last executing test programs: 7.30899855s ago: executing program 2 (id=2752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400003000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240200000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.291845042s ago: executing program 2 (id=2753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x800) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="500000001800010000000000080000000a373800", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000008000200020000000800020005000000140001"], 0x50}}, 0x4904) 7.22539267s ago: executing program 2 (id=2754): syz_emit_ethernet(0x132, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)={0x10, 0x2e, 0x1, 0x3}, 0x10}, {0x0}], 0x2}, 0x20000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) close(r4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, r7, 0x34, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 6.284430347s ago: executing program 2 (id=2767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)=':', 0x1) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000109030000000000000000000300044c0c0004800800014000007fff0c000480080001400000000208000640000000000900cc001cde6bb008e70000"], 0x40}}, 0x901) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a311000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060500000000000000000005000004050001000700badf9b13e28ddfe0831588d12a0a3125b0"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x70, &(0x7f0000000100)}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000000)={'vlan0\x00', 0x5}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000002c000000000000feffffff850000017b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff0000000000000407010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r10, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) 5.99021486s ago: executing program 2 (id=2772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r0, @ANYBLOB="000001000000000000004531c27a21683d7b7b21000000000002000000000000000017774055682f1e0b2621b607aefce32358df809b037c9f69f33ab24f014e2815805d321d36c26d154ddede75e28458329f586d7dc9ed50d1d2a14f44c3791e352a3fe5eb457fb8b985f8dbe947a2ce88f290c77060cda8198c98b88a6841bdd202b5d658b70e88e194ee1db12fe3920fe09a4404d5033e07b9f40280e4682c7e9e4ceec3ac96ac66c99f5953609ed7212b6121d9232c7b72fdc681485cd1262f63e3c7122589b88135272b671b3ac3f517546d070a39dd61ce8b40665e3e02476a4b0096a37e96ba29d4474f", @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000600"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x8, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x7, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x4, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x9, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="1b00000000000000fdffffdf0180000020040400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009350b72a54ead7b3c42ec07d6f9272ef61cbaa25d558302b9dbfa83fc2a1cf9fe08c8c9130bab6da46549ed8c40c456f24c4ad2ef93ce5926e6dc3ce1a111739c6da4bcae7d0bcbc1a03de37f074b88267ca7102e12fb364c37b4d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRESHEX, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0xb0e606523710fe60}, 0xffffffad) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000069114e00000000008510000002000000850000a28a00000095004800000000009500a50500000000b620e8240f94720a0461f9c71816fe95dc5fdbac4940a761acf9a8d164a01471f49548bf1bfefde960cd6206718274263f12525daf46de051323f281154b56ad1ad102964c3a5ab48b874fd2a010c13d39114b1cdd75cc7563cb1a91bcf76005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f0000000300)=0x5, 0x4) listen(r8, 0x7) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000d80)=ANY=[@ANYBLOB="016f0800010000000300200000004500002800000000008490783fffffffac1414aa00008000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"/338], 0x36) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x5, 0x0, 0x3}}, 0x1c}}, 0x0) 5.643395581s ago: executing program 2 (id=2776): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000000002010400000000000000000a00000004000180440003800500028005000100890000002c00018014000300fe80000000e4000000000000000000aa14000400fe88000000000000000000000000040106000340000100003c0002802c00018014000300fe8000000000000000000000000000bb1400040000000000000000000000ffffe00000020c000280050001"], 0x98}, 0x1, 0x0, 0x0, 0x20008804}, 0x20000004) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x74, &(0x7f0000001100)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xdf}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, @in6={0xa, 0x4e23, 0x8000, @empty, 0xee3}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r5, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) 3.933596985s ago: executing program 1 (id=2789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000300)=0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800001, 0x12, r1, 0x0) writev(r1, &(0x7f0000003500)=[{&(0x7f00000035c0)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758", 0x20}], 0x1) unshare(0x20400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r2, 0x100000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000680)) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd", 0x8d, 0x0, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) 2.727197551s ago: executing program 0 (id=2797): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff00"], 0xc8}}, 0x0) (async) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff00"], 0xc8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)={r4, r4}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000)=0xd, 0x4) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) shutdown(r3, 0x1) 2.55331144s ago: executing program 3 (id=2798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@upd={0xe0, 0x12, 0x1, 0x70bd2c, 0x25dfdbff, {{'xts-serpent-avx2\x00'}, '\x00', '\x00', 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0xfa15765c863c5ca6}, 0x20000880) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0xcd}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x3, @remote, 0xea03}, @in6={0xa, 0x4e22, 0x0, @mcast1}, @in6={0xa, 0x4e20, 0xb3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x4}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @empty}], 0xcc) syz_emit_ethernet(0x8e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a800008100000088a8450000780000000000119078000000000000000003004e20006490780200000004000000030000007fe77f731db8aba73f3509d6e7118104224a45fe99a81ac6252b1170535ac6fbc196168f72696bf9ad5b6dc51a703690aa72f4bd15c2580cdc3d66fdf23cb5a3a02ad2bc4f0c9415f88c3599baddc6ee"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000000c00350000000000000000000c002e"], 0x83}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffff9, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x9, 0xa}, {0xfffa, 0xfff1}, {0xfffd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x1000) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x40c4) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000004000000000020000061107d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.276026751s ago: executing program 3 (id=2799): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) r2 = socket$inet(0x2, 0x4, 0x1762d75a) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x5a84, 0x800d, 0x3, 0x2, r3}, &(0x7f00000000c0)=0x10) (async) getpid() sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r4}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) close(0x3) 2.231828165s ago: executing program 3 (id=2801): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x84, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x3c, 0x11, 0x0, 0x0, {{0xf}, {0x4}, {0xa, 0x6, "6784c5cdcfb4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x84}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x3, 0x23, 0x1c, 0x65, 0x0, 0x5, 0x1d, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x3, 0xed}, @lsrr={0x83, 0x3, 0x81}]}}}}}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.060881804s ago: executing program 1 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008004) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x4c, r9, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x97f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x84) getsockopt$inet_udp_int(r5, 0x11, 0x64, 0x0, &(0x7f0000000080)) close(r4) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000340)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) sendmsg$netlink(r11, &(0x7f0000001d00)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000440)={0xf8, 0x42, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@empty}, @nested={0xde, 0x126, 0x0, 0x1, [@generic="1277eb9fe7a49d79a4f02af5f34c1faa624b920b1a172583f4150af13a03372e479ef0e46735823fc31176dae36c9e94279d71432166930c3316dc47040f8465fb75e416b364", @nested={0x4, 0x76}, @typed={0x8, 0x80, 0x0, 0x0, @pid=r12}, @generic="c79956aa58fe69dd63d146fbd77c450d28dc21bcc7f50e03ba5e06f6fca7e33e09591175633d76a80733a99c49d0d6b0c9ab40055c4fe7f28426caa300c85597870e38abaabe27a3054964952ff06d2d5b80351a9e646bda3cb911add26d7b21b2af071f9d0c8a80b18f2f01f7809001c153465771b4c75dd91d5a63a654dcb9ba5aa506de35bd6a"]}]}, 0xf8}, {&(0x7f0000000780)={0x238, 0x30, 0x400, 0x70bd27, 0x25dfdbff, "", [@generic="cd63da4e43e11aa81dfc659d03fdde3210c6da1e4f6e89efe7b14314a8657b377fc0101d8f671f86c136a67d7b0eb743db2446720d79f2b6197a9cc59b61dfa0f6131c9e2f3a4d608afafa42436359bfa149db4c130bc1198a3aaef3e8ee50a6c1153a28e1ed8be733ef0c4071197de9e89dc735d14e209a6b7f3f6967560080cabb15c209f7a7b7ffdd9df704840a38cca22a8acc8b9da9110a0378b4abe4adf1006c0d3aa2ce7b49efe6685f7114c5cd994ae8fbdc4729e92772e36e01f9be6a9d944d407aa51ab8df362797e04cf148ae989c893313e037457db6b82727c7c308e6bf9cf1d513eb19426e464fee7c", @typed={0x8, 0x90, 0x0, 0x0, @uid=r13}, @generic="32f98f75f1cdd295d9ac7c68fa3f062e3b5d11c9ca3376d114dcb190083b909725ead6447c709eab27062b1f7321a64fbf052e051a846a38db849020080feb4fe4afac1c06155969e64dd5ac3a15504a3908b77b1f15286a2d13b737f01d947f81b385a4332da70525b000c5e4cc4456b31c105095f2ce8273b64ac852ac86044d6b0d1b42c267e910814a219b69346cc75d7fe06889bfcab807d847c0f4d4d4f979", @generic="c3cb30b7109c49de5810d8fd04f1de35759ecd07efba1280d257998b1a7ef656de2fca8ae83b188449663573183c862d6f3adff1cbc78b5d7e46ab2a80bea941e5748fb484ab7b6c003abe7099bfe139fe7af773f7258dcb", @nested={0x34, 0x96, 0x0, 0x1, [@generic="ff9ef9131843520ae8896b433c4ea6eff03c53d044b4fa60d4413b4687345b05f8ac25c5c06bdac27503d81b", @nested={0x4, 0xdb}]}]}, 0x238}, {&(0x7f00000009c0)={0x12f8, 0x38, 0x10, 0x70bd28, 0x25dfdbfe, "", [@generic="fb8fc77ba4a1add4c8557f84b30543ea2b21ae3c5e4800d54638f245370dcc96ac163054ae2369ca676681e7d365d765085d8526c0a8b2cb266eae74f58551982dd350781071791d1270a2e260bc2c69df88cadd491aa0ad647fb0a63173698330489dcc9e4ed2abd0d489caff518bf81bed5b623902578b66a350d504df852340ffe11a1e8ce3cb3498982015267370a412a0578954811df56368dd82e859c031c4a70073b5de94b9db0ce3331ee1bbdfc776bc9d1e484c91b0", @nested={0xd5, 0x12d, 0x0, 0x1, [@typed={0x4, 0xa4}, @generic="844a8183abf8a4ffa658e4f2d0fd59935661ed6ca720c991163e93c693fa957f8312a5bb3028fb26ef23ff86779dde8b9fece5175f0ef0d0b8bf364bea842e06989080533ddc03e517aa9edc87669cc05a636574204868df42053d3bd2b13180692f32b48ad37752d0cb8311f46b1db7ee0d0d7d5e063cbef9aefe3cccb843fcbba62329b10d2f0421631441d19c0d2fcf02f91a659230c307594d83ba182216203f55999afe7c5b8e176a5fa63ade554473bb4d7826cfd7bd9c625e658ccabfacd326642b8c296d6d1a8ff9bb"]}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x37, 0x0, 0x0, @uid=r14}, @typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@remote}, @nested={0x10f, 0xc9, 0x0, 0x1, [@generic="e212941864058cd2ffad4d496834bc", @generic="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"]}, @typed={0x23, 0xf1, 0x0, 0x0, @binary="b1ac5ef2e0179d74abcc8702da2c8d644fcc20ee34c74452058280a0eb8e65"}]}, 0x12f8}], 0x3, &(0x7f0000001cc0)=[@rights={{0x24, 0x1, 0x1, [r5, r2, r11, r2, r10]}}], 0x28, 0x20000840}, 0xc010) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r15, {0x0, 0xc}, {0xd, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0xac7, 0x5, 0x1, 0x3ff, 0xff, 0x4, 0x6, 0xf}}}}]}, 0x58}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.857489733s ago: executing program 4 (id=2804): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000d33a02c75d3bcd5de82df8d6a270ac9b5a3d2cd3ae9a3549acf01480826b45014fb75282b95a89f942a95485f8597e46029dfcbc1dc5e8075a9fec0a8dbc1cf0430da976fc2c958424e897a88e537be3d2581f4891cd0e55fb2cf7bcd2a449f493b1f910f11800c9b0ac2496a928c3fb7fbe7cdacb5943ac37ed5d8d2f5332b2f35a0085c1190d5ab2cf3e0180fe946d753a726712d1b8ad10df9e94639ff8ebdefaff175c5402e5544402c21f5ebb04976b7306e14df4b84403bdd621fbcee22c80a4b5602d76168a2f5f84c694a7835dc785c4131c980bee96590ee926beb8f81d995ddb958e9ae56cf0286f2364b41414fad2b399b52f6b777ad3a523b5b328c00f79a1a957d8cde88524af290adbd21ec600eff39274c7bc5dbacf6aa295bd972468c851d10e1ef5a87d79ad3f12561de7976ff4c6cbc4097f058160309fbf3dedd7121e7990fb9df33098562118ca298325d654401a3ee8409050549e6ffe3582380f47a102531d7c2944a1bbd430065523132c68e755864d8954843c19c246a462b3752cc28af230430574e06e5fd851c6a7c50ea115e9fefaf69859fc3d87d850b5", @ANYRES16=r2, @ANYBLOB="0100000000000000000006000009"], 0xffffffffffffffb0}, 0x2, 0x34005, 0x0, 0x54}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000740)={0x98, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}]}, 0x44}}, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x110, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0xff, 0xff000000, 0xffffff00], [0x46b6aa5b327aca38, 0xff, 0xff], 'ipvlan1\x00', 'pimreg\x00', {}, {0xff}, 0xa0, 0x2, 0x2, 0x11}, 0x0, 0xa8, 0x110, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x10, 0xfff, 0x8, 'snmp\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x5, "3f323b29147966fc31060000008bc7fbfda42ece1659b512a4eabff02563"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.745227758s ago: executing program 0 (id=2805): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff000000000900000018100000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x1900, 0x15287}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.648616061s ago: executing program 1 (id=2806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, 0x0, 0x40851) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 1.647767707s ago: executing program 3 (id=2807): ioctl(0xffffffffffffffff, 0xfffffff1, &(0x7f0000000000)="1424b5ab4e6db2ee652a5d4b6fd5217ee4dd304f43da6fd27d160228e82d3fc8d52c22f48cc7596ac4929c06e8991ff5d5643be0cd329adffe77e75cd33f2bdbfd6fe3764e3ae8d6351cfd8a1a485fe5c8a548a569436e94f59ebc0ae27cd98edcaf28260780462a6327d4f1a80625077bb5ab4d88d1dc36ee8e517887e85ad9eae907f0af1123a89ff09397e88f81246089acae59a228bde202d2263d60b55bd49b5d62e9a1031bec669e648edff950d4f68566d5c23e436a99803be6a00ac4cc2f4da028bbb0042a96308cd25145e7") r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @short={0x2, 0xffff}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x40}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xef4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c810}, 0x5814) r4 = socket$netlink(0x10, 0x3, 0x1d) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff47}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000c00}, 0x8000080) r5 = accept$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) sendto$unix(r5, &(0x7f0000000480)="4ce9bcaafd5b13d0c74497de0cab5d7ce37d6b001d0489f175cfa358115c704f529043e77f095c63cedbc00e269689312d76e19b837224b3465aa0d5c31c324f89ba699fe80351d2554d46f07a0b4af69adc609f90eb6654dcdf9bcaa8553f5bd55aeebbb5ece2445e086a5cd75d924da93a2ad46e9850dea63dd85c199da5386746b76acd6c42d85cd21040db80fc45ad46d90e9001fe7339e023bd1f992b476c152cfc1c96c92f5c5f2e800d952f91229398db695bf90656953488f3e370e9d8c223eeec3226678108edc1e164f2308b", 0xd1, 0x0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setsockopt(r0, 0x5, 0x3, &(0x7f0000000600)="f22357dc6e8d985c98cde44c26a684824162c08e14cc12dfefac87391ab5893a49ee7d1c145dbdad1fb16185809d8d62b107528c772ff272fd4c3bf2807be5d863254346e774fd63ef085ca1466e5a528fbc1529859c283b59103351362d992a1d7f5a8e29c394121ade467421bc2e0177c4e8c65d86bd7cc3e4b18db1ef441f699bb89ed350d675c5e3ae9627", 0x8d) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000700)=@raw=[@jmp={0x5, 0x0, 0xd, 0x9, 0x1, 0x7ffffffffffffffa, 0xfffffffffffffff5}, @call={0x85, 0x0, 0x0, 0xb5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}], &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x1, 0x8000, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000800)=[{0x4, 0x5, 0x9, 0x8}, {0x2, 0x5, 0x8, 0x2}, {0x4, 0x5, 0x10, 0xc}, {0x4, 0x2, 0x10, 0x9}, {0x2, 0x4, 0x8, 0xb}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r7, 0x0, 0x34, 0x70, &(0x7f0000000940)="8b33cbffefed64c270d528e17512d182291cf64972c6563c7514ebc2c195bf09b43777ddf7802e738cc907639d9a4b87d7539b1a", &(0x7f0000000980)=""/112, 0x0, 0x0, 0x1a, 0x15, &(0x7f0000000a00)="c8d0005a52b9466f9ad0bc011dc1dfde9e0399c122ce4c7fd0ba", &(0x7f0000000a40)="94d01de1054624d83849edca6fd751cf93807ab37a", 0x7, 0x0, 0xe}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x12, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffb9ee, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@exit, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x2, 0x1, 0x9, 0x200}, 0x10, 0x0, r7, 0x3, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x0, 0x4, 0xa, 0x2}, {0x1, 0x3, 0x0, 0x8}, {0x4, 0x3, 0x6, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000b00)='bcache_btree_insert_key\x00', r8, 0x0, 0x9}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = accept4$rose(0xffffffffffffffff, &(0x7f0000000e40)=@short={0xb, @remote, @netrom, 0x1, @netrom}, &(0x7f0000000e80)=0x1c, 0x800) sendto$rose(r9, &(0x7f0000000ec0)="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", 0x1000, 0x804, &(0x7f0000001ec0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000001f00)={0x0, 0x0, "eb1488b6160ece544544667a70e96fcd3c5f132d17f60105b5e8ff245030674adc785723a8aa57a85926c055dcf0549a743d482a9ea5bc41a86b50c678f5a2f6e9d83335ddd8d849818812d2d1be02baa95e0bbd134ac6c1d70f7868d8dd8369e193c02b8fd3d1d91b3a15d1e43cf3a2fc02da3080cf2f55eccc21d5a525f584805b465639a002628042e03287d1b34b812ca8202d753ca4e8f3b7f252d767f14959298ceeb1191b1b0614e951420b4184191cd27fe4a67cbd02c38a765b2669ef3edab0380180c9debeeb90d766e678c74931f490e37bde1aff01a1b817caf1187a75b08a33be8f3f520583d1ee55ba6a3abbf85492c32393eeeaa38fdb9780", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000002f00)={{r10, 0xd45, 0x80000000, 0x80000001, 0x4, 0x6, 0x0, 