last executing test programs: 1.83980971s ago: executing program 0 (id=4708): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) (async) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x254}]]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x178, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x164, 0x1, [@m_sample={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0xd9, 0x6, "ff1b923c8ae7f4376844c353f6a9bcb4f450fd444f2b4ce8ece57ba5a2af2675d042625c4e216205fca3e59c7229051fe3956ef48e9133e80a0d29afb2a375ff09094be6accb00dbf5d6cd2343ed5a9786bf5d230a202093ed58c657b0054599d72761d24650b4873f303a9a9ec6121e74fc7a5ce15c106cde8ed30fecb92303e331f2d963faf4d906472434b075dccc1e53bf4969241a0cc9ca694b1ff1f14112fd8ec4c9f755865ab945b95a38e4719930a058ae228dbc4a00"/213}, {0xc, 0x7, {0x1}}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x178}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x70}}, 0x0) 1.817696752s ago: executing program 4 (id=4711): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x4000) accept(r1, &(0x7f0000000180)=@ax25={{0x3, @bcast}, [@bcast, @null, @rose, @netrom, @bcast, @netrom, @default]}, &(0x7f0000000200)=0x80) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x7, 0xc, 0x5, 0x0, 0x1, 0x2]}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', r2, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r7, 0x12, 0xb, 0x0, 0x0) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x5}, &(0x7f00000020c0)=0xb354, 0x0, 0x7fffffffffffffff, 0x1, 0xc555, 0x7, 0x10, 0x6}}], 0x58}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r4}, 0x90) 1.749680665s ago: executing program 2 (id=4712): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000000000071100c00000000e55e32fc44bad52c1e0707000000000000002e2248d953e4431f1ead373fa6d9e6cd2fab2b0a984d6c97365ac0c4282f5586500f7c2b29f1f041149d03da6ef7c6793d83cd40ab2b3ab31a89c28f0d27f6766d68f4f8b234f8f347e51ebc76eedd33a77b496802060b47f5000000000000000000000000008f2e3c8db1a82a8954b267611100bd51f99df198b64b5b2619ff3c2388ac2b68560e250c84629ce32af6dc756eb280ecf79699843ed9fac9f6aa026ae14f2977bcdb936f8e9b90f4719cdb4631932838eae7557cc760956d9980cf84cfcd585a12b8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r7, &(0x7f0000000d00)="92", &(0x7f00000006c0)=@udp, 0x2}, 0x20) r8 = socket$inet6(0xa, 0x800, 0xffff) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa3dbbbbbbbbbbbb0011000142a1acfc886c5bc3b8648da2add0f8363b5ce7d963b103673ee1b3b13b41e55b46cf6973ff0b99679ea8b57eb8"], 0x0) 1.639308827s ago: executing program 0 (id=4714): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd2b, 0x3, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0x100}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r2, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) 1.534562627s ago: executing program 4 (id=4716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000700)={0x14, r1, 0xd0d, 0x70bd2a, 0x25dfdc01}, 0x14}}, 0x24044884) 1.325971365s ago: executing program 2 (id=4717): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80), 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x368) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r4, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3bc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x24040895) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3bc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x24040895) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0x10, 0x9, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r8, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r9, @ANYBLOB="00032bbd7000fddbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000080001007030303a30303a31302e30000000001c00820073b609324ac66c7af057778c6f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.323445018s ago: executing program 0 (id=4719): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xc4}]}}}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) connect$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="ab000000", @ANYRES16=r8, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r9, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, r14, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x808}, 0x4004041) 1.32294869s ago: executing program 2 (id=4720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="b800000013000200000000000be1df00fc02000000000000000000000000ebffffff0007000100003d1290263b0000008a71b6169f788e00"/71, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000004000000000000000000000000000000fdffffffffffffff0000000000000000fdffffffffffffff09000000000000000000000000000000feffffffffffffff04000000000000000000000000000000000000000000000009001000000000000001020000000000"], 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xb}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4048000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xd, 0x5}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x2, 0x7, 0x80000000, {0x6, 0x1, 0x3, 0x6, 0x200, 0xc6}, {0x0, 0x0, 0xffff, 0x5, 0x4, 0x10001}, 0x7fffffff, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xaffd, 0x3, 0x3, 0x1, 0x2, 0x6327, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, 0x7, 0xfffffff9, 0xffffffff, 0x80000000, 0x1, 0xc3, 0x10, 0x5, 0x200, 0x7, 0x7, 0x7d, 0x0, 0x80, 0x6, 0xfffffffd, 0x7f, 0x9, 0x400, 0x0, 0x7, 0x1, 0x2, 0x40, 0xfffffff9, 0xffffffff, 0x1, 0x1, 0x400, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0x4, 0xfffff800, 0x4, 0x401, 0x3, 0x7fffffff, 0x1, 0x1, 0x8001, 0xf, 0x2f37, 0x6, 0x9, 0x4, 0x5, 0x101, 0x83, 0x1, 0x4, 0x7, 0x58b, 0x8f, 0x8001, 0x3, 0x5, 0x6, 0x80, 0x5, 0x81, 0x3, 0x7, 0x6, 0x3, 0xd3aa, 0xc690, 0x800, 0x3, 0x1, 0x0, 0x9, 0x0, 0x4, 0x10, 0xac3, 0x9, 0x728, 0x1, 0x0, 0x3, 0x8001, 0x7, 0x1, 0x8000, 0xa1f9, 0x2, 0x8, 0x0, 0x5415, 0xf1, 0x3, 0x7fffffff, 0xbb35, 0x1, 0x4, 0x0, 0x0, 0x5, 0xac, 0x7ff, 0x4, 0x1, 0x4, 0x4, 0x8000, 0x10, 0x7f, 0x8, 0x6, 0x2, 0x8, 0x800, 0x7, 0x9a2e, 0x1398, 0x5, 0xf7b1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x5, 0x1000, 0x0, 0x5, 0xb, 0x0, 0x5, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x6, 0xb03c, 0x7, 0x7ff, 0x80000001, 0x7fff, 0xffffffff, 0x6, 0x9, 0x9, 0x5, 0x200, 0x7fff, 0x1, 0x5, 0x6, 0x0, 0x80000000, 0x5, 0x80, 0x9, 0x7, 0x8, 0x363, 0x610b, 0xfff, 0x8, 0x4, 0x9, 0x6, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x1, 0x10, 0x2, 0xd9, 0x0, 0xffff2dae, 0x7fff, 0x6, 0x7, 0x6b85, 0x8, 0x5, 0x5, 0xffff, 0x0, 0x80, 0x6, 0x4, 0x11a1, 0x0, 0xf3, 0x1, 0x2, 0xb5, 0x4, 0x7, 0x0, 0x7ff, 0x4, 0x4, 0xc585, 0x10001, 0x5bb7, 0x3, 0x1, 0x5, 0x4, 0x8001, 0x8, 0x9, 0x9, 0x94, 0x3, 0xb, 0x4, 0x63, 0x1, 0x9, 0x1000, 0x1, 0x6, 0x8, 0x6d1, 0x0, 0x9, 0x5, 0x400, 0x81, 0x401, 0x7, 0x5, 0x4d, 0x2, 0x8d46, 0x4, 0x81, 0xff, 0xfd9, 0x7, 0x5ad, 0x7, 0x16b3]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffd}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.266865186s ago: executing program 3 (id=4722): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0xfffffffffffffe3f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa538ae46463208e244000065c7"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x8000}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12020, 0x0, 0x0) 1.235019569s ago: executing program 0 (id=4723): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12041, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a}, 0x20) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) 1.131048772s ago: executing program 4 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x18, 0x3e, 0x107, 0x70bd27, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x117}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x440) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"/435], 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) listen(r3, 0x4) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 978.277677ms ago: executing program 2 (id=4725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e) (async) 954.838965ms ago: executing program 4 (id=4726): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b708000000000000fb8af0ff00000000bfa100000000006cdb7a8005003c30d6828bb0660007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xfe0019b0d9b4b38a, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd605678c100008400000000000000000000000000000000000000000040000000aa83b47dfc215f683b60dcc548b192d29eb44ccc8fd04e4b3d066f02a8f81f94d165a6040de172e44f001d52f6f0514aaf4620192853679eee25052570081ab561ef93bdaac9a94a813ca68038e3c115bc81ea8abc149a957fbb4eeb9666638574287e6210e6480d48c4ad947825a27386dac6f8483fa487d4eedfedd22cdf2d8986def5c13256c6fd5a4e3b7fa6dc1eadb238ed7dc50910"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd605678c100008400000000000000000000000000000000000000000040000000aa83b47dfc215f683b60dcc548b192d29eb44ccc8fd04e4b3d066f02a8f81f94d165a6040de172e44f001d52f6f0514aaf4620192853679eee25052570081ab561ef93bdaac9a94a813ca68038e3c115bc81ea8abc149a957fbb4eeb9666638574287e6210e6480d48c4ad947825a27386dac6f8483fa487d4eedfedd22cdf2d8986def5c13256c6fd5a4e3b7fa6dc1eadb238ed7dc50910"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000800)={0x0, 0x1, 0x3, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000c00)={0x1, 0x2, @start={r4, 0x0, "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", "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"}, [0x4, 0x6, 0x1, 0x10, 0x90, 0x7d, 0x4, 0x5, 0x2, 0x2, 0x71, 0x0, 0x8, 0x3, 0x2, 0x6, 0x3ff, 0x3, 0xfffffffffffffffe, 0x1, 0x6f2, 0x1, 0xfffffffffffffffe, 0xff, 0xd, 0x1, 0x2896ea92, 0x1, 0x4, 0xa, 0x9, 0x3, 0x4, 0x9, 0x1, 0x3ff, 0x8, 0xffa, 0x1, 0x8, 0xe, 0x8000000000000000, 0xd9, 0xf2, 0x3, 0x1, 0x3, 0x5, 0x5, 0x7, 0x7, 0x6, 0x7, 0xb6ed, 0x8, 0x6, 0x5, 0x8, 0x81, 0xf, 0x2, 0x8000000000000000, 0xffffffff00000001]}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, 0x0, 0x25, 0x5, @void}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x4, r6, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x60}}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'virt_wifi0\x00', 0x800}) 898.438359ms ago: executing program 1 (id=4727): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0xfffffffffffffffe, 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, 0x0, 0x1e, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x1, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000200)={r7, 0x1, 0x4}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000052000100000000000000000091d282fc075c8c72edcaf499795243c3e5c006296dbba73d727ff02b016226dfc6f591f69a1caa1da9ebf841a90baeab596c22a2481c131f59ef6705686134925e4a03424037fdb74497d4807a866cea5b7533e949bff80b59d7f5aff75dfe4841c34cadde680f14235d1056633e52743162c5a6938c6ae6b15e8f0bb4dab13f88526e365874270594451e89c88a8901a61b1248ce797c1cc76d554e276b6998a392805bd83961"], 0x1c}}, 0x0) 891.436117ms ago: executing program 3 (id=4728): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x160, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x138, 0x111, 0x0, 0x1, {0x134, 0x5, 0x0, 0x1, [{0x4}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff73}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x101}]}, 0x160}, 0x1, 0x0, 0x0, 0x44044}, 0x8080) 738.688658ms ago: executing program 3 (id=4729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0xffffffffffffff42, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 691.263456ms ago: executing program 1 (id=4730): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r4, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) (async, rerun: 64) close(r6) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 650.85664ms ago: executing program 2 (id=4731): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r4, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @multicast1}, &(0x7f0000000100)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) unshare(0x60480) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000008009503000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r9, r8, 0x4, r8}, 0x10) sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d, r5, 0x1, {0x2, 0x0, 0x6}, 0x2}, 0x18, &(0x7f0000000380)={&(0x7f0000000280)="77f5d1e46ca28ac698aeb2ee4a227ce2464226768b8d0ec2e05d53874e3fd4c9b90273ad634c567987227fe443a73beafe790d299ee29e3acc82ed22e311c9a31659ce54830d57cb559aba73fdc6b210740b4c78c8d6db9f8234d84d0449103a79924b93830ceaac9eef9e060c67e8b31fe6806f483b969880659805373e6bc51fe86b935b62a90eeb3612da7aee49b4dd01464401f617ef5a93161d150ec7d6af1029e01be7011218ef4a0c61d1c5fe322f268fccee48343f0195805453730ef9dc7c5b0d38b2641d8533d882ac451efd315d6de8e26feb5cf7f9671dd15855169d0fba461ef923098abbac41", 0xed}, 0x1, 0x0, 0x0, 0xc010}, 0x4004080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="e22f00cd9192da8ead80bbda2209efad7d0876901d150dded47063c29f25b2f31daf0e73770117220d7d3779676568d6d9a2b95952f5a0cea62e01724f1aace9c17bfe238a931a94ca4abc9e639c6c948e74b85e6b856ed626b44a8c46aea1e3b58b69512511ca7ceec45d1efec7dae2a2725e147e63bf01656f6a3aa5bb949b51ae9ee7744d759f522dd0aaa05da1fedc8b9b83ead48f5b1ee4ee758168535fb11174a72a6fffd4225444e838e1dcb22ceb67196242ad3f6137f925302a76890e8bfb523901323d630c89378a75d221518d"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 616.039814ms ago: executing program 4 (id=4732): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="b00188e21200"/23], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa9eaaaa0180c20000000800059000240000000000119078000000000000000000004e2000109078829c000080000000"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c20000030806000186dd0610000aaaaaaaaaaa35fe8000000000000000000000000000bbbbbbbbbbbbbbfe880000000003000000000000000001"], &(0x7f0000000180)={0x0, 0x3, [0xbff, 0x301, 0xbd1, 0xfe6]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x10, 0x1, 0x4, 0x7fffffff, {{0x2e, 0x4, 0x1, 0x0, 0xb8, 0x67, 0x0, 0x40, 0x4, 0x0, @local, @local, {[@generic={0x83, 0xc, "1cad0768220562149170"}, @timestamp={0x44, 0x28, 0x41, 0x0, 0x2, [0x4, 0x6, 0x3, 0x80000000, 0x5, 0x5, 0x403, 0x4, 0x9]}, @end, @rr={0x7, 0x23, 0x8e, [@local, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @rand_addr=0x64010101, @loopback]}, @rr={0x7, 0x17, 0x17, [@dev={0xac, 0x14, 0x14, 0x35}, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0x5, [{@multicast2, 0x9}, {@remote, 0x7}, {@rand_addr=0x64010101}]}, @rr={0x7, 0x13, 0x5d, [@dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, @empty, @multicast2]}]}}}}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="000100"/20, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="050000000200000002000000010000000000000300e7ffffff000000"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000400000000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="05"], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000240)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000400000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000280)={r10, r10, 0x6, 0x1, &(0x7f0000000240)='>', 0x9, 0x2, 0xc45, 0x1010, 0x43, 0x0, 0x7, 'syz0\x00'}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x8) 555.028255ms ago: executing program 1 (id=4733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x70}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "d7ed62baac51fbef378326e7c4099a1d"}) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x512}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72c3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff279}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd66b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba80}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4}]}, 0x18c}}, 0x40080) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000d0000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000540000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x70}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) (async) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "d7ed62baac51fbef378326e7c4099a1d"}) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x512}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72c3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff279}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd66b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba80}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4}]}, 0x18c}}, 0x40080) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000d0000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000540000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 539.319751ms ago: executing program 3 (id=4734): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@bridge_dellink={0x5c, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x200, 0xa0c2}, [@IFLA_IFALIASn={0x4}, @IFLA_MAP={0x24, 0xe, {0x8000, 0xffffffffffffa25c, 0x0, 0x200, 0xfc, 0x6}}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x5c}}, 0x2) 392.401165ms ago: executing program 3 (id=4735): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010026bd7000000000000a800000000000071d000000140003006c6f00000000000000ffffdcfffffffff400010020010000000000000000000000000001"], 0x44}}, 0x40000) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r3, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x2f, 0x18, 0x4}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0x0, 0x200}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x15, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0xc4}, @call={0x85, 0x0, 0x0, 0xb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x8d, &(0x7f0000000a40)=""/141, 0x40f00, 0x74, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000d80)=[r7, r8, r9, r10], &(0x7f0000000dc0)=[{0x3, 0x3, 0x1, 0x8}], 0x10, 0x8}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000010c0)}], 0x1, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) r12 = socket(0x10, 0x3, 0xfff) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a82cb015e200094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017f4090000001fb791433a5ee4ce1b14d6d930dfe1dbd33dfe7c9f87750d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295e756838ab37b9eb15a93e21a5d8251bc6e6ca60838122515ecc412559bdf04a29c9f7cee115e00000000000000000000000000003b54e5b57aae0e5fe47e44014007be7ce05f85f4a293f22fc48f7e17020169803bb040d43497bef264ca0140f0e384ba1c0351bf5f6d2e73356680ec8b88da62d08bdf3658fb5f20923eb2538d160236ba538bf1097305c4cee1dad2e05a81f8a3a5ec47b344fcf3cbc1d1132840f083f326c0402b1129726d1096b5cf9b20f0a18409000000858328e0221d21c3dac990cdf894d793d84acbf4f1b5dad7c5ed5744e477f25ba2387e28793bda8b914832121f8376200a3bd90b511e4f7bdebd1c20bba6a5817ba588b016fefbe5b06770", 0x1c7}], 0x1}, 0x8084) 221.346826ms ago: executing program 1 (id=4736): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x7, @loopback, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f00000001c0)={0xa, 0x6, 0x9000, @private0={0xfc, 0x0, '\x00', 0x11}, 0x6}, 0x79) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="1c57", 0x2, 0x40, 0x0, 0x0) 220.316282ms ago: executing program 0 (id=4737): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x7]}, &(0x7f0000000080)=0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) 218.998543ms ago: executing program 2 (id=4738): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000226400000000dcbb61937869230daabd156a6322a591a0030000003b032d2e90f926a1ce32a78723e3"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1, 0x0, 0x200000000000000}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0], 0x0, 0xd7, &(0x7f0000001740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001780), &(0x7f0000000280), 0x8, 0x1a, 0x8, 0x8, &(0x7f00000018c0)}}, 0x10) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x2, @random="820d599c3dad", 'bond_slave_0\x00'}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)="64965ca5c2968df707321e7f79d80c1e6b45242d7523277c5ac8180de09c13f251f66965519f3b1f24bc2b61085d89d4ed3b9013424fdbec6b21ebb89d12b30c09f9d5952d3bb603dca4ce7094abdd61c926b4449b504fedec204b0ac0bf25c67ef40cfbc0b6b7718e558925a48a9fd5e22ed2c1862e6ecd1381e3cb9e6e36b21f5cb4a2cda9700b22f5d2d69d4b67b0df7f8e9b98a5aea692af5047573ae0d48419846808e743133f5b3f5aff9bef4d965fb961146702809ddf06cf7845d296d18fbb0adcbe2bc848b0bae75669ed280abeccfff1e569627a34af8825b6e9", 0xdf}, {&(0x7f00000007c0)="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", 0xfe}, {&(0x7f00000008c0)="0d81dcf5ddde8d304ae2630c53caa49bf1fa43e397f9ba46ea372e9bfb89c53effa9ef3228797bdb", 0x28}], 0x3, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x17}}, @timestamping={{0x14, 0x1, 0x25, 0x74e2}}, @timestamping={{0x14, 0x1, 0x25, 0x31}}, @mark={{0x14, 