last executing test programs: 14.151253176s ago: executing program 1 (id=6026): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0xd, @none, 0x0, 0x2}, 0xe) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES64=r5, @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x4adc}, 0x94) clock_gettime(0x5, &(0x7f0000000000)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000040000100fcff070004000000010000000400488014000180100010800c000f80080091002d2e260008000200", @ANYRES32=r7, @ANYBLOB="5280c8b7170b7c021f7a2c5a6cd612cea8f8bf3caff02d593a9bcbaa01d230ff765ea0c5e5acc4304a1bdcaa5d26170fb3e819d8c1d504fa76e95b93fa1dbec0307545395c880f253d180b74c1c3f717e8b8daad2cf8f7e69e7a605112840c44288f92528b98f14c7e085d869da314eafcdaa5a635bb6ab7960e022df68fa228e4bc4d32357e"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800040010000108fd54693b17bc999d50e91aa5e307feffffff00000008000000004cd0b54997a637c8af18302fece342fee91a4063ee9fae3a4ec31a80a36ea4e00f3651968f2f82e3141a3ad4f75ae4151a182d221b2441152a16621a93d8e69ae80b9777103fbaae6cefeb4bf007033f8a4501092adb510eaf", @ANYRES16, @ANYBLOB="de7f0900000000000000cfd0342db400ef612327aa13e500090000000000000083"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r10 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000080)={0xffffffff, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x114, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xffe0}, {0x9}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x5, 0x2b4b, 0x0, 0x4, 0x7ff, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x4, 0x4, 0xe, 0x2, 0x2, 0x3800, 0x80000001, 0x3}}, {0xa, 0x2, [0xffff, 0xb77c, 0x3ff]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x0, 0x8, 0x922c, 0x0, 0xfffffff8, 0x1000, 0x5}}, {0xe, 0x2, [0x4, 0xca64, 0x1, 0x8001, 0x9]}}, {{0x1c, 0x1, {0x2, 0x49, 0x7fff, 0xec, 0x2, 0x22, 0x8, 0x5}}, {0xe, 0x2, [0x7, 0x3a3, 0x2, 0x3, 0x4]}}, {{0x1c, 0x1, {0xbc, 0x7, 0xf, 0x404, 0x1, 0x7, 0x9, 0x4}}, {0xc, 0x2, [0xe4, 0x7ff, 0xd, 0x80]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1e}]}}]}, 0x114}}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r6, &(0x7f0000000200), 0x0) sendmsg$can_bcm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRES8=r3, @ANYRES64=0x0], 0x80}}, 0x0) r12 = socket(0x1f, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r8], 0x50}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2cc1fff02736354939fddb0000ab118838210a1400010000c9e400206a1700"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4011) recvmsg(r13, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r11) 13.857822246s ago: executing program 1 (id=6029): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@generic={0x1, 0x8000000000000000, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105e000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e1c, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr_2292={{0x18, 0x29, 0x3e, {0x87, 0x0, 0x1, 0x5f}}}], 0x18}, 0x440e0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000)={0x900}, 0x143}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfffffffb, 0x2, 0x10001, 0x7, 0x80000001, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000370429bd7000fcdbdf68cad04b8ac1b12500000032", @ANYRES16=r4, @ANYBLOB="890c0200068004003c0012800b00010069703667726500002c00028014000700fe8004b0604ae34996b5c67979330eb578ed3900000000bd5bb8ac4c921feb9db1810000000000000000bb14000600000000000000000000000000000000014de3f0eb706432077ecef59661c1b15286545f72107f9be79a1ee0f9a21291c76888a4ef35132bfb5d431bfc612ac2d55be90e6590947af75bca0e7dc3b3b9f677197f1abd3e2aa55bcf5b9907904d60bad2bc0cafcb85abdccd8236f3d0541f2aaac74e119fa78e2148aa7033cce29c40c64a7a5577e08dedb04982d13402636da0dde286ead4cec32553404e17c6408463142f6f7d0cbf24362bf9eab22295a08d"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 12.870081395s ago: executing program 1 (id=6040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8, 0x42}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006180100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), 0xce, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) 12.833161763s ago: executing program 1 (id=6042): r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000050000304feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000200000240012800b000100627269646765000014000280060009000100000005002d0000000000"], 0x44}, 0x1, 0xba01}, 0x4000000) 12.705203174s ago: executing program 1 (id=6043): getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x3, 0x9, 0x3]}, &(0x7f0000000180)=0x44) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x80, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x715}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0xf0, 0x1}, 0xfd}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r2, r2, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x7, &(0x7f00000007c0)=""/7, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0xb7, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 7.765782907s ago: executing program 0 (id=6067): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x33, @remote, 0x4e20, 0x4, 'none\x00', 0x29, 0x1f, 0x35}, 0x2c) (async) unshare(0x64000600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6e1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x20004014) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000200)={{r0}, r4, 0x8, @unused=[0x56c, 0x87, 0x2, 0x10001], @devid}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) (async) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) 4.565359525s ago: executing program 0 (id=6076): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x8031, 0xffffffffffffffff, 0x32cc0000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000007000001140007800800114000ba53d56f56239be11bd600008b05001500050000000500010006000000050005000200006cf417cf0002000000090002007379521482710000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x2040400) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000380)="b9fe030768045c8c989a14f088a8657988a8d510e921", 0x0, 0x9b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.39808224s ago: executing program 0 (id=6079): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000380)=[{r4, 0x3328}, {r3, 0x4236}, {r3}], 0x3, 0x0, 0x0, 0x0) close(r2) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x1800) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001aa831931d6ca13ca7501e8800800014000000004000000000000000705000500020000000500010006000000e285c96c0fe68055e5659e616f6b5776a0f8b121c8b328f5143f8b38125acfa3c9ebbdae68f6dfb521ea5f936d95f5d0e7ccac7fff82b8dad5c9969ee97ac178c5509b1e10b1e10e67c39f2f3b749c1b7885f67b05ec160f6462386eb896d527166d30103f"], 0x6c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r7 = socket$inet6(0xa, 0x5, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020a1f0000e8050200000025bd7000fd"], 0x10}}, 0x810) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 2.018947371s ago: executing program 2 (id=6094): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f00000014c0)=""/2, 0x47, 0x2, 0x1}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x258, 0x2f, 0x800, 0x70bd2b, 0x25dfdbff, {0x1c}, [@generic="479fb3e9ed76bfa7dcb747c9e90eb3233bd0f0e75e495351f05745b60b34ef4852236537a48feeb17ff155c5b10785e14226185ccdafdc708089b73ff977752b77e77c21d89a488185e3dc7a", @nested={0x1e4, 0xd4, 0x0, 0x1, [@generic="48a571eee8f8c398d6502ed2e97b04a5f53f6793cb3d4aa698695f2854660a95d39ac885c9b89ee41a6434e99ad0a5227712867a106111f70ee7", @generic='\\', @typed={0x8, 0x159, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x47}, @generic="a18648727b49eae831a05bde90efc02e7b063827e260f0652b758383fbda3234bd4abe4abaf4c5175d309a29986f99f0494ab8c87c0bdee480efc9bcbdd75bce457729357c1716ed5e7f5c75455a4763737eb196ab7fa75faa7f993d4e8159f383e154577f5978d0870d57290c84a79fb152ac6ced38078d029fd9bc9f47a2a8dbc2425b7028bb59dd2f8a1e45a40fbe209affd9f0", @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@local}, @typed={0xe4, 0x27, 0x0, 0x0, @binary="814968c4d94ae7b618f67326e522c18e93a782c28273365f4190742793db8c1cc458e3eb7a9c376286d5a66413db124c1dd541e32365072dd9831598c93a50b27ab40386774f817079e057774f0ecbd520f60f8ee60dc0c774013bd28a3f1b96e6c463f8b3cd2d8661b2d330f90fc6ce6c516691d232f69431543a58b95d5cf2119cef864766ca9b8f5cb81efd98dad5d605360d4bdca3515a754a34bf8ff67b74ee0de64fde80aa45e582b3da76f3c136ed6e18b7986e9904d887322e76bfc0d80ef1df6fb6ede3222b08bac54d7215d467257faaa25f1ba4f441666b54cf3c"}, @typed={0x8, 0x11d, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x146}]}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, 0x258}, 0x1, 0x0, 0x0, 0x8000}, 0x5) recvfrom$inet6(r2, 0x0, 0xffffffffffffff32, 0x40010043, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 1.607779981s ago: executing program 0 (id=6097): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8143, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000002000000000a0045aebc6d0000e50004000800010001000000"], 0x24}}, 0x4) socket(0x2, 0x3, 0xff) (async) r10 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r10, &(0x7f0000005a00)=[{{&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xe, "0bd34102d3db9a75767021b1"}]}}}], 0x20}}], 0x1, 0xc050) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket(0x10, 0x6, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) (async) r12 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x26020480) connect$can_j1939(r12, 0x0, 0x0) (async) connect$can_j1939(r12, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 1.587041318s ago: executing program 2 (id=6098): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) (async) sendmsg$kcm(r2, 0x0, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'tunl0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7}, {0xe, 0xffee}, {0xffe0, 0xb}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x2004809c) (async, rerun: 32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r7) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r8, 0x303, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008400) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400000a0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000500)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x88001, 0x0) ioctl$PPPIOCATTCHAN(r12, 0x40047438, &(0x7f0000000240)=0x3) (async) socket$nl_route(0x10, 0x3, 0x0) 1.579965005s ago: executing program 4 (id=6099): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$kcm(0x2, 0xa, 0x2) sendmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)='|.', 0x2}], 0x1}}], 0x1, 0x4010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0xffffff98, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0xffffff98, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, 0x0, 0x20, 0x72bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14001a001000010000000000000000070000000a14000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14001a001000010000000000000000070000000a14000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) listen(r4, 0x0) (async) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa32080045000028006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d82f1df0b32f118c"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa32080045000028006700000206907864010001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d82f1df0b32f118c"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x45, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x45, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket(0x1e, 0x4, 0x7ffffffe) (async) socket(0x1e, 0x4, 0x7ffffffe) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) close(r2) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x300, 0xeb, 0xfc, 0x90, 0x40, @random="c340cad4963a"}, 0x10) (async) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x300, 0xeb, 0xfc, 0x90, 0x40, @random="c340cad4963a"}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.418076723s ago: executing program 3 (id=6100): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4014040}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001800010000000000000000000200140000000009000c0000060015000400000014001680100008800c000380"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0x81}, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="623e630198372471e9c3c344c1afe65de2fd17edfeb0d17f7d67cc08da8366ab53cc11465406c8e97f179d224a0672d4bb6497fe01b57fb6d56aba1905cb4a9dfcff495749da838f4958a05b4828dd88ecfbc261670addfe90fe4352c5c29ba72e101c413d33b6736219bc9208a3317e397113065c9e465c122bbf05d18461f596c13df3cc1139f59d"}, {&(0x7f0000000500)="da8d17f3d22384490278e8f9f397db7cd829d6fac9c1919f82c3603c01dcdbc500f0ffffd690a077171c4613d3cc9f3b87ddc12701c7feb3bed841a723126f6ec7206630bd562e5b8cfcd0457392ae494e1ae43ccc60df4e69aece1efc7ef4df76a08602c042e6c1e362a780764bd14d08e3162ef67e6ec1feb152a9bd342614b83d846946f9465b2d5622a08c2d69fca32026617ff0e1e7fd94733b61e132bf51faad4656853cf8c1ff507280254b4245dc85e0c7db3fabab2321646b2b6e05f74eba53b272e47cf3cc76961e3c6123ad97275c199c65ff16fa74e7d30448"}, {&(0x7f00000002c0)="3ab3e3d31baf4b0dadec0300000000000000fd42b8080bac29d10035b72bbbef2ddb8d4b3c7d4552081c03726d59ee204bc3aea3be5d53611940a0a0"}, {&(0x7f0000000300)="1396f346d6ed82a0663b5ecb2176aa33461c21f16132d55ffb7326ebe1ed605e934b9fe072648c49381c9a670961e4098713d9c337a941064183d359f33e1128c37190e6e72214ec"}, {&(0x7f0000000380)="e5c9bb7ddd32ae5b6b54ceca1bb31c77cdbd118e7990b893f95579af8f8631bc00906b476a393cb929a5469a630a6ef0ed551d3c73bca5018cc3b8bc6e1ad578c1b3218e435dd4429cf517c8bbbb0ed670d3af89fb12579e78eb00193112e5576c838fa276e24ea3aeea28133cd9a19279995fe375c244a07b95df2ee8eddb133cd4179a06f6028598adc34494b9f17746069af3fedc9697012500ab03e0ff51ce2bfc01d390d07d57c6d1d57c4d80c52c4c73cd08f1827ac8526894e8efbdfebe7419416575e356087b6d6e37c19279"}], 0x0, &(0x7f0000000900)=[{0x0, 0x111, 0x7, "9620e40fafa431220e79a981de89518bfa099c18ced56abe8deebf2d9048ef950d096c537091615c2f36464c4b5f2115a1a2fca64f84d482a97d4c576b9d2513f637acc0255e6cd7a16d407ff517da179a632f4dfed3be0d2cd4e3e839c288d896c1e2530711b04417ed233afd"}, {0x0, 0x114, 0x8, "5fc8becad85e320a94ccf40374d0181e63882a4a709b704a1ba9fbdf4b035e0c7b9fb9486c70"}, {0x0, 0x115, 0x1000, "266f770b3557460434eee608735322e3b72a8760ac76036cfb989b597609ba1e42c75557535b3700b044c560da4550ed750d49b8a6203f2b2b9ec2aa405243a878843b0b3829784b963d7509f1927e9f29c72a242bb87be4ad3dae0455c51e0673fd3a3c38d0e09768211ac7da5f204fe907f4bd5bcfa393160d0f8528c38b09519d63ebed9b51af4da90ddf2fda75f2227c1d3aceff8751006d1d1cf9b7bbf1cb6ead8940fd21871c228dae86bdff23414eb2e38261123435ca39aee3dd462006981a917ac9c95b6a1ad691193973"}, {0x0, 0x0, 0x1, "0e23291ea7284ebdb143c2c1855f91ae1c1b239fea4affd04d65fb6fb64bc845b859e2eeb30bdfd304ef2633b192e9e16dd0b33330c8a4711c7df6a20897b6b0f725531f9e29673111436c6c4be2711c11bdbab25670846d"}, {0x0, 0x66b587580339a2d6, 0x7, "9124f772cce2f9e0bea437218eb5158849f31a1b3a2117535ed3128ca4f7888124c275ed68bf726c5cf44349f753a2b59e74223ae73bb0dfe8364d16c9aef0f1cc41cec693d81c24594259835230b50d8419f0cb80d68a0fae0c1e2720945058482bf78aa805c119cbb5d8ea4d5f47bbe94f9e73bdae93416c2cd232e0a9cc79ccc32c3c340d5b1cd04d990f19a16b34e0332862810fd6d2c8be8b67f375"}]}}], 0x4000189, 0x0) 1.41495108s ago: executing program 2 (id=6101): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0xffffffffffffffb0) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000480)={0x3, 'veth0_to_bond\x00', {0x6a}, 0x1ff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000400)={r5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x4}, 0x8) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x20040004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x2}, {0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa}, 0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r8, 0x5}, 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r6], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa8}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@alu={0x4, 0x1, 0xb, 0x96bdff5043e24129, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0xd455d0f2adb9ba32, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r10}, 0xc) 1.316494504s ago: executing program 0 (id=6102): r0 = socket(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1ff, 0xcd, 0x1, 0x5}, 0x10) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="c335f98a2c430000000000000800450000b00500000000119078ac1414ffac14141c08004e23009c907801000000000000006fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eac2d34c732be023520b57e4c98679c7795a2aa466ddde70e5f20ba8d82d6b8d17e219edd86fb7fcf75fe803c20000004000000000005df814aa2e34e4f8a751805b993e0edbe300000000090000000000002cfee9b9d5b0b2b171b51f9174963b0ce40ca7e0a7b4bbc4bc9720c876a57954"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xffffff1b, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa10000000000000701ec38a7d7360008000000b703000000000000850000000200000095000000000000001ac00afc0a066587a538d48ff3175ef180011ae506cf584f62ec760b1907812cbde05fdd881f89265facaeda5746a42f3bff91a58f042b314f0ae575d438a98a202a64645dc023fa62"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x75, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000670000000000119078000000000000000000004e20005390786046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a12ca387ae4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29844411d1e17912370b7070ab6547b72271f5d6dcb64dd4c354a5fdc4bd4cca60f5a3a76930fd72da62e23d8427ffb0c35ccfe62d0bbd5cbac8d905c1b8c6ab179e913b9602545a24e1bfed90d71b9e23afc154f1fd1023b2bdc602aba9ab251029ed0cd601347d8ed4950265dcd101a7910815c2defde862415cc2d19cc03118f2a77"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xb}], 0x1, 0x40000021, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff7c, &(0x7f00000000c0)}, 0x400002e1) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT=r3, @ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000011c0)={r7, @in={{0x2, 0x4e23, @local}}, 0x7f, 0x12, 0xa, 0xac28, 0x80, 0x759c7cc5, 0x7}, &(0x7f0000001280)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000012c0)={r8, 0x1, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r7, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000010c0)={r7, 0x7fff}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r0) 1.163227176s ago: executing program 3 (id=6103): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000100)={0x7f, 0x3, 0x4}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.022725843s ago: executing program 3 (id=6104): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x41}, &(0x7f0000000140)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000002, 0xfffffffe, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) 857.9797ms ago: executing program 4 (id=6105): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x30}, 0x440e0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000008009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf980000000000005608000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 857.625748ms ago: executing program 3 (id=6106): syz_emit_ethernet(0x9d, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa3b8100100086dd608a37f200632cdefb010000000000000000000000000000fe80000000000000000000d15fe55963ae886500000000aa06000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002f3d98c3502ffad32829a567fa99e64978b6ddecad472278468a74b4d488734e1a1f38ba4ba88a898a883168f949b9eced48b6dbb156854d9aa1bed45543e6b44fbfd1e689b57"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000055baff1023f676af8bc1a0704ec0261a1466809111f5daae364c011a6dcd8af1d18de632d251b4699fad436619e4fa99ca30a4943f84480c06d83f98114a36558f6b9f75450f07312106d274ffd9eb81c5f0ca0f9388f57a48599b7dd81c00d82056c280454b176592a3d3c9624ff02e9a8142d4b06b7405e80b77cebdb5a85759b236bd34d2e0880f2ce0ffb37179ad4e061900f4adcd24e2e57a492b7d2e710cc0caace00acdd2bebecfee0e71549aaa2f092fec11cfeb62eb4e1cee11eab47953256584c87bfcfd343134b4e64ff6fe30d8b8b5b", @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001400028004000500080002000000000004000400"], 0x40}}, 0x2008040) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r4, @ANYRESDEC=r1], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x64040080) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x30}, @empty}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4e457bd99ddd3b744000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010067656e65766500001400028005000d00fe0000000800010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000200), 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @loopback}, 