0x3, 0x8, 0x9, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair(0x2a, 0x6, 0xb, &(0x7f0000002fc0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp6(r11, &(0x7f0000003000)={0xa, 0x0, 0x8000, @empty, 0x3, 0x4}, 0x20) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000003080)={0x8, &(0x7f0000003040)=[{0x1, 0x6a, 0x4, 0x4}, {0x40, 0x7, 0xb, 0xa0e}, {0x7fff, 0x9, 0x1, 0x8}, {0x6, 0x3, 0x4, 0x81}, {0x8000, 0x47, 0x5, 0xe}, {0x4, 0x7f, 0x7, 0xffff}, {0x9, 0xaf, 0x40, 0x9}, {0x12b, 0x0, 0x0, 0x101}]}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000030c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000031c0)={{r12}, &(0x7f0000003140), &(0x7f0000003180)='%pI4 \x00'}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000003200), 0xffffffffffffffff) openat$cgroup_ro(r7, &(0x7f0000003240)='pids.events\x00', 0x0, 0x0) 1.583902715s ago: executing program 0 (id=2808): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r1 = epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'nq\x00', 0x1, 0x1ff, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e20, 0x2003, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16=r9, @ANYBLOB="000029bd7000fcdbdf257a0000000600fb00feff00000a00f9003a55195b2f8700000700f9005f60"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) close(0x4) 1.582485804s ago: executing program 4 (id=2809): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) write$rfkill(r2, &(0x7f0000000380)={0x100, 0x2, 0x2}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c001a8008000100"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa1000000000000074d0000f8ffffffb702000008000000b70300007b0d000085000000060000004500f4fffcffffffbf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xe, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r5, 0x12574000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r7}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r8}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(r9, &(0x7f0000000540)={0x28, 0x0, 0x2711, @hyper}, 0x10) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="040000008a320d01f1100400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08b10400000000007c00128009000100766c616e000000006c0002801c0004800c000100f9ffffff65e200000c0001004800000081000000340004800c000100e8050000050000000c00010003000000ff0100000c00010004000000100000000c00010009000000010000000600050081000000100004800c000100050000000000000014000300766c616e3000"/152], 0xb0}}, 0x0) 1.47611772s ago: executing program 1 (id=2810): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt(r3, 0x1, 0xf, &(0x7f0000001180)=""/4096, &(0x7f0000000040)=0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(0x3) mmap(&(0x7f00007fa000/0x3000)=nil, 0x3000, 0x100000c, 0x4000010, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f080000000000009dcd000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa1000000000b0007010000f8ffffffb702000008000000b7030000080000008500000006000000bf910000000000f2b6020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r5, 0x0) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) 1.384033592s ago: executing program 3 (id=2811): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300200001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300200001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) (async) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000200)='THAWED\x00', 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000032c0)={{r7}, 0x0, 0x0, @unused=[0x8, 0x1, 0x400, 0xb], @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000032c0)={{r7}, 0x0, 0x0, @unused=[0x8, 0x1, 0x400, 0xb], @subvolid=0x2}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) r9 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f00000003c0)=0x7, 0x12) bind$alg(r9, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r9, 0x0, 0x0, 0x800) recvfrom(r11, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x3, 0x9e46}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x3, 0x9e46}]}, 0x10) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000800)="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") setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000300)="d51c598f8e87df8687ee59da65f42c2ace2c4109f04282d4f4301d61b14714d4380b6a0467c6b885553ca75de711b81c95b9798c5e38a6921063c2d05dae878d28867350ccc0ad80411f20ab9f3fd4a803a06265ad4330daac59dde3ff0e57a24e", 0x61) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000022c0)=""/4092, 0x0, 0xffc, 0xb, 0x4}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000022c0)=""/4092, 0x0, 0xffc, 0xb, 0x4}, 0x28) 1.223185273s ago: executing program 1 (id=2812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1.054278983s ago: executing program 1 (id=2813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x181000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003110000002cbd7040fcdbdf250300090080000000dac6923ef4c71cdc0dca1d9f68846960e56de42944af05000600002000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005"], 0x88}, 0x1, 0x7}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f00000001c0), 0x4) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0xc2b4f5edaa826442, &(0x7f0000000200)=""/187, &(0x7f00000002c0)=0xbb) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000340)={0x2, &(0x7f0000000180)=[{0x40}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r9, 0x0, 0x4}, 0x18) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 700.277667ms ago: executing program 4 (id=2814): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xa39, 0x10}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x1e}, 0x94) 671.381268ms ago: executing program 4 (id=2815): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010004b0400000000fcdbdf257aff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a8ffff"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) close(r1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c0000e8010000600070080008d8762064af51533c874ab1514579f69f30e5247312163844b1a3bbb680f0cb931272f7a1e912770cd5fd52d4521ecff7df18295406f0afe90"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) 524.566307ms ago: executing program 3 (id=2816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500300012050b0001006272696467650000200002000600000000000000080004008100"/56], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x40, r11, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x14, r11, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) 408.320246ms ago: executing program 4 (id=2817): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) socket(0x1f, 0x4, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x80000, 0x1ffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r5, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 405.466175ms ago: executing program 0 (id=2818): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) sendmmsg(r2, &(0x7f0000002dc0), 0x40000000000033a, 0x3ec0) (async, rerun: 64) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r1, 0x20}, {r1, 0x8142}], 0x2, 0x0, 0x0, 0x0) (async) close(0x4) 333.946332ms ago: executing program 4 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="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", 0x104}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000c80)=[@iv={0x80, 0x117, 0x2, 0x65, "aa1a7bfd47c4f8ca60c9abefd02b300a2c5e3ffe38dd4933b0671c53a0e00f85c94c9e0168ff2d0c76c28e2ac24b10092f019edb9aa83644a780f2447226c147b5478543742e06609f058b55e4eab95dac547c7244bbaa16e9b3e93b8064f332e41ba16a48"}, @op={0x18}, @iv={0x70, 0x117, 0x2, 0x59, "3ae50c100ea91ddbd5c69a4be531a99087d8031596074597cf2c6f887c00f8bf9eadd9c4b46f7c6c7ac2ac104512b6342c5dbb41809d8230e0b56e9bbecf1b2679e94e0c9e9f2a9f1d534f7d84244a00c06959110f51317970"}, @iv={0x98, 0x117, 0x2, 0x81, "d25aac7417686996af55881fbea4407cedd19eee705a19ef74bce15bd7d2c08d019d189185462f3b50f143ea0a514a8a91763bd7db5376bff233894b2718f063ec6fad1f287f62b90cb8145782648f2e73c87bf6cf0953e3fd1b43c21018451679710b1b31b250213c55c22afc8b472801f881cfeb7112a6fbffe3bfa1902c16ee"}, @iv={0x48, 0x117, 0x2, 0x2f, "13a90e8b37fdefc7794056544b5079456d52f66fd2ad822872c5b348fd0fb1a5c7cd7c64f87f1d7867bf0b8e1e372c"}, @iv={0x90, 0x117, 0x2, 0x7c, "d814f0c19376965eac2732df319a3889848b2d73762a6bece889b6a5a59206f6aaaed97eea23794b15db698b38b3a5dbfe1323834a6b4f92614345ea72c0ffa19ac4b9fcb077c33690197371f569e28f3ae083c022e3f2b908eade7789d930d6eb8ccc9714ee1da2c5d65de811c2274e8acc9d3bae4b88e77636cf3f"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x290}], 0x1, 0x40800) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf25090000001400048080400002800400038008000200970e0000040004002c00038008000100080000000800010009000000080001000008000008000100000800000800020003000000"], 0x68}}, 0x8040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x40000401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$packet(0x11, 0x1, 0x300) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x6}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x408000, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) 318.909931ms ago: executing program 0 (id=2820): r0 = socket$inet6(0xa, 0x3, 0x5) listen(r0, 0x10000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80100002e00090023bd7000fbdbdf2505000000b40111"], 0x1c8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0xc, @loopback={0xff00000000000000}}, 0x1c) listen(r5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES16=r4, @ANYRES32=r1], 0x44}}, 0x20008185) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f00000003c0)="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", 0x13f}], 0x1) 0s ago: executing program 0 (id=2821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 51] bond1: (slave macvlan2): failed to get link speed/duplex [ 162.345813][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 162.346385][ T9500] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:8188 [ 162.447547][ T9503] wg1 speed is unknown, defaulting to 1000 [ 162.468884][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 162.500682][ T9504] wg1 speed is unknown, defaulting to 1000 [ 162.754782][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 162.915863][ T8675] bond1: (slave macvlan2): failed to get link speed/duplex [ 163.188088][ T3456] bond1: (slave macvlan2): failed to get link speed/duplex [ 163.238325][ T9523] __nla_validate_parse: 13 callbacks suppressed [ 163.238344][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 163.296568][ T9523] bridge4: entered allmulticast mode [ 163.505900][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 163.618525][ T9532] syzkaller1: entered promiscuous mode [ 163.626767][ T9532] syzkaller1: entered allmulticast mode [ 163.644503][ T9532] syzkaller1: left promiscuous mode [ 163.650267][ T9532] syzkaller1: left allmulticast mode [ 164.039259][ T9558] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 164.133467][ T9558] bond3: entered promiscuous mode [ 164.139601][ T9558] bond3: entered allmulticast mode [ 164.176536][ T9558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.183611][ T9571] Cannot find add_set index 2 as target [ 164.208624][ T9568] erspan1: entered allmulticast mode [ 164.217817][ T9568] bond3: (slave erspan1): making interface the new active one [ 164.225495][ T9568] erspan1: entered promiscuous mode [ 164.258140][ T9568] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 164.450021][ T9585] wg1 speed is unknown, defaulting to 1000 [ 164.612467][ T9602] vlan2: entered promiscuous mode [ 164.617964][ T9602] vlan2: entered allmulticast mode [ 164.623346][ T9602] hsr_slave_1: entered allmulticast mode [ 164.670483][ T9602] wg1 speed is unknown, defaulting to 1000 [ 164.775228][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 164.884351][ T9610] netlink: 'syz.0.939': attribute type 17 has an invalid length. [ 165.000851][ T9618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.107643][ T8679] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.139775][ T5998] wg1 speed is unknown, defaulting to 1000 [ 165.209430][ T8679] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.230692][ T8679] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.280017][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.943'. [ 165.282821][ T9615] wg1 speed is unknown, defaulting to 1000 [ 165.296877][ T8679] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.587272][ T1005] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 165.696692][ T9649] syzkaller0: entered promiscuous mode [ 165.702202][ T9649] syzkaller0: entered allmulticast mode [ 165.991217][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 166.105137][ T9663] syzkaller1: entered promiscuous mode [ 166.111350][ T9663] syzkaller1: entered allmulticast mode [ 166.406003][ T9678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.954'. [ 166.546787][ T9682] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.680240][ T1005] net_ratelimit: 74 callbacks suppressed [ 166.680258][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 166.826392][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 166.976593][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 166.999866][ T9684] netlink: set zone limit has 4 unknown bytes [ 167.116385][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 167.226663][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 167.356337][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 167.485104][ T9731] netlink: 'syz.0.970': attribute type 11 has an invalid length. [ 167.601437][ T9734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.971'. [ 167.655981][ T8675] bond1: (slave macvlan2): failed to get link speed/duplex [ 167.785104][ T9745] netlink: 'syz.4.974': attribute type 2 has an invalid length. [ 167.886315][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.908503][ T5893] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.937968][ T9744] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 167.951533][ T9744] bond3 (unregistering): Released all slaves [ 167.995791][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 168.123343][ T9758] pimreg3: entered allmulticast mode [ 168.132599][ T9757] wg1 speed is unknown, defaulting to 1000 [ 168.138569][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 168.146322][ T9766] Cannot find del_set index 4 as target [ 168.220904][ T9771] trusted_key: syz.2.982 sent an empty control message without MSG_MORE. [ 168.626252][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.871548][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.242547][ T9794] wg1 speed is unknown, defaulting to 1000 [ 169.466503][ T9811] netlink: 'syz.3.990': attribute type 6 has an invalid length. [ 169.521651][ T9806] wg1 speed is unknown, defaulting to 1000 [ 170.291612][ T9833] syzkaller0: create flow: hash 1925763070 index 1 [ 170.425379][ T9833] syzkaller0: delete flow: hash 1925763070 index 1 [ 170.898620][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 171.107368][ T9866] netlink: 'syz.2.998': attribute type 10 has an invalid length. [ 171.822424][ T9854] netlink: 'syz.4.1000': attribute type 6 has an invalid length. [ 171.830477][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.842208][ T9856] pim6reg: entered allmulticast mode [ 171.897761][ T9863] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 171.933976][ T9865] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 171.954709][ T9876] netlink: 'syz.4.1003': attribute type 10 has an invalid length. [ 171.994012][ T9866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.002582][ T9866] team0: Port device bond0 added [ 172.009800][ T9860] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 172.017322][ T9876] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.044087][ T9876] bond0: (slave lo): refused to change device type [ 172.125789][ T8679] net_ratelimit: 13 callbacks suppressed [ 172.125809][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 172.204023][ T9887] netlink: 'syz.4.1006': attribute type 10 has an invalid length. [ 172.253336][ T9887] veth0_vlan: left promiscuous mode [ 172.295479][ T9887] veth0_vlan: entered promiscuous mode [ 172.352524][ T9887] team0: Device veth0_vlan failed to register rx_handler [ 172.433323][ T9901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.447257][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 172.532324][ T9886] netlink: 1372 bytes leftover after parsing attributes in process `syz.3.1005'. [ 172.555812][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 172.655112][ T9911] team0: Port device bond0 removed [ 172.683540][ T9911] team0: Port device dummy0 removed [ 172.699460][ T9911] bridge_slave_0: left allmulticast mode [ 172.722277][ T9919] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.741317][ T9911] bridge_slave_0: left promiscuous mode [ 172.756561][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.780860][ T9911] bridge_slave_1: left allmulticast mode [ 172.787835][ T9911] bridge_slave_1: left promiscuous mode [ 172.793694][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.833606][ T9911] bond0: (slave bond_slave_0): Releasing backup interface [ 172.856721][ T9911] bond0: (slave bond_slave_1): Releasing backup interface [ 172.890106][ T9911] team0: Port device team_slave_0 removed [ 172.912215][ T9911] team0: Port device team_slave_1 removed [ 172.920071][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.928517][ T9911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.939361][ T9911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.975849][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 173.189356][ T8680] bond1: (slave macvlan2): failed to get link speed/duplex [ 173.299065][ T9949] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1018'. [ 173.326068][ T8680] bond1: (slave macvlan2): failed to get link speed/duplex [ 173.331086][ T9955] SET target dimension over the limit! [ 173.367307][ T9959] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1022'. [ 173.378025][ T9959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1022'. [ 173.381410][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'. [ 173.396596][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 173.465799][ T9960] wg1 speed is unknown, defaulting to 1000 [ 173.548132][ T9969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.620604][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 173.870155][ T9977] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 