last executing test programs: 6.051158808s ago: executing program 0 (id=2793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0c00238005001f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80010) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="02002dbd7007fbdbdf25530000000d8ccdd49976d561b4028b77c4e1b6077347a0bfd23789ce1a7ec272a6c2cc2e759484ca1710eccbb754e17dde850b7bd279375998fc1faebf6aa9240ab9996b4542ed9708c6af0d86ee5c5eff5c494001bf9012b467a2227dc76b2aa7573c4695f7b71de3cdea6781e98c7660a6d21f850a9f57f3ed7d3dc17d13d5a877c89078fb2fee07d444186e8bfc1a7a627c7a8164bc7b4931fbb82e30c62e567e6092cedbfe2d0230038885e231aa0597102599c79a9f9b67a502d4db25e16a0c5aec3fec1152d200616805f6d2067837afa91a0fb607c14afad33e0a7272fa5d1426bc3f5f409263c0bc"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000400370000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000003880b7110421ac99d7af2f2b6d913b6e580c8b7d"], 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000540)="56b92917bccfbacc8105d78e037164b61f9b9737273bc504a8d705224b7e88ec8aae14b9583d0aa2ea6f253d3047184981fde91f718757babd0ce8d90650924e8166606e7591f2a058401ab005196240e619690cd41e18a513e1b9bc21ffd8ea086789fddf6be6c22b9693d4682021a8051f1e977d8b7a711c32fb826b43b9d0087f2fe331b20a3430024c", 0x8b}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r10, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000004) close(0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltclass={0x38, 0x29, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x2, 0x10}, {0xffff, 0x2}, {0xffff, 0x7}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r13, 0x541b, &(0x7f0000003b80)) socket$nl_route(0x10, 0x3, 0x0) 5.906184577s ago: executing program 0 (id=2795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x20000000) 5.703973441s ago: executing program 0 (id=2800): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000e9ffffffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0xfffffffffffffffe) (async, rerun: 64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3778a", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00aaaa080000280045000030000000000001907864010100ac1414aa0b0090780300000045000000000000000000000000000000ac1414aa"], 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x771a}, 0x8) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) (async) socket(0x2b, 0x80801, 0x1) socket(0x10, 0x3, 0x0) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=r11, @ANYRES32, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYBLOB="db65f8f9e475de19775d23b597a62d6a7a1c78c639da2022f0b01a09f880e263428dc02d6b3a847465ce018874c93828df48ffaa266cf7ec9b8de38df75e697e469b2c9f0331d6d475f94ba40f0f087944348709582aaaabe2b03aa60d95a3bb28c4b3edb654ebd776df134fd4909e1963f627ea4382e53406fb31675690ba8a74dd6d0f5e55441b894be353cf6f1e2b28d9c5eb82bf15c1ccd1fbec44b95c0688497d4c32fcf3187602a906b851b49d5b"], 0x50) (async, rerun: 32) r13 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r12], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000060a010400989e942a469afd2926219c921d3cf200000000000000020000050900010073797a30000000001400000011"], 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 5.671127712s ago: executing program 3 (id=2802): syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x2, 0x8, 0x37, 0x68, 0x0, 0x9, 0x6, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x7, 0xba, [@remote]}]}}, @payload_conn={{{0x1b, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x2, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffe, 0x4, 0x3, 0x4e21, 0x4e21}}, [0x0, 0x0, 0x0]}}}}}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 5.625866494s ago: executing program 1 (id=2803): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ac000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r1, r2, 0x0, 0x7feff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) sendfile(r4, r3, &(0x7f0000000180)=0xea4, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="0405002e"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x23}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 5.518101234s ago: executing program 3 (id=2806): accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14, 0x800) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) r2 = accept4$packet(r0, &(0x7f0000000340), &(0x7f0000000400)=0x14, 0x800) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) getpeername(r4, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_ethernet(0x30, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x22, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200, "c135f0b1926b"}}}}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="0886cbf36a000100"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x98, r7, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0xc}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dd2708da3ead906f4ffc2d50a7"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "69c324a7882e4f25109a84cb7f33"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "81bd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x48005}, 0x20000040) 5.438815773s ago: executing program 1 (id=2809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='page_pool_state_hold\x00', r1, 0x0, 0x2000000}, 0x18) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 5.374736473s ago: executing program 0 (id=2810): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}}, 0x20000000) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffff801}, &(0x7f0000000100)=0x8) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000540)="f6962d65119f1bd6774deb53317b368729f3e5773d76a2cbdf3c4ac1794af0d5827eed1a8b69229088aac9632a106e4d38d0ea7388633ce5f0370e1e400baeb65540382cd081a4775f404b50e49af32578c4d9a0ef550fcc813a089ede29abecc5831c83f12d19d0e3e54c06bc1c6e274a813cfe9ee6c7f2f8079f34c80481d212eb66ff3ab6a560202ac2b7191078cf3cc0988309b3fadc2b76050fbb9a28e4feb27014f4b1e2898f296f2ddebcbd6a0d9de3270086512cb79890ce7191f8a0e1f27830d4cb1a3ee2a5c8883ca99789487c52d27bd9fa5533d7d3dd98fe60d81b0a49eacc14efea", 0xe8) 5.299165022s ago: executing program 1 (id=2811): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5.17261154s ago: executing program 3 (id=2812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.127259033s ago: executing program 1 (id=2814): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'nhpoly1305\x00'}}}]}, 0x138}}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x7, 0xffffffff) 5.124829936s ago: executing program 3 (id=2815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) 5.016185671s ago: executing program 0 (id=2816): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) (async) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094"], 0x30}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x800, 0x5) (async) r4 = socket(0x200000000000011, 0x800, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, &(0x7f0000000580)="0f42c2983a476a6f995c310cf881cdfdefb94642ca8710de7be8b7e249adb0f0aadc98c871142d120e8424e5546457004027b977a57132de81a68fecb00479e6a120cf531b09c4e93b3b1e03600c73573c6160ba07bbd496346377c88a829f32730002cb", &(0x7f0000000500)=@udp6=r4, 0x4}, 0x20) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40001}, 0x4008840) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40001}, 0x4008840) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000380)}, 0x10) syz_emit_ethernet(0x32, 0x0, 0x0) (async) syz_emit_ethernet(0x32, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x58, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc32e}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xfec6, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd167}}]}]}, 0x58}}, 0x2004c080) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0xfff, 0x4) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) connect$netrom(r9, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) splice(r0, &(0x7f0000000040)=0x3, r0, 0x0, 0x4, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r10, 0x89e2, &(0x7f0000000000)) (async) ioctl$SIOCX25GFACILITIES(r10, 0x89e2, &(0x7f0000000000)) listen(r0, 0x1ad72f7) 5.015436138s ago: executing program 3 (id=2817): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @val={0x0, 0x3, 0x81, 0x8, 0xff, 0x8}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @empty, @remote, @broadcast, @private2}}, 0x3e) 4.978458202s ago: executing program 1 (id=2818): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x4c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x5}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x5}, 0x90) 4.85562029s ago: executing program 3 (id=2819): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x9, 0x10000}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48804}, 0xf07d0c60e60e0a1c) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000200)={{r0}, {@void, @actul_num={@void, 0x6, 0x54}}}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240)=0xae1, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x8024) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40010) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004840) sendmsg$inet(r0, &(0x7f0000001cc0)={&(0x7f0000000800)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000840)="19561c638ba9623a1e8de5e78c3aa16777f25a36ad1d2c7ee7d34d5315b03ce0704f804d910c16bdb19ccedb609c99e9a99c05ca5967925bf2d64d08d2b638709d80888d84758956419758beb5819ae5549594928fbaa09f2c0b89960a1bb5afd702d4fafdafcdf6d915baad884f78d7bd965338fdc7746fb6f31b6caea2ad427e01f58d241b37bc24259a13a0077cb190dddc2b6b3845f8a1f6847709a7a6248fef7c17", 0xa4}, {&(0x7f0000000900)="146540543191eed7319d68f6535606f67a22ae13420e063323c80e108cd637119f8a276f1d5398ea06878d10331e014e47c93df00677ca69404605ec4295bdb5efeac14c35f6157487c823bc32fffcde257edf1e507e144e0d443aae865c46aa3fae380f482158de9a3baf6cc70a600c7e11a4e563bdf47d911d0951aeb44b16d5332df563de32e88f43384da2b865057eeb1fc7a23c3ab0dbb24bb7281e2d65af2f06044c4cfe383d5457fde3d49b7da877c822c0fa910b074f18effe99bb7c4f3d104aacc1051edbb98775aa2c3f18d405612f60259d33f3eb21e3395fd6c387401b", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="c49a2c5cd746fb6bca57dad2f162722073a88be474e2ef2d22981c8be906682a8ed116561f0dd7653893555652a5044fe340cba1843b6ddf507f41977018f33974", 0x41}, {&(0x7f0000001a80)="8eaf0e95b919c9e9f89d13d47c6264bb53eb7be3cccf870e0070702a761b47c0ca16bcc1c4903d20249f24d84768b280dbe1d649d1b3aabe525f778104302db83444fbab3cd45efc1266e7e1323f99cea48553877253ab797bc40adf732ac7911f6bac5b477aa39c65991b2b905a34187df9f4e4dd4eca1eca4daef7b73185cc85694fe454a46cc4f27bea67b38d415f1c7302293b7b2804526b8cf92498f97ffefc7084932195346181544806ce8a0d8b03dd7a274fb75742d5753d31a742", 0xbf}, {&(0x7f0000001b40)="1da304236795c2268e10babc53ade9a47457604c4301905db7228b0f5ac600e7a2f0fdc3f1b503c85196ddf03dacdeeaf0dd56e4b31f89fb8a2db490554df2425e77c59d6923744b3240ffa9832f857e899e91c2afda25de", 0x58}, {&(0x7f0000001bc0)="b496b8cb64455242403dc270", 0xc}], 0x7, &(0x7f0000001c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001d00)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001d40), 0x234400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001d80)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000002740)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002700)={&(0x7f0000001e40)={0x8a4, r7, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x454, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @random="44ef5d1e43c6", @device_b, {0x7}, "", @void, @value=@ver_80211n={0x0, 0x0, 0x2, 0x1, 0x0, 0x2}}, @random="32f894273d70bf21c278dee9ce3df8b26504a7e2030eabb4741aa18cf7db2c055a7680ea53f66b94a03c98ffc3a298990b9abb9168ea5ecb27c8d84ae3ca55b5b939777accc1349ac61b3e211b1d68856d3831bb9d25518d6fa96dbaf1723b2fb5bdf172c2a194649d7c2c8ef806bde9ced320adab39e8f6b056a09ea12fb16645d9aa7751c7f5c4df46a68efb3862cd3ccb4cc3f97dda64ead7233eb6e062c07d348212397ec2598fc944302638dbb894bf839fb350ab8d35a3f3a1a47c719ceec50cf805aeae7c926ce68e2e645f1749564ff9ce4fb547b8892fa2209c459adc00628b3e53fe146b75164985209406ec84dd06ba1cbb2cfeaf7c5642dbc0627cc470cccae9343c5a1c3794723a11c38336d60f4e8c27176397ee1c1a757fe5b4be214be6277641779ba8b147b32fdaeeffebd84aa03a6d25fef4ba8bd2fc5e99f23cab8f2cdc14cff0196f28d3080294a32954d0b1755424c1a56cd5ab73b577b096a9803a8e7402badbaeb99af56ab53446900384506f897ccc269bad9c76b5321973efeb76ab66cfac99dd00c9dd065a6dd855953b6bfeb17e832cdf225f911817f1d3f07c6cdd6b546a91260770a3593d0addb423a2714a44e78954b3c35e5f9eed009bff91bea9ce060b4af73489a35242b0a96955fd491fb73f7bc4498ec37e192973e72cf3753bdfd728e5352143fd0bef9bd16071ba690f8a6f11cd3604c5da05ced69915c0e1ce014daa19c21982a5d7aa160607bdbb41bf71076d1e9826d7fa777b63970e005adce7cc16f85aa8d0dc37a0706d596e3b03ee8440b4cb7d8c6b734c7e5c821d37806e51c45ee229044b982577f71b5c86f5decb3afa29cb67c490d237cc02ab73a9ce5ed9ba1f929ab82cee038fa347d38ae69f50e1361e9a866f19f1ab227c90c83446a81070c4815d4eb79e733e1a906433b682177ed43a9a8a3001863dd29aa194648f97c2d3b516257eeb154b2546dccc55bc2d95cbffab7119c01f9dd93cee473d81967f0c4a26e991b0e85e476f35bdb13d0d341aa40aa66e499ba3d81bf0a1480014da87789704d8d10316b4f1c039e9636aa4563789b1f46029b6ea90486628a58dbaa4782ab15c0b3c0861854a73e998dece1288548626a973ee4ceaa51f8950c36d92f526afbe33ecc7b021f72182a9175ae5e724db4c0ce684a2f45c97f470c492d137a8269f4b2ed9d8601340d1ce88cfaef4ee7fd47f932fafcfc006a24e71d03819f3eca736cebb1ec5e929b31297dc6b78c12e6d659e38548e86b9c08e4fcc0e693ac0dc3ef09fdc0762c592e09b4d1b53ad3a62868e8dae42646c354a2641d2a5eb10de54c32ba9a746154adc402d6c54efa59980a6f1f9dfe0d1370af07425cf83fce0a33debc375e98bbdf3b3aff2fb369d94f88095f82570fe9bb8977b0c703a45116dfa192704fa1200da182ccc5b681370b53d58804517c7a98dbca7ae33ecad5366ab6e9e74e4fb2987042ba8a5142a431ab40b0e6dcf42a7733c3111c3"}}, @NL80211_ATTR_FRAME={0x8f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @from_mac, {0x9, 0x5ca}, @value=@ver_80211n={0x0, 0x576b, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x1, @void, [{0xdd, 0x24, "cf15fbadb63fac6d3fac48b0629edbbf0c73587d0af9755acd5879dc863f39c00dd75d76"}, {0xdd, 0x41, "c2c45266ebd3b25aa2eb13a3212fa73073f1a89735be48ab576e9f5275a4ee04fcd2c82480dea82923edc483c5802218400e0eac3e9dee8cc5b97b8ca93033ce63"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x348, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @device_a, {0xc, 0x1}, @device_b}, @random="a757d61b69a00777c8caae972dae6a7df29cba1dc041e0e0c95e1966c13340c247434cf08678566473b1e0dc938c13f2e61a029789638afcbc6c95f24c97563962fa93c90dc6adf9cb8a39158eca18382e798dcee24fa23d06f5f00c1d2f5f57075327d023fc6e845f6100cff0717bbd072c0401a07bd26e12996dea9e478212c171b940e6c052468952bad4aac47e1801ab0b9b84ddf416667634897b29b785e1674b8a52ee444661787c4b3c860f71e54f78496c1adbde2ca1c0de523c10ce1b7ecbdf8bac74ca96e5dd89c98e70a8f30810a1b7d9bf0ac35375fadde23be2c60940d2891966a578fa427f2f4878754a48572b5786a8ab5ec7f9941778153170f90dac6c239e5bc17221eb42c539172fb4c710617b0e0291efcea9a92e8883aabff7223131f61d384aa4312e6ac1fd6af676399ddade01d31125c5d7bc13181e8ebf16c2cc7e3f07cbda6535f40b926a74bdc587e8eaa08d72169e7ff7e12d7bb435f6ddbe024c65ad7d3ae975d34c6c6d28abc65eb935d4f38e643c569df14773040b7f6030dd7db9731ba7f8db691e36f759456d9d9095f9c1fb9c1f8565b0a9de9c0ad51d38e67b71e23fbbd624c58eb0fbecf0c90353d4d0f95636fb693e3ec954d0ac539cec03fe3792dc2dd3936ee5b7b23d0717b5aa89feb971bee49a9ba0465fff84177963a6ea9fcce737b58e2dc1b031438a923d7d07005161b98459f596c845126d64da54a3c54a4679a9a14a579aa82cd6f5e6ce7912c4786f82e55bc27ba813b8cf45b867084cc625708ca2770930b8f780d7a7b69fb241e48511511b3e0b4de2867e9ee1e8547d1a29945c4ebd9df8f73b820f05e6b5a8b3e9408f26668f60b36b3b09434cea75d4c935d2f637bd9ecbaa7e133e6d29371a8fb95eaf231cc32de7b4cf22f04f48830b490b8d6e0a5ded4a13acc0b3fe313d63b1ff041ff367691ace0f50c5b458b3de3d78c0ebad12232ed6888f119f13dd77ed5fd3f75b75296553a4c16ad2f40295433f69d0a21a65365aee9c7f14efef444caecc78048490696f7f34c33789bf8fa53725245316eb8dadec22145651c89f011880aff578a4020e88ba8e0fc24608fca262b1a4243f0f25b9a6dfd61862f87580d5040f"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x6}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x10000}, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000002780)={@in6={{0xa, 0x4e24, 0x401, @private2, 0x4}}, 0x0, 0x0, 0x21, 0x0, "08c33b76994fbfc9007f981fa97596955a7e0d253ca6f43a1594198a2b6a1b53489c3a686d4142fa418cfc66ff8f2cdeea7a16564ffd047079f8cc79d308def089790184d250730e054111430e5c4b83"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000028c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, r7, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$PPPIOCDISCONN(r0, 0x7439) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002a00), r6) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x68, r10, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, r7, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x2e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r6, &(0x7f0000002e00)=[{{&(0x7f0000002c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/210, 0xd2}], 0x1}, 0x7}], 0x1, 0x40000020, 0x0) 4.439989228s ago: executing program 32 (id=2819): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x9, 0x10000}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48804}, 0xf07d0c60e60e0a1c) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000200)={{r0}, {@void, @actul_num={@void, 0x6, 0x54}}}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240)=0xae1, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x8024) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40010) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004840) sendmsg$inet(r0, &(0x7f0000001cc0)={&(0x7f0000000800)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000840)="19561c638ba9623a1e8de5e78c3aa16777f25a36ad1d2c7ee7d34d5315b03ce0704f804d910c16bdb19ccedb609c99e9a99c05ca5967925bf2d64d08d2b638709d80888d84758956419758beb5819ae5549594928fbaa09f2c0b89960a1bb5afd702d4fafdafcdf6d915baad884f78d7bd965338fdc7746fb6f31b6caea2ad427e01f58d241b37bc24259a13a0077cb190dddc2b6b3845f8a1f6847709a7a6248fef7c17", 0xa4}, {&(0x7f0000000900)="146540543191eed7319d68f6535606f67a22ae13420e063323c80e108cd637119f8a276f1d5398ea06878d10331e014e47c93df00677ca69404605ec4295bdb5efeac14c35f6157487c823bc32fffcde257edf1e507e144e0d443aae865c46aa3fae380f482158de9a3baf6cc70a600c7e11a4e563bdf47d911d0951aeb44b16d5332df563de32e88f43384da2b865057eeb1fc7a23c3ab0dbb24bb7281e2d65af2f06044c4cfe383d5457fde3d49b7da877c822c0fa910b074f18effe99bb7c4f3d104aacc1051edbb98775aa2c3f18d405612f60259d33f3eb21e3395fd6c387401b", 0xe3}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="c49a2c5cd746fb6bca57dad2f162722073a88be474e2ef2d22981c8be906682a8ed116561f0dd7653893555652a5044fe340cba1843b6ddf507f41977018f33974", 0x41}, {&(0x7f0000001a80)="8eaf0e95b919c9e9f89d13d47c6264bb53eb7be3cccf870e0070702a761b47c0ca16bcc1c4903d20249f24d84768b280dbe1d649d1b3aabe525f778104302db83444fbab3cd45efc1266e7e1323f99cea48553877253ab797bc40adf732ac7911f6bac5b477aa39c65991b2b905a34187df9f4e4dd4eca1eca4daef7b73185cc85694fe454a46cc4f27bea67b38d415f1c7302293b7b2804526b8cf92498f97ffefc7084932195346181544806ce8a0d8b03dd7a274fb75742d5753d31a742", 0xbf}, {&(0x7f0000001b40)="1da304236795c2268e10babc53ade9a47457604c4301905db7228b0f5ac600e7a2f0fdc3f1b503c85196ddf03dacdeeaf0dd56e4b31f89fb8a2db490554df2425e77c59d6923744b3240ffa9832f857e899e91c2afda25de", 0x58}, {&(0x7f0000001bc0)="b496b8cb64455242403dc270", 0xc}], 0x7, &(0x7f0000001c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001d00)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001d40), 0x234400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001d80)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000002740)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002700)={&(0x7f0000001e40)={0x8a4, r7, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x454, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @random="44ef5d1e43c6", @device_b, {0x7}, "", @void, @value=@ver_80211n={0x0, 0x0, 0x2, 0x1, 0x0, 0x2}}, @random="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"}}, @NL80211_ATTR_FRAME={0x8f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @from_mac, {0x9, 0x5ca}, @value=@ver_80211n={0x0, 0x576b, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x1, @void, [{0xdd, 0x24, "cf15fbadb63fac6d3fac48b0629edbbf0c73587d0af9755acd5879dc863f39c00dd75d76"}, {0xdd, 0x41, "c2c45266ebd3b25aa2eb13a3212fa73073f1a89735be48ab576e9f5275a4ee04fcd2c82480dea82923edc483c5802218400e0eac3e9dee8cc5b97b8ca93033ce63"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x348, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @device_a, {0xc, 