd8aba84cd48c6b4254c6a57586430f349e4cc1a87f4dcef8eed123603e9a63c3513fbf3de2571a81f90e610476e196d35bbfb36f8bf5299bed70b9d25ebcb2e92be2edbb0d013", 0xe2}, {&(0x7f0000002500)="adb905e40626796dd7384534", 0xc}, {&(0x7f0000002540)="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", 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003580)="e426c6cb9adbbd4c8fe99e7f6928026619c083c28fccc41c0496dc74163ae76c6152c370fec43bad24ef6398e295caa2e15afe42197d77a237e983c8ee56fb0cd624b3d3551baab9f4b00edc45f657b4aba8565ed0fe39a9094f5528c6c1462a9a24a0b9b5e6677fcf3ed02885d389d4cc2ee87a2417c52cead74258fd77af144ee6550ef550a2d86688d3cbf94330", 0x8f}], 0x1, &(0x7f0000003680)=[{0x68, 0x117, 0x80000000, "1517fcc0c49b9c01b2ff1e181bae5aea7540095f331c069fb78964c19de0ba1f77ff95ca88872fb145bc280594b035910c38d1332ff76d9ca636011665c34140bbba58ff70605a226db3477f2b83ebf144"}], 0x68}}, {{&(0x7f0000003700)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'nr0\x00'}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003780)="21dd1fdfd869fc624eb56a352dcd737b537d349b3378003ae2b0da8c68ac94927ce516fa190e8819e4872b9ee99a66115079738de2c616d7285b4ef48b42727327a6ce64ca77b3add0d5964c005e79194c3f6ef8e6fef10b6aad51c9551878de3d5405ff659f59c65408e2336c5f7564c85e72f8b3558ec3ff49b36d9ddf5b4c189a0d5b5e315443722cacec20dc3d5294ee39bd", 0x94}, {&(0x7f0000003840)="29b9a12b5c28902d99a723bf53dcfcfdb377677ed86b03b6812c08bd08c84de824a2daabd4990250ab86eed18e37f226ff88dc049d4374f413ab4ad5f8ebe54c587bb6ab2515a77dcd3dc6cc34c7d9153e2dea0f56585c39ef7826f9f521bd6ae6dc5fddc29a005da789ab1975312d486624907b60a04f31a61a749827f7fbe3a44d768e28d27697ce397d8d9215fe504136f22c2358e3cd3f22bf6045e3240b63855e2230e5e44b2a060c39ab8a5580b91cc4059e2107fad052475e", 0xbc}], 0x2}}, {{&(0x7f0000003940)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004c80)=[{&(0x7f00000039c0)="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", 0x1000}, {&(0x7f00000049c0)="9337a152eb7ed5bd9213993375122c716313fbbfb564288a0e48d6fc11492d3e34deb7229658165737026060e54d2147758c07970d562967da03e09affba3e048327cb0bad404fd2f515d15480b4844b8a86b288d5bc39f7f263d64b5c3147c5598c7f49f0a66c2f747fe1ad717abe0df6d4148611efab70aa57829bb2978bac976f843a9fa3e60b7992ddb08a4ed0e76fa023fb5cb7fb4139b6e93e", 0x9c}, {&(0x7f0000004a80)="6bf47564721e9c5763f0825123219f3b8108c2ae06faa01cb567d7f11f8a9f2d0104bf90b369be66cb0f356f6117bc16f0db123a8bf994e2146fc7dfe263a08d573fd6c90aa94a26b43d", 0x4a}, {&(0x7f0000004b00)="52df0c40ee5a770a0c8309f3d7731a07bf9f8b52cc660d03dc054e4ce34c809a1631bb3d8231675c58f5652d137c78261d6d9d7162c4d10a53aa4036d4c44c0626f72ef68521d87dc9c3bc3b4cffbe7f735772839295b97e58be539d97b5db49bb93dbb0d1af54407b8d92c7ba4e0eaf76f17cb78a3d2964ac73f7bfc4cc7a6e423ac426a9233286a16bb1fb6a970d868b9e21c86872ee6f2f401abe30acf4f5201b47ce8f33acffbbc985c5fb64f7b029", 0xb1}, {&(0x7f0000004bc0)="db6befc293d601ad8aaa6b1a100d9235f0993ac125282a39c4af14a4b8c7cc55", 0x20}, {&(0x7f0000004c00)="378f4239cb804d915e80daff5465bb43dc8ec4d2dd2bdf7dbb25141bd49e5048260880b3a057a47fdd1407788aad5f0f5ae788502939f08edeae3ed68f74bd3afdd72c39e32044459e72", 0x4a}], 0x6}}], 0x6, 0x4) (async) accept4$unix(r12, &(0x7f0000004e80), &(0x7f0000004f00)=0x6e, 0x80000) (async) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000004f40), 0x10) r16 = accept4(r4, &(0x7f0000004f80)=@nl=@unspec, &(0x7f0000005000)=0x80, 0x800) sendmsg$NL80211_CMD_GET_KEY(r16, &(0x7f0000005180)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005140)={&(0x7f00000050c0)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8233a78df3c57fcdcef31060f6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e32202e944f50c8797c4eaf5e3"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x5) 380.531371ms ago: executing program 3 (id=3203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f65c476467d3c73007411314cf75e5bb0000000000f9008909e433b6b84d02a5ea00aab267820b0bb777982fddd07d2e355b56b99f00c7a84f", 0x39) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000200)="676330fbc9b55400040000ea075641d6fb9816bd14a0714856baad842a5c248c033c7f15ca2e6a0293662197d4a6b59f12909953c7f5b9e384c9b2d4b1a2fc4a560afaaae66366ee7c7a0f829873ded252172e908400132740dfc585860bc7081a73a5002d2624ee517ba62b929f688e55e1eeb8f31ca1387ad0a2a36dd62665", 0x80, 0x40, &(0x7f00000001c0)={0x11, 0x8848, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r6 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000040020860ef70000000000080018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES64=r2], 0xac}}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r12, 0x7) 298.158402ms ago: executing program 1 (id=3204): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0xa9, 0x5, 0xd, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x20, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7, 0x8, 0x6, 0xb, {{0xa, 0x4, 0x0, 0x5, 0x28, 0x65, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x83, 0x12, "bfbbe5c88a80d28827761b50ded5a13f"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000000), 0xc, &(0x7f0000001800)={&(0x7f0000000380)={0x1448, r0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x11b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "0a2c5fcdc0281fb218428accbc8918cb5d6c1dcbe29e0fde74249371dee710867b72a0b4bd10b51c752e52d731aa9059d3d5d77d269b5b4e0525623c0af92d19557b6dae754a869a65de8f10885a2c5c6b3d099f603669974e467ea3ca1758a5c73a20c6761a747dd1b40d755a082800f45ec32df07756d0125ad75615bd7af34e579f81caeaf458e31cba3f9723346acd000464d87f39bd8204dec3d34ae7cf2b64c23946095f2b0cedaec7df0989caea43890437d9d51536e6edf23487dc6a3af281c2566ddd428899fb62cc0a61a04e89060ce6e0882d83ea72430d1e1e7d93b07bcfd75d1d06b471041a7fbea1ea1e61d8a4c83ffee388554229e5641a80327aa5772c06ded8cc38d42442ff27eb573d988edec35a068bc12a3d552d400c9565b53a86c29628b208eda7ea6ec2c4c8d8b137571cdbceb2ab7f728360d0ec4928f195b58fba47f7d625a16f08527cdb1bb0b635e21f0285debc4e8d09838e6e0fa4ddb70a2676a3e8d50c57edb859f16236b7d477b3b868dccb66784895d48a3092c38a1b4bffc4b21907040b3f4a4e31d6b48dd235a6255dcfc0dd9f32a625bddbaf0a6d6cec1fbdb5ee7e0cb23084fab157fcd1c5d0325a4964e97b8c23dd59d17ea50b2cf41f562032af6e165180128f787a713549fefeb6b3c7f70f50ea49553e24f9e61bcf70b6db5e9af723124d4ca137c0a8f0271e8a292b5d9a3b8031e9f8b2c902827efb154cec81972e0453156bf0c716cf876635172dd758f60100af3e720ce49ca7eea1c1de28b3df6faf9d1227b10c95c54eff7756d3b1865b2b89d1aa2a50db5356651b30768c99f41e1e9b063a75891b7642cc2f44645ca83ae970df5495374410aa78d8a6d5e0fa8cda867cc7e99a9a3759b3f4677434cc9116f4c7899329e7bab3fd1009a168a961aeb95fe56a502427ef2300322594c6bbdf4cff146c9b85b46e581b09fb9ee32e5c3be67305ba329d617f06d7b17a6ba4c12871714f968540cfa46d127b8181a087c1f5fcdb3f4ef7ac35f0296164a920935a636eca1865b93e4ed7fb62dc51efad2ebe5eb6681fae34892646692287d48693ab96ebb4ded6e66932b428847e093520d188de39686cee49d4c9ecd22085166cd9cd099e6982c801228f78a77f070d961ffa3a67861a31afe0fca64790eb7f756f45b7c007ca687e36f8bdd0e734cf5211a90dd83095804b804af6bf1499964aa2e51342c1ef9b84cc5630bb9a40c9c7343a5b20f96f4d00a618b36a46b0c6614912f09ca388de4321b62c3c0c7dc96e10a35846d5672d375ee1f5ea909bf66448192d61274ac85e2c52ae01b07671152f1e17f2794203fc619e9869ad880c14460deaa8a208aab86dbf31a2dda25c959f252ab77250a748ec02e605b2146312dd40fb9ff168feb1412f74b0957fd4212c9815ef76347a1bed09a287992c9fb89c2a4ad526d49cb296d976ee1d392c836570661d0f283bd0e5bfd805de5087db2cfe7cfe8f889f9db8ea1a6ce4b0fe90dd0f16089d203590f932df62f0d546328f051509d73df59049d81fb894dd8db6351736dedf91f394dcd1343e01d12c821c142b8cd446e16dcd1779fb1329058712b9b49aa8f607c85c244d31bc497f3bd418d6020e9b302b295af8221ae4c2ee1255a7b6eaa2003517d33c8767964f7398617fab9c3a825eadeb7bea09af37fd9fbea249d86917f8a290af563b99e7516ac4555b0224bbdba2377f92f6870f88db30a785e0fcbc9e1fe1f3fe34f396231e334e1172254db7528d6b906761cdc2f8479120c7e08cfee367c43a6c75cbd33599339ba4e48c9524e8a786b5f668852ca2e57d738754a28a4754e292de619df4b406ec5edecca8e2604059a565127dd8083dcbf53cbd8fc71a4ec38c780a61ffa7277cc2db6e0d8b5b0f31529e040590466e35b80bc71cd6b3fba68d1b70384d21cc14b5c6fb26490456b24737f1fd0afb4d93f9c290b536b9ea99802995df541b571e1c71f82a57d4cbcd39cadf9f360f805d1d404a1028cfa1890e99593134c916ae805221362dd4a324bb37e9611ca639b0401c8602a8a4aa8f83a0fad9e2b201643873eee34fd24c499705611c8bc6e44fcb4f2462f456a1c542bde8589bcbcc4b0dbe40de544b1d007bfd62a7c777792378a05cab994778fb2b5ec516db25a8b96b8f3fb851916874b1de8bfaf14d8baddea7e0ee34bd52540ec20aaf92174b88851e3fc162bcea3185ef7300c21e6c793d0527b9aac966f36d0978efbdd3a82f33f3edffbe3ccae443619937fa15979db03cf65b162ee2a95df157a130da1b940954be5df54da118e0b99ed6a8b43edb3cf096e0e5210a3403cf131dfb87f9dc1b986048a05125cf4a7eba73ee6b24f43e5201f15d3737bca27ffc6fa54b19579b12d094e9478836669b508f496aa8f54073e6fd076113a5f5e7b9057647320ef62289531a219fbeb889270c92974caa5b403b4a089c0409931740363461c9f3eafb7b4dbded79bcaa05abfbae4381b6ed0df357b191d38596cb71fb084622155efbfe0a96143282aa625b64d47e6f80228288e24900e8a40e992ff5bf47a98dd199838325b34f48dc1e4ae5df3a9c2b8441bc5fa355ba1e251c1292341130df9f8bbd79471559ce543bcb70364ef46f10bff2d0668276375a0f34cfd02eb13b813dd21b44beb4989fc677834315588f1c5df748a5493034f64157928bafa09dba09987841267ab09a164ceb263952ef18d9282862ee14b24755e0ba1a15e7e6d0ad5f8d4d6c68895ba7858cb51381d162622ea747e4ee1551d7d39db0157f5dbb3c9930025e145adce7e5c400c3db2cd086d8c00d04bb1fe74e687c28eab5691b536b931ed3693dd373b67645b4bfe634350ca41d5f7687560337e0c4c4f101090f44212c55b58fbc802d8da142f76331e4fda6ae41a3b622a53c3d17d5e2a7f31166d7b5954a7fa96fb5babca49674ddf6fb77d9c7799205c576e5b1ac85aae9c41f11abc155361b87c3da09ad35a97ffb3756c1c011842c1a51a796df075fff4f774362cff72715e50a261c5bdb8fe3622c07d89713c35aaa750a9a8f9dddad5c1f59058f7ab5236a4219b1f728dea2e1c34342a719e8b9120509bfce6885e306d9e7642dd35813e18cdacfb2b39823c60975bc3016c67ab248b567d1a88a2621bf24f4e9fccecef0ad7b51eff1bb4d521c7f510d921829f005e14bfaa0f7c530cf781133d3059ea1c156e74cdff4bb1d45c9ca55900cbdcfe25bc25e0c5af805c9f5eba595dc22a692804a6cba3275f00d4c833ffaab777686a3d5d450ed86bb3818c84dff5c3f4ab1cfd564803de82f5b6f73b99fdd97eaa6e91c8598816f5944b86452832398b1c02428326273b7dd1bd0a27e46ec018c82cc202cc293a47d06ce6bf342bce6877f262605602ae28731c0444a7306c044dbc96dc5e8ad2867e551ba28dff0e2a590554437bb221e6abbc2afbfada0d136fc762be2d7c7695f5b0b599b756e2385833c58b33d7945d5d63f69da642d6748b05d0880ed35d6f6e14e3470c8b68cf2368ccbbf61c4e81e6a656d241ef3102582382af28cabc5e6cb5da5ccbd2d2e75db2b1b9ee9b9d0ed58326726e61b5b7e5cdc6ccf33afa21aab933633dfebb3425c986f43306fbc27ac11d9dabae7b3f6444296c9ca766e0e2010aa9899d7925c3b8666b10021745e7b461c846de7aba7c6d9b98acd9b9154c27a42dcf672514d60eb9edb6bccb67cfd6117dadad926cf9185e91a346c83fcff4726580e026c2e1a240e1790f478a224b40f0ea9656123c596fc09ad543b495ee6568eca1d7576fe976d0439c6a424dfbe1933bbe5b5588a4101cae1a4e63d7b668304f5c92794100623608b56c3a0b61ccb6b1fa188742d191c60133cc8bc18380f61027912716ecdb8e410d19702fdb9e54734236001fcd11c699c0f2008786ff4e8da415d533f343053d02f8d892a0d04bfb5773f347f9bf98423ccbfaad4bc5f3a7ef9fce7592b8e1f685775ab9067c34cf95a9dfcf7c46917ce56907c4ba1fbd5a989d761729631878518c88b8d711d3db0c3c7973e868107a8c55243d78c79f08a0b896cfeae26997f88b9d71d8dd0d3e9b44233a9234aaa3564d17f72e907adb7fc80b94fdcf2a34da95c9048828721038579f2d1f0f85f0516afb1baed010f6be9b013f29afa7c47968397b8d29ff56c61071c5f1a1d0585a91fe8dc43119d575397767db374643e9982020e1de5caf0f656aa613132e6f42fd4c96e21100e270629079b531e7c8af6c3fa7d5d828267c3beee3bdb93a19138387c54b7e2c53716c8f1564108d78bbb79dcca272ea188ab7859ca6a16071a398fe99483a87a2dd8fdc271d74e36fd68a295e93e97c467e541ad4561ac7c553e4d57f9c4d88c02854cd489c384cbdcb775fbe1b9c519c9baae5a9a9d88be334bfe93e8333edb6adf38a3c359246bc079b3aa753eb25f0be58ae5486a7e594921a3646a53c0afbe9cf69fcc18677b19f18c7e914bc3c1946bf2c4fce5a5bc19bbb77ca1f21a20f896e2b47938a1f98079752bf7d7716ef6169076ecac25c817d8ea4512fbaf9668bdae6807fef588d23b261c4af41eeb777e2228fb67cea8d0c195814a3576f4cd5c2571ce6f49c2da6cd2f97d7e30ba74892aef9e975dccd0c63f22e0d3eb4da0dd39bd86a8e0cd67355c173b6deb9dabed6f5332580be97c71f9f4434e2b236bb040885feecba15eddda45065feec81cb64d2adc8d386272c525bbcef99f993e7a57af7bfe45bc4dec404a11df0b0daf638748a5a52c21dafdbfed6ad5a19f5a260dee8ecaf059edc0d429a0edf3f352aa13b83ebcdd48377f238767d578315908cde310d78ae6b0becd33cb2da0b9095c99ee63363035d1aa6ed71f8c216d4b6bcc645b2d6d2bd5e24745eebe2fcbe4c02e203bfa3f49bfd2bd4cb871c7fb7a7f838e251245a451d1b008d2e2ce984aaaf1588b52a92beda4bb980551a1d6e7f7377205ed0a1b512c52dd04d1567a79464ff661c7cf4ed88a1d8ce67f8d9ca3249c1c899913a462535ef8f480c858aea7f999d7a3ae6577871e395b4c0a42f04263ed07a7bc4a82fe74081228191c1ac15aa1b992d4bfd132a64866166e16cf45bee87efb09c35835bfa218517b075dfd68928b0e9fd7f586699402f3a443247854de89ae7cb7dc53d98a1499772a4bd27fd859a5d20a927caa68ac496720cc4f6d84908df2dab1d9150dc5ff9ae0169bb61245bd53df24fd16c6f7a3b9a23f563022b1e7010dec46a54f91e5a5ea27fac56601e3eca076d4752f792c999aab1d64f179606600c2727d338b6bd1d3e10464ccf9a36b8ec6f4351a5c93928d35414abd71f3cdc31c79224de3c9133641dabc3358abaa24d709a9f3cf1ff24f115bfbc92f02c04fc84db5146458ed84b2349b89c8af612b7d4d9971f3a41730155d100198cd2c81a19da3692e7a3781c1136b5f54d54f8c0b1880be3d891ce6793f3229110354af2ba32c24c797d1e2a0f9355c7fdbc7da8a9757a075049e1ce496baef3a6bdc070d519ea402ed904f3093cc87369598f929d6481cd940bde3da8b5bdfc6244630e86dc1b0c79b1184d71a7a4912c8ef65a0d694e4066599d95a6d4b31108b79a1cc654827a603b06906c69ed6c7dd08dc0aac3410253385001035e85431f13cd9604afd161d6c20ec44bfd5a3ad57a89d80e6fae508039c2adcaee875a3838a1c4d93270148fc4c9ce9ce2fadf3a2289f6d8b5142d905365ea10e3f1761c5d67f071e4f98b1ffebd6103f"}, @ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "22859a6e862c54680436c2c09b0e53b2fc2d566c54c13c62db06b59c5441f819255d35a9bbd0501f79f886704c5ff1a0b95ef5848f9403962dc83694f0e0512d39493013a3553374063d16bef593802a2ee98f4c213e5c4cc4de309292e9d1538e2b8bf9f00c3081919381d32ef3df1bf89dde5b45f25dd7a5352d15719be4"}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/:[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\#.&&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',^%#[\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\'%:[{)[]#+(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-,)+.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ',-@#\xf0-\xdf%#.$!\xa9,\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']-,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '![&*:.{%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&+{{r-,:.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "8be7f9fb03c58e58f3546d5f55d5e43053a0165de4c0c0f9dd1c6b6262edc109ba2bce34ae452d9a4b775f70340958d890d025db5089c54708ea1b6d3f369a1e384828fdebb0e8f8059f4e6c4f1f69f48459eca357d2f20c1e90f1bee815553724ff6f3f222d0d216230bd224524146f469b4cbfca0969"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\\$'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')-,!){@\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x89b}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')^)*{&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '\'*^&@.+))&\\&[&.:.{)^!