173.878691][ T9977] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 174.122668][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.132922][ T9988] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1028'. [ 174.262574][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1031'. [ 174.313302][ T9993] tipc: Enabled bearer , priority 0 [ 174.326322][ T9993] syzkaller0: entered promiscuous mode [ 174.331903][ T9993] syzkaller0: entered allmulticast mode [ 174.367824][ T9993] tipc: Resetting bearer [ 174.436867][ T9992] tipc: Resetting bearer [ 174.452004][ T9992] tipc: Disabling bearer [ 174.582123][T10007] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 174.608795][T10007] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 174.740182][T10021] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 174.764250][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 174.778630][T10021] bond5 (unregistering): Released all slaves [ 174.792663][T10032] netlink: 'syz.1.1039': attribute type 8 has an invalid length. [ 174.818378][T10031] xt_cgroup: xt_cgroup: no path or classid specified [ 174.832953][T10034] xt_cgroup: xt_cgroup: no path or classid specified [ 174.858274][T10028] geneve2: entered promiscuous mode [ 174.885121][T10028] geneve2: entered allmulticast mode [ 175.098529][T10051] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 175.942628][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.950886][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.969941][T10089] netlink: 'syz.1.1054': attribute type 11 has an invalid length. [ 175.981704][T10088] __nla_validate_parse: 6 callbacks suppressed [ 175.981721][T10088] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1057'. [ 176.176515][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1061'. [ 176.350976][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 176.369817][T10113] netlink: 'syz.0.1066': attribute type 20 has an invalid length. [ 176.384316][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 176.455059][T10116] team_slave_0: entered promiscuous mode [ 176.462089][T10116] team_slave_0: entered allmulticast mode [ 176.462188][T10113] netlink: 'syz.0.1066': attribute type 20 has an invalid length. [ 176.738679][T10137] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1073'. [ 176.764689][T10135] netlink: 'syz.3.1074': attribute type 13 has an invalid length. [ 176.805310][T10135] netlink: 'syz.3.1074': attribute type 17 has an invalid length. [ 176.961701][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1077'. [ 177.002247][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1077'. [ 177.022095][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.034415][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.080368][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 177.131814][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1076'. [ 177.169433][ T8676] net_ratelimit: 26 callbacks suppressed [ 177.169454][ T8676] bond1: (slave macvlan2): failed to get link speed/duplex [ 177.292218][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 177.338693][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 177.371705][T10163] wg1 speed is unknown, defaulting to 1000 [ 177.506556][ T8676] bond1: (slave macvlan2): failed to get link speed/duplex [ 177.526564][T10180] vlan4: entered promiscuous mode [ 177.531732][T10180] bridge0: entered promiscuous mode [ 177.615881][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 177.698170][T10185] nbd2: detected capacity change from 0 to 63 [ 177.719204][ T5844] block nbd2: Receive control failed (result -32) [ 177.766688][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 177.874887][T10199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.895827][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 178.156000][ T8676] bond1: (slave macvlan2): failed to get link speed/duplex [ 178.296183][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 178.360126][ T2968] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.386546][ T2968] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 38320 - 0 [ 178.395049][ T2968] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.437495][ T8680] bond1: (slave macvlan2): failed to get link speed/duplex [ 178.545200][ T8676] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.557321][ T8676] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 38320 - 0 [ 178.575905][ T8676] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.749607][ T8676] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.760914][ T8676] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 38320 - 0 [ 178.769805][ T8676] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.818591][ T8676] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.835565][ T8676] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 38320 - 0 [ 178.845449][ T8676] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.908021][ T8676] bond1: (slave macvlan2): failed to get link speed/duplex [ 179.081772][T10248] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000 [ 179.243495][T10264] macsec0: left allmulticast mode [ 179.264930][T10264] veth1_macvtap: left allmulticast mode [ 179.288608][T10264] macsec0: left promiscuous mode [ 179.318163][T10264] bridge0: port 1(macsec0) entered disabled state [ 179.579152][T10269] netlink: 'syz.3.1110': attribute type 6 has an invalid length. [ 179.602955][T10268] wg1 speed is unknown, defaulting to 1000 [ 179.751063][T10272] sctp: [Deprecated]: syz.1.1111 (pid 10272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.751063][T10272] Use struct sctp_sack_info instead [ 179.986620][T10286] tipc: Enabling of bearer rejected, failed to enable media [ 180.092382][T10284] wg1 speed is unknown, defaulting to 1000 [ 180.173245][T10287] wg1 speed is unknown, defaulting to 1000 [ 180.332499][T10301] netem: change failed [ 180.337246][T10299] netlink: 'syz.3.1120': attribute type 15 has an invalid length. [ 180.831735][T10331] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.852919][T10331] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.979007][T10331] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.996867][T10331] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.088119][T10331] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.126892][T10350] xt_hashlimit: max too large, truncated to 1048576 [ 181.147295][T10350] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.155974][T10331] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.217071][T10350] __nla_validate_parse: 15 callbacks suppressed [ 181.217087][T10350] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1136'. [ 181.256657][T10331] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.267492][T10331] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.374977][ T1005] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.395830][ T1005] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.434898][ T2988] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.443757][ T2988] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.488541][ T2988] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.501655][ T2988] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.528358][T10372] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 181.530358][ T2988] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.543934][T10372] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1140'. [ 181.549031][ T2988] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.562147][T10372] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1140'. [ 181.596040][T10372] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 182.167737][T10391] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 182.222432][T10397] ieee802154 phy1 wpan1: encryption failed: -22 [ 182.236144][ T2968] net_ratelimit: 23 callbacks suppressed [ 182.236162][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 182.281339][T10388] 8021q: VLANs not supported on nlmon0 [ 182.386033][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 182.789953][T10421] netlink: 'syz.1.1157': attribute type 7 has an invalid length. [ 183.163239][T10439] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1158'. [ 183.272731][T10427] sit0: left promiscuous mode [ 183.551977][T10422] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 184.558263][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.565833][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 184.675859][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 184.785930][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 184.895849][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.006317][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.134492][ T8677] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.276073][ T3456] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.351008][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 185.360011][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 185.541970][T10486] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 185.664588][T10499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1177'. [ 185.686522][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 185.798044][T10501] macvlan0: entered promiscuous mode [ 185.813630][T10501] macvlan0: entered allmulticast mode [ 185.835895][T10501] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 185.976272][T10519] wg1 speed is unknown, defaulting to 1000 [ 186.588064][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1183'. [ 186.802530][T10562] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1193'. [ 186.923936][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 187.071123][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 187.136715][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 187.157978][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 187.205914][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 187.214803][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 187.325795][ T8677] net_ratelimit: 12 callbacks suppressed [ 187.325814][ T8677] bond1: (slave macvlan2): failed to get link speed/duplex [ 187.394819][T10589] geneve0: entered promiscuous mode [ 187.400618][T10589] geneve0: entered allmulticast mode [ 187.409072][T10593] wg1 speed is unknown, defaulting to 1000 [ 187.409118][ T8677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.436200][ T1005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.466704][ T1005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.497752][ T1005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.516111][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 187.621651][T10603] netlink: 'syz.2.1203': attribute type 2 has an invalid length. [ 187.635986][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 187.709946][T10606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.755861][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 187.790739][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 187.840708][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 187.886374][ T8677] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.006157][ T8679] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.125796][ T8676] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.305933][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.416256][ T8675] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.924782][T10678] netlink: 'syz.2.1222': attribute type 26 has an invalid length. [ 189.022675][T10687] netlink: 'syz.3.1224': attribute type 5 has an invalid length. [ 189.144141][T10694] syzkaller1: entered promiscuous mode [ 189.155878][T10694] syzkaller1: entered allmulticast mode [ 191.408673][T10785] netlink: 'syz.1.1249': attribute type 12 has an invalid length. [ 191.719302][T10797] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 191.831030][T10804] wg1 speed is unknown, defaulting to 1000 [ 191.900834][T10806] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 191.903774][T10810] __nla_validate_parse: 71 callbacks suppressed [ 191.903816][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1256'. [ 191.911065][T10806] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 191.954020][T10806] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 191.976597][T10811] xt_hashlimit: max too large, truncated to 1048576 [ 192.238231][T10818] tipc: Enabled bearer , priority 0 [ 192.257103][T10821] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1260'. [ 192.361076][T10819] syzkaller0: entered promiscuous mode [ 192.374553][T10819] syzkaller0: entered allmulticast mode [ 192.415455][T10835] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.426421][ T8677] net_ratelimit: 23 callbacks suppressed [ 192.426499][ T8677] bond1: (slave macvlan2): failed to get link speed/duplex [ 192.478432][T10819] tipc: Resetting bearer [ 193.014697][T10851] tipc: Failed to remove unknown binding: 66,1,1/0:4061814896/4061814898 [ 193.032338][T10851] tipc: Failed to remove unknown binding: 66,1,1/0:4061814896/4061814898 [ 193.047005][T10851] tipc: Failed to remove unknown binding: 66,1,1/0:4061814896/4061814898 [ 193.589418][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.775080][T10819] tipc: Disabling bearer [ 193.784650][T10837] bond0: Device is already in use. [ 193.800902][ T5998] tipc: Node number set to 1342100023 [ 193.807675][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 193.916268][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.069147][T10874] bridge0: port 3(macvtap2) entered blocking state [ 194.075968][T10874] bridge0: port 3(macvtap2) entered disabled state [ 194.082607][T10874] macvtap2: entered allmulticast mode [ 194.089602][T10874] bridge0: entered allmulticast mode [ 194.098401][T10874] macvtap2: left allmulticast mode [ 194.103763][T10874] bridge0: left allmulticast mode [ 194.134582][T10873] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.152644][T10878] pim6reg1: entered promiscuous mode [ 194.158123][T10878] pim6reg1: entered allmulticast mode [ 194.169321][T10880] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 194.236118][T10873] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.247287][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.326549][T10881] bond6 (unregistering): Released all slaves [ 194.380564][T10873] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.408444][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 194.430402][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.447562][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 194.450209][T10873] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.581250][ T8676] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.592192][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 194.612159][T10897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1282'. [ 194.625037][ T2988] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.679465][ T8676] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.701812][ T8676] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.722911][T10900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1283'. [ 194.735978][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.846108][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.958809][T10914] veth4: entered allmulticast mode [ 195.031908][T10920] netlink: 181328 bytes leftover after parsing attributes in process `syz.3.1291'. [ 195.065907][ T8676] bond1: (slave macvlan2): failed to get link speed/duplex [ 195.120031][T10925] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002 [ 195.179993][T10925] can: request_module (can-proto-3) failed. [ 195.186484][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 195.318248][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 195.405881][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1296'. [ 195.415146][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1296'. [ 195.448236][ T8675] bond1: (slave macvlan2): failed to get link speed/duplex [ 195.810540][T10947] wg1 speed is unknown, defaulting to 1000 [ 196.042776][T10967] nbd: must specify a size in bytes for the device [ 196.451868][T10995] tipc: Enabled bearer , priority 0 [ 196.460703][T10995] tipc: Enabling of bearer rejected, already enabled [ 196.481756][T10995] tipc: Enabling of bearer rejected, already enabled [ 196.548376][T11001] tipc: Enabling of bearer rejected, already enabled [ 196.577086][T11001] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 196.585501][T11001] netem: change failed [ 196.640111][T10993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.957671][T11028] netlink: 'syz.1.1320': attribute type 13 has an invalid length. [ 197.065277][T11030] macsec1: entered promiscuous mode [ 197.071036][T11030] macsec1: entered allmulticast mode [ 197.535860][ T50] net_ratelimit: 17 callbacks suppressed [ 197.535921][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 197.683613][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 197.765127][T11069] syz.4.1328 (11069) used obsolete PPPIOCDETACH ioctl [ 197.826217][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 197.836691][T11068] __nla_validate_parse: 3 callbacks suppressed [ 197.836707][T11068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 197.854476][T11078] netlink: 'syz.1.1334': attribute type 12 has an invalid length. [ 197.935824][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 198.001529][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 198.021657][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 198.031269][T11084] netlink: 'syz.3.1336': attribute type 6 has an invalid length. [ 198.056318][T11086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1336'. [ 198.063590][T11087] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.072486][T11087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.080044][T11087] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.087227][T11087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.102200][T11087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.128482][T11087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.146934][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 198.266948][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 198.393131][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 198.505798][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 