0x1, 0x24, 0xae79}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000a00)="fae15afc7b52954c9e814690b812298af6f6b8d09ca99ee14e7e8b9c176a583e457de1013b35a851e552182074e19fa31b5d8e587dbee24ca26bfc489ba7b1dbaeb336a204701d0750dff6c32a23e3de68dbb458a33af3210c5f0e2f629d2d65f5be20f765f62ba1134892b7249e19b617fff2afb71098db29671b45f68f97a903c46212ce94cfb5a0c11445", 0x8c}, {&(0x7f0000000b40)="9ef36fb3010cf548311f74ccaca166c004f6388dfab9c34f48d673fb7ff412f7a7ced1cdc0b32f82888d2fd58784c338916c4e0da4d93d5723f239154686277c315a43275266ab6fcf077f4b53f676fa607a72bb30bb853e83113cbae429a67a3e6a61451ff730d12ef9d199a340af29f7c3517125236bc17cd91c6ad6ed23f6307841cbe5563af40e7a3b7a38c47d7e8255b466c32b275dc1d41ac42f7f0cc1fbf1f2a7fb471ef51c37b78209d0f92881", 0xb1}, {&(0x7f0000000c00)="0b2407a926cf29f9e4b27b8de389465535143d9de0f68578b6f85698a821b66a045b47dc489dbd23bca83c4c4ea13462c9a9afa9603bbae567395d745218fb588a15aaeaeaca9167af058047e17a542a9710b228", 0x54}, {&(0x7f0000000c80)="8eae54726efc3f0ac31308c2e1bc87b1c5b6cdfd62a990c062cc227e32ca6afaecbd37e2034155e3388e6ba2389e9a12663f58b0d1f0f9be65e90200878e129331b72241ec1923d522aecd844900d015b17b62dc117d4ba7820e74", 0x5b}, {&(0x7f00000014c0)="a9f3e5662bf0f5bd70926ec7fced0db0bc291b7c074d02f39b5f436c680702bb362007a104881f80f5b64174d489626e8a55ed1e9c54683533a9b0c0396688df9463da7d81b3b756421f046e6bfae3172db54147da5cbe8ee048bd911a525faefc6b008867260787c5e443d087a98a3b623c1631c921e18e9fda8606aef9292ac629593b27017a91cc83359efe51008eb353db5a49d9008fb0a653d648f8f78d56c6da0257b65cf594b1f62e082eb97863401fb9d13850d7d8f363674dfbe3ed1c95e02853fb635868b1b8c7c34e204613fdb1115c51981b404893f09f03", 0xde}, {&(0x7f00000015c0)="b6585dcef05a", 0x6}], 0x6}}, {{&(0x7f0000001a40)=@ll={0x11, 0x8, r4}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001ac0)="769be091b1a0403fde6f41a9031da9bf2bf4f44b668dc981ba79c41d09a720445869edd6a9e49496b4e3a7efda6b4677ea991b4e470323fbf222b7883ffc9e3c28dce8c75881f7035481e0526de1fcdbce39cb6641eeac5d5680c991c9990b7cb80477dc75daae47a33643069db22e0cbbfe458a59d847e8fd6b84747f7d", 0x7e}], 0x1, &(0x7f0000003340)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0xac}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001c40)="49048ccb7a61766cae5b00f865eb6ed0a3b01699d2a99b8aee47f36e655dde15d1d52adef3e1e5a655ff83ded42e2668d120ea4beadff185d33d1b3a538f5044cc71c918a5c5ba058f94363f62aabc7c64eda7c7cdbec42e1d10ad46d10a511230d72da792051d314e3d88260389cfb59ade4ee6cbd72c6a45297e9f520bc0a514008a29fd4f4cac56938c01b573f418b963b4264f3beaacede50604445fcefaf6f0e024bed6e9ff960559d2084676cbdd4c360a059e226dea435a64fb122e177cd7e0f3c6d619b6eb4f611f08da8cff3e3f8b89e2ea77a00b9bed867d370811ff3b7f6395ccca3ca01a32b8d811b3856c60ca7fba6eb4f7e171ec140dc039f2f8814c1449a6b8d7540aaa047b798adf311687c26979b377fa62afdb52aec46f6053576a6f1ba19217440ecd70bd133a0b6587200dfc0f9f1fb840a398a567773fa9134eb338dbd573efd3fb63a78ab39c352281e06813da4ba291e851bffc5598a5353ab86cc1419024c605a39ffaabe7e433fedb10d8d2599e6362d9fd5daf9622b526156feee2d3bac640f1342ea1aecad92d64d01376e9a838ffdc2e958cdd47a1084845ba6047cd76b8a5849fad693899e341689614f38b51c05fd1c73045a26940b126e27bd7d819034890a8e3fa24c6ba5f0d4e034f079ea9232bd67e21f5c7ca858126a07df4624608743a5c92e08ded4592a898766c8174a6856f0a0535f19319c5eb6cfb584d62efbc08dd293b87eac778b273d5999503ddc362874ab68a063f266e21af40970c87a61f1fa6055809e24d0dbf58ce94b85aeea1ae20474f6e2b7aa21e501d9437bba90f48e9cdec0b0c61621e561e302585c747d4b729009de357d5c2354c9bf7d3c08f9f06ae3f08e353f6af8983922c6282b5cb8011c327e0c1b62dd2dd7d3791ff662fcf816ea00506f5c120eef519cf4179fb1377e37ff21fd5a20a20e89baa98abfa7a850f6fc60c73d770f51447c2f696cf8497e02ce95e9ae5517cb154492f87610e93883517de9028a556776c0e0936bde4854dc309acb9a497db08531c17448fe1d61b16056f2e148584f9a6a5d76e314c72044cc32e913f9dcf3f89ba1c514d573c3ff7323b33d6af55bc49741ed385b4092f4dc0e02e9dc237b99dde69c3a0c6d53f6df1b7c679bc9dc614438fb71f5a2569eed6ac89aeda8b876dca0e740e0eebc60adce071838f3c32a2f7f49c07c936e136b2c539b7290122ac9f0fa779ea3feb691797ced024e528eda5982ff0f35e18af2385e50ef3975103e976bcc0310732d023ef61d6e6138016ddf876a6d9e3cf21d9e0db68b1f4ea58c059f4163036f8c4e706f920459c08395aa6ee439fafc0c7dc884e04fc37fab8e7bda17db4b896bb3cc131f484b5df8a52a7de1d84c4ba9da506c064e36b9669a13daae488bdb2b2931d22a34dcfdbe481b2a421d783de645bbfcf75e1fc3c9e2a4584d86ae65645b55a4285caef909f5b824d96efc17cf11d15b70aaec95905d91d01cea97ac38e5a0ee47ea561e0dcc8b5e8e4968ea0c4ee1757446e1ee3cf887eec4a00e812ae807e45001a5bff2df23a187943ff7fdfd0c84c6ddcdd9e215fffd2c5425120a8ae64390f51be05ff6f0197f12f74462a8f85b87e10bcf1af94c5b7d6f54c67fbfc30443edd8850abf28b24dd0881765e4ac60eb1f37b4a3bc0ec416073c5efdc833bff3286e1196f20082dac3f30d3dc1bbdc82f6ce093dcf9ea46f4f1deb8a31ad238d8878e635d3a9c88228f77df767df3ef04d101ed718ab9d7ae9ff265bfa49ac7e153d88566aa1a38be5b6c3da4d169c02cc3366b857d2dac1ea7e6f2a571cf97406af544ff94c115096f4a1240a4503f94027c43d9cee2e45c2a77f694d0ae3d5c612536670e0fdae653f63ecd3b14b37b5aadb4fcf40d44cabab2a4a5341c2cddc867c589a7f7af39bd0434d6dc12bde3cf5ae5ba49438770b583f6b11b039efcc39926133f338486ce719ee189dc02fc460a5be46932a25ec76ee137e156fe741cd7d0353f4be511fb5f3a3ea886df1ec964f51bb9669933c8ce8b533ebc4a9dee261e41305cf30b9755fba1a1bdf22834a88eb97fc78118ec2a9aeb73ea8ded1495ce397529da39530a8ddb2900e12c6fd8924cd4f65dba2ac2470366dfc9d6175218ca6a015fb0926e143ea0800279d53e3146bf9f3068f4543025aacb8905c8cc6fc52b6c704bce67adce2ebfd3937765ad2cbc363fc9c105064f02d644c349e1079681ad006820e4159c9a911221c8f78fd7a4b9f363a405a9d2ea5db7014b359236ae982f1c4d9917006504920dda0405f0ce2bcf191f134aea301f9788d25ff9403d97da7731327514c7d30e4dc61c9e003041012d019200f9f06d5ba75d27e72499511739ec6833d04f399a6d93ffa659b32b95e5f90d0dbbbced86f97ac991e755d2e0dc3348ae5b1b8b29267b8d477d400221365cb8fda906dacc43e63aa8fdba16b9b08c335529702b699da9064462fe2cffd085bb058a0c6d3ebeb4c08484d7f9d4653ba02092c97490bd52618dd9b7ab62d375824a97799fb2885befad524eed4c7098c8304be273faf6e65ca969af7161622a860bc8a166975b22dac2e7c94558ce40a07b8343f2da16c536529150585b9f5b85a4b936627266f94d5e39f2dc784ecfe1aa7b3baa8a7b37b6ba10635ab7d602403f88cffd44fc031e0399b1e3353e643254ef3a6fb49a041639c72321f304ef28c745c204306f73fc84ad0f0b2854243f5f3c0ea4e8b5551223db31de1bd2eb910e67ed7b1762d458884d50626553ea2ee4eacd79d155535f84db2bdd42966029faca5fba88ecbfa2a087b0c588f0a8fb99868609d6134e421e11305d75811f6e6b37806fa085747a3b84aee43efb2fc0f9ad10eb8c0823a9db3deb702c9d34c6f35f4e13127fe470a2bd35aab7f9287123ec546cc8e731e9a82d19cf05399b32b4a4366f600f8bb4951e938aabb46cb86234c983920734b42696de26ff839188a4e1620dc8f268de01bc93af08ee0e6fc4443938dc47a42b931dd922456da2ff065546c5b05347a77be57cd4a6853db00f6d48a390bb61b14bc0d0f1adf6446a8156c57f33fd7b0badbb74238914e904c461d6d425f86702d42866036ecc5ace124a99c6a533ebe848d27460fa696b0291736b7f89f167da4957791f7c8467341914096502a4b54c9fc173065474c9d63ec19e6e084f095ea2d0c9b1f38a82a9f589f4e2b0343a3566b863489661e9523fbb701bdc33841bd3eeb043c938093c7bb59b96e506d2b5913010cc4d5fe5e3220feb783a8d0c2cede3bf56e114b1251b2ac721b0af21d9e76344d380926cf05c24d09f0c0a15d016944b935a316f72426ea1084247c7b839fe8fb28c3a24b21b6d56f3cb1a53f5b7b868f5837e7058073de4ecc13737527de20b2693dd35d34be8c840bc96aff1112b57de36d10c4879b1d3e0ffb3952499140528bfee97c0eec4489f96f834ce9dfd13d0c3e49a8dbefbc4493b1f46c53cc605de513dad04494df42442ddeaa5f8ac2c2b36fda9aa8b6171af7c8d106b73fb3bae5ee0b7bb235484bdff06baef14c2e2670b439d901b00c6cede7b4c8d0bb1dbf10618cae2e5042ddc9706465e1197967f1a82f2f7b92c36877db08c0d6824511597b367ed26492f6cec38665691bc0d5362ae89dfae81ca7365fa2fadb39ea94847890f4baca2339e35fef140eb18c0b9559f01d827dd93702481845054c478898f89f1681f535a2e1065f0a2f6256fbc50c101171169816872af8bf6b3ec631fefabf093455caaacd4f220df7f97b2115f2e10e97781572950474a450fa5b50292a28a6e7c423466e73368bcbb783a04ac51763ba151d21191fed6358b30ad1cbed1545ed1f834a090df4bdae316e94a4bf43db4599012a4788985668b7580d3b174aeb917d304026bde3e5b2b44ece8a5a24b3812e9d4b7bb7b1268aa88e66b7bf44862f2f2d5ecc7467d20b572b44abe61e6dc2c7fcbd31082ee8e3085f891e88584836b25acc079e58bd664e244ce9afee8800130ae3111a285061704c362c82c84c7a04cf0d2c36e59d27e7d4f9cd2ca3205d4a084e4d2703457f84f60561a3ef1409398f86fa4a99c583f040842c198c66d1ebbe93f35e21b81d307f1bd1b35a52327fde2bcf57fdb78da73434433a0d10bbe0d7e5a5bf5cc0843c36b32a4cc1f6d0e48206433651861d95a3910330115cddd1e4a77aeafeca2bb4b2ac73fd00391a9f8459d2ce5f48eedf426309b2e2a5b9cb5e5f5d7c731c8bcef3c7c2881c8899c22d1ce3a287a9691e353b7a5bdbd276aebb304b50102d76f316cacd63c633afd5b886ab0ef4aaf66be58a9501681075db63b100b0d0cbae7bb5106886c65302a21a30db0fa28e73b5db02f8f923010e5dcd4284d8951fed1a090a2af51b90cd586eeae38cb919ac8f96bcea565bca0c7661bce4d0ffb65845a6f56b59cad1709027d1bea19cf45ef8fce7ad90d36ab6dca1f762031b6047c911a9ff52985edb64d28d5789b39ac3ee05a546ba51453a5f17147b6252c8f1683bb8ace43eb7eadf1acb3594d35b820047cc0d2a5a4464aa1b945e5b8b66d2651e4c89a256a3420374c5bdc9e52e2c72a077a8840e814fb2b60b74cb7dba87a511415db8bc26fb74662b9e8f8a7b1606f009cab396b400bf44b2116856d8a3b47e5e55a2f2b396a9f529a371ebebe50aa3519fd4d77058bcf6c1a688725d6e013db167aa47553009157ccef57e8efd0d1069dfbc520bfc03cc61b973561b45cbc3161a33d4b48e3e9de40068ce47d43be893545fa89ccf5a93eaa294a343c22af65e7c2eec8ae939d52e314cb30b1d739a42db79c79da96d4d68e9ed9a8ffcae821b6005e91a2d0198a985bab071be7c05fb49ddea9871e647f3977fda150b101432380f06cb5a095c334b610f8aa0c66208e550048c01e31d67f248ea52e07815b97ffc3e638df42105dee8110f5722f93a660609288f00976813ef82025eab9e723b02e640f12dee75636272fb61bbe9547b5ad96807d35a1beafb501eb74cba1a569caa679882c597f862fe746e5755719e76ffd0958b516004a24c079097a7174e900df21fdd06d98005d1513ca06437645a4001109e5872f94211fa5df0c4e2e1ec34ebde2920b004312ccf297b073d61f6064b53496ee9441096454aeb06a6071a83487277e13ee9a74fa9afb7b58b6fe44f52565cfad5ef12085176c293f2c9a1dcca3fb3ae28688c7c0e35d7b18b048306e767ea442d822acaad9bb77630e0557ea7e0d0c13b70509986a491ccfe8893d90341bbc641143b1757c047cbdd62b021852c39c4dc098f3d395bed5fb34a5366e5402feb8318ea5868d868ccf89cfe54e48d618dfee1d77a45e06440d53c8c582090183259e7c63b7463ad749638ba12b447229e9fb0be56d21eff18c734b0e11f01b41713e373c9c0d98c93df23f52a41d40a510f39f9c0787a411f5fab5d215db4c5d88b950dc059064de1b1f020714b8586b9f70283cd28014e0a9f9678a035ab12db32286b19c083a7d96cd054b9acf55863125b2ffc8b4fee3c967ade9adc05794997c76bf4adaadd792d35b7398f5b7bd9b9db5d91056e873c63bf2badd8de0c15679bcea7b1da08eddbced947851605de54964072aed9745ada8098f23df284bb63d013946ba19af0492d751eb23d16e9f78dc73634db5a8aa7472a4dcaf27992aec9a40f39e7ddf8cfb9237d83e6e8d9714dd96c06d4de5406d67786d6cad555157ecbec7556049678e4335", 0x1000}], 0x1, &(0x7f0000002c80)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x4bcb}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}], 0xc0}}, {{&(0x7f0000002d40)=@llc={0x1a, 0x13, 0x81, 0x8, 0x14, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002dc0)="0d048c860bad39516df8817d92977e3c0354f3846b877b4a7279d12f7058b3688d0bab90c42d99da8cd314e1f14dd7775b85a1db3fec30bed57ff06336a1e5fe4077bf1fecc29a8b88dc13ce1364fc1d524aace84ef12652c85bd89d01a51f513d174b5d3b3a50b1fcd44136726502d7cd7751f27ecd9099628bd076f5d544913e47d8e90920b3b35b24501a958fd52c00ad57e3b165bac1876f7ce5b0f446c452f77a79c10d5660842811723032f1cbd36996df03d6fa8e24f112406b3090a17c2725e6", 0xc4}, {&(0x7f0000002ec0)="015c45d14a9e7e2fc2a58648efec5d2e0447d5b99a0cb53e83a11ab1ac06a544c6901ec8364edffe6baa22e3aadfd3302298c7ccf7985db173f8ddf9bbd7f535", 0x40}, {&(0x7f0000002f00)="1639d829d020d5fe1fcdf749e476ee7b904bba84d6d0e0209498945e261851fa1ee3256a0d857d685708197d7d75df1c37f3fc114fde8c13de0d7aaf146c915593d00c300870029a29ecd2", 0x4b}, {&(0x7f0000002f80)="2891179064e16a48b7219f331974a3261a7c5abb66695208fffe6edff6b8b010fcd68118c945c0766fc22e0e8e1c826aaab873433d30c7fe6fcc27993f83dc9d2f79c4def7517d69a4510e", 0x4b}, {&(0x7f0000003000)="cac1eb7507c19259fdd6e8311fc62ffe0f8fa63f42c176c30a42b7f73b047f7cb26ef171a6bbeadfa2347d2c4ebe10b0a381f4fbc2b1d69a11669ae4f5d687003ac4c5b5239fdb791db7f10ec807fd5e92028ee57e129edc2333e5cdc2a862bb82a4305c74275d36c186d542534263e57ee54708ee61c364610367c5314b6c570a2da9fcb7bcbb58d8a8ab74484bbfe349e6da423aaa18cb932767a5218cbcd85ffd07006b3119cedee8661d01d837c9d53d93d9a149551ef416748e21349a0c60b643aa0ea927e21d6d9caba50abb95be16a0ecacca141ad1e014aa8f320c90923ce310b77366a1bd1cfb119e6efabedb58e99a1baae4232e08", 0xfa}, {&(0x7f0000003100)="135cd90f657a4247d742f46ecfb3513a5ca5ef4d921dc3120966b1ab3bed338f5b0080af0b63e876b526799ad7b909eabad10f1515f9c2e89c902e71e17c551558dec364ffa544155840abc61114f1c8a63b41c2c234429ad493223d6faf6b87891453be172ba058ae458fa8f79d7bacc57e5d49a795429cdf58edd73eadfb28164ba4e6db2a18538ce0f226078aafb51ea99a5c52036297c472f9dc79c25d214ff104aad904a378898a16363e494a500060ecfaf8c4d4f8038eca41d6c560d8d9cd6cfc6988aa137a73263fc915945b187e7e834f31d4f5c92efdb3fe8e31433a68e2ae0f10bed0d13522", 0xeb}], 0x6, &(0x7f0000003280)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x15c}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xbf0}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x10000}}], 0x90}}], 0x5, 0x240040c1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@loopback}, &(0x7f0000000340)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xc040ff0b, 0x200000000003) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000640)=0x1010000, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}]}}]}, 0x4c}}, 0x2) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0) 212.622331ms ago: executing program 3 (id=4739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x7}, "00001200", "edfc4a7c2853770307e48bfdb8644800", "6eb4a89a", "c277dbc4b45a157c"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000170000"], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000240)=0x80000001, 0x4) write$tun(r3, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], 0xfce) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x3d, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000100)={0x0, 0xffffffffffffff03, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd07000000df25450000000e0001006e65746465767369c323ce5698cfe0b46e657464657673696d3000002bfd8e0000000000"], 0x3c}}, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20810800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, r9, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x100}}, 0x10) sendto$l2tp6(r7, &(0x7f0000000340)="1fa1", 0x2, 0x408c0, 0x0, 0x0) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/89, 0x59}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) bpf$BPF_PROG_QUERY(0x10, 0xfffffffffffffffc, 0xffffffffffffff9c) 208.638592ms ago: executing program 4 (id=4740): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 58.426728ms ago: executing program 1 (id=4741): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r0 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000780)={{r2}, "7a35cb7d293a33f0c93820df46d98e2b0a884e266fdf437b9f7b8624d8b7e11f6e8729c92705d1a70ce8b56943e2d6d9c86c7fa7b57a6be06bf3cc87f33e6374df2df06cdba9996bd4a907193b57c3aab984c2ed7b5201a966aadd0830e49a6aff2490f631b1dd166a072dd3acf4530a9e913e717719d8fd151a5be4b059bcf5f0ab1bf2d928a115b052360586b3eebc078750da80a1cdaac6976b75f4e567782f2dd12196f1a1afb5503641936d8f68e3b1869c197a50e9b890901fa9fa7fbdc0203a9af28949a5ddbf273daff1a98fdd71e8ef6dda7d1e05d90e9a222b48de53bdf0cfe68209d4d4830a677934e16038ae33f439424e4b15cbc6ded526baecc2178dbd436138a000857d9400f5d57b8c03a8abcfe586356aea73ff4110f5cceadf811baf698cacd9137f2fac3b839ba9685fe74e5fc1d83e89eb789120e7e73dcaa718b2ba490bcfcc5cbcf39b31af542b3910d8cc1ce1ab31408b178b6d5a801d1e6ffbc373b35848edb9f7f50bdaf6b9777d2d7f1f269854964ee46c3a452a08df2170c3a057dacc02cc08b28e7a682b5c7aa57ee6821dc8f2963f2650f997b8492692b8f3402c5730cdfdab8f899dba9236aaa498484c5af6779f2889e54c2a188f7c28b8519cf70f12586ef9b7b71a4984f8b60e67e00aba539d30d56251de2320c2a017c5a9dd523a29a8da043bb9a3c7192c8ee0912058ef807a42e93c29bb85113339216a108a2ebf39d751146d45e7999e3ab953927e27626bc2f8cd849081b1a9e5a20b7d1d51efb5a5f9827fe851c6e5af859152de3a306165dc3869d8ad044e0422eccdce7f5fc54d29fa1b26da14da8532d3e43ffd68ae17abe51fa8624a0cbce619cb108665a5b777e2cf438e4e3f3f122edf6cc570d9157a611f839f82ff262b0e4dbdda30ba4603b2a9af949cdba30b4aa654f60a6b276da8599837233ee9ba2b24e22dee03d1097d5aa5c57993625aeb095f60b297168fae2db0c3e787ba024f792ea26cf33228768a9b90a85525cd6cf8dbbf6b1564ea62d30d22ad9acbbfba170f40068becddeaa2b9a4c1904bdd5d1553471f912109310cdb3ab8badc4431c861ec5d10e3269ac2c5d5ff611cf2b1fb3033293ff798724f083771e34417787bcf2d180cfaa06ab673fd5b2fc8eb7b1a17407c3894f8b7734fced4d0b984089bb9586e12c29d8a6c5d11f0539a1aeeb2aba3a519b1104187d86a3b4d7b85b8507940f23e29a4af8ecb7847d04227d18dca51965a72a25764ebf3f7dbec1826ad0f1800f474bee3c106d1fe44d765b4fac64ffa18a283cd59c2614fe6e773d7a76247913b1b7b98e16a7103402094ec6cb0f9b95b5d52269bc9a188ed47bba2d8c35656be720c4825abde4206ad5356e6c8120fa6395d3056ac0b5349ac009a6ec4e372f98fcd15bf4db2a1941ce887acad4f675784849533c84b5cb5d077348ee250f2af1bbec4c34385de5002289e27400114e7f52f50b35242fdb7b3b9e9c00e89a223f6afb3bbd400ed7f4a242133ce6d5dee6e4c7f8ed7359e72f472c9cd5541e8573ccfb25a3a68fb62b04ba4608b39d2b1fbfec746f16f452974042b78e16bdd7d6bc67e866e72087506cf183777dbacb537f7283f0f7d222d724da5eedeba073c54f4213fb5b1d8a6607d6b04e83f7a66d0ad28bc6f0b200366c333837a251448429d9ef334d63cd518ba5717a4cbf5a8e7019b4143b47dc0273960fdf3159f70d33f226a2918e1c8ff769a0f9d33306b39d42bccc52ede6932bca014c0f9cd55a9eb06e0eb48e7f755f7a7ee64cf4f99673727aef670f18b4f480d6ada9c52396102de3bf942dfbe10bb8193ef95e7083ec9ec75872b0d995352a2cdc9acf4460f6cbaec44fa9723851fb2c5807a9e070d5982c0de829bb93e053b3174d5f84acb58ee383299c5e95052871c1474d30a606edc8d94f223d7a6e213064ce849b6d796c18c1bf0d1611b26005bac0aaad515dd1587bedf554c8c7f4be86490e7a755a1ad9b3d6baceb18ee68bd2e5bf29b350b67710d8a82922b6818245d57523c045b1a85ce5f5eba1e5576de261f3fc5598324765d6f23b85ad10bd05897091f4c978f67ba8b85c0e7f8c72a4e8a7011132aa30d5d21f3cde02624a9289e28a52a1c95329dc472b5cfe7b76764bb1170d87745c8413b2ecf6a2d9f0936f50b6a150019911ffab0111f3bb4bd6394f7b08b889da8dc822f2679b29344ea45535a1587ef9854c932baecaa386ae0d8532da43fc266f8974444241f8e77a8f3742ed42318cf738016b7a2c6b2e980db2d7dcf618cb7848f4f966184e06a6c0724eec825311f13724326ff4509530761cf3fe5284913ce18a8851b05e70ee44f2ea084c999e988ac5fa071aeb21955c27e55f3d42f85d1dbdea15de2bcbdfe17b22e6be765a2da08ec33ddcfc9a45e2f084d3bcba10bf51389d3bf49ce584a039daa8bd80a93e866e52a87730883ab054c401774d69ee4ddb9f80e8ce7a6e456c6c406346959bf36c8544a4c2b0ce9a304f95252d8053dbdc7d979026b318d7804540d776a799f7e104789c24543d52c9ef26bb0415d459dbbd74a7f38a8d30205cbefadf2c7c1bd4a2f9d14c231781bb18c2e4153b5c6323364768dbff963ae2dfd19aa1faeafdf8f993ccb0ef346f88cdb66fbd10e3f640b65ffb0308c85d3148e7fad9c85f9634d5f51e218cfff541063b8b59ab84a200c9779a113d300fba8dfab9f148d0e663c2ea5ceca688882563bf9068a776b23669da5ace026ef4e0c4aaee20d621e96c42ef4e5fed132d121139c4775fa95fee09315f1d6168ca8e5e0e3fd57bdfcc675a5fabfa47a63f4d9b388a15fc9733eb272a9d25b6d1393aca2e2c410130a91c8d1e676491601d7f2fbd06ea677e341c8f3bc637088633be008556cd8a7649c77e62ef0e19151cc3e5ed832eec8e8c2366b1994929ddade4bea8afa18fce9ca5da2d012aa8732441418f593bb50e8b58a2b55c1bdead0a0c0dca9c473f17939e8024c2ef423b5751f06755f7361e9ddaef9c6dbd444e95162a2db7f8cf009f0752aa0b46e94217d83a0161d567907288ac711e526031553ae25eba74def827cdaf841b20cf3ab54294c1f6e060c2552aa604e3445735bfcb12a5e11d5fdf882da0964579661021ccbdbab3a9991f16d2c25b3d54f6bd857c0ea38ce67886dd825dfd81e44dd775ce7cb082d1126d5a54b90aae1ce89ca91955d7c218be776d2de24205becb12f92e9a076114ae1efe83326b3a234482eb4055ee336108080d075a5c38507cfb86c881bd3f778cdbaee70372ffc482b95ee77ca36e3c5d72eceecbede22173ea3271e625f6099fdd9a2c26b2fb8b98fdef9091b4d5fed7a86b109d57781cea68dd49a122f82c9b1ae41126104b75f819cb9ca2c7ddfd812e0fa2538bb0b1ea9708844ce531dddd28dc4c8c0aad95c42972648734e08e41836515827dcd4179f1ec7e0dd663e5d1421b5e1518500ab6fa2d95243f63e1cb5ecb4ebe62b5c278c6be8d817252f20156103e7dab995e41b3417ab4a8948bf92f53fcc7e08cca44ebfe8ba789fd387b2a8796f9e81ebf245d91f3c936b1cba1f8c12d3f15e754a560c20cc8f640699f70adc7083d00182dcff3cdc978284746877b316270bb273661a4fc7a2a65830a57e60648a96999b94779e4c6b192bb475942f936af6d477ab206ea1ff6c96ac3815e14095913a8f2bd24fc900276f74a38fa273a9e179cfbb66d0f5d989f3d7d1bc4ea4c538e70a32e16dddef7f07292e4e26274151e649b04eda18a25e6ba7c1d417653ecd4ea9f988bc72cfc96b1ac69deb6799d254608f86ab3e3e060958cdcdc17caee999bee73fdea38aa1da2fd64d09b72e7f7a2361e5c1e0c7a26aa005939baeb2c200a111ddce8ab496b2202906d62e888f27290599b8b8c168e0c1c7bb7f07de642ecfbaa26e0ea520ecc20a2f8371b1508ddf9d99036b5b017129e07237722125a4e8a553bd4a2ba13a039179e5e5d4db666284f8ca1888d11b1565d6a4d9cafc5b1d4cbddb3900710de09e7ea3403ca9db7612f15f6a55982a518a1ae0c03e4cc45d413cb5cc1e21f87d220af30561f17debbfbdbbef40127150638cc2c9274b16c2fd6f6c2ed80f9a7357a232f4674b40b7c39e6a89b1e6f7d5e31dbe5d563e9a11de9fc6a54e852342d68fc1d54361e58d4c20a61fd12f6368f468605696518be33e888fc68b9df484df7ed796f32fb7404cbcdaf1d20c6b8cde17606bbce5dffcbf1aafed5da67a7c80ffb8d36abee1aa1299229cddd17484aeedce96d861ec69c02ce12b06ca4df8f71813a7e3b27bceee81824b75e47d00e4bf11d5f7b2fcfd8277ec46629a1d2615945e1e9e7d4d30548e2bd4705bc14f659461c09e6abf82979ca315a2d191ae0aa4a223e196a1a9dd347854d9d4f9c08917ee42c2289b2150322df2d572534ade9cedd11fb4961b696209443025baef88ff7b76d662735aeafc9a5272c486dac817a2ead5dabf7cdd4d370ed5304040f2b806bc8a01e7d42f61ebd6a3dc9b6c6a13b029542ab646314d41c611e4325c57b7d057667df0105f9ce9a74641a406f796dc09381021464a0f7e69507f74c5412d239dcfdb3aea22ba99c971da3699da053ea1bda22f8f4b9a32524cc94e3c519765f7a1b868da32ce0cf16549ec3a21995467682dc27bef6c6a1f3210231ac6b995c1917c71630ecd240cec4f14544eed773f5571d55de34358b3e9cc3a23bab04310e09e1f5f0e2219df6b237beb563bc3e94fc593c51b4f54657d839258698aab818710665c4c4b431e74c59603f00c899f924f0839bb539d88f4469b33bd150f0ef7c39c3c6f26ac34e66a294c696ee450513cc4f853b51423248dd9ebb06df06de730f80b3ab8863780e211debe96f943666678fac58ecb416fce2e25874ad3ef751988f882e71a5fe7096255674bbc3148e468b0ce1a8c29b9b8910792ba6004554ed31eb6b63e5678ebf3cc6773218be80f92fd888c434bb068af1ab6986395e057b40e2f114081d8700c25cc126da8598646b4fad9edde21c8b2e0a282f0ebb9f41101047f33f6bd279502999d5088f149bdbe1fe8bef71958dbf26bae583325346d95789231b65a6448bb237384adcec14831f831bef7b1dfa72ad924d19c4a3c2f54f1fd7b5a2fca7b8a717d328e3403de55ddce97b802f2c67bc201e280518f4d8ab1a79a0022116db0c81b33ad8c44f3f1ca9bfb1d8fa8ba8ee1ca2e83ba11bf5c94f7cab7f4b53ce4905390d20489dad540b30c600b79a39af5acd8bb6b0287c82cf381a1b3c2190dc1741cf3a30c35f15a8c2c4a85a2f9eb54e2c29394bc3e53ac696cfeed4093591f35a435de14cbb06bedc51387b82be5856d30ac8ccfe4c15e7462e7274bd5192d67c1b8c0969de65c70d851660acd64dc9c6ad4264997a551e480341fc6cfaa767f8b28fcda3b5c1082e8837532ecd630bd3a1f642b33df78b9b12fd14ff1b5f8aa5016d655c4b830abe57e7fa9a09953886a2566369b7bff052324409d1ac9c42e8c3ac90cb71fc05c1cae6b53e54143063fc30ba567ed2202db840816471468394138f227ed30ce095a83cc5d3527610b2b144baba30213e47b67400b9310c9a4b37e494dd6dbabe95c483a860ea66e3cd418e36ae5262183d18125a27c93a77f4c6b0b743c421cca7b75e84ef6d622d08313b64048a41806c012b5aeee6259383214d058b59108c18c918cc72c43c610a38c65d71f0568f22545f69897e97c7eb0971304ca"}) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x1, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) accept4(r2, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80, 