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4010}, 0x4001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x70, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4008851) r7 = socket$netlink(0x10, 0x3, 0x8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000019c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001a40)={'vcan0\x00', @multicast}) r9 = epoll_create(0x99a1) r10 = accept4(r6, &(0x7f0000001a80)=@rc={0x1f, @none}, &(0x7f0000001b00)=0x80, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000001b40)={0x8}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001bc0)={'hsr0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x48001) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d00)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000001d40)={'ipvlan1\x00', 0x1001}) ioctl$TUNDETACHFILTER(r12, 0x401054d6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001d80)={'veth1_to_hsr\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r12) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0xd8, r13, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x78, 0x5b, "af2725f139f179dfc5b02c4df4f19deb9fa79bd15017daf045bacf7cc4192051303999b3e54c91db9229ca92f9ecfa8865d5d0e27b8bc13ce352a98066a903526fdab1610e3a798b2d928235af7a4a88de54b16e3350e57b7de1c0f94f3d1542fe256326b0bb64931697f713a2633e30a4213fbf"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x984}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xa}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x1c, 0x5b, "c69a74e8116c7e1921a87c4ea9c67c57abf7ed1ac31fcb92"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000855}, 0x200480c4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003100)={r8, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000031c0)={{r8, 0xffffffffffffffff}, &(0x7f0000003140), &(0x7f0000003180)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003280)={{r12, 0xffffffffffffffff}, &(0x7f0000003200), &(0x7f0000003240)=r12}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003380)={0x18, 0x9, &(0x7f0000001fc0)=@raw=[@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0xfffffffffffffffe, 0x10}, @generic={0x6, 0x1, 0x4, 0x1, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x1, 0x8, 0xa, 0x0, 0xfffffffffffffffe, 0x10}], &(0x7f0000002040)='GPL\x00', 0x20ed, 0x1000, &(0x7f0000002080)=""/4096, 0x40f00, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003080)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000030c0)={0x1, 0x7, 0x10001, 0xfffffffa}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000032c0)=[r14, r15, r12, r16, r12, r12], &(0x7f0000003300)=[{0x1, 0x2, 0x6, 0x9}, {0x1, 0x3, 0x8, 0x6}, {0x5, 0x1, 0xd, 0x5}, {0x1, 0x2, 0x3, 0x6}, {0x2, 0x1, 0x9, 0xb}, {0x2, 0x4, 0xa, 0x8}]}, 0x94) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000003480)={0x1, &(0x7f0000003440)=[{0x6, 0x93, 0x4d, 0x9}]}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x88040}, 0x40088c8) 212.520253ms ago: executing program 2 (id=3205): r0 = socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r3, 0x0, 0x0, 0x2100, 0x0, 0x0) (async) recvfrom$llc(r3, 0x0, 0x0, 0x2100, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e25, 0x4, @mcast2, 0x5}, 0x1c) socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$kcm(0xa, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 200.909325ms ago: executing program 1 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="1c1000000a08040228bd7000fbdbdf25000000010800e2", @ANYRES32, @ANYBLOB], 0x101c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcd0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r4, 0x0, 0x9}, 0x18) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448df, &(0x7f0000000b40)) preadv(r5, &(0x7f0000000040), 0x0, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd70003c02000002000000", @ANYBLOB], 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fddbdf25300000000500350001000000050033b11193f7e7c690723bd8eff3d86a000300000005003300030000000500360000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c084) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'virt_wifi0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}}) 94.418445ms ago: executing program 4 (id=3207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010084b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c000280060005004e2600001400030067656e65766530000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r2, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x8000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r12, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="000425bd7000fbdbdf251b0000000600210061000000060021006100000005009200ec0000007c00228024000080080002000100000008000100080000000800060007000000080005000500000054000080080005000400000008000600de00000008000300000000000800030001040000080003007f000000080007000004000008000300b50000000800060000000000080006000d000000080005000500000005009200020000000500920009000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00'}) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000003ed0000000000000000000000950b000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r15 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$packet_fanout_data(r15, 0x107, 0x16, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x7ff, 0x0, 0x4, 0x8}, {0x3, 0x6d, 0x7f, 0xe}, {0x9, 0xd, 0x1, 0x80}, {0x800, 0x7, 0x3, 0x10001}, {0x1, 0x3, 0x1, 0x9}, {0x0, 0xa7, 0x8, 0x5}, {0x83, 0x5, 0x4f}]}, 0x10) 0s ago: executing program 2 (id=3208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff000000000a00000085000000bc000000850000002a00000095", @ANYRESDEC, @ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008002dd9ac1414bb0c0001800800014064010102050014000200000005000500020000000500010006"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="30b5c800", @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf25110000000c009900020000006100000005007400060000000600b500d1040000"], 0x30}, 0x1, 0x0, 0x0, 0x24008890}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000000000010000000008000500ac1414ff"], 0x24}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0xffffff06, &(0x7f0000000140)="d48806a2cb348b9765cfa963da6c", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) kernel console output (not intermixed with test programs): sing attributes in process `syz.2.1628'. [ 443.950910][T12768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.072062][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 444.081764][T12772] netlink: 'syz.1.1631': attribute type 30 has an invalid length. [ 444.159779][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 444.165029][T12780] syzkaller0: entered promiscuous mode [ 444.174538][T12780] syzkaller0: entered allmulticast mode [ 444.180586][T12772] netlink: 'syz.1.1631': attribute type 30 has an invalid length. [ 444.357450][T12788] netlink: 'syz.0.1636': attribute type 7 has an invalid length. [ 444.365648][T12788] netlink: 'syz.0.1636': attribute type 8 has an invalid length. [ 444.741788][T12808] wg1 speed is unknown, defaulting to 1000 [ 444.765872][T12808] lo speed is unknown, defaulting to 1000 [ 444.773384][T12809] wg1 speed is unknown, defaulting to 1000 [ 444.790763][T12809] lo speed is unknown, defaulting to 1000 [ 445.066191][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.074259][ C1] lec:lec_tx_timeout: lec0 [ 445.079040][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.305507][T12829] wg1 speed is unknown, defaulting to 1000 [ 445.313140][T12832] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 445.324346][T12829] lo speed is unknown, defaulting to 1000 [ 445.889080][T12866] wg1 speed is unknown, defaulting to 1000 [ 445.905991][T12866] lo speed is unknown, defaulting to 1000 [ 446.036284][ T39] lo speed is unknown, defaulting to 1000 [ 446.101592][T12874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.108913][T12874] IPv6: NLM_F_CREATE should be set when creating new route [ 446.521913][T12916] netlink: 'syz.1.1662': attribute type 30 has an invalid length. [ 446.605400][T12920] hsr_slave_0: left promiscuous mode [ 446.625711][T12920] hsr_slave_1: left promiscuous mode [ 446.703687][T12916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.728653][T12916] net_ratelimit: 8 callbacks suppressed [ 446.728664][T12916] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 446.940417][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 447.076576][ T8607] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 447.173874][T12954] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 447.453057][T12972] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 447.492987][T12972] bond5 (unregistering): Released all slaves [ 447.521538][T12977] vlan0: entered promiscuous mode [ 447.638683][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.136761][ T3538] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.145155][ T3538] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.229303][T12995] geneve2: left promiscuous mode [ 448.234477][T12995] ipvlan2: left promiscuous mode [ 448.249029][T12995] ipvlan3: left promiscuous mode [ 448.256115][T12995] geneve3: left promiscuous mode [ 448.268752][T12997] __nla_validate_parse: 14 callbacks suppressed [ 448.268772][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1684'. [ 448.384979][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 448.420253][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 448.450269][T13000] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 448.464694][T13000] bond4 (unregistering): Released all slaves [ 448.488364][T13003] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 448.600705][T13003] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 448.821037][T13036] netlink: 'syz.3.1692': attribute type 11 has an invalid length. [ 448.842704][T13037] batman_adv: batadv0: Adding interface: dummy0 [ 448.844481][T13033] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 448.849125][T13037] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.849158][T13037] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 448.853781][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'. [ 448.910495][T13036] netlink: 'syz.3.1692': attribute type 11 has an invalid length. [ 448.921662][T13036] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1692'. [ 448.924586][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1691'. [ 448.947095][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1693'. [ 448.956506][T13039] netlink: 'syz.4.1693': attribute type 7 has an invalid length. [ 448.964354][T13039] netlink: 'syz.4.1693': attribute type 8 has an invalid length. [ 448.972462][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1693'. [ 448.982847][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 449.008460][ T5936] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.334432][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 449.371745][T13068] netlink: 'syz.4.1698': attribute type 25 has an invalid length. [ 449.563769][T13047] ieee802154 phy1 wpan1: encryption failed: -90 [ 449.726340][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 450.079479][T13108] netlink: 'syz.0.1709': attribute type 7 has an invalid length. [ 450.099381][T13108] netlink: 'syz.0.1709': attribute type 8 has an invalid length. [ 450.107078][T13110] nbd: must specify a size in bytes for the device [ 450.123283][T13110] block nbd2: not configured, cannot reconfigure [ 450.451515][T13118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.506829][T13118] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.542047][T13118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.708611][T13135] syzkaller0: entered promiscuous mode [ 450.721858][T13135] syzkaller0: entered allmulticast mode [ 450.820587][T13134] sctp: [Deprecated]: syz.0.1713 (pid 13134) Use of int in max_burst socket option. [ 450.820587][T13134] Use struct sctp_assoc_value instead [ 450.926171][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 450.934290][ C1] lec:lec_tx_timeout: lec0 [ 451.034805][T13165] netlink: 'syz.1.1724': attribute type 7 has an invalid length. [ 451.806100][T13165] netlink: 'syz.1.1724': attribute type 8 has an invalid length. [ 451.900863][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 453.863798][T13167] __nla_validate_parse: 93 callbacks suppressed [ 453.863818][T13167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1725'. [ 459.891073][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 462.032216][T13184] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1728'. [ 462.247752][T13195] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1730'. [ 462.282587][T13195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 462.300604][T13195] tipc: Invalid UDP bearer configuration [ 462.300661][T13195] tipc: Enabling of bearer rejected, failed to enable media [ 462.542372][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 462.555669][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.595633][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.623846][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.740707][T13226] wg1 speed is unknown, defaulting to 1000 [ 462.752880][T13226] lo speed is unknown, defaulting to 1000 [ 463.077618][T13235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1740'. [ 463.223874][T13238] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 463.256597][T13238] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1741'. [ 463.336520][T13238] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1741'. [ 463.420838][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1742'. [ 463.433999][T13247] xt_hashlimit: max too large, truncated to 1048576 [ 463.453320][T13244] wg1 speed is unknown, defaulting to 1000 [ 463.470911][T13247] xt_bpf: check failed: parse error [ 463.501971][T13244] lo speed is unknown, defaulting to 1000 [ 463.725712][T13261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.758506][T13261] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 463.774707][T13261] netlink: 'syz.2.1749': attribute type 2 has an invalid length. [ 463.782937][T13261] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 463.793976][T13261] netlink: 'syz.2.1749': attribute type 3 has an invalid length. [ 463.802851][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 463.921637][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 463.993750][T13274] netlink: 'syz.2.1755': attribute type 7 has an invalid length. [ 464.019913][T13274] netlink: 'syz.2.1755': attribute type 8 has an invalid length. [ 464.330040][T13297] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 464.379087][T13297] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 464.389397][T13301] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 464.428633][T13301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.514132][T13301] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 464.651989][T13312] bond3: (slave bridge0): making interface the new active one [ 464.912577][T13312] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 465.308876][T13339] netlink: 'syz.2.1770': attribute type 7 has an invalid length. [ 465.387956][T13344] syzkaller1: entered promiscuous mode [ 465.426283][T13344] syzkaller1: entered allmulticast mode [ 465.778347][ T5829] IPVS: starting estimator thread 0... [ 465.896323][T13375] IPVS: using max 32 ests per chain, 76800 per kthread [ 466.072473][T13390] wg1 speed is unknown, defaulting to 1000 [ 466.132566][T13390] lo speed is unknown, defaulting to 1000 [ 467.018036][T13451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.106890][ T30] audit: type=1800 audit(1767301985.429:7): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1793" name="memory.events" dev="tmpfs" ino=1841 res=0 errno=0 [ 467.149848][T13453] bond5: (slave veth7): Enslaving as an active interface with a down link [ 467.203031][T13451] bond5: (slave dummy0): making interface the new active one [ 467.228501][T13451] dummy0: entered promiscuous mode [ 467.263370][T13451] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 467.609167][T13454] bond5 (unregistering): (slave veth7): Releasing active interface [ 467.639780][T13454] bond5 (unregistering): (slave dummy0): Releasing active interface [ 467.671619][T13454] bond5 (unregistering): Released all slaves [ 467.770833][T13471] tipc: Enabled bearer , priority 0 [ 467.787283][T13474] syzkaller0: entered promiscuous mode [ 467.792884][T13474] syzkaller0: entered allmulticast mode [ 467.920552][T13467] tipc: Resetting bearer [ 467.946899][T13466] tipc: Resetting bearer [ 468.002071][T13466] tipc: Disabling bearer [ 468.370241][T13506] __nla_validate_parse: 10 callbacks suppressed [ 468.370261][T13506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1811'. [ 468.405076][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'. [ 468.432277][T13509] validate_nla: 2 callbacks suppressed [ 468.432298][T13509] netlink: 'syz.1.1812': attribute type 7 has an invalid length. [ 468.482506][T13509] netlink: 'syz.1.1812': attribute type 8 has an invalid length. [ 468.503184][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 468.587516][T13527] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1815'. [ 468.721118][T13542] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1815'. [ 468.924781][T13551] netlink: 'syz.0.1822': attribute type 13 has an invalid length. [ 468.943962][T13551] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1822'. [ 468.958428][T13552] wg1 speed is unknown, defaulting to 1000 [ 469.013685][T13552] lo speed is unknown, defaulting to 1000 [ 469.316456][T13565] netlink: 'syz.2.1826': attribute type 21 has an invalid length. [ 469.324558][T13565] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 469.339300][T13565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1826'. [ 469.369174][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'. [ 469.370518][T13567] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1828'. [ 469.418486][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'. [ 469.653903][T13585] netlink: 'syz.1.1832': attribute type 7 has an invalid length. [ 469.659868][T13581] wg1 speed is unknown, defaulting to 1000 [ 469.671176][T13585] netlink: 'syz.1.1832': attribute type 8 has an invalid length. [ 469.689878][T13581] lo speed is unknown, defaulting to 1000 [ 471.280357][T13630] netlink: 'syz.3.1846': attribute type 7 has an invalid length. [ 471.288555][T13630] netlink: 'syz.3.1846': attribute type 8 has an invalid length. [ 471.452258][T13645] tipc: Enabling of bearer rejected, failed to enable media [ 471.512439][T13645] netlink: ct family unspecified [ 471.529702][T13645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.712466][T13652] tipc: Enabled bearer , priority 0 [ 471.728163][T13652] syzkaller0: entered promiscuous mode [ 471.745951][T13652] syzkaller0: entered allmulticast mode [ 472.097102][T13669] tipc: Resetting bearer [ 472.268200][T13646] tipc: Resetting bearer [ 472.320616][T13646] tipc: Disabling bearer [ 472.501549][T13690] netlink: 'syz.3.1863': attribute type 21 has an invalid length. [ 473.849368][T13726] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 473.990086][T13728] __nla_validate_parse: 10 callbacks suppressed [ 473.990103][T13728] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1872'. [ 474.606426][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 476.265283][T13698] veth15: entered promiscuous mode [ 476.283816][T13707] bond0: (slave rose0): Error: Device can not be enslaved while up [ 476.558019][T13766] validate_nla: 