0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) 678.053829ms ago: executing program 3 (id=6107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x6, 0xc, 0x4, 0xfd, 0x0, 0x3}, 0xc) sendmmsg$inet(r7, 0x0, 0x0, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6212, 0x12000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 629.130966ms ago: executing program 4 (id=6108): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r1, @ANYRESOCT], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005f00000095", @ANYRES32=r0, @ANYRES32=r1, @ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 369.485924ms ago: executing program 2 (id=6109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000050053580900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000208000b40000000002400048020000180070001006374000014000280080001400000000c080002400000000d0900010073797a30"], 0xc0}}, 0x0) 368.547532ms ago: executing program 4 (id=6110): r0 = socket$unix(0x1, 0x2, 0x0) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0xffffffa1, @ipv4={'\x00', '\xff\xff', @remote}, 0x36}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}], 0x74) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x80}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0x5, 0x7}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xec, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3d9d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xac6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1df9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff472f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc6}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd0, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa4, 0x84, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="33c99cb3c6625d47f0e576"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="5f8b6ec948feea73f8d2b89c9d407424864083f5bcaedecea573f5f508"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f86eeeb4eaba"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x92}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x823}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000600)={r3, 0x7d, 0x2, 0x9a18, 0x0, 0x9, 0x563, 0x1, {r3, @in6={{0xa, 0x4e21, 0x80000000, @private2, 0x6}}, 0x9, 0x40, 0x7, 0xee8, 0x6}}, &(0x7f00000006c0)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000700)={0x42, 0x2, 0x800, 0x3, r7}, &(0x7f0000000740)=0x10) r8 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xa000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000000900)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) sendto$packet(r11, &(0x7f0000000ac0)="b40a5e7816d4461a65eef9d49359e1ecf593fb20c480e1d93f34996b27c238782300022f69f62e683804206c20ea7915428ebd377c23e58136efeb94fbeee661efd8f2cc8ed9673d98a9480a59f6a67363e73fc6d7578d1817", 0x59, 0x20000080, &(0x7f0000000b40)={0x11, 0x19, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14) sendmmsg(r11, &(0x7f0000001b40)=[{{&(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)="c11af10d00dc1e1775c2e1697d0f4a622f75965b06b9f73b41a7f3229fe7e7de0509d8d5c4d51a16449e595a7569512902506ed9fa706df9e44cb04f67a8fe200c2a66603aa36e9691ad70d8484cc805d6326ac17ca9174ca5125ad07a3252cded3ecbbecc2b65439da30453901bd603c9277ae92c6e2ca482a0ad38812fc917aac8807683d70dc98b6a652bd2e53e904ff20af2607e3c053c01231c2e1242c6fe92869b386ead92e3b3a02095c4a319525b01313b6e22a838720c2564cec23afa321b018363b3", 0xc7}, {&(0x7f0000000d00)="9a5f9dc0bdd76925f7bbde940064a54c344b715bea75c3401c37998c34a0a6b5033cc9e5f06671304f4e01511e8db8537bd8e4fd3cc8b4b06a1f8196408fc87b092fef0f38b6120dab909095e356d1a23c3d1a1672a315c4c2df04e31aa0557df0ecfe498e4d57b0216c2f1a0365c26d0b8f57761e063eb57ca1f0df2133fbe5042c0c8739d5459186e149deefbe51a92c78d7c663a236703c6cb5f1b5b3ba6ddca95068033730f75db3976021e28cf283295077d9a02b92fc7090255be0fbd585b3b975ed3f90b2c951d3bf83ef36ca5a9927a2c5", 0xd5}, {&(0x7f0000000e00)="3f0ffc5a213b19a71c7f2f887c7f", 0xe}], 0x3, &(0x7f0000000e80)=[{0x48, 0x101, 0xfffff6a9, "b74afb05cfc703952e060846294ea4133966b46dab26ebb055d59d8f07b7eb3fa22a1727fe7f797ae7daf182ed7fcff7f92f08"}, {0x68, 0x88, 0x7f, "a30ad997585a48c4011c3aba9ebb54c9e1cb1897371ae14ab6282ac09cc7802feded3a1d61dee214c7b85011df4e17e85af8e556eaf17ac55739aef27d5521c383fb60ff729d49ab32dedec73eff8355f82e587d121a7df2"}], 0xb0}}, {{&(0x7f0000000f40)=@generic={0x8, "9e86be68f664803212aa8721299218cccb4325ad2cf65bae8f7b913846084008cd2188b1766581e54cf992a1a1dbf1996cf7e1fd1f3f2dab25ed5cb795fa6af61203f44155159da6a3a3e5efa89be79ecfbbb913a7c64e747897b1825569bd549820318d05e0caf0ea4e1a6fae6310aea07669317349a4436687370f40f9"}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000fc0)="7b74b1551581a882ce9706de4a948a966404bb7a9d040904c4b47d627e94677679265ecea2b623bbac7111b4a53b15067b0381370d429e8861f64efcfccd9bfbea52131f5188c880599eea55e5a818b161438760fb03c16dc9c4da29772f7fe31f92217a5b7678d86dbb93f3d24a6250902b01feadb6c3c47ac83806624dda1352aa456dfe36c328fd686007", 0x8c}, {&(0x7f0000001080)}, {&(0x7f00000010c0)="c706bd702dc1fac53f56daacd0273f4d82744c9a8dc41f869eb86274fc3b8b1738d38c75a370b1a8e0916d3b5cd603301b2531d83174958cda8bf0d85ce1e300a7bec91f7a6a4892df0c240a85ac6ec761332a1ec9ffb5b985611a083080537091d24d193bc6f30fd9f50d1f309bc4126e1f2af71ffc254ed0ab36e583a9106aab7cb0afa84a4783cb151d5990e5b79f1e62971c339180443d57b684bd29b99f12f58ba24fce5495a5c9fea041e4cd7e99af3d1588c8d705098863b13a47", 0xbe}, {&(0x7f0000001180)="69f5", 0x2}, {&(0x7f00000011c0)="3845de8c7ffcd01730dbbd6e3bed85aeec98bcd4587ffc135e3a95b708517fd097c65f9dcd6aa3bd99542c1d3867547e1844a9031efa85f4f49c616e98bed28aa92d564e42b9280efeb6867f56cf4f7cd8e320373c3097c2a105a5bb233e18e3e6e2099a1961e79a84374a16b254b3a3f306a10ee9eb4d7754f52522f94b9ee3c38f7d112a7796c4d74881dad073a69c94dbaaabd8673032d9652310c3a6af0145befa8e2e3c91e2f7b9f1771e47acdc68cf01736204002ebb043f1a441753d6911fb9c6bd39dac5ff2507521f5495", 0xcf}], 0x5}}, {{&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0xfffe, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000001800)=[{&(0x7f00000013c0)="dabcbe7db7a6546a740a72581722dc16c44d9808d0729d384d3db5bbd32c18ea9e70e5673f2428210a92341bec565a7344f24a626afb3a69c0f6753abc08386e2c0c2c42a97a04d9e2701ec11a8b3960d7f0b6756741a5d1baf6704708bcb2f6603e2c2894823bf65b6a8a5186178282183c1840b30c9767bb13b755c28000329b16869e79d6dbe47cb277c68635f7cd75182e6b2b0d045cc3fe9f219a632358bc749b4c249719d95a9337839e4f3e4afe34a161d3328458a88f6f805cd96fab506bce88e4765c022b781df9308c7eecc2b85d8548606faebfdb045fd62971f2", 0xe0}, {&(0x7f00000014c0)="636caba99e191abdc5a6e3d07199bfde2ad1ef8f736a86816ceeb118b0a42d836f6d4b1c9a205609bbc06cb71c1ba0b0ce57adb4739a10ce85c6374cd335c172e7d87ba882bcf74d20664fddc893e8b86933544282b2ef4ad3394fed76a7d6738ea0c2b1bf26e9b0144db194dabefa61c1e77378a51ac73e9c5acac94fe89fc8bb7eefa4570b0117464a71b2a10e30777207200137c7729b660ef5526f08c729b1fc87651763cf71f1ea7a8952b16cae4cfd17a34587394bccf2a46e5f22f33173152f2bfee2b8f33c8308fbe12b461ec9a272d9d2026892ed091ea50d997a0d85810b6fb4f06a30", 0xe8}, {&(0x7f00000015c0)="fdadc33351b1917e90beeac5fc5444473ed29f65ac642656", 0x18}, {&(0x7f0000001600)="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", 0xfc}, {&(0x7f0000001700)="70618b83893c14b3ebced1d7", 0xc}, {&(0x7f0000001740)="0d599b58c95ca852df312ca6730ef95830b36c61915584cbb279b99727ec59d67086131cbbc0ffa9c5292f2e57b8c6fea5d049fc7e502a244eb7267d50e03e79cf937828a3fc37d4f1f00f70bf3d493e52fc1a469d56f82a08f13b56ad8a6410a3a117c36a7ad97dce49c8cd2aa9acced3df7f2dd8b7356dae0f474acfc61caf78fe7f12e68c0c0a154e0f678013d69fe5e9e2e1233b502bef39ca5ecb0ad9b2f4fb15cfc7d7a9df0f6cd5e1ca555ef6170fbe", 0xb3}], 0x6}}, {{&(0x7f0000001880)=@rc, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)="f4415530217cede61893e78859120ce70c994a6dabd60e8c98cb76d34d1530a7d8f3c90e56fba9857363b748f631d7fa3999aa6e7f78fc057396d0e22ab2ea45bc2e7e28f89c36a71d41e7079d", 0x4d}, {&(0x7f0000001980)="4cd8dbd2588a7e2550f548e6e7cc5b99455a6baffa92642c863e18335b0ec6dab78942d3bdac6df97be0bfd64884e86bcd9d40c58efdc4b3638ba4a72a987505c371ac9c1ef4654b4087513e13697331ee208d1e0a3d413e45f52b2a525bb44001fe5368ef97dd74bd0a37262304fad62d42da0f423436a617c61a9ad6d52341ca52d8c708703122a2a108204cb7fb66e05509dcaa82881a1465326744f4484b77de919401c5246d2a3271fd08e66c8827086ca772fd942328d808d2a92d59976c4a018c10af", 0xc6}], 0x2, &(0x7f0000001ac0)=[{0x20, 0x1, 0x9, "adc9fce802254e62a71559e0"}, {0x50, 0x17, 0x6, "b0046793cd5734d7d9b4cc5dd3d2b0698f402286ab2d3eec0f10b6f6a208831ee7c648d111d1b4aad7950241264f1c09e8535e5ef750b9dc17e747d032a686"}], 0x70}}], 0x4, 0x4081) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44003) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000001d40)={0x0, 0x1, 0x8000000000000001, 0x0, 0x5, 0x3}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r11, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x38, 0x35}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x4008854) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000001e80)={r7, 0xf0, "fe3fea3a5f26df6d2376873b9b7d17f2dc623afe2e70a44ee93d39eea03d92c79c9a519f907cfe7faf3ced61eb0b830c33a2e114712102f7454fe8c810d1f089ab2c0e160a6d040146a2c8e3a0f1bbd2d0a2373a9cb73e48f1b8b99cec42f22c28975d614a4802ee44cdf8727aff22c5b2f22e900f02d64bc624a2889174faa562f72a821adf7ec848a0c9de30114f9ffd15dfb9a4ddde60d44a1893589d30a255cbd38d91391f37f484665077645551d852060a03b8205f210d6f821e41cbd5756aa7d22163574088b4b664fcf09a5ce30e228dbd8079d1e2669105b3eae71cacf9438b4fe4a350f7ed568b8ec8e3a3"}, &(0x7f0000001f80)=0xf8) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001fc0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f0000002080)={{r12}, r13, 0x0, @inherit={0x68, &(0x7f0000002000)={0x0, 0x4, 0xffffffffffffbb09, 0x9, {0x8, 0x0, 0x6, 0x401, 0x7}, [0xfffffffffffffffd, 0x7, 0x7, 0x1]}}, @subvolid=0x8}) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, r11, 0x2, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003180)={{r14}, &(0x7f0000003100), &(0x7f0000003140)=r11}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f00000031c0)={r8}) 332.295229ms ago: executing program 0 (id=6111): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x16, 0x4, 0x0, 0x0, 0x64, 0xfffe, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @timestamp_addr={0x44, 0x3c, 0xc0, 0x1, 0x0, [{@local, 0x2}, {@rand_addr=0x64010101, 0x8000}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x400}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x3ff}, {@empty, 0x9}, {@loopback, 0xff}]}, @ra={0x94, 0x4}]}}, {0x0, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x76) (async, rerun: 32) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="210325bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func_proto, @enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x6, 0x400, 0x800}]}]}, {0x0, [0x5f, 0x5f, 0x30, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1, 0x1}, 0x28) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xffffff3d, &(0x7f0000001740)={&(0x7f00000005c0)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0xc044) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) sendmmsg$inet(r4, &(0x7f0000004d00), 0x0, 0xf00) 215.187048ms ago: executing program 2 (id=6112): unshare(0x20000200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200080a4}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x6adddc0ea74451d6}, 0x8004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x19}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0xc000600) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000380)={0x9}, 0x4) socketpair(0xb, 0x4, 0x6, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x51}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xbd}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040851}, 0x4000000) getpeername$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) sendmsg$nl_route_sched_retired(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xc8, 0x24, 0x0, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xfff3, 0x4}, {0xf, 0xfff3}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2120}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x15}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008891}, 0x20040080) ioctl$sock_ifreq(r4, 0x8984, &(0x7f0000000800)={'pim6reg0\x00', @ifru_names='syz_tun\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x1010, r1, 0x7b3a6000) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x1f, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x7}, @ldst={0x3, 0x2, 0x4, 0x7, 0xb, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_idx={0x18, 0xd, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x5, 0x1, 0x0, r8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4ee5b411, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x9, 0xa5, &(0x7f0000000a40)=""/165, 0x40f00, 0xd, '\x00', r9, 0x0, r7, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xd, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000b80)=[{0x0, 0x5, 0xe, 0xa}, {0x3, 0x5, 0xc, 0xa}, {0x4, 0x2, 0x6, 0x1}, {0x2, 0x1, 0x4, 0xb}, {0x1, 0x3, 0x0, 0x6}, {0x0, 0x3, 0x10, 0x6}, {0x4, 0x4, 0xa, 0x1}, {0x2, 0x4, 0xd, 0x7}], 0x10, 0x9}, 0x94) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffff9, 0x52}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r13}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xce0d}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9f1c}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000001000)={0x0, 0x9c0f, 0x2c000000, 0x9}, &(0x7f0000001040)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001080)={r14, 0x2, 0x9, 0x8246}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000001180)={@can, {&(0x7f00000010c0)=""/94, 0x5e}, &(0x7f0000001140), 0x19}, 0xa0) 176.405288ms ago: executing program 4 (id=6113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0}, 0x16) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000600000000000000010000005f0500070000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) 173.016713ms ago: executing program 3 (id=6114): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff00}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1, 0x3f00}, @generic={0x5, 0x0, 0x0, 0x2, 0x27}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x90) 139.21721ms ago: executing program 1 (id=6046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x8, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x6}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x9, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) close(0x3) 1.915145ms ago: executing program 4 (id=6115): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e65746465"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=6116): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8004, 0x1400}, 0xad, 0x5, 0x10000000}}, @TCA_TBF_BURST={0xfffffe2d, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0x1, 0x8}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r7, 0x9, 0x2}, 0x8) listen(r1, 0x100) shutdown(r1, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00"}) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f00000001c0)=""/177, &(0x7f0000000280)=0xb1) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x30}}], 0x2, 0x4000800) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8004, 0x1400}, 0xad, 0x5, 0x10000000}}, @TCA_TBF_BURST={0xfffffe2d, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0x1, 0x8}, &(0x7f0000000100)=0xc) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r7, 0x9, 0x2}, 0x8) (async) listen(r1, 0x100) (async) shutdown(r1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) (async) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00"}) (async) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f00000001c0)=""/177, &(0x7f0000000280)=0xb1) (async) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x30}}], 0x2, 0x4000800) (async) kernel console output (not intermixed with test programs): .573697][T22681] IPv6: NLM_F_CREATE should be set when creating new route [ 615.068789][ T8331] bond1 (unregistering): (slave gretap1): Releasing active interface [ 615.443292][ T8331] bond2 (unregistering): (slave bridge2): Releasing active interface [ 615.783286][ T8331] bond8 (unregistering): (slave bridge9): Releasing backup interface [ 615.796998][ T8331] bridge9 (unregistering): left promiscuous mode [ 615.884098][ T8331] bond1 (unregistering): Released all slaves [ 615.909666][ T8331] bond2 (unregistering): (slave veth5): Releasing active interface [ 615.921404][ T8331] bond2 (unregistering): (slave veth7): Releasing active interface [ 615.930723][ T8331] bond2 (unregistering): Released all slaves [ 615.956644][ T8331] bond3 (unregistering): (slave veth9): Releasing active interface [ 615.965830][ T8331] bond3 (unregistering): Released all slaves [ 615.985635][ T8331] bond4 (unregistering): Released all slaves [ 616.012283][ T8331] bond5 (unregistering): Released all slaves [ 616.034412][ T8331] bond6 (unregistering): (slave veth13): Releasing active interface [ 616.046693][ T8331] bond6 (unregistering): (slave batadv1): Releasing active interface [ 616.069580][ T8331] bond6 (unregistering): Released all slaves [ 616.096067][ T8331] bond0 (unregistering): Released all slaves [ 616.115104][ T8331] bond7 (unregistering): Released all slaves [ 616.141313][ T8331] bond8 (unregistering): Released all slaves [ 616.162617][T22661] gre0 speed is unknown, defaulting to 1000 [ 616.181870][T22686] hsr0: entered promiscuous mode [ 616.419251][T22742] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 616.574643][T22753] netlink: 'syz.2.4239': attribute type 7 has an invalid length. [ 616.616714][T22753] netlink: 'syz.2.4239': attribute type 1 has an invalid length. [ 616.753149][T22753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.791115][T15611] smc: removing ib device syz1 [ 616.813992][T22760] netlink: 'syz.3.4240': attribute type 10 has an invalid length. [ 616.882955][T22760] __nla_validate_parse: 4 callbacks suppressed [ 616.882975][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4240'. [ 616.966616][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 617.032425][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 617.302508][T14130] lec:lec_start_xmit: lec0:No lecd attached [ 617.421021][T22782] openvswitch: netlink: Flow actions attr not present in new flow. [ 617.708653][T22791] sctp: [Deprecated]: syz.2.4249 (pid 22791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.708653][T22791] Use struct sctp_sack_info instead [ 617.740653][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4250'. [ 617.768533][T22791] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.4249'. [ 617.780760][T22792] netlink: 'syz.1.4250': attribute type 1 has an invalid length. [ 617.800196][T22791] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 617.800210][T22791] sctp: [Deprecated]: syz.2.4249 (pid 22791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.800210][T22791] Use struct sctp_sack_info instead [ 618.194036][T22795] netlink: 'syz.3.4251': attribute type 21 has an invalid length. [ 618.216046][T22795] netlink: 'syz.3.4251': attribute type 20 has an invalid length. [ 618.264765][T22800] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 619.108188][T22826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4258'. [ 619.419289][T22835] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 620.212621][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4261'. [ 620.228435][T22843] ±ÿ speed is unknown, defaulting to 1000 [ 620.365307][ T8331] : left promiscuous mode [ 620.580360][T22851] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4262'. [ 620.607043][T22851] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4262'. [ 620.656931][ T8331] tipc: Left network mode [ 620.661538][T22848] ±ÿ speed is unknown, defaulting to 1000 [ 621.154240][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4272'. [ 621.216571][T22883] ip6gretap1: entered allmulticast mode [ 621.243953][T22883] netlink: 'syz.4.4272': attribute type 39 has an invalid length. [ 621.311139][ T8331] hsr_slave_0: left promiscuous mode [ 621.324046][ T8331] hsr_slave_1: left promiscuous mode [ 621.598501][T22902] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 621.978192][T22914] xt_connbytes: Forcing CT accounting to be enabled [ 622.002455][ T8331] team0 (unregistering): Port device team_slave_1 removed [ 622.025627][T22918] __nla_validate_parse: 5 callbacks suppressed [ 622.025646][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4280'. [ 622.044442][ T8331] team0 (unregistering): Port device