0x80000) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 57.919447ms ago: executing program 0 (id=4742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0x72, "2ab9993e957231671de12ecb950f8fc0471e732fc98a99de42c62ea6f2d9992615b51b447b0bf8fe47ce5dd5197577c6efdbb28e0c66ed410c63b68d8e4c5add983191f46c4de91afd20272f11d5824560631bad3bc2f8de35e0162b72fcdb0efc53af0804873c97fefbea137e221553a335"}}) (async) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x8044) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0x0) 0s ago: executing program 1 (id=4743): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x42, r1, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x30, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2, 0x1}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x44014) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x4000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): dv_slave_0 [ 368.279352][T16238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.331214][ T985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.372368][ T985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.430921][ T985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.473206][ T985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.588425][T16946] vlan1: entered allmulticast mode [ 368.615773][T16950] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3060'. [ 368.618741][T16946] bond0: entered allmulticast mode [ 368.677463][T16946] bond_slave_1: entered allmulticast mode [ 368.848165][T16960] netlink: 'syz.0.3064': attribute type 1 has an invalid length. [ 368.981336][T16950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.000438][T16950] bond_slave_1: left allmulticast mode [ 369.021053][T16950] bond0 (unregistering): Released all slaves [ 369.043601][T16960] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 369.093064][T16968] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 369.271003][ T9273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.302220][ T9273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.418817][T16975] lo speed is unknown, defaulting to 1000 [ 369.441531][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.467036][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.820844][T16996] syzkaller0: entered promiscuous mode [ 369.836256][T16996] syzkaller0: entered allmulticast mode [ 370.041462][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.065657][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.075267][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.085735][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.095392][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.206465][T16975] wg1 speed is unknown, defaulting to 1000 [ 370.740721][T17028] macvtap2: entered promiscuous mode [ 370.757125][T17028] macvtap2: entered allmulticast mode [ 370.767579][T17028] vlan0: entered allmulticast mode [ 370.777066][T17028] veth0_vlan: entered allmulticast mode [ 371.027696][T17000] lo speed is unknown, defaulting to 1000 [ 371.583435][T17000] wg1 speed is unknown, defaulting to 1000 [ 371.782260][T17056] tipc: Started in network mode [ 371.788020][T17056] tipc: Node identity ac14140f, cluster identity 4711 [ 371.795321][T17056] tipc: New replicast peer: 255.255.255.255 [ 371.804541][T17064] __nla_validate_parse: 1 callbacks suppressed [ 371.804556][T17064] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3088'. [ 371.805150][T17056] tipc: Enabled bearer , priority 10 [ 372.133366][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3091'. [ 372.156915][ T5633] Bluetooth: hci2: command tx timeout [ 372.342573][T17089] netlink: 'syz.2.3094': attribute type 1 has an invalid length. [ 372.351550][T17089] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3094'. [ 372.410916][T17092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3093'. [ 372.421310][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 372.439419][T17092] IPv6: sit3: Disabled Multicast RS [ 372.445865][T17092] sit3: entered allmulticast mode [ 372.481774][T17098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3095'. [ 372.510625][T17097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3095'. [ 372.522299][T17000] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.538702][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.553960][T17000] bridge_slave_0: entered allmulticast mode [ 372.562037][T17000] bridge_slave_0: entered promiscuous mode [ 372.571748][T17000] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.591800][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.612127][T17000] bridge_slave_1: entered allmulticast mode [ 372.622917][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a438800: rx timeout, send abort [ 372.645968][T17000] bridge_slave_1: entered promiscuous mode [ 372.746259][T17000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.765842][T17000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.848993][T17000] team0: Port device team_slave_0 added [ 372.872161][T17000] team0: Port device team_slave_1 added [ 372.926423][T10087] tipc: Node number set to 2886997007 [ 372.988043][T17000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.005106][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.062269][T17000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.078747][T17000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.086037][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.123657][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069b25c00: rx timeout, send abort [ 373.133483][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a438800: abort rx timeout. Force session deactivation [ 373.186255][T17000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.221579][T17129] openvswitch: netlink: Flow key attribute not present in set flow. [ 373.249323][T17129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3107'. [ 373.265342][ T30] audit: type=1800 audit(1779338668.474:18): pid=17132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3106" name="memory.events" dev="tmpfs" ino=49 res=0 errno=0 [ 373.306153][T10084] hid_parser_main: 16 callbacks suppressed [ 373.306174][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.371399][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.424888][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.454262][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.465700][T17000] hsr_slave_0: entered promiscuous mode [ 373.477354][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.494443][T17000] hsr_slave_1: entered promiscuous mode [ 373.507824][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.521626][T17000] debugfs: 'hsr0' already exists in 'hsr' [ 373.532790][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.540978][T17000] Cannot create hsr debugfs directory [ 373.551507][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.568391][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.576235][T10084] hid-generic 0005:046D:0A0E.0004: unknown main item tag 0x0 [ 373.621912][T10084] hid-generic 0005:046D:0A0E.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 373.632797][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069b25c00: abort rx timeout. Force session deactivation [ 373.644176][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3113'. [ 373.822155][T17161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3116'. [ 373.928214][T17165] veth0: entered promiscuous mode [ 373.933648][T17166] veth0: left promiscuous mode [ 373.991377][T17169] xt_hashlimit: size too large, truncated to 1048576 [ 374.011157][T17000] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.022502][T17000] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.060855][T17169] syzkaller1: entered promiscuous mode [ 374.066504][T17169] syzkaller1: entered allmulticast mode [ 374.098408][T17000] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.122297][T17000] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.209202][T17000] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.219394][T17000] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.237133][ T5633] Bluetooth: hci2: command tx timeout [ 374.259105][T17171] infiniband syz1: set active [ 374.264002][T17171] infiniband syz1: added batadv_slave_1 [ 374.282905][T17171] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 374.298406][T17171] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 374.302107][T17000] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.316124][T17171] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 374.337721][T17000] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.455972][T17171] RDS/IB: syz1: added [ 374.481923][T17171] smc: adding ib device syz1 with port count 1 [ 374.503100][T17171] smc: ib device syz1 port 1 has no pnetid [ 374.563266][T17183] netlink: 'syz.1.3121': attribute type 4 has an invalid length. [ 374.767757][T17190] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 375.056634][T17000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.067929][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.086834][T17000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.317013][ T5633] Bluetooth: hci2: command tx timeout [ 377.995881][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.006115][T17000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.017891][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.033215][ T4993] udevd[4993]: worker [5642] /devices/virtual/block/nbd0 timeout; kill it [ 378.067615][ T4993] udevd[4993]: seq 13263 '/devices/virtual/block/nbd0' killed [ 378.088112][T17000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.106241][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.262502][T17202] netlink: 'syz.2.3129': attribute type 1 has an invalid length. [ 378.269431][T17000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.303491][T17000] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.341624][T17215] __nla_validate_parse: 3 callbacks suppressed [ 378.341640][T17215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3130'. [ 378.350031][T17218] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 378.380468][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.381797][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3130'. [ 378.387653][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.398498][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.406098][ T5633] Bluetooth: hci2: command tx timeout [ 378.412053][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.427139][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3130'. [ 378.652255][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.738684][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3132'. [ 379.083118][T17237] netlink: 'syz.2.3136': attribute type 1 has an invalid length. [ 379.206377][T17237] 8021q: adding VLAN 0 to HW filter on device bond13 [ 379.238187][T17247] netlink: 'syz.0.3139': attribute type 1 has an invalid length. [ 379.283430][T17245] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 379.298542][T17245] bond5 (unregistering): Released all slaves [ 379.392770][T17260] nbd: illegal input index 2958377 [ 380.467729][T17301] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3151'. [ 382.125567][T17283] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 382.132967][T17283] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 382.184274][T17000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.343851][T17318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3156'. [ 382.362370][T17000] veth0_vlan: entered promiscuous mode [ 382.406172][T17000] veth1_vlan: entered promiscuous mode [ 382.550702][T17000] veth0_macvtap: entered promiscuous mode [ 382.574072][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3160'. [ 382.583968][T17000] veth1_macvtap: entered promiscuous mode [ 382.605728][T17000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.702118][T17000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.743498][ T9273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.762853][ T9273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.790709][ T9273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.826464][ T9273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.057134][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 383.097483][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3166'. [ 383.131646][T17324] netlink: 'syz.4.3157': attribute type 2 has an invalid length. [ 383.133873][T17350] bond5: entered promiscuous mode [ 383.144776][T17350] bond5: entered allmulticast mode [ 383.150604][T17350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.158194][ T9265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.165461][T17356] erspan0: entered promiscuous mode [ 383.178161][ T9265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.332952][ T9280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.349190][ T9280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.382388][T17361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3168'. [ 383.648235][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'. [ 383.681476][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.750535][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3174'. [ 383.768116][T10087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.854503][T17376] hsr_slave_1 (unregistering): left promiscuous mode [ 383.983013][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.996581][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.007339][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.021036][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.034085][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.140578][T17401] syzkaller1: entered promiscuous mode [ 384.156882][T17401] syzkaller1: entered allmulticast mode [ 384.181544][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3178'. [ 384.191408][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 384.209773][T17402] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3179'. [ 384.254472][T17402] syzkaller0: entered promiscuous mode [ 384.273726][T17402] syzkaller0: entered allmulticast mode [ 384.509172][ T985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.530617][ T985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.684672][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.711115][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.815026][T17431] x_tables: duplicate underflow at hook 2 [ 384.858957][ T985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.892063][ T985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.018675][T10087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.097781][T17452] netlink: 'syz.1.3189': attribute type 5 has an invalid length. [ 385.119891][T17452] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 385.171694][T17448] vcan0: entered allmulticast mode [ 385.194928][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 385.285045][ T985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.295090][T10097] hid-generic 0005:0C45:1010.0005: item fetching failed at offset 0/1 [ 385.313009][T10097] hid-generic 0005:0C45:1010.0005: probe with driver hid-generic failed with error -22 [ 385.320891][ T985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.362853][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 385.499452][ T985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.511524][ T985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.541281][T17392] lo speed is unknown, defaulting to 1000 [ 385.622283][T17474] block nbd0: reconnected socket [ 385.630505][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3195'. [ 385.655893][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3195'. [ 385.818967][T17481] tipc: Enabling of bearer rejected, failed to enable media [ 385.841210][ T9265] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.933744][ T9280] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.001380][T10085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.047607][ T9280] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.077166][ T5633] Bluetooth: hci4: command tx timeout [ 386.123721][T10094] IPVS: starting estimator thread 0... [ 386.135228][T17493] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 386.151798][ T9283] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.196865][T17392] wg1 speed is unknown, defaulting to 1000 [ 386.267048][T17495] IPVS: using max 38 ests per chain, 91200 per kthread [ 386.355539][ T5644] block nbd0: Receive control failed (result -32) [ 386.485582][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.935576][ T985] bond13 (unregistering): (slave geneve3): Releasing active interface [ 386.973748][ T985] bond8 (unregistering): (slave geneve0): Releasing active interface [ 387.042650][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.118738][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.371880][ T985] .