last executing test programs: 8.255528358s ago: executing program 1 (id=3142): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) socket(0x10, 0x80002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.224437709s ago: executing program 1 (id=3154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) accept4(r0, &(0x7f0000000600)=@nfc, &(0x7f0000000340)=0x80, 0x80000) (async) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x20}, 0x94) (async, rerun: 64) recvfrom(r2, &(0x7f0000000680)=""/66, 0x42, 0x2063, &(0x7f0000000540)=@sco, 0x80) 7.002823793s ago: executing program 1 (id=3156): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x100000, 0x0) 6.704400096s ago: executing program 1 (id=3159): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) (async) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x4, {0xa, 0x4e1f, 0x9, @loopback, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000044000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000044000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.48038343s ago: executing program 1 (id=3162): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x20008000) 6.298775352s ago: executing program 1 (id=3164): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="59173874e7e7ee9d19f4b7d6e78884da122fbd3eb8a99b097a92d8acb163e8da54d597628f36f813419001f24fd02f4f2410dfd0f2939be47e5887a92c5d262ce890090ff17639dd19fa2166c0f7ab65df593f79e8cf37b5b748e34acbcfbd06933fc154a9a53873bd83d8ccc1283c50956bfa098f25c5d1", 0x78}, {&(0x7f0000000500)="1df3000f4a6d6f87e0c14db02e70e1db8a57bffcfc088576775c155122f32b4a2d55c8030c3a09cbcb3a7a116702685f182f71e64fb50a34e73a2742c91941dfd233971efc9e566eb5cfd7e441b8d759cdc46d41e582ada971fa5ca275fa388c507eea1e0517096e8d5f26bf95e99e954cd8c678df45", 0x76}, {&(0x7f0000000300)="9226add5cac1e0a1d070a79be80e97fcf8ae411075720ff660bef17d62b3ff2684cb29a32650931e674dab6c1785899dd416559bff235df00b401667876df46553f9797c7dea33c43f09fc79389cf4b1752e2b63ccb8736dbb049c75b759e6ef5dc5aa7867fe3954bad3430ce12f75c49e60528444891d2d9d84bc3dc3", 0x7d}], 0x3}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000640)}, {&(0x7f0000000680)="6dcd204edb5de36c6b9791c6cd6a0cb5ddac2c92b3fe9d833848efaadf2d4edf1ed6fee48bd0715248c3ec29c350b1cf2dca26234b37115ef8e8", 0x3a}, {&(0x7f0000000900)="72c4c3aace82da20598bca021f74ae503940f8ab91b337b451219ca53d57d0736c30839fc56f62826dcc1008b0243e7b77f3bb1eb4e266a5ac45b110bf001bd94a9f02143257e0cc1af8094ff36282c9aa8e2936e90acee22014e9d7bea3339c40b63d0164cf", 0x66}, {&(0x7f0000000a40)="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", 0x1000}], 0x4, &(0x7f0000001ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x88}, 0x8000) syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a83f0081003e000004bc4e3846ad26df548270b7b334ebd40dbbbd1240c960b23a65cc579724a29c5c91850833eee1f2e75d6eb0da4b69ada9b61e287dcfcd498bebb0b78e76d7ad9930077ca5db3cbd1637cf76391b3ac51788d5e4a6ff333b934c9484675129ecee3067beb13c82e579baa8b52170e602bfa792529e8c83949379524d843ccf4f625964ce1dbb6b70a02c78db85ce16b2d02177"], &(0x7f00000000c0)={0x1, 0x4, [0xde, 0xf27, 0x3c7, 0xf51]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000001801000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) 6.012500711s ago: executing program 3 (id=3167): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x15, 0xf}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 5.804995678s ago: executing program 3 (id=3169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x236c, 0x4) sendmmsg(r2, &(0x7f0000000080)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x4040015) (async) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/110, 0x6e}], 0x1}, 0x2}], 0x1, 0x2002, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[], 0x65c}, 0x1, 0x0, 0x0, 0x4041}, 0x400c041) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) accept4(r5, 0x0, 0x0, 0x0) (async) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3f8}, 0x1, 0x0, 0x0, 0xa0b726aeb909ad13}, 0x40401a0) 5.59577253s ago: executing program 3 (id=3171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) 5.236055575s ago: executing program 3 (id=3173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) 5.004971264s ago: executing program 3 (id=3178): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x0, 0x10001) 4.712096649s ago: executing program 3 (id=3179): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x2, 0x3fff}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000001fc0)={0x8, 0x6000, 0x9557, 0x68, 0x3908, 0xfffffffffffffff7, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x438, 0x2c, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0x9, 0x9}, {0x0, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40c, 0x2, [@TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x3, 0x2, 0x0, 0x3, 0xc, 0xfffffffe, 0xffff8000, 0x7, 0x7, 0x7, 0x2, 0x1, 0x1, 0x9f1, 0x8000, 0x1, 0x6, 0x2, 0x5, 0x1, 0x8, 0x2, 0x4, 0xa, 0x8, 0xce74, 0x7, 0x1, 0x1, 0x947, 0x8001, 0x0, 0x7d0b, 0x4, 0xdcc4, 0x3, 0x4, 0x5, 0xffff, 0x7411, 0x4a, 0x7ff, 0xfffff360, 0xfffffff8, 0x3, 0x2, 0x401, 0xfffffffe, 0x4, 0x8, 0x9, 0x9, 0x7f, 0x0, 0x615, 0x1, 0x1, 0x7fff, 0x2, 0x1, 0x2, 0x7, 0x1, 0x9, 0x7, 0x0, 0x3, 0x401, 0x8, 0xd9, 0x0, 0x1, 0x0, 0x7, 0x7, 0x70f, 0x5, 0x3, 0x3, 0xfff, 0x35df, 0xfffff706, 0x1, 0x61, 0xa, 0x9, 0x6, 0x0, 0x4, 0xec, 0x2, 0x1000, 0x10000, 0x10, 0x9, 0x8, 0x7, 0x6, 0x3, 0x9, 0x7, 0x4, 0x10, 0x5, 0x8, 0x95, 0x4, 0x8, 0x5, 0x3, 0x3, 0x7, 0x9, 0x10000, 0x0, 0x7, 0x6, 0x1, 0x7ff, 0x401, 0x6, 0xb5a2, 0x5, 0xfffffff8, 0x0, 0x400, 0x4a, 0xfffffffe, 0x9, 0xc, 0x5, 0x7ff, 0x6, 0x7, 0x5, 0x1, 0x3ff, 0x6, 0x0, 0x8, 0x7, 0x3fc00, 0x4, 0x7, 0x4, 0xe, 0x5, 0xfffffffc, 0x1, 0x6, 0x40, 0xb, 0xb7e, 0x6, 0x60000, 0xffffffff, 0x1, 0x4eadf278, 0x7, 0x0, 0x102e0c02, 0x200, 0x6, 0x2b340cc3, 0x4, 0x7, 0x9, 0x8001, 0x9, 0x6, 0xfffffffc, 0x2, 0x9, 0x7fffffff, 0x7, 0x200, 0x6, 0x6, 0xfffff551, 0x5, 0x8, 0x49df, 0xbcc, 0x0, 0xfe6b, 0x7, 0x3, 0xfffffeff, 0x0, 0x101, 0xdcf9, 0x3fc, 0x8, 0x0, 0x5, 0x93, 0xd, 0x9, 0x7, 0x320, 0x3, 0x4, 0x8000, 0x2, 0x8, 0x1, 0x0, 0xb, 0x101, 0x5, 0x0, 0x9, 0x5, 0xe87, 0xffff, 0x4, 0xfff, 0x9a, 0x1, 0xa, 0x0, 0x9, 0x10, 0x4, 0x80, 0x5eb, 0x4, 0xfffffff7, 0x0, 0x7, 0x5, 0x1, 0x2, 0x80, 0x3, 0x1978, 0x7, 0x800, 0x6, 0x1c7, 0x7, 0x432a, 0x7, 0x9, 0x9, 0x90e, 0x40, 0xe89, 0x8, 0x5, 0x5, 0x6, 0x6, 0x9]}]}]}}]}, 0x438}}, 0x80000) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) socket$netlink(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x29072000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x4) 4.394201746s ago: executing program 2 (id=3182): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x37, r4, 0x20, 0x170bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x3d}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1a}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x80}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008044) accept4(r0, 0x0, 0x0, 0x80000) 4.236569385s ago: executing program 2 (id=3183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_emit_ethernet(0xe6, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0xb0, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @local, @local, [@hopopts={0x89, 0xe, '\x00', [@pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x1, [0x4, 0x5, 0x9, 0x2, 0x57, 0x1, 0xf7bc]}}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x4b80}, @ra, @pad1, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x5}]}]}}}}}}}, 0x0) 4.01213142s ago: executing program 2 (id=3185): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'team0\x00', {}, 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x604000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) r2 = socket(0x11, 0x4, 0x3) ioctl$TUNSETLINK(r1, 0x400454cd, 0x108) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000100)) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1e8, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5115}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10001, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9f7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24004010}, 0x880) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) (rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc041}, 0xc810) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000700)={0x8, 'veth0\x00', {'veth1_to_bond\x00'}, 0x7}) (async, rerun: 32) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40) (async) close(r2) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000880)={r2}) (rerun: 32) sendmsg$AUDIT_SET_FEATURE(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (async, rerun: 32) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000009c0)) (rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r9, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x101, 0x60}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24040090}, 0x1000) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000b80), 0x8) (async, rerun: 64) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x0, [0x10, 0x8]}, &(0x7f0000000c40)=0x44) 3.721673229s ago: executing program 4 (id=3188): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], &(0x7f0000000380), 0x46, 0x0, 0x1, 0x2}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500000100000000000000000a0000000800ff00", @ANYRES32, @ANYBLOB="657342941bc67c6e56ee000057db43ea5f"], 0x1c}}, 0x20000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003ebfa4653981b67a5a95000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001280"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001640)=@delchain={0x2438, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2400, 0x2, [@TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x2, 0x5, 0x6, 0xfffffe01, 0x101, 0x8, 0x6, 0x8, 0xb84, 0x10001, 0x8, 0x8, 0xffff, 0x7fffffff, 0x9, 0xc, 0xbbc, 0x80, 0x4, 0x200, 0x2, 0x4, 0x2, 0x10001, 0xba7, 0x2, 0x4, 0x8, 0xf9d, 0x1, 0x7f, 0x4, 0x5bf8, 0xfffffff7, 0x7f, 0x7, 0x0, 0x10000, 0x0, 0xd5c5, 0x81, 0x8, 0x1, 0x9, 0x10001, 0x7f, 0x5, 0x1, 0x800, 0x0, 0x2, 0x6, 0x6, 0xdfe2, 0x188, 0x40, 0x2, 0x5, 0x4, 0x2, 0x0, 0x5d2, 0x2, 0x4, 0x4, 0x7e7, 0x4, 0x8, 0x400, 0x3, 0x7, 0x8, 0x8, 0xfffffff7, 0x3, 0x49, 0xffff, 0x0, 0x96, 0x1ff, 0x9, 0x2, 0x9, 0x2, 0x4, 0xbd, 0x1ff, 0x80000001, 0x8, 0x126fc758, 0x0, 0x5, 0x6, 0x8, 0x9, 0x9, 0x0, 0x2, 0x5, 0x0, 0x4, 0x3, 0x0, 0x10001, 0x330, 0x7ff, 0x0, 0x40, 0x8, 0x80000000, 0x8, 0x9, 0x7, 0x100, 0x0, 0x5, 0xc6d, 0x7ff, 0x1000, 0x6, 0xfffffff2, 0x1, 0xa, 0xe10, 0x7, 0x1, 0x3e01, 0xa, 0x8001, 0xa6, 0x101, 0x6, 0x6, 0x7, 0x7, 0x3c, 0x9, 0xfffffe00, 0x8, 0x10001, 0x8, 0x6, 0x80000001, 0x401, 0xfffffffa, 0x5, 0xc113, 0x5, 0xd, 0x5, 0x2, 0x401, 0x75, 0xd, 0x3, 0x7f, 0x40, 0x3, 0x5, 0xffff, 0x7, 0x5, 0x381, 0x4, 0x19c8, 0xfffffffd, 0x7ff, 0x0, 0xf, 0x5, 0xce, 0x401, 0x200, 0xffff8001, 0x2, 0xe139b4d, 0x2, 0x10, 0x4, 0x7, 0x3, 0x4, 0x10, 0x3, 0x8e5, 0xfffff2f7, 0x9, 0x8f66, 0x0, 0x1, 0x0, 0x9, 0x1, 0x6, 0x0, 0xa, 0xfff, 0x2, 0x800, 0x1, 0x6, 0xf, 0x7f, 0x9, 0x5d, 0xf, 0x3, 0x40e, 0x4ae, 0x851, 0x4, 0x4, 0x1, 0xbba, 0x401, 0x200, 0x3, 0x7, 0x4, 0xc, 0x1b, 0x7, 0x6, 0x2, 0x4, 0x401, 0x7, 0x8, 0x1297, 0xd8f, 0x7, 0x75, 0x6, 0x6, 0x0, 0x6f, 0x9, 0x5, 0xb, 0x2, 0x53b, 0x0, 0xa9, 0x5, 0x3, 0x0, 0x2, 0x2, 0x0, 0x7c, 0x80000001, 0x3, 0x80000000, 0xa00, 0x1000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xfffffffc, 0x9b, 0x7fffffff, 0x6, 0x80, 0x13d, 0x1, 0x9, 0xb72, 0x800, 0x2, 0xf, 0x9, 0x3, 0x0, 0x101, 0x8494, 0x7, 0x8, 0x30d, 0x9, 0x1, 0x4, 0x7fffffff, 0x80000001, 0xe3, 0x6, 0x1, 0x2, 0x80000000, 0x4, 0x8, 0x6, 0x8, 0x9, 0x200, 0x401, 0x80, 0x0, 0x0, 0x6, 0x2, 0x10000, 0x2, 0x0, 0x9, 0x6, 0x8, 0xfffffff8, 0x5, 0x7fffffff, 0x120, 0x6, 0x5, 0x6, 0x9, 0x6, 0x5, 0x4, 0x6c9cb7a6, 0x101, 0x2, 0x40, 0x8, 0x9, 0x1, 0x2, 0x9, 0x77, 0x3, 0x8, 0x5, 0xff, 0x1, 0x5, 0x3, 0x4901, 0x463e, 0x7ff, 0x5e, 0x8, 0x7ff, 0x5, 0x2d, 0x71e, 0xff, 0xb, 0x7, 0x8, 0xffffffbb, 0x6, 0x7, 0x9, 0x9, 0x2, 0x2, 0x29, 0x0, 0x0, 0x6, 0xbc12, 0x5c5, 0x9, 0x10000, 0x41e9, 0x1b2, 0x4, 0xffffffff, 0xfffffff7, 0x3, 0x7, 0x82d3564e, 0x4, 0x59f, 0xc9f, 0x6, 0xb, 0xb3, 0x7, 0x9, 0xc, 0x0, 0x0, 0x7fff, 0x7ff, 0x8, 0x2, 0x8, 0x0, 0x79985dab, 0x401, 0x0, 0x7fffffff, 0xfffffff8, 0x9, 0x4, 0x9, 0xbcd, 0xa5, 0x8, 0x9, 0xfffffff9, 0xd, 0xffff, 0x0, 0x7, 0x7a025a4, 0x9, 0x7fff, 0x6, 0x4, 0x4, 0x3, 0x80000001, 0x2, 0xa, 0xffff4ec8, 0x9, 0x8, 0x2, 0x4, 0x2, 0x7, 0x6, 0x80000001, 0x101, 0x5, 0x4, 0x1, 0x21, 0xb217, 0x2, 0x400, 0x8001, 0x4, 0x7, 0x6, 0x3, 0x0, 0xf, 0x5, 0x7ff, 0x5, 0x4, 0x10001, 0x8, 0x7f, 0x48c5, 0xffffffff, 0xcd2, 0x8, 0x51fdcfc1, 0x8, 0x9, 0x2, 0x7fffffff, 0x81, 0x7, 0x3, 0x10000, 0x5, 0x6b5, 0x8, 0x3, 0x1, 0x5, 0x4ebb, 0x7f, 0x3, 0x2b4c, 0x7fffffff, 0x7fffffff, 0x2, 0x0, 0x7ff, 0x7, 0x3, 0xb6, 0x4, 0x7fff, 0x1, 0xee, 0x4, 0x6, 0x5, 0x1, 0x3, 0x6, 0xaca, 0xfd0, 0x9e, 0x1ff, 0xebf4, 0x3, 0xffffffff, 0x9, 0x2, 0x5f, 0x8, 0x48e6, 0x9, 0x1996, 0x2, 0xe, 0x80d0, 0x100000, 0xff, 0x5d08c15, 0x7374, 0x2, 0xfffffffb, 0x0, 0x7, 0x9, 0x2]}]}, @TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0xb, 0xfffffe4d, 0x7fff, 0x1, 0x9, 0x5, 0x2ebf, 0x9, 0x4, 0x0, 0x0, 0x7fffffff, 0x7fffffff, 0x3, 0xf, 0x2, 0x5, 0x6, 0x4, 0x8, 0x3, 0x3, 0x8, 0x800, 0xa, 0x418b, 0x9b0e96f, 0x4, 0x41, 0xfffffff7, 0x6c2, 0x8, 0x5, 0x7b, 0xdb6, 0x9, 0x6, 0x1, 0x4, 0xed2e09ef, 0xffffffff, 0x4, 0x33de, 0x101, 0x1, 0x7, 0x5, 0x3, 0xffffae50, 0x1, 0x8000, 0x3, 0x2b0, 0x7, 0x80, 0x4, 0x9, 0x200, 0x7, 0x98ec, 0x8, 0x1, 0x9, 0x7, 0xfffffff7, 0x6, 0x7, 0x5dfa, 0x3, 0x4, 0x6, 0x8, 0x8, 0xff, 0x47de, 0x4, 0x5, 0x7, 0x0, 0x7, 0x6, 0x2, 0x1, 0xb879, 0xb, 0x2, 0x8, 0x0, 0x7, 0x6, 0x9b, 0xff, 0x5, 0xfffffff7, 0x6, 0x9, 0x7, 0x6, 0xf5, 0xe54, 0x4bfc4023, 0x6a, 0x6b6e, 0x7, 0x3, 0xffff7fff, 0x100, 0x3, 0xda9, 0xaa4, 0x400, 0x0, 0x8, 0x3, 0x4, 0x5, 0x84e7, 0x0, 0x0, 0xf, 0x8001, 0x0, 0xe0000, 0xffffffff, 0xc74, 0x7, 0x100, 0x7, 0x7, 0xe, 0x2, 0x6, 0x8, 0x1ff, 0xe, 0x7f, 0x4, 0x1, 0x36a, 0x8, 0xfffffffb, 0x4, 0x8, 0x2, 0x5, 0xd17, 0x2, 0x9, 0x1, 0x1, 0x7, 0x81, 0x7f, 0x1, 0x3, 0x13cf, 0x1, 0x3, 0x2, 0x7f, 0xb8, 0x10000, 0xd4a9, 0xd, 0x800, 0x5, 0x8, 0x8, 0x3, 0x20000, 0x3230, 0x3, 0x7, 0x100, 0x3a, 0xade, 0x10, 0x8560542, 0x80000000, 0x0, 0x7, 0x7ff, 0x592ef2c, 0x3, 0x40, 0x8, 0xc6a, 0x4, 0x3, 0x9, 0x80, 0x400, 0xffffffd5, 0x8, 0x0, 0x2, 0x7f, 0x9, 0xfffff801, 0x7bb8, 0x19, 0x6, 0x6, 0x7f7b, 0x32f, 0x94cf, 0x6, 0x5, 0xe04, 0x9, 0x6, 0xfffffffa, 0x9, 0x8, 0x8, 0x8, 0x3ff, 0x9, 0xbc, 0x10001, 0x4, 0x3, 0x0, 0x7, 0x7f, 0x4, 0xfffffff2, 0xfffffff9, 0x8001, 0x9, 0x7, 0x3b0, 0x92, 0x7, 0x36d02004, 0x1, 0x8, 0x7, 0x2, 0xfffffffa, 0x2, 0xfffffffb, 0x8, 0xc, 0x3, 0x8, 0x8, 0x7ff, 0x4, 0x77, 0xb7, 0x246e, 0x800, 0x2]}]}, @TCA_CGROUP_EMATCHES={0x48c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xd0, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xa4, 0x5, "84432727cc9f5f556d169347b21f822fad45767e814b56521dd6ba4dcc5ac137310b3840e1b26e50c82ab6dc6f0611779718c4691dcb9f2e963cce532f86f833f6b218cde7a5ab77c42468c97bf527f610c7b2035ecc94b107455720ec5ea7f708ae3fa02eac551a75734c47994432bc5e54ab9a762afbc7a8fe33b0617ff36cbb23104b9b22ae761e4e5b6486bc0a2ccd30b3f9cbe5208e8881d2093a88c4f2"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb8}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7ab1, 0x2, 0x8}, {0x40, 0x2, 0x1, "3c01"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8e, 0x7, 0x4}, {{0x3}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0xb94}, {0x3, 0xffff, 0x5, 0x6, 0x1, 0x1, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x1ff, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CONTAINER={0xe8, 0x3, 0x0, 0x0, {{0x79f, 0x0, 0x6}, "b7b882e0409ebf5d8ffafb74f3fffc012e7f3ad96c0e4d6af068a72073f3c68a7e9e2564956fdea5694d355cf34276257f8dd0a2e65be1546c03a56341a776596cfc34ee969afed3b745799084e03365a89876f81c36cca2dfcdeae0b77c0c47c9268545c6301efea485f3283983ab6d3b2779dbf56d7d099c1850c8caa5bcb987909bebe7f67b2adf3b4994d4f906748250577369d25c352f8313a7eb373a62347a9e77b4e60f164431967de900dbfe7402c9d771b61a19fd7ea029424b17c4eed14dc2696628f539c3061bed73c2262cc31687554c778f13"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0xf}, {0x1ff, 0x1, 0x1, '\f'}}}]}, @TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x40}, {0x7, 0x5, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x7, 0x2}, {0x401, 0x8, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8001, 0x2, 0x7}, {0x4, 0x2, 0x2, "faf9"}}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x6}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="99", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="95b1eedab1bd", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="7d951c82e2", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9ef2a25eb4ab27", @TCF_META_TYPE_VAR="6e000a0da2"]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR="6c01190539", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f16531a5c60049aa79ea", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3094", @TCF_META_TYPE_VAR="a1b938203d189385cd"]}]}}, @TCF_EM_IPT={0x40, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7}, {0x1, 0x3, 0x2}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xb5, 0x2}, {0xfffa, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6, 0x2}, {0x4, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="82a8f645dc", @TCF_META_TYPE_VAR="edfb4bce98", @TCF_META_TYPE_VAR="23e3ee519c8a", @TCF_META_TYPE_VAR="13", @TCF_META_TYPE_VAR="8f74f0ddc5387c", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR="ff1482dfd37d", @TCF_META_TYPE_VAR="77819386fe", @TCF_META_TYPE_VAR="c52710ddb4f3", @TCF_META_TYPE_VAR="f1340e746ae5aa12", @TCF_META_TYPE_VAR="0f"]}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0xa000}, {0xa81b, 0x4, 0x1, "0b2a21d1"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x2, 0xff}, {0x9, 0xa, 0x0, "6100455be2deb5ae7a8b"}}}, @TCF_EM_CONTAINER={0x20, 0x1, 0x0, 0x0, {{0x4d0, 0x0, 0x4}, "8fdee80086ab42b99bd62c6195cbec3523d5253c"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1}, {0x9, 0x3, 0x3, 0x2, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x4, 0x4, 0xd300}, [@TCA_EM_META_RVALUE={0x34, 0x3, [@TCF_META_TYPE_VAR="a6977f8469153634", @TCF_META_TYPE_VAR="46ee2e755ce69e55", @TCF_META_TYPE_VAR="255993e6ae86", @TCF_META_TYPE_VAR="bea95aeea559c70515", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="384bf711e09dd411fc"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff9, 0xa, 0x1}, {0x0, 0xfc, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf7}, {0xb, 0xc, 0x1}}}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}, @TCA_CGROUP_ACT={0x1c8, 0x1, [@m_ife={0xec, 