team_slave_0 removed [ 622.178470][ T8331] ±ÿ (unregistering): left allmulticast mode [ 622.194480][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4277'. [ 622.321698][T22918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 622.399718][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4281'. [ 622.569129][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 622.577188][ C1] lec:lec_tx_timeout: lec0 [ 622.617791][T22922] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 622.642166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.762492][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 622.861628][ T8331] IPVS: stop unused estimator thread 0... [ 622.925648][T22938] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 622.963830][T22938] netlink: 'syz.3.4286': attribute type 2 has an invalid length. [ 623.239436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.262415][T22966] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4288'. [ 623.325458][T22956] pim6reg: entered allmulticast mode [ 623.475723][T22956] pim6reg: left allmulticast mode [ 623.698342][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4291'. [ 623.825855][T22986] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 624.093667][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.104686][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 625.855498][T22976] syzkaller0: entered promiscuous mode [ 625.889498][T22981] syzkaller0: left promiscuous mode [ 626.150011][T23016] netlink: 'syz.2.4298': attribute type 1 has an invalid length. [ 626.215921][T23016] bond3: entered promiscuous mode [ 626.221724][T23016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.377161][T23016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.392758][T23016] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 626.403179][T23016] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 626.435642][T23016] bond3: (slave vti0): making interface the new active one [ 626.469276][T23016] vti0: entered promiscuous mode [ 626.478757][T23016] bond3: (slave vti0): Enslaving as an active interface with an up link [ 626.656984][T23040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4305'. [ 627.241538][T23062] netlink: 'syz.1.4316': attribute type 1 has an invalid length. [ 627.308747][T23062] bond6: entered promiscuous mode [ 627.315966][T23062] bond6: entered allmulticast mode [ 627.323361][T23062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.386988][T23071] erspan1: entered allmulticast mode [ 627.421629][T23071] bond6: (slave erspan1): making interface the new active one [ 627.430581][T23071] erspan1: entered promiscuous mode [ 627.450077][T23079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4322'. [ 627.463992][T23071] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 627.484965][T23079] netlink: 'syz.0.4322': attribute type 21 has an invalid length. [ 627.494686][T23046] sctp: [Deprecated]: syz.2.4309 (pid 23046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 627.494686][T23046] Use struct sctp_sack_info instead [ 627.498113][T23075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.739399][T23085] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4325'. [ 627.757361][T23085] netlink: 'syz.0.4325': attribute type 1 has an invalid length. [ 627.765711][T23085] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4325'. [ 627.777273][T23085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'. [ 627.786573][T23085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'. [ 627.852972][T23093] bond4: option lacp_rate: invalid value (128) [ 627.863195][T23093] bond4 (unregistering): Released all slaves [ 627.894756][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4328'. [ 627.985285][T23102] vlan0: entered promiscuous mode [ 628.003115][T23102] bridge0: entered promiscuous mode [ 628.145165][T23112] netlink: 'syz.1.4334': attribute type 12 has an invalid length. [ 628.154900][T23112] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4334'. [ 628.164648][T23112] tipc: Invalid UDP bearer configuration [ 628.164700][T23112] tipc: Enabling of bearer rejected, failed to enable media [ 628.618260][T23144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4342'. [ 628.712377][T23146] tipc: Started in network mode [ 628.717394][T23146] tipc: Node identity 9e894d484d8b, cluster identity 4711 [ 628.727662][T23146] tipc: Enabled bearer , priority 0 [ 628.737413][T23148] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4344'. [ 628.746762][T23146] syzkaller0: entered promiscuous mode [ 628.746782][T23146] syzkaller0: entered allmulticast mode [ 628.781169][T23153] netlink: 'syz.3.4345': attribute type 4 has an invalid length. [ 628.791864][T23154] netlink: 'syz.3.4345': attribute type 4 has an invalid length. [ 628.806454][T23146] tipc: Resetting bearer [ 628.938303][T23146] tipc: Disabling bearer [ 629.005770][T23167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4348'. [ 629.332047][T23178] nbd: nbd64 already in use [ 629.609112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 629.617194][ C1] lec:lec_tx_timeout: lec0 [ 629.617400][T15630] udevd[15630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 632.235508][T23280] tipc: Can't bind to reserved service type 2 [ 633.702060][T23240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.714706][T23256] __nla_validate_parse: 7 callbacks suppressed [ 633.714723][T23256] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4372'. [ 633.931646][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4378'. [ 633.971414][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 633.989642][T23290] netlink: 'syz.4.4380': attribute type 7 has an invalid length. [ 634.025079][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 634.076168][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 634.116174][T23290] netlink: 'syz.4.4380': attribute type 7 has an invalid length. [ 634.149620][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 634.829280][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4393'. [ 634.877952][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4393'. [ 634.967184][T23341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4394'. [ 635.086196][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 635.261448][T23347] bpq0: entered promiscuous mode [ 635.275491][T23347] bpq0: entered allmulticast mode [ 635.303556][T23347] dummy0: entered promiscuous mode [ 635.322305][T23347] debugfs: 'hsr1' already exists in 'hsr' [ 635.342478][T23347] Cannot create hsr debugfs directory [ 635.357814][T23347] hsr1: entered allmulticast mode [ 635.371039][T23347] dummy0: entered allmulticast mode [ 635.390277][T23347] bridge0: entered allmulticast mode [ 635.641859][T23368] netlink: 'syz.3.4403': attribute type 7 has an invalid length. [ 635.665314][T23368] netlink: 'syz.3.4403': attribute type 8 has an invalid length. [ 635.762303][T23368] team0: entered promiscuous mode [ 635.775975][T23368] team_slave_1: entered promiscuous mode [ 635.792787][T23368] team0: left promiscuous mode [ 635.797812][T23368] team_slave_1: left promiscuous mode [ 636.248429][T23385] netlink: 'syz.0.4408': attribute type 9 has an invalid length. [ 636.835381][T23401] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 636.887158][T23410] openvswitch: netlink: IPv6 tunnel dst address is zero [ 637.390774][T23424] syzkaller0: entered promiscuous mode [ 637.410876][T23424] syzkaller0: entered allmulticast mode [ 637.465196][T23424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.697848][T23477] sctp: [Deprecated]: syz.2.4431 (pid 23477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 638.697848][T23477] Use struct sctp_sack_info instead [ 638.761817][T23463] syzkaller0: entered promiscuous mode [ 638.780494][T23463] syzkaller0: entered allmulticast mode [ 638.806928][T23463] TC_ACT_REPEAT abuse ? [ 639.308847][T23508] Bluetooth: MGMT ver 1.23 [ 639.374662][T23514] netlink: 'syz.0.4440': attribute type 5 has an invalid length. [ 639.461511][T23518] __nla_validate_parse: 14 callbacks suppressed [ 639.461529][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4441'. [ 639.902351][T23533] netlink: 'syz.0.4446': attribute type 1 has an invalid length. [ 640.111001][T23535] bond3: (slave bridge4): making interface the new active one [ 640.145840][T23535] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 640.605484][T23563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4456'. [ 640.619276][T23563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4456'. [ 640.877625][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'. [ 641.047704][T23582] bond4: option lacp_rate: invalid value (128) [ 641.081017][T23582] bond4 (unregistering): Released all slaves [ 641.413615][T23589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4461'. [ 641.880876][T23616] SET target dimension over the limit! [ 642.078940][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 642.117995][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4471'. [ 642.153210][T23629] netlink: 'syz.1.4472': attribute type 7 has an invalid length. [ 642.202155][T23628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4472'. [ 642.283172][T23632] netlink: 'syz.0.4473': attribute type 14 has an invalid length. [ 642.308013][T23634] netlink: 'syz.0.4473': attribute type 14 has an invalid length. [ 642.337425][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 642.375191][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 642.438727][ T8331] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.443166][T23634] netlink: 'syz.0.4473': attribute type 14 has an invalid length. [ 642.455870][T23632] netlink: 'syz.0.4473': attribute type 14 has an invalid length. [ 642.467190][ T8331] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.487219][ T8331] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.519441][ T8331] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.008967][T23668] netlink: 'syz.0.4483': attribute type 2 has an invalid length. [ 643.042567][T23671] sctp: [Deprecated]: syz.4.4482 (pid 23671) Use of int in maxseg socket option. [ 643.042567][T23671] Use struct sctp_assoc_value instead [ 643.125647][T23676] tun0: tun_chr_ioctl cmd 1074812118 [ 643.150919][T23678] tun0: tun_chr_ioctl cmd 1074812118 [ 643.237453][T23672] tun0: tun_chr_ioctl cmd 1074033169 [ 643.246700][T23676] tun0: tun_chr_ioctl cmd 1074033169 [ 644.205201][T23727] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.215554][T23727] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58957 - 0 [ 644.230815][T23727] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.243051][T23728] netlink: 'syz.4.4499': attribute type 2 has an invalid length. [ 644.255488][T23728] netlink: 'syz.4.4499': attribute type 2 has an invalid length. [ 644.276884][T23728] veth1_macvtap: left promiscuous mode [ 644.282900][T23728] veth1_macvtap: entered promiscuous mode [ 644.315085][T23727] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.326620][T23727] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58957 - 0 [ 644.337709][T23727] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.425283][T23727] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.445824][T23727] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58957 - 0 [ 644.460415][T23727] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.565371][T23727] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.609287][T23727] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58957 - 0 [ 644.645660][T23727] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.703699][T23739] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 644.703699][T23739] 3ìUH†5rºBnœæ [ 644.887337][ T8327] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.916429][ T8327] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 58957 - 0 [ 644.943781][ T8327] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 645.010718][ T8327] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.041679][ T8327] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 58957 - 0 [ 645.069836][ T8327] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 645.157800][T23751] __nla_validate_parse: 73 callbacks suppressed [ 645.157819][T23751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4506'. [ 645.186221][ T8331] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.202375][ T8331] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 58957 - 0 [ 645.220690][ T8331] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 645.230267][T23749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4505'. [ 645.267854][ T8331] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.294982][ T8331] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 58957 - 0 [ 645.327607][ T8331] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 645.396521][T23757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4508'. [ 645.448107][T23760] x_tables: duplicate underflow at hook 2 [ 645.484979][T23764] netlink: 'syz.2.4509': attribute type 6 has an invalid length. [ 645.501291][T23764] netlink: 'syz.2.4509': attribute type 7 has an invalid length. [ 645.517122][T23764] netlink: 'syz.2.4509': attribute type 8 has an invalid length. [ 645.539518][T23764] netlink: 'syz.2.4509': attribute type 15 has an invalid length. [ 645.549521][T23763] syzkaller0: entered promiscuous mode [ 645.555802][T23763] syzkaller0: entered allmulticast mode [ 645.577730][T23764] "syz.2.4509" (23764) uses obsolete ecb(arc4) skcipher [ 645.653052][T23764] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.660678][T23764] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.673587][T23774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.764248][T23764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.778440][T23764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.801751][T23764] hsr0: left promiscuous mode [ 645.811586][T23764] veth0_macvtap: left allmulticast mode [ 645.827716][T23780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4513'. [ 645.837395][T23780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4513'. [ 645.852560][T23764] geneve1: left promiscuous mode [ 645.867230][T23764] geneve2: left promiscuous mode [ 645.879262][T23764] geneve2: left allmulticast mode [ 645.890557][T23764] vlan2: left promiscuous mode [ 645.898344][T23764] macvtap1: left promiscuous mode [ 645.907464][T23764] macvtap1: left allmulticast mode [ 645.920376][T23764] bond3: left promiscuous mode [ 645.925168][T23764] vti0: left promiscuous mode [ 645.933005][T23764] hsr1: left allmulticast mode [ 645.937836][T23764] dummy0: left allmulticast mode [ 645.943465][T23764] bridge0: left allmulticast mode [ 645.965623][ T7981] syz0: Port: 1 Link DOWN [ 645.967839][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.978702][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 58957 - 0 [ 645.987900][ T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 646.015635][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.032854][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 58957 - 0 [ 646.046251][ T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 646.111475][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.124590][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 58957 - 0 [ 646.133290][ T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 646.168883][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.184705][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 58957 - 0 [ 646.193592][ T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 646.248788][T23796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4518'. [ 646.276895][T23798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4517'. [ 647.082607][T23832] netlink: 'syz.0.4527': attribute type 12 has an invalid length. [ 647.149661][T23837] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.4528'. [ 647.285325][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'. [ 647.495030][T23854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 647.662512][T23859] syzkaller0: entered promiscuous mode [ 647.689295][T23859] syzkaller0: entered allmulticast mode [ 648.389519][T23887] nbd1: detected capacity change from 0 to 96 [ 648.403896][T15630] block nbd1: Dead connection, failed to find a fallback [ 649.122400][T23924] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 649.301818][T23941] openvswitch: netlink: Missing valid actions attribute. [ 649.327169][T23941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.409584][T23943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.658899][T23954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 649.888108][T23971] xt_hashlimit: size too large, truncated to 1048576 [ 649.930060][T23974] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 650.176691][T23989] __nla_validate_parse: 6 callbacks suppressed [ 650.176710][T23989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4571'. [ 650.449009][T24002] ipvlan2: entered promiscuous mode [ 651.301980][T24051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4588'. [ 651.569548][T24056] netlink: 'syz.4.4590': attribute type 31 has an invalid length. [ 651.602231][T24058] netlink: 'syz.3.4591': attribute type 1 has an invalid length. [ 651.669659][T24058] 8021q: adding VLAN 0 to HW filter on device bond7 [ 651.714235][T24060] bond7: up delay (979) is not a multiple of miimon (100), value rounded to 900 ms [ 651.724615][T24060] bond7: entered allmulticast mode [ 651.730821][T24061] bond7: up delay (979) is not a multiple of miimon (100), value rounded to 900 ms [ 652.236898][T24079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4595'. [ 652.276128][T24083] netlink: 'syz.1.4597': attribute type 1 has an invalid length. [ 652.357977][T24083] bond7: entered promiscuous mode [ 652.364313][T24083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 652.743601][T24105] vti0: entered promiscuous mode [ 652.750199][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4601'. [ 652.769252][T24103] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4601'. [ 652.769272][T24105] vti0: entered allmulticast mode [ 652.809859][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 652.825038][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4600'. [ 653.120155][T24127] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4608'. [ 653.185902][T24135] bridge_slave_0: left allmulticast mode [ 653.187195][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'. [ 653.214989][T24135] bridge_slave_0: left promiscuous mode [ 653.219391][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'. [ 653.237021][T24135] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.532761][T24135] bond0: (slave bond_slave_0): Releasing backup interface [ 653.553729][T24135] bond0: (slave bond_slave_1): Releasing backup interface [ 653.595884][T24135] team_slave_0: left promiscuous mode [ 653.703885][T24135] team0: Port device team_slave_0 removed [ 653.718684][T24135] team_slave_1: left promiscuous mode [ 653.899240][T24135] team0: Port device team_slave_1 removed [ 653.920018][T24135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.940657][T24135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.960195][T24135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 654.294742][T24162] erspan0: entered promiscuous mode [ 654.689012][T24174] syzkaller0: entered promiscuous mode [ 654.694656][T24174] syzkaller0: entered allmulticast mode [ 655.435966][T24200] __nla_validate_parse: 2 callbacks suppressed [ 655.435985][T24200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4629'. [ 655.469194][T24200] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4629'. [ 655.530595][T24204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.539845][T24205] netlink: 'syz.4.4629': attribute type 1 has an invalid length. [ 655.547743][T24205] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4629'. [ 657.325427][T24212] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 657.357170][T24212] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 657.391710][T24212] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 657.446367][T24226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4637'. [ 657.481710][T24225] netlink: 'syz.4.4636': attribute type 1 has an invalid length. [ 657.567609][T24225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 657.587434][T24231] netlink: 47 bytes leftover after parsing attributes in process `syz.2.4638'. [ 657.613518][T24229] bond5 (unregistering): Released all slaves [ 657.630629][T24233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.019912][T24254] netlink: 'syz.0.4643': attribute type 8 has an invalid length. [ 658.042522][T24254] netlink: 'syz.0.4643': attribute type 4 has an invalid length. [ 658.087830][ T30] audit: type=1107 audit(1776520978.430:7): pid=24253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 658.373993][T24281] netlink: 20116 bytes leftover after parsing attributes in process `syz.2.4649'. [ 658.428536][T24279] vlan1: entered promiscuous mode [ 658.550247][T24284] vlan0: entered promiscuous mode [ 658.555556][T24284] geneve1: entered promiscuous mode [ 658.561452][T24284] vlan0: entered allmulticast mode [ 658.566743][T24284] geneve1: entered allmulticast mode [ 658.798159][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4653'. [ 658.873024][ T5142] block nbd0: Receive control failed (result -1) [ 658.918263][T24293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4653'. [ 658.952202][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4653'. [ 659.088862][T24307] netlink: 'syz.1.4656': attribute type 1 has an invalid length. [ 659.097721][T24307] netlink: 'syz.1.4656': attribute type 2 has an invalid length. [ 659.117139][T24307] netlink: 'syz.1.4656': attribute type 1 has an invalid length. [ 659.150366][T24311] netlink: 'syz.2.4657': attribute type 2 has an invalid length. [ 659.159000][T24307] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4656'. [ 659.185219][T24311] !