` (unregistering): Released all slaves [ 387.385972][ T985] bond1 (unregistering): Released all slaves [ 387.404034][ T985] bond2 (unregistering): Released all slaves [ 387.425507][ T985] bond3 (unregistering): Released all slaves [ 387.442993][ T985] bond4 (unregistering): Released all slaves [ 387.456709][ T985] bond0 (unregistering): Released all slaves [ 387.470446][ T985] bond5 (unregistering): Released all slaves [ 387.491428][ T985] bond6 (unregistering): Released all slaves [ 387.504994][ T985] bond7 (unregistering): Released all slaves [ 387.521815][ T985] bond8 (unregistering): Released all slaves [ 387.541930][ T985] bond9 (unregistering): Released all slaves [ 387.555210][ T985] bond10 (unregistering): Released all slaves [ 387.569699][ T985] bond11 (unregistering): Released all slaves [ 387.589234][ T985] bond12 (unregistering): Released all slaves [ 387.604826][ T985] bond13 (unregistering): Released all slaves [ 387.647744][T17514] vxcan2: entered promiscuous mode [ 387.683910][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 387.834708][ T985] : left promiscuous mode [ 388.084521][ T985] tipc: Disabling bearer [ 388.144687][T17543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.157061][ T5644] Bluetooth: hci4: command tx timeout [ 388.182199][ T985] tipc: Left network mode [ 388.454170][ T985] IPVS: stopping master sync thread 5905 ... [ 388.802190][T17588] gtp2: entered allmulticast mode [ 388.906657][T17594] __nla_validate_parse: 5 callbacks suppressed [ 388.906675][T17594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 388.965394][T17594] net_ratelimit: 6 callbacks suppressed [ 388.965409][T17594] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.969125][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3223'. [ 389.051458][T17611] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.056870][T17595] macsec2: entered promiscuous mode [ 389.291784][T10094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.342679][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 389.464595][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'. [ 389.530196][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.034364][T17392] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.041808][T17392] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.049539][T17392] bridge_slave_0: entered allmulticast mode [ 390.056986][T17392] bridge_slave_0: entered promiscuous mode [ 390.065386][T17392] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.072852][T17392] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.080564][T17392] bridge_slave_1: entered allmulticast mode [ 390.097456][T17392] bridge_slave_1: entered promiscuous mode [ 390.237321][ T5644] Bluetooth: hci4: command tx timeout [ 390.277820][T17392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.312328][T17392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.327274][T10097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.446086][T17392] team0: Port device team_slave_0 added [ 390.467521][T17392] team0: Port device team_slave_1 added [ 390.484968][ T985] veth1_vlan: left promiscuous mode [ 390.490348][ T985] veth0_vlan: left promiscuous mode [ 390.806488][T17392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.814043][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.841082][T17392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.854734][T17392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.866978][T17392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.893394][T17392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.949621][T17392] hsr_slave_0: entered promiscuous mode [ 390.955874][T17392] hsr_slave_1: entered promiscuous mode [ 390.962859][T17392] debugfs: 'hsr0' already exists in 'hsr' [ 390.968770][T17392] Cannot create hsr debugfs directory [ 391.128621][T17392] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.197932][ T985] IPVS: stop unused estimator thread 0... [ 391.240296][T17392] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.332071][T17392] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.360182][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.429235][T17392] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.078529][ T1742] block nbd0: Possible stuck request ffff888027655080: control (read@0,1024B). Runtime 240 seconds [ 392.094799][ T1742] block nbd0: Possible stuck request ffff888027655240: control (read@1024,1024B). Runtime 240 seconds [ 392.108376][ T25] block nbd0: Dead connection, failed to find a fallback [ 392.116426][ T25] block nbd0: shutting down sockets [ 392.122000][ T1742] block nbd0: Possible stuck request ffff888027655400: control (read@2048,1024B). Runtime 240 seconds [ 392.133322][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.143693][ T1742] block nbd0: Possible stuck request ffff8880276555c0: control (read@3072,1024B). Runtime 240 seconds [ 392.157440][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.165301][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.174746][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 392.182626][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.191788][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 392.199780][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.209036][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 392.220506][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.230929][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.242462][ T5642] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.252288][ T5642] Buffer I/O error on dev nbd0, logical block 1, async page read [ 392.260194][ T5642] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.269327][ T5642] Buffer I/O error on dev nbd0, logical block 2, async page read [ 392.277223][ T5642] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.286322][ T5642] Buffer I/O error on dev nbd0, logical block 3, async page read [ 392.295446][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.304553][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.312535][ T5642] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.313709][T17620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.321934][ T5642] Buffer I/O error on dev nbd0, logical block 1, async page read [ 392.324584][ T5642] ldm_validate_partition_table(): Disk read failed. [ 392.339160][ T5644] Bluetooth: hci4: command tx timeout [ 392.350119][ T5642] Dev nbd0: unable to read RDB block 0 [ 392.388644][T17392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.404048][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.417600][ T5642] nbd0: unable to read partition table [ 392.476511][ T4993] udevd[4993]: worker [5642] terminated by signal 9 (Killed) [ 392.501882][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.525836][ T4993] udevd[4993]: worker [5642] failed while handling '/devices/virtual/block/nbd0' [ 392.546533][T17392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.567863][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.600986][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.620013][T17666] netlink: 'syz.4.3236': attribute type 58 has an invalid length. [ 392.633174][T17392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.645378][T17666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3236'. [ 392.669205][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.683044][T17664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3233'. [ 392.707092][T17670] netlink: 'syz.4.3236': attribute type 12 has an invalid length. [ 392.715149][T17670] netlink: 'syz.4.3236': attribute type 29 has an invalid length. [ 392.723948][T17670] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3236'. [ 392.736282][T17670] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3236'. [ 392.746697][T17392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.771123][T17392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.864705][T17669] netlink: 'syz.1.3237': attribute type 20 has an invalid length. [ 392.879844][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3237'. [ 393.029881][T17669] netlink: 'syz.1.3237': attribute type 20 has an invalid length. [ 393.041761][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3237'. [ 393.325414][T17392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.352293][T17392] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.386453][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.392276][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3245'. [ 393.393697][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.462817][T10097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.500902][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.508151][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.542040][T17732] netlink: 'syz.4.3248': attribute type 3 has an invalid length. [ 393.913735][T17750] netlink: 'syz.4.3252': attribute type 1 has an invalid length. [ 393.973937][T17753] netlink: 'syz.1.3254': attribute type 3 has an invalid length. [ 394.039321][T10084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.052911][T17760] __nla_validate_parse: 1 callbacks suppressed [ 394.052927][T17760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3256'. [ 394.933261][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3266'. [ 395.150552][T17392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.162443][T17818] Cannot find del_set index 3 as target [ 395.335063][T17392] veth0_vlan: entered promiscuous mode [ 395.402522][T17392] veth1_vlan: entered promiscuous mode [ 395.495646][T17392] veth0_macvtap: entered promiscuous mode [ 395.517658][T17392] veth1_macvtap: entered promiscuous mode [ 395.541626][T17392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.566180][T17392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.590907][ T9273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.592426][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 395.601183][ T9273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.663439][ T9273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.673416][ T9273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.148787][T17819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.261241][ T9273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.300994][ T9273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.400199][ T9273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.431215][ T9273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.601738][T17905] ip6t_srh: unknown srh match flags 5F28 [ 398.731552][T17917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3285'. [ 398.829222][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'. [ 399.196346][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.209336][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.220492][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.231447][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.247324][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.568450][T17939] lo speed is unknown, defaulting to 1000 [ 399.905753][T17939] wg1 speed is unknown, defaulting to 1000 [ 400.132262][T17983] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 400.216060][T17987] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3304'. [ 400.230601][T17985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 400.374856][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3307'. [ 400.408865][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 400.417230][T17996] tipc: Enabling of bearer rejected, failed to enable media [ 400.552784][T17998] netlink: 'syz.1.3309': attribute type 11 has an invalid length. [ 400.581718][T18002] xt_time: unknown flags 0xf4 [ 400.927893][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 401.019808][T18020] ip6gre1: entered allmulticast mode [ 401.277435][ T5644] Bluetooth: hci1: command tx timeout [ 403.361538][ T5644] Bluetooth: hci1: command tx timeout [ 403.537796][T18073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 403.547579][T17939] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.559314][T17939] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.566594][T17939] bridge_slave_0: entered allmulticast mode [ 403.576266][T17939] bridge_slave_0: entered promiscuous mode [ 403.585215][T17939] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.592572][T17939] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.600281][T17939] bridge_slave_1: entered allmulticast mode [ 403.618653][T17939] bridge_slave_1: entered promiscuous mode [ 403.728264][T17939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.761564][T17939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.776113][T18087] netlink: 'syz.3.3338': attribute type 5 has an invalid length. [ 403.810518][T18087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3338'. [ 403.873050][T17939] team0: Port device team_slave_0 added [ 403.891374][T17939] team0: Port device team_slave_1 added [ 403.991021][T17939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.999445][T18097] sctp: [Deprecated]: syz.4.3341 (pid 18097) Use of int in maxseg socket option. [ 403.999445][T18097] Use struct sctp_assoc_value instead [ 404.013311][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.108403][T17939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.130706][T17939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.139960][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.173910][T17939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.267520][T18110] netlink: 'syz.1.3344': attribute type 5 has an invalid length. [ 404.270568][T18115] netlink: 'syz.1.3344': attribute type 5 has an invalid length. [ 404.511081][T17939] hsr_slave_0: entered promiscuous mode [ 404.518040][T17939] hsr_slave_1: entered promiscuous mode [ 404.524364][T17939] debugfs: 'hsr0' already exists in 'hsr' [ 404.530589][T17939] Cannot create hsr debugfs directory [ 404.682425][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 404.911451][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3350'. [ 404.922743][T17939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.923138][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3350'. [ 404.933267][T17939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.972934][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3350'. [ 404.999785][T18133] tipc: Started in network mode [ 405.005280][T18133] tipc: Node identity c6eca632e8c7, cluster identity 4711 [ 405.014479][T18133] tipc: Enabled bearer , priority 0 [ 405.134884][T18133] syzkaller0: entered promiscuous mode [ 405.148401][T18133] syzkaller0: entered allmulticast mode [ 405.159491][T18133] tipc: Resetting bearer [ 405.171062][T18142] tipc: Enabling of bearer rejected, failed to enable media [ 405.180542][T18152] openvswitch: netlink: IP tunnel dst address not specified [ 405.297555][T17939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.314551][T17939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.346242][T18133] tipc: Resetting bearer [ 405.437029][ T5644] Bluetooth: hci1: command tx timeout [ 407.223061][T18133] tipc: Disabling bearer [ 407.249589][T10094] tipc: Node number set to 774612530 [ 407.360653][T17939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.372260][T17939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.430742][T18185] netlink: 'syz.0.3359': attribute type 1 has an invalid length. [ 407.444913][T18185] netlink: 'syz.0.3359': attribute type 2 has an invalid length. [ 407.463328][T18185] netlink: 'syz.0.3359': attribute type 1 has an invalid length. [ 407.517477][ T5644] Bluetooth: hci1: command tx timeout [ 407.529433][T17939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.540399][T17939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.541738][T18191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3363'. [ 407.603991][T18183] syzkaller0: entered promiscuous mode [ 407.619389][T18183] syzkaller0: entered allmulticast mode [ 407.625694][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'. [ 407.654617][T18198] veth3: entered allmulticast mode [ 408.195951][T18225] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3372'. [ 408.200156][T17939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 408.218339][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.230242][T17939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 408.244380][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.279163][T17939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 408.329753][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.350294][T17939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 408.375601][T17939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.578790][T18246] netlink: 'syz.3.3377': attribute type 2 has an invalid length. [ 408.598170][T17939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.620571][T18246] syzkaller0: entered promiscuous mode [ 408.626655][T18246] syzkaller0: entered allmulticast mode [ 408.653200][T17939] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.740617][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.747816][ T9278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.793730][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.800934][ T9275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.435799][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3382'. [ 409.471681][T18273] netlink: 'syz.4.3383': attribute type 3 has an invalid length. [ 409.669842][T18282] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3384'. [ 409.822258][T17939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.921150][T18291] syzkaller0: entered promiscuous mode [ 409.936932][T18291] syzkaller0: entered allmulticast mode [ 410.248515][T17939] veth0_vlan: entered promiscuous mode [ 410.275345][T18311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3393'. [ 410.298639][T17939] veth1_vlan: entered promiscuous mode [ 410.320521][T18314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3390'. [ 410.399175][T17939] veth0_macvtap: entered promiscuous mode [ 410.438574][T17939] veth1_macvtap: entered promiscuous mode [ 410.489964][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 410.515611][T17939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.556506][T17939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.621148][ T9273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.643314][ T9278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.684931][ T9278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.701674][ T9273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.710915][T18337] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3397'. [ 410.866649][ T30] audit: type=1800 audit(1779338706.094:19): pid=18340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3399" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=373 res=0 errno=0 [ 411.049130][T18350] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3402'. [ 411.068957][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.089823][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.147290][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.160665][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.169891][T18357] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 411.277941][T18357] bond1: entered promiscuous mode [ 411.284987][T18357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.339931][T18358] bond1: (slave bridge1): making interface the new active one [ 411.357839][T18358] bridge1: entered promiscuous mode [ 411.379861][T18358] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 411.485150][ T985] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.522327][ T985] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.722186][T18370] syzkaller0: entered promiscuous mode [ 411.747166][T18370] syzkaller0: entered allmulticast mode [ 411.801526][ T985] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.835895][ T985] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.903572][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.923081][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.932078][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.942668][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.952652][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.060803][T18391] netem: change failed [ 412.081889][T18395] bridge0: entered promiscuous mode [ 412.098406][T18395] syz_tun: entered promiscuous mode [ 412.109727][T18395] debugfs: 'hsr1' already exists in 'hsr' [ 412.124293][T18395] Cannot create hsr debugfs directory [ 414.081751][ T50] Bluetooth: hci0: command tx timeout [ 414.145338][T18408] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 414.341570][T18427] __nla_validate_parse: 11 callbacks suppressed [ 414.341591][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3418'. [ 414.373837][T18427] xt_hashlimit: size too large, truncated to 1048576 [ 414.417930][T18434] veth1_macvtap: left promiscuous mode [ 414.439411][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3418'. [ 414.443143][T18434] macsec0: entered promiscuous mode [ 414.472676][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3418'. [ 