2 callbacks suppressed [ 476.558036][T13766] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 476.619472][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1878'. [ 476.941038][T13778] ip6t_srh: unknown srh invflags 4000 [ 477.145841][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 477.206375][T13800] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 477.263321][T13800] 8021q: adding VLAN 0 to HW filter on device bond11 [ 477.294063][T13804] wg1 speed is unknown, defaulting to 1000 [ 477.331105][T13800] bond11: (slave gretap1): making interface the new active one [ 477.340816][T13800] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 477.350976][T13804] lo speed is unknown, defaulting to 1000 [ 477.385480][T13814] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20001 [ 477.451678][T13814] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 477.477286][T13817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1893'. [ 477.508998][T13814] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 477.519692][T13822] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1897'. [ 477.529142][T13822] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1897'. [ 477.556880][T13815] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 477.565782][T13815] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 477.669108][T13800] wg1 speed is unknown, defaulting to 1000 [ 477.688671][T13821] wg1 speed is unknown, defaulting to 1000 [ 477.695558][T13800] lo speed is unknown, defaulting to 1000 [ 477.756438][T13821] lo speed is unknown, defaulting to 1000 [ 477.890246][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 478.239313][T13860] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1906'. [ 478.436343][T13872] tipc: Enabling of bearer rejected, failed to enable media [ 478.813093][T13880] delete_channel: no stack [ 478.821149][T13880] delete_channel: no stack [ 478.825448][T13879] wg1 speed is unknown, defaulting to 1000 [ 478.877276][T13879] lo speed is unknown, defaulting to 1000 [ 479.001973][T13897] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 479.416621][T13913] syzkaller1: entered promiscuous mode [ 479.422170][T13913] syzkaller1: entered allmulticast mode [ 479.423397][T13915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1924'. [ 479.834526][T13932] netlink: 'syz.1.1928': attribute type 16 has an invalid length. [ 479.842597][T13932] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1928'. [ 479.967799][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 480.209434][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 480.221734][T13941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'. [ 480.415345][T13949] netlink: 'syz.2.1933': attribute type 13 has an invalid length. [ 480.987133][T13986] tipc: Enabling of bearer rejected, already enabled [ 481.009074][T13986] tipc: New replicast peer: 172.30.1.3 [ 481.047830][T13988] wg1 speed is unknown, defaulting to 1000 [ 481.072640][T13988] lo speed is unknown, defaulting to 1000 [ 481.145354][T13998] netem: change failed [ 481.259995][T14007] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1947'. [ 481.621619][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 481.894146][T14045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1954'. [ 481.903756][T14045] netlink: 'syz.0.1954': attribute type 7 has an invalid length. [ 481.911741][T14045] netlink: 'syz.0.1954': attribute type 8 has an invalid length. [ 481.919868][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'. [ 482.118613][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1950'. [ 482.212027][T14023] nbd: nbd64 already in use [ 482.462003][T13808] udevd[13808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 482.623529][T14070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.642145][T14070] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.656003][T14070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.702818][T14067] wg1 speed is unknown, defaulting to 1000 [ 482.720007][T14067] lo speed is unknown, defaulting to 1000 [ 482.938732][T13808] udevd[13808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 483.050458][T14094] sctp: [Deprecated]: syz.4.1966 (pid 14094) Use of int in max_burst socket option deprecated. [ 483.050458][T14094] Use struct sctp_assoc_value instead [ 483.353627][T14105] tipc: Enabled bearer , priority 0 [ 483.395544][T14108] tipc: Enabled bearer , priority 0 [ 483.413475][T14108] syzkaller0: entered promiscuous mode [ 483.426243][T14108] syzkaller0: entered allmulticast mode [ 483.513000][T14108] tipc: Resetting bearer [ 483.540934][ T30] audit: type=1800 audit(1767302001.869:8): pid=14120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1971" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2250 res=0 errno=0 [ 483.577507][T14107] tipc: Resetting bearer [ 483.706793][T14107] tipc: Disabling bearer [ 483.750328][T14104] tipc: Disabling bearer [ 483.949936][T14152] netlink: 'syz.4.1980': attribute type 10 has an invalid length. [ 483.968078][T14152] team0: Port device team_slave_0 removed [ 484.068404][ T8608] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.087051][ T8608] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.109599][ T8608] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.143581][ T8608] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.217320][T14165] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 484.245748][T14157] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 484.257080][T14157] tipc: Enabling of bearer rejected, failed to enable media [ 484.343473][T14165] 8021q: adding VLAN 0 to HW filter on device bond12 [ 484.448969][T14178] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.527441][T14178] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.721417][T14178] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.744255][T14178] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.810267][T14193] __nla_validate_parse: 9 callbacks suppressed [ 484.810288][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1991'. [ 484.829686][T14193] netlink: 'syz.4.1991': attribute type 7 has an invalid length. [ 484.861637][T14205] bond0: (slave syz_tun): Releasing backup interface [ 484.864258][T14193] netlink: 'syz.4.1991': attribute type 8 has an invalid length. [ 484.877227][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1991'. [ 484.890120][T14206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'. [ 484.901206][T14205] batman_adv: batadv0: Removing interface: dummy0 [ 484.937136][T14205] bridge_slave_0: left allmulticast mode [ 484.939113][T14201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1994'. [ 484.952454][T14205] bridge_slave_0: left promiscuous mode [ 484.972896][T14205] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.985381][T14201] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1994'. [ 485.004881][T14205] bond0: (slave bond_slave_0): Releasing backup interface [ 485.025030][T14205] bond0: (slave bond_slave_1): Releasing backup interface [ 485.039878][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'. [ 485.055327][T14205] `: Failed to send options change via netlink (err -105) [ 485.078199][T14205] `: Failed to send port change of device team_slave_0 via netlink (err -105) [ 485.107437][T14205] `: Port device team_slave_0 removed [ 485.122342][T14205] `: Failed to send options change via netlink (err -105) [ 485.146553][T14205] `: Failed to send port change of device team_slave_1 via netlink (err -105) [ 485.172802][T14205] `: Port device team_slave_1 removed [ 485.188876][T14205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.196791][T14221] netlink: 'syz.1.1997': attribute type 1 has an invalid length. [ 485.205928][T14205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 485.253127][T14178] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.282603][T14178] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.302688][T14201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1994'. [ 485.358520][T14178] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.372703][T14178] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.473031][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 485.544333][T14226] tipc: Enabling of bearer rejected, failed to enable media [ 486.005947][T14242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2000'. [ 486.225084][T14244] netlink: 'syz.1.2004': attribute type 13 has an invalid length. [ 486.486415][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.626775][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.909928][T14283] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2015'. [ 487.129525][ T30] audit: type=1800 audit(1767302005.459:9): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2017" name=55DBAC7EFFEBAC dev="tmpfs" ino=911 res=0 errno=0 [ 487.623715][T14319] bond4 (unregistering): Released all slaves [ 487.708699][T14322] wg1 speed is unknown, defaulting to 1000 [ 487.764442][T14322] lo speed is unknown, defaulting to 1000 [ 488.098775][T14347] bond13: entered promiscuous mode [ 488.103940][T14347] bond13: entered allmulticast mode [ 488.109799][T14347] 8021q: adding VLAN 0 to HW filter on device bond13 [ 489.274256][T14382] netlink: 'syz.4.2038': attribute type 11 has an invalid length. [ 489.716913][T14403] nbd0: detected capacity change from 0 to 127 [ 489.822568][T14403] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 489.844864][T14403] __nla_validate_parse: 11 callbacks suppressed [ 489.844883][T14403] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2044'. [ 489.869863][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2046'. [ 489.880299][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2046'. [ 489.891581][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2046'. [ 489.901055][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2046'. [ 490.010482][ T5830] block nbd0: Receive control failed (result -104) [ 490.310631][T14431] netlink: 'syz.4.2050': attribute type 39 has an invalid length. [ 490.492282][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'. [ 490.618456][T14457] dummy0: entered promiscuous mode [ 490.654053][T14457] macsec2: entered promiscuous mode [ 490.664708][T14457] macsec2: entered allmulticast mode [ 490.683970][T14457] dummy0: entered allmulticast mode [ 490.698190][T14457] dummy0: left allmulticast mode [ 490.708512][T14457] dummy0: left promiscuous mode [ 490.756701][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 490.778562][T14458] wg1 speed is unknown, defaulting to 1000 [ 490.851145][T14458] lo speed is unknown, defaulting to 1000 [ 490.908055][T14478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2063'. [ 490.952815][T14472] wg1 speed is unknown, defaulting to 1000 [ 491.008704][T14472] lo speed is unknown, defaulting to 1000 [ 491.305721][T14490] wg1 speed is unknown, defaulting to 1000 [ 491.343376][T14490] lo speed is unknown, defaulting to 1000 [ 491.432216][T14497] wg1 speed is unknown, defaulting to 1000 [ 491.467299][T14497] lo speed is unknown, defaulting to 1000 [ 491.597405][T14472] wg1 speed is unknown, defaulting to 1000 [ 491.604919][T14472] lo speed is unknown, defaulting to 1000 [ 491.842372][T14502] wg1 speed is unknown, defaulting to 1000 [ 491.976860][T14502] lo speed is unknown, defaulting to 1000 [ 492.070988][T14522] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20001 [ 492.395915][T14535] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2076'. [ 492.864041][T14558] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2077'. [ 492.884984][T14557] tap0: tun_chr_ioctl cmd 1074025676 [ 492.902224][T14557] tap0: owner set to 0 [ 493.139842][T14576] vlan1: entered promiscuous mode [ 493.144956][T14576] bond0: entered promiscuous mode [ 493.150367][T14576] bond_slave_0: entered promiscuous mode [ 493.162161][T14570] 8021q: VLANs not supported on nlmon0 [ 493.188899][T14577] tipc: Enabled bearer , priority 0 [ 493.203707][T14577] syzkaller0: entered promiscuous mode [ 493.218307][T14577] syzkaller0: entered allmulticast mode [ 493.272638][T14577] tipc: Resetting bearer [ 493.290487][T14574] tipc: Resetting bearer [ 493.334847][T14574] tipc: Disabling bearer [ 493.419850][T14596] netlink: 'syz.0.2093': attribute type 31 has an invalid length. [ 493.624576][T14604] wg1 speed is unknown, defaulting to 1000 [ 493.632884][T14604] lo speed is unknown, defaulting to 1000 [ 495.606663][T14613] wg1 speed is unknown, defaulting to 1000 [ 495.665038][T14637] __nla_validate_parse: 1 callbacks suppressed [ 495.665055][T14637] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2103'. [ 495.684490][T14613] lo speed is unknown, defaulting to 1000 [ 495.910922][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 496.135041][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2106'. [ 496.384452][T14665] syzkaller0: entered promiscuous mode [ 496.390499][T14665] syzkaller0: entered allmulticast mode [ 496.547293][T14680] x_tables: duplicate underflow at hook 3 [ 496.571357][T14680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.668438][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 496.692848][T14683] hsr_slave_0: left promiscuous mode [ 496.709118][T14683] hsr_slave_1: left promiscuous mode [ 496.791913][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 496.930021][T14692] bridge0: entered promiscuous mode [ 496.935512][T14692] macsec1: entered promiscuous mode [ 497.015679][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2125'. [ 497.312260][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 497.636727][T14745] tipc: Enabled bearer , priority 0 [ 497.654942][T14745] syzkaller0: entered promiscuous mode [ 497.681269][T14745] syzkaller0: entered allmulticast mode [ 497.695800][T14749] SET target dimension over the limit! [ 497.788254][T14745] tipc: Resetting bearer [ 497.811878][T14743] tipc: Resetting bearer [ 497.893824][T14743] tipc: Disabling bearer [ 497.953911][T14770] netlink: 'syz.0.2140': attribute type 1 has an invalid length. [ 498.005575][T14770] bond4: entered promiscuous mode [ 498.011269][T14770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.011334][T14776] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 498.079882][T14770] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.098251][T14770] bond4: (slave bond5): making interface the new active one [ 498.105647][T14770] bond5: entered promiscuous mode [ 498.111915][T14770] bond4: (slave bond5): Enslaving as an active interface with an up link [ 498.291534][T14789] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2143'. [ 498.299549][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2146'. [ 498.336252][T14801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2146'. [ 498.525105][T14808] wg1 speed is unknown, defaulting to 1000 [ 498.593765][T14811] syzkaller1: entered promiscuous mode [ 498.636821][T14811] syzkaller1: entered allmulticast mode [ 498.645218][T14808] lo speed is unknown, defaulting to 1000 [ 498.686894][T14824] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 499.505843][T14866] siw: device registration error -23 [ 499.680769][ T39] IPVS: starting estimator thread 0... [ 499.777076][T14877] IPVS: using max 30 ests per chain, 72000 per kthread [ 499.920558][T14883] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 499.951060][T14883] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 499.967170][T14884] tipc: Started in network mode [ 499.972332][T14884] tipc: Node identity 080211, cluster identity 4711 [ 499.979606][T14884] tipc: Enabled bearer , priority 0 [ 499.993765][T14883] tipc: Enabling of bearer rejected, already enabled [ 500.154609][T14899] tipc: Enabling of bearer rejected, failed to enable media [ 500.590049][T14924] tipc: Enabled bearer , priority 0 [ 500.867543][T14926] tipc: Disabling bearer [ 501.000052][T14950] wg1 speed is unknown, defaulting to 1000 [ 501.037571][T14950] lo speed is unknown, defaulting to 1000 [ 501.070815][T14961] netlink: 'syz.0.2176': attribute type 39 has an invalid length. [ 501.100466][T14958] netlink: 'syz.2.2175': attribute type 13 has an invalid length. [ 501.187785][ T39] tipc: Node number set to 134353152 [ 501.347183][T14966] wg1 speed is unknown, defaulting to 1000 [ 501.354774][T14966] lo speed is unknown, defaulting to 1000 [ 501.497313][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 502.011500][T15007] netlink: zone id is out of range [ 502.051254][T15007] netlink: zone id is out of range [ 502.070485][T15008] __nla_validate_parse: 3 callbacks suppressed [ 502.070506][T15008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2183'. [ 502.102186][T15007] netlink: zone id is out of range [ 502.126504][T15007] netlink: zone id is out of range [ 502.133676][T15007] netlink: zone id is out of range [ 502.139219][T15007] netlink: zone id is out of range [ 502.144638][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2183'. [ 502.163654][T15007] netlink: zone id is out of range [ 502.181263][T15007] netlink: zone id is out of range [ 502.185729][T15005] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 502.192358][T15007] netlink: zone id is out of