0x14, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="9e0e5997b128"}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xdb}, @IFE_META_PRIO={0x8, 0x3, @val=0xc}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x200}, @TCA_IFE_TYPE={0x6, 0x5, 0x401}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x10000000, 0x9, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x10000000, 0x40, 0x4bc3}, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x25, 0x6, "d78eb94d820b565c4fab76a8ecff96e622898c78037600889b91b5ec561120c638"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xd8, 0x18, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7bd}, @TCA_IFE_DMAC={0xa, 0x3, @random="e8d1e119588c"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x90, 0x6, "792a2d7ceed88d34b3d20d56ba7c9ae7e7e32cce71350f503597978f92f57a87284e2ebaa9733145382589d40bd3821f4b2f63ca30612909e7414106d109c88a609b03e391c81dc4eb5737767ae4fe1909b984d24d33d29a0abbd58df43d819c7a822937d5bcb4e3607809bf24b9c3bb8824c474aec2b70bc6f19289d0bf5daf3e8035795a1b5efd64589bf4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_ACT={0x1174, 0x1, [@m_police={0x1170, 0x11, 0x0, 0x0, {{0xb}, {0x10dc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x8, 0xd5, 0xffffff01, 0x6, 0x7, 0x3, 0xffff, 0x0, 0x2, 0x370c0000, 0x5603a3, 0x7, 0x4, 0x8, 0x3, 0x6, 0x3fe, 0x3, 0x6, 0x9, 0x6, 0x1, 0x7, 0x3, 0x40000, 0x6, 0x10, 0x9, 0x7, 0x9, 0xa38e, 0x1000, 0x3, 0x157b, 0x8, 0x6, 0x4aa7, 0xc5, 0x2, 0xf4a7, 0x5, 0xffff, 0x9, 0x8, 0x7a34eaaf, 0x8, 0x3, 0xc0, 0x4, 0xe, 0x5, 0xd49, 0x4, 0x80000000, 0xa, 0x5, 0x21f7, 0xa1, 0x9, 0x1, 0x6, 0x8, 0x4, 0xb, 0x6, 0x5, 0x9, 0x444, 0x6, 0x9, 0x1, 0xd06, 0x1, 0x0, 0x7, 0x1, 0x2, 0x800, 0x10, 0x101, 0xada4, 0x2, 0x7, 0x2, 0x2, 0x5, 0x8001, 0x0, 0x5, 0xffff, 0x9, 0x8, 0xffffffff, 0x5, 0x7f, 0xdf, 0xebd9, 0x2, 0x1, 0x989a, 0xc, 0x7, 0x8001, 0x10, 0xffffff48, 0x28000000, 0x3, 0x1, 0x9, 0x3, 0x5, 0x7ff, 0x7ff, 0x4, 0x9, 0x0, 0x0, 0x7a, 0x0, 0xfffffff8, 0x400, 0x7, 0x9, 0x2f0, 0x8, 0x2, 0x20, 0x4, 0x10ea, 0x3, 0x2, 0x9, 0x7, 0x5, 0xe, 0x2, 0x5ccc9188, 0x8, 0x2, 0x4, 0xfffffff9, 0xa, 0x5, 0x4, 0x1, 0x68, 0x2, 0xadc4, 0x8, 0x96851a2d, 0x2, 0x7, 0x8, 0xf, 0x29, 0x7f, 0xce, 0x4, 0x9, 0xbd400000, 0x6, 0x3, 0x1, 0x1, 0x6, 0xa66, 0x3ff, 0x15a, 0x43, 0x100, 0x7fff, 0x7, 0x3, 0x800, 0x400, 0xfbc, 0x80000000, 0xa, 0x2, 0x8, 0x2, 0x27, 0x3, 0x3, 0x6, 0x6, 0x55b, 0x6, 0x1, 0x5, 0x10, 0x8, 0x1, 0x10001, 0x1, 0x1c6, 0x4, 0x1, 0x7, 0xfffff000, 0x3, 0x10000, 0xfff, 0xa, 0x4, 0x8, 0x0, 0x101, 0x8, 0x4, 0x0, 0x62c4072e, 0x1ff, 0xffffffff, 0x2, 0x5, 0x80000001, 0x9, 0x10, 0x7, 0x4, 0x4, 0x8a, 0xc0a, 0x123f, 0x2199, 0xe, 0x0, 0x2, 0x3ff, 0x1, 0x8001, 0x2, 0x45b8, 0x18af, 0x2, 0x4, 0x1, 0x3, 0xfffffffc, 0x1, 0x2, 0x5, 0x4, 0x0, 0x1000, 0xc6cc, 0xee4, 0x2, 0x40, 0x1000, 0x1, 0x1, 0x7fff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff3b, 0xfffffffd, 0x0, 0x3, 0x2, 0x80000000, 0x3, 0x3fd2, 0x1000, 0x6, 0x1, 0xfffffeff, 0xe8e0, 0x4, 0x630, 0xfe8, 0x7, 0x4, 0x0, 0x8975, 0xf, 0x171c, 0x8, 0x7, 0x3, 0x9, 0xc, 0x7, 0x1000, 0x400, 0x23c1ae3d, 0x10000, 0x3, 0x2eb, 0x9, 0x9, 0x8, 0x1, 0x642, 0x1, 0x7ff, 0x9d8, 0xfffffeff, 0xa, 0x2, 0x2, 0x6, 0x9, 0x5, 0x2a02c106, 0x80, 0x9, 0x31b, 0xe, 0x7fffffff, 0x6, 0x7fff, 0x2, 0x8, 0x2, 0x3, 0x3ff, 0xf9, 0x100, 0x100, 0xf, 0x6, 0x4, 0x0, 0x9, 0x10001, 0x8, 0x9, 0xac9e, 0x7, 0x7, 0x4, 0x5, 0x9, 0x5, 0x8, 0x3, 0x10000, 0x5, 0x100, 0x2, 0xfffffff9, 0x6, 0x6, 0x9, 0xb3, 0x7, 0x8, 0x3ff, 0x303, 0x7, 0x2, 0x5, 0x2, 0x6, 0xffffffff, 0x40, 0x3, 0x6, 0x40, 0x7aca, 0xffffffff, 0xd, 0xfffffffe, 0x1ff, 0x200, 0x2, 0x5, 0x7, 0x76, 0x5, 0x1, 0x8001, 0xd46, 0x190, 0x6, 0x1, 0xe926, 0xbf2, 0x3, 0x3, 0x9, 0x6, 0x8e, 0x54cd14f9, 0x1000, 0xe7c, 0x2, 0x5, 0x6, 0x40, 0xffffffff, 0x6, 0x2, 0xfffffff9, 0x7, 0x1, 0x6efc5dfa, 0xd6b, 0xe0000000, 0x10001, 0x323c8ff2, 0xf, 0x0, 0x7, 0xf, 0x0, 0x261cc105, 0x9, 0x124e, 0x0, 0x100, 0x0, 0x9, 0x4, 0x2, 0x80000001, 0x4, 0x4, 0x40, 0x0, 0x3, 0x3, 0x1, 0x4, 0x8, 0x80000001, 0xffff, 0x0, 0xe20c, 0x0, 0x6, 0xb9f0e5ab, 0x7, 0x4, 0xf, 0x7, 0x8, 0x4, 0xfff, 0xf, 0x7, 0x4, 0x20, 0x200, 0x5, 0x3, 0x6, 0x9, 0x4, 0x1e, 0x9, 0x3, 0x1, 0x2, 0x2, 0x8, 0x4, 0x8, 0xd1, 0xf9, 0xbd, 0x1, 0x7, 0x7, 0x1, 0xcd7, 0x1, 0xfff, 0x4, 0x6, 0x6, 0x9, 0xfffffffa, 0x3ff, 0x8, 0x7f, 0x9, 0x80000000, 0x2, 0x6, 0x0, 0x800, 0xfffffff9, 0x556a, 0x7f, 0x6, 0x4, 0x5, 0x7, 0x4, 0x3, 0x745, 0x1, 0x101, 0x24ab, 0x72ae, 0x8, 0x8, 0x5, 0x1, 0x7fffffff, 0x0, 0x80, 0x800, 0x8, 0x1, 0x7f, 0x7, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xdb2, 0x0, 0xf75e, 0x5, 0xb9, 0x9, 0x7fff, 0x2, 0x1, 0x1, 0xd, 0x4, 0xc, 0x80000000, 0x0, 0x55d, 0xda0, 0x8, 0x1, 0x0, 0x100, 0x1768, 0x8, 0x8, 0x4f, 0x1, 0x4, 0xa, 0x0, 0x9, 0x20b, 0x2, 0x0, 0x726, 0x7, 0x5, 0x0, 0xfffffffc, 0x3, 0x1, 0x3, 0x7ff, 0x7fff, 0x0, 0x5, 0x9, 0xa, 0xc6, 0x1, 0x81, 0x5, 0x2, 0xf5b, 0xfffffff9, 0xb62, 0x4, 0x7, 0xfffffffc, 0x100, 0x7, 0x8001, 0x2, 0xd556, 0x1, 0x12, 0x5, 0x0, 0xe, 0xbee, 0xd, 0x7, 0x61, 0x8, 0xffffffff, 0x79, 0x3, 0xdd54, 0x3, 0x5, 0x3, 0x40, 0x3, 0x4, 0x9, 0xffffffff, 0x5, 0x4, 0x3, 0x5, 0xfffffff7, 0x7, 0x6, 0x8000000, 0x100, 0x5, 0x5, 0x9, 0x0, 0x101, 0x3, 0x7f, 0x5, 0x339b38a8, 0xfffffffe, 0x3, 0xffffff80, 0xc, 0x1, 0x0, 0x2, 0x0, 0x10000, 0x1000, 0x3, 0x4, 0x400, 0x8a8, 0x4, 0x80000000, 0xb21, 0x200, 0xf3, 0x6, 0x2, 0x3, 0xb4, 0x3, 0x3, 0x7, 0x2, 0x2, 0xfffffff8, 0xc60, 0x8, 0x8000, 0x7, 0xea3, 0x3, 0x2, 0x1, 0x8, 0x8000, 0x8, 0x1, 0xd, 0x3, 0x3, 0xfffffffd, 0x8, 0xffff494f, 0x101, 0x6, 0x6, 0x7, 0x400, 0x8, 0x101, 0x79, 0x7, 0x2, 0x1, 0x0, 0x8, 0x0, 0x2, 0x7, 0x3, 0x6, 0x800, 0x3e, 0x5, 0x8, 0x375cb6cc, 0x400, 0xffff1a95, 0x74, 0x1, 0x0, 0x80000001, 0xba, 0x6, 0x8, 0x6, 0x0, 0x8001, 0xfffffff8, 0x7, 0xff, 0x5, 0x80, 0x3, 0x8, 0x6, 0x4, 0xe5, 0x7ff, 0x4, 0x1, 0x9, 0x0, 0x3, 0x4, 0x5, 0x4, 0x3, 0xa54, 0xffffffff, 0xfa9, 0xd1, 0x4, 0x10, 0x1ff, 0xa55e, 0x80, 0x6, 0x4, 0xff, 0x8, 0x1b79ff07, 0xc, 0x1000, 0x8, 0x1, 0x0, 0x9, 0x3, 0x6fbc, 0x5, 0x6, 0x8, 0x33c, 0xffffff80, 0x10, 0x6, 0x4, 0x5, 0x80000001, 0xe, 0xffff, 0x400, 0x6, 0x1, 0x7, 0x8, 0x3, 0x80000000, 0x4, 0x7, 0x80000000, 0xfffffff6, 0x2800000, 0x1, 0x2, 0x200, 0x5e, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x329a, 0xffffffffffffffff, 0x7218, 0x80, 0x80, {0xa1, 0x2, 0x8, 0xfff7, 0xcc, 0xfffffffc}, {0xc3, 0x0, 0xf7, 0x4, 0xc37d, 0x8}, 0xf436, 0x2, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x1, 0x1, 0xfffffe01, 0xff, 0x8000, 0xeb, 0x7, 0x1, 0x591, 0xfffffff7, 0x2, 0x8, 0x1, 0x7, 0x6, 0x1, 0x5, 0x8, 0x1, 0xc, 0x10001, 0x455, 0x2, 0xffffffff, 0x10000, 0x6d, 0x5, 0xb828, 0x7, 0x42, 0xd, 0xb040, 0x1, 0xffffffff, 0x0, 0x1, 0x7, 0x5ec, 0xfffffffd, 0x0, 0x6, 0x3, 0x8, 0x9, 0x8001, 0x1, 0xb0, 0x200, 0x0, 0xfff, 0x8, 0x17, 0x19944a5, 0x0, 0xfffffffa, 0xffffffff, 0x7, 0x5, 0x9, 0xa1d3, 0x3, 0x3, 0x1, 0xee, 0x4, 0x1, 0x45acc486, 0x1, 0x2, 0x1, 0x4, 0x7, 0x40, 0x0, 0x3, 0xff, 0x0, 0x2, 0x0, 0x2, 0x3, 0x3, 0x6, 0x0, 0x2, 0xffffffff, 0xfff, 0x7, 0x8, 0xb5a, 0xffff9230, 0x3, 0x7fffffff, 0x71e, 0x4, 0x8, 0x7ff, 0x5, 0x4, 0x9, 0x3, 0x1, 0x2, 0x6, 0x2, 0x3, 0x3, 0x0, 0x400, 0x7f, 0x2, 0xfc7, 0x3, 0x4, 0x2, 0x8, 0x3, 0xaf7, 0x3, 0xb, 0x7fffffff, 0x60, 0x5, 0x80000, 0x0, 0x8, 0x80, 0x10001, 0x1, 0x4, 0x6, 0x4, 0xffffffff, 0xff, 0x7, 0xb32, 0x7, 0x350e, 0x3, 0x8f, 0x7, 0x3, 0x1000, 0x1, 0x0, 0x6, 0x2, 0x5, 0x8, 0xe73, 0x12, 0x40, 0xcbe, 0xc, 0x1, 0xd97, 0x480000, 0x3ff, 0x0, 0xe, 0x8486, 0x10, 0x10, 0x5, 0xf9, 0x80000001, 0x3, 0x4, 0x2, 0x56bb, 0x3ff, 0x6, 0x8, 0x69, 0x8, 0x4d64, 0xa2, 0x6, 0x0, 0x75cb, 0xfffffffd, 0x1, 0x71, 0x2, 0x3, 0x7f, 0x679, 0x4, 0x4, 0x2, 0x80000000, 0x0, 0xb, 0x0, 0x10001, 0x7, 0x3, 0xc, 0x3, 0x1ff, 0xfffffff7, 0x189, 0x6, 0xfffffffc, 0x2, 0x1, 0x7f, 0x22, 0x2, 0xf, 0x6d, 0x100, 0x2, 0x800, 0x3, 0x3, 0xfffffffa, 0x8, 0x6e, 0x0, 0xfffffffa, 0xb8, 0x3, 0x8001, 0x7f, 0x8, 0x3, 0x10000, 0x8, 0x8, 0x200, 0xc, 0xfffffe01, 0xfffff42a, 0x10001, 0x2, 0x4, 0x7fff, 0x0, 0x1000, 0xf, 0x3, 0x6, 0x4, 0x7f, 0x5, 0x9, 0xfffffffd, 0x40, 0xe, 0x442a573e, 0x1, 0x400, 0x5, 0x22c5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x18}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40000000, 0x9ff56a50f40f5f08, 0x2, 0xfffffffc, 0x7f996813, {0x4, 0x2, 0xc3e6, 0xc, 0x6, 0x517f}, {0x9, 0x0, 0x9, 0x71d6, 0xac9, 0x2}, 0x9, 0x4, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}]]}, {0x6b, 0x6, "f97db5b4c316a8efd66f06883dbe0f01d13ed155322604104f6d88c704e777a3002bfd16c7704d834dff735de81343cfb3b3d54fb3ee8caa45f1e4936c755ba2ed5bf2e954053011c9be08ae5a8366780bce4eb3d3a81228a57161fc0f6f74f6abdba68ed603bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x2438}, 0x1, 0x0, 0x0, 0x884}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000000, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000001980)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffff, @null, @netrom={'nr', 0x0}, 0x4, [@default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) unshare(0x8040600) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r10, 0x80) connect$unix(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.641800098s ago: executing program 2 (id=3190): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x318000, 0x800, 0xffffffff, 0x1}, 0x20) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'pimreg\x00', &(0x7f0000000100)=@ethtool_eee={0x44, 0x3, 0x0, 0x4ba, 0x10001, 0x711, 0x7fff, 0x3, [0x1, 0x9]}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x8, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.164477777s ago: executing program 0 (id=3191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}}}, 0x24}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r6, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x48, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) close(0xffffffffffffffff) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x0) (async) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000974000/0x2000)=nil, 0x2000, 0xdfdddf82b84cc70e, 0x28011, r11, 0x59e1d000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r11, 0x1000) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r12, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) 3.150983982s ago: executing program 4 (id=3192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="380015c177b25c052a0b92d25a00002d7b289eabff67fe0a1b6c093f212f9619b41816122019a758d4d79cda93cb1c896887357064f62f91148b0500000000000000a6975d5b41b287d5bfda50106faf7e7351a1101500236ae48495dd73053d9cad60719aaab1c90a1e8b05029b24995e079c7659bb", @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="dd7048a0e4402ed773d8b7f649078c029040a70800000000000000e2b112f9283fa0d2251e1bcdc983fc4a03746fd58c3e0aede7dced", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r10, r11, 0x26, 0x0, @void}, 0x10) (async) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201300000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r12, r10, 0x4, r10}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0xc, 0x8, 0x1}}}}]}, 0x48}}, 0x4008800) 2.677843562s ago: executing program 2 (id=3193): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff}, 0x2c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0xfff}}, [0x8, 0x29b, 0x6, 0x0, 0x4, 0xc, 0xff, 0xb6, 0x0, 0x1, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x2, 0x7ff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x10000}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000080)={0x8, 'veth1_macvtap\x00', {'bridge_slave_1\x00'}, 0x2}) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff}, 0x2c) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0xfff}}, [0x8, 0x29b, 0x6, 0x0, 0x4, 0xc, 0xff, 0xb6, 0x0, 0x1, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x2, 0x7ff]}, &(0x7f00000000c0)=0x100) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x10000}, &(0x7f0000000140)=0x8) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000080)={0x8, 'veth1_macvtap\x00', {'bridge_slave_1\x00'}, 0x2}) (async) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) 728.540025ms ago: executing program 0 (id=3194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffff00ff71121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 727.669225ms ago: executing program 2 (id=3195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xd}, {0x0, 0x9, 0x1, 0x0, 0x8, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x0, 0x796b82bf}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0xc0) unshare(0x22020600) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x40, 0x68, 0x40d, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x200608a0}, 0x40040d0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet6(0xa, 0x4, 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r7, 0x58, &(0x7f00000002c0)}, 0x10) 622.904803ms ago: executing program 0 (id=3196): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x14, 0xf989, "410a74b20770cd66b971d43070cc7b76"}, @md5sig={0x13, 0x41, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x117, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 534.722733ms ago: executing program 4 (id=3197): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x300) 476.798003ms ago: executing program 0 (id=3198): unshare(0x2c020400) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x8, 0x4) 424.735845ms ago: executing program 4 (id=3199): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000001}, 0x4004484f) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0xfffffffe, 0x4}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) (async) bind$tipc(r5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x4000010) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1b, &(0x7f0000000680)=@raw=[@ldst={0x3, 0x3, 0x1, 0x2, 0xa, 0x40, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x1, 0xb, 0xa532498320dce846, 0x1, 0x2, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x208}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x100) (async) socket$inet(0x2, 0x1, 0x0) 302.952645ms ago: executing program 0 (id=3200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000040000000a0000000010"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRESOCT=r3, @ANYBLOB="080003"], 0x94}}, 0x0) 100.455214ms ago: executing program 4 (id=3201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a5", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)='Ir', 0x0}, 0x50) accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r2 = socket(0x1, 0x803, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=0x1, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fbad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x8000) 4.17982ms ago: executing program 0 (id=3202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000180)={0x0, 0x0}, 0x10) sendto$inet6(r1, &(0x7f0000000000)="56dba79e8614da3dd434cb60d84c2316668b4d749b17385c6e97c2c37982b6ee2f44cd3d37463d05ce", 0x29, 0x20000008, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@generic={0x91, 0x1, 0x1, 0xb}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 0s ago: executing program 4 (id=3203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) kernel console output (not intermixed with test programs): 147][T11835] batadv_slave_0: entered promiscuous mode [ 305.861636][T11852] FAULT_INJECTION: forcing a failure. [ 305.861636][T11852] name failslab, interval 1, probability 0, space 0, times 0 [ 305.876578][T11852] CPU: 1 UID: 0 PID: 11852 Comm: syz.0.1682 Not tainted syzkaller #0 PREEMPT(full) [ 305.876608][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.876620][T11852] Call Trace: [ 305.876629][T11852] [ 305.876638][T11852] dump_stack_lvl+0x189/0x250 [ 305.876679][T11852] ? __pfx____ratelimit+0x10/0x10 [ 305.876711][T11852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.876741][T11852] ? __pfx__printk+0x10/0x10 [ 305.876765][T11852] ? __pfx___might_resched+0x10/0x10 [ 305.876789][T11852] ? fs_reclaim_acquire+0x7d/0x100 [ 305.876814][T11852] should_fail_ex+0x414/0x560 [ 305.876853][T11852] should_failslab+0xa8/0x100 [ 305.876875][T11852] kmem_cache_alloc_node_noprof+0x77/0x710 [ 305.876906][T11852] ? __alloc_skb+0x255/0x430 [ 305.876925][T11852] ? napi_skb_cache_get+0x445/0x6e0 [ 305.876944][T11852] ? napi_skb_cache_get+0x151/0x6e0 [ 305.876970][T11852] __alloc_skb+0x255/0x430 [ 305.876994][T11852] ? __pfx___alloc_skb+0x10/0x10 [ 305.877019][T11852] ? bpf_lsm_capable+0x9/0x20 [ 305.877045][T11852] ? security_capable+0x7e/0x2e0 [ 305.877076][T11852] alloc_skb_with_frags+0xca/0x890 [ 305.877102][T11852] ? mm_account_pinned_pages+0xa0/0x420 [ 305.877127][T11852] ? kernel_text_address+0xa5/0xe0 [ 305.877160][T11852] ? __pfx_mm_account_pinned_pages+0x10/0x10 [ 305.877184][T11852] ? unwind_get_return_address+0x4d/0x90 [ 305.877213][T11852] tcp_send_rcvq+0x13e/0x520 [ 305.877237][T11852] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 305.877262][T11852] ? tcp_rate_check_app_limited+0x1ab/0x350 [ 305.877293][T11852] tcp_sendmsg_locked+0x4dc9/0x5540 [ 305.877358][T11852] ? __lock_acquire+0xab9/0xd20 [ 305.877393][T11852] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 305.877412][T11852] ? __local_bh_enable_ip+0x12d/0x1c0 [ 305.877439][T11852] ? __local_bh_enable_ip+0x12d/0x1c0 [ 305.877477][T11852] tcp_sendmsg+0x2f/0x50 [ 305.877498][T11852] __sock_sendmsg+0x19c/0x270 [ 305.877532][T11852] ____sys_sendmsg+0x52d/0x830 [ 305.877563][T11852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.877597][T11852] ? import_iovec+0x74/0xa0 [ 305.877628][T11852] ___sys_sendmsg+0x21f/0x2a0 [ 305.877655][T11852] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.877728][T11852] ? __fget_files+0x2a/0x420 [ 305.877747][T11852] ? __fget_files+0x3a0/0x420 [ 305.877780][T11852] __sys_sendmmsg+0x227/0x430 [ 305.877810][T11852] ? __pfx___sys_sendmmsg+0x10/0x10 [ 305.877846][T11852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.877890][T11852] ? ksys_write+0x22a/0x250 [ 305.877922][T11852] ? __pfx_ksys_write+0x10/0x10 [ 305.877958][T11852] __x64_sys_sendmmsg+0xa0/0xc0 [ 305.877985][T11852] do_syscall_64+0xfa/0xfa0 [ 305.878004][T11852] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.878023][T11852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.878044][T11852] ? clear_bhb_loop+0x60/0xb0 [ 305.878069][T11852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.878089][T11852] RIP: 0033:0x7fb03d98f749 [ 305.878107][T11852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.878125][T11852] RSP: 002b:00007fb03e7e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 305.878147][T11852] RAX: ffffffffffffffda RBX: 00007fb03dbe5fa0 RCX: 00007fb03d98f749 [ 305.878162][T11852] RDX: 0000000000000001 RSI: 00002000000040c0 RDI: 