198.632801][T11113] wg1 speed is unknown, defaulting to 1000 [ 198.737058][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 198.946504][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 199.636146][T11157] wg1 speed is unknown, defaulting to 1000 [ 199.902356][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 199.918674][T11172] netlink: 'syz.1.1359': attribute type 1 has an invalid length. [ 200.334475][T11200] syzkaller0: entered promiscuous mode [ 200.340710][T11200] syzkaller0: entered allmulticast mode [ 200.376599][T11200] tipc: Enabled bearer , priority 0 [ 200.387371][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 200.415622][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 200.487231][T11199] tipc: Resetting bearer [ 200.510727][T11199] tipc: Disabling bearer [ 201.122945][T11213] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1371'. [ 201.135083][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1371'. [ 201.333819][T11231] wg1 speed is unknown, defaulting to 1000 [ 201.348153][T11235] SET target dimension over the limit! [ 201.378134][T11232] netlink: 'syz.2.1374': attribute type 6 has an invalid length. [ 201.430787][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 201.430801][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 201.436876][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 201.517553][T11244] netlink: 'syz.4.1381': attribute type 12 has an invalid length. [ 201.534080][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 201.739829][T11264] tipc: Enabling of bearer rejected, failed to enable media [ 201.984140][T11270] bond3: option all_slaves_active: invalid value (13) [ 202.000357][T11270] bond3 (unregistering): Released all slaves [ 202.138861][T11282] netlink: 'syz.0.1387': attribute type 29 has an invalid length. [ 202.163353][T11286] netlink: 'syz.0.1387': attribute type 29 has an invalid length. [ 202.289453][ T48] IPVS: starting estimator thread 0... [ 202.353658][T11295] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 202.370271][T11301] bond4: option ad_user_port_key: invalid value (65535) [ 202.377593][T11301] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 202.387796][T11297] IPVS: using max 30 ests per chain, 72000 per kthread [ 202.389185][T11301] bond4 (unregistering): Released all slaves [ 202.434605][T11295] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 202.586042][ T50] net_ratelimit: 29 callbacks suppressed [ 202.586063][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.726750][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.846012][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.870904][T11331] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 202.902526][T11331] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.918489][T11331] ipvlan1: entered allmulticast mode [ 202.923818][T11331] bond3: entered allmulticast mode [ 202.950558][T11331] bond3: (slave gretap1): making interface the new active one [ 202.958714][T11331] gretap1: entered allmulticast mode [ 202.965469][T11331] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 203.041355][T11336] syzkaller1: entered promiscuous mode [ 203.067519][T11336] syzkaller1: entered allmulticast mode [ 203.075973][ T8675] bond1: (slave macvlan2): failed to get link speed/duplex [ 203.226118][ T8677] bond1: (slave macvlan2): failed to get link speed/duplex [ 203.281116][T11341] __nla_validate_parse: 7 callbacks suppressed [ 203.281129][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 203.336136][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 203.398782][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 203.445837][ T8675] bond1: (slave macvlan2): failed to get link speed/duplex [ 203.556126][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 203.673564][T11350] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 203.705956][ T8676] bond1: (slave macvlan2): failed to get link speed/duplex [ 204.245375][T11385] wg1 speed is unknown, defaulting to 1000 [ 204.383079][T11384] dvmrp0: entered allmulticast mode [ 205.044828][T11406] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.1423'. [ 205.073369][T11406] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 205.112675][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 205.325018][T11410] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1425'. [ 205.477130][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'. [ 205.626570][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 205.757057][T11448] tipc: Enabled bearer , priority 0 [ 205.764600][T11448] syzkaller0: entered promiscuous mode [ 205.770189][T11448] syzkaller0: entered allmulticast mode [ 205.847444][T11448] tipc: Resetting bearer [ 205.876185][T11447] tipc: Resetting bearer [ 205.909301][T11447] tipc: Disabling bearer [ 206.026972][T11460] wg1 speed is unknown, defaulting to 1000 [ 206.520124][T11487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1446'. [ 206.541099][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 206.570511][T11487] bridge_slave_1: left allmulticast mode [ 206.579345][T11487] bridge_slave_1: left promiscuous mode [ 206.584082][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 206.587331][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.607849][T11487] bridge_slave_0: left allmulticast mode [ 206.613666][T11487] bridge_slave_0: left promiscuous mode [ 206.650162][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.695939][ T50] net_ratelimit: 26 callbacks suppressed [ 207.695958][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 207.815952][ T2968] bond1: (slave macvlan2): failed to get link speed/duplex [ 207.925986][ T3456] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.035937][ T3456] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.146204][ T3456] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.268226][ T2988] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.358826][T11588] x_tables: duplicate entry at hook 2 [ 208.367481][T11588] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.379989][T11586] __nla_validate_parse: 2 callbacks suppressed [ 208.380006][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 208.406111][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.499610][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 208.538531][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 208.606739][ T1005] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.726203][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.896187][T11622] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 208.914457][T11622] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1483'. [ 208.927958][T11625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1484'. [ 208.946659][T11622] batadv_slave_1: entered promiscuous mode [ 208.958686][T11622] bridge0: port 1(batadv_slave_1) entered blocking state [ 208.967161][T11622] bridge0: port 1(batadv_slave_1) entered disabled state [ 208.974774][T11622] batadv_slave_1: entered allmulticast mode [ 209.080501][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 209.222492][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1491'. [ 209.238001][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1491'. [ 209.258298][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1491'. [ 209.267783][T11649] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1493'. [ 209.283507][T11649] block nbd0: reconnected socket [ 209.470930][T11659] ip_vti0: entered allmulticast mode [ 209.491661][ T8676] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 209.501270][ T5839] block nbd0: Receive control failed (result -32) [ 209.517526][ T8676] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 209.568872][ T8676] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 209.594494][ T8676] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 209.828374][T11688] wg1 speed is unknown, defaulting to 1000 [ 210.114668][T11711] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 210.127384][T11711] netlink: 'syz.1.1509': attribute type 42 has an invalid length. [ 210.171161][T11713] wg1 speed is unknown, defaulting to 1000 [ 210.264142][T11714] wg1 speed is unknown, defaulting to 1000 [ 210.429270][T11724] tipc: Enabling of bearer rejected, failed to enable media [ 210.840380][T11751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.849304][T11751] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.984547][T11739] SET target dimension over the limit! [ 211.609700][T11780] wg1 speed is unknown, defaulting to 1000 [ 211.694150][T11787] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 211.812467][T11785] xt_CT: No such helper "snmp_trap" [ 211.888326][T11791] netlink: 'syz.1.1533': attribute type 11 has an invalid length. [ 211.910788][T11791] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 211.938632][T11791] syzkaller1: linktype set to 260 [ 212.219300][T11805] netlink: 'syz.3.1537': attribute type 13 has an invalid length. [ 212.373347][T11815] wg1 speed is unknown, defaulting to 1000 [ 212.408550][T11821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 212.721882][T11827] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 212.860778][T11836] x_tables: duplicate underflow at hook 1 [ 212.921202][T11839] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 212.928557][T11839] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 213.187541][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.223197][T11866] bond4: Setting coupled_control to off (0) [ 213.229795][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.279400][T11866] bond5: Setting coupled_control to off (0) [ 213.285863][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.306816][T11866] bond6: Setting coupled_control to off (0) [ 213.313106][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.354387][T11866] bond7: Setting coupled_control to off (0) [ 213.364861][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.413805][T11866] bond8: Setting coupled_control to off (0) [ 213.420725][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.430667][T11866] __nla_validate_parse: 218 callbacks suppressed [ 213.430682][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.464627][T11866] bond9: Setting coupled_control to off (0) [ 213.470889][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.478777][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.500013][T11866] bond10: Setting coupled_control to off (0) [ 213.506704][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.529206][T11866] bond11: Setting coupled_control to off (0) [ 213.535540][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.545241][T11887] : entered promiscuous mode [ 213.564815][T11866] bond12: Setting coupled_control to off (0) [ 213.571257][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.594331][T11866] bond13: Setting coupled_control to off (0) [ 213.600846][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.622906][T11866] bond14: Setting coupled_control to off (0) [ 213.629271][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.651120][T11866] bond15: Setting coupled_control to off (0) [ 213.657538][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.679121][T11866] bond16: Setting coupled_control to off (0) [ 213.685419][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.718545][T11866] bond17: Setting coupled_control to off (0) [ 213.725116][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 213.747528][T11866] bond18: Setting coupled_control to off (0) [ 213.768250][T11866] bond19: Setting coupled_control to off (0) [ 213.787365][T11866] bond20: Setting coupled_control to off (0) [ 213.807241][T11866] bond21: Setting coupled_control to off (0) [ 213.826504][T11866] bond22: Setting coupled_control to off (0) [ 213.845244][T11866] bond23: Setting coupled_control to off (0) [ 213.864207][T11866] bond24: Setting coupled_control to off (0) [ 213.883923][T11866] bond25: Setting coupled_control to off (0) [ 213.928076][T11866] bond26: Setting coupled_control to off (0) [ 213.934794][T11866] validate_nla: 16 callbacks suppressed [ 213.934811][T11866] netlink: 'syz.3.1555': attribute type 32 has an invalid length. [ 213.980103][T11866] bond27: Setting coupled_control to off (0) [ 214.363262][T11920] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.570113][T11930] gre0: entered allmulticast mode [ 214.666937][T11938] netlink: 'syz.2.1568': attribute type 3 has an invalid length. [ 214.685022][T11938] netlink: 'syz.2.1568': attribute type 3 has an invalid length. [ 215.858698][T11986] syzkaller1: entered promiscuous mode [ 215.864197][T11986] syzkaller1: entered allmulticast mode [ 215.886361][T11990] netlink: 'syz.4.1582': attribute type 4 has an invalid length. [ 216.025927][T11998] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 216.135056][T12007] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 216.642809][T12040] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 216.668042][T12040] bond6 (unregistering): Released all slaves [ 217.442108][T12080] wg1 speed is unknown, defaulting to 1000 [ 217.486799][T12086] ip6tnl1: entered allmulticast mode [ 218.081917][T12107] net_ratelimit: 5 callbacks suppressed [ 218.081933][T12107] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 218.132786][T12111] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 218.347707][ T6214] IPVS: starting estimator thread 0... [ 218.418039][T12122] wg1 speed is unknown, defaulting to 1000 [ 218.467118][T12123] IPVS: using max 32 ests per chain, 76800 per kthread [ 218.637132][T12139] __nla_validate_parse: 31 callbacks suppressed [ 218.637148][T12139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1627'. [ 218.859589][T12154] veth1_to_bond: entered promiscuous mode [ 218.886838][T12140] wg1 speed is unknown, defaulting to 1000 [ 218.896031][T12139] wg1 speed is unknown, defaulting to 1000 [ 219.017977][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 219.055884][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 219.075135][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 219.187539][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 219.209291][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 219.235849][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 219.460617][ T5839] Bluetooth: hci4: link tx timeout [ 219.467386][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.121758][T12211] netlink: 'syz.1.1644': attribute type 6 has an invalid length. [ 220.170126][T12211] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1644'. [ 220.529192][T12237] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 220.698784][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 220.747937][T12245] bond0: option all_slaves_active: invalid value (7) [ 220.755148][T12248] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1655'. [ 220.756311][T12249] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 220.872545][T12249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.895157][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.150106][T12281] netlink: 'syz.4.1659': attribute type 83 has an invalid length. [ 221.506395][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 221.783189][T12298] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 221.818216][T12300] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 221.822785][T12298] `: Port device dummy0 added [ 221.856434][T12298] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 221.978778][T12298] `: Port device dummy0 removed [ 221.999309][T12302] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 222.008354][T12298] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 222.048841][T12302] wg1 speed is unknown, defaulting to 1000 [ 222.419219][T12333] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 222.456735][T12333] wg1 speed is unknown, defaulting to 1000 [ 222.733154][T12345] wg1 speed is unknown, defaulting to 1000 [ 222.744525][T12354] nbd1: detected capacity change from 0 to 127 [ 222.759755][ T5839] block nbd1: Receive control failed (result -32) [ 223.113973][T12364] wg1 speed is unknown, defaulting to 1000 [ 223.484842][T12387] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 223.900330][T12394] __nla_validate_parse: 9 callbacks suppressed [ 223.900349][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 223.930527][T12390] geneve2: entered promiscuous mode [ 224.068552][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1693'. [ 224.078379][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1693'. [ 224.271822][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 224.293280][T12428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1698'. [ 224.472645][T12434] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1701'. [ 224.810755][T12451] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1706'. [ 225.219015][T12464] delete_channel: no stack [ 225.360272][T12492] netlink: 'syz.2.1717': attribute type 3 has an invalid length. [ 225.384146][T12488] tipc: Enabling of bearer rejected, failed to enable media [ 225.410317][T12495] tipc: Enabling of bearer rejected, failed to enable media [ 225.624183][T12504] wg1 speed is unknown, defaulting to 1000 [ 225.984579][T12522] wg1 speed is unknown, defaulting to 1000 [ 226.205290][T12536] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1725'. [ 226.357807][T12534] netlink: set zone limit has 4 unknown bytes [ 226.641935][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1735'. [ 226.720193][T12562] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.822273][T12574] netlink: 'syz.1.1737': attribute type 4 has an invalid length. [ 226.839550][T12577] RDS: rds_bind could not find a transport for ::ffff:255.255.255.247, load rds_tcp or rds_rdma? [ 226.976238][T12582] netlink: 'syz.1.1737': attribute type 4 has an invalid length. [ 227.118872][T12597] tipc: Enabling of bearer rejected, already enabled [ 227.143931][T12597] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 227.160562][T12597] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 227.241326][T12597] syzkaller0: mtu less than device minimum [ 227.358146][T12614] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1748'. [ 227.370165][T12613] xt_TCPMSS: Only works on TCP SYN packets [ 227.377127][T12613] netlink: 'syz.4.1749': attribute type 13 has an invalid length. [ 227.435395][T12621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.442781][T12621] IPv6: NLM_F_CREATE should be set when creating new route [ 227.450123][T12621] IPv6: NLM_F_CREATE should be set when creating new route [ 227.457397][T12621] IPv6: NLM_F_CREATE should be set when creating new route [ 227.526144][T12629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.621961][T12626] netlink: 'syz.1.1752': attribute type 4 has an invalid length. [ 227.733589][T12639] rdma_rxe: rxe_newlink: failed to add vcan0 [ 227.899351][T12647] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 228.251719][T12683] netlink: 'syz.1.1768': attribute type 10 has an invalid length. [ 229.257314][T12647] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 229.281286][T12683] 8021q: adding VLAN 0 to HW filter on device ` [ 229.338488][T12683] bond0: (slave `): Enslaving as an active interface with an up link [ 229.372914][T12672] syzkaller1: entered promiscuous mode [ 229.406718][T12672] syzkaller1: entered allmulticast mode [ 229.419161][ T8680] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.435277][ T8680] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 38320 - 0 [ 229.465601][ T8680] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 229.534973][ T8680] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.563981][ T8680] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 38320 - 0 [ 229.592271][ T8680] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 229.626178][ T8680] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.634787][ T8680] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 38320 - 0 [ 229.656653][ T8680] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 229.687318][ T8680] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.714304][ T8680] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 38320 - 0 [ 229.730424][ T8680] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 229.754504][T12714] wg1 speed is unknown, defaulting to 1000 [ 229.884684][T12728] __nla_validate_parse: 5 callbacks suppressed [ 229.884700][T12728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1781'. [ 230.159535][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 230.380939][T12756] tunl0: Caught tx_queue_len zero misconfig [ 230.492514][T12772] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1792'. [ 230.523435][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 230.556129][T12772] netlink: 'syz.0.1792': attribute type 5 has an invalid length. [ 230.563889][T12772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 230.624551][T12772] geneve3: entered promiscuous mode [ 230.666169][T12772] geneve3: entered allmulticast mode [ 230.673549][ T3030] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 230.696607][ T3030] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 230.724612][ T3030] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 230.755942][ T3030] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 231.053395][T12801] IPVS: length: 153 != 24 [ 231.388449][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 231.500926][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 231.562520][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 231.776995][T12820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.798563][T12820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.971015][T12834] netlink: 'syz.2.1811': attribute type 3 has an invalid length. [ 232.150704][T12832] wg1 speed is unknown, defaulting to 1000 [ 232.440072][T12847] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1815'. [ 233.024688][T12866] openvswitch: netlink: Flow key attr not present in new flow. [ 233.242805][T12862] wg1 speed is unknown, defaulting to 1000 [ 233.367271][T12863] wg1 speed is unknown, defaulting to 1000 [ 233.562365][T12882] wg1 speed is unknown, defaulting to 1000 [ 233.658763][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 233.704407][T12888] netlink: 'syz.1.1826': attribute type 15 has an invalid length. [ 234.911202][T12918] __nla_validate_parse: 2 callbacks suppressed [ 234.911220][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 235.480371][T12935] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1835'. [ 235.510527][T12935] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1835'. [ 235.662443][T12924] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 235.729603][T12924] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 235.756668][T12932] bond0: Caught tx_queue_len zero misconfig [ 235.832640][T12937] netlink: 'syz.2.1836': attribute type 8 has an invalid length. [ 236.164370][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1838'. [ 236.182357][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1838'. [ 236.395479][T12933] wg1 speed is unknown, defaulting to 1000 [ 236.592623][T12958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 236.713796][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1839'. [ 237.591574][T12973] ip_vti0: entered promiscuous mode [ 237.608605][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 237.737772][T12980] bond28: option ad_user_port_key: invalid value (65535) [ 237.775894][T12980] bond28: option ad_user_port_key: allowed values 0 - 1023 [ 237.838828][T12980] bond28 (unregistering): Released all slaves [ 237.957476][T12998] Bluetooth: MGMT ver 1.23 [ 238.683958][T13010] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1853'. [ 238.705607][T13010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1853'. [ 239.189583][T13027] wg1 speed is unknown, defaulting to 1000 [ 240.161064][T13059] __nla_validate_parse: 2 callbacks suppressed [ 240.161081][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 240.608496][T13070] No such timeout policy "syz1" [ 240.801092][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 240.864816][T13073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1871'. [ 240.944305][T13077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1873'. [ 240.983330][T13076] netlink: 'syz.2.1872': attribute type 6 has an invalid length. [ 241.214733][T13083] wg1 speed is unknown, defaulting to 1000 [ 241.251261][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1875'. [ 241.317187][T13084] wg1 speed is unknown, defaulting to 1000 [ 242.249118][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'. [ 242.321017][T13107] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 242.677864][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 242.765371][T13107] macsec0: entered promiscuous mode [ 242.790860][T13107] macsec0: entered allmulticast mode [ 243.298922][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 243.313058][T13138] tipc: Enabling of bearer rejected, failed to enable media [ 243.333042][T13135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 243.421895][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 244.328587][T13169] wg1 speed is unknown, defaulting to 1000 [ 244.653135][T13187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.993811][T13199] FAULT_INJECTION: forcing a failure. [ 244.993811][T13199] name failslab, interval 1, probability 0, space 0, times 1 [ 245.018401][T13199] CPU: 1 UID: 0 PID: 13199 Comm: syz.4.1900 Not tainted syzkaller #0 PREEMPT(full) [ 245.018426][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.018443][T13199] Call Trace: [ 245.018450][T13199] [ 245.018459][T13199] dump_stack_lvl+0x189/0x250 [ 245.018490][T13199] ? __pfx____ratelimit+0x10/0x10 [ 245.018508][T13199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.018526][T13199] ? __pfx__printk+0x10/0x10 [ 245.018551][T13199] ? __pfx___might_resched+0x10/0x10 [ 245.018569][T13199] ? fs_reclaim_acquire+0x7d/0x100 [ 245.018591][T13199] should_fail_ex+0x414/0x560 [ 245.018620][T13199] should_failslab+0xa8/0x100 [ 245.018642][T13199] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 245.018668][T13199] ? __alloc_skb+0x255/0x430 [ 245.018684][T13199] ? napi_skb_cache_get+0x4a5/0x780 [ 245.018701][T13199] ? napi_skb_cache_get+0x151/0x780 [ 245.018721][T13199] __alloc_skb+0x255/0x430 [ 245.018739][T13199] ? __pfx___alloc_skb+0x10/0x10 [ 245.018764][T13199] ? netlink_ack_tlv_len+0x6c/0x210 [ 245.018787][T13199] netlink_ack+0x146/0xa50 [ 245.018814][T13199] ? __pfx___schedule+0x10/0x10 [ 245.018838][T13199] netlink_rcv_skb+0x28c/0x470 [ 245.018857][T13199] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 245.018879][T13199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.018910][T13199] ? bpf_lsm_capable+0x9/0x20 [ 245.018929][T13199] ? security_capable+0x7e/0x2e0 [ 245.018953][T13199] nfnetlink_rcv+0x282/0x2590 [ 245.018972][T13199] ? __local_bh_enable_ip+0x13e/0x1c0 [ 245.018990][T13199] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 245.019022][T13199] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 245.019045][T13199] ? lockdep_hardirqs_on+0x98/0x140 [ 245.019061][T13199] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 245.019083][T13199] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 245.019106][T13199] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 245.019129][T13199] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 245.019163][T13199] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 245.019188][T13199] ? rcu_is_watching+0x15/0xb0 [ 245.019209][T13199] ? rcu_read_unlock_special+0x3d8/0x520 [ 245.019228][T13199] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 245.019245][T13199] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.019270][T13199] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.019306][T13199] netlink_unicast+0x82f/0x9e0 [ 245.019333][T13199] ? __pfx_netlink_unicast+0x10/0x10 [ 245.019354][T13199] ? netlink_sendmsg+0x642/0xb30 [ 245.019372][T13199] ? skb_put+0x11b/0x210 [ 245.019394][T13199] netlink_sendmsg+0x805/0xb30 [ 245.019424][T13199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.019448][T13199] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.019471][T13199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.019488][T13199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.019510][T13199] __sock_sendmsg+0x21c/0x270 [ 245.019537][T13199] ____sys_sendmsg+0x505/0x820 [ 245.019562][T13199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.019591][T13199] ? import_iovec+0x74/0xa0 [ 245.019614][T13199] ___sys_sendmsg+0x21f/0x2a0 [ 245.019636][T13199] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.019661][T13199] ? rcu_read_lock_any_held+0xb3/0x120 [ 245.019706][T13199] ? __fget_files+0x2a/0x420 [ 245.019726][T13199] ? __fget_files+0x3a0/0x420 [ 245.019756][T13199] __x64_sys_sendmsg+0x19b/0x260 [ 245.019779][T13199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.019808][T13199] ? __pfx_ksys_write+0x10/0x10 [ 245.019829][T13199] ? do_syscall_64+0xbe/0xf80 [ 245.019849][T13199] do_syscall_64+0xfa/0xf80 [ 245.019866][T13199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.019883][T13199] ? clear_bhb_loop+0x60/0xb0 [ 245.019903][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.019917][T13199] RIP: 0033:0x7fcee7b8f749 [ 245.019941][T13199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.019956][T13199] RSP: 002b:00007fcee8ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.019979][T13199] RAX: ffffffffffffffda RBX: 00007fcee7de5fa0 RCX: 00007fcee7b8f749 [ 245.019992][T13199] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 245.020003][T13199] RBP: 00007fcee8ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 245.020014][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.020024][T13199] R13: 00007fcee7de6038 R14: 00007fcee7de5fa0 R15: 00007ffcf48f5538 [ 245.020055][T13199] [ 245.866653][T13214] geneve3: entered promiscuous mode [ 245.883066][ T1330] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.982310][ T1330] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.056585][ T1330] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.112912][ T1330] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.203431][T13223] wg1 speed is unknown, defaulting to 1000 [ 246.303133][T13227] __nla_validate_parse: 5 callbacks suppressed [ 246.303151][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 246.449147][T13230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1908'. [ 246.512559][T13230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1908'. [ 247.283075][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'. [ 247.378226][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 247.465294][T13269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'. [ 247.533006][T13255] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 247.584027][T13255] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 247.715938][T13277] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1916'. [ 247.835219][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'. [ 247.893214][T13270] bridge0: entered promiscuous mode [ 247.938501][T13270] bridge0: port 3(macvtap0) entered blocking state [ 247.978453][T13272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'. [ 247.996336][T13270] bridge0: port 3(macvtap0) entered disabled state [ 248.031008][T13270] macvtap0: entered allmulticast mode [ 248.047947][T13270] bridge0: entered allmulticast mode [ 248.068753][T13287] netlink: 'syz.3.1924': attribute type 1 has an invalid length. [ 248.077021][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'. [ 248.089657][T13270] macvtap0: left allmulticast mode [ 248.094921][T13270] bridge0: left allmulticast mode [ 248.136865][T13270] bridge0: left promiscuous mode [ 248.421287][T13287] 8021q: adding VLAN 0 to HW filter on device bond28 [ 248.441318][T13289] vlan1: entered allmulticast mode [ 248.446951][T13289] bond28: entered allmulticast mode [ 248.473148][T13261] wg1 speed is unknown, defaulting to 1000 [ 249.110242][T13318] tipc: Enabled bearer , priority 0 [ 249.127528][T13308] syzkaller0: entered promiscuous mode [ 249.133026][T13308] syzkaller0: entered allmulticast mode [ 249.350732][T13320] syzkaller0: entered promiscuous mode [ 249.365822][T13320] syzkaller0: entered allmulticast mode [ 249.567506][T13307] tipc: Resetting bearer [ 249.639590][T13307] tipc: Disabling bearer [ 250.043600][T13336] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 250.166692][T13338] wg1 speed is unknown, defaulting to 1000 [ 251.238540][T13369] netlink: 'syz.1.1945': attribute type 87 has an invalid length. [ 251.416764][T13369] __nla_validate_parse: 39 callbacks suppressed [ 251.416783][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 251.732107][T13382] batadv1: entered promiscuous mode [ 251.905021][T13386] openvswitch: netlink: IP tunnel dst address not specified [ 251.997201][T13389] netlink: 'syz.2.1949': attribute type 21 has an invalid length. [ 252.176479][ T8676] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 252.218935][T13384] netem: incorrect ge model size [ 252.224246][T13384] netem: change failed [ 252.490804][T13389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1949'. [ 252.526234][T13389] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 253.151792][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 253.436744][T13422] syzkaller1: entered promiscuous mode [ 253.442232][T13422] syzkaller1: entered allmulticast mode [ 253.530174][T13427] block nbd3: Unsupported socket: should be TCP or UNIX. [ 253.588232][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 253.615378][T13431] netlink: 'syz.3.1958': attribute type 3 has an invalid length. [ 253.649496][T13431] netlink: 'syz.3.1958': attribute type 7 has an invalid length. [ 253.699832][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1956'. [ 253.711307][T13431] netlink: 'syz.3.1958': attribute type 8 has an invalid length. [ 253.744240][T13431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1958'. [ 253.789705][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 253.862613][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1956'. [ 255.335028][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1965'. [ 255.365012][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 255.686089][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.695393][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.377976][T13473] wg1 speed is unknown, defaulting to 1000 [ 256.423137][T13492] wg1 speed is unknown, defaulting to 1000 [ 256.568228][T13495] netlink: 'syz.0.1973': attribute type 10 has an invalid length. [ 256.896004][T13495] bond0: (slave wlan1): Opening slave failed [ 257.539600][T13511] syzkaller0: entered promiscuous mode [ 257.545391][T13511] syzkaller0: entered allmulticast mode [ 258.002835][T13528] syzkaller0: entered promiscuous mode [ 258.008735][T13528] syzkaller0: entered allmulticast mode [ 261.089429][T13570] __nla_validate_parse: 1 callbacks suppressed [ 261.089448][T13570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 261.158572][T13578] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 261.894832][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 262.394061][T13617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1999'. [ 262.505046][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 262.679614][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 263.070012][T13632] wg1 speed is unknown, defaulting to 1000 [ 263.399881][T13653] af_packet: tpacket_rcv: packet too big, clamped from 252 to 4294967272. macoff=96 [ 263.997217][T13660] netlink: 'syz.1.2007': attribute type 12 has an invalid length. [ 264.015064][T13660] netlink: 'syz.1.2007': attribute type 29 has an invalid length. [ 264.023786][T13660] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2007'. [ 264.054696][T13668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2009'. [ 264.326696][T13673] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2010'. [ 264.361118][T13678] vxcan0: entered allmulticast mode [ 264.416794][T13680] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2010'. [ 264.861189][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2015'. [ 264.916543][T13694] wg1 speed is unknown, defaulting to 1000 [ 265.151450][T13705] netlink: 'syz.3.2017': attribute type 5 has an invalid length. [ 265.227992][T13707] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 265.544451][T13712] netlink: 'syz.1.2019': attribute type 11 has an invalid length. [ 265.599838][T13699] wg1 speed is unknown, defaulting to 1000 [ 265.788676][T13716] sctp: [Deprecated]: syz.4.2020 (pid 13716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.788676][T13716] Use