range [ 502.201799][T15007] netlink: zone id is out of range [ 502.230068][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2183'. [ 502.594846][T15029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2188'. [ 502.655577][T15029] gre0: entered allmulticast mode [ 502.917449][T15050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2193'. [ 503.116036][T15063] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 503.349373][T15079] tipc: Enabled bearer , priority 0 [ 503.399310][T15079] syzkaller0: entered promiscuous mode [ 503.404903][T15079] syzkaller0: entered allmulticast mode [ 503.416310][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 503.490558][T15088] wg1 speed is unknown, defaulting to 1000 [ 503.499895][T15088] lo speed is unknown, defaulting to 1000 [ 503.600786][T15079] tipc: Resetting bearer [ 503.654808][T15079] tipc: Disabling bearer [ 503.863690][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2205'. [ 504.109556][T15110] batadv0: entered allmulticast mode [ 504.172315][T15128] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 505.265377][T15187] batadv_slave_0: Caught tx_queue_len zero misconfig [ 505.472862][T15199] x_tables: duplicate underflow at hook 2 [ 505.561401][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 505.973111][T15232] netlink: 'syz.2.2235': attribute type 3 has an invalid length. [ 505.986557][T15232] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 505.995512][T15232] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2235'. [ 506.007487][T15231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2234'. [ 506.146902][T15250] batadv_slave_1: entered promiscuous mode [ 506.182082][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 506.265617][T15246] batadv_slave_1: left promiscuous mode [ 506.359794][T15262] nbd: must specify at least one socket [ 506.846154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.854202][ C1] lec:lec_tx_timeout: lec0 [ 506.855947][T15288] wg1 speed is unknown, defaulting to 1000 [ 506.862476][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.898040][T15288] lo speed is unknown, defaulting to 1000 [ 507.296551][T15312] bond0: (slave wlan1): Releasing backup interface [ 507.335925][T15312] bond2: (slave veth3): Releasing active interface [ 507.460524][T15325] __nla_validate_parse: 2 callbacks suppressed [ 507.460543][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 507.814016][T15343] netlink: 'syz.2.2260': attribute type 13 has an invalid length. [ 507.866521][T15343] netlink: 'syz.2.2260': attribute type 17 has an invalid length. [ 508.102144][T15343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.117826][T15343] 8021q: adding VLAN 0 to HW filter on device ` [ 508.131860][T15343] net_ratelimit: 35 callbacks suppressed [ 508.131871][T15343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.154179][ T847] lo speed is unknown, defaulting to 1000 [ 508.193710][T15365] netlink: 'syz.3.2263': attribute type 12 has an invalid length. [ 508.214429][ T847] syz1: Port: 1 Link ACTIVE [ 508.292564][ T5151] Bluetooth: hci1: command 0x0405 tx timeout [ 508.324577][T15369] ¾x9ÿ: renamed from bridge_slave_0 [ 508.388885][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2266'. [ 508.403202][T15375] x_tables: ip_tables: osf match: only valid for protocol 6 [ 508.770816][T15386] wg1 speed is unknown, defaulting to 1000 [ 508.779010][T15386] lo speed is unknown, defaulting to 1000 [ 508.804012][T15390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2271'. [ 508.999516][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2274'. [ 509.453765][T15432] netlink: 'syz.0.2284': attribute type 12 has an invalid length. [ 509.563831][T15440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2285'. [ 510.185411][T15471] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 510.283814][T15471] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.367454][T15471] veth7: entered promiscuous mode [ 510.806077][T15506] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2303'. [ 510.848087][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'. [ 510.900626][T15512] tipc: Failed to remove unknown binding: 66,0,0/0:1456172257/1456172258 [ 510.932259][T15517] netlink: 'syz.2.2308': attribute type 1 has an invalid length. [ 510.947839][T15512] tipc: Failed to remove unknown binding: 66,0,0/0:1456172257/1456172258 [ 510.956440][T15517] netlink: 'syz.2.2308': attribute type 4 has an invalid length. [ 510.967746][T15515] netlink: 'syz.0.2307': attribute type 2 has an invalid length. [ 510.985120][T15515] : entered promiscuous mode [ 510.990286][T15517] netlink: 14514 bytes leftover after parsing attributes in process `syz.2.2308'. [ 511.008137][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2306'. [ 511.079090][T15523] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 511.104139][T15527] netlink: 'syz.4.2311': attribute type 10 has an invalid length. [ 511.113530][T15529] netlink: 'syz.4.2311': attribute type 10 has an invalid length. [ 511.122606][T15527] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2311'. [ 511.264674][T15543] x_tables: duplicate underflow at hook 3 [ 511.306390][T15544] x_tables: duplicate underflow at hook 3 [ 511.504798][T15563] sctp: [Deprecated]: syz.0.2320 (pid 15563) Use of int in maxseg socket option. [ 511.504798][T15563] Use struct sctp_assoc_value instead [ 511.796478][T15578] bond0: (slave dummy0): Releasing backup interface [ 511.831522][T15578] dummy0: left promiscuous mode [ 511.886248][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 511.894337][ C1] lec:lec_tx_timeout: lec0 [ 512.249193][T15608] GUP no longer grows the stack in syz.2.2333 (15608): 200000003000-20000000a000 (200000001000) [ 512.270708][T15608] CPU: 1 UID: 0 PID: 15608 Comm: syz.2.2333 Not tainted syzkaller #0 PREEMPT(full) [ 512.270737][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.270757][T15608] Call Trace: [ 512.270765][T15608] [ 512.270773][T15608] dump_stack_lvl+0xe8/0x150 [ 512.270810][T15608] __get_user_pages+0x2465/0x29f0 [ 512.270855][T15608] ? __gup_longterm_locked+0xc63/0x1660 [ 512.270878][T15608] ? down_read_killable+0x1bc/0x350 [ 512.270903][T15608] __gup_longterm_locked+0xde4/0x1660 [ 512.270937][T15608] ? sanity_check_pinned_pages+0x123a/0x1300 [ 512.270967][T15608] gup_fast_fallback+0x1d26/0x2290 [ 512.271018][T15608] ? __pfx_gup_fast_fallback+0x10/0x10 [ 512.271046][T15608] ? pin_user_pages_fast+0x4d/0xb0 [ 512.271070][T15608] iov_iter_extract_pages+0x35f/0x5e0 [ 512.271099][T15608] extract_iter_to_sg+0xe46/0x24e0 [ 512.271128][T15608] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 512.271168][T15608] ? __asan_memset+0x22/0x50 [ 512.271188][T15608] af_alg_get_rsgl+0x436/0x810 [ 512.271223][T15608] aead_recvmsg+0x4d5/0x13b0 [ 512.271250][T15608] ? aa_sk_perm+0x7ee/0x920 [ 512.271280][T15608] ? __pfx_aead_recvmsg+0x10/0x10 [ 512.271298][T15608] ? __lock_acquire+0x6b6/0x2cf0 [ 512.271318][T15608] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 512.271334][T15608] ? security_socket_recvmsg+0x7e/0x2e0 [ 512.271357][T15608] ? __pfx_aead_recvmsg+0x10/0x10 [ 512.271378][T15608] sock_recvmsg_nosec+0x186/0x1c0 [ 512.271414][T15608] ____sys_recvmsg+0x3aa/0x460 [ 512.271443][T15608] ? __pfx_____sys_recvmsg+0x10/0x10 [ 512.271476][T15608] ? import_iovec+0x74/0xa0 [ 512.271503][T15608] ___sys_recvmsg+0x1b5/0x510 [ 512.271529][T15608] ? __pfx____sys_recvmsg+0x10/0x10 [ 512.271553][T15608] ? __fget_files+0x2a/0x420 [ 512.271604][T15608] do_recvmmsg+0x307/0x770 [ 512.271633][T15608] ? __pfx_do_recvmmsg+0x10/0x10 [ 512.271663][T15608] ? __pfx_do_futex+0x10/0x10 [ 512.271696][T15608] __x64_sys_recvmmsg+0x190/0x240 [ 512.271719][T15608] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 512.271749][T15608] do_syscall_64+0xec/0xf80 [ 512.271766][T15608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.271782][T15608] ? trace_irq_disable+0x37/0x100 [ 512.271805][T15608] ? clear_bhb_loop+0x60/0xb0 [ 512.271824][T15608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.271846][T15608] RIP: 0033:0x7f2574b8f749 [ 512.271865][T15608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.271881][T15608] RSP: 002b:00007f2575a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 512.271900][T15608] RAX: ffffffffffffffda RBX: 00007f2574de5fa0 RCX: 00007f2574b8f749 [ 512.271913][T15608] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a [ 512.271924][T15608] RBP: 00007f2574c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.271934][T15608] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 512.271945][T15608] R13: 00007f2574de6038 R14: 00007f2574de5fa0 R15: 00007fffec25cf58 [ 512.271976][T15608] [ 512.712283][T15617] netlink: 'syz.1.2335': attribute type 1 has an invalid length. [ 512.722827][T15614] __nla_validate_parse: 7 callbacks suppressed [ 512.722846][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 512.751484][T15617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2335'. [ 512.951209][T15629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.087154][ T5151] Bluetooth: hci1: command 0x0405 tx timeout [ 513.100269][T15643] sctp: [Deprecated]: syz.1.2342 (pid 15643) Use of int in maxseg socket option. [ 513.100269][T15643] Use struct sctp_assoc_value instead [ 513.189329][T15649] bond14: option ad_select: invalid value (34) [ 513.219708][T15649] bond14 (unregistering): Released all slaves [ 513.418130][T15658] wg1 speed is unknown, defaulting to 1000 [ 513.425758][T15658] lo speed is unknown, defaulting to 1000 [ 513.460333][T15666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2350'. [ 513.507312][T15670] netlink: 'syz.2.2348': attribute type 8 has an invalid length. [ 513.519056][T15667] wg1 speed is unknown, defaulting to 1000 [ 513.559122][T15667] lo speed is unknown, defaulting to 1000 [ 513.661863][T15676] netlink: 'syz.4.2351': attribute type 1 has an invalid length. [ 513.698011][T15676] sctp: [Deprecated]: syz.4.2351 (pid 15676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.698011][T15676] Use struct sctp_sack_info instead [ 513.721824][T15675] pim6reg1: entered promiscuous mode [ 513.727649][T15675] pim6reg1: entered allmulticast mode [ 513.741782][T15670] wg1 speed is unknown, defaulting to 1000 [ 513.809254][T15670] lo speed is unknown, defaulting to 1000 [ 513.809274][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2353'. [ 514.334635][T15694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 514.521390][T15711] netlink: 'syz.1.2360': attribute type 1 has an invalid length. [ 514.675881][T15727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2364'. [ 514.676564][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2365'. [ 514.689472][T15727] netlink: 'syz.3.2364': attribute type 8 has an invalid length. [ 514.708207][T15721] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 514.722088][T15724] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 514.723853][T15724] block (null): Could not allocate knbd recv work queue. [ 514.743419][T15721] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 514.777888][T15724] nbd: failed to add new device [ 514.783285][T15725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2365'. [ 514.798214][T15725] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 514.798293][T15725] block (null): Could not allocate knbd recv work queue. [ 514.856692][T15725] nbd: failed to add new device [ 515.000758][T15738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2367'. [ 515.033845][T15741] netlink: 'syz.2.2368': attribute type 4 has an invalid length. [ 515.094890][ T10] lo speed is unknown, defaulting to 1000 [ 515.108351][ T10] syz1: Port: 1 Link DOWN [ 515.117709][T15748] netlink: 'syz.2.2368': attribute type 4 has an invalid length. [ 515.135445][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 515.237180][T15753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2372'. [ 515.247033][ T5829] lo speed is unknown, defaulting to 1000 [ 515.263019][ T5829] syz1: Port: 1 Link ACTIVE [ 515.304002][T15757] netem: change failed [ 515.467947][T15761] nftables ruleset with unbound chain [ 515.943863][T15784] nbd: must specify a device to reconfigure [ 517.332694][T15843] netlink: 'syz.3.2400': attribute type 3 has an invalid length. [ 517.656665][T15860] tipc: Enabled bearer , priority 0 [ 517.663968][T15862] tipc: Failed to remove unknown binding: 66,0,0/3147938699:467718101/467718102 [ 517.684036][T15862] tipc: Failed to remove unknown binding: 66,0,0/3147938699:467718101/467718102 [ 517.738348][T15860] tipc: Disabling bearer [ 517.910108][T15883] syzkaller0: entered promiscuous mode [ 517.916333][T15883] syzkaller0: entered allmulticast mode [ 517.932726][T15884] __nla_validate_parse: 4 callbacks suppressed [ 517.932744][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 517.957054][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 518.150133][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 518.277713][T15903] ecn_mt_check6: 1 callbacks suppressed [ 518.277735][T15903] xt_ecn: cannot match TCP bits for non-tcp packets [ 518.362861][T15908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.412819][T15911] netlink: 'syz.4.2420': attribute type 6 has an invalid length. [ 518.453219][T15885] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 518.463452][T15911] netlink: 'syz.4.2420': attribute type 6 has an invalid length. [ 518.558195][T15887] bond5 (unregistering): Released all slaves [ 518.630285][T15885] bond5: entered promiscuous mode [ 518.643078][T15885] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.693503][T15925] netlink: 'syz.4.2422': attribute type 83 has an invalid length. [ 518.884326][T15930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 518.913517][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 518.925301][T15930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 518.935097][T15930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 519.137907][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2426'. [ 519.226544][T15946] wg1 speed is unknown, defaulting to 1000 [ 519.234718][T15946] lo speed is unknown, defaulting to 1000 [ 520.053570][ T11] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 30 seconds [ 520.067118][ T11] block nbd0: Possible stuck request ffff888025110200: control (read@1024,1024B). Runtime 30 seconds [ 520.081347][ T11] block nbd0: Possible stuck request ffff888025110400: control (read@2048,1024B). Runtime 30 seconds [ 520.093077][ T11] block nbd0: Possible stuck request ffff888025110600: control (read@3072,1024B). Runtime 30 seconds [ 520.093148][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 520.179046][T15988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2437'. [ 521.642673][T16041] netlink: 'syz.0.2451': attribute type 10 has an invalid length. [ 521.657237][T16041] veth0_vlan: left promiscuous mode [ 521.663643][T16041] veth0_vlan: entered promiscuous mode [ 521.671861][T16041] team0: Device veth0_vlan failed to register rx_handler [ 550.136857][ T11] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 60 seconds [ 550.147760][ T11] block nbd0: Possible stuck request ffff888025110200: control (read@1024,1024B). Runtime 60 seconds [ 550.158958][ T11] block nbd0: Possible stuck request ffff888025110400: control (read@2048,1024B). Runtime 60 seconds [ 550.170056][ T11] block nbd0: Possible stuck request ffff888025110600: control (read@3072,1024B). Runtime 60 seconds [ 550.364063][ T5201] udevd[5201]: worker [14357] /devices/virtual/block/nbd0 is taking a long time [ 562.926475][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 562.935887][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 567.946230][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.954276][ C1] lec:lec_tx_timeout: lec0 [ 568.797887][ T7708] lec:lec_start_xmit: lec0:No lecd attached [ 573.886171][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 573.894229][ C1] lec:lec_tx_timeout: lec0 [ 580.216355][ T11] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 90 seconds [ 580.227105][ T11] block nbd0: Possible stuck request ffff888025110200: control (read@1024,1024B). Runtime 90 seconds [ 580.238183][ T11] block nbd0: Possible stuck request ffff888025110400: control (read@2048,1024B). Runtime 90 seconds [ 580.249296][ T11] block nbd0: Possible stuck request ffff888025110600: control (read@3072,1024B). Runtime 90 seconds [ 610.306351][ T11] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 120 seconds [ 610.317417][ T11] block nbd0: Possible stuck request ffff888025110200: control (read@1024,1024B). Runtime 120 seconds [ 610.328806][ T11] block nbd0: Possible stuck request ffff888025110400: control (read@2048,1024B). Runtime 120 seconds [ 610.339930][ T11] block nbd0: Possible stuck request ffff888025110600: control (read@3072,1024B). Runtime 120 seconds [ 620.822492][T16064] __nla_validate_parse: 5 callbacks suppressed [ 620.822599][T16064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2456'. [ 620.845185][T16064] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 620.853421][T16064] vlan0: entered allmulticast mode [ 620.863592][T16064] veth0_vlan: entered allmulticast mode [ 