0000000000000003 [ 305.878175][T11852] RBP: 00007fb03e7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 305.878188][T11852] R10: 0000000024000044 R11: 0000000000000246 R12: 0000000000000001 [ 305.878200][T11852] R13: 00007fb03dbe6038 R14: 00007fb03dbe5fa0 R15: 00007fff73186348 [ 305.878236][T11852] [ 306.437679][T11864] __nla_validate_parse: 3 callbacks suppressed [ 306.437699][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1684'. [ 306.530768][T11864] bond5: entered promiscuous mode [ 306.537642][T11864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.580451][T11880] FAULT_INJECTION: forcing a failure. [ 306.580451][T11880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.643111][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.4.1690 Not tainted syzkaller #0 PREEMPT(full) [ 306.643142][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.643155][T11880] Call Trace: [ 306.643163][T11880] [ 306.643173][T11880] dump_stack_lvl+0x189/0x250 [ 306.643207][T11880] ? __pfx____ratelimit+0x10/0x10 [ 306.643240][T11880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.643269][T11880] ? __pfx__printk+0x10/0x10 [ 306.643292][T11880] ? __might_fault+0xb0/0x130 [ 306.643334][T11880] should_fail_ex+0x414/0x560 [ 306.643372][T11880] _copy_from_user+0x2d/0xb0 [ 306.643401][T11880] ___sys_sendmsg+0x158/0x2a0 [ 306.643429][T11880] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.643495][T11880] ? __fget_files+0x2a/0x420 [ 306.643515][T11880] ? __fget_files+0x3a0/0x420 [ 306.643547][T11880] __x64_sys_sendmsg+0x19b/0x260 [ 306.643584][T11880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.643619][T11880] ? __pfx_ksys_write+0x10/0x10 [ 306.643655][T11880] ? do_syscall_64+0xbe/0xfa0 [ 306.643680][T11880] do_syscall_64+0xfa/0xfa0 [ 306.643700][T11880] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.643721][T11880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.643741][T11880] ? clear_bhb_loop+0x60/0xb0 [ 306.643767][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.643787][T11880] RIP: 0033:0x7fd979b8f749 [ 306.643805][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.643823][T11880] RSP: 002b:00007fd97a9fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.643845][T11880] RAX: ffffffffffffffda RBX: 00007fd979de5fa0 RCX: 00007fd979b8f749 [ 306.643860][T11880] RDX: 0000000020000818 RSI: 0000200000000300 RDI: 0000000000000004 [ 306.643874][T11880] RBP: 00007fd97a9fd090 R08: 0000000000000000 R09: 0000000000000000 [ 306.643887][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.643899][T11880] R13: 00007fd979de6038 R14: 00007fd979de5fa0 R15: 00007fffb9973338 [ 306.643935][T11880] [ 306.981222][T11864] bond5 (unregistering): Released all slaves [ 307.079411][T11877] wg1 speed is unknown, defaulting to 1000 [ 307.482997][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 307.491114][T11918] FAULT_INJECTION: forcing a failure. [ 307.491114][T11918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.492069][ T30] audit: type=1800 audit(1763596083.737:3): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1697" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1765 res=0 errno=0 [ 307.533660][T11918] CPU: 1 UID: 0 PID: 11918 Comm: syz.4.1699 Not tainted syzkaller #0 PREEMPT(full) [ 307.533689][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.533703][T11918] Call Trace: [ 307.533711][T11918] [ 307.533720][T11918] dump_stack_lvl+0x189/0x250 [ 307.533754][T11918] ? __pfx____ratelimit+0x10/0x10 [ 307.533787][T11918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.533817][T11918] ? __pfx__printk+0x10/0x10 [ 307.533853][T11918] should_fail_ex+0x414/0x560 [ 307.533892][T11918] _copy_to_user+0x31/0xb0 [ 307.533921][T11918] simple_read_from_buffer+0xe1/0x170 [ 307.533957][T11918] proc_fail_nth_read+0x1b3/0x220 [ 307.533988][T11918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.534017][T11918] ? rw_verify_area+0x2a6/0x4d0 [ 307.534045][T11918] ? __lock_acquire+0xab9/0xd20 [ 307.534062][T11918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.534089][T11918] vfs_read+0x200/0xa30 [ 307.534115][T11918] ? fdget_pos+0x247/0x320 [ 307.534140][T11918] ? __pfx___mutex_lock+0x10/0x10 [ 307.534163][T11918] ? __pfx_vfs_read+0x10/0x10 [ 307.534193][T11918] ? __fget_files+0x2a/0x420 [ 307.534216][T11918] ? __fget_files+0x3a0/0x420 [ 307.534231][T11918] ? __fget_files+0x2a/0x420 [ 307.534255][T11918] ksys_read+0x145/0x250 [ 307.534282][T11918] ? __pfx_ksys_read+0x10/0x10 [ 307.534321][T11918] ? do_syscall_64+0xbe/0xfa0 [ 307.534343][T11918] do_syscall_64+0xfa/0xfa0 [ 307.534358][T11918] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.534375][T11918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.534392][T11918] ? clear_bhb_loop+0x60/0xb0 [ 307.534416][T11918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.534434][T11918] RIP: 0033:0x7fd979b8e15c [ 307.534452][T11918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.534468][T11918] RSP: 002b:00007fd97a9fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.534489][T11918] RAX: ffffffffffffffda RBX: 00007fd979de5fa0 RCX: 00007fd979b8e15c [ 307.534504][T11918] RDX: 000000000000000f RSI: 00007fd97a9fd0a0 RDI: 0000000000000004 [ 307.534517][T11918] RBP: 00007fd97a9fd090 R08: 0000000000000000 R09: 0000000000000000 [ 307.534529][T11918] R10: 0000000024000044 R11: 0000000000000246 R12: 0000000000000001 [ 307.534541][T11918] R13: 00007fd979de6038 R14: 00007fd979de5fa0 R15: 00007fffb9973338 [ 307.534575][T11918] [ 307.802716][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 307.974348][T11933] syzkaller1: entered promiscuous mode [ 307.982975][T11933] syzkaller1: entered allmulticast mode [ 308.125955][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1701'. [ 308.949474][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 308.994040][T11982] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 309.139530][T11987] netlink: 1032 bytes leftover after parsing attributes in process `syz.3.1714'. [ 309.364506][T12002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.690221][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 309.700578][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1722'. [ 310.071595][T12033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.176783][T12023] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 310.245664][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 310.852620][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1745'. [ 311.449582][T12127] __nla_validate_parse: 3 callbacks suppressed [ 311.449604][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 311.511350][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 311.778656][T12141] netlink: 'syz.0.1761': attribute type 9 has an invalid length. [ 311.862119][T12148] netlink: 'syz.0.1761': attribute type 9 has an invalid length. [ 312.033371][T12157] xt_hashlimit: size too large, truncated to 1048576 [ 312.211982][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 312.262095][T12166] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 312.665553][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 312.687693][T12188] netlink: 'syz.4.1774': attribute type 2 has an invalid length. [ 312.920261][T12198] bond0: (slave rose0): Error: Device can not be enslaved while up [ 312.953053][T12205] netlink: 'syz.0.1779': attribute type 7 has an invalid length. [ 312.975638][T12205] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1779'. [ 313.188611][T12216] wg1 speed is unknown, defaulting to 1000 [ 313.488992][T12228] wg1 speed is unknown, defaulting to 1000 [ 313.921563][T12244] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 313.995627][T12249] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 314.033737][T12244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.046743][T12249] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 314.052983][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 314.055954][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 314.089407][T12243] bond5: (slave gretap1): making interface the new active one [ 314.099798][T12243] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 314.197945][T12249] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 314.474255][T12245] bond5 (unregistering): (slave gretap1): Releasing active interface [ 314.515799][T12245] bond5 (unregistering): Released all slaves [ 314.706567][T12282] netlink: 'syz.1.1795': attribute type 12 has an invalid length. [ 314.945319][T12265] wg1 speed is unknown, defaulting to 1000 [ 315.740933][T12308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'. [ 317.270982][T12335] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1809'. [ 317.304987][T12335] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1809'. [ 317.396087][T12343] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1810'. [ 317.425920][T12344] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1811'. [ 317.563447][T12347] xt_hashlimit: size too large, truncated to 1048576 [ 318.167448][T12360] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1813'. [ 319.068069][T12412] bond0: (slave rose0): Error: Device can not be enslaved while up [ 319.077858][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.197605][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.767741][T12445] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1834'. [ 319.834887][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1834'. [ 319.853350][T12448] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 320.084240][T12459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1839'. [ 320.199944][T12466] pim6reg1: entered promiscuous mode [ 320.267669][T12466] pim6reg1: entered allmulticast mode [ 320.526640][T12482] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1842'. [ 320.536557][T12482] nbd: illegal input index 65508 [ 320.561236][T12450] delete_channel: no stack [ 320.668036][T12494] x_tables: duplicate underflow at hook 3 [ 320.679291][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 320.992551][T12508] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 321.297509][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.458806][T12519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.650844][T12528] netlink: 'syz.2.1855': attribute type 3 has an invalid length. [ 321.660497][ T24] syz0: Port: 1 Link DOWN [ 321.666618][ T9722] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.681426][ T9722] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.703330][ T9722] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.736623][ T9722] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.758616][ T9722] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.786754][ T9722] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.824079][ T9722] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.846355][ T9722] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.896005][T12547] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001 [ 321.901678][T12546] wg1 speed is unknown, defaulting to 1000 [ 322.185776][T12548] wg1 speed is unknown, defaulting to 1000 [ 322.566541][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.697954][T12566] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 323.265817][T12585] Bluetooth: MGMT ver 1.23 [ 325.060648][T12602] wg1 speed is unknown, defaulting to 1000 [ 325.377789][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 325.382519][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 333.489160][T12625] wg1 speed is unknown, defaulting to 1000 [ 335.032122][T12641] : entered promiscuous mode [ 335.060159][T12638] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1883'. [ 335.103372][T12638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.250265][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1887'. [ 335.309539][T12647] wg1 speed is unknown, defaulting to 1000 [ 335.480474][T12659] netlink: 'syz.4.1889': attribute type 33 has an invalid length. [ 335.512503][T12659] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1889'. [ 336.156937][T12696] netlink: 'syz.3.1900': attribute type 2 has an invalid length. [ 336.181906][T12696] !: entered promiscuous mode [ 336.209021][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 336.229433][T12696] netlink: 'syz.3.1900': attribute type 2 has an invalid length. [ 336.244109][T12696] !: left promiscuous mode [ 336.260899][T12705] netlink: 'syz.2.1902': attribute type 1 has an invalid length. [ 336.364670][ T24] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 336.379028][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 336.416715][ T24] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 336.438260][T12705] bond2: entered promiscuous mode [ 336.447304][T12705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.457913][ T24] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 336.490150][ T24] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 336.508921][ T24] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 336.538966][ T24] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 31/147 [ 336.569248][ T24] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 336.648264][T12722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1905'. [ 336.760415][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 336.805415][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1907'. [ 336.894234][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'. [ 337.128641][T12737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.142101][T12741] wg1 speed is unknown, defaulting to 1000 [ 337.998137][T12756] syzkaller0: entered promiscuous mode [ 338.026798][T12756] syzkaller0: entered allmulticast mode [ 338.060254][T12761] lo: left promiscuous mode [ 338.067563][T12761] lo: left allmulticast mode [ 338.165507][T12763] xt_recent: hitcount (4294967290) is larger than allowed maximum (65535) [ 338.460521][T12780] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 338.545003][T12783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1923'. [ 338.754320][T12789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.051631][T12803] netlink: 'syz.2.1928': attribute type 28 has an invalid length. [ 339.691001][T12842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.706018][T12847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.732934][T12842] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 339.783557][T12842] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 339.996526][T12864] netlink: 'syz.2.1943': attribute type 3 has an invalid length. [ 340.339057][T12884] netlink: 'syz.1.1949': attribute type 9 has an invalid length. [ 340.574133][T12898] netlink: 'syz.1.1951': attribute type 12 has an invalid length. [ 340.773919][T12900] syzkaller1: entered promiscuous mode [ 340.787723][T12901] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 340.841816][T12900] syzkaller1: entered allmulticast mode [ 341.049832][T12908] wg1 speed is unknown, defaulting to 1000 [ 341.081211][T12916] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 341.285271][T12923] bond5: (slave veth3): Enslaving as an active interface with a down link [ 341.305448][T12923] __nla_validate_parse: 6 callbacks suppressed [ 341.305471][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 341.458138][T12923] bond5 (unregistering): (slave veth3): Releasing active interface [ 341.527090][T12923] bond5 (unregistering): Released all slaves [ 342.322930][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 342.333424][T12983] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 342.341197][T12983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1970'. [ 342.381423][T12983] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 342.422995][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 343.024292][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 343.364729][T13036] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1986'. [ 343.410070][T13041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 343.872776][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1994'. [ 343.899437][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 343.976154][T13062] vlan0: entered promiscuous mode [ 344.010488][T13062] bond0: entered promiscuous mode [ 344.016473][T13062] bond_slave_0: entered promiscuous mode [ 344.022772][T13062] bond_slave_1: entered promiscuous mode [ 344.044106][T13062] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 344.160103][T13075] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.402940][T13082] sctp: [Deprecated]: syz.3.1998 (pid 13082) Use of int in maxseg socket option. [ 344.402940][T13082] Use struct sctp_assoc_value instead [ 344.585178][T13090] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 344.620581][T13091] wg1 speed is unknown, defaulting to 1000 [ 344.666253][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'. [ 344.760237][T13099] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.779433][T13099] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 344.829651][T13095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.841223][T13095] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 344.865793][T13095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.871758][T13095] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 344.890571][T13090] bond5: (slave gretap3): making interface the new active one [ 344.908565][T13090] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 344.918501][T13104] syzkaller0: entered promiscuous mode [ 344.925563][T13095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.931695][T13104] syzkaller0: entered allmulticast mode [ 344.937549][T13095] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 344.965300][T13095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.981668][T13095] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 345.108971][T13095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.132465][T13095] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 345.444899][T13124] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 345.447192][T13125] netlink: 'syz.2.2007': attribute type 21 has an invalid length. [ 345.520393][T13125] netlink: 'syz.2.2007': attribute type 4 has an invalid length. [ 345.545127][T13125] netlink: 'syz.2.2007': attribute type 3 has an invalid length. [ 345.577630][T13124] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.667352][T13124] tipc: Failed to obtain node identity [ 345.673931][T13124] tipc: Enabling of bearer rejected, failed to enable media [ 346.082653][T13158] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 346.319331][T13175] __nla_validate_parse: 14 callbacks suppressed [ 346.319354][T13175] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2026'. [ 346.367261][T13175] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 346.583847][T13181] veth11: entered promiscuous mode [ 346.955273][T13207] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2031'. [ 347.219822][T13221] wg1 speed is unknown, defaulting to 1000 [ 347.617345][T13234] wg1 speed is unknown, defaulting to 1000 [ 348.178744][T13246] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.236175][T13249] netlink: 'syz.0.2039': attribute type 5 has an invalid length. [ 348.274258][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 348.464072][T13256] xt_TCPMSS: Only works on TCP SYN packets [ 348.656177][T13259] IPv6: Can't replace route, no match found [ 348.736832][T13261] IPVS: set_ctl: invalid protocol: 50 172.20.20.23:20003 [ 348.763399][T13263] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 349.349333][T13291] wg1 speed is unknown, defaulting to 1000 [ 349.376297][T13299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 349.412058][T13299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2051'. [ 349.728880][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2059'. [ 349.742359][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2059'. [ 349.751449][T13321] netlink: 'syz.1.2059': attribute type 4 has an invalid length. [ 350.163683][T13332] nbd: must specify a size in bytes for the device [ 350.586513][T13341] bond0: (slave rose0): Error: Device can not be enslaved while up [ 350.771051][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 350.879666][T13348] wg1 speed is unknown, defaulting to 1000 [ 351.068535][T13359] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2072'. [ 351.079681][T13362] netlink: 'syz.3.2073': attribute type 4 has an invalid length. [ 351.129035][T13362] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2073'. [ 351.141560][T13362] nbd: couldn't find a device at index 0 [ 351.248352][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'. [ 351.295453][T13371] 8021q: VLANs not supported on wg0 [ 351.574119][T13383] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 351.685629][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'. [ 351.698269][T13391] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2082'. [ 352.084891][T13388] bond3: (slave veth11): Enslaving as an active interface with a down link [ 352.107450][T13383] bond3 (unregistering): (slave veth11): Releasing active interface [ 352.149612][T13383] bond3 (unregistering): Released all slaves [ 352.209475][T13405] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2085'. [ 352.259995][T13405] x_tables: unsorted underflow at hook 1 [ 352.650090][T13420] syzkaller0: entered promiscuous mode [ 352.655753][T13420] syzkaller0: entered allmulticast mode [ 352.664911][T13423] netlink: 'syz.3.2091': attribute type 13 has an invalid length. [ 352.687303][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2093'. [ 352.738448][T13423] gretap0: refused to change device tx_queue_len [ 352.746690][T13423] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 353.117264][T13447] netlink: 'syz.4.2102': attribute type 10 has an invalid length. [ 353.133632][T13447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2102'. [ 353.202749][T13447] geneve0: entered promiscuous mode [ 353.223566][T13447] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 353.244493][T13447] team0: Failed to send options change via netlink (err -105) [ 353.265258][T13447] team0: Port device geneve0 added [ 353.277121][T13448] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2099'. [ 353.444820][T13462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2107'. [ 353.457442][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2107'. [ 353.476615][T13461] wg1 speed is unknown, defaulting to 1000 [ 353.608116][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 353.645578][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 353.935542][T13480] netlink: 'syz.3.2110': attribute type 4 has an invalid length. [ 354.050570][T13484] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.293647][T13499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.837827][T13519] x_tables: duplicate underflow at hook 3 [ 355.301141][T13543] netlink: 'syz.4.2128': attribute type 83 has an invalid length. [ 355.609034][T13557] syzkaller1: entered promiscuous mode [ 355.622598][T13557] syzkaller1: entered allmulticast mode [ 356.156586][T13577] sch_fq: defrate 4294967295 ignored. [ 356.389258][T13589] tc_dump_action: action bad kind [ 356.743316][T13613] __nla_validate_parse: 6 callbacks suppressed [ 356.743338][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2150'. [ 356.843647][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2150'. [ 356.980182][T13624] netlink: 'syz.4.2151': attribute type 21 has an invalid length. [ 357.139451][T13636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2157'. [ 357.450300][T13648] ip6gre3: entered promiscuous mode [ 357.545715][T13654] xt_ecn: cannot match TCP bits for non-tcp packets [ 357.739936][T13662] netlink: 'syz.0.2167': attribute type 1 has an invalid length. [ 357.799119][T13662] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 357.810989][T13662] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 357.850669][T13671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2169'. [ 357.860547][T13671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.867820][T13671] IPv6: NLM_F_CREATE should be set when creating new route [ 357.875102][T13671] IPv6: NLM_F_CREATE should be set when creating new route [ 357.884392][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 358.584511][T13709] wg1 speed is unknown, defaulting to 1000 [ 358.941744][T13718] netlink: zone id is out of range [ 358.947355][T13718] netlink: zone id is out of range [ 358.952938][T13718] netlink: zone id is out of range [ 358.958300][T13718] netlink: zone id is out of range [ 358.963851][T13718] netlink: zone id is out of range [ 358.968997][T13718] netlink: zone id is out of range [ 358.974599][T13718] netlink: zone id is out of range [ 358.979739][T13718] netlink: zone id is out of range [ 358.987883][T13718] SET target dimension over the limit! [ 359.165526][T13724] netlink: 'syz.4.2184': attribute type 12 has an invalid length. [ 359.215541][T13724] netlink: 'syz.4.2184': attribute type 4 has an invalid length. [ 359.303607][T13726] openvswitch: netlink: Message has 536 unknown bytes. [ 359.317792][T13726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.335012][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2186'. [ 359.345286][T13726] sch_fq: defrate 0 ignored. [ 359.460960][T13734] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 359.470835][T13734] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2188'. [ 359.780445][T13743] bridge: RTM_NEWNEIGH with invalid ether address [ 359.833721][T13745] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 359.845918][T13745] syzkaller1: linktype set to 260 [ 359.884402][T13745] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 359.903020][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'. [ 359.913094][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'. [ 359.926943][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 360.112144][T13759] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 360.221031][T13759] dummy0: entered promiscuous mode [ 360.287879][T13759] team0: Port device dummy0 added [ 360.336094][T13794] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 360.516100][T13802] Cannot find del_set index 4 as target [ 360.833881][T13800] tipc: Enabled bearer , priority 0 [ 361.212631][T13817] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 361.266221][T13817] bond12 (unregistering): Released all slaves [ 361.381187][T13819] æÿîÿ: entered promiscuous mode [ 361.395855][T13826] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 361.537171][T13830] netlink: 'syz.1.2207': attribute type 10 has an invalid length. [ 361.590013][T13830] team0: Port device geneve0 added [ 361.633562][T13831] macvlan3: entered promiscuous mode [ 361.647782][T13831] macvlan3: entered allmulticast mode [ 361.676935][T13831] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 361.733724][T13831] team0: Port device macvlan3 added [ 361.952484][ T24] tipc: Node number set to 3715659058 [ 362.039939][T13839] netlink: 'syz.0.2210': attribute type 13 has an invalid length. [ 362.054961][T13839] netlink: 'syz.0.2210': attribute type 17 has an invalid length. [ 362.420608][T13857] __nla_validate_parse: 3 callbacks suppressed [ 362.420628][T13857] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2214'. [ 362.492861][T13857] netlink: 'syz.1.2214': attribute type 9 has an invalid length. [ 362.500647][T13857] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2214'. [ 362.533989][T13857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2214'. [ 362.854660][T13878] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 362.896373][T13878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.963166][T13878] team0: Port device bond0 added [ 363.240173][T13903] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2227'. [ 363.657134][T13930] syzkaller0: entered promiscuous mode [ 363.663163][T13930] syzkaller0: entered allmulticast mode [ 363.859146][T13940] netlink: 'syz.1.2237': attribute type 3 has an invalid length. [ 363.875771][T13941] syz_tun: entered allmulticast mode [ 363.923844][T13940] siw: device registration error -23 [ 363.938022][T13940] erspan0: left allmulticast mode [ 363.966646][T13940] net_ratelimit: 2 callbacks suppressed [ 363.966658][T13940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.055837][T13953] bond0: (slave rose0): Error: Device can not be enslaved while up [ 364.067108][T13939] syz_tun: left allmulticast mode [ 364.138253][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 364.151294][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 364.600721][T13976] wg1 speed is unknown, defaulting to 1000 [ 364.913141][T13987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2251'. [ 365.194614][T13998] tipc: Enabled bearer , priority 0 [ 365.234770][T14001] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2257'. [ 365.463466][T13998] : renamed from syzkaller0 [ 365.470057][T13998] tipc: Disabling bearer [ 365.483233][T14005] veth1_to_bond: entered allmulticast mode [ 365.571182][T14004] veth1_to_bond: left allmulticast mode [ 365.680913][T14023] wg1 speed is unknown, defaulting to 1000 [ 365.851360][T14024] wg1 speed is unknown, defaulting to 1000 [ 365.877086][T14029] wg1 speed is unknown, defaulting to 1000 [ 366.596816][T14061] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 366.633950][T14061] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2268'. [ 367.037024][T14080] geneve2: entered promiscuous mode [ 367.094839][T14080] geneve2: entered allmulticast mode [ 367.361517][T14083] wg1 speed is unknown, defaulting to 1000 [ 367.984286][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'. [ 368.089580][T14113] tipc: Resetting bearer [ 368.115154][T14119] vlan0: left promiscuous mode [ 368.295866][T14133] pim6reg: entered allmulticast mode [ 368.303683][T14133] pim6reg: left allmulticast mode [ 368.355619][T14138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2285'. [ 368.385037][T14140] netlink: 'syz.4.2288': attribute type 13 has an invalid length. [ 368.556057][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 368.789493][T14157] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 368.841727][T14159] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 368.906768][T14140] geneve0: left promiscuous mode [ 368.934537][T14161] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 369.343859][T14140] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 369.534753][T14177] netlink: 'syz.4.2293': attribute type 21 has an invalid length. [ 369.587172][T14177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.594492][T14177] IPv6: NLM_F_CREATE should be set when creating new route [ 369.601764][T14177] IPv6: NLM_F_CREATE should be set when creating new route [ 369.609162][T14177] IPv6: NLM_F_CREATE should be set when creating new route [ 370.173545][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 370.440729][T14160] dummy0: left allmulticast mode [ 370.478136][T13770] wg1 speed is unknown, defaulting to 1000 [ 370.501076][T13770] syz: Port: 1 Link DOWN [ 370.509267][T14167] bond5 (unregistering): Released all slaves [ 370.541819][ T7190] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.706409][ T7190] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.893757][ T7190] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.912017][ T7190] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.964691][ T5840] Bluetooth: hci0: command tx timeout [ 371.009465][T14231] wg1 speed is unknown, defaulting to 1000 [ 371.034052][T14230] tipc: Started in network mode [ 371.072481][T14230] tipc: Node identity 1af9d4b8d48b, cluster identity 4711 [ 371.079958][T14230] tipc: Enabled bearer , priority 0 [ 371.115708][T14230] syzkaller0: entered promiscuous mode [ 371.121311][T14230] syzkaller0: entered allmulticast mode [ 371.266548][T14237] tipc: Resetting bearer [ 371.311430][T14229] tipc: Resetting bearer [ 371.341679][T14229] tipc: Disabling bearer [ 371.748594][T14270] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 371.829274][T14272] wg1 speed is unknown, defaulting to 1000 [ 372.520364][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 372.635081][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2329'. [ 372.656940][T14301] tun0: tun_chr_ioctl cmd 1074025675 [ 372.666806][T14301] tun0: persist enabled [ 372.715938][T14301] tun0: tun_chr_ioctl cmd 1074025675 [ 372.732403][T14301] tun0: persist enabled [ 372.839997][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 372.876779][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 373.212197][T14333] wg1 speed is unknown, defaulting to 1000 [ 373.228779][T14336] netlink: 'syz.1.2337': attribute type 8 has an invalid length. [ 373.380019][T14336] wg1 speed is unknown, defaulting to 1000 [ 373.687075][T14349] sctp: [Deprecated]: syz.4.2341 (pid 14349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.687075][T14349] Use struct sctp_sack_info instead [ 373.762583][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.834974][T14349] syzkaller0: entered promiscuous mode [ 373.840514][T14349] syzkaller0: entered allmulticast mode [ 373.870652][T14351] wg1 speed is unknown, defaulting to 1000 [ 374.050924][T14362] tipc: Enabled bearer , priority 0 [ 374.090719][T14348] tipc: Resetting bearer [ 374.144569][T14348] tipc: Disabling bearer [ 374.306664][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 374.353904][T14376] tipc: Enabling of bearer rejected, failed to enable media [ 374.484862][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2347'. [ 374.512676][T14379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.571651][T14379] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2346'. [ 374.727845][T14389] IPVS: Scheduler module ip_vs_sip not found [ 375.138108][T14411] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.254257][T14411] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.300122][T14417] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2357'. [ 375.309877][T14417] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 375.332130][T14417] bond0: (slave rose0): Error: Device can not be enslaved while up [ 375.342143][T14422] sock: sock_timestamping_bind_phc: sock not bind to device [ 375.347784][T14411] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.435415][T14411] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.655388][T14428] bond5: option lacp_active: invalid value (8) [ 375.666072][T14428] bond5 (unregistering): Released all slaves [ 375.765991][ T9735] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.783253][ T9735] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.831563][ T9735] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.881721][ T9735] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.211734][T14446] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2365'. [ 376.315739][T14446] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 376.332693][T14450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2365'. [ 377.005504][T14472] lo speed is unknown, defaulting to 1000 [ 377.026806][T14472] lo speed is unknown, defaulting to 1000 [ 377.077285][T14472] lo speed is unknown, defaulting to 1000 [ 377.207253][T14484] netlink: 'syz.2.2375': attribute type 1 has an invalid length. [ 377.389219][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 377.460507][T14484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.477232][T14493] bond3: (slave dummy0): Enslaving as an active interface with a down link [ 377.501582][T14496] geneve0: entered promiscuous mode [ 377.507213][T14496] batadv_slave_0: entered promiscuous mode [ 377.514929][T14496] macvtap1: entered promiscuous mode [ 377.520613][T14496] team0: entered promiscuous mode [ 377.526336][T14496] bond0: entered promiscuous mode [ 377.532130][T14496] macvtap1: entered allmulticast mode [ 377.538527][T14496] team0: entered allmulticast mode [ 377.544675][T14496] geneve0: entered allmulticast mode [ 377.550148][T14496] bond0: entered allmulticast mode [ 377.555538][T14496] batadv_slave_0: entered allmulticast mode [ 377.725943][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2380'. [ 377.745621][T14472] infiniband syz2: set down [ 377.751636][T14472] infiniband syz2: added lo [ 377.758781][T14472] syz2: rxe_create_cq: returned err = -12 [ 377.766353][T14472] infiniband syz2: Couldn't create ib_mad CQ [ 377.776142][T13769] lo speed is unknown, defaulting to 1000 [ 377.778819][T14472] infiniband syz2: Couldn't open port 1 [ 377.789750][T14504] netlink: 'syz.1.2380': attribute type 14 has an invalid length. [ 377.880234][T14512] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2383'. [ 377.887897][T14472] RDS/IB: syz2: added [ 377.894582][T14472] smc: adding ib device syz2 with port count 1 [ 377.901282][T14472] smc: ib device syz2 port 1 has no