414.475330][T18439] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3420'. [ 414.504480][T18434] macsec0: entered allmulticast mode [ 414.555304][T18444] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3421'. [ 414.579719][T18401] lo speed is unknown, defaulting to 1000 [ 414.918986][T18462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3425'. [ 414.929627][T18462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3425'. [ 414.975564][T18401] wg1 speed is unknown, defaulting to 1000 [ 415.359093][T18486] netlink: 'syz.4.3432': attribute type 29 has an invalid length. [ 415.402344][T18487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 415.402417][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 415.516287][T18495] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.531187][T18500] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 415.549963][T18500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3433'. [ 415.843289][T18401] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.852185][T18401] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.860268][T18401] bridge_slave_0: entered allmulticast mode [ 415.868778][T18401] bridge_slave_0: entered promiscuous mode [ 415.878011][T18401] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.885271][T18401] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.893112][T18401] bridge_slave_1: entered allmulticast mode [ 415.900992][T18401] bridge_slave_1: entered promiscuous mode [ 415.939445][T18401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.951983][T18401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.999988][T18401] team0: Port device team_slave_0 added [ 416.009919][T18401] team0: Port device team_slave_1 added [ 416.064865][T18401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.072519][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.100153][T18401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.114915][T18401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.122438][T18401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.149341][T18401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.160871][ T50] Bluetooth: hci0: command tx timeout [ 416.293457][T18401] hsr_slave_0: entered promiscuous mode [ 416.301414][T18401] hsr_slave_1: entered promiscuous mode [ 416.324189][T18401] debugfs: 'hsr0' already exists in 'hsr' [ 416.339572][T18401] Cannot create hsr debugfs directory [ 416.391101][T18522] IPv6: sit1: Disabled Multicast RS [ 416.398526][T18522] sit1: entered allmulticast mode [ 416.571321][T18529] syzkaller0: entered promiscuous mode [ 416.576934][T18529] syzkaller0: entered allmulticast mode [ 417.144922][T18401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.156352][T18401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.215869][T18547] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 417.325167][T18401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.336488][T18401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.447561][T18564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.529738][T18401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.570191][T18401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.805711][T18401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.831167][T18401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.026154][T18595] nbd: nbd0 already in use [ 418.058878][T18595] block nbd0: NBD_DISCONNECT [ 418.074066][T18595] block nbd0: Send disconnect failed -32 [ 418.204866][ T9265] bond6: left allmulticast mode [ 418.214261][ T9265] vcan1: left allmulticast mode [ 418.237035][ T50] Bluetooth: hci0: command tx timeout [ 418.271153][T18608] netlink: 'syz.0.3464': attribute type 11 has an invalid length. [ 418.632991][ T9265] bond3 (unregistering): (slave ip6erspan1): Releasing active interface [ 418.662759][ T9265] team0: Port device ip6gre1 removed [ 418.689133][ T9265] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 418.900574][ T9265] gretap0 (unregistering): left promiscuous mode [ 419.240385][ T9265] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 419.390327][ T9265] bond0 (unregistering): Released all slaves [ 419.401244][ T9265] bond1 (unregistering): Released all slaves [ 419.415772][ T9265] bond2 (unregistering): (slave lo): Releasing backup interface [ 419.424716][ T9265] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 419.437778][ T9265] bond2 (unregistering): Released all slaves [ 419.452344][ T9265] bond3 (unregistering): Released all slaves [ 419.466106][ T9265] bond4 (unregistering): Released all slaves [ 419.479377][ T9265] bond5 (unregistering): Released all slaves [ 419.497236][ T9265] bond6 (unregistering): (slave vcan1): Releasing backup interface [ 419.505302][ T9265] vcan1: left promiscuous mode [ 419.511649][ T9265] bond6 (unregistering): Released all slaves [ 419.536140][ T9265] bond7 (unregistering): Released all slaves [ 419.551019][ T9265] bond8 (unregistering): Released all slaves [ 419.565017][ T9265] bond9 (unregistering): Released all slaves [ 419.582657][ T9265] bond10 (unregistering): Released all slaves [ 419.601122][ T9265] bond11 (unregistering): Released all slaves [ 419.614448][ T9265] bond12 (unregistering): Released all slaves [ 419.632647][ T9265] bond13 (unregistering): Released all slaves [ 419.860002][T18401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.030769][T18646] __nla_validate_parse: 3 callbacks suppressed [ 420.030786][T18646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3470'. [ 420.039383][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.069850][ T9265] : left promiscuous mode [ 420.203846][T18401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.243808][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.255900][T18658] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3472'. [ 420.270411][ T9265] tipc: Left network mode [ 420.320519][ T50] Bluetooth: hci0: command tx timeout [ 420.329451][T18401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.379606][T18663] xt_hashlimit: invalid interval [ 420.425397][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.454056][T18401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.522537][T18401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.574928][T18667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3474'. [ 420.623967][T18673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.688599][T18667] : entered promiscuous mode [ 420.724676][T18667] : entered allmulticast mode [ 420.769158][T18667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3474'. [ 420.786338][ T985] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.816912][ T985] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.894286][ T985] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.933654][ T985] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.161478][T18703] sch_fq: defrate 0 ignored. [ 421.305043][T18401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.394094][T18401] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.443578][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.450879][ T9275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.515995][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.523233][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.806197][T18736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3487'. [ 422.628725][ T9265] veth1_to_team: left promiscuous mode [ 422.746465][ T9265] hsr_slave_0: left promiscuous mode [ 422.765916][ T9265] hsr_slave_1: left promiscuous mode [ 422.788134][ T9265] vlan0: left allmulticast mode [ 422.793072][ T9265] veth0_vlan: left allmulticast mode [ 422.805952][ T9265] veth1_vlan: left allmulticast mode [ 422.811871][ T9265] veth1_macvtap: left promiscuous mode [ 422.817869][ T9265] veth0_macvtap: left promiscuous mode [ 422.823656][ T9265] veth1_vlan: left promiscuous mode [ 423.604013][ T9265] vcan0 (unregistering): left allmulticast mode [ 423.646334][T18401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.763447][T18401] veth0_vlan: entered promiscuous mode [ 423.783257][T18401] veth1_vlan: entered promiscuous mode [ 423.830842][T18401] veth0_macvtap: entered promiscuous mode [ 423.836946][T18689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.871896][T18401] veth1_macvtap: entered promiscuous mode [ 423.957887][T18401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.032673][T18401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.076542][T18776] netlink: 'syz.4.3490': attribute type 11 has an invalid length. [ 424.102395][ T9273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.135704][ T9273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.193655][ T9273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.194397][T18776] Bluetooth: MGMT ver 1.23 [ 424.273985][ T9273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.354123][T18785] IPv6: NLM_F_REPLACE set, but no existing node found! [ 424.402607][ T9265] IPVS: stop unused estimator thread 0... [ 424.727921][ T9273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.745753][ T9273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.864539][ T9283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.904901][ T9283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.001913][T18813] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 425.258332][T18828] netlink: 'syz.2.3502': attribute type 11 has an invalid length. [ 425.307959][T18828] netlink: 'syz.2.3502': attribute type 4 has an invalid length. [ 425.351635][T18828] netlink: 'syz.2.3502': attribute type 6 has an invalid length. [ 425.369203][T18833] bridge1: entered promiscuous mode [ 425.376470][T18833] bridge1: entered allmulticast mode [ 425.382688][T18828] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.3502'. [ 425.402936][T18843] netlink: 'syz.2.3502': attribute type 1 has an invalid length. [ 425.532021][T18845] veth5: entered promiscuous mode [ 425.550194][T18845] veth5: entered allmulticast mode [ 425.590881][T18852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.616015][T18852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.660047][T18852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.028634][T18872] pimreg3: entered allmulticast mode [ 426.210784][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3517'. [ 426.259358][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3517'. [ 426.271287][T18896] syzkaller0: entered promiscuous mode [ 426.281951][T18896] syzkaller0: entered allmulticast mode [ 426.567011][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3521'. [ 426.608171][T18913] netlink: 'syz.1.3521': attribute type 1 has an invalid length. [ 427.455447][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.463471][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.481564][T18992] netlink: 'syz.2.3536': attribute type 1 has an invalid length. [ 427.570093][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 427.956009][T18957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.985988][T18957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.351491][T18960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.359875][T18960] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.372238][T18960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.403415][T18960] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.410709][T18960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.422050][T18960] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.429235][T18960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.446369][T18960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.456005][T18960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.479401][T18960] veth1_vlan: left promiscuous mode [ 428.486416][T18960] veth0_vlan: left promiscuous mode [ 428.513091][T18960] veth0_vlan: entered promiscuous mode [ 428.527726][T18960] veth1_vlan: entered promiscuous mode [ 428.540036][T18960] veth1_macvtap: left promiscuous mode [ 428.548496][T18960] veth0_macvtap: left promiscuous mode [ 428.569105][T18960] veth0_macvtap: entered promiscuous mode [ 428.585598][T18960] veth1_macvtap: entered promiscuous mode [ 428.599384][T18960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.610098][T18960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.621021][T18960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.640097][T18960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.674553][T18992] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 428.827500][ T9278] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.852706][ T9278] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.928389][T19014] tipc: New replicast peer: 172.20.20.187 [ 428.940667][T19014] tipc: Enabled bearer , priority 10 [ 428.949563][ T9278] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.972059][ T9278] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.681915][T19067] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3554'. [ 429.714136][T19068] gtp0: entered allmulticast mode [ 429.768054][T19068] team0: Device gtp0 is of different type [ 429.809346][T19076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'. [ 430.061179][T19092] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 430.233290][T19104] netlink: 'syz.3.3563': attribute type 11 has an invalid length. [ 430.267376][T19104] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3563'. [ 430.289545][T19109] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3559'. [ 430.468005][T19114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.719413][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3569'. [ 430.747928][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3569'. [ 430.801210][T19137] netlink: 'syz.0.3572': attribute type 10 has an invalid length. [ 430.839872][ T30] audit: type=1804 audit(1779338726.064:20): pid=19131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3569" name="/newroot/107/cgroup.controllers" dev="tmpfs" ino=565 res=1 errno=0 [ 430.912928][ T30] audit: type=1800 audit(1779338726.064:21): pid=19131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3569" name="cgroup.controllers" dev="tmpfs" ino=565 res=0 errno=0 [ 431.023006][T19137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.056023][T19137] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 434.425000][T19198] erspan0: entered allmulticast mode [ 434.724276][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'. [ 434.865982][T19229] team1: entered promiscuous mode [ 434.882037][T19229] team1: entered allmulticast mode [ 434.911940][T19236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3592'. [ 434.938285][T19237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3592'. [ 435.000099][T19239] netlink: 'syz.4.3593': attribute type 1 has an invalid length. [ 435.016049][T19231] lo speed is unknown, defaulting to 1000 [ 435.027394][T19239] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3593'. [ 435.142771][T19249] netlink: 'syz.3.3595': attribute type 21 has an invalid length. [ 435.181723][T19249] netlink: 'syz.3.3595': attribute type 1 has an invalid length. [ 435.231314][T19252] netlink: 'syz.2.3596': attribute type 8 has an invalid length. [ 435.621995][T19274] netlink: 'syz.2.3602': attribute type 2 has an invalid length. [ 435.716125][T19231] wg1 speed is unknown, defaulting to 1000 [ 435.755742][T19279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3604'. [ 435.814089][T19284] tc_dump_action: action bad kind [ 435.831528][T19282] syzkaller0: entered promiscuous mode [ 435.850517][T19282] syzkaller0: entered allmulticast mode [ 436.056261][T19292] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 436.216041][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3613'. [ 436.222160][T19292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3610'. [ 436.250231][T19297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.265668][T19297] bond1: (slave bond2): making interface the new active one [ 436.304420][T19297] bond1: (slave bond2): Enslaving as an active interface with an up link [ 436.351839][T19300] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 436.388013][T19315] netlink: 'syz.3.3616': attribute type 1 has an invalid length. [ 436.406415][T19292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.494590][T19321] netlink: 'syz.2.3617': attribute type 1 has an invalid length. [ 436.521865][T19317] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 436.544567][T19317] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 436.569762][T19317] bond1: (slave vxcan3): making interface the new active one [ 436.572145][T19324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3616'. [ 436.589315][T19317] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 436.611394][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 436.629597][T19332] openvswitch: netlink: Message has 8 unknown bytes. [ 436.639044][T19315] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 436.639613][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 436.667599][T19315] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 436.676444][T19332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.690397][T19332] openvswitch: netlink: Message has 8 unknown bytes. [ 436.698806][T19332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.698914][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 436.708759][T19332] openvswitch: netlink: Message has 8 unknown bytes. [ 436.724778][T19332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.734598][T19332] openvswitch: netlink: Message has 8 unknown bytes. [ 436.742379][T19332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.777326][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 436.778557][T19332] openvswitch: netlink: Message has 8 unknown bytes. [ 436.813279][T19332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.856435][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 436.924574][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 436.965971][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 437.010568][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 437.053105][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 437.084403][T19328] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 437.088667][T19342] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3623'. [ 437.107646][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3623'. [ 437.119399][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3623'. [ 437.601992][T10096] IPVS: starting estimator thread 0... [ 437.602004][T19360] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20000 [ 437.693934][T19364] netlink: 'syz.2.3630': attribute type 1 has an invalid length. [ 437.707579][T19362] IPVS: using max 32 ests per chain, 76800 per kthread [ 437.817020][T19369] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3633'. [ 437.883737][T19378] nbd: must specify a size in bytes for the device [ 437.895949][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.955657][T19369] bond1 (unregistering): Released all slaves [ 438.095409][T19387] syzkaller0: entered allmulticast mode [ 438.376026][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3641'. [ 438.400616][T19419] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 438.530238][T19427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3645'. [ 438.562320][T19427] netlink: 'syz.3.3645': attribute type 1 has an invalid length. [ 438.664426][T19435] netlink: 'syz.0.3647': attribute type 1 has an invalid length. [ 438.677105][T19435] netlink: 'syz.0.3647': attribute type 1 has an invalid length. [ 438.695409][T19435] netlink: 'syz.0.3647': attribute type 8 has an invalid length. [ 439.052691][T19455] netem: change failed [ 439.200799][T19468] xt_hashlimit: size too large, truncated to 1048576 [ 439.226460][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.275469][T19467] bridge_slave_0 (unregistering): left allmulticast mode [ 439.294574][T19467] bridge_slave_0 (unregistering): left promiscuous mode [ 439.312037][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.956600][T19516] bond2 (unregistering): Released all slaves [ 440.035218][T19523] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 440.173720][T19531] nbd: must specify at least one socket [ 440.640308][T19559] Cannot find add_set index 46338 as target [ 440.647491][T19509] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 440.671319][T19509] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 440.849694][T19578] netlink: 'syz.0.3686': attribute type 3 has an invalid length. [ 441.226057][T19612] __nla_validate_parse: 19 callbacks suppressed [ 441.226077][T19612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3692'. [ 441.263860][T19612] netlink: 'syz.1.3692': attribute type 7 has an invalid length. [ 441.300422][T19612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3692'. [ 441.541737][T19627] netlink: 'syz.3.3696': attribute type 29 has an invalid length. [ 441.637712][T19633] netlink: 'syz.2.3699': attribute type 9 has an invalid length. [ 441.716337][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3700'. [ 442.708164][T19649] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000 [ 442.715413][ T5761] IPVS: starting estimator thread 0... [ 442.847655][T19650] IPVS: using max 33 ests per chain, 79200 per kthread [ 444.428188][T19621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.616646][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3709'. [ 444.682242][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 444.760297][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3707'. [ 444.832610][T19683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3713'. [ 444.860167][T19683] netlink: 'syz.0.3713': attribute type 12 has an invalid length. [ 444.989435][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3715'. [ 445.027128][ T30] audit: type=1804 audit(1779338740.254:22): pid=19688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3714" name="/newroot/134/cgroup.controllers" dev="tmpfs" ino=707 res=1 errno=0 [ 445.095450][ T30] audit: type=1800 audit(1779338740.284:23): pid=19688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3714" name="cgroup.controllers" dev="tmpfs" ino=707 res=0 errno=0 [ 445.304004][T19706] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.311773][T19706] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.483477][T19722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3722'. [ 445.486163][T19720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.493607][T19715] syzkaller0: entered promiscuous mode [ 445.514435][T19715] syzkaller0: entered allmulticast mode [ 445.521795][T19719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3722'. [ 445.555482][T19720] net_ratelimit: 124 callbacks suppressed [ 445.555504][T19720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.651366][T19726] netlink: 'syz.0.3725': attribute type 1 has an invalid length. [ 445.660885][T19729] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 445.913939][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.962364][T19745] syzkaller1: entered promiscuous mode [ 445.980525][T19745] syzkaller1: entered allmulticast mode [ 447.222742][T19830] netlink: 'syz.3.3750': attribute type 21 has an invalid length. [ 447.268200][T19830] __nla_validate_parse: 3 callbacks suppressed [ 447.268221][T19830] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3750'. [ 447.316911][T19830] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3750'. [ 447.424184][T19840] netlink: 'syz.0.3753': attribute type 1 has an invalid length. [ 447.457188][T19840] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3753'. [ 447.523139][T19848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3754'. [ 447.579291][T19853] netlink: 'syz.4.3756': attribute type 9 has an invalid length. [ 447.621435][T19854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3757'. [ 447.656572][T19854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3757'. [ 447.831869][T19873] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3762'. [ 447.916629][T19877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3764'. [ 448.105508][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3767'. [ 448.292965][T19905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3771'. [ 448.583097][T19929] netlink: 'syz.1.3777': attribute type 1 has an invalid length. [ 448.596482][T19929] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 448.731718][T19935] netlink: 'syz.1.3780': attribute type 1 has an invalid length. [ 448.739545][T19941] netlink: 'syz.0.3782': attribute type 5 has an invalid length. [ 448.755963][T19935] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 448.756416][T19940] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 448.914307][T19959] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 449.053847][T19965] syzkaller0: entered promiscuous mode [ 449.061918][T19965] syzkaller0: entered allmulticast mode [ 449.075401][T19965] netlink: 'syz.1.3788': attribute type 3 has an invalid length. [ 449.535783][T19984] geneve2: entered promiscuous mode [ 449.545188][T19988] netlink: 'syz.3.3797': attribute type 21 has an invalid length. [ 449.567358][T19988] netlink: 'syz.3.3797': attribute type 6 has an invalid length. [ 449.668217][T19995] team0: Cannot enslave team device to itself [ 449.763918][T20000] syzkaller0: entered promiscuous mode [ 449.783287][T20000] syzkaller0: entered allmulticast mode [ 450.489797][T20056] netlink: 'syz.2.3815': attribute type 29 has an invalid length. [ 450.771607][T20067] veth0_macvtap: entered allmulticast mode [ 450.778308][T20067] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 451.011036][T20084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.034763][T20084] batadv_slave_1: entered promiscuous mode [ 451.092480][T20086] openvswitch: netlink: IP tunnel dst address not specified [ 452.288990][T20165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.409721][T20173] __nla_validate_parse: 11 callbacks suppressed [ 452.409739][T20173] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3851'. [ 452.474094][T20178] syzkaller0: entered promiscuous mode [ 452.490165][T20178] syzkaller0: entered allmulticast mode [ 452.508929][T20173] 0: renamed from hsr0 (while UP) [ 452.529988][T20178] netlink: 187152 bytes leftover after parsing attributes in process `syz.1.3852'. [ 452.774534][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3861'. [ 453.463691][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 453.508253][T20251] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 453.552966][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'. [ 453.575427][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 453.602332][T20254] validate_nla: 8 callbacks suppressed [ 453.602348][T20254] netlink: 'syz.2.3877': attribute type 15 has an invalid length. [ 453.653322][ T9265] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 453.663058][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'. [ 453.668996][T20250] netlink: set zone limit has 4 unknown bytes [ 453.683251][ T9265] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 453.701422][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 453.712223][ T9265] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 453.736582][T20254] netlink: 'syz.2.3877': attribute type 15 has an invalid length. [ 453.750563][ T9265] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 453.893737][T20264] veth0_macvtap: entered allmulticast mode [ 453.915225][T20264] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 453.924059][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3886'. [ 453.978550][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3886'. [ 454.072943][T20282] bridge1: port 1(vlan2) entered blocking state [ 454.085320][T20282] bridge1: port 1(vlan2) entered disabled state [ 454.103973][T20282] vlan2: entered allmulticast mode [ 454.114467][T20282] bridge1: entered allmulticast mode [ 454.124420][T20282] vlan2: left allmulticast mode [ 454.129599][T20282] bridge1: left allmulticast mode [ 454.153428][T10096] IPVS: starting estimator thread 0... [ 454.178099][T20285] syzkaller0: entered promiscuous mode [ 454.183952][T20285] syzkaller0: entered allmulticast mode [ 454.259985][T20291] IPVS: using max 29 ests per chain, 69600 per kthread [ 454.711473][T20317] netlink: 'syz.4.3899': attribute type 2 has an invalid length. [ 454.746179][T20317] netlink: 'syz.4.3899': attribute type 1 has an invalid length. [ 454.768193][T20319] netlink: 'syz.4.3899': attribute type 32 has an invalid length. [ 454.879753][T20329] openvswitch: netlink: IP tunnel TTL not specified. [ 454.905561][T20319] bond3: option coupled_control: invalid value (192) [ 454.916335][T20319] bond3 (unregistering): Released all slaves [ 454.960587][ T9248] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 455.177596][T20347] syzkaller0: entered promiscuous mode [ 455.183297][T20347] syzkaller0: entered allmulticast mode [ 455.661299][T20323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.920816][T20366] syzkaller1: entered allmulticast mode [ 456.392569][T20395] vlan2: entered promiscuous mode [ 456.416533][T20395] 0: entered promiscuous mode [ 456.433538][T20395] vlan2: entered allmulticast mode [ 456.464670][T20395] 0: entered allmulticast mode [ 456.477205][T20395] hsr_slave_0: entered allmulticast mode [ 456.505840][T20395] hsr_slave_1: entered allmulticast mode [ 456.556146][T20406] netlink: 'syz.4.3920': attribute type 1 has an invalid length. [ 456.583037][T20404] bridge2: entered allmulticast mode [ 456.757554][T20417] tls_set_device_offload: netdev not found [ 456.894693][T20423] netlink: 'syz.3.3925': attribute type 27 has an invalid length. [ 457.058739][T20435] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 457.078213][T20434] netlink: 'syz.4.3928': attribute type 1 has an invalid length. [ 457.112284][ T50] Bluetooth: hci0: link tx timeout [ 457.122511][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.282295][T20435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.398974][ T50] Bluetooth: hci0: link tx timeout [ 457.405451][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.429114][ T50] Bluetooth: hci0: link tx timeout [ 457.434607][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.560080][ T50] Bluetooth: hci0: link tx timeout [ 457.565294][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.849469][T20475] __nla_validate_parse: 10 callbacks suppressed [ 457.849493][T20475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3938'. [ 457.905962][T20479] lo speed is unknown, defaulting to 1000 [ 457.953969][T20487] netlink: 'syz.1.3939': attribute type 39 has an invalid length. [ 458.242098][T20502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3944'. [ 458.400699][ T50] Bluetooth: hci0: link tx timeout [ 458.406168][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.680325][ T50] Bluetooth: hci0: link tx timeout [ 458.686315][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.696793][T20479] wg1 speed is unknown, defaulting to 1000 [ 458.764517][ T50] Bluetooth: hci0: link tx timeout [ 458.770930][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.855455][ T50] Bluetooth: hci0: link tx timeout [ 458.861425][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.920493][ T50] Bluetooth: hci0: link tx timeout [ 458.925709][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 459.197432][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 459.302165][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'. [ 459.380439][T20554] syzkaller0: entered promiscuous mode [ 459.408673][T20554] syzkaller0: entered allmulticast mode [ 459.519572][T20554] netlink: 'syz.3.3959': attribute type 1 has an invalid length. [ 459.596307][T20566] tipc: Enabling of bearer rejected, failed to enable media [ 459.624747][T20571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.570338][T20597] IPv6: sit1: Disabled Multicast RS [ 461.243552][T20619] tun0: tun_chr_ioctl cmd 1074025675 [ 461.270208][T20619] tun0: persist disabled [ 461.281962][T20624] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3972'. [ 461.469972][T20636] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3974'. [ 461.504271][T20639] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3975'. [ 461.832642][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 461.922821][T20659] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 462.427931][T20689] IPVS: length: 101 != 8 [ 462.719139][T20695] macvlan0: entered promiscuous mode [ 462.897665][T20709] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3993'. [ 462.930574][T20709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3993'. [ 462.930707][T20716] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 463.103451][T20723] bond1: entered promiscuous mode [ 463.153187][T20723] bond1: entered allmulticast mode [ 463.204585][T20732] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3997'. [ 463.239104][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 463.269507][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 463.324725][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 463.428481][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4001'. [ 463.711079][T20715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3996'. [ 463.725308][T20759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4005'. [ 463.825415][T20722] netlink: zone id is out of range [ 463.863068][T20722] netlink: zone id is out of range [ 463.882871][T20722] netlink: zone id is out of range [ 463.896858][T20722] netlink: zone id is out of range [ 463.911137][T20722] netlink: zone id is out of range [ 463.942267][T20722] netlink: zone id is out of range [ 463.968484][T20722] netlink: zone id is out of range [ 463.983573][T20722] netlink: zone id is out of range [ 463.997417][T20722] netlink: zone id is out of range [ 464.014079][T20722] netlink: zone id is out of range [ 464.556345][T20792] netlink: 'syz.4.4012': attribute type 3 has an invalid length. [ 464.589093][T20792] netlink: 'syz.4.4012': attribute type 1 has an invalid length. [ 464.631948][T20792] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4012'. [ 464.838294][T20804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.045700][T20814] erspan0: entered promiscuous mode [ 465.053456][T20817] netlink: 'syz.3.4018': attribute type 11 has an invalid length. [ 465.070116][T20814] erspan0: entered allmulticast mode [ 465.092267][T20817] netlink: 'syz.3.4018': attribute type 11 has an invalid length. [ 465.244371][T20818] netlink: 'syz.3.4018': attribute type 11 has an invalid length. [ 465.265345][T20818] netlink: 'syz.3.4018': attribute type 11 has an invalid length. [ 465.310561][T20827] pim6reg: entered allmulticast mode [ 465.339378][T20827] pim6reg: left allmulticast mode [ 465.777454][T20849] netlink: 'syz.4.4026': attribute type 4 has an invalid length. [ 466.284982][T20877] netlink: 'syz.2.4033': attribute type 1 has an invalid length. [ 466.401413][T20877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.451025][T20882] syzkaller0: entered promiscuous mode [ 466.484898][T20882] syzkaller0: entered allmulticast mode [ 467.084781][T20922] lo: entered promiscuous mode [ 467.122543][T20922] netlink: 'syz.3.4041': attribute type 2 has an invalid length. [ 467.409387][T20933] netlink: 'syz.4.4044': attribute type 9 has an invalid length. [ 468.822996][T20989] __nla_validate_parse: 12 callbacks suppressed [ 468.823015][T20989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4057'. [ 469.137386][T21014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4063'. [ 469.632576][T21032] netlink: 'syz.3.4067': attribute type 1 has an invalid length. [ 469.680233][T21032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.688356][T21032] IPv6: NLM_F_CREATE should be set when creating new route [ 469.721929][T21040] netlink: 'syz.3.4067': attribute type 1 has an invalid length. [ 469.803392][T21040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.837780][T21048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4069'. [ 469.914852][T21032] netlink: 'syz.3.4067': attribute type 1 has an invalid length. [ 470.030571][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'. [ 470.063557][T21056] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4072'. [ 470.118705][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'. [ 470.147740][T21062] netlink: 'syz.2.4072': attribute type 11 has an invalid length. [ 470.366424][T21071] netlink: 'syz.2.4075': attribute type 1 has an invalid length. [ 470.389549][T21071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4075'. [ 470.416480][T21071] vxcan0: tx address claim with different name [ 470.425723][T21071] netlink: 'syz.2.4075': attribute type 32 has an invalid length. [ 470.437128][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 470.450636][T21079] x_tables: duplicate underflow at hook 4 [ 470.532071][T21071] bond4: option coupled_control: invalid value (29) [ 470.549711][T21071] bond4 (unregistering): Released all slaves [ 470.737745][T21090] netlink: 'syz.0.4080': attribute type 8 has an invalid length. [ 471.078194][T21097] syzkaller0: entered promiscuous mode [ 471.084121][T21097] syzkaller0: entered allmulticast mode [ 471.148134][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'. [ 471.605346][T21140] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 471.810045][T21149] netlink: 'syz.1.4090': attribute type 1 has an invalid length. [ 471.986477][T21155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4090'. [ 474.814692][T21143] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4089'. [ 474.825535][T21144] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4089'. [ 474.841152][ T5644] Bluetooth: hci1: link tx timeout [ 474.847311][ T5644] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.865059][ T50] Bluetooth: hci1: link tx timeout [ 474.876049][T21149] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 474.881093][ T50] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.956575][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4092'. [ 475.173439][T21173] netlink: 'syz.4.4095': attribute type 1 has an invalid length. [ 475.312245][T21173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.402994][T21179] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4096'. [ 475.684530][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 475.712118][T21206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4101'. [ 475.715833][T21211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4103'. [ 475.729902][T21214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4104'. [ 475.763918][T21214] net_ratelimit: 135 callbacks suppressed [ 475.763936][T21214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.948688][T21220] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 475.951578][T21223] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 475.962786][T21220] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 476.033019][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 476.087404][T21233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4108'. [ 476.212092][T21225] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 476.540857][T21247] ip6erspan0: entered allmulticast mode [ 476.580471][T21252] netlink: 'syz.4.4116': attribute type 39 has an invalid length. [ 476.879228][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 477.573791][T21304] bond5: option all_slaves_active: invalid value (222) [ 477.612630][T21304] bond5 (unregistering): Released all slaves [ 478.676103][T21363] vlan1: entered allmulticast mode [ 478.690126][T21363] bond0: entered allmulticast mode [ 478.706158][T21363] bond_slave_0: entered allmulticast mode [ 478.734601][T21363] bond_slave_1: entered allmulticast mode [ 478.953384][T21378] netlink: 'syz.2.4144': attribute type 1 has an invalid length. [ 479.005851][T21382] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 479.102844][T21382] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 479.148331][T21379] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 479.172525][T21394] vlan0: entered promiscuous mode [ 479.946116][T21440] x_tables: duplicate entry at hook 2 [ 480.033912][T21442] IPVS: length: 252 != 8 [ 480.057781][T21442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.075982][T21446] __nla_validate_parse: 13 callbacks suppressed [ 480.076000][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4161'. [ 480.602205][T21475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.921037][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 480.946237][T21491] bond5: entered