last executing test programs: 2m28.203571257s ago: executing program 3 (id=1721): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001b000000000006001c0000000000080019"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='wlan1\x00', 0x10) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e1e, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000680)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x1}}}], 0x18}, 0x4004000) 2m28.067172108s ago: executing program 3 (id=1724): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0, 0x5001}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1843}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x698, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0x2f8, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000001200)={0x6, 0x9, 0x5, 0x3, 0xfd}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x14, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000180100002020692500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e62a0000850000000600000095"], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="1800000043000701fdfffffffcdbdf25027c000007004580"], 0x18}}, 0x810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) write$rfkill(r4, &(0x7f00000001c0)={0x6, 0x7, 0x2}, 0x8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r9, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x44) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000001a00)=@updpolicy={0x19c, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, {{@in6=@loopback, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x5, 0x31, 0x7, 0x800, 0x2, 0x81, 0x5c}, {0xffffffffffffffff, 0x0, 0xfe, 0xf}, 0x2, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, [@policy_type={0xa, 0x10, {0x1}}, @etimer_thresh={0x8, 0xc, 0x131}, @tfcpad={0x8, 0x16, 0x1}, @lifetime_val={0x24, 0x9, {0x2, 0x6, 0x4, 0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x100}}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in=@private=0xa010100, 0x0, 0xa}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@local, 0x0, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0xc68, 0x0, 0xe8, 0x328, 0x1a0, 0x328, 0xbd0, 0xbd0, 0xbd0, 0xbd0, 0xbd0, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @local, 0xffffffff, 0xff, 'veth1_to_hsr\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x27}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x140, 0x2, 0x1}}, @common=@icmp={{0x28}, {0x11, '+4', 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x6}}}, {{@ip={@broadcast, @remote, 0xffffff00, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x6, 0x1, 0x7c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x880, 0x8a8, 0x0, {}, [@common=@ah={{0x30}, {[0xf, 0x7fff]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x6}, {0x8, 0x3}, {0x1, 0x2}, {0x3}, {0x7, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0x3}], [{0x800, 0x876}, {0x8000, 0x8}, {0xe4}, {0x80, 0x9}, {0x2, 0x7}, {0x10, 0x2}, {0x9, 0x80000001}, {0x8af3, 0x7}, {0x9, 0x8000000}, {0x340000, 0x3}, {0x7, 0x7}], 0x5, 0xa}, {[{0x4, 0x3}, {0x1, 0x2}, {0x85, 0x441ec60f99544577}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x3}, {0x7ff, 0x2}, {0x40, 0x1}, {0x149a940d, 0x3}, {0x5, 0x2}, {0x93, 0x1}], [{0x4, 0x7ff}, {0x43f5, 0x1}, {0xfffff84f, 0x7}, {0x7d, 0x7}, {0xfffffff7, 0x3}, {0x7, 0x5}, {0x8000, 0x7}, {0xd9, 0x1}, {0x1, 0x1}, {0x8, 0xfffff000}, {0x6, 0xffff}], 0x0, 0x7}, {[{0x6}, {0x5d}, {0x6, 0x2}, {0x8, 0x1}, {0x2bca, 0x3}, {0x8001}, {0x5, 0x1}, {0x6}, {0x4, 0x3}, {0xd1, 0x1}, {0x7, 0x2}], [{0x9, 0xb}, {0x8, 0x800}, {0x6, 0xe3b}, {0xa, 0x3}, {0x101, 0x1}, {0x2, 0x1}, {0xd, 0xadc}, {0xdb31, 0x8}, {0x7, 0x80000001}, {0x3, 0x35b5d498}, {0x10000, 0xcdb}], 0xa, 0x7}, {[{0x3, 0x2}, {0x800}, {0x8}, {}, {0x6, 0x3}, {0x1, 0x1}, {0x83b1, 0x1}, {0xa, 0x2}, {0x80, 0x1}, {0xa14, 0x2}, {0x80000000}], [{0x40, 0x1ff}, {0x7, 0x2}, {0x8001, 0x1}, {0x40000, 0x8}, {0x1, 0xa11b}, {0x400, 0x9}, {0x400, 0x6}, {0xcb3, 0xd}, {0x3813, 0xe3}, {0x7, 0x8}, {0x1, 0x8}], 0x8}, {[{0x3, 0x3}, {0x6a9d}, {}, {}, {0xfffffff7, 0x1}, {0xff}, {0x7, 0x2}, {0x7, 0x2}, {0x474, 0x1}, {0x8, 0x3}, {0x3, 0x2}], [{0x2, 0x9}, {0x0, 0x3}, {0x8, 0xc2}, {0x9, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x10, 0x1}, {0xfffffffb, 0xd9}, {0x8, 0x3}, {0x7}, {0x81, 0x9c0}], 0xa, 0x2}, {[{0x63ed878f, 0x2}, {0x8, 0x2}, {0x6d, 0x1}, {0x7, 0x3}, {0x10000}, {0x5, 0x3}, {0xe, 0x1}, {0x35, 0x2}, {0x800, 0x3}, {0x3}, {0xffffff01, 0xc7748d1a36e5bb1d}], [{0x0, 0x7}, {0x10001, 0xa}, {0x80000001, 0x1}, {0x4, 0x7fff}, {0x3, 0x1}, {0xd, 0x2}, {0x63c90add, 0x80000001}, {0x9, 0x6}, {0xfffff001, 0x6}, {0xb675, 0x8}, {0xffffffff, 0x3ff}], 0x4, 0x1}, {[{0x4, 0x1}, {0x19}, {0x1ff, 0x3}, {0x9}, {0x10, 0x1}, {0x9}, {0x8, 0x2}, {0x1, 0x3}, {0x1}, {0xd9, 0x2}, {0x38d7, 0x3}], [{0x2d5, 0xf9}, {0x942, 0x3}, {0x6, 0x5}, {0xc30, 0xffff}, {0xdc, 0x1}, {0xffff, 0x3}, {0x9, 0x8}, {0x6, 0x3}, {0x7f, 0x4}, {0x80000000, 0x3}, {0x6, 0x9}], 0x1, 0x5}, {[{0x0, 0x3}, {0x6, 0x2}, {0x6, 0x3}, {0x6, 0x2}, {0x10, 0x3}, {0x0, 0x2}, {0x5}, {0x6, 0x3}, {0x7, 0x1}, {0xb7, 0x2}, {0xa, 0x1}], [{0x1000, 0x40}, {0x7, 0x401}, {0x9, 0x19b260}, {0xb5, 0xfffffffd}, {0x80000000, 0x7}, {0x0, 0x1}, {0x3, 0x80}, {0x101}, {0x3, 0x2}, {0x1, 0x38}, {0x0, 0x8}], 0x5, 0xb}, {[{0xf}, {0x10001, 0x3}, {0x6, 0x1}, {0x7}, {0x6, 0x2}, {0x8}, {0x3ff, 0x1}, {0xffffbedc, 0x1}, {0x6, 0x1}, {0x3000000, 0x2}, {0x6, 0x3}], [{0x80000000, 0x2}, {0x6, 0x7}, {0xffffffff, 0x5}, {0x6, 0xf2}, {0x23f2, 0x1}, {0x0, 0xffff}, {0x7, 0x9}, {0x10, 0xe40}, {0xb5c0, 0x9}, {0x3, 0x10}, {0x4, 0x4}], 0x2, 0x4}, {[{0x5, 0x3}, {0x8}, {0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x7fff, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x5, 0x2}, {0x9, 0x2}], [{0x9, 0x457}, {0x3}, {0x2, 0x2179}, {0x10001, 0x7}, {0x4, 0x8}, {0x7f, 0x7}, {0x200, 0x8}, {0xd6, 0x6}, {0xd, 0x3}, {0x4, 0x9}, {0x3, 0x2}], 0x5, 0x9}, {[{0x8}, {0xfff}, {0x8, 0x2}, {0xffffffff, 0x1}, {0x8, 0x3}, {0xffff, 0x1}, {0x5e81, 0x1}, {0xb825, 0x2}, {0x1}, {0x1, 0x2}, {0xd, 0x2}], [{0x5798, 0x81}, {0x400, 0x6}, {0x5, 0x27a}, {0xfffffffd, 0xffff}, {0x401, 0x3}, {0x1, 0x7}, {0x8, 0x5}, {0x76, 0x7}, {0x4, 0x2}, {0x2, 0x1000}, {0x4}], 0x4, 0x1}], 0x6}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2318, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcc8) clock_gettime(0x7, &(0x7f0000000140)) 2m27.128623684s ago: executing program 3 (id=1730): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) 2m26.936429981s ago: executing program 3 (id=1734): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000240)='rose0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r5}, 0x18) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000008060108000000000000000400000004050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000700)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESOCT=r6, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\x00'], 0x74}}, 0x0) 2m26.261871463s ago: executing program 2 (id=1743): socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRESDEC, @ANYBLOB="0000814ba1838d8bd1d900c795a8aca87dbe633d3fd000000089d45224a436", @ANYRES32=0x0, @ANYRES32], 0x50) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) close(0x3) (async) socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) r2 = socket(0x2, 0x80802, 0x0) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f00000000c0)=""/3, &(0x7f0000000180)=0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10000) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xc547}, &(0x7f0000000300)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001c80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001e00)="ea", 0x1}], 0x1}}], 0x2, 0x20008040) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x1, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84) 2m26.008357776s ago: executing program 2 (id=1746): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f2000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x40, 0x205, 0x1000, 0x7f}, &(0x7f0000000080)=0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) socket$unix(0x1, 0x1, 0x0) (async) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], 0x0}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ioctl$sock_proto_private(r6, 0x89e0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (async) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80000) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000240)=@req={0x0, 0x400000, 0x0, 0x8b9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x6c, r10, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0x6c}}, 0x8004) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4004810) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r11, 0x0, 0xa0028000}, 0x86) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028b97000fddbdf250700000008000300", @ANYRES16=r5, @ANYRES8=r5], 0x50}, 0x1, 0x0, 0x0, 0x10000880}, 0x24044884) 2m25.608817463s ago: executing program 3 (id=1747): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) 2m25.606400944s ago: executing program 2 (id=1750): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="47ae202b", @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES32=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x24008841}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x815) 2m25.601317973s ago: executing program 2 (id=1751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x2, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r5, 0x2f, 0x8, 0x4, @void, @value=r3}, 0x20) (async) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m25.560953705s ago: executing program 2 (id=1754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) 2m25.371882206s ago: executing program 2 (id=1756): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x6000}, 0x18) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xc, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0xe}, {0x6}, {0x5, 0x2}, {0x10, 0x4}, {0x4, 0x4}, {0xf}, {0xb, 0x4}, {0x1, 0x5}]}, @fwd={0xd}, @union={0x6, 0x8, 0x0, 0x5, 0x0, 0x5, [{0xa, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x7, 0x5, 0x467}, {0xe, 0x3, 0x2}, {0x3, 0x2, 0xb}, {0x3, 0x2}, {0xe, 0x4, 0xffffffff}, {0x6, 0x1, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x30, 0x5f, 0x5f, 0x0, 0x2e, 0x0]}}, &(0x7f0000000780)=""/219, 0xf0, 0xdb, 0xe84, 0x14017e77}, 0x28) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r4, 0xffffffffffffffff, 0x17, 0x1, r5, @void, @value=r5, @void, @void, r7}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r3, 0x34, 0x0, @val=@tcx={@void, @value=r8, @void, @void, r7}}, 0x1c) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) readv(r9, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) r11 = accept(r10, &(0x7f00000003c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x80) bind$vsock_stream(r11, &(0x7f00000004c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendfile(r10, r9, 0x0, 0xf03a0005) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map, r10, 0x1, 0x2030, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r7}, 0x20) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x42, &(0x7f0000000040), 0x3b) 2m25.074875732s ago: executing program 3 (id=1760): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x6}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000008a7e8b2267266e245798ce8229d62000010000000000fcdbdf250a805f00000000031a00030014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000008a7e8b2267266e245798ce8229d62000010000000000fcdbdf250a805f00000000031a00030014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}}, 0x40000) sendmsg$nl_route(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004060) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)={0x30, r9, 0x5, 0x70bd26, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)={0x30, r9, 0x5, 0x70bd26, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000001580)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @random="ac4cca4b9acc", @broadcast, @device_a, {0x0, 0x5}, "", @value={0x4, 0x1, 0x1, 0x0, 0x6f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x16, "e3387878c74d87e20390a227556ebebbc742dce8ea11"}]}, 0x42) (async) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000001580)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @random="ac4cca4b9acc", @broadcast, @device_a, {0x0, 0x5}, "", @value={0x4, 0x1, 0x1, 0x0, 0x6f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x16, "e3387878c74d87e20390a227556ebebbc742dce8ea11"}]}, 0x42) unshare(0x20000400) r11 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, 0x0, 0x0) 2m23.103400953s ago: executing program 0 (id=1773): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10000, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x3, 0x1}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmmsg$inet(r9, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001200)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=r10, @ANYBLOB="0a0101020a010100000000001c000000000000000000000008000000", @ANYRES32=r13, @ANYBLOB="7f000001ac14141c000000001100000000000000000000000100000002000000000000001400000000000000000000000100000004000000000000005c000000000000000000000007000000862400000003020cc56b8fbd0222420dff9d0212aebcdb43a3333dd9e866dd5f513c178e00890bf77f000001ac1414aa07078eac1e00014414e9f00000000e00000009000000090000000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a0101010a01010200000000110000000000000000000000010000007c000000000000003c000000000000000000000007000000862a000000030611bca79d936a79b0c59bcd2373628ee605020502010d2301f4f8c2b71d678dae500002000000000000140000000000000000000000070000000100000000000000"], 0x160}}], 0x2, 0x8008840) 2m22.552630024s ago: executing program 1 (id=1778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000d0040000000000000196eec4a7af8ef4fe9c00000018110000e53e8e97e6d526e78b51eb07abd505f4feb3ca23e0bc65deb0e93ba6c3c41b525bae4b77332274efe3d896fecce37e617f8a1b82bd8417b525f6227eeb72b61edc8287912ec72fa9b49ca1a4b312d61b7d0462f740c862bba2faf30132356911b732c85d20483273b49e014dfcda01a1a5acdec9485c8ca34b0a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000004a7bfcff04000000183100000200000000000000000000008510000008000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400000200f1000000000000004510cb3e8ba7a781fa44312a40049ceffe8a4d6e3bff827effc08450a4bec24f285a251cfb6245f23ad17afa1f703823b1409059566816aa1c2edc09ca692aa8b9df4189daf9facc574f33e6e58cfdb78597f91e", @ANYRES32=0x0, @ANYBLOB="03800000000402001c0012800b00010067726574617000000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffff7f00000000005a6f0656181000000000009500000000000000f5aa00b7be4e462139d4c5dd20f5081ac7dd9d01c2dd60730d1b5b55676b8d67bb932604eb75f09a7f4fdaab4fc672e58eee986259ff498136db6984a6269976995a44c0ea6197ac345943a6d2998264fb5985b4541faa670b071f8b19289764fd1498e0c756c170217d4b25624a70919a7e41689265938db74676936d83eda10ce09391d846b00ceb53472ee78f86d37a9df4e8d4ac6b0fdd5efcb9078bcbabe279299eef6d061bd470fd65763d975221913a72b588fc8c1361"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffe}, 0x94) 2m22.512226532s ago: executing program 1 (id=1780): unshare(0x2a020400) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1681f287a887e6192b835df3821c04bd2633d62ede5d7dc764e4c730d3"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000020}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) socket$rds(0x15, 0x5, 0x0) 2m22.03588132s ago: executing program 1 (id=1782): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004600000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820f139d6dcd3292ea54c7bea7e9fee597b124adef915d564c90c200", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x40}], 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000280)={@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa2c302e3}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 2m22.020014268s ago: executing program 0 (id=1783): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000006380)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r1, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000400000000001901ae3ef0874e00cd4675db8414584c0fbbbb3b66cdfc2ba5bbcd6d72c6f24d7b29dad11838f7782d434449d2344ac0f9840b702cf216a4514a6690ffdb0465fb1c3be718034793af6ab6ccced90fe6446098777a96b44a2aa1306647ab838dec334a1fe7b20080000000000000666585285b5581f40ffe80b7772641d0f30056a516a0f637351a0e9aec23ddaef6aec6755617122e3271c5cc0983ed960afb106adeefbbff7749ba02d98e136bab9d6863ac01c8f93c9901c22ddd24f60dac28be360000007545cda52778"], 0x10}}], 0x1, 0x811) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf254300000008000300", @ANYRES32=r7, @ANYBLOB='\f\x00X'], 0x70}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) unshare(0x400) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000000180)={0xa, 0x4, 0x0, @loopback, 0x8}, 0xffffffffffffff32) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2m21.749289232s ago: executing program 0 (id=1784): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xfc, 0x10, 0x713, 0x70bd2f, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x9d8c2e8008cd4c2c, 0x5}}]}, 0xfc}}, 0x0) mmap(&(0x7f00003b1000/0x2000)=nil, 0x2000, 0xc, 0x200000006c832, 0xffffffffffffffff, 0x0) 2m21.705722733s ago: executing program 0 (id=1785): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'batadv0\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x881) close(0x4) 2m21.620318606s ago: executing program 1 (id=1786): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)=""/172, &(0x7f00000000c0)=0xac) r1 = socket(0x2, 0xa, 0x9) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x6}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r1}) r3 = getuid() sendmsg$nl_generic(r2, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)={0x618, 0x37, 0x8, 0x70bd2a, 0x25dfdbfd, {0x18}, [@nested={0x1e4, 0x64, 0x0, 0x1, [@generic="4480c8654569077d929ac9fca5ebdc27933de7896992871a89519bea1fdea104efd8417806bceb6f4511ecfd453ca1337bf54bda11d2a8e6dc7c0b6213f20f32d90e11ae197c04742bbef5bdb79e363c55cba9b0432b6a649d7f7f9a7015e0de252b9ad33ed381486d81c00e8263387fd0b04d2b77ec4adaa92fc0e908a02995305342fae947", @typed={0x4d, 0x118, 0x0, 0x0, @binary="7df2ada4d1d82b74b746d28faf830b95a653f4a3cbdc67e1ce9c60b1a105867f4d3153d718c597edfe9de7373bbbeeb2fc5703096d0615e5fb893e3d1e1f2cb1937acca614276e7994"}, @nested={0x4, 0xa4}, @typed={0x89, 0xba, 0x0, 0x0, @binary="96ad79f2460dccad49a1981cedd8f80b243868d199b33cd6306e67d06f9da6eb858b58e722df7fb5769f680e7aba87e9e7af7586d20cf589a1b78644388c5618cbcc3618966b6d881d53507a5626acfb43be6eb57cfb225a0cef2cb71f5a05f99fa686e0740839443bb34ed454f6e613c59f822e212be577aac4fc5413499b0c924928941f"}, @generic="01cb8934693d993a75e66b719f6c647a57b3f96c35d3de56ba568bacfaeafbc61314851c089ef38450342893a411b02afe730966aab01545ce3a9aa38db8f910a6ebd6d82dbc80cfa407ef97f2c81b98590fd6db646040be4854ca4c19c1e88dbe6927bf2831fc146287", @typed={0x8, 0x145, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x14b, 0x0, 0x0, @uid=r3}]}, @nested={0x14a, 0x4f, 0x0, 0x1, [@generic="adf398647c9d7230c3cec7af0091dcf79d041b5c7792a6412f3293e30bf4e699662f28949dfccae7ea0a4244adad0f0e9eeaf1611f4d43fe77efb7d58267dbd454712126d7979369a22ccc5130cd81223cb767db107065608aa20cc230d44feb3c0211feb9e11e7e466dd0c03b732821bd7cd4737011e649fc4e68f69d4aad7e1393d4b76e98f4c99b0e598cc702c693ab0a3e7feaba871e8ef4661406b8d0ab8469d1f451d32c7123c8317319743d0624889335b0815c7c6ad8443085c7460b1582a10cf7", @generic="cd6cb5657a0492e9310bb017cc91015d71cca959bb298f1cd331ceedf36deee57b836f283ff9daebf53b11d0bd21f6d8ba4b3e18da8d707f8bb87fed4fb657be4e7d253d2532dbac76406e650a91c4e1aa57156cb38ec9531c3ca0cf751b4bb4135d20ef8f94912ca801bf3f1933a944d931170ff1f64ea72a8bc3e96c4386acd0"]}, @nested={0x65, 