620.869524][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 620.892680][T16066] netlink: 'syz.2.2457': attribute type 2 has an invalid length. [ 621.013594][T16066] wg1 speed is unknown, defaulting to 1000 [ 621.036891][T16066] lo speed is unknown, defaulting to 1000 [ 621.051319][T16071] netlink: 187056 bytes leftover after parsing attributes in process `syz.0.2460'. [ 621.106024][T16071] tipc: Enabled bearer , priority 0 [ 621.212318][T16069] tipc: Disabling bearer [ 621.510468][T16090] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 621.988070][T16116] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 622.014274][T16118] netlink: zone id is out of range [ 622.020603][T16118] netlink: zone id is out of range [ 622.027385][T16118] netlink: zone id is out of range [ 622.033383][T16118] netlink: zone id is out of range [ 622.039157][T16118] netlink: zone id is out of range [ 622.056417][T16116] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 622.057247][T16118] netlink: zone id is out of range [ 622.075926][T16118] netlink: zone id is out of range [ 622.086532][T16118] netlink: zone id is out of range [ 622.092788][T16118] netlink: zone id is out of range [ 622.157096][T16118] netlink: zone id is out of range [ 622.197047][T16133] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 622.213690][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2477'. [ 622.311129][T16133] netlink: 'syz.3.2477': attribute type 30 has an invalid length. [ 622.520674][T16144] syzkaller1: entered promiscuous mode [ 622.536805][T16144] syzkaller1: entered allmulticast mode [ 622.677112][T16156] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 622.718329][T16156] bond7 (unregistering): Released all slaves [ 622.754425][T16151] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2482'. [ 622.800997][T16165] ip6gre1: entered promiscuous mode [ 622.826045][T16165] ip6gre1: entered allmulticast mode [ 622.872595][T16167] syzkaller0: entered promiscuous mode [ 622.886244][T16167] syzkaller0: entered allmulticast mode [ 623.000923][T16174] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 623.019012][T16172] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2487'. [ 623.110120][T16174] bond7: entered promiscuous mode [ 623.117550][T16174] 8021q: adding VLAN 0 to HW filter on device bond7 [ 624.163447][T16235] erspan0: left allmulticast mode [ 624.217209][T16235] 0ªX¹¦À: left allmulticast mode [ 624.231073][T16235] vlan0: left allmulticast mode [ 624.238107][T16235] veth0_vlan: left allmulticast mode [ 624.245416][T16235] erspan1: left promiscuous mode [ 624.251252][T16235] erspan1: left allmulticast mode [ 624.269664][T16235] batadv1: left promiscuous mode [ 624.307198][T16235] veth2: left promiscuous mode [ 624.312024][T16235] veth2: left allmulticast mode [ 624.356606][T16235] batadv2: left promiscuous mode [ 624.362649][T16235] veth5: left promiscuous mode [ 624.375383][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 624.398624][T16235] geneve2: left promiscuous mode [ 624.427429][T16235] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 624.442866][T16235] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 624.635192][T14918] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.661070][T14918] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.674471][T14918] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.694418][T16267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2506'. [ 624.697774][T14918] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.728455][T16269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2506'. [ 624.731554][T14918] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.757927][T14918] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.790301][T16257] syzkaller0: entered promiscuous mode [ 624.797448][T16275] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 624.799201][T16257] syzkaller0: entered allmulticast mode [ 624.811231][T16275] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2507'. [ 624.846388][T16274] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 624.854865][T14918] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.874540][T14918] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.885184][T16274] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2507'. [ 624.904579][T14918] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.913193][T14918] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.939663][T16280] Bluetooth: MGMT ver 1.23 [ 625.008771][ T3538] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.027283][ T3538] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.093875][ T3538] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.123209][ T3538] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.192803][T14918] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.223461][T14918] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.362712][T16307] block nbd1: NBD_DISCONNECT [ 625.557560][T16326] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 625.905174][T16354] __nla_validate_parse: 69 callbacks suppressed [ 625.905194][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 627.175821][ T30] audit: type=1107 audit(1767302145.499:10): pid=16403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='³ûH¸¿ã' [ 627.189558][T16405] netlink: 'syz.0.2540': attribute type 21 has an invalid length. [ 627.197670][T16405] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2540'. [ 627.206990][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'. [ 627.334497][T16408] syzkaller0: entered promiscuous mode [ 627.341390][T16408] syzkaller0: entered allmulticast mode [ 627.386304][T16416] Bluetooth: MGMT ver 1.23 [ 627.543102][T16422] Unsupported ieee802154 address type: 0 [ 627.648542][T16424] xt_TPROXY: Can be used only with -p tcp or -p udp [ 627.909983][T16436] net_ratelimit: 46 callbacks suppressed [ 627.910034][T16436] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 627.972428][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 628.279971][T16450] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2553'. [ 628.295477][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 628.564538][T16462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2556'. [ 629.871907][T16479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.887670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 629.887705][ C1] lec:lec_tx_timeout: lec0 [ 629.913063][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 629.989053][T16485] pim6reg1: entered allmulticast mode [ 630.164665][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2564'. [ 630.196186][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2564'. [ 630.509830][T16513] wg1 speed is unknown, defaulting to 1000 [ 630.586616][T16513] lo speed is unknown, defaulting to 1000 [ 630.957706][T16545] __nla_validate_parse: 1 callbacks suppressed [ 630.957725][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 630.963109][T16548] wg1 speed is unknown, defaulting to 1000 [ 631.035813][T16548] lo speed is unknown, defaulting to 1000 [ 631.948855][T16593] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2588'. [ 632.152887][T16602] wg1 speed is unknown, defaulting to 1000 [ 632.162005][T16602] lo speed is unknown, defaulting to 1000 [ 632.173499][T16604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2592'. [ 632.297411][T16616] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2595'. [ 632.395809][T16622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2597'. [ 632.625827][T16636] wg1 speed is unknown, defaulting to 1000 [ 632.659408][T16639] netlink: 'syz.0.2600': attribute type 8 has an invalid length. [ 632.659550][T16636] lo speed is unknown, defaulting to 1000 [ 632.869588][T16639] wg1 speed is unknown, defaulting to 1000 [ 632.919156][T16639] lo speed is unknown, defaulting to 1000 [ 633.245334][ T7708] lec:lec_start_xmit: lec0:No lecd attached [ 633.315217][T16655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2603'. [ 633.364919][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2603'. [ 633.398510][T16656] bridge0: Device is already in use. [ 633.567096][T16661] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2605'. [ 633.604468][T16661] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 633.645848][T16666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2606'. [ 633.654985][ T5151] Bluetooth: hci1: command 0x0405 tx timeout [ 633.836436][T16673] netlink: 'syz.3.2607': attribute type 58 has an invalid length. [ 633.849270][T16673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2607'. [ 634.090577][T16678] tap0: tun_chr_ioctl cmd 2148553947 [ 634.129599][T16678] tap0: tun_chr_ioctl cmd 2147767521 [ 634.228867][T16683] tipc: Enabling of bearer rejected, failed to enable media [ 634.538402][T16701] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 634.549686][T16701] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 635.871060][T16739] netlink: 'syz.1.2628': attribute type 11 has an invalid length. [ 636.623585][T16769] syzkaller0: entered promiscuous mode [ 636.640201][T16776] __nla_validate_parse: 10 callbacks suppressed [ 636.640222][T16776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2639'. [ 636.664580][T16769] syzkaller0: entered allmulticast mode [ 636.671995][T16776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2639'. [ 636.821136][T16789] netlink: 'syz.3.2642': attribute type 5 has an invalid length. [ 636.943197][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2642'. [ 636.979853][T16793] ip6gre2: entered promiscuous mode [ 636.999472][T16793] ip6gre2: entered allmulticast mode [ 637.127314][T16801] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2645'. [ 637.232668][T16241] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 637.337924][T16813] 8021q: adding VLAN 0 to HW filter on device bond7 [ 637.653120][T16825] x_tables: duplicate underflow at hook 2 [ 637.694616][T16826] bond0: (slave rose0): Enslaving as an active interface with an up link [ 637.787888][T16822] wg1 speed is unknown, defaulting to 1000 [ 637.795675][T16822] lo speed is unknown, defaulting to 1000 [ 637.862116][T16839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2656'. [ 637.903719][T16241] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 637.907673][T16839] block nbd0: reconnected socket [ 637.980830][ T5830] block nbd0: Receive control failed (result -32) [ 637.988818][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 638.200566][T16837] syzkaller0: entered promiscuous mode [ 638.206317][T16837] syzkaller0: entered allmulticast mode [ 638.846594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 638.854862][ C1] lec:lec_tx_timeout: lec0 [ 640.372458][ T11] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 150 seconds [ 640.385608][ T11] block nbd0: Possible stuck request ffff888025110200: control (read@1024,1024B). Runtime 150 seconds [ 640.397075][ T11] block nbd0: Possible stuck request ffff888025110400: control (read@2048,1024B). Runtime 150 seconds [ 640.430651][T16919] block nbd0: Dead connection, failed to find a fallback [ 640.453547][ T11] block nbd0: Possible stuck request ffff888025110600: control (read@3072,1024B). Runtime 150 seconds [ 640.465800][T16919] block nbd0: shutting down sockets [ 640.479912][T16919] blk_print_req_error: 137 callbacks suppressed [ 640.479931][T16919] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.501160][T16919] buffer_io_error: 138 callbacks suppressed [ 640.501179][T16919] Buffer I/O error on dev nbd0, logical block 1, async page read [ 640.524460][T16919] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.534131][T16919] Buffer I/O error on dev nbd0, logical block 0, async page read [ 640.542164][T16919] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.552073][T16919] Buffer I/O error on dev nbd0, logical block 3, async page read [ 640.560067][T16919] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.570609][T16919] Buffer I/O error on dev nbd0, logical block 2, async page read [ 640.580074][T14357] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.590177][T14357] Buffer I/O error on dev nbd0, logical block 0, async page read [ 640.598394][T14357] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.609844][T14357] Buffer I/O error on dev nbd0, logical block 1, async page read [ 640.617872][T14357] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.627537][T14357] Buffer I/O error on dev nbd0, logical block 2, async page read [ 640.635325][T14357] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.645277][T14357] Buffer I/O error on dev nbd0, logical block 3, async page read [ 640.653436][T14357] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.663384][T14357] Buffer I/O error on dev nbd0, logical block 0, async page read [ 640.671508][T14357] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 640.681357][T14357] Buffer I/O error on dev nbd0, logical block 1, async page read [ 640.699811][T14357] ldm_validate_partition_table(): Disk read failed. [ 640.707590][T14357] Dev nbd0: unable to read RDB block 0 [ 640.713736][T14357] nbd0: unable to read partition table [ 640.730145][T14357] ldm_validate_partition_table(): Disk read failed. [ 640.738338][T14357] Dev nbd0: unable to read RDB block 0 [ 640.744436][T14357] nbd0: unable to read partition table [ 641.215046][T16911] wg1 speed is unknown, defaulting to 1000 [ 641.238805][T16911] lo speed is unknown, defaulting to 1000 [ 641.638698][T16946] FAULT_INJECTION: forcing a failure. [ 641.638698][T16946] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 641.657149][T16946] CPU: 0 UID: 0 PID: 16946 Comm: syz.0.2673 Not tainted syzkaller #0 PREEMPT(full) [ 641.657178][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.657191][T16946] Call Trace: [ 641.657199][T16946] [ 641.657208][T16946] dump_stack_lvl+0xe8/0x150 [ 641.657239][T16946] should_fail_ex+0x414/0x560 [ 641.657270][T16946] _copy_from_user+0x2d/0xb0 [ 641.657295][T16946] ___sys_sendmsg+0x158/0x2a0 [ 641.657320][T16946] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.657358][T16946] ? sb_end_write+0xe9/0x1c0 [ 641.657400][T16946] ? __pfx_vfs_write+0x10/0x10 [ 641.657429][T16946] __x64_sys_sendmsg+0x19b/0x260 [ 641.657452][T16946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.657482][T16946] ? __pfx_ksys_write+0x10/0x10 [ 641.657508][T16946] do_syscall_64+0xec/0xf80 [ 641.657529][T16946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.657548][T16946] ? trace_irq_disable+0x37/0x100 [ 641.657572][T16946] ? clear_bhb_loop+0x60/0xb0 [ 641.657594][T16946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.657612][T16946] RIP: 0033:0x7fe35dd8f749 [ 641.657629][T16946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.657647][T16946] RSP: 002b:00007fe35ebb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.657668][T16946] RAX: ffffffffffffffda RBX: 00007fe35dfe5fa0 RCX: 00007fe35dd8f749 [ 641.657683][T16946] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 641.657696][T16946] RBP: 00007fe35ebb8090 R08: 0000000000000000 R09: 0000000000000000 [ 641.657708][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.657719][T16946] R13: 00007fe35dfe6038 R14: 00007fe35dfe5fa0 R15: 00007ffc77c2d638 [ 641.657756][T16946] [ 641.874361][T16952] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 642.007560][T16962] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 642.015418][T16962] netlink: 15062 bytes leftover after parsing attributes in process `syz.0.2677'. [ 642.135701][T16963] netem: change failed [ 642.218533][T16961] wg1 speed is unknown, defaulting to 1000 [ 642.230035][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 642.268468][T16967] openvswitch: netlink: Flow actions attr not present in new flow. [ 642.298710][T16961] lo speed is unknown, defaulting to 1000 [ 642.306644][T16973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2680'. [ 642.707992][T16980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2683'. [ 643.031594][T17006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2688'. [ 643.066681][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 643.200449][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'. [ 643.303114][T17026] x_tables: duplicate underflow at hook 2 [ 643.331287][T17026] x_tables: duplicate underflow at hook 2 [ 643.610875][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 643.643746][T17045] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 643.707453][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 643.792242][T17054] netlink: 'syz.0.2701': attribute type 13 has an invalid length. [ 644.214583][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 644.349892][T17078] netlink: 'syz.4.2707': attribute type 1 has an invalid length. [ 646.352628][T17101] tipc: Enabling of bearer rejected, failed to enable media [ 647.029119][T17163] netlink: 'syz.1.2729': attribute type 2 has an invalid length. [ 647.269781][T17179] __nla_validate_parse: 6 callbacks suppressed [ 647.269799][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 647.301426][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 