0x1}, @device_b}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x6}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x10000}, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000002780)={@in6={{0xa, 0x4e24, 0x401, @private2, 0x4}}, 0x0, 0x0, 0x21, 0x0, "08c33b76994fbfc9007f981fa97596955a7e0d253ca6f43a1594198a2b6a1b53489c3a686d4142fa418cfc66ff8f2cdeea7a16564ffd047079f8cc79d308def089790184d250730e054111430e5c4b83"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000028c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, r7, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$PPPIOCDISCONN(r0, 0x7439) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002a00), r6) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x68, r10, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, r7, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x2e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r6, &(0x7f0000002e00)=[{{&(0x7f0000002c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/210, 0xd2}], 0x1}, 0x7}], 0x1, 0x40000020, 0x0) 4.396294161s ago: executing program 0 (id=2821): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x1003ee, 0x1, 0x4}, {0x9, 0xf0e, 0x4c80, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0xffffffff, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4004) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xe002}, {0xc, 0x90, 0xfff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc4}, 0x204c114) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 4.278931665s ago: executing program 33 (id=2821): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x1003ee, 0x1, 0x4}, {0x9, 0xf0e, 0x4c80, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0xffffffff, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4004) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xe002}, {0xc, 0x90, 0xfff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc4}, 0x204c114) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 4.274322315s ago: executing program 1 (id=2822): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) 4.261695324s ago: executing program 34 (id=2822): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) 1.765803193s ago: executing program 4 (id=2838): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 1.580416865s ago: executing program 2 (id=2839): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)=ANY=[@ANYBLOB="e0000000190000022cbd7000fedbdf251e000000bb3f9e359775a518db001a479e11786692d50d19cb7e12b80d3f25a4d887df729fb933c5edf0a37becc3b61d548a8ad79d6124242b5809034d8fa62f5b07c08de71e44c8fbbb75ff8977514b96c28babdb8a3d83feba2bd846e2bd7a4dbdc0d0f73e462c85f4b6da1ec6e57ee89874d13849e47ff0152eb299c4109d424938c10b6259a7bbb7937e2a5c4c7928597310f5f5907f53c8673d807f2eb2473461d8f37e2dd1f7bceece95cef16c94232d669b65e6bcbbd8983e88d0163f5308cd9af3f18ac72cbe60b009a335c3"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x8801) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r2, &(0x7f0000000340)='#\x00\x00\x00', 0x4) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000020700000c000780080a014000"/32], 0x20}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x5}, {0x0, 0x6}, {0xffe0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x2c}}, 0x40e18c7faa8d34ba) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f00000100000e00"}}}]}, 0x48}}, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000001380), r5) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@deltaction={0x154, 0x31, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x32a}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff8001}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x62}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x77b0b178}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) accept(r8, &(0x7f0000001300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001280)=0x80) (rerun: 64) 1.577149803s ago: executing program 4 (id=2840): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'ipvlan1\x00', 0x4}) ioctl(r0, 0x6, &(0x7f0000000040)="3985adcd80bd4c90de00eaa58b0a95d68316b0274f353bb5358144743e8d") (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0xa, 0x8, 0x49, 0x57}, 0x6) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x814040a0}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044880}, 0x4801) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r8) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x40001) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x80, 0x8}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000bc0)={@rand_addr, @empty, 0x0}, &(0x7f0000000c00)=0xc) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x17f, 0x17f, 0x7, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @var={0x7, 0x0, 0x0, 0xe, 0x4, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x1}, @datasec={0x8, 0x9, 0x0, 0xf, 0x3, [{0x5, 0x1, 0x1ff}, {0x1, 0x5, 0x200}, {0x5, 0x7fff, 0x1}, {0x3, 0x100, 0x5}, {0x5, 0x8, 0x26c5}, {0x1, 0x8001}, {0x2, 0x1, 0x14800000}, {0x4, 0xffffffff, 0x3}, {0x1, 0x1, 0x6}], "2601fd"}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x6, 0x4}, {0x3, 0x3}, {0xd, 0x5}, {0x8, 0x1}, {0x5, 0x5}, {0xb, 0x5}, {0x8, 0x5}, {0xe, 0x1}]}, @enum={0x8, 0x6, 0x0, 0x6, 0x4, [{0xf, 0x8}, {0x2, 0x1}, {0xd, 0x8}, {0x5, 0xdd4}, {0x8, 0x2}, {0x6}]}, @union={0x4, 0x5, 0x0, 0x5, 0x1, 0x8000, [{0x10, 0x4, 0x7}, {0xe, 0x2}, {0xf, 0x3f6, 0x4}, {0xd, 0x4, 0x8}, {0x6, 0x2, 0xce5}]}]}, {0x0, [0x0, 0x1569e18f2244d27, 0x30, 0x0, 0x0]}}, &(0x7f0000000e00)=""/188, 0x19f, 0xbc, 0x0, 0xe7, 0x10000}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0x20, &(0x7f0000001f80)={&(0x7f0000000f40)=""/4096, 0x1000, 0x0, &(0x7f0000001f40)=""/51, 0x33}}, 0x10) (async) r18 = bpf$ITER_CREATE(0x21, &(0x7f0000002000), 0x8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002040)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x4, 0x18, &(0x7f00000009c0)=@raw=[@jmp={0x5, 0x1, 0xc, 0xa, 0xa, 0xffffffffffffffe0, 0x1}, @generic={0x81, 0x7, 0x0, 0x2, 0x38f0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @map_fd={0x18, 0x9, 0x1, 0x0, r12}, @call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0xa, 0x1, 0x0, r14}], &(0x7f0000000a80)='GPL\x00', 0x4, 0xce, &(0x7f0000000ac0)=""/206, 0x40f00, 0x3d, '\x00', r15, @fallback=0xe, r16, 0x8, &(0x7f0000000f00)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r17, r18, 0x6, &(0x7f00000020c0)=[r19, 0xffffffffffffffff], &(0x7f0000002100)=[{0x1, 0x2, 0xd, 0x3}, {0x5, 0x1, 0xc, 0xc}, {0x1, 0x5, 0x1, 0xc}, {0x1, 0x4, 0xd, 0x2}, {0x0, 0x5, 0x8, 0xa}, {0x2, 0x3, 0x3}], 0x10, 0x4}, 0x94) 1.499959224s ago: executing program 4 (id=2841): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r0, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.412705499s ago: executing program 2 (id=2842): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x2f, 0xf2, 0xff, 0x5, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x40, 0xb, 0x6}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)={@local, 0x0}, &(0x7f0000000580)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x21, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xac4, 0x0, 0x0, 0x0, 0xe4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0x0, 0xb, 0x4, 0x80, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x0, 0x0, 0x7, 0x8, 0x1, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x1, 0x8d, &(0x7f0000000a00)=""/141, 0x40f00, 0x3f, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x9, 0x1ff, 0xbca7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000ac0)=[{0x1, 0x2, 0x6, 0x1}, {0x0, 0x3, 0xe, 0x2}, {0x1, 0x5, 0x3, 0x9}, {0x0, 0x4, 0x7, 0x3}, {0x1, 0x4, 0x2, 0x8}, {0x2, 0x5, 0xa}, {0x4, 0x6, 0x2, 0x7}, {0x1, 0x4, 0xb, 0x7}], 0x10, 0x5}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000d00), 0x8) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20010000}, 0x20000044) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c00)={'vxcan1\x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000000280)={{'\x00', 0x1}, {0xe}, 0x80, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="cccfd413bce484346688", 0xa, 0x0, &(0x7f00000006c0)={0x2, 0xe4, {0x0, 0xc, 0xc, "a6397675087fe6f530adcb83", 0xcb, "d42988cd6419ba9e0165615bbec63b2f3ef4f81c233d012e33a3685ac5064e0dd7d60cf3a00371d6b69404658c213dd023e77b811d2afc3947fd8515dbbcb9ada8fa2da842f56b479580f8010432e58a2d2ca0f3122727345c799b7bca6759fea7948ca744035830e59df384dc932fd7d1bed8ba1b3ae6ecec4c131b396495e388f7be275b20195fa7ebbbaf9738b656b8a5c8cf0912531554268c2111fb9fe7a5c654f9472938008f2901dfc0cbb70f9b9be5098d930d012b029d74b3b1fcd5f030ded7c4db1097207f1e"}, 0x90, "f0f4701dc2d43446d2d94090719b50c7a2307fc0234dd6e3ae1552d6aeea07829cef96846deb234b6414bb6996da8625e1c9a588b67df73e7753e02f3188f027baf45a22f3533139269d43734dc76125b3d13a411ec3dd1b71ce105ca9c0df8a10f4215f44229937b9996dac2f3506ca3f643440d9ca39b6a072c6415523c58749cc21af01661b3213094b18d602a045"}, 0x180}) sendmmsg$inet6(r5, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 1.164659262s ago: executing program 4 (id=2843): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x2518, 0xf, [0x4, 0x0]}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000b, 0x4000010, r0, 0xffffe000) 1.018447958s ago: executing program 2 (id=2844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.005814338s ago: executing program 4 (id=2845): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0x2}, {0x1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0016"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) accept(r5, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2aecedea00000000000004740906"], 0x14}, 0x1, 0xffffffff00000003}, 0x0) socketpair(0x1, 0x4, 0x9, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r9, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x21, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}, {&(0x7f0000000280)="988240d9842fd6db693bc632164fd56926cb1bad3414d2017f4eb7413f9f46da08f6cd9aac46e1d04ae522ec9048f8b00641aedc7a5697528af6c2f54348e947d8666a1a7f662e002604cbcb45a9016b676eae2fe27262976cd681d0da278a7767aa5d5198fd999b86de1b031d22101d27f6c476caa622c70b85686bdd50da36fbe16b95c92aa6e42b7c12bae5166068a9f63aea113ed06eafcd177b185520d4173bcd2847b9316443df74a14be2c719f350cd22a696be5e8c", 0xb9}, {&(0x7f00000003c0)="55a9ddb901af5be3c99e13510c7566aa780fccf4afbd60562edd1ffbee8350b6d6499eea87fcb9116b2f30f988650f29c85ca31ee8e5037e31368a836f7e3ce071a079c089aacfbae00a157193e4a78b148a50c07d58f26e93206b756d86b9f0bfe84b1ad88f9d1e288ddac85a800ee341e3f5d4b240af047221abff6c79a3b1385dfc4506c4a5015525d2fda9ece111fb9a151f823ed2aca46b", 0x9a}, {&(0x7f0000000480)="595596fc722d3d4d7ee35953fcc0eb3f4af5edc4cb0d7c0831", 0x19}], 0x4}}], 0x1, 0x24008094) r10 = accept4$unix(r4, 0x0, 0x0, 0x80800) recvfrom$unix(r10, &(0x7f0000000640)=""/261, 0x105, 0x40000160, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006970766c616e00000c000280060002000000000008000500", @ANYRES32=r12, @ANYBLOB="e7c60879"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 304.297744ms ago: executing program 2 (id=2846): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x200) (async) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) read(r0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0x8}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x28, 0x5, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b408002489043800800000009500005400000000000100000000000079f2eecbb30dd9ad1fd75c033ce2b26d0bc4a3fc9510412cc086c1a77779ccfb2c60ef5f30190892c9173f5c47fe4a7d87cf282b75e7c4b0b497afb7396d0b7eb81800fa68b8cc488716324d4d874f8d51a41970f6fad04bbdae5476130ecabf87"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup=r8, r8, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) (async) r10 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r10, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) (async) close(r7) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1404, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 111.119067ms ago: executing program 2 (id=2847): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000ffe300000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000089000000bf0900000000000055090100000000009500000000000000bc98000000000000a4080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 83.83917ms ago: executing program 4 (id=2848): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000001508000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 0s ago: executing program 2 (id=2849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x66e352ca5c77601, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r3 = socket(0x15, 0x5, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000fddbdf251400000008000300", @ANYRES32=r2, @ANYBLOB="0600ed00df0300000600ab00510100000600ab00ff000000250029000c0000000c00810005000100270000000800a400030000000c00118004000200040005000c0043000800000000adbd66"], 0x68}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x60, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x3c, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1a, 0x2, "246297b74d40cdaa5c50dd49e1d5f242a41a5e3be203"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}]}, 0x60}}, 0x4800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000001020103000000000000000002000000240001800c000280050001000000000014000180080001007f00000108000200000000002688fe1ffdd5422f2f26d56193b544a18ec9bd9ba57644c875f436e7cac66c5e3c7c8ab22d2767aa2def17e8b2a313e31d8bdf2a8d8cf979942f919ad92068a727c35f8afcce237a6233bd25b28ae6f9bf32f7631fe08c0c640889d5d3a3451dbee30e"], 0x38}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @null, @bcast, @bcast]}) r6 = socket(0x29, 0x2, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r7, 0x0, 0x0, 0x40080, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000221de8a6d3c294f302b0a777768d6fb350afda1f249064e4306d2c5a67fd3ee43420458a8459542ef76160e6c87b9eeddf83af0a7edd2f7acc6d7222f1f7a1420e287a634f66560a38e30a174d908c86ae226fa7a08a216141218d6c3e16f9b310138283dd64fe2255c8bb6159eeca9f6a19e784c9e5ca3da82a121e6716d328a3dcaf8bb9630572aa2370171e0c", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf251900000008000300", @ANYRES32=r2, @ANYBLOB="0500a3000100000005001c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) kernel console output (not intermixed with test programs): ink: 'syz.0.186': attribute type 5 has an invalid length. [ 98.928521][ T6629] netlink: 84 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.045656][ T6634] trusted_key: syz.2.193 sent an empty control message without MSG_MORE. [ 99.092483][ T6634] netlink: 'syz.2.193': attribute type 2 has an invalid length. [ 99.432897][ T6667] netlink: 108 bytes leftover after parsing attributes in process `syz.2.197'. [ 99.815920][ T6694] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 100.206541][ T6713] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 100.397375][ T6730] netlink: 'syz.3.218': attribute type 21 has an invalid length. [ 100.492626][ T6730] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 100.999354][ T6771] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 101.035403][ T6762] macvlan3: entered promiscuous mode [ 101.044763][ T6762] macvlan3: entered allmulticast mode [ 101.084299][ T6762] veth1_to_bond: entered promiscuous mode [ 101.107265][ T6762] veth1_to_bond: entered allmulticast mode [ 101.117174][ T6762] team0: Port device macvlan3 added [ 101.155099][ T6771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.182295][ T6783] sctp: [Deprecated]: syz.1.231 (pid 6783) Use of int in maxseg socket option. [ 101.182295][ T6783] Use struct sctp_assoc_value instead [ 101.341863][ T6792] __nla_validate_parse: 2 callbacks suppressed [ 101.341880][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 101.396222][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 101.464705][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 101.469129][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 101.558143][ T6797] netlink: 248 bytes leftover after parsing attributes in process `syz.4.236'. [ 101.787445][ T6810] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.239'. [ 101.802668][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 101.929726][ T6814] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 101.980060][ T6814] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 101.998894][ T6814] gretap1: entered promiscuous mode [ 102.015242][ T6814] gretap1: entered allmulticast mode [ 102.070132][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'. [ 102.145433][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.242'. [ 102.520592][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.249'. [ 102.727598][ T30] audit: type=1107 audit(1755458155.562:2): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='|&w^]TgU{;ݤX:02a >1`Q' [ 102.950584][ T43] IPVS: starting estimator thread 0... [ 103.036891][ T6870] IPVS: using max 29 ests per chain, 69600 per kthread [ 103.809312][ T6895] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 103.830820][ T6895] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 103.922476][ T6904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.045857][ T6901] bond1: entered promiscuous mode [ 104.051567][ T6901] bond1: entered allmulticast mode [ 104.058380][ T6901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.143839][ T6901] bond1 (unregistering): Released all slaves [ 104.171136][ T6902] bond1: (slave gretap1): making interface the new active one [ 104.180048][ T6902] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 104.191061][ T6910] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 104.363391][ T6927] netlink: 'syz.2.272': attribute type 15 has an invalid length. [ 104.599322][ T6937] net_ratelimit: 120 callbacks suppressed [ 104.599341][ T6937] openvswitch: netlink: Unknown key attributes 2 [ 104.782594][ T6944] tipc: Enabling of bearer rejected, media not registered [ 105.051811][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.111698][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.147372][ T6962] netlink: 'syz.1.286': attribute type 12 has an invalid length. [ 105.160069][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.198156][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.277833][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.365586][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.406042][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.475657][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.692344][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.788777][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.832056][ T6957] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 106.108077][ T7025] openvswitch: netlink: Multiple metadata blocks provided [ 106.346316][ T7040] sctp: [Deprecated]: syz.3.305 (pid 7040) Use of int in max_burst socket option deprecated. [ 106.346316][ T7040] Use struct sctp_assoc_value instead [ 106.555015][ T7051] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 106.591497][ T7051] __nla_validate_parse: 45 callbacks suppressed [ 106.591512][ T7051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.308'. [ 106.655106][ T7057] 8021q: VLANs not supported on ip_vti0 [ 106.988861][ T7073] netlink: 'syz.3.317': attribute type 2 has an invalid length. [ 107.022314][ T7073] netlink: 'syz.3.317': attribute type 8 has an invalid length. [ 107.045192][ T7073] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.317'. [ 107.083607][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 107.760716][ T7109] sctp: [Deprecated]: syz.3.326 (pid 7109) Use of int in maxseg socket option. [ 107.760716][ T7109] Use struct sctp_assoc_value instead [ 107.885897][ T7119] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 107.961024][ T7119] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.973639][ T7119] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 107.998607][ T7122] IPv4: Oversized IP packet from 172.20.20.24 [ 108.006274][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 108.012975][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 108.097715][ T7127] gretap2: entered promiscuous mode [ 108.133130][ T7127] bond1: (slave gretap2): making interface the new active one [ 108.160281][ T7127] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 108.173108][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 108.197690][ T7126] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 108.237290][ T7119] macvlan2: entered promiscuous mode [ 108.242618][ T7119] macvlan2: entered allmulticast mode [ 108.275365][ T7119] bond1: entered promiscuous mode [ 108.293816][ T7119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.336291][ T7119] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 108.358457][ T7119] bond1: left promiscuous mode [ 108.402762][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.426564][ T7126] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 108.453590][ T7135] tipc: Started in network mode [ 108.462704][ T7135] tipc: Node identity 3288cfa3af3d, cluster identity 4711 [ 108.470783][ T7135] tipc: Enabled bearer , priority 0 [ 108.560973][ T7135] tipc: Disabling bearer [ 108.952193][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 108.965643][ T7167] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 108.974490][ T7167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.077155][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 109.180372][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.216424][ T7171] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 109.242382][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 109.941135][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 110.053519][ T7221] netlink: 164 bytes leftover after parsing attributes in process `syz.3.355'. [ 110.094950][ T7226] ip6gre2: entered allmulticast mode [ 110.348767][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 110.562253][ T7247] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 110.791712][ T7262] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 110.816688][ T7262] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 111.608733][ T7301] gtp0: entered promiscuous mode [ 111.641830][ T7301] gtp0: entered allmulticast mode [ 111.842375][ T7323] __nla_validate_parse: 3 callbacks suppressed [ 111.842392][ T7323] netlink: 204 bytes leftover after parsing attributes in process `syz.2.385'. [ 112.099705][ T7331] netlink: 164 bytes leftover after parsing attributes in process `syz.0.387'. [ 112.167940][ T7338] netlink: 244 bytes leftover after parsing attributes in process `syz.4.389'. [ 112.349195][ T7345] bridge_slave_0: left allmulticast mode [ 112.363502][ T7348] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.370109][ T7345] bridge_slave_0: left promiscuous mode [ 112.393495][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.423447][ T7345] bridge_slave_1: left allmulticast mode [ 112.429859][ T7345] bridge_slave_1: left promiscuous mode [ 112.449253][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.524509][ T7345] bond0: (slave bond_slave_0): Releasing backup interface [ 112.550784][ T7345] bond0: (slave bond_slave_1): Releasing backup interface [ 112.572727][ T7345] team0: Port device team_slave_0 removed [ 112.585064][ T7345] team0: Port device team_slave_1 removed [ 112.592091][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.600420][ T7345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.612991][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.620796][ T7345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.639294][ T7345] bond1: (slave gretap2): Releasing active interface [ 113.107288][ T7386] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 113.613346][ T7398] syzkaller0: entered promiscuous mode [ 113.629363][ T7398] syzkaller0: entered allmulticast mode [ 113.656932][ T12] syzkaller0: tun_net_xmit 48 [ 114.617707][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 114.802985][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 115.316853][ T7430] netlink: 232 bytes leftover after parsing attributes in process `syz.2.410'. [ 115.551060][ T7440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.737981][ T7471] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 115.877295][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 115.902118][ T7485] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 115.924473][ T7485] netlink: 'syz.3.421': attribute type 11 has an invalid length. [ 115.947464][ T7485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.421'. [ 115.960442][ T7478] bond1: (slave gretap1): making interface the new active one [ 115.972089][ T7478] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.989941][ T7471] sctp: [Deprecated]: syz.2.420 (pid 7471) Use of int in max_burst socket option. [ 115.989941][ T7471] Use struct sctp_assoc_value instead [ 115.991171][ T7474] delete_channel: no stack [ 116.018864][ T7483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.076131][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 116.108197][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.424'. [ 116.622623][ T7509] syz.1.429 (7509) used greatest stack depth: 17864 bytes left [ 117.439800][ T7553] gtp0: entered promiscuous mode [ 117.445839][ T7553] gtp0: entered allmulticast mode [ 117.675580][ T7567] __nla_validate_parse: 3 callbacks suppressed [ 117.675596][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 117.691369][ T7564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.451'. [ 117.764077][ T7575] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 118.583985][ T7615] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 118.779836][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 118.942957][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.470'. [ 119.003317][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 119.016734][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 119.152439][ T7651] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 119.196472][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 119.646849][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 119.822046][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.486'. [ 119.828741][ T7693] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 120.166327][ T7714] erspan0: entered allmulticast mode [ 120.177947][ T7711] netlink: 56 bytes leftover after parsing attributes in process `syz.3.493'. [ 120.399658][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.500'. [ 120.426987][ T36] nci: nci_rx_work: unknown MT 0x6 [ 121.709271][ T7763] tun0: tun_chr_ioctl cmd 1074025675 [ 121.734425][ T7763] tun0: persist disabled [ 122.031340][ T7789] vlan2: entered allmulticast mode [ 122.043712][ T7789] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 122.527615][ T7827] tipc: Started in network mode [ 122.539075][ T7827] tipc: Node identity 96850aeb9588, cluster identity 4711 [ 122.555845][ T7827] tipc: Enabled bearer , priority 0 [ 122.696320][ T7830] syzkaller0: entered promiscuous mode [ 122.710208][ T7830] syzkaller0: entered allmulticast mode [ 122.716425][ T7830] tipc: Resetting bearer [ 122.755669][ T7844] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 122.811984][ T7830] tipc: Resetting bearer [ 123.550491][ T120] tipc: Node number set to 51186411 [ 123.743307][ T7879] __nla_validate_parse: 12 callbacks suppressed [ 123.743326][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 124.029650][ T7830] tipc: Disabling bearer [ 124.201302][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.546'. [ 124.492468][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 124.669776][ T7910] netlink: 'syz.0.556': attribute type 33 has an invalid length. [ 124.695008][ T7910] netlink: 152 bytes leftover after parsing attributes in process `syz.0.556'. [ 125.305801][ T7957] netlink: 'syz.4.568': attribute type 11 has an invalid length. [ 125.315483][ T7952] netlink: 'syz.0.567': attribute type 9 has an invalid length. [ 125.334414][ T7961] netlink: 'syz.4.568': attribute type 11 has an invalid length. [ 125.352215][ T7956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.360459][ T7956] team0: Port device bond1 added [ 125.401935][ T7962] bridge_slave_0: left allmulticast mode [ 125.424523][ T7962] bridge_slave_0: left promiscuous mode [ 125.457611][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.472722][ T7952] netlink: 64 bytes leftover after parsing attributes in process `syz.0.567'. [ 125.492213][ T7962] bridge_slave_1: left allmulticast mode [ 125.502341][ T7962] bridge_slave_1: left promiscuous mode [ 125.508573][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.530882][ T7970] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.571'. [ 125.541025][ T7962] bond0: (slave bond_slave_0): Releasing backup interface [ 125.564506][ T7962] bond0: (slave bond_slave_1): Releasing backup interface [ 125.600500][ T7962] team0: Port device team_slave_0 removed [ 125.643961][ T7962] team0: Port device team_slave_1 removed [ 125.652392][ T7962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.661797][ T7962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.672592][ T7962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.680391][ T7962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.712968][ T7962] veth1_to_bond: left allmulticast mode [ 125.719558][ T7962] veth1_to_bond: left promiscuous mode [ 125.734487][ T7962] team0: Port device macvlan3 removed [ 125.744841][ T7962] bond1: (slave gretap1): Releasing active interface [ 125.765009][ T7970] netlink: 284 bytes leftover after parsing attributes in process `syz.1.571'. [ 125.893586][ T7986] netlink: 'syz.2.576': attribute type 12 has an invalid length. [ 126.042997][ T7997] wireguard: wg1: Could not create IPv4 socket [ 126.135725][ T7987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.159489][ T8005] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.582'. [ 126.381571][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.589'. [ 126.628781][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 126.807723][ T8058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.151015][ T8066] netlink: 'syz.2.606': attribute type 13 has an invalid length. [ 127.161663][ T8069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 127.235875][ T8081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.270126][ T8080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.465903][ T8100] openvswitch: netlink: Key type 12294 is out of range max 32 [ 127.538874][ T8104] netlink: 'syz.4.618': attribute type 5 has an invalid length. [ 127.559468][ T8104] geneve2: entered promiscuous mode [ 127.564710][ T8104] geneve2: entered allmulticast mode [ 127.573435][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 127.595888][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 127.619258][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 127.654075][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 127.773741][ T8106] netlink: 'syz.4.619': attribute type 10 has an invalid length. [ 127.879582][ T8119] netlink: 'syz.1.624': attribute type 8 has an invalid length. [ 128.109757][ T8131] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 128.182133][ T8136] pim6reg1: entered promiscuous mode [ 128.188968][ T8136] pim6reg1: entered allmulticast mode [ 128.740903][ T8181] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 128.750686][ T8181] __nla_validate_parse: 20 callbacks suppressed [ 128.750703][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 128.783733][ T8181] sctp: Trying to GSO but underlying device doesn't support it. [ 128.810643][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 128.846536][ T8188] 8021q: adding VLAN 0 to HW filter on device bond13 [ 128.865209][ T8188] bond13: (slave bridge2): Enslaving as an active interface with an up link [ 129.304775][ T8213] Driver unsupported XDP return value 0 on prog (id 117) dev N/A, expect packet loss! [ 129.331651][ T8213] tipc: Enabling of bearer rejected, failed to enable media [ 129.341285][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 129.690636][ T8237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'. [ 129.714321][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 129.925881][ T30] audit: type=1800 audit(1755458182.762:3): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.661" name="memory.events" dev="tmpfs" ino=725 res=0 errno=0 [ 129.974011][ T8251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.666'. [ 130.000540][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 130.221639][ T8263] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 130.254044][ T8263] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 130.312751][ T8263] netlink: 216 bytes leftover after parsing attributes in process `syz.4.669'. [ 130.366552][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 130.404566][ T8264] syzkaller0: entered promiscuous mode [ 130.412526][ T8264] syzkaller0: entered allmulticast mode [ 130.701141][ T8293] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 130.735585][ T8293] netlink: 220 bytes leftover after parsing attributes in process `syz.1.676'. [ 130.775389][ T8297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.049198][ T8313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.323105][ T8325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 131.403539][ T8331] netlink: 'syz.3.687': attribute type 39 has an invalid length. [ 131.591378][ T8342] dvmrp0: entered allmulticast mode [ 131.604671][ T8342] dvmrp0: left allmulticast mode [ 131.916832][ T8368] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 132.066013][ T8373] netlink: 'syz.2.697': attribute type 4 has an invalid length. [ 132.156859][ T8375] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 132.167898][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.176961][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.187503][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.196458][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.721103][ T8403] tipc: Started in network mode [ 132.753259][ T8403] tipc: Node identity 080211, cluster identity 4711 [ 132.762266][ T8403] tipc: Enabled bearer , priority 0 [ 132.826881][ T8403] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 132.851370][ T8403] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 132.907564][ T8403] netlink: 'syz.2.708': attribute type 13 has an invalid length. [ 133.170124][ T5874] Bluetooth: hci0: command tx timeout [ 133.878102][ T120] tipc: Node number set to 134353152 [ 134.088214][ T8438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.094337][ T8438] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 134.190445][ T8479] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 134.209681][ T8487] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 134.238675][ T8438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.253058][ T8438] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 134.327801][ T8489] __nla_validate_parse: 12 callbacks suppressed [ 134.327816][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.731'. [ 134.374201][ T8438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.400247][ T8438] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 134.528999][ T8438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.534988][ T8438] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 134.540695][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.735'. [ 134.570554][ T8438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.576516][ T8438] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 134.611415][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 134.660101][ T8509] netlink: 68 bytes leftover after parsing attributes in process `syz.2.738'. [ 134.686683][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 134.744762][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 134.963130][ T8531] pim6reg: entered allmulticast mode [ 135.045943][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 135.095553][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 135.150105][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 135.227687][ T8545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.279065][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 135.892566][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 136.021781][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 136.029211][ T8542] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.417754][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 136.471616][ T8560] syzkaller0 speed is unknown, defaulting to 1000 [ 136.500809][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 136.586149][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 136.755620][ T8616] netlink: 'syz.4.756': attribute type 1 has an invalid length. [ 136.781599][ T8616] netlink: 244 bytes leftover after parsing attributes in process `syz.4.756'. [ 136.879941][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 136.927087][ T8542] syzkaller0 speed is unknown, defaulting to 1000 [ 137.175067][ T8631] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 137.242822][ T8638] tipc: Enabling of bearer rejected, failed to enable media [ 137.274400][ T8642] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 137.284674][ T8634] netlink: 'syz.0.761': attribute type 35 has an invalid length. [ 137.300104][ T8631] syzkaller0 speed is unknown, defaulting to 1000 [ 137.332515][ T8644] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 137.348439][ T8642] team0: Port device dummy0 added [ 137.350779][ T8647] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 137.361329][ T8644] netlink: 'syz.4.762': attribute type 33 has an invalid length. [ 137.463525][ T8647] team0: Port device dummy0 removed [ 137.483481][ T8647] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.520162][ T8655] geneve3: entered promiscuous mode [ 137.903476][ T8677] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 137.935135][ T8677] team0: Device ipvlan1 failed to register rx_handler [ 138.134893][ T8680] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 138.993208][ T8736] : renamed from hsr0 (while UP) [ 139.266349][ T8755] pim6reg1: entered promiscuous mode [ 139.296797][ T8755] pim6reg1: entered allmulticast mode [ 139.461029][ T8769] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 139.645071][ T8781] __nla_validate_parse: 7 callbacks suppressed [ 139.645098][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 139.666716][ T8787] tipc: New replicast peer: 255.255.255.255 [ 139.701508][ T8787] tipc: Enabled bearer , priority 10 [ 139.793508][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 139.808363][ T8802] bridge0: port 3(veth0_to_bridge) entered blocking state [ 139.816173][ T8802] bridge0: port 3(veth0_to_bridge) entered disabled state [ 139.824738][ T8798] netlink: 'syz.0.799': attribute type 30 has an invalid length. [ 139.833417][ T8802] veth0_to_bridge: entered allmulticast mode [ 139.842367][ T8802] veth0_to_bridge: entered promiscuous mode [ 139.849454][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 139.860413][ T8802] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.879681][ T8802] bridge0: port 3(veth0_to_bridge) entered blocking state [ 139.887086][ T8802] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 139.927612][ T8806] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 140.042320][ T8817] netlink: 256 bytes leftover after parsing attributes in process `syz.0.806'. [ 140.241296][ T8829] bridge4: entered promiscuous mode [ 140.246559][ T8829] bridge4: entered allmulticast mode [ 140.315658][ T8838] netlink: 256 bytes leftover after parsing attributes in process `syz.2.814'. [ 140.633098][ T8863] netlink: 11 bytes leftover after parsing attributes in process `syz.3.823'. [ 140.656742][ T8863] netlink: 11 bytes leftover after parsing attributes in process `syz.3.823'. [ 140.683934][ T8872] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 140.698040][ T8872] netlink: 228 bytes leftover after parsing attributes in process `syz.4.824'. [ 140.783318][ T8880] netlink: 52 bytes leftover after parsing attributes in process `syz.3.825'. [ 140.816680][ T1218] tipc: Node number set to 2645938083 [ 141.071454][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 141.218072][ T5992] IPVS: starting estimator thread 0... [ 141.307668][ T8912] IPVS: using max 29 ests per chain, 69600 per kthread [ 141.976576][ T8964] 8021q: VLANs not supported on wg1 [ 142.081957][ T8974] nbd: illegal input index -8454144 [ 142.119471][ T8974] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 142.150853][ T8978] team_slave_0: mtu greater than device maximum [ 142.254972][ T8982] bond3: (slave bridge4): making interface the new active one [ 142.297519][ T8982] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 142.317558][ T8974] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 142.532538][ T9003] delete_channel: no stack [ 142.683824][ T9020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.897349][ T9040] openvswitch: netlink: Actions may not be safe on all matching packets [ 142.957199][ T9043] bond0: Device is already in use. [ 143.375497][ T9070] netlink: 'syz.3.883': attribute type 5 has an invalid length. [ 143.383917][ T9067] siw: device registration error -23 [ 143.494774][ T9078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.559884][ T9067] syzkaller0 speed is unknown, defaulting to 1000 [ 143.847663][ T9105] openvswitch: netlink: Actions may not be safe on all matching packets [ 143.990688][ T9109] pim6reg1: entered promiscuous mode [ 143.996031][ T9109] pim6reg1: entered allmulticast mode [ 144.555998][ T9145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.616473][ T9145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.661499][ T9148] __nla_validate_parse: 18 callbacks suppressed [ 144.661512][ T9148] netlink: 68 bytes leftover after parsing attributes in process `syz.2.906'. [ 144.793897][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.908'. [ 145.087773][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 145.186819][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 145.347196][ T9184] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 145.354874][ T9184] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 145.414396][ T9184] netlink: 236 bytes leftover after parsing attributes in process `syz.1.918'. [ 145.426095][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 145.484000][ T9194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.922'. [ 145.564575][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.583665][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.620100][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 145.778983][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 145.796779][ T9223] netlink: 'syz.4.931': attribute type 10 has an invalid length. [ 145.828656][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 145.902464][ T9219] bridge0: port 3(vlan2) entered blocking state [ 145.905301][ T9231] sock: sock_timestamping_bind_phc: sock not bind to device [ 145.935676][ T9219] bridge0: port 3(vlan2) entered disabled state [ 145.945901][ T9219] vlan2: entered allmulticast mode [ 145.964251][ T9219] bridge0: entered allmulticast mode [ 145.989827][ T9219] vlan2: left allmulticast mode [ 145.994722][ T9219] bridge0: left allmulticast mode [ 146.107761][ T9242] netlink: 'syz.4.937': attribute type 27 has an invalid length. [ 146.332152][ T9260] sctp: [Deprecated]: syz.3.943 (pid 9260) Use of int in maxseg socket option. [ 146.332152][ T9260] Use struct sctp_assoc_value instead [ 146.467365][ T9273] bond0: (slave syz_tun): Releasing backup interface [ 146.496348][ T9273] bond0: (slave dummy0): Releasing backup interface [ 146.541538][ T9273] bond0: (slave batadv0): Releasing backup interface [ 146.590716][ T9273] veth0_to_bridge: left allmulticast mode [ 146.599607][ T9273] veth0_to_bridge: left promiscuous mode [ 146.605475][ T9273] bridge0: port 3(veth0_to_bridge) entered disabled state [ 146.653323][ T9273] bridge_slave_0: left allmulticast mode [ 146.660384][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.678230][ T9273] bridge_slave_1: left allmulticast mode [ 146.685546][ T9293] netlink: 'syz.3.951': attribute type 8 has an invalid length. [ 146.699149][ T9273] bridge_slave_1: left promiscuous mode [ 146.705025][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.732240][ T9273] bond0: (slave bond_slave_0): Releasing backup interface [ 146.746467][ T9296] netlink: 'syz.3.951': attribute type 3 has an invalid length. [ 146.763976][ T9273] bond0: (slave bond_slave_1): Releasing backup interface [ 146.790555][ T9273] team0: Port device team_slave_0 removed [ 146.811061][ T9273] team0: Port device team_slave_1 removed [ 146.828709][ T9273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.837737][ T9273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.862456][ T9273] team0: Port device bond1 removed [ 147.078222][ T9316] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 147.113454][ T9316] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 147.144867][ T9320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.243421][ T9329] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 147.611915][ T9346] syzkaller0 speed is unknown, defaulting to 1000 [ 148.679278][ T9395] netlink: 'syz.3.980': attribute type 17 has an invalid length. [ 148.694067][ T9395] erspan0: entered promiscuous mode [ 148.733930][ T9395] erspan0: left promiscuous mode [ 148.988643][ T9414] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 149.079385][ T9423] netlink: 'syz.0.987': attribute type 2 has an invalid length. [ 149.148313][ T9430] tipc: Enabling of bearer rejected, already enabled [ 149.320518][ T9441] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 149.425577][ T9446] nbd: must specify at least one socket [ 149.456128][ T9446] IPv6: sit1: Disabled Multicast RS [ 149.533506][ T9455] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 149.561123][ T9455] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 149.745881][ T9470] netlink: 'syz.0.1001': attribute type 24 has an invalid length. [ 149.774001][ T9474] __nla_validate_parse: 18 callbacks suppressed [ 149.774017][ T9474] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1003'. [ 149.798307][ T9474] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1003'. [ 150.158821][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1012'. [ 150.164124][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 150.202943][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 150.215621][ T9507] netlink: 'syz.2.1015': attribute type 21 has an invalid length. [ 150.224583][ T9507] netlink: 'syz.2.1015': attribute type 22 has an invalid length. [ 150.249791][ T9507] netlink: 'syz.2.1015': attribute type 23 has an invalid length. [ 150.268352][ T9511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.273079][ T9507] netlink: 'syz.2.1015': attribute type 25 has an invalid length. [ 150.285659][ T9507] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1015'. [ 150.316166][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 150.336175][ T9511] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 150.356323][ T9511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.606348][ T9539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1026'. [ 150.834745][ T9556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1031'. [ 150.872762][ T9552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1031'. [ 151.521518][ T9583] netlink: 'syz.1.1033': attribute type 20 has an invalid length. [ 151.632039][ T7934] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.648838][ T9591] Bluetooth: MGMT ver 1.23 [ 151.667947][ T7934] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.686980][ T7934] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.695711][ T7934] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.879884][ T9600] macsec1: entered promiscuous mode [ 151.885149][ T9600] team0: entered promiscuous mode [ 151.899423][ T9600] macsec1: entered allmulticast mode [ 151.924527][ T9600] team0: entered allmulticast mode [ 151.931809][ T9600] team0: Device macsec1 is already an upper device of the team interface [ 151.948913][ T9600] team0: left allmulticast mode [ 151.950817][ T9602] openvswitch: netlink: Message has 8 unknown bytes. [ 151.956300][ T9600] team0: left promiscuous mode [ 152.235919][ T9604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.454845][ T9618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.474266][ T9618] team0: Port device bond4 added [ 152.545953][ T9628] tipc: Started in network mode [ 152.560023][ T9628] tipc: Node identity 7ad1b70fc6f, cluster identity 4711 [ 152.580206][ T9628] tipc: Enabled bearer , priority 0 [ 152.588987][ T9628] syzkaller0: entered promiscuous mode [ 152.594578][ T9628] syzkaller0: entered allmulticast mode [ 152.645306][ T9628] tipc: Resetting bearer [ 152.664853][ T9627] tipc: Resetting bearer [ 152.692282][ T9627] tipc: Disabling bearer [ 152.912959][ T9649] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 154.076059][ T9742] syzkaller0 speed is unknown, defaulting to 1000 [ 154.315431][ T9761] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 154.354465][ T9752] x_tables: ip_tables: udp match: only valid for protocol 17 [ 154.795873][ T9791] __nla_validate_parse: 13 callbacks suppressed [ 154.795889][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1098'. [ 154.936720][ T30] audit: type=1800 audit(1755458207.772:4): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1095" name="memory.events" dev="tmpfs" ino=1121 res=0 errno=0 [ 156.354303][ T9835] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1109'. [ 156.460013][ T9842] validate_nla: 4 callbacks suppressed [ 156.460034][ T9842] netlink: 'syz.1.1113': attribute type 12 has an invalid length. [ 156.477914][ T9842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1113'. [ 156.553715][ T9847] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1114'. [ 156.906100][ T9869] ip6erspan0: entered promiscuous mode [ 156.921085][ T9873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1121'. [ 156.941976][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1119'. [ 156.972318][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 157.002936][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 157.103345][ T9880] netlink: 'syz.4.1124': attribute type 1 has an invalid length. [ 157.239263][ T9888] openvswitch: netlink: Tunnel attr 1301 out of range max 16 [ 157.262301][ T9888] openvswitch: netlink: Tunnel attr 1301 out of range max 16 [ 157.393632][ T9899] bridge_slave_0: default FDB implementation only supports local addresses [ 157.419564][ T9903] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1128'. [ 157.432125][ T9903] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 157.434820][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 158.059038][ T5979] IPVS: starting estimator thread 0... [ 158.157187][ T9958] IPVS: using max 31 ests per chain, 74400 per kthread [ 158.424617][ T9978] syzkaller0 speed is unknown, defaulting to 1000 [ 159.033273][ T9997] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 159.134121][T10000] tipc: Enabled bearer , priority 0 [ 159.223932][T10000] syzkaller0: entered promiscuous mode [ 159.231900][T10000] syzkaller0: entered allmulticast mode [ 159.251334][T10000] tipc: Resetting bearer [ 159.260858][ T9999] tipc: Resetting bearer [ 159.285427][ T9999] tipc: Disabling bearer [ 159.600113][T10033] netlink: 'syz.1.1172': attribute type 11 has an invalid length. [ 160.010095][T10064] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 160.054395][T10064] __nla_validate_parse: 6 callbacks suppressed [ 160.054411][T10064] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1181'. [ 160.072853][T10076] veth0: entered promiscuous mode [ 160.088990][T10064] netlink: 'syz.2.1181': attribute type 11 has an invalid length. [ 160.100125][T10064] netlink: 'syz.2.1181': attribute type 4 has an invalid length. [ 160.115316][T10064] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1181'. [ 160.193639][T10063] veth0: left promiscuous mode [ 160.239147][T10081] ipvlan0: entered promiscuous mode [ 160.254782][T10081] ipvlan0: entered allmulticast mode [ 160.266344][T10081] veth0_vlan: entered allmulticast mode [ 160.318534][T10083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'. [ 160.385668][T10083] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1186'. [ 160.426963][T10083] netlink: 'syz.0.1186': attribute type 5 has an invalid length. [ 160.435909][T10083] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1186'. [ 160.692062][T10112] netlink: 'syz.1.1196': attribute type 12 has an invalid length. [ 160.703835][T10112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1196'. [ 160.783378][T10117] blkio.reset_stats is deprecated [ 160.802791][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 160.815545][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'. [ 160.987550][T10125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.142893][T10125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.230639][T10125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.292618][T10145] netlink: 'syz.0.1208': attribute type 4 has an invalid length. [ 161.433303][ T7934] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.465207][ T7934] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.490312][ T7934] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.510763][T10111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.512600][ T7934] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.578938][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 161.612988][T10160] netlink: 'syz.2.1214': attribute type 25 has an invalid length. [ 161.720824][T10168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1217'. [ 161.834462][T10174] netlink: 'syz.2.1218': attribute type 10 has an invalid length. [ 161.843296][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.891206][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.898416][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.911641][T10174] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 162.031227][T10177] veth0: entered promiscuous mode [ 162.132870][T10179] team0: Port device bond4 removed [ 162.169710][T10183] tipc: Enabled bearer , priority 0 [ 162.185896][T10183] syzkaller0: entered promiscuous mode [ 162.191924][T10183] syzkaller0: entered allmulticast mode [ 162.210629][T10183] tipc: Resetting bearer [ 162.220092][T10183] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 162.247441][T10186] tipc: Resetting bearer [ 162.261530][T10186] tipc: Disabling bearer [ 162.273080][T10189] netlink: 'syz.1.1222': attribute type 5 has an invalid length. [ 162.537985][T10203] chnl_net:caif_netlink_parms(): no params data found [ 162.619011][ T120] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 162.860889][T10222] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 162.868529][T10222] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 162.968873][T10229] syz_tun: entered allmulticast mode [ 162.997499][T10229] syz_tun: left allmulticast mode [ 163.179632][T10234] nbd0: detected capacity change from 0 to 127 [ 163.204827][ T5874] block nbd0: Receive control failed (result -32) [ 163.618948][T10271] netlink: 'syz.4.1249': attribute type 10 has an invalid length. [ 163.627447][T10271] batadv0: entered promiscuous mode [ 163.632679][T10271] batadv0: entered allmulticast mode [ 163.649138][T10271] bridge0: port 1(batadv0) entered blocking state [ 163.656430][T10271] bridge0: port 1(batadv0) entered disabled state [ 163.750194][T10285] netlink: 'syz.2.1253': attribute type 2 has an invalid length. [ 163.796954][T10285] netlink: 'syz.2.1253': attribute type 2 has an invalid length. [ 164.159660][ T2957] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 164.169926][ T2957] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 164.192610][T10312] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 164.200826][T10308] netlink: 'syz.2.1262': attribute type 21 has an invalid length. [ 164.209683][T10308] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 164.680482][T10337] RDS: rds_bind could not find a transport for 7665:7468:315f:746f:5f68:7372::, load rds_tcp or rds_rdma? [ 164.710374][T10339] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 164.739726][T10339] `: renamed from bond0 (while UP) [ 164.874080][T10343] veth0: entered promiscuous mode [ 164.880229][T10341] veth0: left promiscuous mode [ 165.055901][T10353] 8021q: VLANs not supported on wg1 [ 165.073013][T10353] openvswitch: netlink: IPv6 tunnel dst address is zero [ 165.326314][T10374] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 165.369280][T10374] netlink: 'syz.3.1285': attribute type 10 has an invalid length. [ 165.416153][T10374] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 165.485491][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.490292][T10371] __nla_validate_parse: 15 callbacks suppressed [ 165.490310][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 165.522656][T10374] bridge_slave_1: left allmulticast mode [ 165.548237][T10374] bridge_slave_1: left promiscuous mode [ 165.554018][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.566895][T10374] bond0: (slave bond_slave_0): Releasing backup interface [ 165.587598][T10374] bond0: (slave bond_slave_1): Releasing backup interface [ 165.600030][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1285'. [ 165.619601][T10374] team0: Port device team_slave_0 removed [ 165.633824][T10374] team0: Port device team_slave_1 removed [ 165.641413][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.650017][T10374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.663444][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.672226][T10374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.686619][T10374] bond3: (slave bridge4): Releasing active interface [ 166.431648][T10441] geneve2: entered promiscuous mode [ 166.437136][T10441] geneve2: entered allmulticast mode [ 166.459827][T10437] syzkaller0 speed is unknown, defaulting to 1000 [ 166.640500][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 166.894160][T10470] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.901345][T10470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.931416][T10472] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 167.022445][T10472] syzkaller0: entered promiscuous mode [ 167.031255][T10472] syzkaller0: entered allmulticast mode [ 167.058691][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 168.204081][T10508] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:0 [ 168.230188][T10495] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 168.384369][T10512] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 168.405605][T10516] openvswitch: netlink: Flow key attr not present in new flow. [ 168.419845][T10512] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.430069][T10512] gretap1: entered promiscuous mode [ 168.435321][T10512] gretap1: entered allmulticast mode [ 168.609609][T10528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1329'. [ 168.643577][T10532] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 168.664617][T10532] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1327'. [ 168.725332][T10528] pim6reg: entered allmulticast mode [ 168.753327][T10540] tipc: Started in network mode [ 168.772734][T10540] tipc: Node identity be2d5324b61f, cluster identity 4711 [ 168.784023][T10540] tipc: Enabled bearer , priority 0 [ 168.805812][T10541] pim6reg: left allmulticast mode [ 168.857468][T10547] vlan2: entered promiscuous mode [ 168.864754][T10547] vlan2: entered allmulticast mode [ 168.874767][T10547] hsr_slave_1: entered allmulticast mode [ 168.884277][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'. [ 168.933803][T10540] tipc: Disabling bearer [ 168.962723][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 169.070668][T10560] netlink: 'syz.0.1336': attribute type 1 has an invalid length. [ 169.085803][T10564] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 169.625366][T10611] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1348'. [ 169.829780][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 170.950181][T10705] netlink: 'syz.0.1379': attribute type 6 has an invalid length. [ 170.965983][T10703] 8021q: VLANs not supported on ip_vti0 [ 171.268328][T10717] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.268364][T10723] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 171.370898][T10731] veth0: entered promiscuous mode [ 171.384417][T10730] veth0: left promiscuous mode [ 171.704414][T10750] __nla_validate_parse: 5 callbacks suppressed [ 171.704431][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 171.823422][T10759] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1397'. [ 172.362917][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 172.436346][T10801] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1411'. [ 172.454302][T10802] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.591047][T10813] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1413'. [ 