0x107, 0x0, 0x1, [@nested={0x4, 0x24a4}, @generic="ae014cd18bd62f748e671784ad5596ddd83e4859c6799c14a2816fb3d054fe784a8b51a93ad93532eed9b00e3e7baa0f1692d103b61568ff002592af5a094caf204b8cb07dcc0097b36c01e41d540543d02aa7f058a808f011c79fed1a"]}, @nested={0x269, 0x5, 0x0, 0x1, [@generic="803c23f7626064ff59fc4690cd1f6b8585ada6f43cfdcdd9ba1a473b3498a48233b3b61d13b6f7f2eb91e011e9fd79a2c67cc13bd50ba3a909d99a8e5b51b0f71607a3477256e71b696ae0672e8d3c8dd94431848f78c5cd54ce168d42e0f3b50187dceb79c4f40a7e0c25e6c76f5a00f6e40bd469c482cf0acf15d10c3a15ac0849cff9b8af", @generic="363c288b65858ee6ba18750bdde39d0aee4c13e9816b39500d7a40b9f6336af20657092c63e26b985fd92185eb576765648d75c1ceb3b24744b54eccf22c7e8f4b5759c6704477e1a77660465f5325f3cdcfdb1195f80fe5ab59725020db9cb9cf11966c4d206264c1d6030c9dd0111624dc6382d9853716e65a47e1007d703f5437", @generic="3795218e96afbf6527f8ab633bc67b88a689137a13bbfbf5ce795d23ec3c8c08c516a6fce5293788f3fd17742416c26a5af60d9ec1f1c09d52aebf8c7aa786037c32c482bc09c277e9d04c741bf734bf8e99ffa5ed8a3fb808e2a1859c0480afced93185f6042a729fdfffba1df6a4e96532ba422324aff735025ac34f0220c291d4fb856f0d1eea8bd9efc3a5a2331d2966383ed084299aa636ba478e1c8904cd204dad2e69", @generic="5f13f3c597235f0d2645c977e8137c3aff92f12777e20555608358e8a9fa7fc86f22535b1f6b239330c8a7b2c267eccc3d56aa3fbea108b6d2f6425a5bbe21acb2cb2e5d79adf1fb76f9419a144c656449ad2ac65dd335a9da358f30e5988b3b57a672421030f9e4b23f30a52881c21b3c60aa6460582ae2afd5c39a5f47ab729b79f4d6583e70", @generic="e9cc0fd127e09c050786ecb5b085f2e85ee277c1b2c91212880888ea", @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x7a}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}]}, 0x618}, 0x1, 0x0, 0x0, 0x4082}, 0x0) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000940)={0xffffffffffffff01, 0xfffffffffffffff8, 0xa12, 0x5, 0x5, 0x5, 0x4, 0xfffffffffffffff7}, &(0x7f0000000980)={0x448, 0xb, 0x2, 0x141, 0x8, 0x1, 0x8, 0x7}, &(0x7f00000009c0)={0x1, 0x3, 0x100000001, 0x5, 0x0, 0x5, 0x4, 0x40}, &(0x7f0000000a40)={r4, r5+10000000}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x7]}, 0x8}) r6 = accept(r0, &(0x7f0000000b00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000b80)=0x80) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000858}, 0x40408c4) unshare(0x10000e00) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000e00)={@private, @initdev, 0x0}, &(0x7f0000000e40)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000001000)={'gre0\x00', &(0x7f0000000f80)={'erspan0\x00', 0x0, 0x1, 0x7, 0x0, 0x383f, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x65, 0x0, 0x2e, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp={0x44, 0x8, 0xa1, 0x0, 0x1, [0xffffff7f]}, @end, @rr={0x7, 0xb, 0xb7, [@broadcast, @multicast1]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001440)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001040)={0x3a8, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb5}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x194, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x1d, 0xf8, 0xffffffff}, {0x3ff, 0x1, 0x4d, 0x8}, {0x2, 0x4, 0xe, 0x5}, {0x5e, 0x1, 0x3, 0x80}, {0x7, 0x9, 0x3, 0x2}, {0x9, 0x4, 0x4, 0xfff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x19, 0x8, 0xb, 0x1ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x31}}, {0x8}}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x10}, 0x4004015) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000001480), &(0x7f00000014c0)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, r0, 0x5e636000) unshare(0x10000) connect$can_j1939(r1, &(0x7f0000001500)={0x1d, r9, 0x3, {0x2, 0x0, 0x2}, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001580)={0x3, 'geneve1\x00', {0x9}, 0x8}) socket$inet_mptcp(0x2, 0x1, 0x106) accept4$inet(r6, &(0x7f00000015c0)={0x2, 0x0, @initdev}, &(0x7f0000001600)=0x10, 0x800) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r13, 0x84, 0x3, &(0x7f0000001640), &(0x7f0000001680)=0x4) bind$can_j1939(r2, &(0x7f00000016c0)={0x1d, r10, 0x3, {0x2, 0x1, 0x2}, 0x1}, 0x18) 2m21.616669208s ago: executing program 0 (id=1787): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x8, @empty, 0x9}}}, &(0x7f0000000100)=0x84) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'gretap0\x00', 0x40}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, &(0x7f0000000440)=@raw=[@tail_call, @map_fd={0x18, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cb5b895}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000004c0)='GPL\x00', 0x0, 0xe, &(0x7f0000000500)=""/14, 0x40f00, 0x40, '\x00', r2, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000580)=[0x1], &(0x7f00000005c0)=[{0x3, 0x4, 0xe, 0x8}, {0x1, 0x2, 0xe, 0xa}, {0x3, 0x3, 0xe, 0x1}, {0x1, 0x4, 0x1, 0x4}, {0x0, 0x3, 0x8, 0x6}, {0x3, 0x2, 0x8, 0xb}], 0x10, 0xff}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xfffffe01, 0x0, 0x1, 0x8, '\x00', r2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5}, 0x50) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000280)='GPL\x00', 0xffffd733, 0x8b, &(0x7f00000002c0)=""/139, 0x40f00, 0x3, '\x00', r2, @fallback=0x17, r4, 0x8, &(0x7f00000003c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x6, 0x4, 0x80000001}, 0x10, 0x0, r5, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r6, r7, r8, 0x1, r9, r10, r11, r13], &(0x7f0000000a80), 0x10, 0x6}, 0x94) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/116, 0x74, 0x110, &(0x7f0000000c00)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x80) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r15, 0x0, 0x48f, &(0x7f0000000c80)={0x32, @local, 0x4e20, 0x4, 'ovf\x00', 0xc, 0x1, 0x57}, 0x2c) ioctl$TUNSETCARRIER(r12, 0x400454e2, &(0x7f0000000cc0)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000d00)={'HL\x00'}, &(0x7f0000000d40)=0x1e) getsockopt$IP_VS_SO_GET_TIMEOUT(r12, 0x0, 0x486, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r12, &(0x7f0000001140)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e40)=@newchain={0x2bc, 0x64, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x5, 0x10}, {0x0, 0x5}, {0xfff2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3a}}, @filter_kind_options=@f_u32={{0x8}, {0x270, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x72a}, @TCA_U32_SEL={0x264, 0x5, {0x4, 0x7, 0x8, 0x2, 0x2, 0x6, 0xffb7, 0x6, [{0x3f, 0x7fff, 0x5, 0xff}, {0x80, 0xe8, 0x9, 0xfffffff8}, {0x8, 0x7fffffff, 0x800, 0x5}, {0xfffffffa, 0x8, 0x9, 0x3}, {0x2, 0x800, 0x3, 0xf2b}, {0x4, 0x570f, 0x4, 0x7}, {0x6, 0xfa9, 0x0, 0xc}, {0x6, 0x65f5, 0x401, 0x2}, {0x0, 0xffff, 0x0, 0xd}, {0x90, 0x8, 0x8, 0x8}, {0x1, 0x8, 0xffffffff, 0x10000}, {0x3, 0x60000, 0x5d7306ee, 0xb81}, {0xb, 0xffff, 0x8, 0x10}, {0x2, 0x1d, 0x5, 0x4}, {0x1, 0xffffffff, 0x6, 0x3}, {0x8001, 0x2, 0x0, 0xff}, {0x7, 0x1060, 0x400, 0x2}, {0x8, 0x1, 0x2ec08c5a, 0xd}, {0x293, 0xfffffffb, 0x800, 0x3}, {0x4, 0x1, 0x5, 0x4}, {0xff5e, 0x2, 0x5, 0x5e}, {0x40, 0x8, 0x1ff, 0xb}, {0x64, 0x4, 0x5, 0x7f}, {0xa7, 0x0, 0x4, 0x5}, {0x8, 0x7d0, 0x5}, {0xc9, 0x0, 0xb, 0x2}, {0x7fff, 0x7, 0xfffffffc}, {0x9, 0xd, 0x5, 0x80}, {0x7, 0x200, 0x4, 0x7}, {0x6, 0x3, 0x4ad, 0xfffffffa}, {0xfd74, 0x7ff, 0xd, 0x1}, {0xffff8363, 0xff9, 0x7, 0x101}, {0x4, 0x7fffffff, 0xffffff1e}, {0xfffffffe, 0x40, 0x7, 0x6}, {0x7, 0x0, 0xfffffffe, 0x8}, {0x4, 0x0, 0x2, 0x800}, {0x4, 0x4db, 0x100, 0xa}]}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x1}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x104}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000001280)={'gre0\x00', &(0x7f0000001180)={'syztnl0\x00', r2, 0x10, 0x20, 0x9, 0x0, {{0x2e, 0x4, 0x1, 0x1a, 0xb8, 0x64, 0x0, 0x8, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x58, 0x0, 0x1, [0x6, 0xfd27, 0x1]}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0xf, [0x8, 0x2, 0x80]}, @timestamp_addr={0x44, 0x24, 0xf9, 0x1, 0xf, [{@remote, 0x101}, {@loopback, 0xffffff8e}, {@rand_addr=0x64010102, 0x4ff1}, {@local, 0x1ff}]}, @end, @cipso={0x86, 0x26, 0x3, [{0x1, 0xb, "7aa2556a5dccf837fe"}, {0x7, 0x5, "681e11"}, {0x6, 0xb, "b535a26893cb8341dc"}, {0x1, 0x5, "9b83ee"}]}, @end, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x9, [0x6]}, @generic={0x86, 0xe, "ff4d8fdf7c51525989c90328"}, @generic={0x44, 0xc, "ccbd0dfb85580cd67e4a"}, @ssrr={0x89, 0x13, 0x61, [@empty, @multicast2, @private=0xa010100, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001340)={'syztnl1\x00', &(0x7f00000012c0)={'syztnl2\x00', r16, 0x7800, 0x10, 0x0, 0x3, {{0x13, 0x4, 0x0, 0x8, 0x4c, 0x65, 0x0, 0x40, 0x4, 0x0, @private=0xa010100, @multicast2, {[@generic={0x83, 0x9, "56e3b954f8c7aa"}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xb8, [@remote, @private=0xa010102, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0x9b, [@local, @multicast2, @multicast1, @rand_addr=0x64010101, @multicast1, @multicast2]}]}}}}}) ioctl$SIOCAX25GETINFO(r14, 0x89ed, &(0x7f0000001380)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f0000001480)={0x28c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffff, 0x4, 0x9, 0x0, 0x81, 0x91a4, 0x6]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0xa}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xd, 0x8001, 0x9, 0xe, 0xc6, 0x400, 0x8]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0xa}, {0x0, 0x4}, {0x3, 0x5}, {0x4, 0x1}, {0x1}, {0x6, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x5, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0xd}, {0x2, 0x8}, {0x6, 0x2}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x6, 0x1a}, {0x6, 0x5}, {0x4, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0x8}, {0x4}, {0x5}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x6}, {0x3, 0x6}, {0x6}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x7, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x1}, {0x4}, {0x2, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb1, 0x80, 0x8000, 0x2, 0x7, 0x8e4, 0x8, 0xc971]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x7, 0x1c, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x3, 0x2, 0x7, 0x20, 0x5, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x8, 0x0, 0x8000, 0x80, 0x6, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xc, 0x100, 0x5b, 0xb3c8, 0x8, 0x80, 0x4]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x4, 0x1b, 0x16, 0x30, 0x3, 0x2, 0x48, 0xb, 0x36, 0x9, 0x4, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x8}, {0x0, 0x8}, {}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0xa}, {0x6, 0x9}, {0x7, 0x6}, {0x4, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {}, {0x0, 0x3}, {0x2, 0x7}, {0x1}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x6}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x48, 0x48, 0x5, 0x1b, 0xc, 0x36, 0x36, 0x12, 0xb, 0x48, 0x12, 0x48, 0x48, 0xb, 0x36, 0x48, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x7fff, 0x1, 0x7fff, 0x0, 0x6, 0x4, 0xab]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x6]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x9}, {0x7, 0x6}, {0x5, 0xa}, {0x5, 0x8}, {0x4, 0x1}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x1}, {}, {}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x2}, {0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x5, 0x3}, {0x2, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x5, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {0x3, 0x6}, {0x4, 0xa}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x1}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x4}, {0x3, 0x5}, {0x1}, {0x0, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x6, 0x8000, 0x8, 0x0, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8f, 0xf6, 0x8, 0x1, 0x7ff, 0x7, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x12, 0x1}, {0x3}, {0xc, 0x1}, {0x1}, {0x6}, {0x3d, 0x1}, {0x36}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) 2m21.567304576s ago: executing program 1 (id=1788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403f0000180100002020782500000000002020207b1a00fe000000007b0a0000000000000701b092f8ffffffb702000008000000b70300000f000000a500feff060000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0xffffffff, @local, 0xffffffff}}, 0x3, 0x0, 0xd78f, 0x3e, 0x0, 0x8, 0xf7}, 0x9c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000700024dcb6537659d78c336f74733f215a828a03f789998dad56242037174d7f2690f7b9881b86631e64c59eb09797e0bc6b4f1eda7db1e35b8c8509dd9b83fa50df43db966c7cfecc79cca376ed1549e8a2d967abe2b967ecd81c3eba85ffdbf0b3e0417c04ba4692ccabb11ca28873a7d0ec04530b98e4b0833c065c52fb342a7a3240393f09e3644", @ANYRES32=r5, @ANYBLOB="04005b00"], 0x20}}, 0x48000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000863bfcaadcbeb091facb76b6628cb0bfaf5626d3eba23448623e0ab3a094d3ecc31ec5dac5d943dd5d8d74a32b041dcc19bd4a7f635f3329a84efeb32bc1"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) socketpair(0x29, 0x4, 0xb, &(0x7f00000001c0)) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = socket(0xa, 0x3, 0xff) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x1c) sendmmsg$inet6(r14, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5e546507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="24000000000000002900000032000000000000000000000000000000000000018e"], 0x28}}], 0x2, 0x4046040) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 2m21.442589947s ago: executing program 0 (id=1790): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 64) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (async) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m11.575784943s ago: executing program 1 (id=1792): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000020000000000000000000000800010005000000"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) socket(0x2, 0x80805, 0x0) socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d080100000000000000000004000080"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d080100000000000000000004000080"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009~o\x00\x00\x00\x00'], 0x48) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@null, @null, 0x0, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="180862206c1b7879ad8c64274cf60000005bd5b0", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRESDEC=r9, @ANYRESDEC=r9], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="180862206c1b7879ad8c64274cf60000005bd5b0", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRESDEC=r9, @ANYRESDEC=r9], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12}, &(0x7f0000000640), &(0x7f0000000680)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12}, &(0x7f0000000640), &(0x7f0000000680)=r11}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_ts_info}) 2m8.035747599s ago: executing program 32 (id=1756): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x6000}, 0x18) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xc, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0xe}, {0x6}, {0x5, 0x2}, {0x10, 0x4}, {0x4, 0x4}, {0xf}, {0xb, 0x4}, {0x1, 0x5}]}, @fwd={0xd}, @union={0x6, 0x8, 0x0, 0x5, 0x0, 0x5, [{0xa, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x7, 0x5, 0x467}, {0xe, 0x3, 0x2}, {0x3, 0x2, 0xb}, {0x3, 0x2}, {0xe, 0x4, 0xffffffff}, {0x6, 0x1, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x30, 0x5f, 0x5f, 0x0, 0x2e, 0x0]}}, &(0x7f0000000780)=""/219, 0xf0, 0xdb, 0xe84, 0x14017e77}, 0x28) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r4, 0xffffffffffffffff, 0x17, 0x1, r5, @void, @value=r5, @void, @void, r7}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r3, 0x34, 0x0, @val=@tcx={@void, @value=r8, @void, @void, r7}}, 0x1c) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) readv(r9, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) r11 = accept(r10, &(0x7f00000003c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x80) bind$vsock_stream(r11, &(0x7f00000004c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendfile(r10, r9, 0x0, 0xf03a0005) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map, r10, 0x1, 0x2030, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r7}, 0x20) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x42, &(0x7f0000000040), 0x3b) 2m7.067541964s ago: executing program 33 (id=1760): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x6}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000008a7e8b2267266e245798ce8229d62000010000000000fcdbdf250a805f00000000031a00030014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000008a7e8b2267266e245798ce8229d62000010000000000fcdbdf250a805f00000000031a00030014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}}, 0x40000) sendmsg$nl_route(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004060) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)={0x30, r9, 0x5, 0x70bd26, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)={0x30, r9, 0x5, 0x70bd26, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000001580)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @random="ac4cca4b9acc", @broadcast, @device_a, {0x0, 0x5}, "", @value={0x4, 0x1, 0x1, 0x0, 0x6f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x16, "e3387878c74d87e20390a227556ebebbc742dce8ea11"}]}, 0x42) (async) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000001580)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @random="ac4cca4b9acc", @broadcast, @device_a, {0x0, 0x5}, "", @value={0x4, 0x1, 0x1, 0x0, 0x6f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x16, "e3387878c74d87e20390a227556ebebbc742dce8ea11"}]}, 0x42) unshare(0x20000400) r11 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, 0x0, 0x0) 2m5.42447651s ago: executing program 34 (id=1790): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 64) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (async) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m55.353362555s ago: executing program 35 (id=1792): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000020000000000000000000000800010005000000"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) socket(0x2, 0x80805, 0x0) socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d080100000000000000000004000080"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d080100000000000000000004000080"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009~o\x00\x00\x00\x00'], 0x48) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@null, @null, 0x0, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="180862206c1b7879ad8c64274cf60000005bd5b0", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRESDEC=r9, @ANYRESDEC=r9], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="180862206c1b7879ad8c64274cf60000005bd5b0", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRESDEC=r9, @ANYRESDEC=r9], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12}, &(0x7f0000000640), &(0x7f0000000680)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12}, &(0x7f0000000640), &(0x7f0000000680)=r11}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_ts_info}) 39.688913417s ago: executing program 4 (id=1807): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r9 = accept(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) sendmsg$AUDIT_ADD_RULE(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x434, 0x3f3, 0x400, 0x70bd2c, 0x25dfdbfe, {0x10, 0x2, 0xd, [0x7fffffff, 0x1, 0x7, 0x8000, 0x5, 0x4, 0x1, 0x2a, 0x1, 0x81, 0x0, 0x4, 0x1, 0x39, 0x4, 0xc, 0x7, 0x2, 0x200, 0xfffffff1, 0x9, 0x4, 0x6, 0x401, 0x1, 0x8, 