647.362470][T17185] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2736'. [ 647.395072][T17186] batadv2: entered allmulticast mode [ 647.402761][T17186] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 647.414001][T17185] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2736'. [ 647.444410][T17177] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2733'. [ 647.567320][T17190] tipc: Enabled bearer , priority 0 [ 647.613377][T17190] syzkaller0: entered promiscuous mode [ 647.626248][T17190] syzkaller0: entered allmulticast mode [ 647.686781][T17190] tipc: Resetting bearer [ 647.706466][T17190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2737'. [ 647.749230][T17190] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2737'. [ 647.778018][T17189] tipc: Resetting bearer [ 647.859931][T17189] tipc: Disabling bearer [ 647.974180][T17212] bond5: option arp_validate: invalid value (18446744073491447809) [ 647.985355][T17212] bond5 (unregistering): Released all slaves [ 647.993463][T17223] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2743'. [ 648.010743][T17219] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 648.018568][T17219] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 648.033656][T17221] wg1 speed is unknown, defaulting to 1000 [ 648.041961][T17221] lo speed is unknown, defaulting to 1000 [ 648.059426][T17225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2745'. [ 648.071316][T17225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2745'. [ 648.216638][T17230] x_tables: duplicate underflow at hook 3 [ 648.775353][T17236] FAULT_INJECTION: forcing a failure. [ 648.775353][T17236] name failslab, interval 1, probability 0, space 0, times 1 [ 648.840945][T17236] CPU: 0 UID: 0 PID: 17236 Comm: syz.3.2748 Not tainted syzkaller #0 PREEMPT(full) [ 648.840974][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.840986][T17236] Call Trace: [ 648.840994][T17236] [ 648.841002][T17236] dump_stack_lvl+0xe8/0x150 [ 648.841033][T17236] should_fail_ex+0x414/0x560 [ 648.841068][T17236] should_failslab+0xa8/0x100 [ 648.841095][T17236] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 648.841128][T17236] ? __alloc_skb+0x1dc/0x3a0 [ 648.841147][T17236] ? __local_bh_enable_ip+0xd0/0x130 [ 648.841170][T17236] ? __alloc_skb+0x198/0x3a0 [ 648.841190][T17236] __alloc_skb+0x1dc/0x3a0 [ 648.841215][T17236] netlink_ack+0x146/0xa50 [ 648.841237][T17236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.841253][T17236] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 648.841275][T17236] ? __pfx_nl80211_post_doit+0x10/0x10 [ 648.841310][T17236] netlink_rcv_skb+0x28c/0x470 [ 648.841338][T17236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.841358][T17236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 648.841379][T17236] ? genl_rcv+0x19/0x40 [ 648.841425][T17236] ? down_read+0x274/0x2e0 [ 648.841445][T17236] ? genl_rcv+0xd/0x40 [ 648.841475][T17236] genl_rcv+0x28/0x40 [ 648.841501][T17236] netlink_unicast+0x82f/0x9e0 [ 648.841533][T17236] ? __pfx_netlink_unicast+0x10/0x10 [ 648.841553][T17236] ? __alloc_skb+0x198/0x3a0 [ 648.841580][T17236] ? netlink_sendmsg+0x642/0xb30 [ 648.841603][T17236] ? skb_put+0x11b/0x210 [ 648.841628][T17236] netlink_sendmsg+0x805/0xb30 [ 648.841663][T17236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.841691][T17236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 648.841718][T17236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 648.841737][T17236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.841763][T17236] __sock_sendmsg+0x21c/0x270 [ 648.841794][T17236] ____sys_sendmsg+0x505/0x820 [ 648.841823][T17236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.841865][T17236] ? import_iovec+0x74/0xa0 [ 648.841893][T17236] ___sys_sendmsg+0x21f/0x2a0 [ 648.841919][T17236] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.841965][T17236] ? sb_end_write+0xe9/0x1c0 [ 648.842003][T17236] ? __pfx_vfs_write+0x10/0x10 [ 648.842033][T17236] __x64_sys_sendmsg+0x19b/0x260 [ 648.842060][T17236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.842094][T17236] ? __pfx_ksys_write+0x10/0x10 [ 648.842125][T17236] do_syscall_64+0xec/0xf80 [ 648.842144][T17236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.842162][T17236] ? trace_irq_disable+0x37/0x100 [ 648.842187][T17236] ? clear_bhb_loop+0x60/0xb0 [ 648.842211][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.842230][T17236] RIP: 0033:0x7fbc1318f749 [ 648.842247][T17236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.842265][T17236] RSP: 002b:00007fbc140a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.842286][T17236] RAX: ffffffffffffffda RBX: 00007fbc133e5fa0 RCX: 00007fbc1318f749 [ 648.842302][T17236] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 648.842314][T17236] RBP: 00007fbc140a2090 R08: 0000000000000000 R09: 0000000000000000 [ 648.842327][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.842338][T17236] R13: 00007fbc133e6038 R14: 00007fbc133e5fa0 R15: 00007fff90854708 [ 648.842369][T17236] [ 649.365009][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.369200][T17254] ip6t_REJECT: ECHOREPLY is not supported [ 649.375357][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.385489][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.526883][T17289] x_tables: duplicate underflow at hook 1 [ 650.620946][T17256] infiniband syz2: set down [ 650.626148][ T39] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.650955][T17256] infiniband syz2: added ip6_vti0 [ 650.692318][T17256] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 650.694472][T17256] infiniband syz2: Couldn't open port 1 [ 650.762725][T17256] RDS/IB: syz2: added [ 650.777888][T17256] smc: adding ib device syz2 with port count 1 [ 650.824876][T17256] smc: ib device syz2 port 1 has no pnetid [ 650.844147][ T39] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.853703][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.170242][T17321] FAULT_INJECTION: forcing a failure. [ 651.170242][T17321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.184505][T17321] CPU: 0 UID: 0 PID: 17321 Comm: syz.0.2772 Not tainted syzkaller #0 PREEMPT(full) [ 651.184533][T17321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.184545][T17321] Call Trace: [ 651.184553][T17321] [ 651.184562][T17321] dump_stack_lvl+0xe8/0x150 [ 651.184600][T17321] should_fail_ex+0x414/0x560 [ 651.184635][T17321] _copy_to_user+0x31/0xb0 [ 651.184660][T17321] simple_read_from_buffer+0xe1/0x170 [ 651.184689][T17321] proc_fail_nth_read+0x1b3/0x220 [ 651.184714][T17321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.184738][T17321] ? rw_verify_area+0x2a6/0x4d0 [ 651.184756][T17321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.184778][T17321] vfs_read+0x200/0xa30 [ 651.184804][T17321] ? __pfx_vfs_read+0x10/0x10 [ 651.184832][T17321] ? __x64_sys_sendmsg+0x1b4/0x260 [ 651.184866][T17321] ksys_read+0x145/0x250 [ 651.184890][T17321] ? __pfx_ksys_read+0x10/0x10 [ 651.184920][T17321] do_syscall_64+0xec/0xf80 [ 651.184940][T17321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.184958][T17321] ? trace_irq_disable+0x37/0x100 [ 651.184983][T17321] ? clear_bhb_loop+0x60/0xb0 [ 651.185006][T17321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.185025][T17321] RIP: 0033:0x7fe35dd8e15c [ 651.185042][T17321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 651.185060][T17321] RSP: 002b:00007fe35ebb8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 651.185081][T17321] RAX: ffffffffffffffda RBX: 00007fe35dfe5fa0 RCX: 00007fe35dd8e15c [ 651.185096][T17321] RDX: 000000000000000f RSI: 00007fe35ebb80a0 RDI: 000000000000000a [ 651.185108][T17321] RBP: 00007fe35ebb8090 R08: 0000000000000000 R09: 0000000000000000 [ 651.185121][T17321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.185132][T17321] R13: 00007fe35dfe6038 R14: 00007fe35dfe5fa0 R15: 00007ffc77c2d638 [ 651.185173][T17321] [ 651.570423][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.637621][T17324] tipc: Enabled bearer , priority 0 [ 651.646494][ T5151] Bluetooth: hci1: command 0x0405 tx timeout [ 651.655208][T17324] syzkaller0: entered promiscuous mode [ 651.737290][T17324] syzkaller0: entered allmulticast mode [ 651.780169][T17324] tipc: Resetting bearer [ 651.811111][T17323] tipc: Resetting bearer [ 651.864405][T17323] tipc: Disabling bearer [ 652.010222][T17332] wg1 speed is unknown, defaulting to 1000 [ 652.044300][T17332] lo speed is unknown, defaulting to 1000 [ 652.068236][T17344] netlink: 'syz.2.2779': attribute type 41 has an invalid length. [ 652.203609][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.409286][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.420236][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.431339][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.442422][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.451221][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.707345][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.707541][T17360] wg1 speed is unknown, defaulting to 1000 [ 652.739394][T17360] lo speed is unknown, defaulting to 1000 [ 652.939048][T17370] __nla_validate_parse: 81 callbacks suppressed [ 652.939068][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 653.015928][ T5837] bridge0: port 2(syz_tun) entered disabled state [ 653.098997][ T5837] syz_tun (unregistering): left allmulticast mode [ 653.105655][ T5837] syz_tun (unregistering): left promiscuous mode [ 653.136218][ T5837] bridge0: port 2(syz_tun) entered disabled state [ 653.265686][T17360] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.467623][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.845099][T17360] chnl_net:caif_netlink_parms(): no params data found [ 654.034584][T17256] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.153742][T17360] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.166032][T17360] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.182999][T17360] bridge_slave_0: entered allmulticast mode [ 654.193264][T17360] bridge_slave_0: entered promiscuous mode [ 654.209132][T17360] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.217228][T17360] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.225143][T17360] bridge_slave_1: entered allmulticast mode [ 654.234463][T17360] bridge_slave_1: entered promiscuous mode [ 654.371876][T17360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.399422][T17402] netlink: 211792 bytes leftover after parsing attributes in process `syz.1.2791'. [ 654.422555][T17360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.527430][ T5151] Bluetooth: hci2: command tx timeout [ 654.588059][T17360] team0: Port device team_slave_0 added [ 654.605789][T17360] team0: Port device team_slave_1 added [ 654.627892][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2792'. [ 655.102220][T17417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2795'. [ 655.305474][T17360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.324793][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.416315][T17360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.498737][T17360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.508872][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.568734][T17360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.765425][T17360] hsr_slave_0: entered promiscuous mode [ 655.783353][T17360] hsr_slave_1: entered promiscuous mode [ 655.836238][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'. [ 655.921502][T17456] veth1_to_team: Caught tx_queue_len zero misconfig [ 656.001152][T17458] macsec2: entered promiscuous mode [ 656.016294][T17458] macsec2: entered allmulticast mode [ 656.108284][T17471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 656.142417][T17474] siw: device registration error -23 [ 656.219598][T17474] xt_TCPMSS: Only works on TCP SYN packets [ 656.420167][T17490] : entered promiscuous mode [ 656.606622][ T5151] Bluetooth: hci2: command tx timeout [ 656.684440][T17360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 656.692148][T17501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2818'. [ 656.750165][T17360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 656.787841][T17360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 656.814750][T17360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 657.233921][T17360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.264904][T17360] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.281321][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.288548][T14918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.335402][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.342685][ T8610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.367879][T17531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2828'. [ 657.382442][T17531] tipc: Can't bind to reserved service type 2 [ 657.758111][T17360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.932026][T17562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2838'. [ 657.950349][T17562] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2838'. [ 658.109167][T17574] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 658.139825][T17574] syzkaller0: entered promiscuous mode [ 658.145333][T17574] syzkaller0: entered allmulticast mode [ 658.222206][T17360] veth0_vlan: entered promiscuous mode [ 658.240914][T17360] veth1_vlan: entered promiscuous mode [ 658.302163][T17360] veth0_macvtap: entered promiscuous mode [ 658.311573][T17580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2842'. [ 658.325817][T17360] veth1_macvtap: entered promiscuous mode [ 658.341595][T17582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2843'. [ 658.375428][T17580] netlink: 'syz.1.2842': attribute type 2 has an invalid length. [ 658.391184][T17360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.400531][T17580] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 658.412107][T17360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.419137][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'. [ 658.430562][T17584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2842'. [ 658.463045][ T8610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.473118][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2843'. [ 658.499734][ T8610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.520423][ T8610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.545733][ T8610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.665908][ T8604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.686765][ T5151] Bluetooth: hci2: command tx timeout [ 658.715874][ T8604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.788841][T14918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.797747][T14918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.812686][T17592] wg1 speed is unknown, defaulting to 1000 [ 658.822590][T17592] lo speed is unknown, defaulting to 1000 [ 658.831881][T17592] ip6_vti0 speed is unknown, defaulting to 1000 [ 658.974766][T17606] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2847'. [ 659.273838][T17609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2849'. [ 659.336762][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2849'. [ 659.483423][T17616] syzkaller0: entered promiscuous mode [ 659.510866][T17616] syzkaller0: entered allmulticast mode [ 659.928827][T17638] netlink: 'syz.4.2854': attribute type 39 has an invalid length. [ 660.769219][ T5151] Bluetooth: hci2: command tx timeout [ 661.754764][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 663.448286][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.476806][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.485739][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.499425][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.507533][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.737338][T17731] wg1 speed is unknown, defaulting to 1000 [ 663.819663][T17731] lo speed is unknown, defaulting to 1000 [ 663.837914][T17731] ip6_vti0 speed is unknown, defaulting to 1000 [ 663.901299][T17751] __nla_validate_parse: 4 callbacks suppressed [ 663.901319][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 663.952982][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 663.967794][T17749] netlink: 'syz.4.2887': attribute type 1 has an invalid length. [ 663.986398][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 664.042048][T17751] gretap1: entered promiscuous mode [ 664.062902][T17751] batman_adv: batadv0: Adding interface: gretap1 [ 664.068111][T17760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'. [ 664.080103][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 664.086238][T17751] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 664.109562][T17751] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 664.139230][T17763] netlink: 'syz.2.2891': attribute type 1 has an invalid length. [ 664.160520][T17755] wg1 speed is unknown, defaulting to 1000 [ 664.203599][T17760] : entered promiscuous mode [ 664.246904][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 664.274482][T17763] bond8: entered promiscuous mode [ 664.287112][T17763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 