pnetid [ 377.913581][T13769] lo speed is unknown, defaulting to 1000 [ 377.923593][T14472] lo speed is unknown, defaulting to 1000 [ 378.001097][T14520] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 378.013682][T14516] bond13: option xmit_hash_policy: invalid value (34) [ 378.027478][T14516] bond13 (unregistering): Released all slaves [ 378.104138][T14518] bond13: option xmit_hash_policy: invalid value (34) [ 378.114323][T14518] bond13 (unregistering): Released all slaves [ 378.194432][T14526] netlink: 'syz.0.2386': attribute type 1 has an invalid length. [ 378.228939][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 378.309943][T14528] wg1 speed is unknown, defaulting to 1000 [ 378.383408][T14532] netlink: 'syz.0.2388': attribute type 3 has an invalid length. [ 378.438092][T14528] lo speed is unknown, defaulting to 1000 [ 378.830403][T14472] lo speed is unknown, defaulting to 1000 [ 378.916786][T14548] pimreg: entered allmulticast mode [ 378.994445][T14549] pimreg: left allmulticast mode [ 379.508981][T14472] lo speed is unknown, defaulting to 1000 [ 379.755072][T14572] netlink: 'syz.4.2398': attribute type 1 has an invalid length. [ 379.770642][T14577] __nla_validate_parse: 2 callbacks suppressed [ 379.770662][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2401'. [ 379.794438][T14580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2401'. [ 379.869805][T14582] bridge6: entered promiscuous mode [ 379.950803][T14573] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 379.990163][T14573] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 380.057747][T14472] lo speed is unknown, defaulting to 1000 [ 380.574004][T14472] lo speed is unknown, defaulting to 1000 [ 380.739458][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 380.757802][T14597] team0: entered promiscuous mode [ 380.763182][T14597] team_slave_0: entered promiscuous mode [ 380.769291][T14597] team_slave_1: entered promiscuous mode [ 380.780377][T14597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.826635][T14597] team0: left promiscuous mode [ 380.831612][T14597] team_slave_0: left promiscuous mode [ 380.838501][T14597] team_slave_1: left promiscuous mode [ 380.881257][T14600] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 381.396955][T14626] netlink: 'syz.1.2413': attribute type 13 has an invalid length. [ 381.563844][T14626] netlink: 'syz.1.2413': attribute type 17 has an invalid length. [ 381.808689][T14626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.897259][T14643] syzkaller1: entered promiscuous mode [ 381.910569][T14643] syzkaller1: entered allmulticast mode [ 382.058769][T14651] tap0: tun_chr_ioctl cmd 2148553947 [ 382.077293][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 382.077758][T14651] tap0: tun_chr_ioctl cmd 2147767521 [ 382.150780][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2419'. [ 382.180012][T14651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.191740][T14651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.400907][T14664] tipc: Enabled bearer , priority 0 [ 382.411367][T14664] syzkaller0: entered promiscuous mode [ 382.438767][T14664] syzkaller0: entered allmulticast mode [ 382.467857][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2424'. [ 382.496683][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2424'. [ 382.535105][T14665] tipc: Resetting bearer [ 382.536856][T14670] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 382.549823][T14670] openvswitch: netlink: Message has 8 unknown bytes. [ 382.571371][T14662] tipc: Resetting bearer [ 382.620582][T14662] tipc: Disabling bearer [ 382.848686][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2431'. [ 382.915309][T14687] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 383.013676][T14687] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 383.087516][T14699] wireguard0: entered promiscuous mode [ 383.102487][T14699] wireguard0: entered allmulticast mode [ 383.169874][T14709] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2439'. [ 383.286905][T14705] wg1 speed is unknown, defaulting to 1000 [ 383.337852][T14705] lo speed is unknown, defaulting to 1000 [ 383.346938][T14706] wg1 speed is unknown, defaulting to 1000 [ 383.764690][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 383.790062][T14706] lo speed is unknown, defaulting to 1000 [ 384.330229][T14761] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 384.949639][T14785] __nla_validate_parse: 4 callbacks suppressed [ 384.949662][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2463'. [ 384.986149][T14789] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 385.008860][T14789] netlink: 'syz.0.2464': attribute type 3 has an invalid length. [ 385.016984][T14789] netlink: 'syz.0.2464': attribute type 2 has an invalid length. [ 385.025063][T14789] netlink: 'syz.0.2464': attribute type 3 has an invalid length. [ 385.033341][T14789] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2464'. [ 385.521986][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2469'. [ 385.555481][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 385.634900][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 385.747923][T14819] bond0: (slave rose0): Error: Device can not be enslaved while up [ 386.757655][T14841] wg1 speed is unknown, defaulting to 1000 [ 386.771276][T14841] lo speed is unknown, defaulting to 1000 [ 387.060311][T14851] wg1 speed is unknown, defaulting to 1000 [ 387.154334][T14860] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 387.212499][T14851] lo speed is unknown, defaulting to 1000 [ 387.235152][T14860] bond6: (slave bridge5): making interface the new active one [ 387.244200][T14860] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 387.519212][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 387.529086][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 388.594687][T14913] netlink: 'syz.3.2500': attribute type 6 has an invalid length. [ 388.603185][T14914] netlink: 'syz.3.2500': attribute type 6 has an invalid length. [ 388.612635][T14913] netlink: 'syz.3.2500': attribute type 6 has an invalid length. [ 388.710709][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 388.728221][T14916] siw: device registration error -23 [ 388.738406][T14916] ipt_ECN: cannot use operation on non-tcp rule [ 388.813955][T14918] wg1 speed is unknown, defaulting to 1000 [ 388.824480][T14918] lo speed is unknown, defaulting to 1000 [ 388.834011][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 389.111172][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 389.688999][T14948] netlink: 'syz.0.2510': attribute type 15 has an invalid length. [ 389.699230][T14945] tunl0: left promiscuous mode [ 389.726327][T14945] tunl0: left allmulticast mode [ 389.751046][T14945] gre0: left promiscuous mode [ 389.773023][T14945] gre0: left allmulticast mode [ 389.778048][T14945] gretap0: left promiscuous mode [ 389.854814][T14945] gretap0: left allmulticast mode [ 389.860326][T14945] bond0: left promiscuous mode [ 389.889846][T14945] batadv_slave_0: left promiscuous mode [ 389.944787][T14945] ip6gre1: left allmulticast mode [ 389.950632][T14945] gretap1: left promiscuous mode [ 389.969168][T14945] macvlan3: left promiscuous mode [ 389.974466][T14945] macvlan3: left allmulticast mode [ 389.995639][T14959] __nla_validate_parse: 3 callbacks suppressed [ 389.995659][T14959] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2512'. [ 390.125590][T14968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2514'. [ 390.136724][T14968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2514'. [ 390.146935][T14968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.364971][T14980] wg1 speed is unknown, defaulting to 1000 [ 390.374442][T14978] dvmrp12: entered allmulticast mode [ 390.381846][T14980] lo speed is unknown, defaulting to 1000 [ 390.419106][T14978] wg1 speed is unknown, defaulting to 1000 [ 390.586995][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2520'. [ 390.600828][T14988] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 390.610113][T14988] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 390.619328][T14988] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2521'. [ 390.649485][T14986] batman_adv: batadv0: Adding interface: ipvlan2 [ 390.656215][T14986] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 390.736789][T14986] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 390.766609][T14978] lo speed is unknown, defaulting to 1000 [ 390.779184][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 391.086499][T15008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2525'. [ 391.091433][T15004] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 391.106194][T15004] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 391.127822][T14975] dvmrp12: left allmulticast mode [ 391.218566][T15012] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 1, id = 0 [ 391.454843][T15019] netlink: zone id is out of range [ 391.460249][T15019] netlink: zone id is out of range [ 391.471033][T15019] netlink: zone id is out of range [ 391.476563][T15019] netlink: zone id is out of range [ 391.482003][T15019] netlink: zone id is out of range [ 391.487647][T15019] netlink: zone id is out of range [ 391.493174][T15019] netlink: zone id is out of range [ 391.498460][T15019] netlink: zone id is out of range [ 391.504190][T15019] netlink: zone id is out of range [ 391.621981][T15022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2530'. [ 391.923551][T15031] syzkaller1: entered promiscuous mode [ 391.929270][T15031] syzkaller1: entered allmulticast mode [ 391.984880][T15037] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 392.119931][T15047] netlink: 'syz.3.2537': attribute type 1 has an invalid length. [ 392.229843][T15047] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.277701][T15058] sctp: [Deprecated]: syz.0.2540 (pid 15058) Use of int in max_burst socket option. [ 392.277701][T15058] Use struct sctp_assoc_value instead [ 392.385981][T15053] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.404693][T15053] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 392.437923][T15073] netlink: 'syz.0.2543': attribute type 13 has an invalid length. [ 392.450824][T15053] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 392.454070][T15073] netlink: 'syz.0.2543': attribute type 17 has an invalid length. [ 392.512849][T15047] veth3: entered promiscuous mode [ 392.525981][T15047] bond7: (slave veth3): Enslaving as an active interface with a down link [ 392.604380][T15073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.633995][T15073] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.646176][T15073] dummy0: left promiscuous mode [ 392.744358][T15074] wg1 speed is unknown, defaulting to 1000 [ 392.786071][T15074] lo speed is unknown, defaulting to 1000 [ 393.383141][T15108] netlink: 'syz.4.2549': attribute type 10 has an invalid length. [ 393.421945][T15108] bond0: (slave wlan1): Opening slave failed [ 393.508399][T15116] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 393.569231][T15116] 8021q: adding VLAN 0 to HW filter on device bond13 [ 393.595402][T15118] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 393.632536][T15118] bond13: (slave batadv1): making interface the new active one [ 393.674109][T15118] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 393.701433][T15119] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 393.715003][T15119] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 393.774700][T15134] netlink: 'syz.4.2555': attribute type 21 has an invalid length. [ 393.826504][T15134] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 394.141198][T15158] netlink: 'syz.3.2561': attribute type 1 has an invalid length. [ 394.146311][T15150] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 394.161424][T15150] bond4 (unregistering): Released all slaves [ 394.320493][T15158] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 394.341821][T15158] bond8: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 394.411195][T15158] bond8: (slave vcan1): making interface the new active one [ 394.427143][T15158] bond8: (slave vcan1): Enslaving as an active interface with an up link [ 394.458162][T15172] netlink: 'syz.4.2563': attribute type 18 has an invalid length. [ 394.469208][T15160] bond8: (slave vcan2): The slave device specified does not support setting the MAC address [ 394.537385][T15160] bond8: (slave vcan2): Enslaving as a backup interface with an up link [ 394.554968][T15170] 8021q: adding VLAN 0 to HW filter on device bond8 [ 394.655821][T15180] wg1 speed is unknown, defaulting to 1000 [ 394.669446][T15180] lo speed is unknown, defaulting to 1000 [ 394.797068][T15188] netlink: 'syz.4.2567': attribute type 12 has an invalid length. [ 394.824872][T15188] ¾x9ÿ: renamed from bridge_slave_0 [ 394.862539][T15188] netlink: 'syz.4.2567': attribute type 4 has an invalid length. [ 394.964734][T15197] netlink: 'syz.3.2572': attribute type 5 has an invalid length. [ 395.411191][T15218] __nla_validate_parse: 12 callbacks suppressed [ 395.411213][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2578'. [ 395.441190][T15215] IPv6: NLM_F_REPLACE set, but no existing node found! [ 395.530703][T15223] netlink: 'syz.1.2580': attribute type 10 has an invalid length. [ 395.577017][T15223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2580'. [ 395.607255][T15223] dummy0: entered promiscuous mode [ 395.628377][T15223] bridge0: port 1(dummy0) entered blocking state [ 395.673856][T15223] bridge0: port 1(dummy0) entered disabled state [ 395.694594][T15223] dummy0: entered allmulticast mode [ 395.753559][T15223] bridge0: port 1(dummy0) entered blocking state [ 395.760082][T15223] bridge0: port 1(dummy0) entered listening state [ 395.872022][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 396.334686][T15251] xt_CT: No such helper "snmp_trap" [ 396.547173][T15261] bond0: (slave erspan0): Opening slave failed [ 396.946700][T15279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2597'. [ 397.430044][T15299] netlink: 'syz.3.2604': attribute type 2 has an invalid length. [ 397.455120][T15299] netlink: 'syz.3.2604': attribute type 5 has an invalid length. [ 398.497890][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 398.504387][T15312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2608'. [ 398.602081][T15322] wg1 speed is unknown, defaulting to 1000 [ 398.634694][T15313] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 398.683705][T15329] IPVS: length: 171 != 8 [ 398.696760][T15313] geneve0: entered promiscuous mode [ 398.898938][T15331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.926317][T15339] netlink: 'syz.3.2613': attribute type 43 has an invalid length. [ 398.950924][T15322] lo speed is unknown, defaulting to 1000 [ 399.161038][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2616'. [ 399.174263][T15359] ipvlan2: entered promiscuous mode [ 399.197871][T15359] bridge0: port 1(ipvlan2) entered blocking state [ 399.242519][T15359] bridge0: port 1(ipvlan2) entered disabled state [ 399.249361][T15359] ipvlan2: entered allmulticast mode [ 399.273866][T15359] bridge0: entered allmulticast mode [ 399.281750][T15359] ipvlan2: left allmulticast mode [ 399.311315][T15359] bridge0: left allmulticast mode [ 399.358413][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2617'. [ 399.470420][T15360] vlan2: entered allmulticast mode [ 399.516299][T15360] bridge0: entered allmulticast mode [ 399.534983][T15360] bridge7: port 1(vlan2) entered blocking state [ 399.541406][T15360] bridge7: port 1(vlan2) entered disabled state [ 399.587150][T15360] vlan2: entered promiscuous mode [ 399.612340][T15360] bridge0: entered promiscuous mode [ 399.655461][T15360] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 399.715170][T15385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'. [ 399.795988][T15386] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 399.821400][T15386] netlink: 15694 bytes leftover after parsing attributes in process `syz.2.2622'. [ 400.183499][T15402] bridge_slave_0: left allmulticast mode [ 400.196003][T15402] bridge_slave_0: left promiscuous mode [ 400.208665][T15402] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.294033][T15402] bridge_slave_1: left allmulticast mode [ 400.313696][T15402] bridge_slave_1: left promiscuous mode [ 400.335391][T15402] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.386504][T15402] bond0: (slave bond_slave_0): Releasing backup interface [ 400.414960][T15402] team0: Port device team_slave_0 removed [ 400.428057][T15402] team0: Port device team_slave_1 removed [ 400.435809][T15402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.444288][T15402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.497089][T15402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.505604][T15402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.528673][T15402] net_ratelimit: 3 callbacks suppressed [ 400.528692][T15402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.877329][T15424] sctp: [Deprecated]: syz.2.2634 (pid 15424) Use of int in max_burst socket option deprecated. [ 400.877329][T15424] Use struct sctp_assoc_value instead [ 401.014706][T15430] __nla_validate_parse: 1 callbacks suppressed [ 401.014728][T15430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2636'. [ 401.043446][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2636'. [ 401.268475][T15437] tipc: Enabling of bearer rejected, already enabled [ 401.283728][T15437] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2639'. [ 401.296288][T15437] tipc: Resetting bearer [ 401.448202][T15455] netlink: 'syz.0.2644': attribute type 3 has an invalid length. [ 401.595587][T15464] wg1 speed is unknown, defaulting to 1000 [ 401.605712][T15464] lo speed is unknown, defaulting to 1000 [ 401.732198][T15468] netlink: 'syz.1.2648': attribute type 11 has an invalid length. [ 401.755091][T15468] netlink: 'syz.1.2648': attribute type 11 has an invalid length. [ 401.773217][T15468] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2648'. [ 402.141162][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 402.392812][T15494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2654'. [ 402.536663][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 402.777306][T15501] tipc: Failed to remove unknown binding: 66,1,1/0:2499454186/2499454188 [ 402.788406][T15501] tipc: Failed to remove unknown