0x6, 0xa1, 0x2, 0x1, 0xfffff800, 0x9, 0x471e, 0x8, 0x1b8, 0x4, 0x2, 0x9, 0x4, 0xa, 0x6, 0xa87c, 0x8000, 0x3, 0xa20, 0x5, 0x1, 0x3, 0x2, 0x10001, 0x4, 0x4, 0x8, 0x7d, 0x8000, 0x6, 0xfff, 0xf868, 0x963d, 0x2, 0xd, 0x1000, 0xaa15, 0x4], [0x8, 0x1, 0xffff7fff, 0x49c4, 0x6b, 0x8001, 0x4, 0x3ff, 0xfffffff9, 0x2, 0xff, 0xb, 0x80000001, 0x8, 0x4e47, 0x7, 0x3, 0x6, 0x5, 0x9, 0x0, 0x2, 0x7, 0x4, 0x8, 0x80000001, 0x0, 0x9, 0x3, 0x6, 0x6, 0x2, 0xfffffff7, 0x9, 0x1, 0x8, 0x5, 0x76a0, 0x9, 0x9, 0x1, 0x800, 0x4, 0x3, 0x5, 0x8, 0x4, 0xfffffffd, 0xffff8001, 0x7ff, 0x94a, 0xd, 0xbb1a, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1000, 0x1, 0xfff, 0x7, 0x5, 0x23c], [0x1, 0x7fffffff, 0x10000, 0xd, 0x6, 0x5, 0x1, 0x2, 0xa04, 0x8001, 0xa0dc, 0x5, 0x4, 0x100, 0x8, 0x8, 0x9, 0x2, 0x1, 0x3ff, 0x9, 0x7, 0x3, 0x5, 0x10001, 0x8, 0x80, 0x3, 0x0, 0xe249, 0x6, 0xe552, 0x5, 0x5, 0x83, 0xfffff0e3, 0x0, 0x7fff, 0x80000000, 0x9, 0xe3, 0x6, 0x8, 0x40000000, 0x1, 0x7, 0x1, 0x3748, 0x3ff, 0x5, 0x6, 0x1, 0x9, 0x1, 0x0, 0x2, 0x3, 0x1, 0x5, 0x1, 0x6, 0x9, 0x4c, 0x100], [0x4, 0x8, 0x8, 0x0, 0x3908, 0x0, 0x7fffffff, 0x4, 0x4, 0xa78, 0x2, 0x2, 0x8, 0xb7, 0xfffffff9, 0x0, 0x5, 0x6, 0xd, 0x2, 0x6, 0x1, 0x9, 0x6, 0x55, 0x1000, 0x4, 0x797, 0x2, 0x4, 0x2, 0x80000000, 0x3, 0x1, 0x0, 0x4, 0x3, 0x66ba, 0x3ff, 0x8, 0x5, 0x80000000, 0x9, 0x9, 0x567e, 0x5, 0x0, 0x7, 0x14f5b932, 0xd9d3, 0x6, 0xfffffd3d, 0x5, 0x80, 0x0, 0xd9, 0x7fff, 0xd340, 0x7, 0x6, 0x1, 0x200000, 0xb, 0x5375ccf4], 0x12, ['frag\x00', 'connmark\x00', 'dst\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r10], 0x448}}, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r10, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x0, 0x1f0, 0x120, 0x550, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 30.58251518s ago: executing program 4 (id=1808): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80800) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x3}}, 0x2e) getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, 0x3e, 0x8, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 24.028342613s ago: executing program 4 (id=1809): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000700)=""/9, 0x9}], 0x2}, 0x7}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000480)=""/86, &(0x7f0000000300)=0x56) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003904000000000000000000173a83", @ANYRES32=r5, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac"], 0x38}}, 0x20000080) sendto$packet(r2, &(0x7f0000000180)="892c", 0x2, 0x40, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x9, 0x6, @broadcast}, 0x14) 14.198253814s ago: executing program 4 (id=1810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x76, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @private2, [@dstopts={0x0, 0x0, '\x00', [@generic={0x40}]}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @default]}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, &(0x7f0000000100)="5dcbae397e093fb70f656077b0954a0a6190d3b79f58fee6a33df975dfe1aa5aa78cec92d5d00a7cdd0da96e021fdc2cb0ade4937c985600bd", &(0x7f0000000240)=""/242}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0xfffffcd3}, 0x1, 0x0, 0x0, 0x8080}, 0x4090) 7.140699573s ago: executing program 4 (id=1811): unshare(0x20000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) unshare(0x10020100) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 0s ago: executing program 4 (id=1812): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x2, 0x88}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000014c0)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x28000080}, 0x10) (async) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000014c0)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x28000080}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): 26.556265][ T7487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 126.573270][ T24] IPVS: starting estimator thread 0... [ 126.673425][ T7507] IPVS: using max 27 ests per chain, 64800 per kthread [ 127.428263][ T7487] netlink: 'syz.0.356': attribute type 5 has an invalid length. [ 127.437881][ T7506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.057251][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 128.185336][ T7550] bridge0: entered promiscuous mode [ 128.216000][ T7550] bridge0: port 3(macvtap1) entered blocking state [ 128.222751][ T7550] bridge0: port 3(macvtap1) entered disabled state [ 128.236489][ T7550] macvtap1: entered allmulticast mode [ 128.242402][ T7550] bridge0: entered allmulticast mode [ 128.264314][ T7550] macvtap1: left allmulticast mode [ 128.270073][ T7550] bridge0: left allmulticast mode [ 128.281067][ T7550] bridge0: left promiscuous mode [ 128.347749][ T7553] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 128.357995][ T7553] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 128.572940][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 128.615208][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.642826][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 128.733266][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 128.847181][ T7586] bridge_slave_1: left allmulticast mode [ 128.853020][ T7586] bridge_slave_1: left promiscuous mode [ 128.873884][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.174631][ T7604] netlink: 68 bytes leftover after parsing attributes in process `syz.4.384'. [ 129.225695][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 129.259523][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.384'. [ 129.473574][ T7622] netlink: 7 bytes leftover after parsing attributes in process `syz.3.388'. [ 129.593791][ T7632] netlink: 'syz.2.391': attribute type 43 has an invalid length. [ 129.602094][ T24] IPVS: starting estimator thread 0... [ 129.696139][ T7636] IPVS: using max 32 ests per chain, 76800 per kthread [ 129.888237][ T7640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.146574][ T7640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.353840][ T7640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.527539][ T7640] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.585207][ T7670] syzkaller0: entered promiscuous mode [ 130.591873][ T7670] syzkaller0: entered allmulticast mode [ 130.717579][ T3432] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.749966][ T3432] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.811196][ T3432] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.863646][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.282405][ T7695] __nla_validate_parse: 1 callbacks suppressed [ 131.282423][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.405'. [ 131.713680][ T7707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.817052][ T7737] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 132.840206][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 132.954113][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.961124][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.103698][ T7751] openvswitch: netlink: Flow actions attr not present in new flow. [ 133.135653][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 133.375250][ T7760] batadv1: entered promiscuous mode [ 133.455599][ T7766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.424'. [ 133.892725][ T7777] geneve2: entered promiscuous mode [ 134.081484][ T7778] geneve2: entered promiscuous mode [ 134.284122][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 134.953126][ T7805] xt_TCPMSS: Only works on TCP SYN packets [ 135.300096][ T7813] bpq0: entered allmulticast mode [ 135.585622][ T24] IPVS: starting estimator thread 0... [ 135.625815][ T7820] batman_adv: batadv0: Adding interface: vlan1 [ 135.632045][ T7820] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.702866][ T7822] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.711946][ T7826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.442'. [ 135.726219][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.750365][ T7828] netlink: 'syz.3.442': attribute type 11 has an invalid length. [ 135.846230][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.875901][ T7831] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 135.892605][ T7820] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 136.197305][ T7842] tipc: Enabled bearer , priority 0 [ 136.237247][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 136.342812][ T7842] tipc: Disabling bearer [ 136.460916][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.450'. [ 136.570802][ T7862] netlink: 'syz.2.453': attribute type 16 has an invalid length. [ 136.619987][ T7862] netlink: 'syz.2.453': attribute type 17 has an invalid length. [ 136.629999][ T7868] netlink: 'syz.4.451': attribute type 13 has an invalid length. [ 136.811014][ T7873] x_tables: duplicate underflow at hook 1 [ 137.285906][ T7876] netlink: 72 bytes leftover after parsing attributes in process `syz.1.455'. [ 137.345461][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.353353][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.364278][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 137.442787][ T7886] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 137.448817][ T7888] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 137.494663][ T7889] netlink: 'syz.1.455': attribute type 10 has an invalid length. [ 137.501014][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.503473][ T7889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.455'. [ 137.520005][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.658423][ T7862] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.667645][ T7862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.709607][ T7877] ip6gretap1: entered promiscuous mode [ 137.715386][ T7877] ip6gretap1: entered allmulticast mode [ 137.723423][ T7886] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 137.731372][ T7888] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 137.779116][ T7889] dummy0: entered promiscuous mode [ 137.798862][ T7889] bridge0: port 4(dummy0) entered blocking state [ 137.807439][ T7889] bridge0: port 4(dummy0) entered disabled state [ 137.833450][ T7889] dummy0: entered allmulticast mode [ 137.842144][ T7889] bridge0: port 4(dummy0) entered blocking state [ 137.848789][ T7889] bridge0: port 4(dummy0) entered forwarding state [ 137.859908][ T37] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.891497][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.928358][ T7895] netlink: 196 bytes leftover after parsing attributes in process `syz.2.459'. [ 137.928998][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 137.979040][ T7887] syz.1.455 (7887) used greatest stack depth: 17832 bytes left [ 138.176513][ T7914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.464'. [ 138.258472][ T37] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.268383][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.278339][ T37] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.287993][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.323228][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 138.323244][ T7916] netlink: 64 bytes leftover after parsing attributes in process `syz.1.464'. [ 138.343222][ T37] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.352700][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.854470][ T7934] bridge0: port 4(dummy0) entered disabled state [ 138.861073][ T7934] bridge0: port 3(batadv0) entered disabled state [ 138.868120][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.875914][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.151096][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.180724][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.497892][ T7935] batadv_slave_1: entered promiscuous mode [ 139.524876][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 139.623880][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.649381][ T7936] batadv_slave_1: left promiscuous mode [ 139.672158][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.905053][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.943550][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.355883][ T8023] syzkaller1: entered promiscuous mode [ 140.361475][ T8023] syzkaller1: entered allmulticast mode [ 140.384580][ T8025] openvswitch: netlink: Actions may not be safe on all matching packets [ 140.588025][ T8038] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 140.611646][ T8038] team0: Port device geneve0 added [ 140.621030][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.635177][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.647153][ T8040] netlink: 'syz.0.495': attribute type 15 has an invalid length. [ 140.754238][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.763002][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.829822][ T8049] netlink: 'syz.4.498': attribute type 2 has an invalid length. [ 140.875334][ T8048] netlink: 'syz.4.498': attribute type 2 has an invalid length. [ 140.952198][ T8056] netlink: 'syz.3.500': attribute type 29 has an invalid length. [ 141.219744][ T8067] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 141.488729][ T8080] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 141.596079][ T8087] __nla_validate_parse: 18 callbacks suppressed [ 141.596096][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 141.597233][ T8080] vlan2: entered promiscuous mode [ 141.630027][ T8080] bond0: entered promiscuous mode [ 141.635278][ T8080] bond_slave_0: entered promiscuous mode [ 141.662047][ T8080] bond_slave_1: entered promiscuous mode [ 142.662581][ T8123] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 142.726624][ T8123] bond1: (slave gretap1): making interface the new active one [ 142.748448][ T8123] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 142.835658][ T8123] vlan0: entered allmulticast mode [ 142.841391][ T8123] bond1: entered allmulticast mode [ 142.849274][ T8123] gretap1: entered allmulticast mode [ 142.857184][ T8123] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 142.892693][ T8127] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 142.909882][ T8127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 142.926912][ T8127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 142.937394][ T10] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 143.423261][ T8144] netlink: 'syz.2.523': attribute type 1 has an invalid length. [ 143.855992][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.525'. [ 143.989942][ T8157] netlink: 'syz.1.526': attribute type 4 has an invalid length. [ 145.010086][ T8185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.444670][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.540'. [ 145.461643][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 145.487904][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.540'. [ 145.492708][ T8209] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 145.610400][ T8209] bond2: entered promiscuous mode [ 145.625889][ T8209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.634676][ T8219] xt_TCPMSS: Only works on TCP SYN packets [ 145.641689][ T8220] xt_hashlimit: size too large, truncated to 1048576 [ 145.658276][ T8220] syz.1.543: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.713622][ T8220] CPU: 0 UID: 0 PID: 8220 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT(full) [ 145.713648][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.713666][ T8220] Call Trace: [ 145.713675][ T8220] [ 145.713683][ T8220] dump_stack_lvl+0x189/0x250 [ 145.713726][ T8220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.713752][ T8220] ? __pfx__printk+0x10/0x10 [ 145.713772][ T8220] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 145.713795][ T8220] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 145.713822][ T8220] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 145.713849][ T8220] warn_alloc+0x214/0x310 [ 145.713883][ T8220] ? __pfx_warn_alloc+0x10/0x10 [ 145.713914][ T8220] ? __get_vm_area_node+0x28f/0x300 [ 145.713940][ T8220] ? htable_create+0x101/0x7a0 [ 145.713970][ T8220] __vmalloc_node_range_noprof+0x690/0x12d0 [ 145.714021][ T8220] ? alloc_pages_mpol+0x3cd/0x4a0 [ 145.714041][ T8220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.714068][ T8220] ? rcu_is_watching+0x15/0xb0 [ 145.714089][ T8220] ? htable_create+0x101/0x7a0 [ 145.714134][ T8220] __kvmalloc_node_noprof+0x674/0x910 [ 145.714162][ T8220] ? htable_create+0x101/0x7a0 [ 145.714187][ T8220] ? hashlimit_pernet+0x23/0x240 [ 145.714213][ T8220] ? hashlimit_pernet+0x23/0x240 [ 145.714238][ T8220] ? hashlimit_pernet+0x23/0x240 [ 145.714270][ T8220] htable_create+0x101/0x7a0 [ 145.714307][ T8220] hashlimit_mt_check_common+0x719/0xa10 [ 145.714345][ T8220] xt_check_match+0x3d1/0xab0 [ 145.714378][ T8220] ? __pfx_xt_check_match+0x10/0x10 [ 145.714408][ T8220] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 145.714447][ T8220] ? xt_find_match+0x1f7/0x250 [ 145.714481][ T8220] translate_table+0x1553/0x2040 [ 145.714531][ T8220] ? __pfx_translate_table+0x10/0x10 [ 145.714561][ T8220] ? __might_fault+0xb0/0x130 [ 145.714617][ T8220] ? _copy_from_user+0x94/0xb0 [ 145.714648][ T8220] do_ip6t_set_ctl+0x970/0xce0 [ 145.714673][ T8220] ? rcu_is_watching+0x15/0xb0 [ 145.714696][ T8220] ? trace_contention_end+0x39/0x120 [ 145.714719][ T8220] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 145.714763][ T8220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.714791][ T8220] ? file_init_path+0x3b/0x590 [ 145.714817][ T8220] ? __lock_acquire+0xab9/0xd20 [ 145.714841][ T8220] nf_setsockopt+0x26f/0x290 [ 145.714876][ T8220] rawv6_setsockopt+0x23b/0x5b0 [ 145.714903][ T8220] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 145.714926][ T8220] ? aa_sock_opt_perm+0xff/0x1b0 [ 145.714957][ T8220] ? sock_common_setsockopt+0x36/0xc0 [ 145.714986][ T8220] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 145.715018][ T8220] do_sock_setsockopt+0x17c/0x1b0 [ 145.715045][ T8220] __x64_sys_setsockopt+0x13f/0x1b0 [ 145.715074][ T8220] do_syscall_64+0xfa/0xfa0 [ 145.715093][ T8220] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.715113][ T8220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.715132][ T8220] ? clear_bhb_loop+0x60/0xb0 [ 145.715155][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.715173][ T8220] RIP: 0033:0x7f31c3d8f749 [ 145.715199][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.715216][ T8220] RSP: 002b:00007f31c4b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.715236][ T8220] RAX: ffffffffffffffda RBX: 00007f31c3fe6090 RCX: 00007f31c3d8f749 [ 145.715251][ T8220] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 145.715262][ T8220] RBP: 00007f31c3e13f91 R08: 0000000000000588 R09: 0000000000000000 [ 145.715274][ T8220] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 145.715285][ T8220] R13: 00007f31c3fe6128 R14: 00007f31c3fe6090 R15: 00007ffd96fb4568 [ 145.715319][ T8220] [ 145.715363][ T8220] Mem-Info: [ 145.813028][ T8226] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 145.827926][ T8220] active_anon:5943 inactive_anon:0 isolated_anon:0 [ 145.827926][ T8220] active_file:3012 inactive_file:39906 isolated_file:0 [ 145.827926][ T8220] unevictable:768 dirty:42 writeback:0 [ 145.827926][ T8220] slab_reclaimable:10910 slab_unreclaimable:141070 [ 145.827926][ T8220] mapped:30331 shmem:1356 pagetables:1159 [ 145.827926][ T8220] sec_pagetables:0 bounce:0 [ 145.827926][ T8220] kernel_misc_reclaimable:0 [ 145.827926][ T8220] free:1280430 free_pcp:15091 free_cma:0 [ 145.962340][ T8213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.541'. [ 145.975708][ T8220] Node 0 active_anon:23572kB inactive_anon:0kB active_file:12048kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125324kB dirty:168kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12856kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 146.215184][ T8220] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 146.249448][ T8220] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.290067][ T8220] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 146.354307][ T8220] Node 0 DMA32 free:1210372kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23620kB inactive_anon:0kB active_file:12048kB inactive_file:159428kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:44104kB local_pcp:22864kB free_cma:0kB [ 146.414846][ T8220] lowmem_reserve[]: 0 0 0 0 0 [ 146.419841][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 146.424968][ T8220] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.442784][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 146.500068][ T8220] lowmem_reserve[]: 0 0 0 0 0 [ 146.523450][ T8220] Node 1 Normal free:3895724kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:8896kB free_cma:0kB [ 146.633004][ T8220] lowmem_reserve[]: 0 0 0 0 0 [ 146.652552][ T8220] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.674460][ T8220] Node 0 DMA32: 180*4kB (UME) 22*8kB (UME) 11*16kB (M) 389*32kB (UME) 76*64kB (UME) 29*128kB (UME) 10*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 7*2048kB (UME) 285*4096kB (M) = 1211472kB [ 146.681642][ T8253] netlink: 256 bytes leftover after parsing attributes in process `syz.2.552'. [ 146.743549][ T8220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 146.789877][ T8220] Node 1 Normal: 191*4kB (UE) 54*8kB (UME) 38*16kB (UME) 73*32kB (UME) 28*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3895724kB [ 146.815048][ T8254] IPVS: Scheduler module ip_vs_ not found [ 146.841890][ T8220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.866398][ T8220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.887563][ T8220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.912458][ T8220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.939350][ T8220] 45420 total pagecache pages [ 146.963452][ T8220] 0 pages in swap cache [ 146.974496][ T8220] Free swap = 124996kB [ 146.994708][ T8220] Total swap = 124996kB [ 147.003445][ T8220] 2097051 pages RAM [ 147.013544][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.025218][ T8220] 0 pages HighMem/MovableOnly [ 147.029934][ T8220] 424134 pages reserved [ 147.056882][ T8220] 0 pages cma reserved [ 147.249031][ T8269] netlink: ct family unspecified [ 147.287518][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.297546][ T8274] IPVS: Error connecting to the multicast addr [ 147.316787][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 147.593203][ T8283] tipc: Enabled bearer , priority 0 [ 147.600668][ T8283] syzkaller0: entered promiscuous mode [ 147.606243][ T8283] syzkaller0: entered allmulticast mode [ 147.891265][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 147.905597][ T8295] syzkaller0: entered promiscuous mode [ 147.911107][ T8295] syzkaller0: entered allmulticast mode [ 147.922032][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 147.934917][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'. [ 147.946213][ T8310] netlink: 1 bytes leftover after parsing attributes in process `syz.2.567'. [ 147.956362][ T8282] tipc: Resetting bearer [ 147.970828][ T8282] tipc: Disabling bearer [ 148.185714][ T8325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.193862][ T8325] IPv6: NLM_F_CREATE should be set when creating new route [ 148.202548][ T8325] IPv6: NLM_F_CREATE should be set when creating new route [ 148.213497][ T8325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.121332][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.582'. [ 149.137018][ T8371] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.427377][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 150.447453][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'. [ 150.494575][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 151.942369][ T8458] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 151.951912][ T8458] __nla_validate_parse: 2 callbacks suppressed [ 151.951931][ T8458] netlink: 244 bytes leftover after parsing attributes in process `syz.2.606'. [ 151.961933][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 152.072740][ T8461] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 152.129150][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 152.217154][ T8467] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.227615][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 152.325625][ T8467] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.335567][ T8470] netlink: 'syz.2.610': attribute type 21 has an invalid length. [ 152.352932][ T8470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.610'. [ 152.430865][ T8484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.476600][ T8483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.558934][ T8467] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.640977][ T8467] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.646458][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 152.690302][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 152.725855][ T8503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.775789][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 152.846693][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 152.907994][ T3487] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.978502][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.039282][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.096495][ T3432] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.532915][ T8546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 153.884251][ T8559] netlink: 'syz.3.632': attribute type 13 has an invalid length. [ 154.085547][ T8569] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 154.097375][ T8570] bridge_slave_1: left allmulticast mode [ 154.103136][ T8570] bridge_slave_1: left promiscuous mode [ 154.109636][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.119103][ T8570] bridge_slave_0: left promiscuous mode [ 154.125735][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.225378][ T8562] ip6tnl2: entered allmulticast mode [ 154.232027][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.241629][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.330827][ T8575] bond2: (slave bridge2): making interface the new active one [ 154.347747][ T8575] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 154.408211][ T8572] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 154.427660][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.466399][ T8569] macvlan3: entered promiscuous mode [ 154.471885][ T8569] macvlan3: entered allmulticast mode [ 154.487135][ T8569] bond2: entered promiscuous mode [ 154.492394][ T8569] bridge2: entered promiscuous mode [ 154.501593][ T8569] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 154.512249][ T8569] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 154.530812][ T8569] bond2: left promiscuous mode [ 154.538667][ T8569] bridge2: left promiscuous mode [ 154.592479][ T8590] netlink: 'syz.2.639': attribute type 4 has an invalid length. [ 154.647031][ T8593] netlink: 'syz.2.639': attribute type 4 has an invalid length. [ 154.683849][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.755983][ T8587] batadv_slave_1: entered promiscuous mode [ 154.763086][ T8587] batadv_slave_1: left promiscuous mode [ 155.047478][ T8602] bond2: option lp_interval: invalid value (0) [ 155.070869][ T8602] bond2: option lp_interval: allowed values 1 - 2147483647 [ 155.085464][ T8602] bond2 (unregistering): Released all slaves [ 155.168231][ T8611] 8021q: VLANs not supported on gre0 [ 156.211402][ T8670] openvswitch: netlink: Actions may not be safe on all matching packets [ 157.150688][ T8709] __nla_validate_parse: 12 callbacks suppressed [ 157.150706][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.667'. [ 157.211598][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 157.538407][ T8712] syzkaller0: entered promiscuous mode [ 157.563919][ T8712] syzkaller0: entered allmulticast mode [ 157.599740][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 157.606539][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 157.695435][ T8729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 159.064051][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.672'. [ 159.126083][ T8734] vxcan1: entered allmulticast mode [ 159.506791][ T8754] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 159.516098][ T8754] netlink: 2 bytes leftover after parsing attributes in process `syz.1.676'. [ 159.537562][ T8754] bond0: entered promiscuous mode [ 159.564055][ T8754] bond_slave_0: entered promiscuous mode [ 159.580292][ T8754] bond_slave_1: entered promiscuous mode [ 159.592388][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.600637][ T8754] bridge0: port 5(bond0) entered blocking state [ 159.612812][ T8754] bridge0: port 5(bond0) entered disabled state [ 159.619680][ T8754] bond0: entered allmulticast mode [ 159.626864][ T8754] bond_slave_0: entered allmulticast mode [ 159.633598][ T8754] bond_slave_1: entered allmulticast mode [ 160.011376][ T8783] tap0: tun_chr_ioctl cmd 1074025673 [ 160.076102][ T8787] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 160.088440][ T8787] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.686'. [ 160.515557][ T8800] vlan2: entered allmulticast mode [ 160.537622][ T8800] dummy0: entered allmulticast mode [ 160.925587][ T8824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.694'. [ 161.578205][ T8860] netlink: 'syz.0.702': attribute type 13 has an invalid length. [ 161.630270][ T8860] netlink: 'syz.0.702': attribute type 17 has an invalid length. [ 161.655766][ T8841] syzkaller1: entered promiscuous mode [ 161.661283][ T8841] syzkaller1: entered allmulticast mode [ 161.769667][ T8841] ip6gre0: entered promiscuous mode [ 161.838408][ T8841] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 161.900905][ T8854] syzkaller1: left promiscuous mode [ 161.919246][ T8854] syzkaller1: left allmulticast mode [ 162.483541][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.708'. [ 162.886562][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 162.990700][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 163.514979][ T8935] xt_hashlimit: size too large, truncated to 1048576 [ 163.582423][ T8941] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 163.623205][ T8943] Cannot find del_set index 2 as target [ 163.640051][ T8941] bond3: entered promiscuous mode [ 163.651644][ T8941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.807618][ T8941] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.843506][ T8941] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 163.854567][ T8941] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 163.989622][ T8947] netlink: 'syz.2.723': attribute type 1 has an invalid length. [ 164.070085][ T8947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.128584][ T8947] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 164.136674][ T8947] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 164.149466][ T8947] bond3: (slave wlan0): Opening slave failed [ 164.462534][ T8963] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x91 [ 164.809138][ T8975] tipc: Enabled bearer , priority 0 [ 164.844671][ T8975] netlink: 'syz.2.733': attribute type 13 has an invalid length. [ 164.850937][ T8977] xt_CT: No such helper "snmp_trap" [ 164.888791][ T8979] xt_CT: No such helper "snmp_trap" [ 165.038042][ T8986] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 165.132744][ T8983] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 165.147461][ T8983] syzkaller0: entered promiscuous mode [ 165.153038][ T8983] syzkaller0: entered allmulticast mode [ 165.288831][ T8986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.317778][ T8988] vxcan3: entered allmulticast mode [ 165.326303][ T8989] tipc: Resetting bearer [ 165.354348][ T8991] veth5: entered promiscuous mode [ 165.375728][ T8991] bond2: (slave veth5): Enslaving as an active interface with a down link [ 165.417569][ T8974] tipc: Resetting bearer [ 165.439328][ T8974] tipc: Disabling bearer [ 165.830841][ T9011] netlink: 'syz.0.738': attribute type 2 has an invalid length. [ 165.842253][ T9011] netlink: 'syz.0.738': attribute type 5 has an invalid length. [ 166.553666][ T9040] Cannot find add_set index 0 as target [ 166.561388][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 166.776612][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 167.557858][ T9063] xt_hashlimit: max too large, truncated to 1048576 [ 167.596411][ T9060] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 167.606564][ T9060] dvmrp1: linktype set to 769 [ 167.795517][ T9066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.831585][ T9064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.679334][ T9135] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 168.835973][ T9147] netlink: 336 bytes leftover after parsing attributes in process `syz.4.772'. [ 168.891058][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 168.912006][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 168.936465][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.772'. [ 168.937035][ T9153] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 169.092645][ T9151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.158602][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 169.181328][ T9159] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.300730][ T9159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.323859][ T9159] bond4: (slave lo): Enslaving as an active interface with an up link [ 169.464837][ T9164] bond4 (unregistering): (slave lo): Releasing backup interface [ 169.473991][ T9164] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 169.487501][ T9164] bond4 (unregistering): Released all slaves [ 169.530238][ T9173] ip6gretap3: entered promiscuous mode [ 169.538530][ T9173] ip6gretap3: entered allmulticast mode [ 169.551956][ T9184] netlink: 168 bytes leftover after parsing attributes in process `syz.3.779'. [ 169.585963][ T9188] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 169.595814][ T9188] netlink: 224 bytes leftover after parsing attributes in process `syz.4.780'. [ 169.896414][ T9210] netlink: 'syz.2.786': attribute type 3 has an invalid length. [ 169.952087][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 169.973114][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 170.002205][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 170.063864][ T9215] netlink: 'syz.2.786': attribute type 7 has an invalid length. [ 170.163657][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.171886][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.179635][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.187347][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.195003][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.202605][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.210281][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.218006][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.225659][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.391288][ T9206] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 170.952929][ T9255] vlan2: entered promiscuous mode [ 171.462200][ T9276] tipc: Enabled bearer , priority 0 [ 171.621056][ T9291] nbd0: detected capacity change from 0 to 127 [ 171.662996][ T52] block nbd0: Receive control failed (result -104) [ 171.731068][ T9275] tipc: Disabling bearer [ 172.321923][ T9335] tipc: Enabled bearer , priority 0 [ 172.345715][ T9327] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 172.356406][ T9327] syzkaller0: entered promiscuous mode [ 172.362165][ T9327] syzkaller0: entered allmulticast mode [ 172.397745][ T9326] tipc: Resetting bearer [ 172.460275][ T9326] tipc: Disabling bearer [ 172.718770][ T9348] bridge4: entered promiscuous mode [ 174.114622][ T9427] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 174.155443][ T9434] warn_alloc: 1 callbacks suppressed [ 174.155460][ T9434] syz.4.840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 174.192620][ T9436] __nla_validate_parse: 15 callbacks suppressed [ 174.192641][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 174.224203][ T9434] ,cpuset=/,mems_allowed=0-1 [ 174.228952][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.4.840 Not tainted syzkaller #0 PREEMPT(full) [ 174.228977][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.228989][ T9434] Call Trace: [ 174.228996][ T9434] [ 174.229005][ T9434] dump_stack_lvl+0x189/0x250 [ 174.229040][ T9434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.229068][ T9434] ? __pfx__printk+0x10/0x10 [ 174.229089][ T9434] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.229117][ T9434] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.229146][ T9434] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.229182][ T9434] warn_alloc+0x214/0x310 [ 174.229212][ T9434] ? stack_depot_save_flags+0x40/0x860 [ 174.229248][ T9434] ? __pfx_warn_alloc+0x10/0x10 [ 174.229279][ T9434] ? kasan_save_track+0x3e/0x80 [ 174.229305][ T9434] ? __kasan_kmalloc+0x93/0xb0 [ 174.229336][ T9434] ? xsk_setsockopt+0x4dc/0x8d0 [ 174.229363][ T9434] ? do_sock_setsockopt+0x17c/0x1b0 [ 174.229384][ T9434] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 174.229404][ T9434] ? do_syscall_64+0xfa/0xfa0 [ 174.229423][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.229453][ T9434] __vmalloc_node_range_noprof+0x125/0x12d0 [ 174.229514][ T9434] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.229548][ T9434] ? __kasan_kmalloc+0x93/0xb0 [ 174.229583][ T9434] vmalloc_user_noprof+0xad/0xf0 [ 174.229612][ T9434] ? xskq_create+0xbf/0x170 [ 174.229632][ T9434] xskq_create+0xbf/0x170 [ 174.229653][ T9434] xsk_init_queue+0xb0/0x110 [ 174.229686][ T9434] xsk_setsockopt+0x4dc/0x8d0 [ 174.229718][ T9434] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.229750][ T9434] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.229781][ T9434] ? aa_sock_opt_perm+0xff/0x1b0 [ 174.229814][ T9434] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 174.229838][ T9434] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.229869][ T9434] do_sock_setsockopt+0x17c/0x1b0 [ 174.229897][ T9434] __x64_sys_setsockopt+0x13f/0x1b0 [ 174.229925][ T9434] do_syscall_64+0xfa/0xfa0 [ 174.229944][ T9434] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.229964][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.229983][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 174.230007][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.230026][ T9434] RIP: 0033:0x7fe68878f749 [ 174.230043][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.230060][ T9434] RSP: 002b:00007fe689580038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.230080][ T9434] RAX: ffffffffffffffda RBX: 00007fe6889e6090 RCX: 00007fe68878f749 [ 174.230094][ T9434] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 174.230106][ T9434] RBP: 00007fe688813f91 R08: 0000000000000004 R09: 0000000000000000 [ 174.230118][ T9434] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.230131][ T9434] R13: 00007fe6889e6128 R14: 00007fe6889e6090 R15: 00007fff1b91d898 [ 174.230171][ T9434] [ 174.230178][ T9434] Mem-Info: [ 174.542867][ T9427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.580701][ T9441] netem: change failed [ 174.581438][ T9434] active_anon:5973 inactive_anon:0 isolated_anon:0 [ 174.581438][ T9434] active_file:3012 inactive_file:39917 isolated_file:0 [ 174.581438][ T9434] unevictable:768 dirty:85 writeback:0 [ 174.581438][ T9434] slab_reclaimable:11130 slab_unreclaimable:173682 [ 174.581438][ T9434] mapped:30378 shmem:1358 pagetables:1190 [ 174.581438][ T9434] sec_pagetables:0 bounce:0 [ 174.581438][ T9434] kernel_misc_reclaimable:0 [ 174.581438][ T9434] free:1246857 free_pcp:14268 free_cma:0 [ 174.622721][ T9440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.842'. [ 174.635739][ T9434] Node 0 active_anon:23892kB inactive_anon:0kB active_file:12048kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121512kB dirty:340kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13124kB pagetables:4620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.712555][ T9434] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.746678][ T9434] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.777912][ T9434] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 174.783950][ T9434] Node 0 DMA32 free:1076360kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23892kB inactive_anon:0kB active_file:12048kB inactive_file:159472kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:39516kB local_pcp:19728kB free_cma:0kB [ 174.821523][ T9434] lowmem_reserve[]: 0 0 0 0 0 [ 174.827940][ T9434] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.869278][ T9451] netlink: 244 bytes leftover after parsing attributes in process `syz.0.844'. [ 174.925097][ T9434] lowmem_reserve[]: 0 0 0 0 0 [ 174.929985][ T9434] Node 1 Normal free:3895724kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:8896kB free_cma:0kB [ 174.939575][ T9455] netlink: 'syz.1.845': attribute type 13 has an invalid length. [ 174.993678][ T95] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.003499][ T95] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.007954][ T9455] netlink: 'syz.1.845': attribute type 17 has an invalid length. [ 175.012654][ T95] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.030934][ T9434] lowmem_reserve[]: [ 175.033111][ T95] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.046739][ T25] block nbd0: Dead connection, failed to find a fallback [ 175.060416][ T25] block nbd0: shutting down sockets [ 175.067429][ T25] blk_print_req_error: 138 callbacks suppressed [ 175.067447][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.085628][ T25] buffer_io_error: 138 callbacks suppressed [ 175.085646][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 175.103576][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.114218][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 175.122156][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.131630][ T9434] 0 0 0 0 [ 175.132088][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 175.148689][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.158231][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 175.168208][ T5882] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.168953][ T9434] 0 [ 175.178426][ T5882] Buffer I/O error on dev nbd0, logical block 0, async page read [ 175.190070][ T5882] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.200143][ T5882] Buffer I/O error on dev nbd0, logical block 1, async page read [ 175.208539][ T5882] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.217964][ T5882] Buffer I/O error on dev nbd0, logical block 2, async page read [ 175.221434][ T9434] [ 175.226142][ T5882] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.237817][ T5882] Buffer I/O error on dev nbd0, logical block 3, async page read [ 175.246056][ T5882] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.259411][ T9434] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.260401][ T5882] Buffer I/O error on dev nbd0, logical block 0, async page read [ 175.283407][ T5882] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.293004][ T5882] Buffer I/O error on dev nbd0, logical block 1, async page read [ 175.305831][ T5882] ldm_validate_partition_table(): Disk read failed. [ 175.314459][ T5882] Dev nbd0: unable to read RDB block 0 [ 175.317621][ T9455] bridge0: port 5(bond0) entered blocking state [ 175.321942][ T5882] nbd0: unable to read partition table [ 175.326543][ T9455] bridge0: port 5(bond0) entered forwarding state [ 175.339471][ T9434] Node 0 DMA32: 2264*4kB (UME) 821*8kB (UM) 314*16kB (UME) 289*32kB (UM) 57*64kB (UM) 35*128kB (UM) 23*256kB (UM) 14*512kB (UME) 7*1024kB (UME) 7*2048kB (UME) 243*4096kB (UM) = 1067912kB [ 175.363921][ T5882] ldm_validate_partition_table(): Disk read failed. [ 175.375369][ T5882] Dev nbd0: unable to read RDB block 0 [ 175.382139][ T9434] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.397972][ T5882] nbd0: unable to read partition table [ 175.398089][ T9455] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.443418][ T9434] Node 1 Normal: 191*4kB (UE) 54*8kB (UME) 38*16kB (UME) 73*32kB (UME) 28*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3895724kB [ 175.449771][ T9455] bridge0: port 4(dummy0) entered blocking state [ 175.469823][ T9455] bridge0: port 4(dummy0) entered forwarding state [ 175.478545][ T9434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.502641][ T9434] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 175.523407][ T9434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.558116][ T9455] net_ratelimit: 3312 callbacks suppressed [ 175.558127][ T9455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.572443][ T9434] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 175.623644][ T9434] 44286 total pagecache pages [ 175.628552][ T9434] 0 pages in swap cache [ 175.633104][ T9434] Free swap = 124996kB [ 175.637896][ T9434] Total swap = 124996kB [ 175.643253][ T9434] 2097051 pages RAM [ 175.666535][ T9434] 0 pages HighMem/MovableOnly [ 175.684883][ T9434] 424134 pages reserved [ 175.698101][ T9434] 0 pages cma reserved [ 175.841334][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.876175][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.912259][ T9480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.003273][ T9484] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 176.045142][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.082118][ T9484] bond0: (slave team0): Enslaving as an active interface with an up link [ 176.141524][ T9486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.298464][ T9493] xt_hashlimit: overflow, try lower: 0/0 [ 176.347434][ T9498] syzkaller0: entered promiscuous mode [ 176.359305][ T9498] syzkaller0: entered allmulticast mode [ 176.648275][ T9517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 176.688159][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 176.697532][ T9512] tunl0: Caught tx_queue_len zero misconfig [ 176.698923][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.864'. [ 176.974273][ T9529] tipc: Can't bind to reserved service type 2 [ 177.208525][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 177.346913][ T9540] nbd: must specify at least one socket [ 177.397067][ T9547] veth1_to_batadv: entered promiscuous mode [ 177.408619][ T9547] veth1_to_batadv: entered allmulticast mode [ 177.694213][ T9558] wg1 speed is unknown, defaulting to 1000 [ 177.707135][ T9558] wg1 speed is unknown, defaulting to 1000 [ 177.849161][ T9558] wg1 speed is unknown, defaulting to 1000 [ 177.865595][ T9558] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.916993][ T9558] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.025235][ T9558] wg1 speed is unknown, defaulting to 1000 [ 178.064793][ T9558] wg1 speed is unknown, defaulting to 1000 [ 178.072528][ T9558] wg1 speed is unknown, defaulting to 1000 [ 178.123451][ T9558] wg1 speed is unknown, defaulting to 1000 [ 178.131198][ T9558] wg1 speed is unknown, defaulting to 1000 [ 178.178685][ T9558] wg1 speed is unknown, defaulting to 1000 [ 178.536816][ T9586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.882'. [ 178.660510][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 178.730807][ T9602] openvswitch: netlink: IP tunnel dst address not specified [ 178.807257][ T9607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.888'. [ 178.928661][ T9612] netlink: 'syz.4.890': attribute type 27 has an invalid length. [ 178.962913][ T9612] ip6gre0: left promiscuous mode [ 179.023569][ T9615] nbd: must specify at least one socket [ 179.035254][ T9615] block nbd0: NBD_DISCONNECT [ 179.039982][ T9615] block nbd0: Send disconnect failed -32 [ 179.076986][ T9612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.121554][ T9612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.165335][ T9618] tipc: Enabled bearer , priority 0 [ 179.182745][ T9617] tipc: Resetting bearer [ 179.254706][ T9616] tipc: Disabling bearer [ 179.341003][ T9636] __nla_validate_parse: 3 callbacks suppressed [ 179.341020][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 179.412273][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'. [ 179.530641][ T9655] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 179.702382][ T9655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.978236][ T9653] wg1 speed is unknown, defaulting to 1000 [ 180.097705][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 180.329357][ T9673] xt_CT: No such helper "netbios-ns" [ 180.817936][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.915'. [ 180.971599][ T9715] sctp: [Deprecated]: syz.3.919 (pid 9715) Use of int in max_burst socket option. [ 180.971599][ T9715] Use struct sctp_assoc_value instead [ 181.050391][ T9668] wg1 speed is unknown, defaulting to 1000 [ 181.725114][ T9734] netlink: 'syz.4.922': attribute type 12 has an invalid length. [ 181.735376][ T9734] netlink: 'syz.4.922': attribute type 29 has an invalid length. [ 181.773006][ T9734] netlink: 148 bytes leftover after parsing attributes in process `syz.4.922'. [ 181.802173][ T9734] netlink: 51 bytes leftover after parsing attributes in process `syz.4.922'. [ 181.878295][ T9739] batadv_slave_0: Caught tx_queue_len zero misconfig [ 181.906512][ T9725] wg1 speed is unknown, defaulting to 1000 [ 181.929353][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 182.745627][ T9779] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 183.031406][ T9791] dvmrp1: entered allmulticast mode [ 183.224637][ T9791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 183.423566][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 183.547614][ T9815] netlink: 'syz.1.941': attribute type 10 has an invalid length. [ 183.564271][ T9816] netlink: 'syz.1.941': attribute type 10 has an invalid length. [ 183.597370][ T9815] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.606476][ T9815] team0: entered promiscuous mode [ 183.611542][ T9815] team_slave_0: entered promiscuous mode [ 183.653860][ T9815] team_slave_1: entered promiscuous mode [ 183.659737][ T9815] geneve0: entered promiscuous mode [ 183.713849][ T9815] team0: entered allmulticast mode [ 183.719153][ T9815] team_slave_0: entered allmulticast mode [ 183.728197][ T9815] team_slave_1: entered allmulticast mode [ 183.735212][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 183.743136][ T9815] geneve0: entered allmulticast mode [ 183.750852][ T9815] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.790144][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 183.805795][ T9831] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 183.822061][ T9826] tipc: Enabled bearer , priority 0 [ 183.920359][ T9831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.955377][ T9826] tipc: Disabling bearer [ 183.989908][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.100736][ T9856] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.150097][ T9830] bond4 (unregistering): Released all slaves [ 184.361421][ T9868] __nla_validate_parse: 2 callbacks suppressed [ 184.361438][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 184.552419][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 184.583038][ T9861] wg1 speed is unknown, defaulting to 1000 [ 184.843859][ T9884] netlink: 'syz.3.959': attribute type 2 has an invalid length. [ 185.128640][ T9899] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 185.241064][ T9899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.676296][ T9889] wg1 speed is unknown, defaulting to 1000 [ 185.758630][ T9922] lo: Caught tx_queue_len zero misconfig [ 185.764518][ T9922] netlink: 264 bytes leftover after parsing attributes in process `syz.2.970'. [ 185.813105][ T9878] wg1 speed is unknown, defaulting to 1000 [ 186.010358][ T9932] netlink: 'syz.0.972': attribute type 13 has an invalid length. [ 186.052996][ T9932] netlink: 'syz.0.972': attribute type 17 has an invalid length. [ 186.156741][ T9938] netlink: 'syz.2.975': attribute type 11 has an invalid length. [ 186.276985][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 186.331697][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.977'. [ 186.612068][ T9930] wg1 speed is unknown, defaulting to 1000 [ 186.767417][ T9959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.980'. [ 186.893123][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.980'. [ 187.007862][ T9955] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 187.182306][ T9966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.317583][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 187.762674][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 187.908385][ T9991] netlink: 'syz.0.989': attribute type 9 has an invalid length. [ 188.045822][ T9993] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 188.053738][ T9993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.218209][T10007] netlink: 56 bytes leftover after parsing attributes in process `syz.2.995'. [ 188.538143][T10017] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 188.553124][T10017] bond2: left promiscuous mode [ 188.559616][T10017] bridge4: left promiscuous mode [ 188.727739][ T9990] wg1 speed is unknown, defaulting to 1000 [ 188.743630][T10035] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 188.996577][T10039] netlink: 'syz.1.1006': attribute type 4 has an invalid length. [ 189.052591][ T9987] wg1 speed is unknown, defaulting to 1000 [ 189.348303][T10049] bridge0: port 5(bond0) entered disabled state [ 189.354775][T10049] bridge0: port 4(dummy0) entered disabled state [ 189.508277][T10059] __nla_validate_parse: 4 callbacks suppressed [ 189.508296][T10059] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1010'. [ 189.550587][T10059] netlink: 'syz.1.1010': attribute type 11 has an invalid length. [ 189.695712][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 189.722471][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'. [ 189.823273][T10067] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1014'. [ 189.885428][ T30] audit: type=1804 audit(1763931268.278:2): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1014" name="x000000000000000a00000000000000000000012" dev="tmpfs" ino=1132 res=1 errno=0 [ 189.922636][ T30] audit: type=1800 audit(1763931268.288:3): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1014" name="x000000000000000a00000000000000000000012" dev="tmpfs" ino=1132 res=0 errno=0 [ 190.082455][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 190.350473][T10097] netlink: 'syz.0.1023': attribute type 6 has an invalid length. [ 190.401314][T10090] bond1: left promiscuous mode [ 190.409692][T10090] ip6gretap3: left promiscuous mode [ 190.418722][T10090] vlan2: left promiscuous mode [ 190.427377][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.444568][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.471264][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.490227][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.494349][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 190.515198][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 190.778437][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 190.788732][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 190.851436][T10116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1028'. [ 191.280527][T10146] netlink: 'syz.4.1036': attribute type 21 has an invalid length. [ 191.418018][T10138] wg1 speed is unknown, defaulting to 1000 [ 192.016417][T10149] wg1 speed is unknown, defaulting to 1000 [ 192.409091][ T60] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.444039][ T60] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.462720][ T60] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.481995][ T60] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.658915][T10202] bridge0: port 6(macvtap1) entered blocking state [ 192.668268][T10202] bridge0: port 6(macvtap1) entered disabled state [ 192.678908][T10202] macvtap1: entered allmulticast mode [ 192.685678][T10202] bridge0: entered allmulticast mode [ 192.694549][T10202] macvtap1: left allmulticast mode [ 192.699701][T10202] bridge0: left allmulticast mode [ 192.725103][T10164] wg1 speed is unknown, defaulting to 1000 [ 193.232739][T10228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.299849][T10260] bond0: (slave bond_slave_1): Releasing backup interface [ 194.334319][T10260] bond_slave_1 (unregistering): left promiscuous mode [ 194.361563][T10260] bond_slave_1 (unregistering): left allmulticast mode [ 194.377677][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.387467][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393908][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.154313][T10303] netlink: 'syz.0.1070': attribute type 10 has an invalid length. [ 195.162414][T10303] __nla_validate_parse: 9 callbacks suppressed [ 195.162430][T10303] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1070'. [ 195.210617][T10306] netlink: 'syz.1.1068': attribute type 12 has an invalid length. [ 195.756326][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'. [ 195.848376][T10325] veth3: entered promiscuous mode [ 195.856994][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'. [ 195.908642][T10333] erspan0: entered allmulticast mode [ 195.942612][T10333] netlink: 'syz.4.1074': attribute type 29 has an invalid length. [ 195.961603][T10333] netlink: 'syz.4.1074': attribute type 29 has an invalid length. [ 195.979967][T10333] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1074'. [ 196.029426][T10338] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 196.169713][T10338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.178036][T10347] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 196.185747][T10347] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 196.194433][T10347] bond3: (slave wlan0): Opening slave failed [ 196.437600][T10361] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.463850][T10361] Cannot find set identified by id 3 to match [ 196.658461][T10371] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1089'. [ 196.687668][T10374] netlink: 'syz.0.1088': attribute