¼Þ: entered promiscuous mode [ 659.407245][T24329] netlink: 'syz.3.4662': attribute type 18 has an invalid length. [ 659.438962][T24329] bond8: Unable to set down delay as MII monitoring is disabled [ 659.448931][T24329] bond8 (unregistering): Released all slaves [ 659.466733][T24331] sctp: [Deprecated]: syz.4.4660 (pid 24331) Use of int in max_burst socket option deprecated. [ 659.466733][T24331] Use struct sctp_assoc_value instead [ 660.005305][T24362] netlink: 'syz.2.4670': attribute type 1 has an invalid length. [ 660.148595][T24362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.189226][T24372] x_tables: duplicate underflow at hook 1 [ 660.215156][T24367] bond4: (slave gretap1): making interface the new active one [ 660.218402][T24372] x_tables: duplicate underflow at hook 3 [ 660.243117][T24367] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 660.269482][T24372] x_tables: duplicate underflow at hook 1 [ 660.352252][T24370] bond4 (unregistering): (slave gretap1): Releasing active interface [ 660.404827][T24370] bond4 (unregistering): Released all slaves [ 660.526653][T24354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.538795][T24388] __nla_validate_parse: 5 callbacks suppressed [ 660.538811][T24388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4676'. [ 660.555108][T24354] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.587984][T24354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 660.643642][T24388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4676'. [ 660.760624][T24393] Cannot find add_set index 2 as target [ 661.196255][T24414] netlink: 'syz.1.4683': attribute type 12 has an invalid length. [ 661.382441][T24422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4687'. [ 661.413319][T24422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4687'. [ 661.448552][T24426] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.4688'. [ 661.633457][T24438] sctp: [Deprecated]: syz.3.4691 (pid 24438) Use of int in maxseg socket option. [ 661.633457][T24438] Use struct sctp_assoc_value instead [ 661.657087][T24438] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4691'. [ 661.841324][T24445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4693'. [ 662.331366][T24453] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4694'. [ 662.829983][T24483] syzkaller0: entered promiscuous mode [ 662.839201][T24483] syzkaller0: entered allmulticast mode [ 662.943245][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 662.954014][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 662.960932][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 662.967822][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 662.974688][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 662.981542][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 662.988375][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 662.995259][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 663.002172][T24487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 663.445379][T24497] x_tables: duplicate underflow at hook 2 [ 663.471919][T24498] x_tables: duplicate underflow at hook 2 [ 663.582857][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4709'. [ 663.804814][T24516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4713'. [ 663.839893][T24514] syzkaller0: entered promiscuous mode [ 663.867041][T24514] syzkaller0: entered allmulticast mode [ 664.994740][T24582] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 665.134051][T24582] 8021q: adding VLAN 0 to HW filter on device bond4 [ 665.305310][T24585] bond4: (slave veth7): Enslaving as an active interface with a down link [ 665.417874][T24586] bond4: (slave veth9): Enslaving as an active interface with a down link [ 665.477395][T24582] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 665.645748][T24596] __nla_validate_parse: 2 callbacks suppressed [ 665.645768][T24596] netlink: 656 bytes leftover after parsing attributes in process `syz.1.4733'. [ 665.762172][ T30] audit: type=1107 audit(1776520986.110:8): pid=24600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 665.762610][T24601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4736'. [ 665.816635][T24601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4736'. [ 666.005140][T24617] netlink: 'syz.2.4738': attribute type 1 has an invalid length. [ 666.146251][T24617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.270193][T24626] x_tables: unsorted entry at hook 2 [ 666.509641][T24631] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4742'. [ 666.747982][T24643] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4744'. [ 666.770950][T24644] batadv_slave_0: Caught tx_queue_len zero misconfig [ 666.928097][T24650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.955362][T24653] xfrm0: entered allmulticast mode [ 666.981913][T24653] net_ratelimit: 184 callbacks suppressed [ 666.981931][T24653] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 667.264272][T24663] netlink: 'syz.0.4751': attribute type 3 has an invalid length. [ 667.437574][T24670] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 667.616318][T24676] bridge0: port 3(syz_tun) entered blocking state [ 667.629686][T24676] bridge0: port 3(syz_tun) entered disabled state [ 667.641065][T24676] syz_tun: entered allmulticast mode [ 667.667197][T24676] syz_tun: entered promiscuous mode [ 667.686273][T24676] bridge0: port 3(syz_tun) entered blocking state [ 667.692892][T24676] bridge0: port 3(syz_tun) entered forwarding state [ 667.922544][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4757'. [ 667.972365][T24691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4757'. [ 668.880763][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4766'. [ 668.920708][T24732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4766'. [ 669.465469][T24763] netlink: 'syz.1.4774': attribute type 1 has an invalid length. [ 669.540714][T24763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4774'. [ 669.784560][T24786] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 669.912888][T24792] tipc: Enabled bearer , priority 0 [ 669.960745][T24792] syzkaller0: entered promiscuous mode [ 669.966483][T24792] syzkaller0: entered allmulticast mode [ 669.973048][T24792] tipc: Resetting bearer [ 670.171183][T24793] ip6tnl3: entered allmulticast mode [ 670.235554][T24791] tipc: Resetting bearer [ 672.297711][T24791] tipc: Disabling bearer [ 672.312914][T24809] wg2: Caught tx_queue_len zero misconfig [ 672.319037][T24814] __nla_validate_parse: 2 callbacks suppressed [ 672.325349][T24814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4784'. [ 672.336727][T24805] syzkaller1: entered promiscuous mode [ 672.355069][T24805] syzkaller1: entered allmulticast mode [ 672.370647][ T5887] tipc: Node number set to 2452139882 [ 672.672382][ T5142] Bluetooth: hci1: link tx timeout [ 672.681650][ T5142] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 672.752516][T24842] bridge0: port 3(syz_tun) entered disabled state [ 672.787515][T24853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4795'. [ 672.925106][T24858] xt_hashlimit: size too large, truncated to 1048576 [ 672.983141][T15611] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.020960][ T7329] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.045366][ T7329] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.081222][ T7329] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.159825][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'. [ 673.465925][T24897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4807'. [ 673.500329][T24897] vlan1: entered allmulticast mode [ 673.507576][T24897] bond0: entered allmulticast mode [ 673.516545][T24897] bond_slave_0: entered allmulticast mode [ 673.554964][T24897] bond_slave_1: entered allmulticast mode [ 673.652289][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4806'. [ 673.687499][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4806'. [ 673.734191][T24900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4806'. [ 673.765459][T24915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4810'. [ 673.789412][T24917] netlink: 'syz.1.4811': attribute type 1 has an invalid length. [ 673.840638][T24917] bond9: entered promiscuous mode [ 673.846287][T24917] 8021q: adding VLAN 0 to HW filter on device bond9 [ 673.857332][T24920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4812'. [ 673.936827][T24921] 8021q: adding VLAN 0 to HW filter on device bond9 [ 673.954699][T24921] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 673.977071][T24921] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 674.010853][T24921] bond9: (slave vti0): making interface the new active one [ 674.029179][T24921] vti0: entered promiscuous mode [ 674.041599][T24921] bond9: (slave vti0): Enslaving as an active interface with an up link [ 674.157229][T24928] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4814'. [ 674.204820][T24930] netlink: 'syz.0.4815': attribute type 1 has an invalid length. [ 674.231061][T24930] bond5: entered promiscuous mode [ 674.236546][T24930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 674.264638][T24930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 674.274644][T24930] bond5: (slave bond6): making interface the new active one [ 674.282326][T24930] bond6: entered promiscuous mode [ 674.288047][T24930] bond5: (slave bond6): Enslaving as an active interface with an up link [ 674.409497][ T5887] IPVS: starting estimator thread 0... [ 674.519202][T24936] IPVS: using max 31 ests per chain, 74400 per kthread [ 674.691193][T24946] netlink: 'syz.0.4819': attribute type 1 has an invalid length. [ 674.735153][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 676.456659][T24895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.700456][T24953] netlink: 'syz.2.4821': attribute type 4 has an invalid length. [ 676.725122][T24954] syzkaller0: entered promiscuous mode [ 676.731913][T24954] syzkaller0: entered allmulticast mode [ 677.275477][T24995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.383883][T24999] netlink: 'syz.0.4834': attribute type 1 has an invalid length. [ 677.451149][T24999] veth11: entered allmulticast mode [ 677.465603][T24999] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 677.735714][T25013] __nla_validate_parse: 6 callbacks suppressed [ 677.735732][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 677.944577][T25021] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4840'. [ 677.966242][T25022] bond5: option resend_igmp: invalid value (2878) [ 677.977960][T25022] bond5: option resend_igmp: allowed values 0 - 255 [ 677.995108][T25022] bond5 (unregistering): Released all slaves [ 678.254965][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4843'. [ 678.694341][T25046] syzkaller0: entered promiscuous mode [ 678.705361][T25046] syzkaller0: entered allmulticast mode [ 678.880621][T25051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4852'. [ 679.060462][T25054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4853'. [ 679.779915][T25086] netlink: 'syz.4.4863': attribute type 1 has an invalid length. [ 679.787888][T25086] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4863'. [ 679.799315][T25086] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4863'. [ 679.829819][T25086] netlink: 'syz.4.4863': attribute type 1 has an invalid length. [ 679.839653][T25086] netlink: 634 bytes leftover after parsing attributes in process `syz.4.4863'. [ 679.950031][T25102] netlink: 'syz.0.4868': attribute type 1 has an invalid length. [ 679.961681][T25102] netlink: 'syz.0.4868': attribute type 2 has an invalid length. [ 679.972780][T25102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4868'. [ 680.224330][T25125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4875'. [ 680.267939][T25127] netlink: 'syz.0.4872': attribute type 1 has an invalid length. [ 680.288259][T25127] netlink: 'syz.0.4872': attribute type 2 has an invalid length. [ 680.326557][T25129] sctp: [Deprecated]: syz.3.4877 (pid 25129) Use of int in max_burst socket option. [ 680.326557][T25129] Use struct sctp_assoc_value instead [ 680.518197][T25086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.528004][T25135] netem: incorrect ge model size [ 680.535622][T25135] netem: change failed [ 680.677856][T25157] macsec2: entered promiscuous mode [ 680.696598][T25157] vlan1: entered promiscuous mode [ 680.725567][T25157] vlan1: left promiscuous mode [ 680.779831][T14130] lec:lec_start_xmit: lec0:No lecd attached [ 681.127268][T25175] netlink: 'syz.0.4887': attribute type 1 has an invalid length. [ 681.137107][T25175] netlink: 'syz.0.4887': attribute type 1 has an invalid length. [ 681.145501][T25175] netlink: 'syz.0.4887': attribute type 1 has an invalid length. [ 681.153691][T25175] netlink: 'syz.0.4887': attribute type 1 has an invalid length. [ 681.168730][T25175] gre2: entered allmulticast mode [ 681.316894][T25179] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 683.454737][T25140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.694851][T25207] __nla_validate_parse: 5 callbacks suppressed [ 683.694870][T25207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4897'. [ 683.726858][T25210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4898'. [ 684.297072][T25241] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4906'. [ 684.734444][T25262] Cannot find add_set index 1 as target [ 684.786271][T25262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4909'. [ 684.828450][T25269] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4915'. [ 685.532588][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.711899][T25286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4921'. [ 685.789094][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 685.797141][ C1] lec:lec_tx_timeout: lec0 [ 685.801812][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 685.965793][T25299] validate_nla: 13 callbacks suppressed [ 685.965811][T25299] netlink: 'syz.2.4925': attribute type 4 has an invalid length. [ 686.522336][T25336] netlink: 'syz.1.4935': attribute type 21 has an invalid length. [ 686.620415][T25336] netlink: 'syz.1.4935': attribute type 1 has an invalid length. [ 686.650775][T25336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4935'. [ 687.183156][T25369] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4945'. [ 687.216889][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4945'. [ 687.226144][T25369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 687.476762][T25391] x_tables: duplicate underflow at hook 1 [ 687.765046][T25405] netlink: zone id is out of range [ 687.770475][T25405] netlink: get zone limit has 4 unknown bytes [ 687.870281][T25408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.953035][T25410] hsr_slave_1 (unregistering): left promiscuous mode [ 688.343027][T25419] ip6gre1: entered promiscuous mode [ 688.351802][T25419] ip6gre1: entered allmulticast mode [ 688.581583][T25431] 8021q: VLANs not supported on caif0 [ 688.717197][T25434] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 688.769910][T25434] bond5 (unregistering): Released all slaves [ 689.010412][T25448] __nla_validate_parse: 6 callbacks suppressed [ 689.010430][T25448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4970'. [ 689.725055][T25484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4978'. [ 690.058310][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'. [ 690.113035][T25508] sctp: [Deprecated]: syz.3.4982 (pid 25508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.113035][T25508] Use struct sctp_sack_info instead [ 690.172577][T25511] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4984'. [ 690.449915][T25521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 690.477667][T25521] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4986'. [ 690.547406][T25521] vlan5: entered allmulticast mode [ 690.571297][T25521] macvtap0: entered allmulticast mode [ 690.792208][T25528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4988'. [ 691.226236][T25550] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4996'. [ 691.383125][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5000'. [ 691.444290][T25563] bond5: option broadcast_neighbor: invalid value (30) [ 691.456967][T25563] bond5 (unregistering): Released all slaves [ 691.482258][T25566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5001'. [ 691.583634][T25574] syzkaller1: entered promiscuous mode [ 691.597005][T25574] syzkaller1: entered allmulticast mode [ 691.647944][T25576] macsec2: entered promiscuous mode [ 691.654071][T25576] macsec2: entered allmulticast mode [ 691.929060][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 691.937243][ C1] lec:lec_tx_timeout: lec0 [ 692.125046][T25606] netlink: 'syz.3.5014': attribute type 39 has an invalid length. [ 692.227483][T25610] netlink: 'syz.3.5014': attribute type 1 has an invalid length. [ 692.604918][T25616] tipc: Cannot configure node identity twice [ 693.527756][T25654] netlink: 'syz.3.5027': attribute type 61 has an invalid length. [ 693.580781][T25654] netlink: 'syz.3.5027': attribute type 251 has an invalid length. [ 693.861969][T25666] netlink: 'syz.2.5032': attribute type 1 has an invalid length. [ 693.928085][T25666] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 693.941379][T25666] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 694.007297][T25670] bond5: (slave bridge10): Enslaving as an active interface with a down link [ 694.169505][T25680] __nla_validate_parse: 11 callbacks suppressed [ 694.169524][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'. [ 694.472690][T25698] IPVS: ip_vs_edit_dest(): server weight less than zero [ 694.481142][T25698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5037'. [ 694.579287][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5041'. [ 694.609974][T25703] team3: entered promiscuous mode [ 694.615251][T25703] team3: entered allmulticast mode [ 694.621633][T25703] 8021q: adding VLAN 0 to HW filter on device team3 [ 694.629411][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5041'. [ 694.639954][T25703] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 694.678889][T25703] team4: entered promiscuous mode [ 694.684598][T25703] team4: entered allmulticast mode [ 694.701494][T25703] 8021q: adding VLAN 0 to HW filter on device team4 [ 695.327619][T25728] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5050'. [ 695.850066][T25739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.860724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.883779][T25745] netlink: 'syz.2.5054': attribute type 22 has an invalid length. [ 695.896789][T25745] netlink: 'syz.2.5054': attribute type 1 has an invalid length. [ 