promiscuous mode [ 480.964115][T21491] bond5: entered allmulticast mode [ 480.972232][T21491] 8021q: adding VLAN 0 to HW filter on device bond5 [ 481.018615][T21503] netlink: 'syz.0.4174': attribute type 12 has an invalid length. [ 481.052762][T21503] netlink: 'syz.0.4174': attribute type 29 has an invalid length. [ 481.073813][T21503] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4174'. [ 481.110908][T21503] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4174'. [ 481.458603][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4179'. [ 481.458667][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4179'. [ 481.468202][T21520] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 481.519209][T21520] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 481.572448][T21520] netlink: 'syz.1.4179': attribute type 2 has an invalid length. [ 481.617561][T21520] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4179'. [ 481.636485][T21523] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 481.665287][T21531] xt_HMARK: proto mask must be zero with L3 mode [ 481.672436][T21523] netlink: 'syz.1.4179': attribute type 1 has an invalid length. [ 481.690628][T21531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4181'. [ 481.697890][T21523] netlink: 'syz.1.4179': attribute type 2 has an invalid length. [ 481.740166][T21523] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4179'. [ 481.918646][T21540] team0: entered promiscuous mode [ 481.932761][T21540] team_slave_0: entered promiscuous mode [ 481.942987][T21540] team_slave_1: entered promiscuous mode [ 482.004712][T21514] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 482.473570][T21564] xt_hashlimit: size too large, truncated to 1048576 [ 482.573674][T21568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.715413][T21584] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4197'. [ 482.972249][T21597] netlink: 'syz.2.4201': attribute type 1 has an invalid length. [ 483.003059][T21603] ip_vti0: entered promiscuous mode [ 483.117220][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 483.185204][T21597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.323990][T21620] netlink: 'syz.3.4206': attribute type 1 has an invalid length. [ 483.338154][T21620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.560100][T21636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.944261][ T29] hid-generic 0005:0C45:1010.0006: item fetching failed at offset 0/1 [ 483.955936][ T29] hid-generic 0005:0C45:1010.0006: probe with driver hid-generic failed with error -22 [ 484.083687][T21648] syzkaller0: entered promiscuous mode [ 484.091060][T21648] syzkaller0: entered allmulticast mode [ 484.140518][T21648] tipc: Started in network mode [ 484.145663][T21648] tipc: Node identity 6a3f52ab2a5e, cluster identity 4711 [ 484.154481][T21648] tipc: Enabled bearer , priority 0 [ 484.199422][T21647] tipc: Resetting bearer [ 484.253470][T21647] tipc: Disabling bearer [ 484.460685][T21658] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 484.484039][T21653] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 484.529713][T21653] bond2 (unregistering): Released all slaves [ 484.657439][T21661] IPVS: Error connecting to the multicast addr [ 485.022202][T21690] lo: entered promiscuous mode [ 485.055938][T21690] tunl0: entered promiscuous mode [ 485.098891][T21690] gre0: entered promiscuous mode [ 485.142556][T21690] gretap0: entered promiscuous mode [ 485.224053][T21690] erspan0: entered promiscuous mode [ 485.245343][T21690] erspan0: left allmulticast mode [ 485.259630][T21690] ip_vti0: entered promiscuous mode [ 485.270301][T21701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.462187][T21712] __nla_validate_parse: 9 callbacks suppressed [ 485.462208][T21712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4233'. [ 485.464950][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'. [ 485.491200][T21723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4236'. [ 485.522426][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 485.720044][T21736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4239'. [ 485.932246][T21746] lo speed is unknown, defaulting to 1000 [ 486.095212][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4245'. [ 486.108268][T21762] gre1: entered promiscuous mode [ 486.113386][T21762] gre1: entered allmulticast mode [ 486.280999][T21768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4245'. [ 486.440202][T21781] validate_nla: 1 callbacks suppressed [ 486.440221][T21781] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 486.548860][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4250'. [ 486.636278][T21781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.685036][T21787] bond3: (slave gretap2): making interface the new active one [ 486.696157][T21787] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 486.714431][T21746] wg1 speed is unknown, defaulting to 1000 [ 486.739109][T21799] tipc: MTU too low for tipc bearer [ 486.742870][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4252'. [ 486.851252][T21794] netlink: 'syz.4.4252': attribute type 32 has an invalid length. [ 486.873561][T21806] netem: change failed [ 486.892781][T21806] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4254'. [ 487.038179][T21808] netlink: 'syz.0.4256': attribute type 1 has an invalid length. [ 487.047746][T21808] netlink: 'syz.0.4256': attribute type 4 has an invalid length. [ 487.120437][T21810] sctp: [Deprecated]: syz.4.4257 (pid 21810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.120437][T21810] Use struct sctp_sack_info instead [ 487.157279][T21810] sctp: [Deprecated]: syz.4.4257 (pid 21810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.157279][T21810] Use struct sctp_sack_info instead [ 487.703733][T21837] netlink: 'syz.0.4266': attribute type 10 has an invalid length. [ 487.714768][T21837] veth1_virt_wifi: entered promiscuous mode [ 487.848826][T21843] netlink: 'syz.3.4269': attribute type 1 has an invalid length. [ 488.005445][T21843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.072667][T21852] sit1: entered promiscuous mode [ 488.102990][T21852] sit1: entered allmulticast mode [ 488.290307][T21871] erspan0: entered promiscuous mode [ 489.070133][T21906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.580474][T21940] ip6t_srh: unknown srh match flags 4000 [ 489.718394][T21947] nbd: must specify an index to disconnect [ 489.738964][T21953] syzkaller1: entered promiscuous mode [ 489.748858][T21953] syzkaller1: entered allmulticast mode [ 490.075062][T21971] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 490.312078][T21991] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 490.331513][T21993] netlink: 'syz.0.4313': attribute type 13 has an invalid length. [ 490.351129][T21995] netlink: 'syz.0.4313': attribute type 13 has an invalid length. [ 490.716497][T21989] lo speed is unknown, defaulting to 1000 [ 490.802655][T22012] syzkaller0: entered promiscuous mode [ 490.818678][T22012] syzkaller0: entered allmulticast mode [ 490.837045][T22016] __nla_validate_parse: 18 callbacks suppressed [ 490.837062][T22016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4318'. [ 490.876503][T22013] xt_CT: No such helper "snmp_trap" [ 490.980437][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4315'. [ 491.148694][T22020] ip6gretap1: entered allmulticast mode [ 491.355325][T22038] netlink: 'syz.0.4323': attribute type 3 has an invalid length. [ 491.392382][T22040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4324'. [ 491.427558][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'. [ 491.495628][ T29] hid-generic 0005:0C45:1010.0007: item fetching failed at offset 0/1 [ 491.559414][ T29] hid-generic 0005:0C45:1010.0007: probe with driver hid-generic failed with error -22 [ 491.600108][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4326'. [ 491.623853][T21989] wg1 speed is unknown, defaulting to 1000 [ 491.650361][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 491.686640][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 491.721891][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 491.752143][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 491.775931][T22047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 492.547626][T22085] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 492.625622][T22088] netlink: 'syz.1.4335': attribute type 21 has an invalid length. [ 492.731361][T22093] x_tables: duplicate underflow at hook 1 [ 493.329333][T22123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.879283][T22214] syzkaller1: entered promiscuous mode [ 494.924275][T22214] syzkaller1: entered allmulticast mode [ 494.977768][T22224] tipc: Enabling of bearer rejected, failed to enable media [ 495.393523][T22250] x_tables: duplicate underflow at hook 2 [ 495.412115][T22253] tipc: Started in network mode [ 495.416010][T22249] x_tables: duplicate underflow at hook 2 [ 495.424590][T22253] tipc: Node identity 42eab557d79b, cluster identity 4711 [ 495.433659][T22253] tipc: Enabled bearer , priority 0 [ 495.673634][T22253] syzkaller0: entered promiscuous mode [ 495.697928][T22253] syzkaller0: entered allmulticast mode [ 495.706185][T22253] tipc: Resetting bearer [ 495.745915][T22264] syzkaller0: entered promiscuous mode [ 495.771893][T22264] syzkaller0: entered allmulticast mode [ 495.793956][T22251] tipc: Resetting bearer [ 497.076575][T22298] __nla_validate_parse: 16 callbacks suppressed [ 497.076594][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4383'. [ 498.270474][T22251] tipc: Disabling bearer [ 498.292250][T22279] netlink: 'syz.3.4379': attribute type 4 has an invalid length. [ 498.390269][T22302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4385'. [ 498.473623][T10071] tipc: Node number set to 2507257175 [ 498.485888][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 498.563733][T22317] netlink: 'syz.3.4387': attribute type 11 has an invalid length. [ 498.633959][T22317] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4387'. [ 498.835941][T22340] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 499.002209][T22344] ipt_ECN: cannot use operation on non-tcp rule [ 499.058794][T22351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4393'. [ 499.106850][T22352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4393'. [ 499.164031][T22352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4393'. [ 499.182734][T22349] vlan2: entered allmulticast mode [ 499.232668][T22349] bond0: entered allmulticast mode [ 499.256085][T22349] bond_slave_0: entered allmulticast mode [ 499.276422][T22349] bond_slave_1: entered allmulticast mode [ 499.315492][T22352] gretap1: entered promiscuous mode [ 499.339479][T22352] gretap1: entered allmulticast mode [ 499.627302][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4399'. [ 499.659635][T22389] syzkaller0: entered promiscuous mode [ 499.691730][T22389] syzkaller0: entered allmulticast mode [ 499.726191][T22387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4399'. [ 499.753734][ T5820] hid-generic 0005:0C45:1010.0008: item fetching failed at offset 0/1 [ 499.764830][ T5820] hid-generic 0005:0C45:1010.0008: probe with driver hid-generic failed with error -22 [ 499.851717][T22401] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 500.165031][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'. [ 500.199464][T22421] veth1_macvtap: left promiscuous mode [ 500.351769][T22437] netlink: 'syz.3.4411': attribute type 1 has an invalid length. [ 500.403950][T22437] workqueue: Failed to create a rescuer kthread for wq "phy6-mac-cmds": -EINTR [ 500.724362][T22462] syzkaller0: entered promiscuous mode [ 500.801802][T22462] syzkaller0: entered allmulticast mode [ 501.294867][T22493] rdma_rxe: rxe_newlink: failed to add lo [ 501.531364][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 502.271926][T22553] __nla_validate_parse: 10 callbacks suppressed [ 502.271943][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4442'. [ 502.321027][T22553] l2tp_ppp: sess 2/0: no socket in recv [ 502.613778][T22580] netlink: 'syz.0.4451': attribute type 11 has an invalid length. [ 502.657212][T22580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4451'. [ 502.677014][T22584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4452'. [ 502.904800][T22598] bridge0: port 3(veth1_to_bridge) entered blocking state [ 502.922323][T22598] bridge0: port 3(veth1_to_bridge) entered disabled state [ 502.936257][T22598] veth1_to_bridge: entered allmulticast mode [ 502.951294][T22598] veth1_to_bridge: entered promiscuous mode [ 502.982584][T22603] xt_TCPMSS: Only works on TCP SYN packets [ 502.991673][T22605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4461'. [ 503.058070][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4461'. [ 503.276564][T22621] lo: Caught tx_queue_len zero misconfig [ 503.414970][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4470'. [ 503.482630][T22636] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4473'. [ 503.501149][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4472'. [ 503.641909][T22650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.699177][T22653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4478'. [ 503.716566][T22653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4478'. [ 503.772217][T22653] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 504.426931][T22699] sctp: [Deprecated]: syz.1.4492 (pid 22699) Use of int in maxseg socket option. [ 504.426931][T22699] Use struct sctp_assoc_value instead [ 504.469673][T22708] syz.0.4496: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 504.490542][T22709] netlink: 'syz.4.4495': attribute type 1 has an invalid length. [ 504.507713][T22708] CPU: 1 UID: 0 PID: 22708 Comm: syz.0.4496 Not tainted syzkaller #0 PREEMPT(full) [ 504.507738][T22708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.507752][T22708] Call Trace: [ 504.507763][T22708] [ 504.507770][T22708] dump_stack_lvl+0xe8/0x150 [ 504.507797][T22708] warn_alloc+0x249/0x340 [ 504.507822][T22708] ? stack_trace_save+0xa9/0x100 [ 504.507850][T22708] ? __pfx_warn_alloc+0x10/0x10 [ 504.507879][T22708] ? kasan_save_track+0x4f/0x80 [ 504.507898][T22708] ? kasan_save_track+0x3e/0x80 [ 504.507922][T22708] ? __kasan_kmalloc+0x93/0xb0 [ 504.507945][T22708] ? __kmalloc_cache_noprof+0x31c/0x660 [ 504.507966][T22708] ? xskq_create+0x56/0x170 [ 504.507985][T22708] ? xsk_setsockopt+0x54c/0x990 [ 504.508002][T22708] ? do_sock_setsockopt+0x17c/0x1b0 [ 504.508022][T22708] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 504.508041][T22708] ? do_syscall_64+0x15f/0xf80 [ 504.508068][T22708] __vmalloc_node_range_noprof+0x132/0x1750 [ 504.508126][T22708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 504.508154][T22708] ? __kasan_kmalloc+0x93/0xb0 [ 504.508183][T22708] vmalloc_user_noprof+0xad/0xe0 [ 504.508206][T22708] ? xskq_create+0xbf/0x170 [ 504.508227][T22708] xskq_create+0xbf/0x170 [ 504.508249][T22708] xsk_init_queue+0x8a/0xe0 [ 504.508270][T22708] xsk_setsockopt+0x54c/0x990 [ 504.508289][T22708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 504.508305][T22708] ? __pfx_aa_sk_perm+0x10/0x10 [ 504.508325][T22708] ? aa_sock_opt_perm+0xff/0x1a0 [ 504.508348][T22708] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 504.508370][T22708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 504.508401][T22708] do_sock_setsockopt+0x17c/0x1b0 [ 504.508428][T22708] __x64_sys_setsockopt+0x13d/0x1b0 [ 504.508451][T22708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.508467][T22708] do_syscall_64+0x15f/0xf80 [ 504.508487][T22708] ? trace_irq_disable+0x3b/0x140 [ 504.508510][T22708] ? clear_bhb_loop+0x40/0x90 [ 504.508531][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.508546][T22708] RIP: 0033:0x7fd4e3b9ce59 [ 504.508563][T22708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.508576][T22708] RSP: 002b:00007fd4e4a9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 504.508594][T22708] RAX: ffffffffffffffda RBX: 00007fd4e3e15fa0 RCX: 00007fd4e3b9ce59 [ 504.508606][T22708] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 504.508615][T22708] RBP: 00007fd4e3c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 504.508626][T22708] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.508636][T22708] R13: 00007fd4e3e16038 R14: 00007fd4e3e15fa0 R15: 00007ffe2ab3f838 [ 504.508666][T22708] [ 504.510697][T22708] Mem-Info: [ 504.793498][T22708] active_anon:6078 inactive_anon:0 isolated_anon:0 [ 504.793498][T22708] active_file:3223 inactive_file:40143 isolated_file:0 [ 504.793498][T22708] unevictable:768 dirty:98 writeback:0 [ 504.793498][T22708] slab_reclaimable:11734 slab_unreclaimable:115088 [ 504.793498][T22708] mapped:29382 shmem:1301 pagetables:3567 [ 504.793498][T22708] sec_pagetables:0 bounce:0 [ 504.793498][T22708] kernel_misc_reclaimable:0 [ 504.793498][T22708] free:1299483 free_pcp:9686 free_cma:0 [ 504.844538][T22708] Node 0 active_anon:24312kB inactive_anon:0kB active_file:12892kB inactive_file:160368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119028kB dirty:392kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16148kB pagetables:14140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 504.881831][T22708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 504.915875][T22708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.946299][T22708] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 504.952258][T22708] Node 0 DMA32 free:1239744kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24312kB inactive_anon:0kB active_file:12892kB inactive_file:160360kB unevictable:1536kB writepending:412kB zspages:0kB present:3129332kB managed:2552612kB mlocked:0kB bounce:0kB free_pcp:39776kB local_pcp:18288kB free_cma:0kB [ 504.986608][T22708] lowmem_reserve[]: 0 0 0 0 0 [ 504.992355][T22708] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 505.015643][T22709] bond5: entered promiscuous mode [ 505.022512][T22708] lowmem_reserve[]: 0 0 0 0 0 [ 505.031227][T22709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.032680][T22708] Node 1 Normal free:3942828kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.072106][T22708] lowmem_reserve[]: 0 0 0 0 0 [ 505.077103][T22708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 505.090770][T22708] Node 0 DMA32: 6699*4kB (UME) 5925*8kB (UME) 3157*16kB (UME) 266*32kB (UME) 61*64kB (ME) 1037*128kB (UME) 842*256kB (UME) 511*512kB (UME) 302*1024kB (UE) 73*2048kB (UME) 8*4096kB (M) = 1238564kB [ 505.095307][T22719] tipc: Enabling of bearer rejected, media not registered [ 505.111704][T22708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 505.131535][T22708] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 20*16kB (UM) 4*32kB (UM) 11*64kB (UM) 4*128kB (UM) 3*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3942828kB [ 505.149034][T22708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.158710][T22708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.168426][T22708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.178326][T22708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.192946][T22720] H: renamed from vcan0 (while UP) [ 505.209408][T22708] 44663 total pagecache pages [ 505.228609][T22708] 0 pages in swap cache [ 505.248785][T22708] Free swap = 124996kB [ 505.253257][T22708] Total swap = 124996kB [ 505.258308][T22708] 2097051 pages RAM [ 505.262226][T22708] 0 pages HighMem/MovableOnly [ 505.276387][T22708] 427116 pages reserved [ 505.283571][T22708] 0 pages cma reserved [ 505.344519][T22732] IPv6: sit3: Disabled Multicast RS [ 505.422214][T22738] netlink: 'syz.4.4502': attribute type 3 has an invalid length. [ 505.530494][T22743] openvswitch: netlink: IPv4 tun info is not correct [ 505.691928][T22755] syzkaller0: entered promiscuous mode [ 505.711467][T22755] syzkaller0: entered allmulticast mode [ 505.912973][T22770] netlink: 'syz.2.4515': attribute type 24 has an invalid length. [ 505.950373][T22770] netlink: 'syz.2.4515': attribute type 12 has an invalid length. [ 505.970979][T22770] netlink: 'syz.2.4515': attribute type 29 has an invalid length. [ 506.074356][T22781] netlink: 'syz.3.4518': attribute type 1 has an invalid length. [ 506.141686][T22781] bond4: entered promiscuous mode [ 506.148223][T22781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.252109][T22791] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 