type 9 has an invalid length. [ 196.733437][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 196.851037][T10386] pimreg: entered allmulticast mode [ 196.870608][T10386] pimreg: left allmulticast mode [ 197.104483][T10394] dvmrp0: entered allmulticast mode [ 197.136802][T10396] netlink: 'syz.1.1096': attribute type 10 has an invalid length. [ 197.157331][T10396] dummy0: left allmulticast mode [ 197.161842][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'. [ 197.162316][T10396] dummy0: left promiscuous mode [ 197.183816][T10398] Bluetooth: MGMT ver 1.23 [ 197.195136][T10396] bridge0: port 4(dummy0) entered disabled state [ 197.241327][T10396] dummy0: entered promiscuous mode [ 197.263942][T10396] dummy0: entered allmulticast mode [ 197.270866][T10396] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 197.311746][T10396] team0: Failed to send options change via netlink (err -105) [ 197.330559][T10396] team0: Port device dummy0 added [ 197.364863][T10410] netlink: 'syz.0.1099': attribute type 3 has an invalid length. [ 197.384006][T10410] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1099'. [ 197.410383][T10401] syzkaller1: entered promiscuous mode [ 197.416508][T10401] syzkaller1: entered allmulticast mode [ 201.573797][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 201.573857][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 201.579897][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 209.733606][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.815745][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.824812][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.831077][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.818467][T10419] sctp: [Deprecated]: syz.2.1103 (pid 10419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.818467][T10419] Use struct sctp_sack_info instead [ 312.850047][T10419] xt_NFQUEUE: number of total queues is 0 [ 312.903588][T10429] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 312.916787][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 312.995621][T10429] bond5: entered promiscuous mode [ 313.005914][T10429] bond5: entered allmulticast mode [ 313.011827][T10429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.297619][T10446] syzkaller0: entered promiscuous mode [ 313.304174][T10446] syzkaller0: entered allmulticast mode [ 313.348784][T10446] veth0: entered promiscuous mode [ 313.356323][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 313.436041][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'. [ 313.654574][T10450] wg1 speed is unknown, defaulting to 1000 [ 313.691688][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 313.878486][T10469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1114'. [ 314.258925][T10481] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1118'. [ 314.279386][T10481] tipc: Enabled bearer , priority 0 [ 314.287332][T10481] syzkaller0: entered promiscuous mode [ 314.292899][T10481] syzkaller0: entered allmulticast mode [ 314.305031][T10481] tipc: Resetting bearer [ 314.312997][T10480] tipc: Resetting bearer [ 314.327874][T10480] tipc: Disabling bearer [ 314.439668][T10485] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 314.456358][T10485] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 314.510649][T10493] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 315.506141][T10523] wg1 speed is unknown, defaulting to 1000 [ 315.999110][T10545] xt_hashlimit: size too large, truncated to 1048576 [ 316.075527][T10547] ieee802154 phy0 wpan0: encryption failed: -90 [ 316.103145][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 316.332888][T10539] wg1 speed is unknown, defaulting to 1000 [ 316.348574][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 316.513081][T10568] x_tables: duplicate underflow at hook 1 [ 316.822270][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 316.835811][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 317.166941][T10570] wg1 speed is unknown, defaulting to 1000 [ 317.201054][T10583] syzkaller0: entered promiscuous mode [ 317.209106][T10583] syzkaller0: entered allmulticast mode [ 317.259655][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.280431][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288317][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.551937][T10598] netlink: 'syz.4.1148': attribute type 10 has an invalid length. [ 317.573896][T10598] bond0: entered promiscuous mode [ 317.579325][T10598] bond_slave_0: entered promiscuous mode [ 317.587114][T10598] bond_slave_1: entered promiscuous mode [ 317.594479][T10598] team0: entered promiscuous mode [ 317.600531][T10598] team_slave_0: entered promiscuous mode [ 317.607990][T10598] team_slave_1: entered promiscuous mode [ 317.617742][T10598] bridge0: port 3(bond0) entered blocking state [ 317.625598][T10598] bridge0: port 3(bond0) entered disabled state [ 317.634629][T10598] bond0: entered allmulticast mode [ 317.639798][T10598] bond_slave_0: entered allmulticast mode [ 317.646400][T10598] bond_slave_1: entered allmulticast mode [ 317.652239][T10598] team0: entered allmulticast mode [ 317.658574][T10598] team_slave_0: entered allmulticast mode [ 317.664639][T10598] team_slave_1: entered allmulticast mode [ 317.672783][T10598] bridge0: port 3(bond0) entered blocking state [ 317.679389][T10598] bridge0: port 3(bond0) entered forwarding state [ 318.232894][T10601] netlink: 'syz.0.1149': attribute type 30 has an invalid length. [ 318.273176][T10601] bond6: option arp_missed_max: invalid value (0) [ 318.283963][T10601] bond6: option arp_missed_max: allowed values 1 - 255 [ 318.298130][T10601] bond6 (unregistering): Released all slaves [ 318.768261][T10635] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 318.807967][T10636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.945624][T10652] netlink: 'syz.4.1160': attribute type 2 has an invalid length. [ 319.039150][T10656] bpq0: left allmulticast mode [ 319.074337][T10660] __nla_validate_parse: 2 callbacks suppressed [ 319.074357][T10660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1163'. [ 319.090221][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1163'. [ 319.202999][T10663] netlink: 'syz.0.1164': attribute type 3 has an invalid length. [ 319.271719][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 319.580913][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 319.592927][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 319.735935][ T30] audit: type=1800 audit(1763931398.138:4): pid=10693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1171" name="memory.events" dev="tmpfs" ino=1261 res=0 errno=0 [ 319.762600][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 319.788087][ T30] audit: type=1804 audit(1763931398.138:5): pid=10693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1171" name="/newroot/242/memory.events" dev="tmpfs" ino=1261 res=1 errno=0 [ 320.171211][T10716] netlink: 376 bytes leftover after parsing attributes in process `syz.3.1180'. [ 320.181587][T10716] openvswitch: netlink: Flow key attr not present in new flow. [ 320.275718][T10723] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 320.324590][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1183'. [ 320.377284][T10723] bond5: (slave veth17): Enslaving as an active interface with a down link [ 320.443356][T10732] netlink: 'syz.3.1184': attribute type 39 has an invalid length. [ 320.501770][T10737] sctp: [Deprecated]: syz.3.1184 (pid 10737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.501770][T10737] Use struct sctp_sack_info instead [ 320.585011][T10739] Bluetooth: MGMT ver 1.23 [ 320.941592][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 321.584553][T10733] wg1 speed is unknown, defaulting to 1000 [ 321.920402][T10804] xt_ecn: cannot match TCP bits for non-tcp packets [ 322.152453][T10809] syzkaller0: entered promiscuous mode [ 322.158437][T10809] syzkaller0: entered allmulticast mode [ 322.176167][T10817] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1204'. [ 322.518482][T10819] tipc: Enabled bearer , priority 0 [ 322.531653][T10813] tipc: Resetting bearer [ 322.654607][T10813] tipc: Disabling bearer [ 322.760837][T10829] bond0: Unable to set up delay as MII monitoring is disabled [ 322.778483][T10830] bond0: Unable to set up delay as MII monitoring is disabled [ 322.858494][T10834] netlink: 'syz.2.1209': attribute type 27 has an invalid length. [ 322.913910][T10835] netlink: 'syz.2.1209': attribute type 27 has an invalid length. [ 322.990881][T10834] bridge1: port 1(vlan2) entered disabled state [ 323.150731][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.173875][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.239655][T10834] veth1_macvtap: left allmulticast mode [ 323.447190][T10839] bond0: left allmulticast mode [ 323.452498][T10839] bond_slave_0: left allmulticast mode [ 323.458707][T10839] bond_slave_1: left allmulticast mode [ 323.465701][T10839] team0: left allmulticast mode [ 323.470581][T10839] team_slave_0: left allmulticast mode [ 323.476241][T10839] team_slave_1: left allmulticast mode [ 323.481914][T10839] bridge0: port 3(bond0) entered disabled state [ 323.493880][T10839] bridge_slave_1: left allmulticast mode [ 323.499622][T10839] bridge_slave_1: left promiscuous mode [ 323.505800][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.515180][T10839] bridge_slave_0: left allmulticast mode [ 323.520997][T10839] bridge_slave_0: left promiscuous mode [ 323.527457][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.598944][T10840] veth19: entered promiscuous mode [ 323.614491][T10846] vxcan1: entered promiscuous mode [ 323.625217][ T3525] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.637184][ T3525] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.669982][ T3525] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.693325][ T3525] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.729414][ T3525] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.761505][ T3525] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.837145][ T3525] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.864716][ T3525] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.175824][T10892] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20003 [ 324.298047][T10622] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.312680][T10622] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.401513][T10622] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.420311][T10865] wg1 speed is unknown, defaulting to 1000 [ 324.420340][T10622] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.599311][T10918] netlink: 'syz.3.1227': attribute type 2 has an invalid length. [ 324.632779][T10918] : entered promiscuous mode [ 325.001699][T10938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.348751][T10950] __nla_validate_parse: 5 callbacks suppressed [ 325.348770][T10950] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1235'. [ 325.613707][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 325.616235][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 325.623017][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 325.660340][T10963] IPVS: set_ctl: invalid protocol: 168 255.255.255.255:20002 [ 325.908132][T10972] bond0: (slave team0): Releasing backup interface [ 325.924811][T10972] team0: left promiscuous mode [ 325.933335][T10972] team_slave_0: left promiscuous mode [ 325.967233][T10972] team_slave_1: left promiscuous mode [ 326.036348][T10972] bond0: (slave bond_slave_0): Releasing backup interface [ 326.064628][T10972] bond_slave_0: left promiscuous mode [ 326.104651][T10972] bond0: (slave bond_slave_1): Releasing backup interface [ 326.148179][T10972] bond_slave_1: left promiscuous mode [ 326.164538][T10972] team0: Port device team_slave_0 removed [ 326.197125][T10972] team0: Port device team_slave_1 removed [ 326.214370][T10972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.234907][T10972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.264476][T10972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.312252][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 326.328614][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 326.362556][T10992] bridge0: entered promiscuous mode [ 326.370835][T10992] bridge0: port 3(macvtap1) entered blocking state [ 326.378264][T10992] bridge0: port 3(macvtap1) entered disabled state [ 326.387715][T10992] macvtap1: entered allmulticast mode [ 326.393339][T10992] bridge0: entered allmulticast mode [ 326.402039][T10992] macvtap1: left allmulticast mode [ 326.407985][T10992] bridge0: left allmulticast mode [ 326.434361][T10992] bridge0: left promiscuous mode [ 326.983171][T10984] wg1 speed is unknown, defaulting to 1000 [ 327.127509][T11012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1251'. [ 327.422689][T11028] batadv_slave_1: entered promiscuous mode [ 327.507622][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 327.596621][T11035] pimreg: entered allmulticast mode [ 327.860156][T11047] team_slave_0 (unregistering): left promiscuous mode [ 327.868412][T11047] team_slave_0 (unregistering): left allmulticast mode [ 327.877085][T11047] team0: Port device team_slave_0 removed [ 327.996222][T11055] xt_hashlimit: size too large, truncated to 1048576 [ 328.022170][T11056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1262'. [ 328.053862][T11056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1262'. [ 328.228177][T11028] batadv_slave_1: left promiscuous mode [ 328.405348][T11069] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 328.524710][T11077] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 328.530092][T11076] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 328.552934][T11076] netlink: 'syz.4.1270': attribute type 2 has an invalid length. [ 328.572612][T11077] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 328.584418][T11077] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 328.631728][T11082] syz.3.1266 (11082) used obsolete PPPIOCDETACH ioctl [ 329.354688][T11118] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 329.364042][T11118] openvswitch: netlink: Message has 75 unknown bytes. [ 329.801183][T11146] netlink: 'syz.2.1286': attribute type 10 has an invalid length. [ 329.854532][T11146] team0: Port device geneve0 added [ 329.884146][T10632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.892934][T10632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.939851][T10632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.949900][T10632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.165242][T11172] netlink: 'syz.2.1293': attribute type 4 has an invalid length. [ 330.482219][T11185] x_tables: duplicate underflow at hook 2 [ 330.719152][T11199] tipc: Enabling of bearer rejected, failed to enable media [ 330.742182][T11200] __nla_validate_parse: 11 callbacks suppressed [ 330.742200][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'. [ 330.802644][T11203] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1302'. [ 331.200270][T11212] wg1 speed is unknown, defaulting to 1000 [ 331.803675][T11220] wg1 speed is unknown, defaulting to 1000 [ 332.088506][T11247] tipc: Enabled bearer , priority 0 [ 332.132260][T11254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1315'. [ 332.167247][T11247] syzkaller0: entered promiscuous mode [ 332.191672][T11247] syzkaller0: entered allmulticast mode [ 332.363843][T11247] tipc: Resetting bearer [ 332.403945][T11244] tipc: Resetting bearer [ 332.466324][T11244] tipc: Disabling bearer [ 335.585898][T11274] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 335.588561][T11273] tipc: Enabled bearer , priority 0 [ 335.601554][T11274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.614049][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 335.614322][T11273] syzkaller0: entered promiscuous mode [ 335.640081][T11273] syzkaller0: entered allmulticast mode [ 335.646388][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1322'. [ 335.661212][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 335.677718][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 335.688162][T11276] netlink: 'syz.4.1322': attribute type 11 has an invalid length. [ 335.744160][T11285] netlink: 'syz.2.1324': attribute type 10 has an invalid length. [ 335.757779][T11285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.777568][T11285] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 335.799986][T11273] tipc: Resetting bearer [ 335.810486][T11270] tipc: Resetting bearer [ 335.834072][T11270] tipc: Disabling bearer [ 335.911072][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 335.924506][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1327'. [ 336.025258][T11302] tipc: Enabled bearer , priority 0 [ 336.025335][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 336.045013][T11302] syzkaller0: entered promiscuous mode [ 336.060914][T11302] syzkaller0: entered allmulticast mode [ 336.123986][T11302] tipc: Resetting bearer [ 336.200936][T11301] tipc: Resetting bearer [ 336.244051][T11301] tipc: Disabling bearer [ 336.375755][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 336.565503][T11340] team0: Port device team_slave_1 removed [ 336.600182][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 336.764490][T11345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1341'. [ 336.783447][T11345] nbd: must specify at least one socket [ 336.864442][T11353] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 336.938396][T11355] sit1: entered promiscuous mode [ 336.982989][T11359] xt_TCPMSS: Only works on TCP SYN packets [ 337.161663][T11365] netlink: 'syz.0.1347': attribute type 8 has an invalid length. [ 337.212537][T11364] bond4: option all_slaves_active: invalid value (13) [ 337.235477][T11364] bond4 (unregistering): Released all slaves [ 337.352617][T11325] wg1 speed is unknown, defaulting to 1000 [ 337.800918][T11399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1357'. [ 337.899747][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1360'. [ 337.996665][T11408] nbd: socks must be embedded in a SOCK_ITEM attr [ 338.036575][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1360'. [ 338.074370][T11409] nbd: device at index 64 is going down [ 339.084099][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 339.104857][T11473] netlink: 'syz.4.1373': attribute type 1 has an invalid length. [ 339.257679][T11476] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 339.318143][T11476] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 339.432729][T11480] macvlan3: entered promiscuous mode [ 339.445252][T11480] macvlan3: entered allmulticast mode [ 339.460625][T11480] bond4: entered promiscuous mode [ 339.485961][T11480] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 339.498766][T11480] bond4: left promiscuous mode [ 339.532196][T11455] wg1 speed is unknown, defaulting to 1000 [ 341.146141][T11496] wg1 speed is unknown, defaulting to 1000 [ 341.397799][T11538] syzkaller0: entered promiscuous mode [ 341.404209][T11538] syzkaller0: entered allmulticast mode [ 341.515901][T11543] __nla_validate_parse: 3 callbacks suppressed [ 341.515920][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1391'. [ 341.567346][T11547] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1391'. [ 341.580097][T11547] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1391'. [ 