695.910830][T25745] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5054'. [ 696.088445][ T194] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.113196][ T194] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.175298][ T194] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.362628][ T194] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.497224][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5057'. [ 696.508808][T25771] geneve2: entered promiscuous mode [ 696.547906][ T8327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.577731][ T8327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.684935][ T8327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.710737][ T8327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.863907][T25795] netlink: 'syz.1.5065': attribute type 1 has an invalid length. [ 696.880701][T25797] netlink: 'syz.2.5064': attribute type 10 has an invalid length. [ 696.894316][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5064'. [ 696.932161][T25795] bond10: entered promiscuous mode [ 696.948382][T25795] 8021q: adding VLAN 0 to HW filter on device bond10 [ 697.209260][T25813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5066'. [ 697.544029][T25831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5073'. [ 697.738733][T25836] veth9: entered allmulticast mode [ 697.748983][T25836] bond11: (slave veth9): Enslaving as an active interface with an up link [ 697.762231][T25831] bond11 (unregistering): (slave veth9): Releasing backup interface [ 697.773261][T25831] bond11 (unregistering): Released all slaves [ 697.801862][T25840] netlink: 'syz.4.5076': attribute type 210 has an invalid length. [ 697.825460][T25842] nbd: must specify a size in bytes for the device [ 698.008973][T25851] netlink: 'syz.3.5080': attribute type 4 has an invalid length. [ 698.252617][T25866] xt_bpf: check failed: parse error [ 698.766084][T25906] netlink: 'syz.0.5093': attribute type 3 has an invalid length. [ 698.798913][T25906] netlink: 'syz.0.5093': attribute type 2 has an invalid length. [ 698.821672][T25911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.840271][T25906] netlink: 'syz.0.5093': attribute type 2 has an invalid length. [ 698.852025][T25911] hsr0: entered promiscuous mode [ 698.857034][T25911] hsr0: entered allmulticast mode [ 698.881281][T25911] hsr_slave_0: entered allmulticast mode [ 699.057463][T25924] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 699.197243][T25935] xt_hashlimit: size too large, truncated to 1048576 [ 699.264115][T25936] __nla_validate_parse: 12 callbacks suppressed [ 699.264133][T25936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5098'. [ 699.291438][T25936] openvswitch: netlink: Flow key attr not present in new flow. [ 699.532034][T25943] sit0: entered promiscuous mode [ 699.584489][T25943] netlink: 'syz.4.5101': attribute type 1 has an invalid length. [ 699.639103][T25943] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5101'. [ 700.040690][T25961] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5107'. [ 700.373895][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5109'. [ 700.778968][T25990] netlink: 'syz.4.5113': attribute type 21 has an invalid length. [ 700.995563][T25994] netlink: 'syz.2.5114': attribute type 10 has an invalid length. [ 701.017938][T25994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5114'. [ 701.102231][T25995] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 701.171748][T25993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.299552][T26045] syzkaller1: entered promiscuous mode [ 702.310652][T26045] syzkaller1: entered allmulticast mode [ 702.345201][T26045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5128'. [ 702.839526][T26054] netlink: 'syz.1.5132': attribute type 10 has an invalid length. [ 703.077614][T26066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5135'. [ 703.637373][T26102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5147'. [ 704.406628][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5156'. [ 704.450019][T26140] vlan4: entered allmulticast mode [ 704.536938][T26145] syzkaller0: entered promiscuous mode [ 704.558399][T26145] syzkaller0: entered allmulticast mode [ 704.691958][T26153] netlink: 'syz.1.5160': attribute type 12 has an invalid length. [ 705.035656][T26179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5165'. [ 705.585885][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5174'. [ 705.604179][T26197] bond6: option lacp_active: invalid value (8) [ 705.640706][T26197] bond6 (unregistering): Released all slaves [ 705.728887][T26205] tipc: Started in network mode [ 705.757760][T26205] tipc: Node identity 8666d11b270c, cluster identity 4711 [ 705.786259][T26205] tipc: Enabled bearer , priority 0 [ 705.814188][T26205] tipc: Resetting bearer [ 705.874849][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 705.899853][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 705.917772][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 705.933143][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 705.943614][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 705.953809][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 705.972793][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 705.983189][T26205] sit0: left promiscuous mode [ 706.062306][T26205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.126438][T26227] syzkaller1: entered promiscuous mode [ 706.138748][T26227] syzkaller1: entered allmulticast mode [ 706.237630][T26230] netlink: 'syz.1.5176': attribute type 1 has an invalid length. [ 706.249593][T26230] netlink: 'syz.1.5176': attribute type 1 has an invalid length. [ 706.403360][T26245] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 706.768720][T26262] 8021q: adding VLAN 0 to HW filter on device bond6 [ 706.828162][ T5879] tipc: Node number set to 2708132123 [ 707.076643][T26280] tipc: Enabled bearer , priority 0 [ 707.104664][T26280] syzkaller0: entered promiscuous mode [ 707.121709][T26280] syzkaller0: entered allmulticast mode [ 707.139835][T26280] tipc: Resetting bearer [ 707.280521][T26280] tipc: Resetting bearer [ 707.315420][T26280] tipc: Disabling bearer [ 709.044232][T26355] gtp0: entered promiscuous mode [ 709.084779][T26355] gtp0: entered allmulticast mode [ 709.111730][T26355] gtp1: entered promiscuous mode [ 709.125857][T26355] gtp1: entered allmulticast mode [ 709.191726][T26355] gtp2: entered promiscuous mode [ 709.197048][T26355] gtp2: entered allmulticast mode [ 709.245409][T26355] gtp3: entered promiscuous mode [ 709.262086][T26355] gtp3: entered allmulticast mode [ 709.307350][T26355] gtp4: entered promiscuous mode [ 709.326204][T26355] gtp4: entered allmulticast mode [ 709.358450][T26355] gtp5: entered promiscuous mode [ 709.374300][T26355] gtp5: entered allmulticast mode [ 709.442987][T26362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.451968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.493666][T26355] gtp6: entered promiscuous mode [ 709.506064][T26355] gtp6: entered allmulticast mode [ 709.537551][T26362] __nla_validate_parse: 16 callbacks suppressed [ 709.537586][T26362] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5214'. [ 709.567726][T26355] gtp7: entered promiscuous mode [ 709.581901][T26355] gtp7: entered allmulticast mode [ 709.590859][T26374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5214'. [ 709.615954][T26355] gtp8: entered promiscuous mode [ 709.621907][T26355] gtp8: entered allmulticast mode [ 709.741849][ T30] audit: type=1800 audit(1776521030.100:9): pid=26387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5220" name="memory.events" dev="tmpfs" ino=2188 res=0 errno=0 [ 709.767235][ T30] audit: type=1804 audit(1776521030.100:10): pid=26387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5220" name="/newroot/425/memory.events" dev="tmpfs" ino=2188 res=1 errno=0 [ 709.808331][T26374] 8021q: adding VLAN 0 to HW filter on device bond11 [ 709.878200][T26362] macsec1: entered allmulticast mode [ 709.916209][T26362] bond11: entered allmulticast mode [ 709.926678][T26362] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 709.937846][T26362] bond11: left allmulticast mode [ 710.286306][T26412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5226'. [ 710.347068][T26412] netlink: 121 bytes leftover after parsing attributes in process `syz.2.5226'. [ 710.661449][T26417] geneve3: entered promiscuous mode [ 710.681886][ T194] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.705858][ T194] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.718866][T26423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5230'. [ 710.750132][ T194] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.776272][ T194] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.000144][T26426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.096997][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5231'. [ 711.457393][T26431] syzkaller1: entered promiscuous mode [ 711.471925][T26431] syzkaller1: entered allmulticast mode [ 711.552332][T26434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5232'. [ 711.764285][T26457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5240'. [ 711.792879][T26457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5240'. [ 711.908578][T26457] veth8: entered allmulticast mode [ 712.224120][T26481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5248'. [ 712.248501][T26478] netlink: 'syz.4.5247': attribute type 1 has an invalid length. [ 712.774630][T26514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 712.810435][ T7979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 712.861908][ T7979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 713.162827][T26522] bond5: entered promiscuous mode [ 713.205460][T26522] bond5: entered allmulticast mode [ 713.230124][T26522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 713.714904][ T194] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 714.242784][T26593] netlink: 'syz.2.5277': attribute type 9 has an invalid length. [ 714.272443][T26593] netlink: 'syz.2.5277': attribute type 9 has an invalid length. [ 714.375852][T26597] pimreg: entered allmulticast mode [ 714.702438][T26620] __nla_validate_parse: 10 callbacks suppressed [ 714.702452][T26620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5285'. [ 714.730940][ T8325] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 714.757155][ T8325] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 714.909902][T26631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5290'. [ 714.970403][T26631] ip6gre2: entered promiscuous mode [ 714.979434][ T7979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.004206][T26631] ip6gre2: entered allmulticast mode [ 715.020777][ T8325] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 715.039051][ T8325] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 715.050649][ T7981] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 715.182160][T26650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'. [ 715.229163][T26650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5293'. [ 715.313761][T26650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'. [ 715.325141][T26660] lo speed is unknown, defaulting to 1000 [ 715.345742][T26650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5293'. [ 715.363096][T26660] lo speed is unknown, defaulting to 1000 [ 715.379238][ T7981] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 715.395360][T26660] lo speed is unknown, defaulting to 1000 [ 715.664810][T26682] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5304'. [ 715.859724][T26660] infiniband sqz0: set down [ 715.864447][ T7981] lo speed is unknown, defaulting to 1000 [ 715.874692][T26660] infiniband sqz0: added lo [ 715.951164][T26660] RDS/IB: sqz0: added [ 715.955360][T26660] smc: adding ib device sqz0 with port count 1 [ 715.962185][T26660] smc: ib device sqz0 port 1 has no pnetid [ 715.968473][ T7981] lo speed is unknown, defaulting to 1000 [ 715.976606][T26660] lo speed is unknown, defaulting to 1000 [ 716.106052][T26694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.540312][T26720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5315'. [ 716.791500][T26660] lo speed is unknown, defaulting to 1000 [ 716.890677][T26742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5322'. [ 717.114689][T26747] netlink: 'syz.4.5324': attribute type 30 has an invalid length. [ 717.441189][T26756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.463202][T26660] lo speed is unknown, defaulting to 1000 [ 717.565211][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5328'. [ 717.992347][T26660] lo speed is unknown, defaulting to 1000 [ 718.307920][T26789] tun0: tun_chr_ioctl cmd 1074812118 [ 718.330033][T26789] tun0: tun_chr_ioctl cmd 1074033169 [ 718.466392][T26792] netlink: 'syz.1.5337': attribute type 10 has an invalid length. [ 718.512716][T26792] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 718.538429][T26660] lo speed is unknown, defaulting to 1000 [ 718.541388][T26792] netlink: 'syz.1.5337': attribute type 27 has an invalid length. [ 718.809425][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 718.809443][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 718.841669][T26804] netlink: 'syz.4.5341': attribute type 1 has an invalid length. [ 718.889269][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 718.958377][T26804] 8021q: adding VLAN 0 to HW filter on device bond7 [ 719.023334][T26809] bond7: (slave geneve2): making interface the new active one [ 719.033299][T26809] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 719.043394][T26660] lo speed is unknown, defaulting to 1000 [ 719.044392][ T8327] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 719.107660][ T8327] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 719.137945][ T8327] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 719.171845][ T8327] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 719.256142][T26813] netlink: 'syz.1.5343': attribute type 1 has an invalid length. [ 719.274033][T26813] netlink: 'syz.1.5343': attribute type 1 has an invalid length. [ 719.299889][T26794] netlink: 'syz.0.5336': attribute type 3 has an invalid length. [ 719.556047][T26828] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 719.826462][T26844] netlink: 'syz.0.5352': attribute type 1 has an invalid length. [ 719.835034][T26844] netlink: 'syz.0.5352': attribute type 2 has an invalid length. [ 722.335034][T26824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.519893][T26887] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 722.677176][T26892] __nla_validate_parse: 7 callbacks suppressed [ 722.677198][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5366'. [ 722.721230][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5369'. [ 722.739740][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5369'. [ 722.760306][T26905] netlink: 'syz.2.5369': attribute type 12 has an invalid length. [ 722.771674][T26905] netlink: 'syz.2.5369': attribute type 11 has an invalid length. [ 723.027661][T26912] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 723.072805][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'. [ 723.113384][T26894] lo speed is unknown, defaulting to 1000 [ 723.122413][T26920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5372'. [ 723.144949][T26920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.614107][T26963] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5382'. [ 724.681704][T26971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5386'. [ 724.887751][T26989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5389'. [ 725.073200][T27000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5392'. [ 725.168239][T27003] lo speed is unknown, defaulting to 1000 [ 725.225899][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5395'. [ 725.243744][T27011] validate_nla: 1 callbacks suppressed [ 725.243761][T27011] netlink: 'syz.2.5395': attribute type 14 has an invalid length. [ 725.266119][T27011] netlink: 'syz.2.5395': attribute type 11 has an invalid length. [ 725.542286][T27022] openvswitch: netlink: Missing valid actions attribute. [ 725.552653][T27022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.955896][T27040] gtp1: entered promiscuous mode [ 725.995368][T27040] gtp1: entered allmulticast mode [ 726.078987][T27058] netlink: 'syz.2.5409': attribute type 1 has an invalid length. [ 726.353005][T27058] 8021q: adding VLAN 0 to HW filter on device bond7 [ 726.464318][T27059] bond7: (slave veth9): Enslaving as an active interface with a down link [ 726.489433][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 726.497295][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 726.623389][T27069] lo speed is unknown, defaulting to 1000 [ 727.073308][T27079] lo speed is unknown, defaulting to 1000 [ 727.276085][T27109] netlink: 'syz.0.5420': attribute type 22 has an invalid length. [ 727.538895][T27121] netlink: 'syz.3.5423': attribute type 1 has an invalid length. [ 727.573128][T27121] bond8: entered promiscuous mode [ 727.578667][T27121] 8021q: adding VLAN 0 to HW filter on device bond8 [ 727.586861][T27120] netlink: 'syz.0.5424': attribute type 3 has an invalid length. [ 727.601493][T27121] netlink: 'syz.3.5423': attribute type 21 has an invalid length. [ 727.616165][T27120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.633200][T27120] netlink: 'syz.0.5424': attribute type 4 has an invalid length. [ 727.651376][T27120] netlink: 'syz.0.5424': attribute type 4 has an invalid length. [ 727.683392][T27125] xt_l2tp: wrong L2TP version: 0 [ 727.689819][T27120] netlink: 'syz.0.5424': attribute type 4 has an invalid length. [ 727.960945][T27131] bond8: (slave bridge11): making interface the new active one [ 727.983949][T27131] bridge11: entered promiscuous mode [ 727.996495][T27131] bond8: (slave bridge11): Enslaving as an active interface with an up link [ 728.428104][T27142] ¾x9ÿ (unregistering): left allmulticast mode [ 728.437180][T27142] ¾x9ÿ (unregistering): left promiscuous mode [ 728.456605][T27142] bridge0: port 1(1¾x9ÿ) entered disabled state [ 728.718680][T27157] __nla_validate_parse: 15 callbacks suppressed [ 728.718701][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5431'. [ 728.748542][T27156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5431'. [ 728.841614][T27159] 8021q: adding VLAN 0 to HW filter on device bond9 [ 728.887079][T27167] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5434'. [ 728.928871][T27164] bond9: (slave gretap2): making interface the new active one [ 728.974558][T27164] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 729.220726][T27178] syzkaller1: entered promiscuous mode [ 729.241052][T27178] syzkaller1: entered allmulticast mode [ 729.412336][T27195] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.5443'. [ 730.031471][T27225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.478258][T27243] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5458'. [ 731.004042][T27264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5461'. [ 731.107912][T27273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5461'. [ 731.161331][T27266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5461'. [ 731.207690][T27264] 8021q: adding VLAN 0 to HW filter on device bond8 [ 731.645147][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5466'. [ 731.789472][T27306] lo speed is unknown, defaulting to 1000 [ 732.098371][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5473'. [ 732.124353][T27324] validate_nla: 5 callbacks suppressed [ 732.124370][T27324] netlink: 'syz.0.5473': attribute type 3 has an invalid length. [ 732.145918][T27323] x_tables: duplicate underflow at hook 2 [ 732.377587][T27343] tun0: tun_chr_ioctl cmd 2148553947 [ 733.090806][T27364] lo speed is unknown, defaulting to 1000 [ 733.376466][T27382] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20004 [ 733.730423][T27406] netlink: 'syz.1.5491': attribute type 4 has an invalid length. [ 733.746686][T27408] __nla_validate_parse: 3 callbacks suppressed [ 733.746703][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5489'. [ 733.750215][T27406] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5491'. [ 733.864811][T27406] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 733.944576][T27386] lo speed is unknown, defaulting