664.300321][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2891'. [ 664.321563][T17766] 8021q: adding VLAN 0 to HW filter on device bond8 [ 664.329010][T17766] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 664.339342][T17766] bond8: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 664.349023][T17766] bond8: (slave gre1): Opening slave failed [ 664.365256][T17755] lo speed is unknown, defaulting to 1000 [ 664.407325][T17755] ip6_vti0 speed is unknown, defaulting to 1000 [ 664.561980][T17780] netlink: 'syz.0.2894': attribute type 1 has an invalid length. [ 664.580515][T17780] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2894'. [ 664.805063][T17790] netlink: 'syz.2.2898': attribute type 1 has an invalid length. [ 664.937095][T17790] bond9: entered promiscuous mode [ 664.950744][T17790] 8021q: adding VLAN 0 to HW filter on device bond9 [ 664.958435][T17799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 664.965805][T17799] IPv6: NLM_F_CREATE should be set when creating new route [ 664.973093][T17799] IPv6: NLM_F_CREATE should be set when creating new route [ 664.982053][T17799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.040113][T17802] x_tables: duplicate underflow at hook 1 [ 665.061785][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'. [ 665.072311][T17796] 8021q: adding VLAN 0 to HW filter on device bond9 [ 665.079723][T17796] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 665.097880][T17796] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 665.127365][T17796] bond9: (slave wireguard0): making interface the new active one [ 665.135446][T17796] wireguard0: entered promiscuous mode [ 665.144294][T17796] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 665.277676][T17785] wg1 speed is unknown, defaulting to 1000 [ 665.379536][ T8607] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 665.394287][ T8607] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - e6:40:d1:2f:8c:ab - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 665.419917][ T8607] bond1 (unregistering): (slave erspan0): making interface the new active one [ 665.450140][T17809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2902'. [ 665.552962][ T8607] bond1 (unregistering): (slave erspan0): Releasing active interface [ 665.574608][ T5830] Bluetooth: hci3: command tx timeout [ 665.675680][ T8607] dvmrp0 (unregistering): left allmulticast mode [ 666.008548][ T8607] bond3 (unregistering): (slave bridge0): Releasing active interface [ 666.211408][ T8607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.221744][ T8607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.231754][ T8607] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 666.240803][ T8607] bond0 (unregistering): Released all slaves [ 666.353003][ T8607] bond1 (unregistering): (slave veth5): Releasing active interface [ 666.362626][ T8607] bond1 (unregistering): Released all slaves [ 666.375236][ T8607] bond2 (unregistering): Released all slaves [ 666.387441][ T8607] bond3 (unregistering): Released all slaves [ 666.400462][ T8607] bond4 (unregistering): Released all slaves [ 666.522434][ T8607] bond5 (unregistering): Released all slaves [ 666.534596][ T8607] bond6 (unregistering): Released all slaves [ 666.546969][ T8607] bond7 (unregistering): Released all slaves [ 666.558539][T17785] lo speed is unknown, defaulting to 1000 [ 666.624273][T17785] ip6_vti0 speed is unknown, defaulting to 1000 [ 666.841833][ T8607] tipc: Disabling bearer [ 666.889455][ T8607] tipc: Left network mode [ 666.914617][T17731] chnl_net:caif_netlink_parms(): no params data found [ 667.037303][ T8607] IPVS: stopping backup sync thread 7715 ... [ 667.377460][T17843] SET target dimension over the limit! [ 667.418274][T17839] 8021q: adding VLAN 0 to HW filter on device bond10 [ 667.425762][T17839] bridge0: port 1(bond10) entered blocking state [ 667.432673][T17839] bridge0: port 1(bond10) entered disabled state [ 667.439610][T17839] bond10: entered allmulticast mode [ 667.448273][T17839] bond10: entered promiscuous mode [ 667.454369][T17839] bridge0: port 1(bond10) entered blocking state [ 667.460904][T17839] bridge0: port 1(bond10) entered forwarding state [ 667.564052][T13221] bridge0: port 1(bond10) entered disabled state [ 667.610432][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.636324][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.646599][ T5830] Bluetooth: hci3: command tx timeout [ 667.660384][T17731] bridge_slave_0: entered allmulticast mode [ 667.670089][T17731] bridge_slave_0: entered promiscuous mode [ 667.733069][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.756582][T17731] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.789984][T17731] bridge_slave_1: entered allmulticast mode [ 667.801070][T17731] bridge_slave_1: entered promiscuous mode [ 667.904348][T17861] syzkaller0: entered promiscuous mode [ 667.910105][T17861] syzkaller0: entered allmulticast mode [ 669.679509][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.727830][ T5830] Bluetooth: hci3: command tx timeout [ 669.729213][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.046503][T17731] team0: Port device team_slave_0 added [ 670.147956][T17731] team0: Port device team_slave_1 added [ 670.286906][T17731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.294447][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.365201][T17731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.438654][T17899] netlink: 'syz.3.2921': attribute type 1 has an invalid length. [ 670.460090][T17731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.471558][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.499681][T17731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.568150][T17906] __nla_validate_parse: 4 callbacks suppressed [ 670.568168][T17906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2921'. [ 670.730852][T17899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 670.857504][T17895] tipc: Enabled bearer , priority 0 [ 670.928858][T17912] tipc: Resetting bearer [ 671.007321][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.015696][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.809761][ T5830] Bluetooth: hci3: command tx timeout [ 672.628305][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2919'. [ 672.659467][T17888] tipc: Disabling bearer [ 672.743272][T17731] hsr_slave_0: entered promiscuous mode [ 672.778755][T17731] hsr_slave_1: entered promiscuous mode [ 672.805918][T17731] debugfs: 'hsr0' already exists in 'hsr' [ 672.826370][T17731] Cannot create hsr debugfs directory [ 673.070503][T17928] wg1 speed is unknown, defaulting to 1000 [ 673.118564][T17928] lo speed is unknown, defaulting to 1000 [ 673.278954][T17928] ip6_vti0 speed is unknown, defaulting to 1000 [ 673.744189][ T8607] IPVS: stop unused estimator thread 0... [ 673.838299][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2931'. [ 673.974102][T17957] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 673.974102][T17958] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 674.130575][T17958] bond11: entered promiscuous mode [ 674.136711][T17958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 674.887320][T17976] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2937'. [ 674.952052][T17977] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2937'. [ 675.056247][T17731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 675.071226][T17731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 675.161112][T17731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 675.220878][T17731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 675.287515][T17991] openvswitch: netlink: Message has 572 unknown bytes. [ 675.294682][T17991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.412178][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2942'. [ 675.482856][T17731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.562524][T17731] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.597023][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.604260][ T8602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.666008][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.673973][ T8602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.780907][T18007] syzkaller0: entered promiscuous mode [ 675.796299][T18007] syzkaller0: entered allmulticast mode [ 675.889865][T18008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2943'. [ 675.965078][T18007] tipc: Enabled bearer , priority 0 [ 676.082178][T18000] tipc: Resetting bearer [ 676.107526][T17926] Set syz1 is full, maxelem 65536 reached [ 676.125909][T18000] tipc: Disabling bearer [ 676.270231][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 676.485051][T17731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.605144][T17731] veth0_vlan: entered promiscuous mode [ 676.641084][T17731] veth1_vlan: entered promiscuous mode [ 676.722593][T17731] veth0_macvtap: entered promiscuous mode [ 676.750152][T17731] veth1_macvtap: entered promiscuous mode [ 676.800959][T17731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.845888][T17731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.897122][T13221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.941166][T13221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.980921][T13221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.027196][T13221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.097649][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 677.178970][T18062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2957'. [ 677.209855][T13221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.223874][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2957'. [ 677.235125][T13221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.251233][T18062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2957'. [ 677.309330][T18068] syzkaller1: entered promiscuous mode [ 677.314878][T18068] syzkaller1: entered allmulticast mode [ 677.362507][T18064] delete_channel: no stack [ 677.388989][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.402743][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.592130][T18078] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20003 [ 677.633052][T18083] netlink: 'syz.1.2877': attribute type 2 has an invalid length. [ 677.675414][T18083] netlink: 'syz.1.2877': attribute type 9 has an invalid length. [ 677.680991][T18087] ip6gre3: entered promiscuous mode [ 677.696333][T18087] ip6gre3: entered allmulticast mode [ 677.715603][T18083] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2877'. [ 677.738059][T18087] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 678.047758][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 678.062771][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 678.087572][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 678.106274][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 678.114035][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 678.243002][T18099] wg1 speed is unknown, defaulting to 1000 [ 678.298565][T18099] lo speed is unknown, defaulting to 1000 [ 678.330534][T18099] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.875516][ T5829] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 679.288284][ T5829] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 679.645932][T18099] chnl_net:caif_netlink_parms(): no params data found [ 679.669013][T18153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.707395][T18149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.813841][T18159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2988'. [ 679.881118][T18159] pim6reg: entered allmulticast mode [ 679.915950][T18159] pim6reg: left allmulticast mode [ 679.939232][T18160] netlink: 'syz.1.2988': attribute type 6 has an invalid length. [ 679.974916][T18160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2988'. [ 680.034953][T18159] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2988'. [ 680.206225][ T5151] Bluetooth: hci0: command tx timeout [ 680.222583][ T8613] bond10: left allmulticast mode [ 680.228313][ T8613] bond10: left promiscuous mode [ 680.239672][ T8613] bridge0: port 1(bond10) entered disabled state [ 681.051354][ T8613] bond0 (unregistering): Released all slaves [ 681.073856][ T8613] bond1 (unregistering): Released all slaves [ 681.253950][ T8613] bond2 (unregistering): Released all slaves [ 681.271823][ T8613] bond3 (unregistering): Released all slaves [ 681.290991][ T8613] bond4 (unregistering): Released all slaves [ 681.438970][ T8613] bond5 (unregistering): Released all slaves [ 681.457358][ T8613] bond6 (unregistering): Released all slaves [ 681.598035][ T8613] bond7 (unregistering): Released all slaves [ 681.723961][ T8613] bond8 (unregistering): Released all slaves [ 681.840077][ T8613] bond9 (unregistering): (slave wireguard0): Releasing backup interface [ 681.848748][ T8613] wireguard0: left promiscuous mode [ 681.855307][ T8613] bond9 (unregistering): Released all slaves [ 681.970830][ T8613] bond10 (unregistering): Released all slaves [ 682.073489][ T8613] bond11 (unregistering): Released all slaves [ 682.086997][ T8613] bond12 (unregistering): Released all slaves [ 682.098613][T18099] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.105978][T18099] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.113551][T18099] bridge_slave_0: entered allmulticast mode [ 682.120909][T18099] bridge_slave_0: entered promiscuous mode [ 682.170987][T18099] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.183578][T18099] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.192697][T18099] bridge_slave_1: entered allmulticast mode [ 682.206269][T18099] bridge_slave_1: entered promiscuous mode [ 682.267022][ T8613] : left promiscuous mode [ 682.288765][ T5151] Bluetooth: hci0: command tx timeout [ 682.355810][T18099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.372288][T18099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.376997][T18196] netlink: 'syz.3.2995': attribute type 1 has an invalid length. [ 682.396766][ T8613] : left promiscuous mode [ 682.401838][T18196] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2995'. [ 682.511961][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'. [ 682.530933][T18205] netlink: 'syz.0.2997': attribute type 21 has an invalid length. [ 682.577551][T18206] netlink: 'syz.0.2997': attribute type 21 has an invalid length. [ 682.675150][T18198] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.682695][T18198] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.761339][T18198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.781396][T18198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.892837][T18205] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 682.904400][T18205] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2997'. [ 682.915330][T18206] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 682.925700][T18206] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2997'. [ 682.935299][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 682.972841][ T8613] tipc: Disabling bearer [ 682.982675][ T8613] tipc: Left network mode [ 682.999418][ T3595] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.009407][ T3595] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.038816][T18099] team0: Port device team_slave_0 added [ 683.045851][ T3595] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.072202][ T3595] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.127803][T18099] team0: Port device team_slave_1 added [ 683.144812][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 683.154270][T18223] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3001'. [ 683.179625][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 683.191064][T18223] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3001'. [ 683.202208][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 683.328027][T18099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.332735][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3005'. [ 683.350305][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.384242][T18099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.409106][T18099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.417160][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.456153][T18099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.610596][T18244] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 683.670196][T18244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 683.707147][T18099] hsr_slave_0: entered promiscuous mode [ 683.714026][T18099] hsr_slave_1: entered promiscuous mode [ 683.722656][T18099] debugfs: 'hsr0' already exists in 'hsr' [ 683.729136][T18099] Cannot create hsr debugfs directory [ 683.793024][T18244] veth9: entered promiscuous mode [ 683.899489][T18247] erspan0: entered allmulticast mode [ 683.945644][ T5936] IPVS: starting estimator thread 0... [ 684.059514][T18252] IPVS: using max 29 ests per chain, 69600 per kthread [ 684.290011][T18267] netlink: 'syz.1.3016': attribute type 1 has an invalid length. [ 684.368655][ T5151] Bluetooth: hci0: command