172.624123][T10813] xt_policy: neither incoming nor outgoing policy selected [ 172.663949][T10811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.696511][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 172.722013][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1414'. [ 172.744239][T10822] netlink: 'syz.4.1414': attribute type 11 has an invalid length. [ 172.753131][T10818] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 172.764233][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.0.1412 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 172.764258][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.764276][T10818] Call Trace: [ 172.764284][T10818] [ 172.764292][T10818] dump_stack_lvl+0x189/0x250 [ 172.764323][T10818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.764346][T10818] ? __pfx__printk+0x10/0x10 [ 172.764378][T10818] ? kernfs_path_from_node+0x2f/0x290 [ 172.764397][T10818] ? kernfs_path_from_node+0x250/0x290 [ 172.764416][T10818] ? kernfs_path_from_node+0x2f/0x290 [ 172.764440][T10818] sysfs_warn_dup+0x8e/0xa0 [ 172.764458][T10818] sysfs_do_create_link_sd+0xc0/0x110 [ 172.764478][T10818] device_add_class_symlinks+0x1cf/0x240 [ 172.764499][T10818] device_add+0x475/0xb50 [ 172.764521][T10818] wiphy_register+0x1ba6/0x28d0 [ 172.764564][T10818] ? __pfx_wiphy_register+0x10/0x10 [ 172.764587][T10818] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 172.764614][T10818] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 172.764648][T10818] ieee80211_register_hw+0x3425/0x4080 [ 172.764668][T10818] ? preempt_schedule+0xae/0xc0 [ 172.764705][T10818] ? ieee80211_register_hw+0x1451/0x4080 [ 172.764734][T10818] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 172.764771][T10818] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 172.764803][T10818] ? __hrtimer_setup+0x187/0x210 [ 172.764820][T10818] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 172.764850][T10818] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 172.764904][T10818] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 172.764926][T10818] ? trace_kmalloc+0x1f/0xd0 [ 172.764947][T10818] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 172.764973][T10818] ? kstrndup+0xbf/0x160 [ 172.765026][T10818] hwsim_new_radio_nl+0xea4/0x1b10 [ 172.765052][T10818] ? __pfx___nla_validate_parse+0x10/0x10 [ 172.765100][T10818] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 172.765134][T10818] ? __nla_parse+0x40/0x60 [ 172.765161][T10818] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 172.765189][T10818] genl_family_rcv_msg_doit+0x215/0x300 [ 172.765215][T10818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 172.765251][T10818] ? bpf_lsm_capable+0x9/0x20 [ 172.765274][T10818] ? security_capable+0x7e/0x2e0 [ 172.765305][T10818] genl_rcv_msg+0x60e/0x790 [ 172.765330][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.765347][T10818] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 172.765382][T10818] netlink_rcv_skb+0x208/0x470 [ 172.765402][T10818] ? __lock_acquire+0xab9/0xd20 [ 172.765426][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.765445][T10818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.765487][T10818] ? down_read+0x1ad/0x2e0 [ 172.765513][T10818] genl_rcv+0x28/0x40 [ 172.765529][T10818] netlink_unicast+0x82c/0x9e0 [ 172.765559][T10818] ? __pfx_netlink_unicast+0x10/0x10 [ 172.765582][T10818] ? netlink_sendmsg+0x642/0xb30 [ 172.765604][T10818] ? skb_put+0x11b/0x210 [ 172.765624][T10818] netlink_sendmsg+0x805/0xb30 [ 172.765664][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.765696][T10818] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.765728][T10818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.765748][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.765777][T10818] __sock_sendmsg+0x219/0x270 [ 172.765805][T10818] ____sys_sendmsg+0x505/0x830 [ 172.765830][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.765861][T10818] ? import_iovec+0x74/0xa0 [ 172.765886][T10818] ___sys_sendmsg+0x21f/0x2a0 [ 172.765908][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.765969][T10818] ? __fget_files+0x2a/0x420 [ 172.765984][T10818] ? __fget_files+0x3a0/0x420 [ 172.766009][T10818] __x64_sys_sendmsg+0x19b/0x260 [ 172.766028][T10818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.766073][T10818] ? do_user_addr_fault+0xc8a/0x1390 [ 172.766102][T10818] ? do_syscall_64+0xbe/0x3b0 [ 172.766128][T10818] do_syscall_64+0xfa/0x3b0 [ 172.766150][T10818] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.766170][T10818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.766186][T10818] ? clear_bhb_loop+0x60/0xb0 [ 172.766205][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.766220][T10818] RIP: 0033:0x7fe486b8ebe9 [ 172.766234][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.766247][T10818] RSP: 002b:00007fe48798d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.766270][T10818] RAX: ffffffffffffffda RBX: 00007fe486db6090 RCX: 00007fe486b8ebe9 [ 172.766281][T10818] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 172.766291][T10818] RBP: 00007fe486c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.766301][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.766310][T10818] R13: 00007fe486db6128 R14: 00007fe486db6090 R15: 00007ffcd021c938 [ 172.766335][T10818] [ 173.513539][T10811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.533987][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 173.765864][T10811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.881970][T10863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.094269][T10811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.101472][T10876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.194224][T10872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.272653][ T1322] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.305339][ T1322] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.330502][ T1322] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.370570][ T1322] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.552612][T10894] can: request_module (can-proto-0) failed. [ 174.674616][T10904] netlink: 'syz.1.1431': attribute type 4 has an invalid length. [ 174.911142][T10925] netlink: 'syz.1.1438': attribute type 28 has an invalid length. [ 174.951070][T10925] netlink: 'syz.1.1438': attribute type 3 has an invalid length. [ 175.001764][T10925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1438'. [ 175.070401][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 175.079653][T10937] netlink: 'syz.3.1442': attribute type 12 has an invalid length. [ 175.093270][T10937] netlink: 'syz.3.1442': attribute type 11 has an invalid length. [ 175.231545][T10946] vlan3: entered promiscuous mode [ 175.250012][T10946] bridge0: entered promiscuous mode [ 175.385362][T10958] syzkaller0 speed is unknown, defaulting to 1000 [ 175.767356][T10988] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 175.852627][T10998] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 175.886549][T11002] netlink: 'syz.4.1462': attribute type 10 has an invalid length. [ 175.903235][T10998] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.914099][T10998] bond0: (slave team0): Enslaving as an active interface with an up link [ 175.971050][T11002] veth0_vlan: entered allmulticast mode [ 176.070030][T11002] veth0_vlan: left promiscuous mode [ 176.084308][T11002] veth0_vlan: entered promiscuous mode [ 176.102456][T11002] team0: Device veth0_vlan failed to register rx_handler [ 176.142319][T11016] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 176.280148][T11016] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.305452][T11021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.312580][T11021] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 176.326069][T11021] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 176.394130][T11026] macvtap1: entered allmulticast mode [ 176.404425][T11026] veth0_macvtap: entered allmulticast mode [ 176.443517][T11027] veth7: entered promiscuous mode [ 176.451980][T11027] bond5: (slave veth7): Enslaving as an active interface with a down link [ 176.493243][T11031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.504335][T11016] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.872648][T11063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.946245][T11070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.962598][T11072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.194748][T11086] __nla_validate_parse: 5 callbacks suppressed [ 177.194765][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 177.381101][T11100] pim6reg1: entered promiscuous mode [ 177.386526][T11100] pim6reg1: entered allmulticast mode [ 177.450309][T11096] vlan1: entered allmulticast mode [ 177.542069][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 177.650639][T11109] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 177.710936][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 178.519345][T11159] syzkaller0: entered promiscuous mode [ 178.524877][T11159] syzkaller0: entered allmulticast mode [ 178.616506][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1512'. [ 178.992387][T11178] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 179.020570][T11178] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1515'. [ 179.050286][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 179.073797][T11184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 179.185358][T11189] sctp: [Deprecated]: syz.0.1520 (pid 11189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.185358][T11189] Use struct sctp_sack_info instead [ 179.663497][T11212] netlink: 'syz.1.1526': attribute type 11 has an invalid length. [ 179.671901][T11212] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1526'. [ 179.927721][T11232] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1534'. [ 181.102657][T11280] validate_nla: 2 callbacks suppressed [ 181.102676][T11280] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 181.187185][T11275] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 181.301248][T11280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.412961][T11292] tipc: Enabled bearer , priority 0 [ 181.439131][T11292] syzkaller0: entered promiscuous mode [ 181.454904][T11292] syzkaller0: entered allmulticast mode [ 181.518027][T11297] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1546'. [ 181.652060][T11309] tipc: Resetting bearer [ 181.684192][T11290] tipc: Resetting bearer [ 181.782112][T11290] tipc: Disabling bearer [ 181.822826][T11311] macsec1: entered promiscuous mode [ 181.828246][T11311] team0: entered promiscuous mode [ 181.833536][T11311] macsec1: entered allmulticast mode [ 181.855979][T11311] team0: entered allmulticast mode [ 181.862147][T11311] team0: Device macsec1 is already an upper device of the team interface [ 181.874637][T11311] team0: left allmulticast mode [ 181.879929][T11311] team0: left promiscuous mode [ 181.921267][T11310] netlink: 'syz.1.1549': attribute type 23 has an invalid length. [ 182.154113][T11327] tipc: Enabling of bearer rejected, media not registered [ 182.230427][T11331] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 182.388252][T11325] netlink: 'syz.0.1555': attribute type 21 has an invalid length. [ 183.190844][T11364] __nla_validate_parse: 1 callbacks suppressed [ 183.190864][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 183.247304][T11366] bridge0: port 1(batadv0) entered blocking state [ 183.253882][T11366] bridge0: port 1(batadv0) entered disabled state [ 183.281912][T11366] batadv0: entered allmulticast mode [ 183.299621][T11366] batadv0: entered promiscuous mode [ 183.323217][T11364] geneve2: entered promiscuous mode [ 183.395158][T11374] netlink: 'syz.4.1567': attribute type 3 has an invalid length. [ 183.448734][T11374] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1567'. [ 183.536267][T11079] Set syz1 is full, maxelem 65536 reached [ 183.581903][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 183.723663][T11394] netlink: 'syz.0.1572': attribute type 19 has an invalid length. [ 183.742341][ T7934] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 183.751923][ T7934] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 184.219128][T11414] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 184.264372][T11414] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.284077][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1581'. [ 184.296788][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1581'. [ 184.343771][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 184.393061][T11425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1580'. [ 184.495574][T11432] netlink: 'syz.4.1585': attribute type 16 has an invalid length. [ 184.505672][T11432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1585'. [ 185.369403][T11476] xt_socket: unknown flags 0x50 [ 185.420898][T11482] veth0_to_bond: entered allmulticast mode [ 185.433108][ T5951] IPVS: starting estimator thread 0... [ 185.547218][T11483] IPVS: using max 32 ests per chain, 76800 per kthread [ 185.557439][T11489] netlink: 'syz.4.1601': attribute type 2 has an invalid length. [ 185.565679][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 186.761218][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1620'. [ 186.780994][T11570] netlink: 'syz.3.1619': attribute type 11 has an invalid length. [ 186.893412][T11580] netlink: 'syz.2.1623': attribute type 1 has an invalid length. [ 187.045568][T11580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.111561][T11586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.127404][T11586] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 187.153201][T11586] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 187.181748][T11591] veth3: entered promiscuous mode [ 187.192061][T11580] vlan2: entered allmulticast mode [ 187.198036][T11580] bond4: entered allmulticast mode [ 187.493650][T11622] syzkaller0 speed is unknown, defaulting to 1000 [ 188.319834][T11639] __nla_validate_parse: 53 callbacks suppressed [ 188.319854][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 188.437175][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'. [ 188.464454][T11643] netlink: 'syz.3.1637': attribute type 6 has an invalid length. [ 188.470088][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 188.689943][T11663] netlink: 'syz.3.1641': attribute type 4 has an invalid length. [ 188.750627][T11665] sit2: entered promiscuous mode [ 188.755620][T11665] sit2: entered allmulticast mode [ 189.116189][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 189.335451][T11700] xt_socket: unknown flags 0x50 [ 189.550405][T11717] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 189.702754][T11717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.997462][T11750] openvswitch: netlink: Message has -1 unknown bytes. [ 190.009155][T11752] netlink: 'syz.3.1658': attribute type 33 has an invalid length. [ 190.030171][T11752] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1658'. [ 190.188158][T11770] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 190.196046][T11770] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1666'. [ 190.306132][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 190.354520][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 190.381348][T11783] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 190.412606][T11783] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 190.423536][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 190.522318][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 190.685314][T11805] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 190.685316][T11806] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 191.093491][T11838] netlink: 'syz.4.1685': attribute type 21 has an invalid length. [ 191.116706][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.159854][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.190450][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.210728][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.345998][T11850] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 191.361806][T11850] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 191.370568][T11850] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 191.396451][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.422475][T11850] bond0: (slave wlan1): Opening slave failed [ 191.507659][T11803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.520833][T11859] bond5: (slave veth7): Releasing active interface [ 191.532874][T11859] batadv0: left allmulticast mode [ 191.538073][T11859] batadv0: left promiscuous mode [ 191.543320][T11859] bridge0: port 1(batadv0) entered disabled state [ 191.579317][T11866] syzkaller0 speed is unknown, defaulting to 1000 [ 191.644760][T11869] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 191.653620][T11869] netlink: 'syz.1.1695': attribute type 2 has an invalid length. [ 191.948923][T11882] tipc: Enabled bearer , priority 0 [ 191.956113][T11882] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 191.964120][T11882] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 191.974318][T11882] tipc: Resetting bearer [ 192.724090][T11934] tipc: Enabled bearer , priority 0 [ 192.750176][T11934] tipc: Resetting bearer [ 192.800565][T11933] tipc: Disabling bearer [ 192.821205][T11938] tipc: Enabling of bearer rejected, already enabled [ 193.016244][T11953] netlink: 'syz.4.1724': attribute type 30 has an invalid length. [ 193.152854][T11953] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 193.457873][T11966] __nla_validate_parse: 15 callbacks suppressed [ 193.457891][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 193.564774][T11966] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1725'. [ 194.255952][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'. [ 194.349772][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 194.376974][T11978] netlink: 'syz.4.1729': attribute type 11 has an invalid length. [ 194.416114][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 194.450488][T11989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1732'. [ 194.464145][T11978] netlink: 'syz.4.1729': attribute type 11 has an invalid length. [ 194.508044][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 194.637919][T12008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.669338][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 194.905556][T12025] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 195.046424][T12039] tipc: Enabled bearer , priority 0 [ 195.062762][T12039] syzkaller0: entered promiscuous mode [ 195.079067][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 195.089907][T12039] syzkaller0: entered allmulticast mode [ 195.123855][T12034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.189547][T12034] tipc: Resetting bearer [ 195.201531][T12032] tipc: Resetting bearer [ 195.228618][T12032] tipc: Disabling bearer [ 195.245546][T12056] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 195.278927][T12055] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 195.335377][T12055] team0: Port device dummy0 added [ 195.342547][T12053] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1754'. [ 195.746139][T12088] netlink: 'syz.1.1767': attribute type 13 has an invalid length. [ 195.812770][T12097] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 195.853626][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.863921][T12088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.914690][T12101] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 196.663724][T12145] netlink: 'syz.1.1782': attribute type 11 has an invalid length. [ 196.884010][T12160] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.083594][T12176] netlink: 'syz.4.1794': attribute type 1 has an invalid length. [ 197.254826][T12187] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 197.915916][T12245] netlink: 'syz.2.1809': attribute type 4 has an invalid length. [ 198.082149][T12252] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 198.124540][T12260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.142897][T12260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.154810][T12257] netlink: 'syz.1.1815': attribute type 4 has an invalid length. [ 198.301988][T12280] bond0: entered promiscuous mode [ 198.336150][T12281] syzkaller0 speed is unknown, defaulting to 1000 [ 198.507034][T12293] __nla_validate_parse: 19 callbacks suppressed [ 198.507053][T12293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1823'. [ 198.526726][T12293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1823'. [ 198.664563][T12298] Unsupported ieee802154 address type: 0 [ 198.965438][T12315] ip6erspan0: entered promiscuous mode [ 199.132929][T12323] netlink: 'syz.3.1833': attribute type 11 has an invalid length. [ 199.155574][T12323] netlink: 'syz.3.1833': attribute type 11 has an invalid length. [ 199.163588][T12323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1833'. [ 199.222264][T12327] syzkaller1: entered promiscuous mode [ 199.228551][T12327] syzkaller1: entered allmulticast mode [ 199.345483][T12333] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1836'. [ 199.527323][T12337] delete_channel: no stack [ 199.633715][T12346] syzkaller0 speed is unknown, defaulting to 1000 [ 199.725957][T12353] tipc: Enabling of bearer rejected, failed to enable media [ 199.853093][T12360] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 199.862276][T12360] openvswitch: netlink: EtherType 257 is less than min 600 [ 200.248941][T12367] sctp: [Deprecated]: syz.2.1847 (pid 12367) Use of int in maxseg socket option. [ 200.248941][T12367] Use struct sctp_assoc_value instead [ 200.724945][T12398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.786058][T12398] bond0: (slave rose0): Enslaving as an active interface with an up link [ 201.347730][T12439] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1866'. [ 201.896427][T12477] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 201.935280][T12477] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1875'. [ 201.976638][T12477] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 202.005952][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 202.159053][T12493] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1878'. [ 202.217770][T12498] netlink: zone id is out of range [ 202.418786][T12515] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 202.429734][T12517] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 202.507487][T12517] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 202.864577][T12536] openvswitch: netlink: Unknown key attributes 2 [ 202.977652][T12542] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1890'. [ 203.142996][T12549] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.265466][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 203.330658][T12557] xfrm1: entered promiscuous mode [ 203.335730][T12557] xfrm1: entered allmulticast mode [ 203.497205][T12559] tipc: Enabled bearer , priority 0 [ 203.603437][T12558] tipc: Disabling bearer [ 204.427190][T12621] netlink: 'syz.3.1909': attribute type 4 has an invalid length. [ 204.734743][T12648] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 204.742416][T12648] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 204.968027][T12654] __nla_validate_parse: 3 callbacks suppressed [ 204.968045][T12654] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1916'. [ 204.990563][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1917'. [ 205.021597][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1917'. [ 205.111849][T12663] netlink: 'syz.3.1920': attribute type 2 has an invalid length. [ 205.270623][T12674] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 205.272922][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.307726][T12674] `: (slave geneve1): Enslaving as an active interface with an up link [ 205.435874][T12679] syzkaller0 speed is unknown, defaulting to 1000 [ 205.573930][T12691] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1926'. [ 205.618149][T12692] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1929'. [ 205.645896][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 206.031907][T12709] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1935'. [ 206.229443][T12723] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 206.319032][T12729] openvswitch: netlink: Flow key attribute not present in set flow. [ 206.457580][T12743] netlink: 'syz.1.1945': attribute type 39 has an invalid length. [ 206.467411][T12744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'. [ 206.539916][T12744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'. [ 206.721730][T12760] veth1_to_hsr: entered allmulticast mode [ 206.737887][T12760] vlan1: left allmulticast mode [ 206.742984][T12760] veth1_to_hsr: left allmulticast mode [ 206.754618][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 207.305668][T12809] delete_channel: no stack [ 207.394974][T12809] hsr_slave_0 (unregistering): left promiscuous mode [ 207.471848][T12821] pimreg3: entered allmulticast mode [ 207.692657][T12837] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 208.124389][T12855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.239043][T12870] syzkaller0 speed is unknown, defaulting to 1000 [ 208.344281][ T2909] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.355076][ T2909] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.364773][ T2909] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.410192][ T2909] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.560691][T12888] netlink: 'syz.3.1991': attribute type 21 has an invalid length. [ 208.561123][T12890] netlink: 'syz.0.1992': attribute type 29 has an invalid length. [ 208.580799][T12888] netem: unknown loss type 0 [ 208.585675][T12888] netem: change failed [ 209.613978][T12968] block nbd1: Unsupported socket: shutdown callout must be supported. [ 210.068641][T12999] __nla_validate_parse: 15 callbacks suppressed [ 210.068658][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 210.261036][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'. [ 210.371359][T13021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2030'. [ 210.387384][T13022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2032'. [ 210.405475][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2030'. [ 210.430579][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 210.435282][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 210.452992][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2033'. [ 210.463717][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2034'. [ 210.598993][T13039] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2036'. [ 210.648012][T13039] xt_socket: unknown flags 0xd0 [ 210.834554][T13052] tipc: Resetting bearer [ 210.946322][T13061] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 211.003926][T13068] sctp: [Deprecated]: syz.0.2045 (pid 13068) Use of int in max_burst socket option. [ 211.003926][T13068] Use struct sctp_assoc_value instead [ 211.024253][T13068] sctp: [Deprecated]: syz.0.2045 (pid 13068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.024253][T13068] Use struct sctp_sack_info instead [ 211.186674][T13083] tipc: Enabling of bearer rejected, already enabled [ 211.195266][T13085] tipc: Enabling of bearer rejected, already enabled [ 211.338446][T13100] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 211.421343][T13108] netlink: 'syz.4.2058': attribute type 11 has an invalid length. [ 211.773239][T13131] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 212.276495][T13145] gtp0: entered promiscuous mode [ 212.323281][T13141] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 212.341999][T13141] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 212.383275][T13145] gtp0: entered allmulticast mode [ 212.551988][T13161] netlink: 'syz.4.2071': attribute type 16 has an invalid length. [ 212.569434][T13157] tipc: Enabling of bearer rejected, already enabled [ 212.597333][T13161] netlink: 'syz.4.2071': attribute type 17 has an invalid length. [ 212.624051][T13161] erspan0: left allmulticast mode [ 212.637663][T13161] bridge0: port 1(batadv0) entered blocking state [ 212.644206][T13161] bridge0: port 1(batadv0) entered forwarding state [ 212.743530][T13161] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 212.835214][T13161] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 212.844232][T13161] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 212.852662][T13161] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 212.976449][T13193] xt_socket: unknown flags 0xd0 [ 213.023680][T13200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.102587][T13201] syzkaller1: entered promiscuous mode [ 213.108653][T13201] syzkaller1: entered allmulticast mode [ 213.118057][T13201] syzkaller1: left promiscuous mode [ 213.123297][T13201] syzkaller1: left allmulticast mode [ 213.277810][T13214] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 213.339648][T13224] tipc: Enabled bearer , priority 10 [ 214.408295][T13299] netlink: 'syz.0.2108': attribute type 1 has an invalid length. [ 214.469457][ T120] tipc: Node number set to 137515812 [ 214.568065][T13310] bond0: option mode: unable to set because the bond device is up [ 214.589970][T13311] netlink: 'syz.3.2112': attribute type 11 has an invalid length. [ 214.820610][T13323] netlink: 'syz.4.2119': attribute type 16 has an invalid length. [ 214.955623][T13328] tipc: Enabling of bearer rejected, already enabled [ 215.326971][ T5874] Bluetooth: hci3: command tx timeout [ 215.373126][T13356] veth1_to_bond: entered allmulticast mode [ 215.475415][T13356] veth1_to_bond: left allmulticast mode [ 215.695370][T13372] __nla_validate_parse: 46 callbacks suppressed [ 215.695389][T13372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2130'. [ 215.833181][T13375] syzkaller1: entered promiscuous mode [ 215.850724][T13375] syzkaller1: entered allmulticast mode [ 215.880634][T13375] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.190603][T13401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'. [ 216.300611][T13417] tipc: Enabled bearer , priority 0 [ 216.336406][T13415] syzkaller0: entered promiscuous mode [ 216.344018][T13415] syzkaller0: entered allmulticast mode [ 216.393517][T13414] tipc: Resetting bearer [ 216.423748][T13414] tipc: Disabling bearer [ 216.444942][T13420] tipc: Enabling of bearer rejected, already enabled [ 216.669298][T13442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.686153][T13438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2150'. [ 216.717909][T13438] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 216.727928][T13438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2150'. [ 216.740742][T13438] ip6tnl0: entered promiscuous mode [ 216.745965][T13438] ip6tnl0: entered allmulticast mode [ 216.771631][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2152'. [ 216.843619][T13454] validate_nla: 4 callbacks suppressed [ 216.843634][T13454] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 216.877089][T13454] netlink: 'syz.1.2155': attribute type 11 has an invalid length. [ 216.885878][T13454] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2155'. [ 216.920101][T13461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2157'. [ 216.940177][T13461] netlink: 'syz.3.2157': attribute type 7 has an invalid length. [ 216.957052][T13461] netlink: 'syz.3.2157': attribute type 8 has an invalid length. [ 216.977021][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 217.535539][T13495] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2166'. [ 217.555866][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'. [ 217.565511][T13496] netlink: 'syz.0.2165': attribute type 5 has an invalid length. [ 217.606269][T13496] geneve2: entered promiscuous mode [ 217.612145][T13496] geneve2: entered allmulticast mode [ 217.628073][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 217.642953][ T36] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 217.668402][T13499] syzkaller0: entered promiscuous mode [ 217.677172][T13499] syzkaller0: entered allmulticast mode [ 217.693490][ T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 217.709804][ T36] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 217.740675][T13499] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.853362][T13499] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 218.490899][T13535] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 218.580825][T13535] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.213011][T13584] netlink: 'syz.2.2192': attribute type 2 has an invalid length. [ 219.239011][T13587] netlink: 'syz.3.2193': attribute type 7 has an invalid length. [ 219.427720][T13605] tipc: Resetting bearer [ 219.593501][T13613] nbd: couldn't find device at index 1255035857 [ 220.433307][T13631] netlink: zone id is out of range [ 220.442673][T13631] netlink: del zone limit has 4 unknown bytes [ 220.633505][T13647] lo: entered allmulticast mode [ 220.650929][T13647] lo: left allmulticast mode [ 220.703565][T13649] __nla_validate_parse: 10 callbacks suppressed [ 220.703583][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'. [ 221.005975][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 221.036128][T13679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2221'. [ 221.075654][T13679] xt_socket: unknown flags 0xe4 [ 221.187863][T13694] netlink: 'syz.2.2223': attribute type 13 has an invalid length. [ 221.223703][T13694] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2223'. [ 221.565910][T13718] veth1_macvtap: left promiscuous mode [ 221.717362][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 221.726425][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 221.815810][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 222.231113][T13764] validate_nla: 1 callbacks suppressed [ 222.231132][T13764] netlink: 'syz.2.2245': attribute type 10 has an invalid length. [ 222.247488][T13764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2245'. [ 222.249948][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 222.261551][T13764] batadv0: entered promiscuous mode [ 222.273489][T13764] batadv0: entered allmulticast mode [ 222.279951][T13764] bridge0: port 3(batadv0) entered blocking state [ 222.290181][T13764] bridge0: port 3(batadv0) entered disabled state [ 222.296532][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2246'. [ 222.301724][T13764] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 222.320386][T13767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.333576][T13764] bridge0: port 3(batadv0) entered blocking state [ 222.340205][T13764] bridge0: port 3(batadv0) entered forwarding state [ 222.500669][T13777] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 222.514043][T13777] bridge0: port 3(batadv0) entered disabled state [ 222.525839][T13777] bridge_slave_1: left allmulticast mode [ 222.533586][T13777] bridge_slave_1: left promiscuous mode [ 222.547107][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.563608][T13777] bridge_slave_0: left allmulticast mode [ 222.570306][T13777] bridge_slave_0: left promiscuous mode [ 222.576183][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.636373][T13777] bond0: (slave bridge0): Releasing backup interface [ 222.832533][T13792] openvswitch: netlink: IPv4 tunnel dst address is zero [ 222.921992][T13797] syzkaller0 speed is unknown, defaulting to 1000 [ 222.970835][T13805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.985593][T13806] lo: entered allmulticast mode [ 223.021251][T13806] lo: left allmulticast mode [ 223.555344][T13835] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 223.566978][T13846] netlink: 'syz.2.2269': attribute type 5 has an invalid length. [ 224.075025][T13886] netlink: 'syz.0.2277': attribute type 10 has an invalid length. [ 224.154863][T13889] bridge3: entered promiscuous mode [ 224.161330][T13894] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20004 [ 224.171324][T13889] bridge3: entered allmulticast mode [ 224.521214][T13909] syz.3.2286 (13909) used obsolete PPPIOCDETACH ioctl [ 224.888843][T13938] IPVS: Unknown mcast interface: nicvf0 [ 225.066433][T13948] netlink: 'syz.4.2300': attribute type 10 has an invalid length. [ 225.080368][T13946] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.162161][T13958] netlink: 'syz.0.2299': attribute type 5 has an invalid length. [ 225.174030][T13956] sctp: [Deprecated]: syz.2.2302 (pid 13956) Use of int in maxseg socket option. [ 225.174030][T13956] Use struct sctp_assoc_value instead [ 225.682971][T13979] netlink: 'syz.2.2308': attribute type 14 has an invalid length. [ 225.767403][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.808450][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.848148][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.866845][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.886405][T13998] __nla_validate_parse: 26 callbacks suppressed [ 225.886422][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2315'. [ 225.944055][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 226.001118][T14009] geneve2: entered promiscuous mode [ 226.008231][T14009] geneve2: entered allmulticast mode [ 226.015365][ T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 226.052694][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 226.063652][ T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 226.081542][ T36] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 226.372836][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'. [ 226.569235][T14038] netlink: 988 bytes leftover after parsing attributes in process `syz.2.2329'. [ 227.310885][T14084] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 227.321764][T14084] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.414250][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 227.436388][T14089] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2344'. [ 227.474552][T14071] "syz.3.2339" (14071) uses obsolete ecb(arc4) skcipher [ 227.544776][T14098] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 227.582635][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2348'. [ 227.626266][T14098] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 227.676434][T14097] veth1: entered promiscuous mode [ 227.690835][T14097] bond6: (slave veth1): Enslaving as a backup interface with a down link [ 227.713749][T14113] sctp: [Deprecated]: syz.2.2349 (pid 14113) Use of int in maxseg socket option. [ 227.713749][T14113] Use struct sctp_assoc_value instead [ 228.126127][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 228.233407][T14143] syzkaller0 speed is unknown, defaulting to 1000 [ 228.245000][T14156] syzkaller0 speed is unknown, defaulting to 1000 [ 228.254938][T14154] Unsupported ieee802154 address type: 0 [ 228.773485][T14182] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 228.797154][T14182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2364'. [ 228.806211][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 228.857539][T14182] netlink: 'syz.4.2364': attribute type 8 has an invalid length. [ 229.168672][T14206] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 229.194807][T14211] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 229.267640][T14215] netlink: 'syz.2.2374': attribute type 39 has an invalid length. [ 230.071579][T14262] tipc: Enabling of bearer rejected, media not registered [ 230.086871][T14266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.404324][T14283] siw: device registration error -23 [ 231.073780][T14287] __nla_validate_parse: 4 callbacks suppressed [ 231.073799][T14287] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2401'. [ 231.178663][T14287] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 231.333028][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 231.385734][T14309] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 231.493495][T14313] IPv6: sit1: Disabled Multicast RS [ 231.500656][T14313] sit1: entered allmulticast mode [ 231.558800][T14321] netlink: 'syz.2.2407': attribute type 10 has an invalid length. [ 231.608059][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 231.628451][T14321] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 231.675723][T14321] bond0: (slave team0): Releasing backup interface [ 231.758693][T14321] batman_adv: batadv0: Interface deactivated: dummy0 [ 231.765493][T14321] batman_adv: batadv0: Removing interface: dummy0 [ 231.779811][T14321] bond0: (slave bond_slave_0): Releasing backup interface [ 231.781991][T14303] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 231.809860][T14321] bond0: (slave bond_slave_1): Releasing backup interface [ 231.830332][T14321] team0: Port device team_slave_0 removed [ 231.847645][T14321] team0: Port device team_slave_1 removed [ 231.854166][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.862183][T14321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.871499][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.879200][T14321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.895497][T14321] bond0: (slave geneve1): Releasing backup interface [ 231.915615][T14321] bond1: (slave gretap1): Releasing active interface [ 231.934641][T14321] bond3: (slave geneve2): Releasing backup interface [ 231.952824][T14323] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 231.973651][T14323] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2411'. [ 232.059408][T14303] team0: Device veth1_macvtap failed to register rx_handler [ 232.082968][ T2909] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.085933][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 232.112043][ T2909] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.219817][ T2909] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.247745][ T2909] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.457293][T14362] sctp: [Deprecated]: syz.4.2419 (pid 14362) Use of int in maxseg socket option. [ 232.457293][T14362] Use struct sctp_assoc_value instead [ 232.483448][T14350] tipc: Enabled bearer , priority 0 [ 232.510367][T14355] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2418'. [ 232.537873][T14355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2418'. [ 232.559549][T14337] tipc: Disabling bearer [ 232.606309][T14369] bridge0: port 1(batadv0) entered disabled state [ 232.827037][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2427'. [ 232.832312][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2426'. [ 233.094099][T14404] pimreg: entered allmulticast mode [ 233.215915][T14404] pimreg: left allmulticast mode [ 233.287498][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 233.385032][T14434] pim6reg: entered allmulticast mode [ 233.570911][T14449] NCSI netlink: No device for ifindex 0 [ 233.669219][T14460] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 233.680671][T14460] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 233.694129][T14456] team0: Mode changed to "activebackup" [ 233.704879][T14459] bridge_slave_0: left promiscuous mode [ 233.893235][T14473] netlink: 'syz.2.2452': attribute type 21 has an invalid length. [ 234.388633][T14506] netlink: 'syz.2.2461': attribute type 2 has an invalid length. [ 234.417649][T14506] nbd: must specify a device to reconfigure [ 234.459701][T14516] netlink: 'syz.1.2465': attribute type 1 has an invalid length. [ 234.714760][T14534] netlink: 'syz.1.2468': attribute type 2 has an invalid length. [ 235.098595][T14565] netlink: 'syz.3.2481': attribute type 5 has an invalid length. [ 235.120357][T14565] geneve3: entered promiscuous mode [ 235.125674][T14565] geneve3: entered allmulticast mode [ 235.150196][ T12] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 235.168823][ T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 235.194973][ T2957] tipc: Subscription rejected, illegal request [ 235.210141][ T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 235.221864][ T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 235.300534][T14585] netlink: 'syz.4.2485': attribute type 2 has an invalid length. [ 235.620081][T14607] macvtap1: entered promiscuous mode [ 235.625571][T14607] vlan0: entered promiscuous mode [ 235.631198][T14607] macvtap1: entered allmulticast mode [ 235.641873][T14607] vlan0: entered allmulticast mode [ 235.652144][T14607] veth0_vlan: entered allmulticast mode [ 235.715898][T14607] macvtap2: entered promiscuous mode [ 235.721679][T14607] macvtap2: entered allmulticast mode [ 235.780319][T14607] macvtap3: entered promiscuous mode [ 235.787953][T14607] macvtap3: entered allmulticast mode [ 235.841669][T14607] macvtap4: entered promiscuous mode [ 235.848765][T14607] macvtap4: entered allmulticast mode [ 235.914804][T14607] macvtap5: entered promiscuous mode [ 235.922941][T14607] macvtap5: entered allmulticast mode [ 235.961460][T14607] macvtap6: entered promiscuous mode [ 235.967164][T14607] macvtap6: entered allmulticast mode [ 236.004457][T14607] macvtap7: entered promiscuous mode [ 236.010186][T14607] macvtap7: entered allmulticast mode [ 236.047451][T14607] macvtap8: entered promiscuous mode [ 236.052854][T14607] macvtap8: entered allmulticast mode [ 236.087938][T14607] macvtap9: entered promiscuous mode [ 236.093363][T14607] macvtap9: entered allmulticast mode [ 236.102679][T14607] __nla_validate_parse: 23 callbacks suppressed [ 236.102689][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 236.150840][T14607] macvtap10: entered promiscuous mode [ 236.156341][T14607] macvtap10: entered allmulticast mode [ 236.162580][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 236.201686][T14607] macvtap11: entered promiscuous mode [ 236.207341][T14607] macvtap11: entered allmulticast mode [ 236.213410][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 236.274222][T14607] macvtap12: entered promiscuous mode [ 236.289610][T14607] macvtap12: entered allmulticast mode [ 236.393511][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2499'. [ 236.428965][T14650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2498'. [ 236.445496][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 236.511892][T14654] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2501'. [ 236.565210][T14656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.733233][T14662] netlink: 'syz.4.2503': attribute type 33 has an invalid length. [ 236.744843][T14662] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2503'. [ 236.763219][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'. [ 236.835957][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'. [ 236.911897][ T49] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 236.921730][T14675] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 237.002204][T14684] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 237.112290][T14700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.382083][T14718] netlink: 'syz.3.2515': attribute type 1 has an invalid length. [ 237.496045][T14711] syzkaller0 speed is unknown, defaulting to 1000 [ 237.795474][T14742] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 237.908075][T14742] veth13: entered promiscuous mode [ 237.921319][T14742] bond8: (slave veth13): Enslaving as a backup interface with a down link [ 237.942481][T14751] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.109241][T14762] pim6reg527: entered allmulticast mode [ 238.168679][T14768] netlink: 'syz.1.2532': attribute type 11 has an invalid length. [ 238.631029][T14804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.745833][T14810] lo speed is unknown, defaulting to 1000 [ 238.785536][T14810] lo speed is unknown, defaulting to 1000 [ 238.809289][T14810] lo speed is unknown, defaulting to 1000 [ 238.952209][T14830] validate_nla: 11 callbacks suppressed [ 238.952228][T14830] netlink: 'syz.3.2552': attribute type 10 has an invalid length. [ 238.985005][T14821] veth0_vlan: left promiscuous mode [ 238.991819][T14821] veth0_vlan: entered promiscuous mode [ 239.033955][T14821] veth1_to_bond: entered promiscuous mode [ 239.042681][T14821] veth1_to_bond: entered allmulticast mode [ 239.049181][T14821] macvlan3: left promiscuous mode [ 239.054529][T14821] macvlan3: left allmulticast mode [ 239.062915][T14821] veth1_to_bond: left allmulticast mode [ 239.073451][T14821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.088917][T14821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.101522][T14821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.111861][T14821] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.125232][T14821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.137559][T14810] infiniband syz0: set active [ 239.141296][T14821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.142669][T14810] infiniband syz0: added lo [ 239.152834][T14821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.164320][T14821] 8021q: adding VLAN 0 to HW filter on device bond8 [ 239.173392][T14821] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.182594][T14821] 8021q: adding VLAN 0 to HW filter on device bond10 [ 239.192216][T14821] 8021q: adding VLAN 0 to HW filter on device bond11 [ 239.201642][T14821] 8021q: adding VLAN 0 to HW filter on device bond12 [ 239.213052][T14821] ip6gre2: left allmulticast mode [ 239.221581][T14810] RDS/IB: syz0: added [ 239.221974][T14821] `: entered promiscuous mode [ 239.226243][T14810] smc: adding ib device syz0 with port count 1 [ 239.234896][T14821] geneve1: entered promiscuous mode [ 239.237180][T14810] smc: ib device syz0 port 1 has pnetid [ 239.261045][T14821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.274401][T14821] sit2: left promiscuous mode [ 239.279294][T14821] sit2: left allmulticast mode [ 239.287410][T14821] geneve2: left promiscuous mode [ 239.292373][T14821] geneve2: left allmulticast mode [ 239.342650][T14830] team0: Device veth1_macvtap failed to register rx_handler [ 239.365568][ T120] lo speed is unknown, defaulting to 1000 [ 239.384390][ T5979] lo speed is unknown, defaulting to 1000 [ 239.402352][T14810] lo speed is unknown, defaulting to 1000 [ 239.681156][T14857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.717861][T14855] netlink: 'syz.2.2557': attribute type 33 has an invalid length. [ 239.724442][T14861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.023363][T14810] lo speed is unknown, defaulting to 1000 [ 240.095877][T14880] netlink: 'syz.3.2566': attribute type 33 has an invalid length. [ 240.135785][T14881] bond0: left promiscuous mode [ 240.141849][T14881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.160222][T14881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.383578][T14894] netlink: 'syz.3.2570': attribute type 4 has an invalid length. [ 240.430608][T14810] lo speed is unknown, defaulting to 1000 [ 240.767021][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 240.822989][T14810] lo speed is unknown, defaulting to 1000 [ 240.986063][T14923] syzkaller0: entered promiscuous mode [ 240.991548][T14925] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 240.991896][T14923] syzkaller0: entered allmulticast mode [ 240.999877][T14925] netlink: 'syz.3.2579': attribute type 3 has an invalid length. [ 241.233391][T14810] lo speed is unknown, defaulting to 1000 [ 241.425494][T14939] __nla_validate_parse: 98 callbacks suppressed [ 241.425513][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2585'. [ 241.451173][T14939] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 241.525448][T14944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2586'. [ 241.538216][T14944] netlink: 'syz.2.2586': attribute type 6 has an invalid length. [ 241.545969][T14944] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2586'. [ 241.628731][T14948] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2587'. [ 241.744234][T14957] netlink: 'syz.3.2590': attribute type 9 has an invalid length. [ 241.753082][T14957] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.2590'. [ 241.773047][T14962] netlink: 'syz.3.2590': attribute type 9 has an invalid length. [ 241.782025][T14962] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.2590'. [ 241.849017][T14967] ipvlan0: entered promiscuous mode [ 242.021881][T14981] netlink: 'syz.3.2595': attribute type 1 has an invalid length. [ 242.067028][T14981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2595'. [ 242.359367][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 242.534468][T15014] sit0: entered promiscuous mode [ 242.551283][T15014] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2605'. [ 243.073897][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 243.333088][T15039] vlan0 (unregistering): left allmulticast mode [ 243.352105][T15039] veth0_vlan (unregistering): left allmulticast mode [ 243.363071][T15039] vlan0 (unregistering): left promiscuous mode [ 246.422968][T15044] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 246.444558][T15046] __nla_validate_parse: 2 callbacks suppressed [ 246.444572][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 246.465715][T15047] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 246.601868][T15060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2618'. [ 247.263179][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'. [ 247.280941][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'. [ 247.448233][T15124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.542146][T15132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.665619][T15140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2637'. [ 247.721515][T15140] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2637'. [ 248.069485][T15171] bond14 (unregistering): Released all slaves [ 248.161629][T15171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2645'. [ 248.315506][T15192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2650'. [ 248.446399][T15197] netem: change failed [ 248.446753][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 248.672257][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 248.692404][T15217] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 248.736123][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.805423][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2657'. [ 249.169197][T15254] raw_sendmsg: syz.4.2666 forgot to set AF_INET. Fix it! [ 249.369547][T15271] tipc: Enabling of bearer rejected, failed to enable media [ 249.415322][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 250.051863][T15315] tipc: Enabling of bearer rejected, already enabled [ 251.053587][T15371] tipc: Enabling of bearer rejected, already enabled [ 251.095024][T15372] tipc: Enabling of bearer rejected, already enabled [ 251.515595][T15404] validate_nla: 1 callbacks suppressed [ 251.515613][T15404] netlink: 'syz.0.2707': attribute type 11 has an invalid length. [ 251.907669][T15426] __nla_validate_parse: 8 callbacks suppressed [ 251.907687][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2716'. [ 251.945287][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2716'. [ 251.971888][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2716'. [ 252.086392][T15447] netlink: 'syz.3.2721': attribute type 21 has an invalid length. [ 252.099494][T15449] netlink: 'syz.4.2722': attribute type 29 has an invalid length. [ 252.116507][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2722'. [ 252.129657][T15449] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 252.147596][T15447] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2721'. [ 252.185656][T15453] 8021q: VLANs not supported on ip_vti0 [ 252.231883][T15455] netlink: 'syz.2.2724': attribute type 1 has an invalid length. [ 252.252031][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'. [ 252.262941][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 252.344833][T15466] netlink: 'syz.2.2729': attribute type 11 has an invalid length. [ 252.356334][T15466] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2729'. [ 252.532687][T15475] tipc: Enabling of bearer rejected, failed to enable media [ 252.630740][T15482] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 252.652926][T15482] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2733'. [ 252.871665][T15497] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 253.025581][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 253.134109][T15519] netlink: 'syz.4.2745': attribute type 1 has an invalid length. [ 253.152486][T15519] netlink: 'syz.4.2745': attribute type 1 has an invalid length. [ 253.717179][ T36] syzkaller0: tun_net_xmit 76 [ 253.722406][ T36] syzkaller0: tun_net_xmit 48 [ 253.747365][ T5992] syzkaller0: tun_net_xmit 76 [ 253.752415][ T5992] syzkaller0: tun_net_xmit 76 [ 254.543065][ T5979] syzkaller0: tun_net_xmit 76 [ 256.518274][T15528] netlink: 'syz.2.2746': attribute type 64 has an invalid length. [ 259.473762][T15543] netlink: 'syz.3.2749': attribute type 10 has an invalid length. [ 260.324602][T15537] tap0: tun_chr_ioctl cmd 1074025672 [ 260.331736][T15537] tap0: ignored: set checksum disabled [ 260.436132][T15557] __nla_validate_parse: 3 callbacks suppressed [ 260.436150][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 261.240129][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 261.257168][T15614] tipc: Enabled bearer , priority 0 [ 261.266486][T15614] syzkaller0: entered promiscuous mode [ 261.316411][T15614] syzkaller0: entered allmulticast mode [ 261.345321][T15611] tipc: Enabling of bearer rejected, already enabled [ 261.357411][T15619] netlink: 'syz.1.2771': attribute type 11 has an invalid length. [ 261.376820][T15619] netlink: 'syz.1.2771': attribute type 11 has an invalid length. [ 261.400999][T15619] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2771'. [ 261.427653][T15611] tipc: Resetting bearer [ 261.452816][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 261.491605][T15611] tipc: Disabling bearer [ 261.504728][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2773'. [ 261.651671][T15642] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 261.659732][T15642] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2773'. [ 261.828698][T15646] netlink: 'syz.4.2779': attribute type 2 has an invalid length. [ 261.837105][T15648] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2780'. [ 261.837387][T15649] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2780'. [ 261.837563][T15649] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2780'. [ 261.837750][T15649] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2780'. [ 261.912788][T15646] netlink: 'syz.4.2779': attribute type 11 has an invalid length. [ 262.184429][T15666] hsr_slave_0: left promiscuous mode [ 262.199973][T15666] hsr_slave_1: left promiscuous mode [ 263.166743][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 263.206111][T15753] sctp: [Deprecated]: syz.0.2810 (pid 15753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.206111][T15753] Use struct sctp_sack_info instead [ 263.657225][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.667644][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.679541][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 263.689916][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 263.785752][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.817034][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.850475][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 263.886353][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 263.988730][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.021405][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.041445][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 264.062330][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 264.142175][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.157320][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.171142][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 264.202093][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 264.843825][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.856412][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.864119][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.874042][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.881849][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.898086][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.905474][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.912951][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.923610][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.932424][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.939950][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.949655][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.961831][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.979958][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.988894][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.998404][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.003967][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.006197][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.026475][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.034356][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.671204][ T12] bond0 (unregistering): Released all slaves [ 265.749344][ T12] bond1 (unregistering): Released all slaves [ 265.829115][ T12] bond2 (unregistering): Released all slaves [ 265.842749][ T12] bond3 (unregistering): Released all slaves [ 265.920775][ T12] bond4 (unregistering): Released all slaves [ 265.934670][ T12] bond5 (unregistering): Released all slaves [ 265.948387][ T12] bond6 (unregistering): Released all slaves [ 265.962543][ T12] bond7 (unregistering): Released all slaves [ 265.981849][ T12] bond8 (unregistering): Released all slaves [ 266.108248][T15793] syzkaller0 speed is unknown, defaulting to 1000 [ 266.134872][T15792] syzkaller0 speed is unknown, defaulting to 1000 [ 266.142702][T15793] lo speed is unknown, defaulting to 1000 [ 266.152168][T15796] syzkaller0 speed is unknown, defaulting to 1000 [ 266.180254][ T12] tipc: Disabling bearer [ 266.189205][ T12] tipc: Disabling bearer [ 266.217455][ T12] tipc: Left network mode [ 266.540495][T15792] lo speed is unknown, defaulting to 1000 [ 266.651530][T15836] __nla_validate_parse: 53 callbacks suppressed [ 266.651549][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 266.703253][T15836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 266.862142][T15796] lo speed is unknown, defaulting to 1000 [ 267.007820][ T5877] Bluetooth: hci2: command tx timeout [ 267.093401][ T5877] Bluetooth: hci4: command tx timeout [ 267.103512][ T5877] Bluetooth: hci0: command tx timeout [ 267.484122][ T12] veth0_macvtap: left promiscuous mode [ 267.500545][T15870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.570839][ T12] pim6reg527 (unregistering): left allmulticast mode [ 267.589681][ T12] pimreg3 (unregistering): left allmulticast mode [ 268.088856][T15875] ipvlan3: entered promiscuous mode [ 268.190291][T15793] chnl_net:caif_netlink_parms(): no params data found [ 268.310475][T15792] chnl_net:caif_netlink_parms(): no params data found [ 268.419994][ C1] ================================================================== [ 268.428108][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 268.436178][ C1] Write of size 8 at addr ffff8880565ce670 by task syz-executor/5873 [ 268.444233][ C1] [ 268.446554][ C1] CPU: 1 UID: 0 PID: 5873 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 268.446581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.446596][ C1] Call Trace: [ 268.446602][ C1] [ 268.446607][ C1] dump_stack_lvl+0x189/0x250 [ 268.446625][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 268.446643][ C1] ? rcu_is_watching+0x15/0xb0 [ 268.446655][ C1] ? __kasan_check_byte+0x12/0x40 [ 268.446674][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.446688][ C1] ? rcu_is_watching+0x15/0xb0 [ 268.446700][ C1] ? lock_release+0x4b/0x3e0 [ 268.446721][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 268.446737][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 268.446754][ C1] print_report+0xca/0x240 [ 268.446767][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 268.446788][ C1] kasan_report+0x118/0x150 [ 268.446807][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 268.446829][ C1] __xfrm_state_delete+0x696/0xca0 [ 268.446852][ C1] xfrm_timer_handler+0x18f/0xa00 [ 268.446874][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 268.446892][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 268.446909][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.446927][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 268.446943][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.446961][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 268.446980][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 268.446998][ C1] __hrtimer_run_queues+0x529/0xc60 [ 268.447018][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 268.447029][ C1] ? read_tsc+0x9/0x20 [ 268.447049][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 268.447064][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 268.447079][ C1] handle_softirqs+0x283/0x870 [ 268.447092][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 268.447106][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 268.447122][ C1] __irq_exit_rcu+0xca/0x1f0 [ 268.447134][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 268.447150][ C1] irq_exit_rcu+0x9/0x30 [ 268.447160][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 268.447177][ C1] [ 268.447182][ C1] [ 268.447187][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.447201][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 268.447221][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 268.447232][ C1] RSP: 0018:ffffc90003fbf538 EFLAGS: 00000206 [ 268.447244][ C1] RAX: 47428303711a5200 RBX: 0000000000000000 RCX: 47428303711a5200 [ 268.447253][ C1] RDX: 0000000000000001 RSI: ffffffff8dba61b5 RDI: ffffffff8be33400 [ 268.447263][ C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 268.447272][ C1] R10: ffffc90003fbf6f8 R11: ffffffff81ac3870 R12: 0000000000000002 [ 268.447281][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 268.447290][ C1] ? unwind_next_frame+0xa5/0x2390 [ 268.447305][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.447321][ C1] ? unwind_next_frame+0xa5/0x2390 [ 268.447341][ C1] ? unwind_next_frame+0xa5/0x2390 [ 268.447355][ C1] ? __x64_sys_close+0x7f/0x110 [ 268.447381][ C1] ? unwind_next_frame+0xa5/0x2390 [ 268.447394][ C1] unwind_next_frame+0xc2/0x2390 [ 268.447408][ C1] ? unwind_next_frame+0xa5/0x2390 [ 268.447424][ C1] ? unwind_next_frame+0xa5/0x2390 [ 268.447438][ C1] ? fput_close_sync+0x119/0x200 [ 268.447453][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.447469][ C1] arch_stack_walk+0x11c/0x150 [ 268.447486][ C1] ? __x64_sys_close+0x7f/0x110 [ 268.447502][ C1] stack_trace_save+0x9c/0xe0 [ 268.447520][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 268.447536][ C1] ? arch_stack_walk+0xfc/0x150 [ 268.447553][ C1] kasan_save_stack+0x3e/0x60 [ 268.447568][ C1] ? kasan_save_stack+0x3e/0x60 [ 268.447582][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 268.447595][ C1] ? call_rcu+0x157/0x9c0 [ 268.447606][ C1] ? __destroy_inode+0x2da/0x670 [ 268.447624][ C1] ? evict+0x797/0x9c0 [ 268.447637][ C1] ? __dentry_kill+0x209/0x660 [ 268.447648][ C1] ? dput+0x19f/0x2b0 [ 268.447657][ C1] ? __fput+0x68e/0xa70 [ 268.447669][ C1] ? fput_close_sync+0x119/0x200 [ 268.447681][ C1] ? __x64_sys_close+0x7f/0x110 [ 268.447712][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 268.447724][ C1] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 268.447736][ C1] call_rcu+0x157/0x9c0 [ 268.447749][ C1] ? migrate_enable+0x29c/0x3c0 [ 268.447781][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 268.447798][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 268.447813][ C1] ? __pfx_call_rcu+0x10/0x10 [ 268.447826][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 268.447842][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 268.447857][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 268.447875][ C1] __destroy_inode+0x2da/0x670 [ 268.447893][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 268.447911][ C1] evict+0x797/0x9c0 [ 268.447930][ C1] ? __pfx_evict+0x10/0x10 [ 268.447945][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 268.447963][ C1] ? _raw_spin_unlock+0x28/0x50 [ 268.447978][ C1] ? iput+0x6d8/0x9d0 [ 268.447992][ C1] __dentry_kill+0x209/0x660 [ 268.448004][ C1] ? dput+0x37/0x2b0 [ 268.448015][ C1] dput+0x19f/0x2b0 [ 268.448026][ C1] __fput+0x68e/0xa70 [ 268.448043][ C1] fput_close_sync+0x119/0x200 [ 268.448059][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 268.448078][ C1] __x64_sys_close+0x7f/0x110 [ 268.448093][ C1] do_syscall_64+0xfa/0x3b0 [ 268.448112][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.448130][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.448143][ C1] ? clear_bhb_loop+0x60/0xb0 [ 268.448159][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.448171][ C1] RIP: 0033:0x7fc907f8d84a [ 268.448183][ C1] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 268.448194][ C1] RSP: 002b:00007fff9fdf9500 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 268.448207][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc907f8d84a [ 268.448216][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 268.448224][ C1] RBP: 00007fff9fdf955c R08: 0000000000000000 R09: 00007fff9fdf9267 [ 268.448233][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000246 [ 268.448241][ C1] R13: 00000000000927c0 R14: 000000000004183e R15: 00007fff9fdf95b0 [ 268.448256][ C1] [ 268.448260][ C1] [ 269.083461][ C1] Allocated by task 13615: [ 269.087865][ C1] kasan_save_track+0x3e/0x80 [ 269.092542][ C1] __kasan_slab_alloc+0x6c/0x80 [ 269.097385][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 269.102838][ C1] xfrm_state_alloc+0x24/0x2f0 [ 269.107602][ C1] __find_acq_core+0x8a7/0x1c00 [ 269.112444][ C1] xfrm_find_acq+0x78/0xa0 [ 269.116852][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 269.121872][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 269.126813][ C1] netlink_rcv_skb+0x208/0x470 [ 269.131582][ C1] xfrm_netlink_rcv+0x79/0x90 [ 269.136251][ C1] netlink_unicast+0x82c/0x9e0 [ 269.141005][ C1] netlink_sendmsg+0x805/0xb30 [ 269.145764][ C1] __sock_sendmsg+0x219/0x270 [ 269.150437][ C1] ____sys_sendmsg+0x505/0x830 [ 269.155187][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 269.159856][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 269.164791][ C1] do_syscall_64+0xfa/0x3b0 [ 269.169296][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.175184][ C1] [ 269.177499][ C1] Freed by task 5992: [ 269.181464][ C1] kasan_save_track+0x3e/0x80 [ 269.186132][ C1] kasan_save_free_info+0x46/0x50 [ 269.191143][ C1] __kasan_slab_free+0x5b/0x80 [ 269.195902][ C1] kmem_cache_free+0x18f/0x400 [ 269.200658][ C1] xfrm_state_gc_task+0x52d/0x6b0 [ 269.205677][ C1] process_scheduled_works+0xade/0x17b0 [ 269.211215][ C1] worker_thread+0x8a0/0xda0 [ 269.215797][ C1] kthread+0x70e/0x8a0 [ 269.219867][ C1] ret_from_fork+0x3f9/0x770 [ 269.224453][ C1] ret_from_fork_asm+0x1a/0x30 [ 269.229215][ C1] [ 269.231538][ C1] The buggy address belongs to the object at ffff8880565ce640 [ 269.231538][ C1] which belongs to the cache xfrm_state of size 928 [ 269.245491][ C1] The buggy address is located 48 bytes inside of [ 269.245491][ C1] freed 928-byte region [ffff8880565ce640, ffff8880565ce9e0) [ 269.259187][ C1] [ 269.261510][ C1] The buggy address belongs to the physical page: [ 269.267946][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880565cddc0 pfn:0x565cc [ 269.278025][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 269.286518][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 269.294071][ C1] page_type: f5(slab) [ 269.298061][ C1] raw: 00fff00000000040 ffff8881452a9140 dead000000000122 0000000000000000 [ 269.306639][ C1] raw: ffff8880565cddc0 00000000800f000d 00000000f5000000 0000000000000000 [ 269.315216][ C1] head: 00fff00000000040 ffff8881452a9140 dead000000000122 0000000000000000 [ 269.323882][ C1] head: ffff8880565cddc0 00000000800f000d 00000000f5000000 0000000000000000 [ 269.332582][ C1] head: 00fff00000000002 ffffea0001597301 00000000ffffffff 00000000ffffffff [ 269.341259][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 269.349927][ C1] page dumped because: kasan: bad access detected [ 269.356352][ C1] page_owner tracks the page as allocated [ 269.362061][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6015, tgid 6013 (syz.1.10), ts 87088781011, free_ts 25734812112 [ 269.381102][ C1] post_alloc_hook+0x240/0x2a0 [ 269.385891][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 269.391430][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 269.397236][ C1] alloc_pages_mpol+0x232/0x4a0 [ 269.402097][ C1] allocate_slab+0x8a/0x370 [ 269.406595][ C1] ___slab_alloc+0xbeb/0x1410 [ 269.411273][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 269.416730][ C1] xfrm_state_alloc+0x24/0x2f0 [ 269.421503][ C1] xfrm_add_sa+0x17d1/0x4070 [ 269.426085][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 269.431015][ C1] netlink_rcv_skb+0x208/0x470 [ 269.435783][ C1] xfrm_netlink_rcv+0x79/0x90 [ 269.440453][ C1] netlink_unicast+0x82c/0x9e0 [ 269.445211][ C1] netlink_sendmsg+0x805/0xb30 [ 269.449973][ C1] __sock_sendmsg+0x219/0x270 [ 269.454658][ C1] ____sys_sendmsg+0x505/0x830 [ 269.459423][ C1] page last free pid 1 tgid 1 stack trace: [ 269.465243][ C1] __free_frozen_pages+0xbc4/0xd30 [ 269.470369][ C1] free_contig_range+0x1bd/0x4a0 [ 269.475313][ C1] destroy_args+0x64/0x4a0 [ 269.479727][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 269.484585][ C1] do_one_initcall+0x233/0x820 [ 269.489363][ C1] do_initcall_level+0x104/0x190 [ 269.494306][ C1] do_initcalls+0x59/0xa0 [ 269.498633][ C1] kernel_init_freeable+0x334/0x4b0 [ 269.503829][ C1] kernel_init+0x1d/0x1d0 [ 269.508154][ C1] ret_from_fork+0x3f9/0x770 [ 269.512745][ C1] ret_from_fork_asm+0x1a/0x30 [ 269.517513][ C1] [ 269.519836][ C1] Memory state around the buggy address: [ 269.525466][ C1] ffff8880565ce500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 269.533527][ C1] ffff8880565ce580: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 269.541583][ C1] >ffff8880565ce600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 269.549644][ C1] ^ [ 269.557357][ C1] ffff8880565ce680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.565408][ C1] ffff8880565ce700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.573458][ C1] ================================================================== [ 269.581618][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 269.588835][ C1] CPU: 1 UID: 0 PID: 5873 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 269.600994][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.611046][ C1] Call Trace: [ 269.614327][ C1] [ 269.617165][ C1] dump_stack_lvl+0x99/0x250 [ 269.621756][ C1] ? __asan_memcpy+0x40/0x70 [ 269.626340][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.631532][ C1] ? __pfx__printk+0x10/0x10 [ 269.636131][ C1] vpanic+0x281/0x750 [ 269.640111][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 269.645317][ C1] ? __pfx_vpanic+0x10/0x10 [ 269.649830][ C1] ? irqentry_exit+0x74/0x90 [ 269.654433][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.659637][ C1] panic+0xb9/0xc0 [ 269.663363][ C1] ? __pfx_panic+0x10/0x10 [ 269.667785][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 269.673678][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 269.680007][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 269.685304][ C1] check_panic_on_warn+0x89/0xb0 [ 269.690254][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 269.695550][ C1] end_report+0x78/0x160 [ 269.699796][ C1] kasan_report+0x129/0x150 [ 269.704307][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 269.709604][ C1] __xfrm_state_delete+0x696/0xca0 [ 269.714736][ C1] xfrm_timer_handler+0x18f/0xa00 [ 269.719768][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 269.725322][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 269.731221][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.736423][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 269.742317][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 269.748667][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 269.754225][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 269.759778][ C1] __hrtimer_run_queues+0x529/0xc60 [ 269.764989][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 269.770700][ C1] ? read_tsc+0x9/0x20 [ 269.774784][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 269.780614][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 269.785735][ C1] handle_softirqs+0x283/0x870 [ 269.790507][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 269.795269][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 269.800557][ C1] __irq_exit_rcu+0xca/0x1f0 [ 269.805139][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 269.810358][ C1] irq_exit_rcu+0x9/0x30 [ 269.814594][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 269.820242][ C1] [ 269.823183][ C1] [ 269.826109][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.832085][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 269.837374][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 269.856974][ C1] RSP: 0018:ffffc90003fbf538 EFLAGS: 00000206 [ 269.863039][ C1] RAX: 47428303711a5200 RBX: 0000000000000000 RCX: 47428303711a5200 [ 269.871002][ C1] RDX: 0000000000000001 RSI: ffffffff8dba61b5 RDI: ffffffff8be33400 [ 269.878966][ C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 269.886934][ C1] R10: ffffc90003fbf6f8 R11: ffffffff81ac3870 R12: 0000000000000002 [ 269.894896][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 269.902865][ C1] ? unwind_next_frame+0xa5/0x2390 [ 269.907981][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 269.914136][ C1] ? unwind_next_frame+0xa5/0x2390 [ 269.919255][ C1] ? unwind_next_frame+0xa5/0x2390 [ 269.924375][ C1] ? __x64_sys_close+0x7f/0x110 [ 269.929224][ C1] ? unwind_next_frame+0xa5/0x2390 [ 269.934336][ C1] unwind_next_frame+0xc2/0x2390 [ 269.939279][ C1] ? unwind_next_frame+0xa5/0x2390 [ 269.944407][ C1] ? unwind_next_frame+0xa5/0x2390 [ 269.949515][ C1] ? fput_close_sync+0x119/0x200 [ 269.954455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 269.960602][ C1] arch_stack_walk+0x11c/0x150 [ 269.965367][ C1] ? __x64_sys_close+0x7f/0x110 [ 269.970216][ C1] stack_trace_save+0x9c/0xe0 [ 269.974895][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 269.980266][ C1] ? arch_stack_walk+0xfc/0x150 [ 269.985135][ C1] kasan_save_stack+0x3e/0x60 [ 269.989807][ C1] ? kasan_save_stack+0x3e/0x60 [ 269.994663][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 270.000031][ C1] ? call_rcu+0x157/0x9c0 [ 270.004367][ C1] ? __destroy_inode+0x2da/0x670 [ 270.009305][ C1] ? evict+0x797/0x9c0 [ 270.013380][ C1] ? __dentry_kill+0x209/0x660 [ 270.018136][ C1] ? dput+0x19f/0x2b0 [ 270.022106][ C1] ? __fput+0x68e/0xa70 [ 270.026252][ C1] ? fput_close_sync+0x119/0x200 [ 270.031193][ C1] ? __x64_sys_close+0x7f/0x110 [ 270.036060][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 270.041256][ C1] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 270.046702][ C1] call_rcu+0x157/0x9c0 [ 270.050853][ C1] ? migrate_enable+0x29c/0x3c0 [ 270.055697][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 270.061151][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 270.066351][ C1] ? __pfx_call_rcu+0x10/0x10 [ 270.071031][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 270.076493][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 270.081948][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 270.087413][ C1] __destroy_inode+0x2da/0x670 [ 270.092182][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 270.097376][ C1] evict+0x797/0x9c0 [ 270.101270][ C1] ? __pfx_evict+0x10/0x10 [ 270.105679][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 270.110875][ C1] ? _raw_spin_unlock+0x28/0x50 [ 270.115717][ C1] ? iput+0x6d8/0x9d0 [ 270.119693][ C1] __dentry_kill+0x209/0x660 [ 270.124299][ C1] ? dput+0x37/0x2b0 [ 270.128193][ C1] dput+0x19f/0x2b0 [ 270.131993][ C1] __fput+0x68e/0xa70 [ 270.135972][ C1] fput_close_sync+0x119/0x200 [ 270.140727][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 270.146009][ C1] __x64_sys_close+0x7f/0x110 [ 270.150679][ C1] do_syscall_64+0xfa/0x3b0 [ 270.155180][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.160385][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.166443][ C1] ? clear_bhb_loop+0x60/0xb0 [ 270.171119][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.177003][ C1] RIP: 0033:0x7fc907f8d84a [ 270.181413][ C1] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 270.201015][ C1] RSP: 002b:00007fff9fdf9500 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 270.209433][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc907f8d84a [ 270.217405][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 270.225365][ C1] RBP: 00007fff9fdf955c R08: 0000000000000000 R09: 00007fff9fdf9267 [ 270.233333][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000246 [ 270.241297][ C1] R13: 00000000000927c0 R14: 000000000004183e R15: 00007fff9fdf95b0 [ 270.249277][ C1] [ 270.252647][ C1] Kernel Offset: disabled [ 270.256969][ C1] Rebooting in 86400 seconds..