to 1000 [ 734.035037][T27411] tipc: New replicast peer: 255.255.255.255 [ 734.042824][T27411] tipc: Enabled bearer , priority 10 [ 734.506558][T27435] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5499'. [ 734.654436][T27435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.690274][T27435] bond_slave_0: left allmulticast mode [ 734.730304][T27435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.750391][T27435] bond_slave_1: left allmulticast mode [ 734.772667][T27435] bond0 (unregistering): Released all slaves [ 734.876807][T27442] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5501'. [ 734.906501][T27437] netlink: 'syz.1.5500': attribute type 1 has an invalid length. [ 735.500607][ T30] audit: type=1107 audit(1776521055.860:11): pid=27455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 735.503108][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5506'. [ 735.529899][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5506'. [ 735.549707][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5506'. [ 736.027815][T27491] x_tables: duplicate underflow at hook 1 [ 736.633264][T27518] lo speed is unknown, defaulting to 1000 [ 736.651144][T27525] bpq0: left promiscuous mode [ 736.671051][T27525] bpq0: left allmulticast mode [ 736.682822][T27527] debugfs: 'netdev:syzkaller0' already exists in 'phy36' [ 737.474734][T27554] netlink: 'syz.3.5531': attribute type 13 has an invalid length. [ 737.504264][T27554] netlink: 'syz.3.5531': attribute type 17 has an invalid length. [ 737.626686][T27554] syz_tun: left promiscuous mode [ 737.724254][T27554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 737.775311][T27563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5531'. [ 737.908097][T27560] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 737.967573][T27552] lo speed is unknown, defaulting to 1000 [ 738.032770][T27560] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 738.310412][T27560] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 738.426742][T27560] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 738.805926][ T8323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 738.894379][T27589] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 738.972499][T27595] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5540'. [ 739.004741][T27595] netlink: 'syz.3.5540': attribute type 1 has an invalid length. [ 739.015611][T27595] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5540'. [ 739.041387][ T8323] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.206978][ T8323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.264123][ T8325] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 740.569201][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 740.929351][T27635] lo speed is unknown, defaulting to 1000 [ 740.965724][T27637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5551'. [ 742.439832][T27603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.489196][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 742.684395][T27655] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 742.737595][T27655] netlink: 'syz.4.5557': attribute type 1 has an invalid length. [ 742.940413][T27676] tipc: Trying to set illegal importance in message [ 743.106950][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'. [ 743.357044][T27702] netlink: 'syz.3.5573': attribute type 1 has an invalid length. [ 743.362569][T27704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5574'. [ 743.376285][T27702] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5573'. [ 743.378148][T27705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5572'. [ 743.396063][T27704] SET target dimension over the limit! [ 743.403257][T27706] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5574'. [ 743.419514][T27704] SET target dimension over the limit! [ 743.467113][T27700] veth15: entered promiscuous mode [ 743.702132][T27714] sock: sock_timestamping_bind_phc: sock not bind to device [ 743.890694][T27717] lo speed is unknown, defaulting to 1000 [ 744.243807][T27753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5586'. [ 744.499672][T27762] FAULT_INJECTION: forcing a failure. [ 744.499672][T27762] name failslab, interval 1, probability 0, space 0, times 0 [ 744.527714][T27762] CPU: 0 UID: 0 PID: 27762 Comm: syz.2.5589 Not tainted syzkaller #0 PREEMPT(full) [ 744.527743][T27762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 744.527757][T27762] Call Trace: [ 744.527766][T27762] [ 744.527775][T27762] dump_stack_lvl+0xe8/0x150 [ 744.527811][T27762] should_fail_ex+0x412/0x560 [ 744.527845][T27762] should_failslab+0xa8/0x100 [ 744.527869][T27762] __kmalloc_noprof+0xe8/0x760 [ 744.527900][T27762] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 744.527937][T27762] tomoyo_realpath_from_path+0xe3/0x5d0 [ 744.527976][T27762] ? tomoyo_domain+0xd7/0x130 [ 744.528016][T27762] ? tomoyo_path_number_perm+0x219/0x630 [ 744.528041][T27762] tomoyo_path_number_perm+0x246/0x630 [ 744.528069][T27762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 744.528093][T27762] ? __lock_acquire+0x6b5/0x2cf0 [ 744.528136][T27762] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 744.528183][T27762] ? __fget_files+0x2a/0x420 [ 744.528212][T27762] ? __fget_files+0x2a/0x420 [ 744.528236][T27762] ? __fget_files+0x3a0/0x420 [ 744.528259][T27762] ? __fget_files+0x2a/0x420 [ 744.528289][T27762] security_file_ioctl+0xc3/0x2a0 [ 744.528314][T27762] __se_sys_ioctl+0x47/0x170 [ 744.528334][T27762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.528356][T27762] do_syscall_64+0x15f/0xf80 [ 744.528382][T27762] ? clear_bhb_loop+0x40/0x90 [ 744.528407][T27762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.528427][T27762] RIP: 0033:0x7f92e519c819 [ 744.528447][T27762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.528465][T27762] RSP: 002b:00007f92e600e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.528488][T27762] RAX: ffffffffffffffda RBX: 00007f92e5415fa0 RCX: 00007f92e519c819 [ 744.528504][T27762] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 744.528517][T27762] RBP: 00007f92e600e090 R08: 0000000000000000 R09: 0000000000000000 [ 744.528530][T27762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.528543][T27762] R13: 00007f92e5416038 R14: 00007f92e5415fa0 R15: 00007ffec5395d18 [ 744.528576][T27762] [ 744.743193][T27762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 744.998398][T27771] xt_policy: output policy not valid in PREROUTING and INPUT [ 745.016762][T27770] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5592'. [ 745.067839][T27775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5592'. [ 745.077966][T27773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5591'. [ 745.156629][T27778] netlink: 'syz.4.5594': attribute type 11 has an invalid length. [ 745.159937][T27774] netlink: 'syz.3.5591': attribute type 9 has an invalid length. [ 745.203811][T27770] netlink: 'syz.0.5592': attribute type 1 has an invalid length. [ 745.378519][T27779] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 745.614013][T14130] lec:lec_start_xmit: lec0:No lecd attached [ 745.718442][T27801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5598'. [ 745.760318][T27791] team0: entered promiscuous mode [ 745.787878][T27791] team_slave_0: entered promiscuous mode [ 745.802126][T27791] team_slave_1: entered promiscuous mode [ 745.813111][T27791] syz_tun: entered promiscuous mode [ 745.840563][T27791] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 745.996455][T27807] netlink: 'syz.1.5599': attribute type 10 has an invalid length. [ 746.072880][T27815] netlink: 'syz.2.5600': attribute type 3 has an invalid length. [ 746.518981][T27812] netlink: zone id is out of range [ 746.524407][T27812] netlink: zone id is out of range [ 746.530883][T27812] netlink: zone id is out of range [ 746.536509][T27812] netlink: zone id is out of range [ 746.542634][T27812] netlink: zone id is out of range [ 746.547925][T27812] netlink: zone id is out of range [ 746.562106][T27812] netlink: zone id is out of range [ 746.575996][T27812] netlink: zone id is out of range [ 746.599963][T27812] netlink: zone id is out of range [ 746.615391][T27835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5606'. [ 746.834667][T27841] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 746.865869][T27841] bond0 (unregistering): Released all slaves [ 746.961113][T27843] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 747.139793][T27862] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 747.658596][T27843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.937908][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5620'. [ 747.957296][T27886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5618'. [ 747.977317][T27888] gre1: entered allmulticast mode [ 748.308202][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5625'. [ 748.324232][T27922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5625'. [ 749.051445][T27963] netlink: 'syz.0.5634': attribute type 1 has an invalid length. [ 750.629096][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 750.637162][ C1] lec:lec_tx_timeout: lec0 [ 750.641829][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 751.439281][T27933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.604993][T27978] __nla_validate_parse: 9 callbacks suppressed [ 751.605011][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5639'. [ 751.646378][T27981] net_ratelimit: 10 callbacks suppressed [ 751.646396][T27981] openvswitch: netlink: IPv4 tun info is not correct [ 751.674378][T27981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5640'. [ 751.697922][T27981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5640'. [ 751.968513][T27996] lo speed is unknown, defaulting to 1000 [ 752.128917][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 752.139438][T28012] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5648'. [ 752.149550][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 752.158923][T28012] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5648'. [ 752.170810][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 752.258358][T28013] bond0: option packets_per_slave: invalid value (1986356271) [ 752.269386][T28013] bond0: option packets_per_slave: allowed values 0 - 65535 [ 752.294355][T28013] bond0 (unregistering): Released all slaves [ 752.446543][T28000] lo speed is unknown, defaulting to 1000 [ 752.744393][T28043] netlink: 'syz.0.5656': attribute type 3 has an invalid length. [ 752.755972][T28043] netlink: 'syz.0.5656': attribute type 1 has an invalid length. [ 752.778600][T28043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5656'. [ 752.986600][T28045] syzkaller0: entered promiscuous mode [ 752.996652][T28045] syzkaller0: entered allmulticast mode [ 753.297774][T28062] netlink: 'syz.4.5661': attribute type 21 has an invalid length. [ 755.047412][T28062] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5661'. [ 755.064195][T28063] tipc: New replicast peer: 255.255.255.255 [ 755.084975][T28063] tipc: Enabled bearer , priority 10 [ 755.412590][T28085] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 755.423081][T28086] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 755.453983][T28088] netlink: 'syz.2.5669': attribute type 58 has an invalid length. [ 755.649102][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 755.657240][ C1] lec:lec_tx_timeout: lec0 [ 755.672508][T28103] team0: entered allmulticast mode [ 755.707045][T28103] team_slave_0: entered allmulticast mode [ 755.736306][T28103] team_slave_1: entered allmulticast mode [ 755.771946][T28103] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.811679][T28078] lo speed is unknown, defaulting to 1000 [ 756.741027][T28152] __nla_validate_parse: 3 callbacks suppressed [ 756.741058][T28152] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5686'. [ 756.866048][T28153] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5686'. [ 757.074628][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5690'. [ 757.090854][T28166] netlink: 'syz.4.5691': attribute type 1 has an invalid length. [ 757.123344][T28166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5691'. [ 757.176096][T28169] netlink: 'syz.4.5691': attribute type 1 has an invalid length. [ 757.305515][T28169] 8021q: adding VLAN 0 to HW filter on device bond9 [ 757.353720][T28176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5692'. [ 757.803398][T28200] netlink: 'syz.0.5697': attribute type 1 has an invalid length. [ 757.949343][T28200] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 757.984418][T28200] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 758.081928][T28206] bond8: (slave gretap1): making interface the new active one [ 758.091191][T28206] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 758.508359][T28235] xt_TCPMSS: Only works on TCP SYN packets [ 758.556878][T28239] netlink: 'syz.3.5710': attribute type 4 has an invalid length. [ 758.585169][T28240] netlink: 'syz.3.5710': attribute type 4 has an invalid length. [ 758.810880][T28255] netlink: 'syz.2.5713': attribute type 1 has an invalid length. [ 758.829163][T28255] netlink: 'syz.2.5713': attribute type 2 has an invalid length. [ 758.943178][T28257] bond0: (slave syz_tun): Releasing backup interface [ 758.981773][T28257] bridge_slave_1: left allmulticast mode [ 758.994165][T28257] bridge_slave_1: left promiscuous mode [ 759.000543][T28257] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.025523][T28257] bond0: (slave bond_slave_0): Releasing backup interface [ 759.036057][T28257] bond0: (slave bond_slave_1): Releasing backup interface [ 759.046620][T28257] team0: Failed to send options change via netlink (err -105) [ 759.055091][T28257] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 759.065294][T28257] team0: Port device team_slave_1 removed [ 759.073005][T28257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.081710][T28257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.090744][T28257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 759.108278][T28258] team0: Mode changed to "broadcast" [ 759.294887][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5719'. [ 759.306909][T28272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5719'. [ 759.348504][T28269] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5718'. [ 759.373631][T28269] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5718'. [ 759.396399][T28269] netlink: 'syz.0.5718': attribute type 1 has an invalid length. [ 759.700491][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5722'. [ 760.000838][T28311] lo speed is unknown, defaulting to 1000 [ 760.391043][T28328] IPVS: Unknown mcast interface: pim6reg [ 760.420200][T28330] pim6reg1: entered promiscuous mode [ 760.446437][T28330] pim6reg1: entered allmulticast mode [ 761.003161][T28348] syzkaller0: entered promiscuous mode [ 761.031247][T28348] syzkaller0: entered allmulticast mode [ 761.677541][T28371] lo speed is unknown, defaulting to 1000 [ 762.661962][T28401] tunl0: Caught tx_queue_len zero misconfig [ 762.690577][T28402] __nla_validate_parse: 2 callbacks suppressed [ 762.690594][T28402] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5757'. [ 762.972097][T28401] xt_hashlimit: size too large, truncated to 1048576 [ 763.043101][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5760'. [ 763.157951][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 763.216182][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 763.281004][T28420] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5761'. [ 763.316987][T28428] netlink: 'syz.1.5763': attribute type 1 has an invalid length. [ 763.341997][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 763.373456][T28428] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 763.442449][T28420] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5761'. [ 763.459975][T28428] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 763.466364][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 763.599759][T28437] bond12: (slave gretap1): making interface the new active one [ 763.608243][T28437] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 763.629962][T28447] netlink: 'syz.4.5766': attribute type 1 has an invalid length. [ 763.644013][T28441] macvlan1: entered promiscuous mode [ 763.649623][T28447] netlink: 'syz.4.5766': attribute type 2 has an invalid length. [ 763.661500][T28441] macvlan1: entered allmulticast mode [ 763.672747][T28441] bond12: entered promiscuous mode [ 763.678053][T28441] gretap1: entered promiscuous mode [ 763.685316][T28441] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 763.700444][T28441] bond12: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 763.722761][T28441] bond12: left promiscuous mode [ 763.727845][T28441] gretap1: left promiscuous mode [ 764.135519][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 764.152510][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 764.160714][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 764.181725][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 764.190881][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 764.323979][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5774'. [ 764.337913][T28462] lo speed is unknown, defaulting to 1000 [ 764.846390][T28484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5780'. [ 764.914300][T28484] ip6gre2: entered promiscuous mode [ 764.927572][T28484] ip6gre2: entered allmulticast mode [ 765.392755][T28462] chnl_net:caif_netlink_parms(): no params data found [ 765.641112][T28462] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.655521][T28462] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.671105][T28462] bridge_slave_0: entered allmulticast mode [ 765.694613][T28462] bridge_slave_0: entered promiscuous mode [ 765.715877][T28462] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.733614][T28462] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.749381][T28462] bridge_slave_1: entered allmulticast mode [ 765.757123][T28462] bridge_slave_1: entered promiscuous mode [ 765.875518][T28525] syzkaller0: entered promiscuous mode [ 765.892842][T28525] syzkaller0: entered allmulticast mode [ 765.911297][T28462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.926270][T28462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.249265][ T5835] Bluetooth: hci0: command tx timeout [ 768.329357][ T5835] Bluetooth: hci0: command tx timeout [ 768.702530][T28462] team0: Port device team_slave_0 added [ 768.729236][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 768.736909][T28462] team0: Port device team_slave_1 added [ 768.775643][T28539] x_tables: duplicate underflow at hook 2 [ 768.881404][T28462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.900841][T28462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.942007][T28462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.958837][T28537] lo speed is unknown, defaulting to 1000 [ 768.985369][T28462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.985817][T28550] __nla_validate_parse: 5 callbacks suppressed [ 768.985855][T28550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5799'. [ 769.001255][T28462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.037028][T28462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.193511][T28462] hsr_slave_0: entered promiscuous mode [ 769.210744][T28462] hsr_slave_1: entered promiscuous mode [ 769.365814][T28561] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5803'. [ 769.488396][T28545] lo speed is unknown, defaulting to 1000 [ 769.653529][T28570] syzkaller0: left promiscuous mode [ 769.662419][T28570] syzkaller0: left allmulticast mode [ 769.785540][T28578] syzkaller0: Caught tx_queue_len zero misconfig [ 769.809819][T28578] syzkaller0: entered promiscuous mode [ 769.815350][T28578] syzkaller0: entered allmulticast mode [ 770.409574][ T5835] Bluetooth: hci0: command tx timeout [ 770.417016][T28572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.512833][T28462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 770.554372][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.582587][T28462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 770.614938][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.640544][T28462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 770.671504][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 