341.609575][T11544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1391'. [ 341.885717][T11559] netlink: 'syz.1.1396': attribute type 39 has an invalid length. [ 342.070824][T11573] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 342.090677][T11575] ieee802154 phy0 wpan0: encryption failed: -90 [ 342.125187][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 342.170414][T11573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.244725][T11577] vxcan1: entered promiscuous mode [ 342.257913][T11577] vxcan1: entered allmulticast mode [ 342.274803][T11583] delete_channel: no stack [ 342.344231][T11573] veth5: entered promiscuous mode [ 342.372947][T11573] bond4: (slave veth5): Enslaving as an active interface with a down link [ 342.401288][T11553] wg1 speed is unknown, defaulting to 1000 [ 343.150024][T11616] syzkaller0: entered promiscuous mode [ 343.172390][T11616] syzkaller0: entered allmulticast mode [ 343.254822][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 344.794886][T11635] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.878584][T11635] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.904432][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1416'. [ 344.984972][T11635] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.137398][T11635] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.200697][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1421'. [ 345.342854][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.357565][T11663] netlink: 584 bytes leftover after parsing attributes in process `syz.2.1423'. [ 345.381703][T10622] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.395488][T11664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 345.432868][T10622] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.462695][T11667] x_tables: duplicate underflow at hook 2 [ 345.500413][T10625] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.571017][T11674] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 345.616825][T11671] tipc: Enabled bearer , priority 0 [ 345.626889][T11671] netlink: 'syz.0.1426': attribute type 13 has an invalid length. [ 345.857300][T11680] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.866656][T11680] syzkaller0: entered promiscuous mode [ 345.879322][T11680] syzkaller0: entered allmulticast mode [ 345.926775][T11671] tipc: Resetting bearer [ 345.949187][T11670] tipc: Resetting bearer [ 346.015400][T11670] tipc: Disabling bearer [ 346.359624][T11724] xfrm1: entered allmulticast mode [ 346.381330][T11729] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 346.637151][T11744] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 346.728912][T11744] bond6 (unregistering): Released all slaves [ 347.106633][T11732] wg1 speed is unknown, defaulting to 1000 [ 347.126507][T11769] tipc: Enabled bearer , priority 0 [ 347.149958][T11769] syzkaller0: entered promiscuous mode [ 347.155804][T11769] syzkaller0: entered allmulticast mode [ 347.189892][T11765] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.200173][T11768] tipc: Resetting bearer [ 347.208309][T11765] __nla_validate_parse: 1 callbacks suppressed [ 347.208325][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 347.238856][T11768] tipc: Disabling bearer [ 347.457514][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 347.584472][T11783] tun1: tun_chr_ioctl cmd 1074025675 [ 347.596506][T11783] tun1: persist enabled [ 347.607764][T11783] tun1: tun_chr_ioctl cmd 1074025675 [ 347.622442][T11783] tun1: persist disabled [ 347.666735][T11789] netlink: 'syz.1.1458': attribute type 12 has an invalid length. [ 347.676533][T11790] netlink: 'syz.1.1458': attribute type 12 has an invalid length. [ 347.883141][T11807] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1459'. [ 348.223980][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1462'. [ 348.298556][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1462'. [ 348.792083][T11826] macvtap1: entered promiscuous mode [ 348.814954][T11826] team0: entered promiscuous mode [ 348.820143][T11826] team_slave_0: entered promiscuous mode [ 348.856249][T11826] team_slave_1: entered promiscuous mode [ 348.863963][T11826] geneve0: entered promiscuous mode [ 348.900017][T11826] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 348.908858][T11826] team0: Device macvtap1 is already an upper device of the team interface [ 348.922055][T11826] team0: left promiscuous mode [ 348.927890][T11826] team_slave_0: left promiscuous mode [ 348.934334][T11826] team_slave_1: left promiscuous mode [ 348.939992][T11826] geneve0: left promiscuous mode [ 349.114350][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1473'. [ 349.133503][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1473'. [ 349.286171][T11855] syzkaller0: entered promiscuous mode [ 349.291965][T11855] syzkaller0: entered allmulticast mode [ 349.444356][T11836] wg1 speed is unknown, defaulting to 1000 [ 349.479055][T11859] netlink: 'syz.1.1477': attribute type 10 has an invalid length. [ 349.522744][T11862] netlink: 'syz.3.1478': attribute type 322 has an invalid length. [ 349.820324][T11880] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 349.885716][T11880] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.073443][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 350.137208][T11883] bond5: (slave gretap1): making interface the new active one [ 350.162788][T11883] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 350.412717][T11880] bond5 (unregistering): (slave gretap1): Releasing active interface [ 350.425942][T11880] bond5 (unregistering): Released all slaves [ 350.462924][T11894] ip6tnl0: Caught tx_queue_len zero misconfig [ 350.470720][T11894] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1486'. [ 350.812862][T11932] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 351.058245][T11949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 351.786368][T11972] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 351.922841][T11982] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 351.941473][T11982] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 352.038509][T11972] macvlan0: entered promiscuous mode [ 352.047928][T11972] macvlan0: entered allmulticast mode [ 352.056784][T11972] bond5: entered promiscuous mode [ 352.062534][T11972] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 352.077092][T11972] bond5: left promiscuous mode [ 352.119140][T11995] netlink: 'syz.2.1514': attribute type 14 has an invalid length. [ 352.139488][T11986] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 352.170756][T11991] nbd: socks must be embedded in a SOCK_ITEM attr [ 352.213052][T11996] bridge7: entered promiscuous mode [ 352.248276][T11989] __nla_validate_parse: 10 callbacks suppressed [ 352.248295][T11989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1512'. [ 352.266775][T11989] netlink: 'syz.0.1512': attribute type 2 has an invalid length. [ 352.418054][T12004] macsec1: entered promiscuous mode [ 352.424064][T12004] macsec1: entered allmulticast mode [ 352.629257][T12012] bond0: (slave bond_slave_0): Releasing backup interface [ 352.637766][T12012] bond_slave_0: left promiscuous mode [ 352.646104][T12012] bond0: (slave bond_slave_1): Releasing backup interface [ 352.654945][T12012] bond_slave_1: left promiscuous mode [ 352.662078][T12012] team0: Port device team_slave_0 removed [ 352.669728][T12012] team0: Port device team_slave_1 removed [ 352.676736][T12012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.687857][T12012] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 353.067344][T12033] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 353.524230][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 353.865371][T12080] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 354.609857][T12087] netlink: 'syz.0.1539': attribute type 2 has an invalid length. [ 354.625144][T12087] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1539'. [ 354.817235][T12092] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1540'. [ 354.963090][T12104] netlink: 'syz.0.1542': attribute type 4 has an invalid length. [ 355.013716][T12105] netlink: 'syz.0.1542': attribute type 4 has an invalid length. [ 355.184463][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1544'. [ 355.436007][T12107] wg1 speed is unknown, defaulting to 1000 [ 355.540721][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 355.731874][T12133] x_tables: ip_tables: osf match: only valid for protocol 6 [ 355.935699][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 355.935701][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 356.129554][T12150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.238795][T12165] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1558'. [ 356.317680][T12150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.382312][T12168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1559'. [ 356.415700][T12168] tipc: Invalid UDP bearer configuration [ 356.415753][T12168] tipc: Enabling of bearer rejected, failed to enable media [ 356.475997][T12150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.513841][T12133] wg1 speed is unknown, defaulting to 1000 [ 356.578767][T12150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.625907][T12179] x_tables: unsorted underflow at hook 3 [ 356.653136][T12179] netlink: 'syz.2.1561': attribute type 6 has an invalid length. [ 356.707632][T12179] IPv6: sit2: Disabled Multicast RS [ 356.718565][T12179] x_tables: unsorted underflow at hook 3 [ 356.858188][ T3525] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.900956][ T3525] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.920754][T12164] wg1 speed is unknown, defaulting to 1000 [ 356.979649][ T3525] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.988562][ T3525] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.575422][T12198] sctp: [Deprecated]: syz.4.1565 (pid 12198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.575422][T12198] Use struct sctp_sack_info instead [ 357.629821][T12193] __nla_validate_parse: 2 callbacks suppressed [ 357.629841][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 357.931927][T12210] netlink: 'syz.4.1569': attribute type 8 has an invalid length. [ 358.172422][T12216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.207332][T12221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.462732][T12223] wg1 speed is unknown, defaulting to 1000 [ 358.970128][T12250] netlink: 'syz.4.1577': attribute type 11 has an invalid length. [ 359.003268][T12250] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1577'. [ 359.027974][T12250] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20002 [ 359.200142][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 359.310799][T12271] x_tables: duplicate underflow at hook 2 [ 359.331092][T12271] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1583'. [ 359.342433][T12273] netlink: 'syz.4.1584': attribute type 1 has an invalid length. [ 359.433554][T12273] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.535051][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 359.574568][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1584'. [ 359.809508][T12294] bond5 (unregistering): Released all slaves [ 359.884464][T12298] nicvf0: tun_chr_ioctl cmd 2147767520 [ 359.901713][T12298] nicvf0: tun_chr_ioctl cmd 1074025677 [ 359.920080][T12298] nicvf0: linktype set to 768 [ 360.175671][T12318] tipc: Enabled bearer , priority 0 [ 360.183181][T12316] syzkaller0: entered promiscuous mode [ 360.188823][T12316] syzkaller0: entered allmulticast mode [ 360.297662][T12322] tipc: Resetting bearer [ 360.350907][T12322] tipc: Disabling bearer [ 360.529052][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 360.535152][T12299] wg1 speed is unknown, defaulting to 1000 [ 360.624985][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1600'. [ 360.716961][T12342] delete_channel: no stack [ 360.724568][T12342] delete_channel: no stack [ 360.736402][T12342] delete_channel: no stack [ 360.744778][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 360.763567][T12342] delete_channel: no stack [ 360.769899][T12342] delete_channel: no stack [ 360.784092][T12342] delete_channel: no stack [ 360.788806][T12342] delete_channel: no stack [ 360.793698][T12342] delete_channel: no stack [ 360.798381][T12342] delete_channel: no stack [ 360.803056][T12342] delete_channel: no stack [ 360.808110][T12342] delete_channel: no stack [ 360.812602][T12331] wg1 speed is unknown, defaulting to 1000 [ 360.830296][T12342] delete_channel: no stack [ 360.835536][T12342] delete_channel: no stack [ 360.840136][T12342] delete_channel: no stack [ 360.844885][T12342] delete_channel: no stack [ 360.849552][T12342] delete_channel: no stack [ 360.854378][T12342] delete_channel: no stack [ 360.894032][T12342] delete_channel: no stack [ 360.898702][T12342] delete_channel: no stack [ 360.914267][T12342] delete_channel: no stack [ 360.918902][T12342] delete_channel: no stack [ 360.946673][T12342] delete_channel: no stack [ 360.951298][T12342] delete_channel: no stack [ 360.964612][T12342] delete_channel: no stack [ 360.969800][T12342] delete_channel: no stack [ 360.975151][T12342] delete_channel: no stack [ 360.979764][T12342] delete_channel: no stack [ 360.985932][T12342] delete_channel: no stack [ 361.056061][T12345] delete_channel: no stack [ 361.088727][T12345] delete_channel: no stack [ 361.108895][T12345] delete_channel: no stack [ 361.132740][T12345] delete_channel: no stack [ 361.148864][T12357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1605'. [ 361.166020][T12345] delete_channel: no stack [ 361.388114][T12303] wg1 speed is unknown, defaulting to 1000 [ 361.404142][T12367] netlink: 'syz.4.1608': attribute type 4 has an invalid length. [ 361.488166][T12375] sctp: [Deprecated]: syz.3.1609 (pid 12375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.488166][T12375] Use struct sctp_sack_info instead [ 361.509980][T12364] batadv_slave_1: entered promiscuous mode [ 361.709947][T12362] batadv_slave_1: left promiscuous mode [ 361.810627][T12384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.368872][T12406] netlink: 'syz.0.1618': attribute type 3 has an invalid length. [ 362.387200][T12406] syz_tun: entered allmulticast mode [ 362.395309][T12406] pimreg: left allmulticast mode [ 362.492097][T12380] wg1 speed is unknown, defaulting to 1000 [ 362.505241][T12375] wg1 speed is unknown, defaulting to 1000 [ 362.519739][T12406] sit0: left promiscuous mode [ 362.536518][T12406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.759179][T12396] wg1 speed is unknown, defaulting to 1000 [ 362.768952][T12407] siw: device registration error -23 [ 362.796133][T12405] syz_tun: left allmulticast mode [ 362.891743][T12410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.631456][T12424] openvswitch: netlink: Missing valid actions attribute. [ 363.646492][T12424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.790633][T12433] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.983326][ T30] audit: type=1804 audit(1763931442.358:6): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1626" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1671 res=1 errno=0 [ 364.015981][ T30] audit: type=1800 audit(1763931442.358:7): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1626" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1671 res=0 errno=0 [ 364.253965][T12461] veth21: entered promiscuous mode [ 364.282039][T12468] netlink: 'syz.1.1634': attribute type 21 has an invalid length. [ 364.290970][T12468] __nla_validate_parse: 6 callbacks suppressed [ 364.290987][T12468] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1634'. [ 364.585998][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 364.636107][T12482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.643504][T12482] IPv6: NLM_F_CREATE should be set when creating new route [ 364.674117][T12482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.681486][T12482] IPv6: NLM_F_CREATE should be set when creating new route [ 365.162924][T12505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1644'. [ 365.217824][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 365.347687][T12517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'. [ 365.671832][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 365.766272][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 365.797563][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 366.022668][T12550] xt_TCPMSS: Only works on TCP SYN packets [ 366.204855][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 366.359593][T12569] netlink: 'syz.2.1665': attribute type 3 has an invalid length. [ 366.368438][T12570] netlink: 'syz.2.1665': attribute type 3 has an invalid length. [ 366.378909][T12569] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 366.397381][T12570] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 366.414978][T12569] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1665'. [ 366.609967][T12556] wg1 speed is unknown, defaulting to 1000 [ 366.802493][T12582] bond0: entered allmulticast mode [ 366.811751][T12582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.132250][T12601] netlink: 'syz.4.1670': attribute type 4 has an invalid length. [ 367.142314][T12601] netlink: 'syz.4.1670': attribute type 4 has an invalid length. [ 367.194041][T12604] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 367.253117][T12603] bond0: (slave batadv0): Releasing backup interface [ 367.342216][T12603] bridge_slave_0: left allmulticast mode [ 367.385460][T12603] bridge_slave_0: left promiscuous mode [ 367.402226][T12603] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.436761][T12603] bond0: (slave bond_slave_0): Releasing backup interface [ 367.452865][T12603] bond0: (slave bond_slave_1): Releasing backup interface [ 367.469493][T12603] team0: Port device team_slave_0 removed [ 367.481090][T12603] team0: Port device team_slave_1 removed [ 367.488578][T12603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.498529][T12603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.509073][T12603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.620426][T12555] wg1 speed is unknown, defaulting to 1000 [ 367.842985][T12616] xt_l2tp: v2 doesn't support IP mode [ 368.186020][T12595] wg1 speed is unknown, defaulting to 1000 [ 368.576315][T12637] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 369.131479][T12643] xt_CT: No such helper "netbios-ns" [ 369.441339][T12653] __nla_validate_parse: 7 callbacks suppressed [ 369.441359][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 369.474638][T12645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 369.954711][T12653] bridge_slave_1: left allmulticast mode [ 369.981451][T12653] bridge_slave_1: left promiscuous mode [ 370.000151][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.018574][T12653] bridge_slave_0: left allmulticast mode [ 370.028371][T12653] bridge_slave_0: left promiscuous mode [ 370.035466][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.210141][T12642] wg1 speed is unknown, defaulting to 1000 [ 370.407683][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1684'. [ 370.420052][T12665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1684'. [ 370.589949][T12671] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 370.624154][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 