tx timeout [ 685.525900][T16243] lo speed is unknown, defaulting to 1000 [ 685.539410][T16243] infiniband syz1: ib_query_port failed (-19) [ 685.813923][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 686.448460][ T5151] Bluetooth: hci0: command tx timeout [ 687.469727][T18297] ip6_vti0 speed is unknown, defaulting to 1000 [ 687.845813][ T8613] IPVS: stop unused estimator thread 0... [ 687.960160][T18318] tipc: Cannot configure node identity twice [ 688.252807][T18334] netlink: 'syz.3.3029': attribute type 10 has an invalid length. [ 688.523154][T18099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 688.608546][T18099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 688.640520][T18099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 688.675740][T18099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 688.909993][T18099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.958863][T18099] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.992233][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.999675][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.014184][T18372] __nla_validate_parse: 4 callbacks suppressed [ 689.014213][T18372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3038'. [ 689.038599][T18374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3038'. [ 689.061090][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.068712][ T8602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.359491][T18390] ip6gre1: entered allmulticast mode [ 689.552629][T18099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.668616][T18099] veth0_vlan: entered promiscuous mode [ 689.688344][T18099] veth1_vlan: entered promiscuous mode [ 689.729440][T18099] veth0_macvtap: entered promiscuous mode [ 689.738999][T18405] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3048'. [ 689.743108][T18099] veth1_macvtap: entered promiscuous mode [ 689.762931][T18405] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3048'. [ 689.780533][T18099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.785965][T18405] netlink: 'syz.4.3048': attribute type 5 has an invalid length. [ 689.799548][T18405] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3048'. [ 689.824510][T18099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.863895][T18409] macvlan2: entered promiscuous mode [ 689.870220][T18409] bond0: entered promiscuous mode [ 689.875598][T18409] macvlan2: entered allmulticast mode [ 689.881162][T18409] bond0: entered allmulticast mode [ 689.888261][T18409] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 689.897394][T18409] bond0: left allmulticast mode [ 689.902373][T18409] bond0: left promiscuous mode [ 689.953403][T16754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.991149][T16754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.007741][T16754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.022431][T16754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.676341][T16754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.684425][T16754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.745937][ T8610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.770294][ T8610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.846108][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 690.854310][ C1] lec:lec_tx_timeout: lec0 [ 691.037355][T18461] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 691.046576][T18456] netlink: 'syz.2.2968': attribute type 13 has an invalid length. [ 691.054514][T18456] netlink: 'syz.2.2968': attribute type 27 has an invalid length. [ 691.100147][T18466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3064'. [ 691.112806][T18466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3064'. [ 691.306756][T18469] netlink: 4308 bytes leftover after parsing attributes in process `syz.0.3065'. [ 691.361930][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3067'. [ 691.523074][T18486] tipc: Enabled bearer , priority 0 [ 691.541278][T18486] syzkaller0: entered promiscuous mode [ 691.548583][T18495] netlink: 'syz.0.3070': attribute type 21 has an invalid length. [ 691.556998][T18486] syzkaller0: entered allmulticast mode [ 691.564591][T18495] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3070'. [ 691.576221][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 691.610128][T18486] tipc: Resetting bearer [ 691.633254][T18497] syzkaller0: entered promiscuous mode [ 691.639349][T18497] syzkaller0: entered allmulticast mode [ 691.679101][T18486] tipc: Resetting bearer [ 691.699205][T18486] tipc: Disabling bearer [ 691.932381][T18515] ip6_vti0 speed is unknown, defaulting to 1000 [ 692.166436][T18528] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 692.314316][T18527] ip6_vti0 speed is unknown, defaulting to 1000 [ 692.742195][T18545] 8021q: VLANs not supported on ip6gre0 [ 692.841618][ T5900] IPVS: starting estimator thread 0... [ 692.880683][T18552] netlink: 'syz.3.3087': attribute type 21 has an invalid length. [ 692.954098][T18552] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 692.956167][T18551] IPVS: using max 29 ests per chain, 69600 per kthread [ 693.221844][T18559] syzkaller0: entered promiscuous mode [ 693.233476][T18559] syzkaller0: entered allmulticast mode [ 695.158902][T18603] tipc: Enabling of bearer rejected, failed to enable media [ 695.653286][T18625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.396417][T18629] __nla_validate_parse: 3 callbacks suppressed [ 696.396438][T18629] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3107'. [ 696.508485][T18633] netlink: 'syz.4.3107': attribute type 13 has an invalid length. [ 696.548474][T18636] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3109'. [ 696.719844][ T5886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.777343][T18656] x_tables: duplicate underflow at hook 1 [ 696.850404][T18657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 696.908560][T18633] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.916347][T18633] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.945966][T18659] IPVS: set_ctl: invalid protocol: 8 172.20.20.38:20000 [ 697.117119][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.137584][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.359409][T18668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3117'. [ 697.421597][T18656] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.429449][T18656] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.546735][T18656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.588657][T18656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.825443][T18663] netlink: 'syz.3.3116': attribute type 2 has an invalid length. [ 697.846671][ T8613] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.955658][ T8613] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.976231][ T8613] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.985378][ T8613] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.050402][T18679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3119'. [ 698.126798][ T8613] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.149392][ T8613] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.162152][ T8613] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.172682][T18685] netlink: 'syz.0.3120': attribute type 28 has an invalid length. [ 698.196297][ T8613] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.231648][T18669] ip6_vti0 speed is unknown, defaulting to 1000 [ 698.302620][T18687] syzkaller0: entered promiscuous mode [ 698.309539][T18692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3122'. [ 698.338250][T18687] syzkaller0: entered allmulticast mode [ 698.504597][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'. [ 698.549894][T18702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3124'. [ 698.608410][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3118'. [ 698.645342][T18681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3118'. [ 699.129098][T18716] ip6_vti0 speed is unknown, defaulting to 1000 [ 699.188981][T18724] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 700.055525][T18735] tipc: Enabled bearer , priority 0 [ 700.333106][T18740] syzkaller0: entered promiscuous mode [ 700.356245][T18740] syzkaller0: entered allmulticast mode [ 700.370257][T18725] tipc: Resetting bearer [ 700.372828][T18750] nbd: socks must be embedded in a SOCK_ITEM attr [ 700.555670][T18725] tipc: Disabling bearer [ 700.729618][T17741] udevd[17741]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 701.520950][T18803] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 701.542055][T18803] __nla_validate_parse: 4 callbacks suppressed [ 701.542075][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 701.572934][T18804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3146'. [ 701.573660][T18803] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 701.583046][T18804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3146'. [ 701.599408][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 702.587793][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 703.307042][T18806] delete_channel: no stack [ 703.660896][T18828] syzkaller0: entered promiscuous mode [ 703.690818][T18828] syzkaller0: entered allmulticast mode [ 704.176648][T18836] batadv1: entered promiscuous mode [ 704.270551][T18839] netlink: 'syz.0.3157': attribute type 1 has an invalid length. [ 704.326758][T18840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3156'. [ 704.466509][T18842] Bluetooth: MGMT ver 1.23 [ 704.573172][T18836] ip6_vti0 speed is unknown, defaulting to 1000 [ 705.247536][T18853] netlink: 'syz.4.3161': attribute type 4 has an invalid length. [ 706.147195][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'. [ 706.211943][T18865] ip6_vti0 speed is unknown, defaulting to 1000 [ 706.647200][T18868] ip6_vti0 speed is unknown, defaulting to 1000 [ 706.968137][T18879] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 707.498971][T18898] netlink: 'syz.0.3173': attribute type 10 has an invalid length. [ 707.552717][T18899] netlink: 'syz.0.3173': attribute type 10 has an invalid length. [ 707.641330][T18896] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3172'. [ 707.676617][T18896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.877030][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'. [ 707.922782][T18903] netlink: 'syz.1.3174': attribute type 26 has an invalid length. [ 708.111520][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3177'. [ 708.278180][T18915] dvmrp1: entered allmulticast mode [ 708.288307][T18915] dvmrp1: left allmulticast mode [ 708.312441][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 708.380086][T18922] netlink: 'syz.3.3178': attribute type 8 has an invalid length. [ 708.398210][T18922] netlink: 'syz.3.3178': attribute type 9 has an invalid length. [ 708.449882][T18922] netlink: 'syz.3.3178': attribute type 10 has an invalid length. [ 708.477864][T18922] netlink: 'syz.3.3178': attribute type 11 has an invalid length. [ 708.548044][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3178'. [ 708.846220][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 711.712938][T18955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3184'. [ 712.023458][T18983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3192'. [ 712.377114][T18998] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3194'. [ 712.406208][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 712.441990][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 712.454639][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 712.463451][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 712.471669][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 712.479879][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 712.595077][T19010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3198'. [ 712.640660][T19003] ip6_vti0 speed is unknown, defaulting to 1000 [ 712.706759][T19013] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3199'. [ 712.734339][T19013] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3199'. [ 712.797178][T19020] tunl0: Caught tx_queue_len zero misconfig [ 713.249459][T19047] netlink: 'syz.1.3206': attribute type 1 has an invalid length. [ 713.324338][T19056] netlink: 'syz.4.3207': attribute type 54 has an invalid length. [ 713.492600][T19063] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 713.504525][T19063] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 713.512944][T19063] CPU: 1 UID: 0 PID: 19063 Comm: syz.1.3206 Not tainted syzkaller #0 PREEMPT(full) [ 713.522520][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.532660][T19063] RIP: 0010:klist_remove+0x14a/0x340 [ 713.537952][T19063] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 01 d7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 01 d7 f6 49 8b 44 24 58 48 89 44 24 08 [ 713.557755][T19063] RSP: 0018:ffffc90005927960 EFLAGS: 00010202 [ 713.563849][T19063] RAX: 000000000000000b RBX: ffff8880773b0000 RCX: 0000000000000000 [ 713.571913][T19063] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 713.579893][T19063] RBP: ffffc90005927a60 R08: ffffffff8f68d143 R09: 1ffffffff1ed1a28 [ 713.588007][T19063] R10: dffffc0000000000 R11: fffffbfff1ed1a29 R12: 0000000000000000 [ 713.595985][T19063] R13: 1ffff110068c4c8c R14: ffff888034626460 R15: dffffc0000000000 [ 713.603953][T19063] FS: 00007f35f983f6c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 713.612884][T19063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.619689][T19063] CR2: 0000200000000280 CR3: 0000000029e3e000 CR4: 00000000003526f0 [ 713.627856][T19063] Call Trace: [ 713.631265][T19063] [ 713.634226][T19063] ? __pfx_klist_remove+0x10/0x10 [ 713.639423][T19063] ? kobject_move+0x5a6/0x6e0 [ 713.644096][T19063] ? __pfx_kobject_move+0x10/0x10 [ 713.649293][T19063] ? do_raw_spin_unlock+0x122/0x240 [ 713.654498][T19063] ? get_device_parent+0x366/0x3a0 [ 713.659953][T19063] device_move+0x193/0x730 [ 713.664549][T19063] hci_conn_del_sysfs+0xb8/0x1a0 [ 713.669576][T19063] hci_conn_del+0xc36/0x1240 [ 713.674166][T19063] hci_conn_hash_flush+0x191/0x260 [ 713.679326][T19063] hci_dev_close_sync+0x821/0x1100 [ 713.684725][T19063] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 713.690558][T19063] ? lockdep_hardirqs_on+0x7b/0x110 [ 713.695764][T19063] ? enable_work+0x1e9/0x220 [ 713.700384][T19063] hci_dev_close+0x108/0x270 [ 713.704983][T19063] sock_do_ioctl+0xdc/0x300 [ 713.709488][T19063] ? __pfx_sock_do_ioctl+0x10/0x10 [ 713.714601][T19063] ? do_futex+0x395/0x420 [ 713.718925][T19063] ? call_rcu+0x644/0x890 [ 713.723261][T19063] sock_ioctl+0x576/0x790 [ 713.727592][T19063] ? __pfx_sock_ioctl+0x10/0x10 [ 713.732527][T19063] ? __fget_files+0x2a/0x420 [ 713.737113][T19063] ? __fget_files+0x3a0/0x420 [ 713.741810][T19063] ? __fget_files+0x2a/0x420 [ 713.746409][T19063] ? bpf_lsm_file_ioctl+0x9/0x20 [ 713.751362][T19063] ? __pfx_sock_ioctl+0x10/0x10 [ 713.756215][T19063] __se_sys_ioctl+0xfc/0x170 [ 713.760987][T19063] do_syscall_64+0xec/0xf80 [ 713.765499][T19063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.771575][T19063] ? trace_irq_disable+0x37/0x100 [ 713.776597][T19063] ? clear_bhb_loop+0x60/0xb0 [ 713.781454][T19063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.787622][T19063] RIP: 0033:0x7f35f898f749 [ 713.792136][T19063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.811928][T19063] RSP: 002b:00007f35f983f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.820442][T19063] RAX: ffffffffffffffda RBX: 00007f35f8be6090 RCX: 00007f35f898f749 [ 713.828426][T19063] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000a [ 713.836397][T19063] RBP: 00007f35f8a13f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 713.844370][T19063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.852335][T19063] R13: 00007f35f8be6128 R14: 00007f35f8be6090 R15: 00007ffcf7e74748 [ 713.860502][T19063] [ 713.863704][T19063] Modules linked in: [ 713.868846][T19063] ---[ end trace 0000000000000000 ]--- [ 713.909166][T19063] RIP: 0010:klist_remove+0x14a/0x340 [ 713.914587][T19063] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 01 d7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 01 d7 f6 49 8b 44 24 58 48 89 44 24 08 [ 713.934599][T19063] RSP: 0018:ffffc90005927960 EFLAGS: 00010202 [ 713.940873][T19063] RAX: 000000000000000b RBX: ffff8880773b0000 RCX: 0000000000000000 [ 713.949059][T19063] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 713.957293][T19063] RBP: ffffc90005927a60 R08: ffffffff8f68d143 R09: 1ffffffff1ed1a28 [ 713.965953][T19063] R10: dffffc0000000000 R11: fffffbfff1ed1a29 R12: 0000000000000000 [ 713.976734][T19063] R13: 1ffff110068c4c8c R14: ffff888034626460 R15: dffffc0000000000 [ 713.986209][T19063] FS: 00007f35f983f6c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 713.995273][T19063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.019791][T19063] CR2: 0000559a5c342468 CR3: 0000000029e3e000 CR4: 00000000003526f0 [ 714.058235][T19063] Kernel panic - not syncing: Fatal exception [ 714.064742][T19063] Kernel Offset: disabled [ 714.069069][T19063] Rebooting in 86400 seconds..