770.685897][T28462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 770.712651][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 770.886622][T28462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.975553][T28605] lo speed is unknown, defaulting to 1000 [ 770.984158][T28462] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.016363][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.023570][ T8327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.055893][T28611] netlink: 'syz.4.5814': attribute type 4 has an invalid length. [ 771.075416][T28615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5815'. [ 771.084583][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.084712][ T8327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.114016][T28611] netlink: 'syz.4.5814': attribute type 4 has an invalid length. [ 771.427891][T28628] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5818'. [ 771.483246][T28632] macvtap1: entered promiscuous mode [ 771.493937][T28632] macvtap1: entered allmulticast mode [ 771.709638][T28462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.753935][T28648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5821'. [ 772.022826][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5823'. [ 772.093149][T28462] veth0_vlan: entered promiscuous mode [ 772.141543][T28462] veth1_vlan: entered promiscuous mode [ 772.262585][T28462] veth0_macvtap: entered promiscuous mode [ 772.303784][T28462] veth1_macvtap: entered promiscuous mode [ 772.357704][T28462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.398541][T28462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.489917][ T5835] Bluetooth: hci0: command tx timeout [ 772.504226][ T8325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.526147][ T8325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.577426][ T8325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.596377][ T8325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.618763][T28665] lo speed is unknown, defaulting to 1000 [ 772.897645][T27291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.923666][T27291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.022538][T27291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.031986][T27291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.193482][T28672] lo speed is unknown, defaulting to 1000 [ 773.488774][T28668] lo speed is unknown, defaulting to 1000 [ 773.715886][T28693] lo speed is unknown, defaulting to 1000 [ 774.176775][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5833'. [ 774.535433][T28705] syzkaller0: left allmulticast mode [ 775.129160][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 775.205789][T28732] openvswitch: netlink: IP tunnel dst address not specified [ 775.371749][T28738] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5842'. [ 775.611335][T28748] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 775.768670][T28754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5848'. [ 775.810843][T28754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.975334][T28758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5849'. [ 776.007620][T28758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5849'. [ 776.547900][T28781] bridge0: port 3(syz_tun) entered blocking state [ 776.554542][T28781] bridge0: port 3(syz_tun) entered forwarding state [ 776.568732][T28781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.586590][T28781] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.620541][T28781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.677168][T28781] delete_channel: no stack [ 776.817790][T28791] netlink: 'syz.3.5857': attribute type 1 has an invalid length. [ 776.929235][T28802] netlink: 'syz.2.5862': attribute type 1 has an invalid length. [ 777.197374][T28814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5866'. [ 777.261862][T28817] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 777.275239][T28821] sctp: [Deprecated]: syz.0.5867 (pid 28821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 777.275239][T28821] Use struct sctp_sack_info instead [ 777.296687][T28817] bond9 (unregistering): Released all slaves [ 777.318177][T28821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5867'. [ 777.476714][T28825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5869'. [ 777.679351][T28833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5871'. [ 777.834121][T28835] lo speed is unknown, defaulting to 1000 [ 777.850966][T28842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5873'. [ 778.084945][T28851] netlink: 'syz.4.5877': attribute type 1 has an invalid length. [ 778.149210][T28854] batadv_slave_0: entered promiscuous mode [ 778.158456][T28857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.243769][T28854] batadv_slave_0: left promiscuous mode [ 778.292157][T28860] IPv6: NLM_F_CREATE should be specified when creating new route [ 778.812565][T28889] team0: entered allmulticast mode [ 778.819429][T28889] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 779.013940][T28894] lo speed is unknown, defaulting to 1000 [ 779.139142][T28901] syzkaller0: entered allmulticast mode [ 779.371027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.380188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.388853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.398104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.632709][T28907] lo speed is unknown, defaulting to 1000 [ 779.677387][T28918] __nla_validate_parse: 4 callbacks suppressed [ 779.677404][T28918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5897'. [ 779.703477][T28917] bond10: option lacp_active: invalid value (8) [ 779.711588][T28917] bond10 (unregistering): Released all slaves [ 779.748571][T28914] syzkaller1: entered promiscuous mode [ 779.754759][T28914] syzkaller1: entered allmulticast mode [ 779.800825][T28917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.292190][T28935] netlink: 'syz.3.5901': attribute type 1 has an invalid length. [ 780.341907][T28935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5901'. [ 780.457339][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.499457][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.508022][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.518812][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.527611][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.539320][T28945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.579159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.587719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.604365][T28951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.623204][T28951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.658812][T28943] netlink: 'syz.1.5903': attribute type 1 has an invalid length. [ 780.682039][T28943] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5903'. [ 781.193669][T28966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5908'. [ 781.933966][T28988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 781.952881][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5914'. [ 782.064601][T28994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5917'. [ 782.099169][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5917'. [ 782.136858][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5917'. [ 782.161559][T28997] gretap1: entered promiscuous mode [ 782.167984][T28997] gretap1: entered allmulticast mode [ 782.240353][T29001] lo speed is unknown, defaulting to 1000 [ 782.248255][T29007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5921'. [ 782.475814][T29017] netlink: 'syz.2.5923': attribute type 10 has an invalid length. [ 783.672241][T29051] bond10: option resend_igmp: invalid value (2878) [ 783.689933][T29051] bond10: option resend_igmp: allowed values 0 - 255 [ 783.795866][T29051] bond10 (unregistering): Released all slaves [ 784.189757][T29073] netlink: 'syz.3.5936': attribute type 3 has an invalid length. [ 784.268529][T29078] batadv_slave_1: entered promiscuous mode [ 784.293321][T29071] lo speed is unknown, defaulting to 1000 [ 784.417802][T29077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.434767][T29077] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.445947][T29082] netlink: 'syz.3.5939': attribute type 29 has an invalid length. [ 785.185625][T29108] dvmrp1: entered allmulticast mode [ 785.203790][T29076] batadv_slave_1: left promiscuous mode [ 785.338194][T29128] __nla_validate_parse: 5 callbacks suppressed [ 785.338211][T29128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5948'. [ 785.392327][T29128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5948'. [ 785.565532][T29136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.635364][T29136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.637322][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5951'. [ 786.099745][T29155] lo speed is unknown, defaulting to 1000 [ 786.435961][T29165] netlink: 'syz.4.5958': attribute type 1 has an invalid length. [ 786.463495][T29165] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5958'. [ 786.488266][T29167] netlink: 'syz.2.5959': attribute type 11 has an invalid length. [ 786.512031][T29167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5959'. [ 786.629186][T29167] bond1: option tlb_dynamic_lb: invalid value (6) [ 786.666151][T29167] bond1 (unregistering): Released all slaves [ 786.981101][T29178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.020385][T29179] netlink: 'syz.2.5960': attribute type 33 has an invalid length. [ 787.339727][T29187] ip6gre1: entered promiscuous mode [ 787.370143][T29189] lo: Caught tx_queue_len zero misconfig [ 787.385557][T29189] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 787.432258][T29189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5963'. [ 787.453749][T29189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5963'. [ 787.508341][T29190] macsec1: entered promiscuous mode [ 787.529193][T29190] vlan5: entered promiscuous mode [ 787.541498][T29190] team0: entered promiscuous mode [ 787.552762][T29190] team_slave_1: entered promiscuous mode [ 787.570160][T29190] vlan5: left promiscuous mode [ 787.580690][T29190] team0: left promiscuous mode [ 787.591376][T29190] team_slave_1: left promiscuous mode [ 787.626375][T29189] 8021q: VLANs not supported on ip_vti0 [ 787.838642][T29197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5966'. [ 788.099859][T29211] net_ratelimit: 22 callbacks suppressed [ 788.101143][T29211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.148056][T29211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.167599][T29211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.210261][T29213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.236965][T29213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.861733][T29217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.885145][T29217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.250028][T29251] lo speed is unknown, defaulting to 1000 [ 789.407598][T29263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5975'. [ 790.362660][T29246] lo speed is unknown, defaulting to 1000 [ 790.609985][T29291] netlink: 'syz.4.5984': attribute type 1 has an invalid length. [ 790.902225][T29294] bond10: (slave bridge4): Enslaving as a backup interface with an up link [ 790.956875][T29291] bond10: (slave bridge5): Enslaving as a backup interface with a down link [ 791.144629][T29310] netlink: 'syz.4.5988': attribute type 12 has an invalid length. [ 791.174357][T29310] netlink: 'syz.4.5988': attribute type 29 has an invalid length. [ 791.190833][T29310] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5988'. [ 791.200633][T29310] netlink: 'syz.4.5988': attribute type 1 has an invalid length. [ 791.208452][T29310] netlink: 47 bytes leftover after parsing attributes in process `syz.4.5988'. [ 791.453240][T29321] netlink: 'syz.3.5990': attribute type 16 has an invalid length. [ 791.466076][T29321] netlink: 'syz.3.5990': attribute type 17 has an invalid length. [ 791.700725][T29331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.728972][T29335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.401316][T29362] netlink: 'syz.0.6000': attribute type 15 has an invalid length. [ 792.421759][T29362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 792.431953][T29362] netlink: 'syz.0.6000': attribute type 15 has an invalid length. [ 792.440476][T29362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6000'. [ 792.536810][T29365] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6001'. [ 792.551057][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6001'. [ 792.561738][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6001'. [ 792.720734][T29373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 793.081309][T29391] netlink: zone id is out of range [ 793.103025][T29386] lo speed is unknown, defaulting to 1000 [ 793.137563][T29391] netlink: 'syz.3.6008': attribute type 2 has an invalid length. [ 793.184544][T29391] : entered promiscuous mode [ 793.185140][T29393] netlink: 'syz.4.6009': attribute type 2 has an invalid length. [ 793.265178][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6009'. [ 793.338612][T29401] net_ratelimit: 362 callbacks suppressed [ 793.338629][T29401] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 793.997827][T29442] nbd: must specify at least one socket [ 794.180160][T29447] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6024'. [ 794.263631][T29445] syzkaller0: entered promiscuous mode [ 794.270108][T29445] syzkaller0: entered allmulticast mode [ 794.295696][T29451] openvswitch: netlink: IP tunnel dst address not specified [ 794.724878][T29456] lo speed is unknown, defaulting to 1000 [ 795.545653][T29478] lo speed is unknown, defaulting to 1000 [ 795.702491][T29511] 8021q: VLANs not supported on ip_vti0 [ 795.749347][T29516] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 795.970946][T29498] lo speed is unknown, defaulting to 1000 [ 796.212774][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.227570][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.237409][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.256346][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.264183][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.393978][T17349] bridge0: port 3(syz_tun) entered disabled state [ 796.440520][T17349] syz_tun (unregistering): left allmulticast mode [ 796.447026][T17349] syz_tun (unregistering): left promiscuous mode [ 796.454149][T17349] bridge0: port 3(syz_tun) entered disabled state [ 796.508418][T29532] lo speed is unknown, defaulting to 1000 [ 796.565025][ T194] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 796.655595][ T194] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 796.719679][ T194] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 796.985125][ T194] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 797.174471][T29538] __nla_validate_parse: 6 callbacks suppressed [ 797.174496][T29538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.366388][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.382270][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.402096][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.418898][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.428520][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.441488][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.469195][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.492400][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.513124][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6049'. [ 797.850673][T29547] validate_nla: 8 callbacks suppressed [ 797.850694][T29547] netlink: 'syz.0.6051': attribute type 1 has an invalid length. [ 798.007382][T29547] 8021q: adding VLAN 0 to HW filter on device bond9 [ 798.206822][ T194] bridge_slave_1: left allmulticast mode [ 798.212797][ T194] bridge_slave_1: left promiscuous mode [ 798.220706][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.235326][ T194] bridge_slave_0: left allmulticast mode [ 798.241565][ T194] bridge_slave_0: left promiscuous mode [ 798.248558][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.278365][ T194] pimreg: left allmulticast mode [ 798.344352][ T5835] Bluetooth: hci4: command tx timeout [ 798.455890][ T194] bond9 (unregistering): (slave vti0): Releasing backup interface [ 798.473306][ T194] vti0 (unregistering): left promiscuous mode [ 798.514788][ T194] bond6 (unregistering): (slave erspan1): Releasing active interface [ 798.526863][ T194] erspan1 (unregistering): left promiscuous mode [ 798.557514][ T194] bond12 (unregistering): (slave gretap1): Releasing active interface [ 798.607151][ T194] bond1 (unregistering): (slave geneve2): Releasing active interface [ 798.693821][ T194] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 798.702232][ T194] bridge1 (unregistering): left promiscuous mode [ 799.039966][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.050891][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.060810][ T194] bond0 (unregistering): Released all slaves [ 799.075597][ T194] bond1 (unregistering): Released all slaves [ 799.097802][ T194] bond2 (unregistering): Released all slaves [ 799.125434][ T194] bond3 (unregistering): Released all slaves [ 799.148747][ T194] bond4 (unregistering): Released all slaves [ 799.170274][ T194] bond5 (unregistering): Released all slaves [ 799.193383][ T194] bond6 (unregistering): Released all slaves [ 799.217492][ T194] bond7 (unregistering): Released all slaves [ 799.242816][ T194] bond8 (unregistering): Released all slaves [ 799.264843][ T194] bond9 (unregistering): Released all slaves [ 799.287773][ T194] bond10 (unregistering): Released all slaves [ 799.310990][ T194] bond11 (unregistering): Released all slaves [ 799.334922][ T194] bond12 (unregistering): Released all slaves [ 799.429689][T29581] team_slave_1: Caught tx_queue_len zero misconfig [ 799.826972][T29585] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.834633][T29585] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.917536][T29598] netlink: 'syz.3.6061': attribute type 5 has an invalid length. [ 799.973221][T29585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.998957][T29585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.167921][T29585] gretap1: left promiscuous mode [ 800.176121][T29585] gretap1: left allmulticast mode [ 800.188791][ T194] tipc: Left network mode [ 800.263875][ T8323] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.304160][ T8323] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.357376][ T8323] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.376300][ T8323] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.409220][ T5835] Bluetooth: hci4: command tx timeout [ 800.479925][T29532] chnl_net:caif_netlink_parms(): no params data found [ 800.712992][T29622] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 800.913176][T29617] syzkaller0: entered promiscuous mode [ 800.928826][T29617] syzkaller0: entered allmulticast mode [ 801.036352][T29623] lo speed is unknown, defaulting to 1000 [ 801.106129][T29532] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.141292][T29532] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.157756][T29532] bridge_slave_0: entered allmulticast mode [ 801.183575][T29532] bridge_slave_0: entered promiscuous mode [ 801.248692][T29532] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.270371][T29532] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.288220][T29532] bridge_slave_1: entered allmulticast mode [ 801.302956][T29532] bridge_slave_1: entered promiscuous mode [ 801.508950][T29532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.553490][T29532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.722617][T29532] team0: Port device team_slave_0 added [ 801.760797][T29532] team0: Port device team_slave_1 added [ 802.052861][ T5486] 8021q: adding VLAN 0 to HW filter on device eth1 [ 802.070186][T29532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.103235][T29532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.143663][T29532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.478929][ T194] team0 (unregistering): Port device team_slave_1 removed [ 802.489153][ T5835] Bluetooth: hci4: command tx timeout [ 