506.264117][T22791] bond7 (unregistering): Released all slaves [ 506.356869][T22798] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 506.477948][T22805] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 506.577595][T22811] bridge0: entered promiscuous mode [ 506.583784][T22808] bridge0: left promiscuous mode [ 506.651304][T22814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.823317][T22826] netlink: 'syz.4.4530': attribute type 12 has an invalid length. [ 507.488564][T22863] lo: entered promiscuous mode [ 507.499295][T22863] tunl0: entered promiscuous mode [ 507.534315][T22863] gre0: entered promiscuous mode [ 507.574122][T22863] gretap0: entered promiscuous mode [ 507.584188][T22863] erspan0: left allmulticast mode [ 508.113976][T22884] "syz.3.4549" (22884) uses obsolete ecb(arc4) skcipher [ 508.171792][T22890] __nla_validate_parse: 17 callbacks suppressed [ 508.171804][T22890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4550'. [ 508.324421][T22894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.717195][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 510.060964][T22846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.278837][T22900] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4552'. [ 510.358476][T22901] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 510.478988][T22914] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4558'. [ 510.488674][T22914] netlink: 'syz.4.4558': attribute type 2 has an invalid length. [ 511.039065][T22955] netlink: 'syz.4.4574': attribute type 3 has an invalid length. [ 511.062386][T22955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4574'. [ 511.105599][T22955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4574'. [ 511.140911][T22961] netlink: 'syz.0.4575': attribute type 1 has an invalid length. [ 511.168548][T22961] netlink: 'syz.0.4575': attribute type 4 has an invalid length. [ 511.187127][T22961] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.4575'. [ 511.294200][T22974] vlan2: entered allmulticast mode [ 511.299722][T22974] bond0: entered allmulticast mode [ 511.305217][T22974] bond_slave_0: entered allmulticast mode [ 511.311556][T22974] bond_slave_1: entered allmulticast mode [ 511.328706][T22975] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4577'. [ 511.574517][T22975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.650359][T22975] bond_slave_0: left allmulticast mode [ 511.689453][T22975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.711199][T22975] bond_slave_1: left allmulticast mode [ 511.721617][T22975] bond0 (unregistering): Released all slaves [ 511.735285][T22993] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.4580'. [ 511.885460][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4582'. [ 512.140921][T23021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.491510][T23038] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:0 [ 512.530882][T23038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4593'. [ 512.751799][T23051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.568646][T23095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.598329][T23097] __nla_validate_parse: 5 callbacks suppressed [ 513.598345][T23097] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4607'. [ 513.628888][T23103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4610'. [ 513.755261][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4613'. [ 513.762009][T23103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.767905][T23113] x_tables: duplicate underflow at hook 2 [ 513.817516][T23117] gtp0: entered allmulticast mode [ 513.842596][T23117] team0: Device gtp0 is of different type [ 513.943588][T23111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.953319][T23111] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 513.965132][T23111] bond3: (slave ipip0): Error -95 calling set_mac_address [ 514.047096][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4615'. [ 514.734474][T23157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4622'. [ 514.773143][T23157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4622'. [ 514.815367][ T29] hid-generic 0005:0C45:1010.0009: item fetching failed at offset 0/1 [ 514.872799][T23167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4627'. [ 514.873987][ T29] hid-generic 0005:0C45:1010.0009: probe with driver hid-generic failed with error -22 [ 514.904107][T23158] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 514.931922][T23169] netlink: 'syz.0.4628': attribute type 2 has an invalid length. [ 515.171518][T23186] netlink: 'syz.0.4634': attribute type 3 has an invalid length. [ 515.254747][T23191] netlink: 'syz.1.4636': attribute type 1 has an invalid length. [ 516.029670][T23191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.064507][T23200] bond4: (slave ip6gretap1): making interface the new active one [ 516.076441][T23200] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 516.194129][T23210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4639'. [ 516.223714][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4639'. [ 516.449888][T23224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 516.660684][T23242] netlink: 'syz.3.4645': attribute type 12 has an invalid length. [ 516.683317][T23242] netlink: 'syz.3.4645': attribute type 29 has an invalid length. [ 516.703428][T23247] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 516.875881][T23251] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 516.949535][T23251] bond7: (slave lo): Enslaving as an active interface with an up link [ 516.989051][T23251] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 517.223312][T23270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.257336][T23272] netlink: 'syz.3.4654': attribute type 4 has an invalid length. [ 517.552898][T23286] syzkaller0: entered promiscuous mode [ 517.611658][T23286] syzkaller0: entered allmulticast mode [ 517.921276][T23304] xt_check_target_common: 55 callbacks suppressed [ 517.921295][T23304] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 517.971845][T23314] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 518.021326][T23314] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 518.192237][T23325] netlink: 'syz.1.4668': attribute type 21 has an invalid length. [ 518.380227][T23333] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.447948][T23345] syz_tun: entered allmulticast mode [ 518.803432][T23373] __nla_validate_parse: 8 callbacks suppressed [ 518.803450][T23373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4675'. [ 518.912269][T23384] netlink: 'syz.2.4682': attribute type 10 has an invalid length. [ 518.940176][T23384] netlink: 'syz.2.4682': attribute type 10 has an invalid length. [ 518.957476][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 519.281924][T23344] syz_tun: left allmulticast mode [ 519.294251][T23407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4687'. [ 519.334947][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4687'. [ 519.595662][T23422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4690'. [ 519.721620][T23430] netlink: 'syz.0.4693': attribute type 2 has an invalid length. [ 519.748720][T23422] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.938163][T23439] netlink: 'syz.2.4696': attribute type 12 has an invalid length. [ 520.000797][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4697'. [ 520.032407][T23433] syzkaller0: entered promiscuous mode [ 520.042284][T23433] syzkaller0: entered allmulticast mode [ 522.783586][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4700'. [ 522.825188][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4700'. [ 522.852537][T10097] hid-generic 0005:0C45:1010.000A: item fetching failed at offset 0/1 [ 522.878268][T10097] hid-generic 0005:0C45:1010.000A: probe with driver hid-generic failed with error -22 [ 522.894883][T23463] netlink: 'syz.1.4702': attribute type 64 has an invalid length. [ 522.915726][T23467] xt_ecn: cannot match TCP bits for non-tcp packets [ 522.942429][T23463] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4702'. [ 522.990937][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4706'. [ 523.185304][T23489] atomic_op ffff88807a425998 conn xmit_atomic 0000000000000000 [ 523.228159][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4712'. [ 523.410888][T23508] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 523.430003][T23508] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 523.446055][T23508] netlink: 'syz.2.4717': attribute type 8 has an invalid length. [ 523.717707][T23522] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 523.743142][T23525] netlink: 'syz.3.4722': attribute type 21 has an invalid length. [ 523.806117][T23525] netlink: 'syz.3.4722': attribute type 5 has an invalid length. [ 523.829227][T23525] netlink: 'syz.3.4722': attribute type 6 has an invalid length. [ 523.853968][T23525] __nla_validate_parse: 9 callbacks suppressed [ 523.853995][T23525] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4722'. [ 523.980014][T23538] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4725'. [ 524.099995][T23549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.422809][T23565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4732'. [ 524.450139][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4731'. [ 524.454247][T23565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4732'. [ 524.793859][T23586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'. [ 524.843029][T23592] sctp: [Deprecated]: syz.2.4738 (pid 23592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.843029][T23592] Use struct sctp_sack_info instead [ 524.881170][T23586] ------------[ cut here ]------------ [ 524.887774][T23586] !chanctx_conf [ 524.887800][T23586] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x64a/0x6e0, CPU#1: syz.4.4740/23586 [ 524.902490][T23586] Modules linked in: [ 524.907314][T23586] CPU: 1 UID: 0 PID: 23586 Comm: syz.4.4740 Not tainted syzkaller #0 PREEMPT(full) [ 524.913443][T23598] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4743'. [ 524.917533][T23586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.937039][T23586] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 524.943519][T23586] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 38 90 00 cc e8 42 54 aa f6 90 0f 0b 90 eb e1 e8 37 54 aa f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 524.965231][T23586] RSP: 0018:ffffc90003906fd8 EFLAGS: 00010283 [ 524.971907][T23586] RAX: ffffffff8b1b7029 RBX: ffff8880772fc000 RCX: 0000000000080000 [ 524.972183][T23592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4738'. [ 524.980015][T23586] RDX: ffffc9001bfe4000 RSI: 0000000000003014 RDI: 0000000000003015 [ 524.980037][T23586] RBP: 0000000000000000 R08: ffffffff8b1b6b43 R09: ffffffff8e95cda0 [ 524.980049][T23586] R10: dffffc0000000000 R11: ffffed100ee5f831 R12: 1ffff1100ee5f80a [ 524.980063][T23586] R13: ffff88805a990f20 R14: 0000000000000001 R15: ffffffff8b1b6b43 [ 524.980076][T23586] FS: 00007f502f00f6c0(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 524.980092][T23586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.980103][T23586] CR2: 00007fa70bb09d58 CR3: 0000000035620000 CR4: 00000000003526f0 [ 524.980119][T23586] Call Trace: [ 524.980127][T23586] [ 524.980144][T23586] rate_control_rate_init_all_links+0x109/0x1a0 [ 524.980181][T23586] sta_apply_auth_flags+0x1c2/0x400 [ 524.980213][T23586] sta_apply_parameters+0x1098/0x18a0 [ 524.980253][T23586] ieee80211_add_station+0x3e6/0x710 [ 524.980279][T23586] rdev_add_station+0xfc/0x290 [ 524.980310][T23586] nl80211_new_station+0x1cab/0x2130 [ 524.980347][T23586] ? __pfx_nl80211_new_station+0x10/0x10 [ 524.980369][T23586] ? __rtnl_unlock+0xc8/0xf0 [ 524.980435][T23586] genl_family_rcv_msg_doit+0x22a/0x330 [ 524.980463][T23586] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.980494][T23586] ? bpf_lsm_capable+0x9/0x20 [ 524.980512][T23586] ? security_capable+0x7e/0x2c0 [ 524.980544][T23586] genl_rcv_msg+0x61c/0x7a0 [ 525.125837][T23586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.131188][T23586] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 525.136587][T23586] ? __pfx_nl80211_new_station+0x10/0x10 [ 525.142809][T23586] ? __pfx_nl80211_post_doit+0x10/0x10 [ 525.148495][T23586] ? __pfx_ref_tracker_free+0x10/0x10 [ 525.153938][T23586] netlink_rcv_skb+0x232/0x4b0 [ 525.158771][T23586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.163816][T23586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.170085][T23586] ? down_read+0x270/0x2e0 [ 525.174701][T23586] ? genl_rcv+0xd/0x40 [ 525.179173][T23586] genl_rcv+0x28/0x40 [ 525.183268][T23586] netlink_unicast+0x75c/0x8e0 [ 525.188116][T23586] netlink_sendmsg+0x813/0xb40 [ 525.192908][T23586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.198610][T23586] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.203670][T23586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.209019][T23586] ____sys_sendmsg+0x972/0x9f0 [ 525.213803][T23586] ? __might_fault+0xaf/0x130 [ 525.218581][T23586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.224007][T23586] ? import_iovec+0x73/0xa0 [ 525.228821][T23586] ___sys_sendmsg+0x2a5/0x360 [ 525.233521][T23586] ? __lock_acquire+0x6b5/0x2cf0 [ 525.238585][T23586] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.244023][T23586] ? futex_wait+0x2a2/0x390 [ 525.248745][T23586] ? __fget_files+0x2a/0x420 [ 525.253368][T23586] ? __fget_files+0x3a0/0x420 [ 525.258362][T23586] __x64_sys_sendmsg+0x1bd/0x2a0 [ 525.263351][T23586] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.269566][T23586] ? rcu_is_watching+0x15/0xb0 [ 525.274344][T23586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.280951][T23586] do_syscall_64+0x15f/0xf80 [ 525.285589][T23586] ? trace_irq_disable+0x3b/0x140 [ 525.290867][T23586] ? clear_bhb_loop+0x40/0x90 [ 525.295571][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.301554][T23586] RIP: 0033:0x7f502e19ce59 [ 525.305974][T23586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.325964][T23586] RSP: 002b:00007f502f00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.334446][T23586] RAX: ffffffffffffffda RBX: 00007f502e415fa0 RCX: 00007f502e19ce59 [ 525.342476][T23586] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 525.350613][T23586] RBP: 00007f502e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 525.358707][T23586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.366785][T23586] R13: 00007f502e416038 R14: 00007f502e415fa0 R15: 00007fff85f93e88 [ 525.375386][T23586] [ 525.379000][T23586] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 525.386301][T23586] CPU: 1 UID: 0 PID: 23586 Comm: syz.4.4740 Not tainted syzkaller #0 PREEMPT(full) [ 525.395738][T23586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.405783][T23586] Call Trace: [ 525.409057][T23586] [ 525.411979][T23586] vpanic+0x56c/0xa60 [ 525.415956][T23586] ? __pfx__printk+0x10/0x10 [ 525.420545][T23586] ? __pfx_vpanic+0x10/0x10 [ 525.425039][T23586] ? is_bpf_text_address+0x292/0x2b0 [ 525.430312][T23586] ? is_bpf_text_address+0x26/0x2b0 [ 525.435503][T23586] panic+0xc5/0xd0 [ 525.439222][T23586] ? __pfx_panic+0x10/0x10 [ 525.443669][T23586] __warn+0x315/0x4c0 [ 525.447720][T23586] ? rate_control_rate_init+0x64a/0x6e0 [ 525.453451][T23586] ? rate_control_rate_init+0x64a/0x6e0 [ 525.459035][T23586] __report_bug+0x29a/0x540 [ 525.463562][T23586] ? rate_control_rate_init+0x64a/0x6e0 [ 525.469107][T23586] ? __pfx___report_bug+0x10/0x10 [ 525.474132][T23586] ? __lock_acquire+0x6b5/0x2cf0 [ 525.479083][T23586] ? __lock_acquire+0x6b5/0x2cf0 [ 525.484114][T23586] ? rate_control_rate_init+0x64a/0x6e0 [ 525.489667][T23586] report_bug+0x16a/0x220 [ 525.494011][T23586] ? rate_control_rate_init+0x64a/0x6e0 [ 525.499557][T23586] ? rate_control_rate_init+0x64c/0x6e0 [ 525.505121][T23586] handle_bug+0x9c/0x200 [ 525.509374][T23586] exc_invalid_op+0x1a/0x50 [ 525.513887][T23586] asm_exc_invalid_op+0x1a/0x20 [ 525.518729][T23586] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 525.524894][T23586] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 38 90 00 cc e8 42 54 aa f6 90 0f 0b 90 eb e1 e8 37 54 aa f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 525.544602][T23586] RSP: 0018:ffffc90003906fd8 EFLAGS: 00010283 [ 525.550668][T23586] RAX: ffffffff8b1b7029 RBX: ffff8880772fc000 RCX: 0000000000080000 [ 525.558633][T23586] RDX: ffffc9001bfe4000 RSI: 0000000000003014 RDI: 0000000000003015 [ 525.566595][T23586] RBP: 0000000000000000 R08: ffffffff8b1b6b43 R09: ffffffff8e95cda0 [ 525.574555][T23586] R10: dffffc0000000000 R11: ffffed100ee5f831 R12: 1ffff1100ee5f80a [ 525.582601][T23586] R13: ffff88805a990f20 R14: 0000000000000001 R15: ffffffff8b1b6b43 [ 525.590680][T23586] ? rate_control_rate_init+0x163/0x6e0 [ 525.596253][T23586] ? rate_control_rate_init+0x163/0x6e0 [ 525.601805][T23586] ? rate_control_rate_init+0x649/0x6e0 [ 525.607451][T23586] ? rate_control_rate_init+0x649/0x6e0 [ 525.613026][T23586] rate_control_rate_init_all_links+0x109/0x1a0 [ 525.619279][T23586] sta_apply_auth_flags+0x1c2/0x400 [ 525.624499][T23586] sta_apply_parameters+0x1098/0x18a0 [ 525.629902][T23586] ieee80211_add_station+0x3e6/0x710 [ 525.635209][T23586] rdev_add_station+0xfc/0x290 [ 525.639979][T23586] nl80211_new_station+0x1cab/0x2130 [ 525.645273][T23586] ? __pfx_nl80211_new_station+0x10/0x10 [ 525.650940][T23586] ? __rtnl_unlock+0xc8/0xf0 [ 525.655581][T23586] genl_family_rcv_msg_doit+0x22a/0x330 [ 525.661138][T23586] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 525.667212][T23586] ? bpf_lsm_capable+0x9/0x20 [ 525.671878][T23586] ? security_capable+0x7e/0x2c0 [ 525.676904][T23586] genl_rcv_msg+0x61c/0x7a0 [ 525.681409][T23586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.686431][T23586] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 525.691813][T23586] ? __pfx_nl80211_new_station+0x10/0x10 [ 525.697515][T23586] ? __pfx_nl80211_post_doit+0x10/0x10 [ 525.702985][T23586] ? __pfx_ref_tracker_free+0x10/0x10 [ 525.708376][T23586] netlink_rcv_skb+0x232/0x4b0 [ 525.713148][T23586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.718167][T23586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.723464][T23586] ? down_read+0x270/0x2e0 [ 525.727870][T23586] ? genl_rcv+0xd/0x40 [ 525.731930][T23586] genl_rcv+0x28/0x40 [ 525.735959][T23586] netlink_unicast+0x75c/0x8e0 [ 525.740735][T23586] netlink_sendmsg+0x813/0xb40 [ 525.745597][T23586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.750881][T23586] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.755826][T23586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.761800][T23586] ____sys_sendmsg+0x972/0x9f0 [ 525.766563][T23586] ? __might_fault+0xaf/0x130 [ 525.771236][T23586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.776518][T23586] ? import_iovec+0x73/0xa0 [ 525.781017][T23586] ___sys_sendmsg+0x2a5/0x360 [ 525.785812][T23586] ? __lock_acquire+0x6b5/0x2cf0 [ 525.790751][T23586] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.795951][T23586] ? futex_wait+0x2a2/0x390 [ 525.800730][T23586] ? __fget_files+0x2a/0x420 [ 525.805316][T23586] ? __fget_files+0x3a0/0x420 [ 525.809988][T23586] __x64_sys_sendmsg+0x1bd/0x2a0 [ 525.815010][T23586] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.820727][T23586] ? rcu_is_watching+0x15/0xb0 [ 525.825486][T23586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.831572][T23586] do_syscall_64+0x15f/0xf80 [ 525.836152][T23586] ? trace_irq_disable+0x3b/0x140 [ 525.841167][T23586] ? clear_bhb_loop+0x40/0x90 [ 525.845837][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.851973][T23586] RIP: 0033:0x7f502e19ce59 [ 525.856416][T23586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.876216][T23586] RSP: 002b:00007f502f00f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.884632][T23586] RAX: ffffffffffffffda RBX: 00007f502e415fa0 RCX: 00007f502e19ce59 [ 525.892608][T23586] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 525.900669][T23586] RBP: 00007f502e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 525.908650][T23586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.916635][T23586] R13: 00007f502e416038 R14: 00007f502e415fa0 R15: 00007fff85f93e88 [ 525.924632][T23586] [ 525.928033][T23586] Kernel Offset: disabled [ 525.932458][T23586] Rebooting in 86400 seconds..