struct sctp_sack_info instead [ 266.797558][T13731] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 266.823137][T13731] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 266.842445][T13734] __nla_validate_parse: 4 callbacks suppressed [ 266.842464][T13734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2027'. [ 266.978341][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2025'. [ 267.148763][T13732] syzkaller1: entered promiscuous mode [ 267.181015][T13732] syzkaller1: entered allmulticast mode [ 267.998347][T13762] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 268.233345][T13765] bond7: (slave bridge9): making interface the new active one [ 268.276803][T13765] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 268.691911][T13753] bond4: option miimon: invalid value (18446744073709551607) [ 268.744217][T13753] bond4: option miimon: allowed values 0 - 2147483647 [ 268.849908][T13753] bond4 (unregistering): Released all slaves [ 268.909860][T13789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2030'. [ 269.525618][T13802] syzkaller0: entered promiscuous mode [ 269.565844][T13802] syzkaller0: entered allmulticast mode [ 269.939665][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 270.227972][T13807] wg1 speed is unknown, defaulting to 1000 [ 271.395790][T13852] netlink: 'syz.0.2056': attribute type 6 has an invalid length. [ 271.465660][T13855] veth8: entered allmulticast mode [ 271.529839][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2056'. [ 271.571745][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2056'. [ 272.023302][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'. [ 272.886824][T13868] syzkaller0: entered promiscuous mode [ 272.906293][T13868] syzkaller0: entered allmulticast mode [ 273.435905][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 273.681889][T13907] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2066'. [ 273.735699][ C0] sched: DL replenish lagged too much [ 274.160770][T13917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2068'. [ 274.469147][T13910] wg1 speed is unknown, defaulting to 1000 [ 274.995426][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2073'. [ 275.323306][T13947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2075'. [ 275.382923][T13947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2075'. [ 275.404069][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 275.711507][T13963] x_tables: duplicate underflow at hook 1 [ 276.711766][T13986] netlink: 'syz.2.2087': attribute type 12 has an invalid length. [ 277.038411][T13998] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2089'. [ 277.174629][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2091'. [ 277.269827][T14003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2091'. [ 277.928343][T14019] erspan0: entered promiscuous mode [ 277.947922][T14024] netlink: 'syz.2.2097': attribute type 7 has an invalid length. [ 277.998291][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 278.108762][T14024] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 278.745128][T14038] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 278.779685][ T30] audit: type=1107 audit(1766734067.192:3): pid=14037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ko:/Q/6HgWFi?6v7ӌk0 [0r%CI?2ht_Y' [ 278.783376][T14040] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 317.109016][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.118172][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.927715][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 377.982466][T14055] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2103'. [ 378.018532][T14055] .70: renamed from hsr0 [ 378.060341][T14055] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.132515][T14055] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.199743][T14055] .70: entered allmulticast mode [ 378.216093][T14055] hsr_slave_0: entered allmulticast mode [ 378.251579][T14055] hsr_slave_1: entered allmulticast mode [ 378.282765][T14055] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 378.306890][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 378.331327][T14064] xt_CT: No such helper "pptp" [ 378.594068][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.682090][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.695306][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 378.855541][T14081] .70: entered promiscuous mode [ 378.895956][T14081] macsec1: entered promiscuous mode [ 378.930735][T14081] macsec1: entered allmulticast mode [ 379.195711][T14093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2113'. [ 379.257670][T14088] wg1 speed is unknown, defaulting to 1000 [ 380.177036][T14117] wg1 speed is unknown, defaulting to 1000 [ 380.959167][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 381.370226][T14144] bridge4: entered promiscuous mode [ 381.428035][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 381.773307][T14152] nbd: nbd2 already in use [ 381.786192][T14155] syzkaller0: entered promiscuous mode [ 381.795008][T14152] block nbd0: NBD_DISCONNECT [ 381.806073][T14155] syzkaller0: entered allmulticast mode [ 381.811978][T14152] block nbd0: Send disconnect failed -32 [ 381.828590][T14152] block nbd0: shutting down sockets [ 382.084392][T14161] netlink: 'syz.1.2130': attribute type 21 has an invalid length. [ 382.121976][T14165] netlink: 'syz.3.2129': attribute type 10 has an invalid length. [ 382.194304][T14161] netlink: 'syz.1.2130': attribute type 6 has an invalid length. [ 382.209393][T14161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2130'. [ 382.482024][T14166] wg1 speed is unknown, defaulting to 1000 [ 382.506892][T14173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.809033][T14190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2135'. [ 383.420155][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'. [ 383.521062][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 383.717879][T14209] siw: device registration error -23 [ 383.770445][T14209] lo: Caught tx_queue_len zero misconfig [ 384.125108][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 384.191959][T14222] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2139'. [ 384.252313][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 384.291964][T14216] wg1 speed is unknown, defaulting to 1000 [ 384.558363][T14223] wg1 speed is unknown, defaulting to 1000 [ 385.280421][T14250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 386.358827][T14277] gretap0: entered promiscuous mode [ 386.390623][T14277] vlan3: entered promiscuous mode [ 387.241775][ T30] audit: type=1804 audit(1766734175.562:4): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2159" name="/newroot/383/cgroup.controllers" dev="tmpfs" ino=1967 res=1 errno=0 [ 387.316884][ T30] audit: type=1800 audit(1766734175.572:5): pid=14295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2159" name="cgroup.controllers" dev="tmpfs" ino=1967 res=0 errno=0 [ 387.392274][ T30] audit: type=1800 audit(1766734175.572:6): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2159" name="cgroup.controllers" dev="tmpfs" ino=1967 res=0 errno=0 [ 387.560662][T14305] C: renamed from team_slave_0 [ 387.617320][T14305] netlink: 'syz.4.2163': attribute type 2 has an invalid length. [ 387.728424][T14305] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2163'. [ 387.748108][T14316] sctp: [Deprecated]: syz.3.2165 (pid 14316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.748108][T14316] Use struct sctp_sack_info instead [ 387.836342][T14305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 388.194954][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2168'. [ 388.436267][T14335] netlink: 'syz.4.2171': attribute type 16 has an invalid length. [ 388.838456][T14350] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 388.877517][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2175'. [ 389.225233][T14343] bridge0: entered promiscuous mode [ 389.239066][T14343] macsec3: entered promiscuous mode [ 389.245668][T14343] bridge0: port 2(macsec3) entered blocking state [ 389.252368][T14343] bridge0: port 2(macsec3) entered disabled state [ 389.261504][T14343] macsec3: entered allmulticast mode [ 389.267263][T14343] bridge0: entered allmulticast mode [ 389.276656][T14343] macsec3: left allmulticast mode [ 389.281849][T14343] bridge0: left allmulticast mode [ 389.322155][T14343] bridge0: left promiscuous mode [ 389.518788][T14356] tipc: Enabling of bearer rejected, failed to enable media [ 389.550553][T14334] wg1 speed is unknown, defaulting to 1000 [ 389.561075][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 389.616951][T14358] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 389.800051][T14368] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2178'. [ 389.907425][T14358] bond4: entered promiscuous mode [ 389.919793][T14358] bond4: entered allmulticast mode [ 389.934266][T14358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.334408][T14381] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 390.608194][T14393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2186'. [ 391.306764][T14405] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 391.358690][T14411] xt_CT: No such helper "snmp_trap" [ 391.400306][T14410] : renamed from veth0_vlan (while UP) [ 392.181857][T14440] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 392.589408][T14440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.841263][T14461] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2202'. [ 392.856295][T14462] xt_TCPMSS: Only works on TCP SYN packets [ 393.060495][T14474] netlink: 'syz.1.2204': attribute type 12 has an invalid length. [ 393.168960][T14480] netlink: 'syz.2.2207': attribute type 12 has an invalid length. [ 393.197826][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 393.257104][T14480] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 393.407913][T14487] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 393.698211][T14502] wg1 speed is unknown, defaulting to 1000 [ 393.714858][T14508] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 393.770916][T14515] netlink: 'syz.4.2216': attribute type 3 has an invalid length. [ 393.797060][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 394.283297][T14541] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2221'. [ 394.370260][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2223'. [ 394.580341][T14566] netlink: 'syz.1.2228': attribute type 8 has an invalid length. [ 394.592930][T14564] wg1 speed is unknown, defaulting to 1000 [ 394.844377][T14583] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 394.863440][T14566] wg1 speed is unknown, defaulting to 1000 [ 394.863452][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 394.898375][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 395.146768][T14615] netlink: 'syz.3.2240': attribute type 2 has an invalid length. [ 395.202989][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 395.226451][T14611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2239'. [ 395.245668][T14615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2240'. [ 395.494119][T14633] syzkaller0: entered promiscuous mode [ 395.512346][T14633] syzkaller0: entered allmulticast mode [ 395.692154][T14650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2248'. [ 395.766803][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 395.779806][T14650] openvswitch: netlink: Flow actions attr not present in new flow. [ 395.800651][T14657] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 395.966885][T14671] Cannot find add_set index 0 as target [ 396.058910][T14663] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 396.071400][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2257'. [ 396.129604][T14672] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 396.168947][T14678] ip6gre1: entered promiscuous mode [ 396.175395][T14678] ip6gre1: entered allmulticast mode [ 396.470682][T14688] dummy0: entered promiscuous mode [ 397.040879][T14709] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 397.512170][T14731] netlink: 'syz.3.2270': attribute type 7 has an invalid length. [ 397.761308][T14739] xfrm2: entered promiscuous mode [ 397.768209][T14739] xfrm2: entered allmulticast mode [ 398.091551][T14755] wg1 speed is unknown, defaulting to 1000 [ 398.160932][T14762] tc_dump_action: action bad kind [ 398.353195][T14764] team1: entered promiscuous mode [ 398.366281][T14764] team1: entered allmulticast mode [ 398.372313][T14764] 8021q: adding VLAN 0 to HW filter on device team1 [ 398.523423][T14771] team2: entered promiscuous mode [ 398.528589][T14771] team2: entered allmulticast mode [ 398.534414][T14771] 8021q: adding VLAN 0 to HW filter on device team2 [ 398.679347][T14777] ip6gre1: entered promiscuous mode [ 399.379227][T14788] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 399.510408][T14788] 8021q: adding VLAN 0 to HW filter on device bond29 [ 399.528489][T14793] vlan2: entered promiscuous mode [ 399.533532][T14793] bond29: entered promiscuous mode [ 399.604379][T14793] vlan2: entered allmulticast mode [ 399.640245][T14793] bond29: entered allmulticast mode [ 399.830320][T14813] __nla_validate_parse: 10 callbacks suppressed [ 399.830339][T14813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2292'. [ 399.876091][T14806] wg1 speed is unknown, defaulting to 1000 [ 399.899923][T14812] netlink: 'syz.0.2292': attribute type 4 has an invalid length. [ 399.900311][T14810] syzkaller0: entered promiscuous mode [ 399.916506][T14810] syzkaller0: entered allmulticast mode [ 399.918940][T14813] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2292'. [ 399.988034][T14812] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2292'. [ 400.029383][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2292'. [ 400.046117][T14814] netlink: 'syz.0.2292': attribute type 4 has an invalid length. [ 400.065001][T14814] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2292'. [ 400.684246][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 400.733093][T14872] xfrm0: entered promiscuous mode [ 400.740853][T14872] xfrm0: entered allmulticast mode [ 401.045449][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 401.058898][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 401.092272][T14892] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2316'. [ 401.194725][T14894] syzkaller0: entered promiscuous mode [ 401.207540][T14894] syzkaller0: entered allmulticast mode [ 401.400081][T14904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2320'. [ 401.422338][T14904] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 401.678859][T14920] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 401.742054][T14920] 8021q: adding VLAN 0 to HW filter on device bond30 [ 401.828765][T14923] 8021q: adding VLAN 0 to HW filter on device bond30 [ 401.842054][T14923] bond30: (slave vxcan5): The slave device specified does not support setting the MAC address [ 401.867378][T14923] bond30: (slave vxcan5): Error -95 calling set_mac_address [ 402.001873][T14920] veth7: entered promiscuous mode [ 402.540133][T14961] syzkaller0: entered promiscuous mode [ 402.548058][T14961] syzkaller0: entered allmulticast mode [ 402.555167][T14959] tipc: Enabled bearer , priority 0 [ 402.593218][T14958] tipc: Resetting bearer [ 402.828726][T14991] IPVS: Scheduler module ip_vs_sip not found [ 404.119391][T14958] tipc: Disabling bearer [ 404.136104][T15001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.166694][T15001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.182953][T15001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.201825][T15001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.219795][T15001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.247540][T15001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.708913][T15036] openvswitch: netlink: Actions may not be safe on all matching packets [ 404.958580][T15047] __nla_validate_parse: 7 callbacks suppressed [ 404.958598][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'. [ 404.978614][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'. [ 404.990340][T15047] netlink: 'syz.1.2360': attribute type 1 has an invalid length. [ 405.000117][T15047] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2360'. [ 405.013641][T15049] geneve4: entered promiscuous mode [ 405.092173][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2362'. [ 405.215194][T15059] wg1 speed is unknown, defaulting to 1000 [ 405.710396][T15074] wg1 speed is unknown, defaulting to 1000 [ 405.797700][T15079] batadv_slave_0: entered promiscuous mode [ 405.814445][T15081] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 405.856843][T15085] sctp: [Deprecated]: syz.4.2370 (pid 15085) Use of int in maxseg socket option. [ 405.856843][T15085] Use struct sctp_assoc_value instead [ 405.868589][T15081] bond31: entered promiscuous mode [ 405.879542][T15081] 8021q: adding VLAN 0 to HW filter on device bond31 [ 405.900993][T15082] bond31: (slave bridge9): making interface the new active one [ 405.909153][T15082] bridge9: entered promiscuous mode [ 405.916239][T15082] bond31: (slave bridge9): Enslaving as an active interface with an up link [ 406.062162][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 406.098716][T15081] bond31: (slave bridge10): Enslaving as a backup interface with an up link [ 406.190088][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 406.191656][T15095] wg1 speed is unknown, defaulting to 1000 [ 406.205906][T15100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2374'. [ 406.482213][T15116] netlink: 'syz.0.2378': attribute type 15 has an invalid length. [ 406.596776][T15122] ip6gre2: entered promiscuous mode [ 406.602083][T15122] ip6gre2: entered allmulticast mode [ 406.624052][T15078] batadv_slave_0: left promiscuous mode [ 406.719646][T15126] pim6reg1: tun_chr_ioctl cmd 21731 [ 406.795115][T15131] xt_hashlimit: max too large, truncated to 1048576 [ 406.806422][T15131] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 406.818896][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2382'. [ 406.829380][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2382'. [ 406.881937][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 406.901111][T15141] netlink: 'syz.1.2385': attribute type 7 has an invalid length. [ 407.009472][T15154] netlink: 