370.633750][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 370.642644][T12671] netlink: 'syz.2.1686': attribute type 19 has an invalid length. [ 371.125383][T12684] team0: Mode changed to "broadcast" [ 371.131966][T12685] syzkaller0: entered promiscuous mode [ 371.137739][T12685] syzkaller0: entered allmulticast mode [ 371.152140][T12684] ipvlan2: entered promiscuous mode [ 371.158201][T12685] tipc: Enabling of bearer rejected, failed to enable media [ 371.462788][T12696] bond1: left allmulticast mode [ 371.471131][T12696] ip6gretap3: left allmulticast mode [ 371.500099][T12696] vxcan1: left promiscuous mode [ 371.509046][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 371.517042][T12696] vxcan1: left allmulticast mode [ 371.535512][T12696] veth5: left promiscuous mode [ 371.548387][T12696] xfrm1: left allmulticast mode [ 371.561817][T12696] macsec1: left promiscuous mode [ 371.567510][T12696] macsec1: left allmulticast mode [ 371.581493][T10632] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.592133][T10632] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.631094][T12697] hsr_slave_0: left promiscuous mode [ 371.652118][T12697] hsr_slave_1: left promiscuous mode [ 371.736280][T10632] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.777774][T10632] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.809145][T12704] tipc: Enabled bearer , priority 0 [ 371.819456][T12704] syzkaller0: entered promiscuous mode [ 371.843546][T12704] syzkaller0: entered allmulticast mode [ 371.861208][T12705] netem: incorrect gi model size [ 371.881161][T12705] netem: change failed [ 371.946264][T12704] tipc: Resetting bearer [ 371.958674][T12703] tipc: Resetting bearer [ 371.985826][T12713] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 372.004860][T12703] tipc: Disabling bearer [ 372.017617][T12709] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.125401][T12713] 8021q: adding VLAN 0 to HW filter on device bond7 [ 372.209716][T12716] 8021q: adding VLAN 0 to HW filter on device bond7 [ 372.230640][T12716] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 372.243014][T12716] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 372.271117][T12737] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 372.356435][T12733] "syz.3.1706" (12733) uses obsolete ecb(arc4) skcipher [ 372.428534][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1707'. [ 372.440449][T12709] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.523172][T12723] veth7: entered promiscuous mode [ 372.573941][T12737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.604459][T12742] vlan4: entered allmulticast mode [ 372.617507][T12753] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1708'. [ 372.627629][T12742] veth1: entered allmulticast mode [ 372.644927][T12742] bond4: (slave vlan4): Opening slave failed [ 372.671681][T12709] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.700286][T12753] 0ªX¹¦À: renamed from caif0 [ 372.718944][T12753] 0ªX¹¦À: entered allmulticast mode [ 372.725174][T12753] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 372.757752][T12709] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.827268][T12766] netlink: 'syz.3.1711': attribute type 26 has an invalid length. [ 372.852467][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 373.005763][ T3525] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.078297][ T3525] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.121507][ T3525] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.192832][ T37] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.248363][T12787] netlink: 'syz.2.1718': attribute type 12 has an invalid length. [ 373.284153][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 373.335362][T12792] netlink: 'syz.3.1721': attribute type 27 has an invalid length. [ 373.466249][T12799] tipc: Enabled bearer , priority 0 [ 373.493061][T12802] syzkaller0: entered promiscuous mode [ 373.533032][T12802] syzkaller0: entered allmulticast mode [ 373.568583][T12807] x_tables: duplicate underflow at hook 1 [ 373.625582][T12802] tipc: Resetting bearer [ 373.694325][T12802] tipc: Disabling bearer [ 374.002683][T12814] wg1 speed is unknown, defaulting to 1000 [ 374.246167][T12822] bridge_slave_1: left allmulticast mode [ 374.252294][T12822] bridge_slave_1: left promiscuous mode [ 374.259188][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.466340][T12828] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 374.662245][T12842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.729201][T12847] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1736'. [ 374.766111][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 375.039139][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 375.378532][T12869] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.385592][T12869] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.430892][T12872] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1745'. [ 375.463361][T12872] block nbd0: not configured, cannot reconfigure [ 375.669640][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 375.703137][T12893] netlink: 'syz.4.1749': attribute type 8 has an invalid length. [ 375.750326][T12893] netlink: 'syz.4.1749': attribute type 16 has an invalid length. [ 375.758954][T12893] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 375.774709][T12893] netlink: 'syz.4.1749': attribute type 2 has an invalid length. [ 376.118159][T12912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.236033][T12897] wg1 speed is unknown, defaulting to 1000 [ 376.247981][T12917] smc: removing ib device !yz! [ 376.560092][T12929] geneve3: entered allmulticast mode [ 376.710980][T12929] wg1 speed is unknown, defaulting to 1000 [ 377.015547][T12945] netlink: 'syz.0.1763': attribute type 9 has an invalid length. [ 377.034987][T12945] netlink: 'syz.0.1763': attribute type 11 has an invalid length. [ 377.063841][T12945] netlink: 'syz.0.1763': attribute type 12 has an invalid length. [ 377.074488][T12945] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1763'. [ 377.109894][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 377.213755][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 377.808549][T12968] netlink: 'syz.4.1768': attribute type 1 has an invalid length. [ 377.868490][T12968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.891164][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1768'. [ 378.036667][T12971] wg1 speed is unknown, defaulting to 1000 [ 378.127994][T12974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1769'. [ 378.153292][T12974] tipc: Invalid UDP bearer configuration [ 378.153351][T12974] tipc: Enabling of bearer rejected, failed to enable media [ 378.510150][T12989] tipc: Enabled bearer , priority 0 [ 378.523987][T12989] syzkaller0: entered promiscuous mode [ 378.529581][T12989] syzkaller0: entered allmulticast mode [ 378.538615][T12985] netlink: 'syz.4.1772': attribute type 11 has an invalid length. [ 378.564516][T12989] tipc: Resetting bearer [ 378.578775][T12988] tipc: Resetting bearer [ 378.596933][T12988] tipc: Disabling bearer [ 378.696736][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.714584][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.720976][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.630415][T13020] wg1 speed is unknown, defaulting to 1000 [ 379.638886][T13022] tipc: Enabled bearer , priority 0 [ 379.656027][T13022] syzkaller0: entered promiscuous mode [ 379.661750][T13022] syzkaller0: entered allmulticast mode [ 379.707812][T13022] tipc: Resetting bearer [ 379.727793][T13018] tipc: Resetting bearer [ 379.755897][T13018] tipc: Disabling bearer [ 379.899942][T13032] Unsupported ieee802154 address type: 0 [ 379.912995][T13032] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 380.021391][T13036] __nla_validate_parse: 4 callbacks suppressed [ 380.021408][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 380.050080][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1788'. [ 381.122862][T13044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1788'. [ 381.452668][T13044] nbd: device at index 64 is going down [ 382.940609][T13042] wg1 speed is unknown, defaulting to 1000 [ 392.251205][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'. [ 395.871355][T13055] wg1 speed is unknown, defaulting to 1000 [ 410.281402][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.511754][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.610804][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.151292][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.639533][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.180413][ T5150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.322787][ T5150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.603093][ T5150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.950430][ T5150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.192801][ T5150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.372478][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.441028][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.591595][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.992278][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 414.301508][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 414.302306][ T5834] Bluetooth: hci5: command tx timeout [ 414.902530][T13073] wg1 speed is unknown, defaulting to 1000 [ 416.009555][T13075] wg1 speed is unknown, defaulting to 1000 [ 416.310855][ T5834] Bluetooth: hci6: command tx timeout [ 416.380471][ T5834] Bluetooth: hci5: command tx timeout [ 416.792421][ T5834] Bluetooth: hci7: command tx timeout [ 418.380629][ T5834] Bluetooth: hci6: command tx timeout [ 418.462945][ T5834] Bluetooth: hci5: command tx timeout [ 418.599312][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 418.682885][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 418.742972][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 418.860957][ T5834] Bluetooth: hci7: command tx timeout [ 419.351319][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 419.620295][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 419.869909][T13077] wg1 speed is unknown, defaulting to 1000 [ 420.461430][ T5850] Bluetooth: hci6: command tx timeout [ 420.552092][ T5850] Bluetooth: hci5: command tx timeout [ 420.940728][ T5850] Bluetooth: hci7: command tx timeout [ 422.303072][ T5850] Bluetooth: hci8: command tx timeout [ 422.540450][ T5850] Bluetooth: hci6: command tx timeout [ 423.020761][ T5850] Bluetooth: hci7: command tx timeout [ 424.381864][ T5850] Bluetooth: hci8: command tx timeout [ 425.902762][T13083] wg1 speed is unknown, defaulting to 1000 [ 426.470773][ T5850] Bluetooth: hci8: command tx timeout [ 428.541586][ T5850] Bluetooth: hci8: command tx timeout [ 436.500506][T13073] chnl_net:caif_netlink_parms(): no params data found [ 440.162950][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.231501][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.290070][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.792351][T13075] chnl_net:caif_netlink_parms(): no params data found [ 441.821892][ T36] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 449.871906][T13116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.277125][T13073] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.422443][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.610641][T13073] bridge_slave_0: entered allmulticast mode [ 451.712640][T13073] bridge_slave_0: entered promiscuous mode [ 453.820890][T13073] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.942371][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.090092][T13073] bridge_slave_1: entered allmulticast mode [ 454.400108][T13073] bridge_slave_1: entered promiscuous mode [ 459.770669][T13077] chnl_net:caif_netlink_parms(): no params data found [ 461.852921][T13125] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 465.892463][T13083] chnl_net:caif_netlink_parms(): no params data found [ 471.022978][ T5150] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 471.110596][ T5150] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 471.229452][ T5150] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 471.551099][ T5150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 471.732841][ T5150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 472.781985][ T5834] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 472.861819][ T5834] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 472.981954][ T5834] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 473.402268][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 474.161193][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 474.652227][T13140] wg1 speed is unknown, defaulting to 1000 [ 476.001347][ T5850] Bluetooth: hci9: command tx timeout [ 476.272780][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 476.341371][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 476.541070][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 476.990514][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 477.321458][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 478.072260][ T5850] Bluetooth: hci9: command tx timeout [ 479.421981][ T52] Bluetooth: hci10: command tx timeout [ 480.141187][ T52] Bluetooth: hci9: command tx timeout [ 480.241783][ T52] Bluetooth: hci7: command tx timeout [ 481.510195][ T52] Bluetooth: hci10: command tx timeout [ 482.222921][ T52] Bluetooth: hci9: command tx timeout [ 482.322696][ T52] Bluetooth: hci7: command tx timeout [ 483.042726][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.152744][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.322994][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.592435][ T5850] Bluetooth: hci10: command tx timeout [ 483.691331][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.982983][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.391517][ T52] Bluetooth: hci7: command tx timeout [ 485.659641][ T5150] Bluetooth: hci10: command tx timeout [ 486.191450][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 486.470631][ T5150] Bluetooth: hci7: command tx timeout [ 486.622420][ T5150] Bluetooth: hci5: command tx timeout [ 488.701446][ T5150] Bluetooth: hci5: command tx timeout [ 489.537437][T13142] wg1 speed is unknown, defaulting to 1000 [ 490.832686][ T5150] Bluetooth: hci5: command tx timeout [ 491.750778][T13146] wg1 speed is unknown, defaulting to 1000 [ 492.052069][T13151] wg1 speed is unknown, defaulting to 1000 [ 492.861399][ T5150] Bluetooth: hci5: command tx timeout [ 501.591896][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.630974][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.686470][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.989977][T13140] chnl_net:caif_netlink_parms(): no params data found [ 518.702014][T13142] chnl_net:caif_netlink_parms(): no params data found [ 519.591894][T13140] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 520.452812][T13146] chnl_net:caif_netlink_parms(): no params data found [ 522.091315][ T31] INFO: task kworker/u8:3:37 blocked for more than 143 seconds. [ 522.259604][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 522.620362][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.770636][ T31] task:kworker/u8:3 state:D stack:21864 pid:37 tgid:37 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 523.021813][T13151] chnl_net:caif_netlink_parms(): no params data found [ 523.161643][ T31] Workqueue: netns cleanup_net [ 523.260815][ T31] Call Trace: [ 523.410351][ T31] [ 523.570795][ T31] __schedule+0x1798/0x4cc0 [ 523.760649][ T31] ? __lock_acquire+0xab9/0xd20 [ 523.900575][ T31] ? __lock_acquire+0xab9/0xd20 [ 524.081054][ T31] ? __pfx___schedule+0x10/0x10 [ 524.230720][ T31] ? schedule+0x91/0x360 [ 524.320529][ T31] schedule+0x165/0x360 [ 524.500963][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.630402][ T31] __mutex_lock+0x7e6/0x1350 [ 524.739321][ T31] ? __mutex_lock+0x5bb/0x1350 [ 524.859864][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 525.121420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 525.309261][ T31] ? kobject_put+0x270/0x480 [ 525.402125][ T31] ? kfree+0x19a/0x6d0 [ 525.550931][ T31] rdma_dev_change_netns+0x39/0x300 [ 525.672127][ T31] rdma_dev_exit_net+0x203/0x340 [ 525.829693][ T31] ? __pfx___might_resched+0x10/0x10 [ 525.951897][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 526.111507][ T31] ? net_generic+0x1e/0x240 [ 526.169471][ T31] ? mutex_is_locked+0x17/0x50 [ 526.290567][ T31] ? rtnl_is_locked+0x15/0x20 [ 526.391477][ T31] ops_undo_list+0x49a/0x990 [ 526.542022][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 526.659597][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 526.820667][ T31] cleanup_net+0x4d8/0x820 [ 526.900565][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 527.020910][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.130638][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 527.242855][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 527.350696][ T31] process_scheduled_works+0xae1/0x17b0 [ 527.491556][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.602636][ T31] worker_thread+0x8a0/0xda0 [ 527.730594][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 527.859920][ T31] ? __kthread_parkme+0x7b/0x200 [ 527.972030][ T31] kthread+0x711/0x8a0 [ 528.089321][ T31] ? __pfx_worker_thread+0x10/0x10 [ 528.249908][ T31] ? __pfx_kthread+0x10/0x10 [ 528.310017][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.381448][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.489794][ T31] ? __pfx_kthread+0x10/0x10 [ 528.630326][ T31] ret_from_fork+0x4bc/0x870 [ 528.772785][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 528.910276][ T31] ? __switch_to_asm+0x39/0x70 [ 528.980909][ T31] ? __switch_to_asm+0x33/0x70 [ 529.061801][ T31] ? __pfx_kthread+0x10/0x10 [ 529.172532][ T31] ret_from_fork_asm+0x1a/0x30 [ 529.249394][ T31] [ 529.252647][ T31] INFO: task syz.2.1756:12917 blocked for more than 150 seconds. [ 529.481265][ T31] Not tainted syzkaller #0 [ 529.560972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.711668][ T31] task:syz.2.1756 state:D stack:24296 pid:12917 tgid:12915 ppid:5842 task_flags:0x400140 flags:0x00080003 [ 529.931500][ T31] Call Trace: [ 529.992334][ T31] [ 530.080174][ T31] __schedule+0x1798/0x4cc0 [ 530.209671][ T31] ? validate_chain+0x897/0x2140 [ 530.321165][ T31] ? __lock_acquire+0xab9/0xd20 [ 530.402588][ T31] ? __pfx___schedule+0x10/0x10 [ 530.510392][ T31] ? schedule+0x91/0x360 [ 530.680964][ T31] schedule+0x165/0x360 [ 530.740073][ T31] schedule_timeout+0x9a/0x270 [ 530.800802][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 530.892061][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.962546][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.050504][ T31] ? wait_for_completion+0x267/0x5d0 [ 531.161282][ T31] wait_for_completion+0x2bf/0x5d0 [ 531.262154][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 531.371015][ T31] ? up_write+0x1c4/0x420 [ 531.429641][ T31] ? remove_client_context+0xc0/0x1e0 [ 531.501517][ T31] disable_device+0x1c6/0x320 [ 531.581116][ T31] ? __pfx_disable_device+0x10/0x10 [ 531.649907][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 531.902522][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 532.010872][ T31] ib_unregister_device_and_put+0xb8/0xf0