binding: 66,1,1/0:2499454186/2499454188 [ 402.797392][T15501] tipc: Failed to remove unknown binding: 66,1,1/0:2499454186/2499454188 [ 403.023462][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2657'. [ 403.066657][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 403.319087][T15521] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 403.387207][T15521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.434526][T15523] bond4: (slave geneve2): making interface the new active one [ 403.445683][T15523] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 403.461098][ T9722] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.511753][T15519] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2661'. [ 403.532368][ T7190] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.544023][T15527] tipc: Enabling of bearer rejected, failed to enable media [ 403.638708][ T7190] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.713819][T15533] wg1 speed is unknown, defaulting to 1000 [ 403.720186][ T7190] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.741187][T15533] lo speed is unknown, defaulting to 1000 [ 403.983226][T15545] bridge0: port 1(dummy0) entered disabled state [ 404.008057][T15549] netlink: 'syz.3.2668': attribute type 21 has an invalid length. [ 404.042824][T15549] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.050925][T15549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.058318][T15549] IPv6: NLM_F_CREATE should be set when creating new route [ 404.065666][T15549] IPv6: NLM_F_CREATE should be set when creating new route [ 404.072977][T15549] IPv6: NLM_F_CREATE should be set when creating new route [ 404.265764][T15547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.398667][T15547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.539136][T15561] wg1 speed is unknown, defaulting to 1000 [ 404.549371][T15561] lo speed is unknown, defaulting to 1000 [ 404.651135][T15547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.798374][T15547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.996183][ T1113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.022517][ T1113] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.066838][ T9735] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.131676][ T9722] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.270949][T15586] netlink: 'syz.3.2677': attribute type 4 has an invalid length. [ 405.348068][T15586] wg1 speed is unknown, defaulting to 1000 [ 405.358272][T15586] lo speed is unknown, defaulting to 1000 [ 406.164326][T15614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.003042][T15638] tipc: Enabling of bearer rejected, failed to enable media [ 408.013151][T15638] netlink: 'syz.1.2691': attribute type 32 has an invalid length. [ 408.021033][T15638] __nla_validate_parse: 4 callbacks suppressed [ 408.021051][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 408.129021][T15638] bond14: option coupled_control: invalid value (110) [ 408.148789][T15638] bond14 (unregistering): Released all slaves [ 408.455010][T15648] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.2692'. [ 408.892943][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 409.000663][T15697] geneve2: entered promiscuous mode [ 409.057682][ T9723] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.125000][ T9723] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.185687][ T9723] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.197373][ T9723] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.206356][T15696] wg1 speed is unknown, defaulting to 1000 [ 409.208575][T15708] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2703'. [ 409.286234][T15697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.336924][T15696] lo speed is unknown, defaulting to 1000 [ 409.452159][T15697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.482812][T15720] netlink: 'syz.0.2704': attribute type 2 has an invalid length. [ 409.519655][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2704'. [ 409.704635][T15697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.810296][T15736] netlink: 'syz.1.2711': attribute type 29 has an invalid length. [ 410.123125][T15697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.835416][T15742] wg1 speed is unknown, defaulting to 1000 [ 410.904947][ T9745] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.981842][T15749] wg1 speed is unknown, defaulting to 1000 [ 411.066354][ T9745] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.082628][T15742] lo speed is unknown, defaulting to 1000 [ 411.123557][ T7210] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.165789][ T9745] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.279496][T15774] sit2: entered allmulticast mode [ 411.434525][T15749] lo speed is unknown, defaulting to 1000 [ 412.139844][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 412.407022][T15803] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 412.472992][T15807] tipc: Enabling of bearer rejected, failed to enable media [ 412.552995][T15815] syzkaller1: entered promiscuous mode [ 412.585755][T15815] syzkaller1: entered allmulticast mode [ 412.635872][T15815] syzkaller1: left promiscuous mode [ 412.670670][T15815] syzkaller1: left allmulticast mode [ 412.836858][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 413.049844][T15841] x_tables: duplicate underflow at hook 4 [ 413.181960][T15849] sctp: [Deprecated]: syz.4.2741 (pid 15849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.181960][T15849] Use struct sctp_sack_info instead [ 413.711358][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 413.744303][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 414.344896][T15891] xt_hashlimit: size too large, truncated to 1048576 [ 414.403987][T15894] x_tables: duplicate underflow at hook 2 [ 414.782043][T15899] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 414.846160][T15899] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2753'. [ 414.957415][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 414.974036][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 415.221136][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 415.341020][T15924] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 415.483375][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 415.499444][T15930] bond6: (slave veth15): Enslaving as an active interface with a down link [ 415.525305][T15924] bond6 (unregistering): (slave veth15): Releasing active interface [ 415.546389][T15924] bond6 (unregistering): Released all slaves [ 415.655959][T15936] xt_nat: multiple ranges no longer supported [ 415.784608][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'. [ 415.814630][T15946] netlink: 'syz.2.2768': attribute type 13 has an invalid length. [ 416.015971][T15957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2773'. [ 416.021918][T15951] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2771'. [ 416.145907][T15958] syzkaller1: entered promiscuous mode [ 416.151522][T15958] syzkaller1: entered allmulticast mode [ 416.343651][T15973] tipc: Enabling of bearer rejected, already enabled [ 416.486272][T15972] wg1 speed is unknown, defaulting to 1000 [ 416.502796][T15982] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 416.524135][T15972] lo speed is unknown, defaulting to 1000 [ 416.650160][T15982] bond14: entered promiscuous mode [ 416.656486][T15982] 8021q: adding VLAN 0 to HW filter on device bond14 [ 417.684289][T16023] netlink: 'syz.4.2789': attribute type 21 has an invalid length. [ 417.692587][T16023] netlink: 'syz.4.2789': attribute type 22 has an invalid length. [ 417.700547][T16023] netlink: 'syz.4.2789': attribute type 23 has an invalid length. [ 417.709844][T16023] netlink: 'syz.4.2789': attribute type 25 has an invalid length. [ 418.983669][T16073] __nla_validate_parse: 6 callbacks suppressed [ 418.983691][T16073] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2798'. [ 418.999937][T16073] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 419.576190][T16087] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 419.591713][T16086] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2803'. [ 419.612386][T16086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2803'. [ 419.783570][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2806'. [ 419.845821][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2806'. [ 420.059435][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 420.060441][T16115] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2811'. [ 420.090671][T16115] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2811'. [ 420.137616][T16115] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2811'. [ 420.150358][T16117] bridge_slave_1: left allmulticast mode [ 420.156754][T16117] bridge_slave_1: left promiscuous mode [ 420.163347][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.021310][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.033533][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.044422][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.055118][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.064367][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.090718][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.100675][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.108580][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.122007][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.131898][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.047980][T16129] wg1 speed is unknown, defaulting to 1000 [ 423.133206][T16135] FAULT_INJECTION: forcing a failure. [ 423.133206][T16135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.133930][T16129] lo speed is unknown, defaulting to 1000 [ 423.186994][T16135] CPU: 0 UID: 0 PID: 16135 Comm: syz.0.2817 Not tainted syzkaller #0 PREEMPT(full) [ 423.187026][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.187045][T16135] Call Trace: [ 423.187053][T16135] [ 423.187063][T16135] dump_stack_lvl+0x189/0x250 [ 423.187105][T16135] ? __pfx____ratelimit+0x10/0x10 [ 423.187140][T16135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.187174][T16135] ? __pfx__printk+0x10/0x10 [ 423.187210][T16135] should_fail_ex+0x414/0x560 [ 423.187249][T16135] _copy_to_user+0x31/0xb0 [ 423.187279][T16135] simple_read_from_buffer+0xe1/0x170 [ 423.187317][T16135] proc_fail_nth_read+0x1b3/0x220 [ 423.187348][T16135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.187379][T16135] ? rw_verify_area+0x2a6/0x4d0 [ 423.187407][T16135] ? __lock_acquire+0xab9/0xd20 [ 423.187425][T16135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.187454][T16135] vfs_read+0x200/0xa30 [ 423.187480][T16135] ? fdget_pos+0x247/0x320 [ 423.187506][T16135] ? __pfx___mutex_lock+0x10/0x10 [ 423.187529][T16135] ? __pfx_vfs_read+0x10/0x10 [ 423.187560][T16135] ? __fget_files+0x2a/0x420 [ 423.187583][T16135] ? __fget_files+0x3a0/0x420 [ 423.187602][T16135] ? __fget_files+0x2a/0x420 [ 423.187632][T16135] ksys_read+0x145/0x250 [ 423.187664][T16135] ? __pfx_ksys_read+0x10/0x10 [ 423.187698][T16135] ? do_syscall_64+0xbe/0xfa0 [ 423.187723][T16135] do_syscall_64+0xfa/0xfa0 [ 423.187741][T16135] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.187766][T16135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.187787][T16135] ? clear_bhb_loop+0x60/0xb0 [ 423.187812][T16135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.187836][T16135] RIP: 0033:0x7fb03d98e15c [ 423.187856][T16135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.187874][T16135] RSP: 002b:00007fb03e7e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.187897][T16135] RAX: ffffffffffffffda RBX: 00007fb03dbe5fa0 RCX: 00007fb03d98e15c [ 423.187912][T16135] RDX: 000000000000000f RSI: 00007fb03e7e80a0 RDI: 0000000000000004 [ 423.187925][T16135] RBP: 00007fb03e7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 423.187937][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.187949][T16135] R13: 00007fb03dbe6038 R14: 00007fb03dbe5fa0 R15: 00007fff73186348 [ 423.187986][T16135] [ 423.202793][ T5838] Bluetooth: hci5: command tx timeout [ 423.522486][T16149] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2822'. [ 424.607822][T16129] chnl_net:caif_netlink_parms(): no params data found [ 424.636741][T16197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.867862][T16197] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2827'. [ 425.105437][T16210] sch_tbf: peakrate 65535 is lower than or equals to rate 15348107221646557341 ! [ 425.167769][T16207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2829'. [ 425.183424][T16129] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.192121][T16129] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.206153][T16216] netlink: 'syz.4.2833': attribute type 39 has an invalid length. [ 425.216166][T16129] bridge_slave_0: entered allmulticast mode [ 425.225617][T16129] bridge_slave_0: entered promiscuous mode [ 425.244981][T16207] vlan2: entered promiscuous mode [ 425.311587][T16129] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.320173][T16129] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.334851][T16129] bridge_slave_1: entered allmulticast mode [ 425.354855][T16129] bridge_slave_1: entered promiscuous mode [ 425.391053][T16226] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 425.494104][T16129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.520720][T16129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.541349][ T5838] Bluetooth: hci5: command tx timeout [ 425.766478][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 425.874699][T16129] team0: Port device team_slave_0 added [ 425.899847][T16129] team0: Port device team_slave_1 added [ 425.909693][T16247] dummy0: left allmulticast mode [ 425.928342][T16247] bridge0: port 1(dummy0) entered disabled state [ 426.128686][T16254] IPVS: Error connecting to the multicast addr [ 426.129419][T16252] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 426.172618][T16252] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 426.204863][T16252] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 426.234112][T16253] IPVS: Error connecting to the multicast addr [ 426.251176][T16129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.282681][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.324608][T16129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.349365][T16129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.361862][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.429254][T16129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.598159][T16129] hsr_slave_0: entered promiscuous mode [ 426.610379][T16129] hsr_slave_1: entered promiscuous mode [ 426.617739][T16129] debugfs: 'hsr0' already exists in 'hsr' [ 426.623825][T16129] Cannot create hsr debugfs directory [ 426.655571][T16281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 426.676897][T16281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 426.925930][T16289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2854'. [ 426.965353][T16288] can: request_module (can-proto-0) failed. [ 426.972122][T16295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2855'. [ 427.035249][T16286] wg1 speed is unknown, defaulting to 1000 [ 427.111262][T16290] wg1 speed is unknown, defaulting to 1000 [ 427.121178][T16286] lo speed is unknown, defaulting to 1000 [ 427.328694][T16306] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2858'. [ 427.432395][T16290] lo speed is unknown, defaulting to 1000 [ 427.558406][T16129] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.603078][ T5838] Bluetooth: hci5: command tx timeout [ 427.650125][T16318] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 427.692462][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 427.748144][T16314] vlan0: entered promiscuous mode [ 427.771764][T16314] vlan0: entered allmulticast mode [ 427.777644][T16314] hsr_slave_1: entered allmulticast mode [ 427.847522][T16129] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.980068][T16129] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.108418][T16129] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.476736][T16344] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 428.491147][T16344] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 428.674591][T16349] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 428.792391][T16129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.797286][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2871'. [ 428.981586][T16129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.037825][T16129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.080542][T16129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.355575][T16129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.416975][T16129] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.445757][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.453033][ T9723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.506632][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.513912][ T9723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.532182][T16385] x_tables: duplicate underflow at hook 2 [ 429.533614][T16383] syzkaller0: entered promiscuous mode [ 429.575335][T16383] syzkaller0: entered allmulticast mode [ 429.682835][ T5838] Bluetooth: hci5: command tx timeout [ 429.839855][T16397] pim6reg1: entered promiscuous mode [ 429.852725][T16397] pim6reg1: entered allmulticast mode [ 429.998329][T16410] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20001 [ 430.118842][T16129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.199050][T16129] veth0_vlan: entered promiscuous mode [ 430.224625][T16129] veth1_vlan: entered promiscuous mode [ 430.293759][T16129] veth0_macvtap: entered promiscuous mode [ 430.309731][T16129] veth1_macvtap: entered promiscuous mode [ 430.325460][T16422] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 430.335202][T16129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.364431][T16129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.427721][ T9723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.441538][ T9723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.466358][ T9723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.503306][ T9723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.631031][T16434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2889'. [ 430.733577][ T7210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.741463][ T7210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.762945][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 430.797954][ T7210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.807750][ T7210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.838948][T16446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2892'. [ 430.865631][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 430.967918][T16452] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 431.171417][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2896'. [ 431.418599][T16478] syzkaller0: Caught tx_queue_len zero misconfig [ 431.481814][T16478] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 431.621125][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'. [ 431.630810][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2904'. [ 431.759738][T16502] veth0: entered promiscuous mode [ 431.854702][T16506] veth0: left promiscuous mode [ 432.717812][T16543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2916'. [ 432.875629][T16551] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2920'. [ 432.963641][T16558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2922'. [ 433.298946][T16555] infiniband syû: set down [ 433.303824][T16555] infiniband syû: added bond_slave_0 [ 433.353328][T16555] RDS/IB: syû: added [ 433.357443][T16555] smc: adding ib device syû with port count 1 [ 433.372436][T16555] smc: ib device syû port 1 has no pnetid [ 433.819208][T16593] IPVS: Scheduler module ip_vs_sip not found [ 434.298265][T16610] netlink: 'syz.1.2934': attribute type 6 has an invalid length. [ 434.776437][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 434.786408][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 434.795132][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 434.804866][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 434.824401][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.953541][T16614] wg1 speed is unknown, defaulting to 1000 [ 434.967618][T16614] lo speed is unknown, defaulting to 1000 [ 435.075694][T16620] tipc: Started in network mode [ 435.101133][T16620] tipc: Node identity 9a4fa3ed18b3, cluster identity 4711 [ 435.142482][T16620] tipc: Enabled bearer , priority 0 [ 435.150150][T16623] syzkaller0: entered promiscuous mode [ 435.160890][T16625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.168236][T16623] syzkaller0: entered allmulticast mode [ 435.215703][T16627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.278627][T16620] tipc: Resetting bearer [ 435.293914][T16619] tipc: Resetting bearer [ 435.326966][T16619] tipc: Disabling bearer [ 435.489047][ T9745] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.539629][ T9745] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.588613][ T7210] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.649067][ T7210] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.674500][T16641] __nla_validate_parse: 5 callbacks suppressed [ 435.674520][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 435.731650][T16644] netlink: 'syz.4.2943': attribute type 30 has an invalid length. [ 435.780261][T16645] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2944'. [ 435.794089][T16645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 435.916096][ T9731] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 436.529858][ T9731] bond0 (unregistering): Released all slaves [ 436.545071][ T9731] bond1 (unregistering): Released all slaves [ 436.659657][ T9731] bond2 (unregistering): Released all slaves [ 436.674270][ T9731] bond3 (unregistering): Released all slaves [ 436.689275][ T9731] bond4 (unregistering): Released all slaves [ 436.817699][ T9731] bond5 (unregistering): Released all slaves [ 436.883991][ T5838] Bluetooth: hci0: command tx timeout [ 437.243984][T16665] geneve3: entered promiscuous mode [ 437.255774][ T7190] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 58634 - 0 [ 437.271631][ T7190] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 58634 - 0 [ 437.289016][ T7190] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 58634 - 0 [ 437.337564][T16667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.345714][ T7190] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 58634 - 0 [ 437.392046][T16667] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 437.407920][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'. [ 437.443040][ T9735] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 437.563357][ T9735] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 437.834392][T16675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2954'. [ 438.437031][ T9731] hsr_slave_0: left promiscuous mode [ 438.455690][ T9731] hsr_slave_1: left promiscuous mode [ 438.561037][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 438.571276][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2960'. [ 438.792918][ T9731] pimreg (unregistering): left allmulticast mode [ 438.815230][ T9731] pim6reg99999999 (unregistering): left allmulticast mode [ 438.865000][T16711] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2964'. [ 438.963840][ T5838] Bluetooth: hci0: command tx timeout [ 439.773527][T16614] chnl_net:caif_netlink_parms(): no params data found [ 439.978062][T16722] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 440.012376][T16717] tipc: Enabled bearer , priority 0 [ 440.050954][T16717] syzkaller0: entered promiscuous mode [ 440.056865][T16717] syzkaller0: entered allmulticast mode [ 440.128070][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2970'. [ 440.162111][T16725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2966'. [ 440.328793][T16725] syzkaller0: MTU too low for tipc bearer [ 440.360303][T16725] tipc: Disabling bearer [ 440.378316][T16614] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.400320][T16614] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.457788][T16614] bridge_slave_0: entered allmulticast mode [ 440.499159][T16614] bridge_slave_0: entered promiscuous mode [ 440.591280][T16614] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.609230][T16614] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.627761][T16614] bridge_slave_1: entered allmulticast mode [ 440.639233][T16614] bridge_slave_1: entered promiscuous mode [ 440.683123][T16743] netlink: 'syz.2.2971': attribute type 16 has an invalid length. [ 440.691217][T16743] netlink: 'syz.2.2971': attribute type 17 has an invalid length. [ 440.727626][ T9731] IPVS: stop unused estimator thread 0... [ 440.783250][T16743] tipc: Resetting bearer [ 440.971543][T16614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.996212][ T1113] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.015306][ T1113] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.040016][T16614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.049554][ T5838] Bluetooth: hci0: command tx timeout [ 441.130996][ T1113] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.145739][T16759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.157484][ T1113] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.235341][T16614] team0: Port device team_slave_0 added [ 441.248181][T16614] team0: Port device team_slave_1 added [ 441.340164][T16614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.349110][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.395310][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 441.410267][T16614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.438359][T16614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.445969][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.480115][T16614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.578269][T16773] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 441.586493][T16766] wg1 speed is unknown, defaulting to 1000 [ 441.651090][T16773] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.677693][T16777] veth5: entered promiscuous mode [ 441.693728][T16773] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2979'. [ 441.699322][T16614] hsr_slave_0: entered promiscuous mode [ 441.704226][T16773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2979'. [ 441.711061][T16614] hsr_slave_1: entered promiscuous mode [ 441.727903][T16766] lo speed is unknown, defaulting to 1000 [ 442.003284][T16614] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.073135][T16614] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.154303][T16614] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.230422][T16614] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.680114][T16614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.702758][T16614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.730180][T16614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.759863][T16614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.077648][T16614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.122851][ T5838] Bluetooth: hci0: command tx timeout [ 443.136330][T16614] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.197172][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.204485][ T9745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.259317][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.266564][ T9745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.389022][T16806] vlan0: left allmulticast mode [ 443.397982][T16806] hsr_slave_1: left allmulticast mode [ 443.725778][T16822] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.2993'. [ 443.781757][T16822] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2993'. [ 443.886167][T16614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.980850][T16833] wg1 speed is unknown, defaulting to 1000 [ 444.051376][T16841] netlink: 'syz.3.2994': attribute type 1 has an invalid length. [ 444.185382][T16841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.227356][T16833] lo speed is unknown, defaulting to 1000 [ 444.343504][T16826] bond2: (slave veth3): Enslaving as an active interface with a down link [ 444.380814][T16846] bond2: (slave dummy0): making interface the new active one [ 444.401836][T16846] dummy0: entered promiscuous mode [ 444.428207][T16846] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 444.481356][T16614] veth0_vlan: entered promiscuous mode [ 444.529947][T16614] veth1_vlan: entered promiscuous mode [ 444.602836][T16614] veth0_macvtap: entered promiscuous mode [ 444.635857][T16614] veth1_macvtap: entered promiscuous mode [ 444.726902][T16614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.749072][T16614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.800637][ T9731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.862018][ T9731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.894351][ T9731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.909983][ T9731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.976470][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2999'. [ 445.112931][T16862] xt_hashlimit: max too large, truncated to 1048576 [ 445.129893][T16857] wg1 speed is unknown, defaulting to 1000 [ 445.154047][T16857] lo speed is unknown, defaulting to 1000 [ 445.254006][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 445.318834][ T7190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.328735][ T7190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.439245][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.466237][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.946988][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3004'. [ 446.262586][T16914] Bluetooth: MGMT ver 1.23 [ 446.269188][T16914] netlink: 'syz.2.3009': attribute type 2 has an invalid length. [ 446.533245][T16922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3013'. [ 446.587801][T16922] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 447.061845][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.112419][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.181619][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.215201][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.379759][T16942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3016'. [ 447.658049][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.669926][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.680559][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.688910][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.703213][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.847641][T16948] wg1 speed is unknown, defaulting to 1000 [ 447.870327][T16947] wg1 speed is unknown, defaulting to 1000 [ 447.888336][T16948] lo speed is unknown, defaulting to 1000 [ 448.140955][T16957] netlink: 'syz.3.3020': attribute type 2 has an invalid length. [ 448.234317][T16959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3021'. [ 448.256580][T16947] lo speed is unknown, defaulting to 1000 [ 448.308730][T16965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3021'. [ 448.477091][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 448.490216][T16973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3025'. [ 448.552163][T16970] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3023'. [ 448.654829][T16978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.189406][T16995] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3031'. [ 449.214288][T16996] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3031'. [ 449.489232][T17004] netlink: 'syz.1.3033': attribute type 5 has an invalid length. [ 449.527166][T16948] chnl_net:caif_netlink_parms(): no params data found [ 449.654481][T17010] netlink: 'syz.3.3035': attribute type 2 has an invalid length. [ 449.663289][T17010] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3035'. [ 449.844552][ T5838] Bluetooth: hci2: command tx timeout [ 450.065436][T16948] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.083806][T16948] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.091147][T16948] bridge_slave_0: entered allmulticast mode [ 450.128399][T16948] bridge_slave_0: entered promiscuous mode [ 450.154932][T16948] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.182425][T16948] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.201812][T16948] bridge_slave_1: entered allmulticast mode [ 450.223844][T16948] bridge_slave_1: entered promiscuous mode [ 450.358303][T17036] netlink: 'syz.4.3041': attribute type 10 has an invalid length. [ 450.365916][T16948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.386044][T16948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.398746][T17036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.408753][T17036] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 450.567594][T16948] team0: Port device team_slave_0 added [ 450.588356][T16948] team0: Port device team_slave_1 added [ 450.609909][T17046] sctp: [Deprecated]: syz.4.3045 (pid 17046) Use of int in max_burst socket option. [ 450.609909][T17046] Use struct sctp_assoc_value instead [ 450.633741][T17046] sctp: [Deprecated]: syz.4.3045 (pid 17046) Use of int in max_burst socket option. [ 450.633741][T17046] Use struct sctp_assoc_value instead [ 450.658878][T17043] netlink: 'syz.0.3044': attribute type 29 has an invalid length. [ 450.668168][T16948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.685022][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.714896][T16948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.726895][T17043] netlink: 'syz.0.3044': attribute type 29 has an invalid length. [ 450.735685][T17044] netlink: 'syz.0.3044': attribute type 29 has an invalid length. [ 450.749406][T16948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.757897][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.786084][T16948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.798674][T17044] netlink: 'syz.0.3044': attribute type 29 has an invalid length. [ 450.930810][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.938725][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.052457][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.068851][T17053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.303922][ T7190] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.314595][ T7190] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.326820][ T7190] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.393751][ T7190] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.405283][T17068] tipc: Enabling of bearer rejected, failed to enable media [ 451.427757][T16948] hsr_slave_0: entered promiscuous mode [ 451.464628][T16948] hsr_slave_1: entered promiscuous mode [ 451.471234][T17071] validate_nla: 4 callbacks suppressed [ 451.471252][T17071] netlink: 'syz.0.3051': attribute type 63 has an invalid length. [ 451.490739][T16948] debugfs: 'hsr0' already exists in 'hsr' [ 451.496651][T16948] Cannot create hsr debugfs directory [ 451.821923][T17089] netlink: 'syz.4.3054': attribute type 1 has an invalid length. [ 451.873724][T17090] __nla_validate_parse: 2 callbacks suppressed [ 451.873755][T17090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3054'. [ 451.923129][ T5838] Bluetooth: hci2: command tx timeout [ 452.165630][T17102] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 452.218411][T17102] bond3: entered promiscuous mode [ 452.226938][T17102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.260635][T17103] bond3: (slave veth5): making interface the new active one [ 452.269305][T17103] veth5: entered promiscuous mode [ 452.276092][T17103] bond3: (slave veth5): Enslaving as an active interface with an up link [ 452.550795][T17121] IPVS: length: 32 != 24 [ 452.710411][T17128] xt_CT: No such helper "netbios-ns" [ 452.731107][T17124] wg1 speed is unknown, defaulting to 1000 [ 452.762903][T17124] lo speed is unknown, defaulting to 1000 [ 453.102621][T16948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.132406][T16948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.213083][T16948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.276409][T16948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.394626][T17149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'. [ 453.429291][T17149] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3072'. [ 453.595569][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3073'. [ 