'syz.4.2388': attribute type 2 has an invalid length. [ 407.053227][T15154] @;: entered promiscuous mode [ 407.109265][T15158] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 407.134494][T15158] team0: Device ipvlan2 is already an upper device of the team interface [ 407.368548][T15175] batadv1: entered promiscuous mode [ 407.454168][T15184] netlink: 'syz.0.2391': attribute type 10 has an invalid length. [ 407.553198][T15185] wg1 speed is unknown, defaulting to 1000 [ 408.052828][T15212] tipc: MTU too low for tipc bearer [ 408.182806][T15217] wg1 speed is unknown, defaulting to 1000 [ 408.420213][T15228] netlink: 'syz.1.2403': attribute type 1 has an invalid length. [ 408.509185][T15228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.551970][T15236] block nbd0: Unsupported socket: should be TCP or UNIX. [ 408.619784][T15237] delete_channel: no stack [ 408.711103][T15243] netlink: 'syz.1.2407': attribute type 4 has an invalid length. [ 408.749532][T15244] netlink: 'syz.1.2407': attribute type 4 has an invalid length. [ 409.075072][T15262] wg1 speed is unknown, defaulting to 1000 [ 409.527286][T15277] netlink: 'syz.4.2417': attribute type 2 has an invalid length. [ 409.606150][T15277] 9: entered promiscuous mode [ 409.760951][T15282] syzkaller1: entered promiscuous mode [ 409.767037][T15282] syzkaller1: entered allmulticast mode [ 410.504099][T15322] __nla_validate_parse: 6 callbacks suppressed [ 410.504116][T15322] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2429'. [ 410.523218][T15322] syzkaller0: entered promiscuous mode [ 410.528855][T15322] syzkaller0: entered allmulticast mode [ 410.557426][T15322] tipc: Enabled bearer , priority 0 [ 410.583192][T15322] tipc: Resetting bearer [ 410.650949][T15327] netlink: 'syz.1.2429': attribute type 6 has an invalid length. [ 410.717820][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 410.738491][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2430'. [ 410.770392][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 410.896100][T15336] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 410.941966][T15337] xt_TCPMSS: Only works on TCP SYN packets [ 411.416899][T15320] tipc: Resetting bearer [ 412.112713][T15320] tipc: Disabling bearer [ 412.226630][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'. [ 412.276127][ T48] tipc: Node number set to 791989101 [ 412.284158][T15373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.292476][T15373] batadv0: mtu less than device minimum [ 412.299641][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.311783][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.323577][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.335285][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.347022][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.358837][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.370677][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.382473][T15373] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.471703][T15373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.510095][T15379] netlink: 'syz.1.2449': attribute type 2 has an invalid length. [ 412.519190][T15379] netlink: 'syz.1.2449': attribute type 5 has an invalid length. [ 412.528053][T15376] netlink: 'syz.3.2447': attribute type 4 has an invalid length. [ 412.719203][T15392] x9: renamed from bridge_slave_0 [ 412.925264][T15405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2455'. [ 412.953077][T15407] ipvlan0: entered promiscuous mode [ 412.967279][T15407] ipvlan0: entered allmulticast mode [ 413.173778][T15427] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2461'. [ 413.188410][T15427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2461'. [ 439.988628][ T1300] net_ratelimit: 12 callbacks suppressed [ 439.988647][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.003408][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 486.815424][T15455] syzkaller0: entered promiscuous mode [ 486.821558][T15455] syzkaller0: entered allmulticast mode [ 486.858272][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 486.869103][T15457] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 486.876765][T15457] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 486.884588][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 486.913433][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 486.925640][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 487.091194][T15468] x_tables: duplicate underflow at hook 2 [ 487.729914][T15482] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 487.787582][T15455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 487.907298][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2479'. [ 487.968125][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 488.264682][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 488.423752][T15523] netlink: 'syz.4.2488': attribute type 3 has an invalid length. [ 488.507568][T15517] block nbd0: server does not support multiple connections per device. [ 488.516479][T15530] syz_tun: entered allmulticast mode [ 488.530179][T15530] siw: device registration error -23 [ 488.536575][T15517] block nbd0: shutting down sockets [ 488.556597][T15530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.633673][T15521] syz_tun: left allmulticast mode [ 488.650490][T15533] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 488.687100][T15538] netlink: 'syz.2.2490': attribute type 1 has an invalid length. [ 488.816673][T15544] ip6_vti0: Caught tx_queue_len zero misconfig [ 488.881821][T15553] sctp: [Deprecated]: syz.2.2493 (pid 15553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.881821][T15553] Use struct sctp_sack_info instead [ 488.972040][T15555] nbd: device at index 0 is going down [ 489.468061][T15575] netlink: 'syz.2.2499': attribute type 8 has an invalid length. [ 490.013223][T15607] x_tables: duplicate underflow at hook 2 [ 490.629317][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 490.634903][T15621] raw_sendmsg: syz.2.2513 forgot to set AF_INET. Fix it! [ 490.690304][T15623] netlink: 'syz.4.2512': attribute type 3 has an invalid length. [ 490.710005][T15628] netlink: 'syz.2.2513': attribute type 12 has an invalid length. [ 490.935309][T15639] x_tables: duplicate underflow at hook 2 [ 491.017858][T15641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2515'. [ 491.242888][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 491.496213][T15672] netlink: 'syz.0.2525': attribute type 1 has an invalid length. [ 491.503976][T15672] netlink: 'syz.0.2525': attribute type 2 has an invalid length. [ 491.621959][T15678] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 491.629818][T15678] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 491.717208][T15684] 8021q: VLANs not supported on ip6tnl0 [ 491.724109][T15683] 8021q: VLANs not supported on ip6tnl0 [ 491.973156][T15700] __nla_validate_parse: 3 callbacks suppressed [ 491.973174][T15700] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2537'. [ 491.973203][T15701] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2537'. [ 491.980838][T15700] openvswitch: netlink: Flow key attr not present in new flow. [ 492.068020][T15701] openvswitch: netlink: Flow key attr not present in new flow. [ 492.101773][T15702] delete_channel: no stack [ 492.159153][T15707] wg1 speed is unknown, defaulting to 1000 [ 492.380094][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'. [ 492.485752][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'. [ 492.502121][T15700] infiniband !yz!: set down [ 492.507118][T15700] infiniband !yz!: added team_slave_0 [ 492.570012][T15700] RDS/IB: !yz!: added [ 492.581461][T15700] smc: adding ib device !yz! with port count 1 [ 492.596846][T15700] smc: ib device !yz! port 1 has no pnetid [ 492.751475][T15737] xt_hashlimit: max too large, truncated to 1048576 [ 493.004747][T15752] tipc: Enabled bearer , priority 0 [ 493.013172][T15752] syzkaller0: entered promiscuous mode [ 493.023429][T15752] syzkaller0: entered allmulticast mode [ 493.050635][T15752] tipc: Resetting bearer [ 493.066466][T15751] tipc: Resetting bearer [ 493.102103][T15751] tipc: Disabling bearer [ 493.437566][T15769] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 493.465727][T15769] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 493.985028][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 494.015638][T15807] block nbd3: Unsupported socket: should be TCP or UNIX. [ 494.033000][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2567'. [ 494.669710][ T30] audit: type=1107 audit(1766734283.092:7): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 494.870764][T15834] netlink: 'syz.1.2575': attribute type 1 has an invalid length. [ 494.906313][T15834] netlink: 'syz.1.2575': attribute type 2 has an invalid length. [ 495.097775][T15834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2575'. [ 495.159933][T15855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2579'. [ 495.335354][T15865] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 495.420778][T15877] netlink: 'syz.0.2583': attribute type 13 has an invalid length. [ 495.439184][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2584'. [ 495.471035][T15877] netlink: 'syz.0.2583': attribute type 17 has an invalid length. [ 495.484580][T15876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2584'. [ 495.881267][T15886] bridge_slave_1: left allmulticast mode [ 495.895461][T15886] bridge_slave_1: left promiscuous mode [ 495.904182][T15886] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.929253][T15886] bridge_slave_0: left allmulticast mode [ 495.935352][T15886] bridge_slave_0: left promiscuous mode [ 495.941985][T15886] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.420776][T15907] wg1 speed is unknown, defaulting to 1000 [ 496.592132][T15916] wg1 speed is unknown, defaulting to 1000 [ 496.754732][T15928] lo: entered allmulticast mode [ 496.783626][T15928] lo: left allmulticast mode [ 497.042030][T15939] wg1 speed is unknown, defaulting to 1000 [ 497.049719][T15941] __nla_validate_parse: 3 callbacks suppressed [ 497.049734][T15941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2599'. [ 497.636626][T15961] wireguard0: entered promiscuous mode [ 497.663737][T15961] wireguard0: entered allmulticast mode [ 497.708583][T15961] team0: Port device wireguard0 added [ 497.787522][T15970] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2603'. [ 497.936081][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2604'. [ 498.378766][T15991] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2611'. [ 499.174863][T16010] wg1 speed is unknown, defaulting to 1000 [ 499.247877][T16017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 499.300143][T16017] syzkaller1: entered promiscuous mode [ 499.318894][T16017] syzkaller1: entered allmulticast mode [ 499.427665][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 499.439080][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 499.459816][T16027] netlink: 'syz.3.2619': attribute type 15 has an invalid length. [ 500.190577][T16049] wg1 speed is unknown, defaulting to 1000 [ 500.430195][T16067] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2631'. [ 500.696631][T16070] syzkaller1: entered promiscuous mode [ 500.702138][T16070] syzkaller1: entered allmulticast mode [ 500.803204][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2634'. [ 501.066952][T16088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2637'. [ 501.146507][T16088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.153789][T16088] IPv6: NLM_F_CREATE should be set when creating new route [ 501.161076][T16088] IPv6: NLM_F_CREATE should be set when creating new route [ 501.253624][T16095] No such timeout policy "syz1" [ 501.406182][T16103] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 501.417147][T16102] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 501.429580][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.432228][T16103] dvmrp1: linktype set to 270 [ 501.451224][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.594234][T16099] wg1 speed is unknown, defaulting to 1000 [ 501.643242][T16103] wg1 speed is unknown, defaulting to 1000 [ 502.099230][T16126] __nla_validate_parse: 1 callbacks suppressed [ 502.099248][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2649'. [ 502.124098][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2649'. [ 502.405716][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 502.423033][T16130] wg1 speed is unknown, defaulting to 1000 [ 502.520812][T16131] wg1 speed is unknown, defaulting to 1000 [ 502.699243][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 502.731097][T16148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2652'. [ 502.954507][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'. [ 502.996184][T16154] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 503.004224][T16154] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2654'. [ 503.204225][T16158] netlink: 'syz.3.2656': attribute type 1 has an invalid length. [ 503.298832][T16160] netlink: 'syz.0.2657': attribute type 13 has an invalid length. [ 503.409625][T16165] xt_TCPMSS: Only works on TCP SYN packets [ 503.720174][T16164] wg1 speed is unknown, defaulting to 1000 [ 504.192576][T16200] netlink: 'syz.0.2666': attribute type 1 has an invalid length. [ 504.202750][T16200] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2666'. [ 504.463729][T16208] IPv6: sit3: Disabled Multicast RS [ 504.682344][T16216] tipc: Enabled bearer , priority 0 [ 504.722738][T16225] openvswitch: netlink: Missing valid actions attribute. [ 504.746091][T16225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.775178][T16221] syzkaller0: entered promiscuous mode [ 504.781869][T16221] syzkaller0: entered allmulticast mode [ 504.789221][T16216] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 504.797235][T16216] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 504.805148][T16220] tipc: Enabled bearer , priority 0 [ 504.870685][T16220] tipc: Resetting bearer [ 505.506093][T16244] unsupported nla_type 29115 [ 506.760312][T16220] tipc: Disabling bearer [ 506.770145][T16241] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 506.777159][T16241] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 506.796852][ T5998] tipc: Node number set to 3005874116 [ 506.912069][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 507.016701][T16277] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2683'. [ 507.089424][T16286] xt_l2tp: missing protocol rule (udp|l2tpip) [ 507.118316][T16286] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 507.544528][T16318] netlink: 'syz.4.2693': attribute type 1 has an invalid length. [ 507.564758][T16317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2694'. [ 507.793033][T16317] wg1 speed is unknown, defaulting to 1000 [ 507.882410][T16330] netlink: 'syz.4.2699': attribute type 1 has an invalid length. [ 507.896394][T16332] pim6reg1: tun_chr_ioctl cmd 21731 [ 507.987219][T16330] bond8: entered promiscuous mode [ 507.992548][T16330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 508.031432][T16341] 8021q: adding VLAN 0 to HW filter on device bond8 [ 508.038688][T16341] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 508.044243][T16344] netlink: 'syz.2.2700': attribute type 83 has an invalid length. [ 508.050179][T16341] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 508.082646][T16341] bond8: (slave wireguard0): making interface the new active one [ 508.090781][T16341] wireguard0: entered promiscuous mode [ 508.098948][T16341] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 508.125936][T16330] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address [ 508.142757][T16330] bond8: (slave wireguard1): Enslaving as a backup interface with an up link [ 508.478835][T16353] tipc: Enabled bearer , priority 0 [ 508.504970][T16353] tipc: Resetting bearer [ 509.010871][T16399] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 510.242091][T16353] tipc: Disabling bearer [ 510.280309][T16369] netlink: 'syz.4.2706': attribute type 7 has an invalid length. [ 510.305403][T16393] bridge0: entered promiscuous mode [ 510.330486][ T5998] tipc: Node number set to 1195049090 [ 510.433488][T16415] syzkaller0: entered promiscuous mode [ 510.447030][T16415] syzkaller0: entered allmulticast mode [ 510.666513][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 510.705782][T16428] openvswitch: netlink: Flow key attr not present in new flow. [ 510.714024][T16429] netlink: 'syz.4.2718': attribute type 1 has an invalid length. [ 510.756576][T16428] veth3: entered promiscuous mode [ 510.802850][T16429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 510.826336][T16439] netlink: 'syz.0.2720': attribute type 12 has an invalid length. [ 510.836412][T16439] netlink: 'syz.0.2720': attribute type 4 has an invalid length. [ 510.841227][T16441] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 510.856420][T16441] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 510.919434][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'. [ 511.275743][T16473] netlink: 'syz.3.2730': attribute type 2 has an invalid length. [ 511.290720][T16473] : entered promiscuous mode [ 511.323925][T16477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2733'. [ 511.368866][T16476] veth11: entered promiscuous mode [ 511.390973][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 511.507295][T16485] wg1 speed is unknown, defaulting to 1000 [ 511.942489][T16502] wireguard0: entered promiscuous mode [ 511.958430][T16504] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2738'. [ 511.988145][T16502] wireguard0: entered allmulticast mode [ 511.996189][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2738'. [ 512.057213][T16497] netlink: 'syz.0.2736': attribute type 10 has an invalid length. [ 512.127035][T16497] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 512.176381][T16497] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 512.221237][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 512.446971][T16530] sctp: [Deprecated]: syz.3.2746 (pid 16530) Use of int in max_burst socket option. [ 512.446971][T16530] Use struct sctp_assoc_value instead [ 512.551816][T16536] syzkaller0: entered promiscuous mode [ 512.565763][T16536] syzkaller0: entered allmulticast mode [ 512.719246][T16544] tipc: Enabling of bearer rejected, failed to enable media [ 512.747856][T16545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.043302][T16554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2750'. [ 513.226969][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 513.883141][T16580] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2759'. [ 513.917373][T16580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2759'. [ 514.167476][T16601] tunl0: Caught tx_queue_len zero misconfig [ 514.222574][T16602] netlink: 'syz.4.2766': attribute type 11 has an invalid length. [ 514.231199][T16602] netlink: 'syz.4.2766': attribute type 11 has an invalid length. [ 514.256547][T16602] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2766'. [ 514.347515][T16607] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2767'. [ 514.377700][T16607] .71: renamed from .70 (while UP) [ 514.407123][T16607] .71: left promiscuous mode [ 514.412387][T16607] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check. [ 514.549513][T16626] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2772'. [ 514.574609][T16624] team0: Device gtp0 is up. Set it down before adding it as a team port [ 514.850947][T16636] ip6tnl0: Caught tx_queue_len zero misconfig [ 514.932695][T16638] netlink: 'syz.2.2776': attribute type 15 has an invalid length. [ 515.244670][T16646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2778'. [ 515.375264][T16652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 515.387307][T16652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 515.395135][T16652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 515.403798][T16652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 515.411504][T16652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 515.459254][T16649] wg1 speed is unknown, defaulting to 1000 [ 515.536243][T16656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2781'. [ 515.623697][T16659] netlink: 'syz.4.2781': attribute type 4 has an invalid length. [ 515.637563][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2781'. [ 515.768284][ T5832] syz_tun (unregistering): left allmulticast mode [ 515.780914][T16658] wg1 speed is unknown, defaulting to 1000 [ 516.093696][T16666] wg1 speed is unknown, defaulting to 1000 [ 516.565914][T16685] syzkaller1: entered promiscuous mode [ 516.571435][T16685] syzkaller1: entered allmulticast mode [ 516.579107][T16686] netlink: 'syz.4.2784': attribute type 6 has an invalid length. [ 516.620131][T16685] netlink: 'syz.3.2788': attribute type 21 has an invalid length. [ 516.702589][T16685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.721046][T16649] chnl_net:caif_netlink_parms(): no params data found [ 517.000675][T16692] wg1 speed is unknown, defaulting to 1000 [ 517.115834][T16649] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.123467][T16649] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.131865][T16649] bridge_slave_0: entered allmulticast mode [ 517.140460][T16649] bridge_slave_0: entered promiscuous mode [ 517.150607][T16649] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.161213][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.171557][T16649] bridge_slave_1: entered allmulticast mode [ 517.179621][T16649] bridge_slave_1: entered promiscuous mode [ 517.287640][T16649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.311408][T16649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.513867][ T5839] Bluetooth: hci5: command tx timeout [ 517.559884][T16649] team0: Port device team_slave_0 added [ 517.633831][T16717] netlink: 'syz.0.2796': attribute type 9 has an invalid length. [ 517.692693][T16649] team0: Port device team_slave_1 added [ 517.832218][T16649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.841511][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.877440][T16649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.902816][T16649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.931051][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.976116][T16649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.026464][T16722] netlink: 'syz.3.2798': attribute type 46 has an invalid length. [ 518.181708][T16649] hsr_slave_0: entered promiscuous mode [ 518.198290][T16649] hsr_slave_1: entered promiscuous mode [ 518.198800][T16726] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 518.210416][T16649] debugfs: 'hsr0' already exists in 'hsr' [ 518.221720][T16649] Cannot create hsr debugfs directory [ 518.298717][T16731] netlink: 'syz.3.2801': attribute type 6 has an invalid length. [ 518.309446][T16731] netlink: 'syz.3.2801': attribute type 7 has an invalid length. [ 518.317740][T16731] netlink: 'syz.3.2801': attribute type 8 has an invalid length. [ 518.325486][T16731] netlink: 'syz.3.2801': attribute type 13 has an invalid length. [ 518.522079][T16738] tipc: Enabled bearer , priority 0 [ 518.537284][T16734] __nla_validate_parse: 4 callbacks suppressed [ 518.537301][T16734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2802'. [ 518.546836][T16738] syzkaller0: entered promiscuous mode [ 518.565691][T16738] syzkaller0: entered allmulticast mode [ 518.650701][T16738] tipc: Resetting bearer [ 518.660521][T16736] tipc: Resetting bearer [ 518.692750][T16736] tipc: Disabling bearer [ 518.817295][T16742] xt_CT: No such helper "snmp" [ 518.873994][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 518.885911][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 518.907653][T16748] ip6gre2: entered promiscuous mode [ 518.912894][T16748] ip6gre2: entered allmulticast mode [ 518.921090][T16188] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.938286][T16188] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.949807][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.987296][T16753] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2809'. [ 519.106405][ T5998] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 519.162104][T16649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 519.212583][T16649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 519.249445][T16649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 519.281775][T16649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 519.553008][T16649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.585981][ T5839] Bluetooth: hci5: command tx timeout [ 519.597571][T16649] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.667422][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 519.798532][T16780] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.809290][T16780] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.862213][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.869401][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.917860][T16780] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.933045][T16780] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.981568][T16182] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.988792][T16182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.039359][T16780] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.072976][T16780] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.113813][T16794] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.150431][T16780] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.161865][T16780] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.209598][T16794] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.228559][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 520.329797][T16807] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2819'. [ 520.338977][T16807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2819'. [ 520.362136][T16794] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.402777][T16812] wg1 speed is unknown, defaulting to 1000 [ 520.458292][T16794] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.495095][ T3651] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.513586][ T3651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.522477][ T3651] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.531256][ T3651] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.567193][T16176] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.582683][T16176] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.603759][T16816] tipc: Enabled bearer , priority 0 [ 520.611470][ T3651] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.635787][ T3651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.681050][T16816] syzkaller0: entered promiscuous mode [ 520.708735][T16816] syzkaller0: entered allmulticast mode [ 520.735349][ T3651] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.806890][T16176] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.904571][T16815] tipc: Resetting bearer [ 520.992790][T16815] tipc: Disabling bearer [ 521.145007][ T3651] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.276547][ T3651] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.963432][T16812] ------------[ cut here ]------------ [ 521.969216][T16812] refcount_t: underflow; use-after-free. [ 521.974940][T16812] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#0: syz.4.2819/16812 [ 521.985458][T16812] Modules linked in: [ 521.990076][T16812] CPU: 0 UID: 0 PID: 16812 Comm: syz.4.2819 Not tainted syzkaller #0 PREEMPT(full) [ 521.999545][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.009766][T16812] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 522.015868][T16812] Code: 94 68 fd 0a 67 48 0f b9 3a eb 4a e8 68 a0 32 fd 48 8d 3d 91 68 fd 0a 67 48 0f b9 3a eb 37 e8 55 a0 32 fd 48 8d 3d 8e 68 fd 0a <67> 48 0f b9 3a eb 24 e8 42 a0 32 fd 48 8d 3d 8b 68 fd 0a 67 48 0f [ 522.035494][T16812] RSP: 0018:ffffc900052ef578 EFLAGS: 00010293 [ 522.041916][T16812] RAX: ffffffff848f11fb RBX: 0000000000000003 RCX: ffff88802fb41e80 [ 522.049946][T16812] RDX: 0000000000000000 RSI: ffffffff8e68e140 RDI: ffffffff8f8c7a90 [ 522.057962][T16812] RBP: 0000000000000000 R08: ffff88802fb41e80 R09: 0000000000000005 [ 522.066338][T16812] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807f3c5c00 [ 522.074385][T16812] R13: ffff88807f369c60 R14: ffff88807f369c78 R15: dffffc0000000000 [ 522.082439][T16812] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 522.091502][T16812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.098443][T16812] CR2: 000056479aed3f40 CR3: 0000000032910000 CR4: 00000000003526f0 [ 522.106476][T16812] Call Trace: [ 522.109745][T16812] [ 522.112656][T16812] klist_dec_and_del+0x3c7/0x3d0 [ 522.117626][T16812] klist_remove+0x1bd/0x340 [ 522.122112][T16812] ? __pfx_klist_children_put+0x10/0x10 [ 522.127808][T16812] ? __pfx_klist_remove+0x10/0x10 [ 522.132811][T16812] ? kobject_move+0x5a6/0x6e0 [ 522.137524][T16812] ? __pfx_kobject_move+0x10/0x10 [ 522.142532][T16812] ? do_raw_spin_unlock+0x122/0x240 [ 522.147849][T16812] ? get_device_parent+0x366/0x3a0 [ 522.152962][T16812] device_move+0x193/0x730 [ 522.157753][T16812] hci_conn_del_sysfs+0xb8/0x1a0 [ 522.162696][T16812] hci_conn_del+0xc36/0x1240 [ 522.167339][T16812] hci_conn_hash_flush+0x191/0x260 [ 522.172462][T16812] hci_dev_close_sync+0x821/0x1100 [ 522.177612][T16812] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 522.183140][T16812] ? up_write+0x1ac/0x410 [ 522.187687][T16812] ? rcu_is_watching+0x15/0xb0 [ 522.192444][T16812] hci_unregister_dev+0x21a/0x5b0 [ 522.197538][T16812] vhci_release+0x152/0x1a0 [ 522.202044][T16812] ? __pfx_vhci_release+0x10/0x10 [ 522.207095][T16812] __fput+0x44c/0xa70 [ 522.211068][T16812] task_work_run+0x1d4/0x260 [ 522.215959][T16812] ? __pfx_task_work_run+0x10/0x10 [ 522.221074][T16812] ? kmem_cache_free+0x197/0x620 [ 522.226037][T16812] ? do_exit+0x6c0/0x2310 [ 522.230353][T16812] do_exit+0x6c5/0x2310 [ 522.234491][T16812] ? do_raw_spin_lock+0x121/0x290 [ 522.239552][T16812] ? __pfx_do_exit+0x10/0x10 [ 522.244133][T16812] do_group_exit+0x21c/0x2d0 [ 522.248859][T16812] ? lockdep_hardirqs_on+0x98/0x140 [ 522.254044][T16812] get_signal+0x1285/0x1340 [ 522.258649][T16812] arch_do_signal_or_restart+0x9a/0x7a0 [ 522.264182][T16812] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 522.270368][T16812] ? exit_to_user_mode_loop+0x55/0x4f0 [ 522.275968][T16812] exit_to_user_mode_loop+0x87/0x4f0 [ 522.281237][T16812] ? rcu_is_watching+0x15/0xb0 [ 522.286022][T16812] do_syscall_64+0x2d0/0xf80 [ 522.290596][T16812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.296685][T16812] ? clear_bhb_loop+0x60/0xb0 [ 522.301358][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.307701][T16812] RIP: 0033:0x7fcee7b8f749 [ 522.312102][T16812] Code: Unable to access opcode bytes at 0x7fcee7b8f71f. [ 522.319164][T16812] RSP: 002b:00007fcee8aa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 522.327657][T16812] RAX: fffffffffffffffc RBX: 00007fcee7de6090 RCX: 00007fcee7b8f749 [ 522.335945][T16812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 522.343920][T16812] RBP: 00007fcee7c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 522.351942][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.359967][T16812] R13: 00007fcee7de6128 R14: 00007fcee7de6090 R15: 00007ffcf48f5538 [ 522.368100][T16812] [ 522.371106][T16812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 522.378365][T16812] CPU: 0 UID: 0 PID: 16812 Comm: syz.4.2819 Not tainted syzkaller #0 PREEMPT(full) [ 522.387710][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.397745][T16812] Call Trace: [ 522.401011][T16812] [ 522.403924][T16812] dump_stack_lvl+0x99/0x250 [ 522.408500][T16812] ? __asan_memcpy+0x40/0x70 [ 522.413068][T16812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.418245][T16812] ? __pfx__printk+0x10/0x10 [ 522.422826][T16812] vpanic+0x237/0x6d0 [ 522.426792][T16812] ? __pfx_vpanic+0x10/0x10 [ 522.431281][T16812] ? is_bpf_text_address+0x292/0x2b0 [ 522.436552][T16812] ? is_bpf_text_address+0x26/0x2b0 [ 522.441736][T16812] panic+0xb9/0xc0 [ 522.445437][T16812] ? __pfx_panic+0x10/0x10 [ 522.449856][T16812] __warn+0x317/0x4b0 [ 522.453816][T16812] ? refcount_warn_saturate+0xb2/0x110 [ 522.459256][T16812] ? refcount_warn_saturate+0xb2/0x110 [ 522.464699][T16812] __report_bug+0x288/0x500 [ 522.469180][T16812] ? __pfx_stack_trace_save+0x10/0x10 [ 522.474532][T16812] ? refcount_warn_saturate+0xb2/0x110 [ 522.479982][T16812] ? __pfx___report_bug+0x10/0x10 [ 522.485001][T16812] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 522.491224][T16812] ? __lock_acquire+0x146f/0x2cf0 [ 522.496238][T16812] report_bug_entry+0x19a/0x290 [ 522.501074][T16812] ? refcount_warn_saturate+0xb2/0x110 [ 522.506522][T16812] ? refcount_warn_saturate+0xb7/0x110 [ 522.511962][T16812] handle_bug+0xca/0x200 [ 522.516193][T16812] exc_invalid_op+0x1a/0x50 [ 522.520680][T16812] asm_exc_invalid_op+0x1a/0x20 [ 522.525514][T16812] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 522.531575][T16812] Code: 94 68 fd 0a 67 48 0f b9 3a eb 4a e8 68 a0 32 fd 48 8d 3d 91 68 fd 0a 67 48 0f b9 3a eb 37 e8 55 a0 32 fd 48 8d 3d 8e 68 fd 0a <67> 48 0f b9 3a eb 24 e8 42 a0 32 fd 48 8d 3d 8b 68 fd 0a 67 48 0f [ 522.551168][T16812] RSP: 0018:ffffc900052ef578 EFLAGS: 00010293 [ 522.557223][T16812] RAX: ffffffff848f11fb RBX: 0000000000000003 RCX: ffff88802fb41e80 [ 522.565177][T16812] RDX: 0000000000000000 RSI: ffffffff8e68e140 RDI: ffffffff8f8c7a90 [ 522.573131][T16812] RBP: 0000000000000000 R08: ffff88802fb41e80 R09: 0000000000000005 [ 522.581086][T16812] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807f3c5c00 [ 522.589044][T16812] R13: ffff88807f369c60 R14: ffff88807f369c78 R15: dffffc0000000000 [ 522.597010][T16812] ? refcount_warn_saturate+0xab/0x110 [ 522.602472][T16812] ? refcount_warn_saturate+0xab/0x110 [ 522.607917][T16812] klist_dec_and_del+0x3c7/0x3d0 [ 522.612844][T16812] klist_remove+0x1bd/0x340 [ 522.617335][T16812] ? __pfx_klist_children_put+0x10/0x10 [ 522.622886][T16812] ? __pfx_klist_remove+0x10/0x10 [ 522.627917][T16812] ? kobject_move+0x5a6/0x6e0 [ 522.632596][T16812] ? __pfx_kobject_move+0x10/0x10 [ 522.637613][T16812] ? do_raw_spin_unlock+0x122/0x240 [ 522.642808][T16812] ? get_device_parent+0x366/0x3a0 [ 522.647909][T16812] device_move+0x193/0x730 [ 522.652321][T16812] hci_conn_del_sysfs+0xb8/0x1a0 [ 522.657248][T16812] hci_conn_del+0xc36/0x1240 [ 522.661834][T16812] hci_conn_hash_flush+0x191/0x260 [ 522.666942][T16812] hci_dev_close_sync+0x821/0x1100 [ 522.672048][T16812] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 522.677579][T16812] ? up_write+0x1ac/0x410 [ 522.681893][T16812] ? rcu_is_watching+0x15/0xb0 [ 522.686655][T16812] hci_unregister_dev+0x21a/0x5b0 [ 522.691671][T16812] vhci_release+0x152/0x1a0 [ 522.696164][T16812] ? __pfx_vhci_release+0x10/0x10 [ 522.701176][T16812] __fput+0x44c/0xa70 [ 522.705158][T16812] task_work_run+0x1d4/0x260 [ 522.709738][T16812] ? __pfx_task_work_run+0x10/0x10 [ 522.714837][T16812] ? kmem_cache_free+0x197/0x620 [ 522.719757][T16812] ? do_exit+0x6c0/0x2310 [ 522.724080][T16812] do_exit+0x6c5/0x2310 [ 522.728228][T16812] ? do_raw_spin_lock+0x121/0x290 [ 522.733246][T16812] ? __pfx_do_exit+0x10/0x10 [ 522.737837][T16812] do_group_exit+0x21c/0x2d0 [ 522.742417][T16812] ? lockdep_hardirqs_on+0x98/0x140 [ 522.747603][T16812] get_signal+0x1285/0x1340 [ 522.752112][T16812] arch_do_signal_or_restart+0x9a/0x7a0 [ 522.757654][T16812] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 522.763808][T16812] ? exit_to_user_mode_loop+0x55/0x4f0 [ 522.769254][T16812] exit_to_user_mode_loop+0x87/0x4f0 [ 522.774524][T16812] ? rcu_is_watching+0x15/0xb0 [ 522.779277][T16812] do_syscall_64+0x2d0/0xf80 [ 522.783857][T16812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.789914][T16812] ? clear_bhb_loop+0x60/0xb0 [ 522.794578][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.800452][T16812] RIP: 0033:0x7fcee7b8f749 [ 522.804851][T16812] Code: Unable to access opcode bytes at 0x7fcee7b8f71f. [ 522.811848][T16812] RSP: 002b:00007fcee8aa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 522.820247][T16812] RAX: fffffffffffffffc RBX: 00007fcee7de6090 RCX: 00007fcee7b8f749 [ 522.828216][T16812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 522.836266][T16812] RBP: 00007fcee7c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 522.844223][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.852177][T16812] R13: 00007fcee7de6128 R14: 00007fcee7de6090 R15: 00007ffcf48f5538 [ 522.860151][T16812] [ 522.863554][T16812] Kernel Offset: disabled [ 522.867862][T16812] Rebooting in 86400 seconds..