453.697372][T16948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.741007][T16948] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.785227][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.792525][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.825003][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.832690][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.003659][ T5838] Bluetooth: hci2: command tx timeout [ 454.213701][T17174] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3076'. [ 454.242777][T17176] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 454.339787][T17182] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 454.435979][T16948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.537175][T16948] veth0_vlan: entered promiscuous mode [ 454.554605][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3079'. [ 454.575453][T16948] veth1_vlan: entered promiscuous mode [ 454.630652][T16948] veth0_macvtap: entered promiscuous mode [ 454.643314][T16948] veth1_macvtap: entered promiscuous mode [ 454.691045][T16948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.723749][T16948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.733364][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'. [ 454.744756][T17195] netlink: 23 bytes leftover after parsing attributes in process `syz.0.3082'. [ 454.781042][ T9735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.791317][ T9735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.816600][ T9735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.832406][ T9735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.971840][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.002602][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.094396][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.111520][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.190028][T17205] tipc: Enabled bearer , priority 0 [ 455.198117][T17205] syzkaller0: entered promiscuous mode [ 455.205508][T17205] syzkaller0: entered allmulticast mode [ 455.248135][T17205] tipc: Resetting bearer [ 455.260378][T17204] tipc: Resetting bearer [ 455.279358][T17204] tipc: Disabling bearer [ 455.310178][T17212] netlink: 'syz.2.3087': attribute type 9 has an invalid length. [ 455.318738][T17212] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3087'. [ 455.576280][T17217] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3090'. [ 455.985477][T17226] bond4: entered promiscuous mode [ 456.008959][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.020467][T17226] bond4: entered allmulticast mode [ 456.026523][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.036901][T17226] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.045864][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.082442][ T5840] Bluetooth: hci2: command tx timeout [ 456.088640][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.105568][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.177448][T17235] wg1 speed is unknown, defaulting to 1000 [ 456.188526][T17235] lo speed is unknown, defaulting to 1000 [ 456.724394][T17260] netlink: 'syz.3.3102': attribute type 9 has an invalid length. [ 456.770587][T17263] delete_channel: no stack [ 457.029296][T17277] __nla_validate_parse: 3 callbacks suppressed [ 457.029316][T17277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3107'. [ 457.115003][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.131665][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.143789][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.167518][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.183941][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.194506][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.214299][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.243233][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.252740][T17280] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 457.447062][T17235] chnl_net:caif_netlink_parms(): no params data found [ 457.552835][T17302] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3115'. [ 457.587820][T17235] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.595885][T17235] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.605261][T17235] bridge_slave_0: entered allmulticast mode [ 457.613818][T17235] bridge_slave_0: entered promiscuous mode [ 457.624244][T17235] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.631659][T17235] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.639158][T17235] bridge_slave_1: entered allmulticast mode [ 457.647287][T17235] bridge_slave_1: entered promiscuous mode [ 457.661307][T17305] team0: Device gre1 is of different type [ 457.706816][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.722974][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.772086][T17235] team0: Port device team_slave_0 added [ 457.806808][T17235] team0: Port device team_slave_1 added [ 457.889185][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.910781][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.978756][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.000196][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.018219][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.074204][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.166238][ T5840] Bluetooth: hci4: command tx timeout [ 458.252536][T17235] hsr_slave_0: entered promiscuous mode [ 458.259520][T17235] hsr_slave_1: entered promiscuous mode [ 458.266242][T17235] debugfs: 'hsr0' already exists in 'hsr' [ 458.272014][T17235] Cannot create hsr debugfs directory [ 458.578764][T17331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.749232][T17353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3127'. [ 458.865933][T17235] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.897681][T17235] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 58634 - 0 [ 458.989649][T17355] wg1 speed is unknown, defaulting to 1000 [ 459.010202][T17355] lo speed is unknown, defaulting to 1000 [ 459.064993][T17235] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.084960][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 459.095622][T17235] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 58634 - 0 [ 459.124878][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 459.208140][T17235] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.365452][T17235] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 58634 - 0 [ 459.446627][T17235] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.470181][T17235] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 58634 - 0 [ 459.571691][T17366] xt_hashlimit: max too large, truncated to 1048576 [ 459.747471][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3132'. [ 459.872486][T17235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.902954][T17235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 459.930846][T17375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3134'. [ 459.942548][T17235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 459.964752][T17235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.050145][T17375] nbd: socks must be embedded in a SOCK_ITEM attr [ 460.098322][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 460.108583][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3136'. [ 460.208674][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 460.243127][ T5838] Bluetooth: hci4: command tx timeout [ 460.678624][T17398] ip6gre1: entered promiscuous mode [ 460.686752][T17398] ip6gre1: entered allmulticast mode [ 460.801613][T17235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.829851][T17403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.884173][T17235] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.912063][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.919342][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.956866][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.964125][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.628271][T17235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.783220][T17429] bond5: option lacp_rate: invalid value (255) [ 461.797673][T17429] bond5 (unregistering): Released all slaves [ 462.072065][T17453] __nla_validate_parse: 2 callbacks suppressed [ 462.072086][T17453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3150'. [ 462.322888][ T5838] Bluetooth: hci4: command 0x040f tx timeout [ 462.369580][T17235] veth0_vlan: entered promiscuous mode [ 462.391175][T17235] veth1_vlan: entered promiscuous mode [ 462.458629][T17235] veth0_macvtap: entered promiscuous mode [ 462.492657][T17235] veth1_macvtap: entered promiscuous mode [ 462.549298][T17235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.574892][T17235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.600275][ T9735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.637391][ T9735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.660663][ T9735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.707288][ T9735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.994382][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.014174][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.115788][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.141648][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.459903][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3088'. [ 463.554977][T17516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3088'. [ 463.674857][T17519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.830607][T17526] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3170'. [ 463.932847][T17526] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 464.315789][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 464.405939][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 464.830925][T17566] pimreg3: entered allmulticast mode [ 464.997804][T17570] wg1 speed is unknown, defaulting to 1000 [ 465.059122][T17570] lo speed is unknown, defaulting to 1000 [ 465.097266][ T44] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.290458][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.309169][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.320493][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.329114][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.338480][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.396822][ T44] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.499109][ T44] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.570817][T17579] wg1 speed is unknown, defaulting to 1000 [ 465.596191][T17579] lo speed is unknown, defaulting to 1000 [ 465.670799][ T44] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.799292][T17596] netlink: 'syz.4.3188': attribute type 11 has an invalid length. [ 465.813214][T17595] syzkaller0: entered promiscuous mode [ 465.827346][T17595] syzkaller0: entered allmulticast mode [ 465.832324][T17596] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3188'. [ 465.911877][T17601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.919500][T17601] IPv6: NLM_F_CREATE should be set when creating new route [ 465.926834][T17601] IPv6: NLM_F_CREATE should be set when creating new route [ 466.001837][ T7205] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.028081][ T9735] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.068604][ T9731] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.116807][ T7205] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.254525][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 466.399743][ T44] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 466.409347][ T44] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 62:39:e3:06:26:ee - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 466.429880][ T44] bond3 (unregistering): (slave erspan0): making interface the new active one [ 466.483282][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 466.632015][ T44] bond3 (unregistering): (slave erspan0): Releasing active interface [ 466.729032][ T44] geneve0 (unregistering): left allmulticast mode [ 466.741771][ T44] team0: Port device geneve0 removed [ 466.745137][ T43] IPVS: starting estimator thread 0... [ 466.842974][T17614] IPVS: using max 26 ests per chain, 62400 per kthread [ 467.209612][ T44] bond0 (unregistering): left allmulticast mode [ 467.216151][ T44] batadv_slave_0: left allmulticast mode [ 467.223880][ T44] team0: Port device bond0 removed [ 467.231748][ T44] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 467.241798][ T44] batadv_slave_0: left promiscuous mode [ 467.250008][ T44] bond0 (unregistering): Released all slaves [ 467.376998][ T5840] Bluetooth: hci1: command tx timeout [ 467.393390][ T44] bond1 (unregistering): Released all slaves [ 467.409007][ T44] bond2 (unregistering): Released all slaves [ 467.538370][ T44] bond3 (unregistering): (slave veth7): Releasing active interface [ 467.551509][ T44] bond3 (unregistering): Released all slaves [ 467.673301][ T44] bond4 (unregistering): Released all slaves [ 467.688552][ T44] bond5 (unregistering): Released all slaves [ 467.703342][ T44] bond6 (unregistering): Released all slaves [ 467.824976][ T44] bond7 (unregistering): Released all slaves [ 467.840592][ T44] bond8 (unregistering): (slave bond9): Releasing backup interface [ 467.855152][ T44] bond8 (unregistering): Released all slaves [ 467.982799][ T44] bond9 (unregistering): Released all slaves [ 468.106042][ T44] bond10 (unregistering): Released all slaves [ 468.216006][ T44] bond11 (unregistering): Released all slaves [ 468.231564][ T44] bond12 (unregistering): Released all slaves [ 468.368491][ T44] bond13 (unregistering): (slave batadv1): Releasing active interface [ 468.380571][ T44] bond13 (unregistering): (slave batadv2): Releasing active interface [ 468.394082][ T44] bond13 (unregistering): Released all slaves [ 468.527884][ T44] bond14 (unregistering): Released all slaves [ 468.793439][T17622] validate_nla: 26 callbacks suppressed [ 468.793460][T17622] netlink: 'syz.2.3195': attribute type 1 has an invalid length. [ 469.220322][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 469.442911][T13793] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 469.454898][T13793] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 469.463425][T13793] CPU: 0 UID: 0 PID: 13793 Comm: kworker/0:30 Not tainted syzkaller #0 PREEMPT(full) [ 469.472976][T13793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.483132][T13793] Workqueue: events l2cap_info_timeout [ 469.488619][T13793] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 469.494519][T13793] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 55 24 09 cc 66 66 66 66 66 66 2e [ 469.514136][T13793] RSP: 0018:ffffc9000b64f788 EFLAGS: 00010202 [ 469.520215][T13793] RAX: dffffc0000000000 RBX: ffffffff891f39c8 RCX: 3a70f39374c75500 [ 469.528196][T13793] RDX: 0000000000000000 RSI: ffffffff891f39c8 RDI: 000000000000004c [ 469.536291][T13793] RBP: ffffffff8a507bd5 R08: 0000000000000001 R09: 0000000000000000 [ 469.544271][T13793] R10: dffffc0000000000 R11: ffffffff8a507b90 R12: 0000000000000000 [ 469.552251][T13793] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 469.560227][T13793] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 469.569167][T13793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.575757][T13793] CR2: 00007f4d353b42f8 CR3: 0000000077020000 CR4: 00000000003526f0 [ 469.583771][T13793] Call Trace: [ 469.587055][T13793] [ 469.589995][T13793] __kasan_check_byte+0x12/0x40 [ 469.594863][T13793] lock_acquire+0x8d/0x360 [ 469.599290][T13793] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.604500][T13793] ? __cancel_work+0x254/0x2e0 [ 469.609283][T13793] lock_sock_nested+0x48/0x100 [ 469.614075][T13793] ? l2cap_sock_ready_cb+0x45/0x140 [ 469.619285][T13793] l2cap_sock_ready_cb+0x45/0x140 [ 469.624351][T13793] l2cap_conn_start+0x76d/0xe50 [ 469.629217][T13793] ? __pfx_l2cap_conn_start+0x10/0x10 [ 469.634604][T13793] ? __lock_acquire+0xab9/0xd20 [ 469.639550][T13793] ? __pfx___mutex_lock+0x10/0x10 [ 469.644579][T13793] ? process_scheduled_works+0x9ef/0x17b0 [ 469.650307][T13793] l2cap_info_timeout+0x68/0xa0 [ 469.655207][T13793] ? process_scheduled_works+0x9ef/0x17b0 [ 469.661111][T13793] process_scheduled_works+0xae1/0x17b0 [ 469.666688][T13793] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.672687][T13793] worker_thread+0x8a0/0xda0 [ 469.677286][T13793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.683726][T13793] ? __kthread_parkme+0x7b/0x200 [ 469.688962][T13793] kthread+0x711/0x8a0 [ 469.693056][T13793] ? __pfx_worker_thread+0x10/0x10 [ 469.698174][T13793] ? __pfx_kthread+0x10/0x10 [ 469.702872][T13793] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.708083][T13793] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.713284][T13793] ? __pfx_kthread+0x10/0x10 [ 469.717885][T13793] ret_from_fork+0x4bc/0x870 [ 469.722488][T13793] ? __pfx_ret_from_fork+0x10/0x10 [ 469.727697][T13793] ? __switch_to_asm+0x39/0x70 [ 469.732552][T13793] ? __switch_to_asm+0x33/0x70 [ 469.737322][T13793] ? __pfx_kthread+0x10/0x10 [ 469.741930][T13793] ret_from_fork_asm+0x1a/0x30 [ 469.746705][T13793] [ 469.749749][T13793] Modules linked in: [ 469.754486][T13793] ---[ end trace 0000000000000000 ]--- [ 469.792690][ T5840] Bluetooth: hci1: command tx timeout [ 469.803352][T13793] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 469.809316][T13793] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 55 24 09 cc 66 66 66 66 66 66 2e [ 469.829125][T13793] RSP: 0018:ffffc9000b64f788 EFLAGS: 00010202 [ 469.835291][T13793] RAX: dffffc0000000000 RBX: ffffffff891f39c8 RCX: 3a70f39374c75500 [ 469.843371][T13793] RDX: 0000000000000000 RSI: ffffffff891f39c8 RDI: 000000000000004c [ 469.851386][T13793] RBP: ffffffff8a507bd5 R08: 0000000000000001 R09: 0000000000000000 [ 469.859469][T13793] R10: dffffc0000000000 R11: ffffffff8a507b90 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 469.932377][T13793] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 469.940515][T13793] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 469.956537][T17651] openvswitch: netlink: Message has 4 unknown bytes. [ 469.970561][T17651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.980321][T13793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.015062][T13793] CR2: 00007f4d35126830 CR3: 00000000667e0000 CR4: 00000000003526f0 [ 470.042981][T13793] Kernel panic - not syncing: Fatal exception [ 470.065454][T13793] Kernel Offset: disabled [ 470.069824][T13793] Rebooting in 86400 seconds..