802.753181][T29532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.764537][T29532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.821503][T29532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.150838][T29532] hsr_slave_0: entered promiscuous mode [ 803.157587][T29532] hsr_slave_1: entered promiscuous mode [ 803.211189][T29532] debugfs: 'hsr0' already exists in 'hsr' [ 803.226342][T29532] Cannot create hsr debugfs directory [ 803.389198][ T194] IPVS: stop unused estimator thread 0... [ 804.112837][T29693] __nla_validate_parse: 269 callbacks suppressed [ 804.112857][T29693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6079'. [ 804.147279][T29691] lo speed is unknown, defaulting to 1000 [ 804.569382][ T5835] Bluetooth: hci4: command tx timeout [ 805.088776][T29706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6081'. [ 805.113331][T29532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.141857][T29725] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6081'. [ 805.177956][T29730] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 805.191799][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.357676][T29745] netlink: 'syz.3.6087': attribute type 28 has an invalid length. [ 805.418464][T29532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.453044][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.480135][T29532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.496326][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6088'. [ 805.509834][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.532217][T29748] netlink: 'syz.4.6088': attribute type 8 has an invalid length. [ 805.540392][T29532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.548552][T29748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'. [ 805.572076][T29532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.657776][T29748] netlink: 'syz.4.6088': attribute type 8 has an invalid length. [ 805.681458][T29748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'. [ 805.755345][T29752] bond10: entered promiscuous mode [ 805.763696][T29752] bond10: entered allmulticast mode [ 805.949718][T29773] lo speed is unknown, defaulting to 1000 [ 805.978822][T29773] lo speed is unknown, defaulting to 1000 [ 806.035354][T29773] lo speed is unknown, defaulting to 1000 [ 806.073339][T29779] netlink: 'syz.2.6092': attribute type 13 has an invalid length. [ 806.093855][T29532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.111452][T29773] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 806.297487][T29773] lo speed is unknown, defaulting to 1000 [ 806.337356][T29532] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.378091][T29773] lo speed is unknown, defaulting to 1000 [ 806.393632][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.400836][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.456437][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.463742][ T8323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.486122][T29773] lo speed is unknown, defaulting to 1000 [ 806.500591][T29773] lo speed is unknown, defaulting to 1000 [ 806.570170][T29773] lo speed is unknown, defaulting to 1000 [ 806.583258][T29791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6094'. [ 806.601357][T29791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6094'. [ 806.610452][T29773] lo speed is unknown, defaulting to 1000 [ 806.616798][T29773] lo speed is unknown, defaulting to 1000 [ 806.790100][T29805] openvswitch: netlink: Flow actions attr not present in new flow. [ 806.823455][T29805] netlink: 'syz.3.6096': attribute type 1 has an invalid length. [ 807.162755][T29838] sctp: [Deprecated]: syz.2.6101 (pid 29838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.162755][T29838] Use struct sctp_sack_info instead [ 807.280573][T29532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.402768][T29532] veth0_vlan: entered promiscuous mode [ 807.436889][T29532] veth1_vlan: entered promiscuous mode [ 807.538717][T29532] veth0_macvtap: entered promiscuous mode [ 807.569836][T29532] veth1_macvtap: entered promiscuous mode [ 807.640752][T29532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.670774][T29532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.699791][ T8325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.728175][ T8325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.746465][ T8325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.780990][ T8325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.952692][ T8325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.995855][ T8325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.098552][ T8325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.133034][ T8325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.413907][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.427342][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 808.430561][ T31] INFO: task udevd:15630 blocked for more than 143 seconds. [ 808.475908][ T31] Not tainted syzkaller #0 [ 808.497029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.506232][T29893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6115'. [ 808.522057][ T31] task:udevd state:D stack:22464 pid:15630 tgid:15630 ppid:5191 task_flags:0x400140 flags:0x00080000 [ 808.535150][ T31] Call Trace: [ 808.540031][ T31] [ 808.543089][ T31] __schedule+0x17b4/0x5680 [ 808.547872][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 808.555491][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 808.563598][ T31] ? __pfx___schedule+0x10/0x10 [ 808.568582][ T31] ? schedule+0x90/0x360 [ 808.574515][ T31] schedule+0x164/0x360 [ 808.578782][ T31] schedule_timeout+0x158/0x2c0 [ 808.584074][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 808.591049][ T31] ? __pfx_process_timeout+0x10/0x10 [ 808.596727][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 808.602968][ T31] ? prepare_to_wait_event+0x436/0x480 [ 808.608574][ T31] nbd_queue_rq+0x857/0x1100 [ 808.616724][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 808.626618][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 808.636800][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 808.643388][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 808.650330][ T31] ? sbitmap_get+0x229/0x390 [ 808.655043][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 808.661788][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 808.667707][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 808.674663][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 808.681981][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 808.687838][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 808.694273][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 808.701093][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 808.706702][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 808.712749][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 808.718044][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 808.723622][ T31] ? blk_mq_dispatch_list+0x1f0/0xe10 [ 808.729842][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 808.735706][ T31] ? rcu_is_watching+0x15/0xb0 [ 808.741366][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 808.746868][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 808.752321][ T31] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 808.757665][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 808.763665][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 808.768666][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 808.774578][ T31] __submit_bio+0x28d/0x580 [ 808.779217][ T31] ? __pfx___submit_bio+0x10/0x10 [ 808.784297][ T31] ? bio_associate_blkg+0x6d/0x230 [ 808.789665][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 808.795378][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 808.801987][ T31] block_read_full_folio+0x7b7/0x830 [ 808.807300][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 808.819064][ T31] filemap_read_folio+0x137/0x3b0 [ 808.824300][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 808.830199][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 808.835920][ T31] ? filemap_add_folio+0x356/0x530 [ 808.841417][ T31] do_read_cache_folio+0x358/0x590 [ 808.846598][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 808.852400][ T31] read_part_sector+0xb6/0x2b0 [ 808.857203][ T31] adfspart_check_ICS+0xb1/0x960 [ 808.862214][ T31] ? seq_buf_printf+0x212/0x2d0 [ 808.867096][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 808.873580][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 808.879521][ T31] bdev_disk_changed+0x817/0x1770 [ 808.884629][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 808.890770][ T31] blkdev_get_whole+0x380/0x510 [ 808.895685][ T31] bdev_open+0x31e/0xd30 [ 808.900044][ T31] blkdev_open+0x470/0x610 [ 808.905228][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 808.910427][ T31] do_dentry_open+0x785/0x14e0 [ 808.915309][ T31] vfs_open+0x3b/0x340 [ 808.919796][ T31] ? path_openat+0x2df0/0x3860 [ 808.924619][ T31] path_openat+0x2e08/0x3860 [ 808.929483][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 808.934933][ T31] ? stack_depot_save_flags+0x33/0x810 [ 808.940490][ T31] ? __pfx_path_openat+0x10/0x10 [ 808.945456][ T31] ? __x64_sys_openat+0x138/0x170 [ 808.950878][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 808.955894][ T31] do_file_open+0x23e/0x4a0 [ 808.960670][ T31] ? __pfx_do_file_open+0x10/0x10 [ 808.965791][ T31] ? _raw_spin_unlock+0x28/0x50 [ 808.971278][ T31] ? alloc_fd+0x64b/0x6c0 [ 808.975658][ T31] do_sys_openat2+0x113/0x200 [ 808.980548][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 808.986073][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 808.991601][ T31] ? rcu_is_watching+0x15/0xb0 [ 808.996410][ T31] __x64_sys_openat+0x138/0x170 [ 809.001694][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.008197][ T31] do_syscall_64+0x15f/0xf80 [ 809.013049][ T31] ? clear_bhb_loop+0x40/0x90 [ 809.017778][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.023767][ T31] RIP: 0033:0x7f06cc4a7407 [ 809.028221][ T31] RSP: 002b:00007ffcab2cd8f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 809.036766][ T31] RAX: ffffffffffffffda RBX: 00007f06ccb51880 RCX: 00007f06cc4a7407 [ 809.044956][ T31] RDX: 00000000000a0800 RSI: 000055c80e4b06a0 RDI: ffffffffffffff9c [ 809.061284][ T31] RBP: 000055c80e4a0910 R08: 0000000000000000 R09: 0000000000000000 [ 809.069364][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c80e4b4ba0 [ 809.077359][ T31] R13: 000055c80e4ae190 R14: 0000000000000000 R15: 000055c80e4b4ba0 [ 809.085681][ T31] [ 809.088842][ T31] [ 809.088842][ T31] Showing all locks held in the system: [ 809.097519][ T31] 1 lock held by khungtaskd/31: [ 809.102529][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 809.122591][ T31] 2 locks held by getty/5575: [ 809.131662][ T31] #0: ffff888032b950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 809.141560][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 809.151924][ T31] 3 locks held by kworker/u8:8/7329: [ 809.157252][ T31] #0: ffff888031c97940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 809.169154][ T31] #1: ffffc90003597c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 809.182202][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 809.191866][ T31] 3 locks held by kworker/u8:9/8323: [ 809.197266][ T31] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 809.209947][ T31] #1: ffffc90002677c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 809.221996][ T31] #2: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 809.233595][ T31] 3 locks held by kworker/u8:10/8325: [ 809.240362][ T31] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 809.252318][ T31] #1: ffffc90007237c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 809.263435][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 809.272545][ T31] 3 locks held by udevd/15630: [ 809.277324][ T31] #0: ffff888026672350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 809.286730][ T31] #1: ffff888024bd4618 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 809.299975][ T31] #2: ffff888026707178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 809.309134][ T31] 1 lock held by syz.0.6111/29874: [ 809.314726][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 809.323990][ T31] 2 locks held by syz.1.6046/29886: [ 809.329315][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 809.338334][ T31] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 809.349479][ T31] 4 locks held by syz.4.6115/29893: [ 809.354733][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 809.363161][ T31] #1: ffff88802b2b26e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 809.374012][ T31] #2: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_dumpit+0xdb/0x1b0 [ 809.383036][ T31] #3: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_dump_interface+0x7f/0x400 [ 809.393206][ T31] 2 locks held by syz.4.6115/29896: [ 809.398460][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 809.406812][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 809.416106][ T31] 2 locks held by syz.4.6115/29898: [ 809.421658][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 809.430043][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 809.439229][ T31] 1 lock held by syz.2.6116/29894: [ 809.444372][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 809.454195][ T31] 1 lock held by syz.2.6116/29899: [ 809.459617][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 809.469534][ T31] [ 809.471935][ T31] ============================================= [ 809.471935][ T31] [ 809.481909][ T31] NMI backtrace for cpu 1 [ 809.481925][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 809.481944][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.481955][ T31] Call Trace: [ 809.481962][ T31] [ 809.481969][ T31] dump_stack_lvl+0xe8/0x150 [ 809.482000][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 809.482029][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 809.482056][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 809.482087][ T31] sys_info+0x135/0x170 [ 809.482112][ T31] watchdog+0xfaa/0x1000 [ 809.482120][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6116'. [ 809.482137][ T31] ? watchdog+0x209/0x1000 [ 809.482217][ T31] kthread+0x388/0x470 [ 809.482278][ T31] ? __pfx_watchdog+0x10/0x10 [ 809.482343][ T31] ? __pfx_kthread+0x10/0x10 [ 809.482400][ T31] ret_from_fork+0x514/0xb70 [ 809.482485][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 809.482552][ T31] ? __switch_to+0xc79/0x1410 [ 809.482617][ T31] ? __pfx_kthread+0x10/0x10 [ 809.482667][ T31] ret_from_fork_asm+0x1a/0x30 [ 809.482775][ T31] [ 809.482795][ T31] Sending NMI from CPU 1 to CPUs 0: [ 809.487469][T29894] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 809.495813][ C0] NMI backtrace for cpu 0 [ 809.495827][ C0] CPU: 0 UID: 0 PID: 29894 Comm: syz.2.6116 Not tainted syzkaller #0 PREEMPT(full) [ 809.495846][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.495857][ C0] RIP: 0010:__enqueue_entity+0x465/0xb70 [ 809.495881][ C0] Code: 89 1e 4d 8d b5 80 00 00 00 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 17 32 98 00 49 8b 1e 48 8b 44 24 10 80 3c 28 00 <4c> 8b 74 24 08 74 08 4c 89 f7 e8 ec 32 98 00 49 89 1e 4d 85 e4 74 [ 809.495897][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00000046 [ 809.495912][ C0] RAX: 1ffff11006ea57c7 RBX: 0000000000155cc0 RCX: dffffc0000000000 [ 809.495925][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803752be78 [ 809.495936][ C0] RBP: dffffc0000000000 R08: ffff888027e300a7 R09: 0000000000000000 [ 809.495949][ C0] R10: ffff888027e30098 R11: ffffed1004fc6015 R12: ffff88801cffdcd0 [ 809.495961][ C0] R13: ffff88803752be10 R14: ffff88803752be90 R15: ffff888029b7a010 [ 809.495975][ C0] FS: 00007f9e06e506c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 809.495990][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.496001][ C0] CR2: 00007f8a4b776e9c CR3: 0000000058452000 CR4: 00000000003526f0 [ 809.496016][ C0] Call Trace: [ 809.496023][ C0] [ 809.496038][ C0] enqueue_task_fair+0xaa1/0x2aa0 [ 809.496063][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 809.496088][ C0] enqueue_task+0x75/0x410 [ 809.496115][ C0] ttwu_do_activate+0x1cc/0x660 [ 809.496154][ C0] try_to_wake_up+0x724/0x1380 [ 809.496175][ C0] call_timer_fn+0x192/0x5e0 [ 809.496198][ C0] ? __pfx_process_timeout+0x10/0x10 [ 809.496213][ C0] ? call_timer_fn+0xd4/0x5e0 [ 809.496234][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 809.496260][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 809.496277][ C0] ? __pfx_process_timeout+0x10/0x10 [ 809.496294][ C0] __run_timer_base+0x652/0x8b0 [ 809.496312][ C0] ? ktime_get+0x45/0x220 [ 809.496335][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 809.496363][ C0] run_timer_softirq+0xb7/0x170 [ 809.496383][ C0] handle_softirqs+0x22a/0x840 [ 809.496405][ C0] ? __irq_exit_rcu+0xca/0x220 [ 809.496429][ C0] __irq_exit_rcu+0xca/0x220 [ 809.496456][ C0] irq_exit_rcu+0x9/0x30 [ 809.496475][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 809.496494][ C0] [ 809.496499][ C0] [ 809.496506][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 809.496523][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 809.496547][ C0] Code: 0f 84 44 ff ff ff e8 a2 00 21 00 fb eb 44 e8 9a 00 21 00 e8 d5 b7 0e 0a 4d 85 f6 74 94 e8 8b 00 21 00 fb 48 c7 c7 40 f4 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 17 [ 809.496560][ C0] RSP: 0018:ffffc9000656ee40 EFLAGS: 00000293 [ 809.496573][ C0] RAX: ffffffff81a45d65 RBX: ffffffff81a45bdf RCX: ffff888085ed1ec0 [ 809.496585][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e94f440 [ 809.496595][ C0] RBP: ffffc9000656eef0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 809.496607][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: 0000000000000000 [ 809.496619][ C0] R13: 0000000000000036 R14: 0000000000000200 R15: 1ffff92000caddcc [ 809.496632][ C0] ? vprintk_emit+0x2cf/0x560 [ 809.496657][ C0] ? vprintk_emit+0x455/0x560 [ 809.496703][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 809.496733][ C0] _printk+0xdd/0x130 [ 809.496752][ C0] ? __pfx__printk+0x10/0x10 [ 809.496768][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 809.496786][ C0] ? ___ratelimit+0x58c/0x8d0 [ 809.496807][ C0] tbf_change+0x10a1/0x1640 [ 809.496832][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 809.496854][ C0] ? __pfx_tbf_change+0x10/0x10 [ 809.496874][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 809.496892][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 809.496914][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 809.496939][ C0] ? ktime_get+0x45/0x220 [ 809.496958][ C0] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 809.496979][ C0] ? ktime_get+0x45/0x220 [ 809.496995][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 809.497014][ C0] ? ktime_get+0x1f5/0x220 [ 809.497034][ C0] ? __pfx_tbf_init+0x10/0x10 [ 809.497051][ C0] qdisc_create+0x7c4/0xf20 [ 809.497082][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 809.497100][ C0] tc_modify_qdisc+0x16f0/0x2290 [ 809.497119][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 809.497142][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 809.497177][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 809.497196][ C0] rtnetlink_rcv_msg+0x77e/0xbe0 [ 809.497216][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 809.497239][ C0] ? netlink_sendmsg+0x5d4/0xb40 [ 809.497262][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 809.497282][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.497306][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 809.497333][ C0] netlink_rcv_skb+0x232/0x4b0 [ 809.497354][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.497375][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 809.497403][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.497425][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.497454][ C0] netlink_unicast+0x75c/0x8e0 [ 809.497480][ C0] netlink_sendmsg+0x813/0xb40 [ 809.497507][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.497530][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 809.497553][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.497579][ C0] ____sys_sendmsg+0x972/0x9f0 [ 809.497601][ C0] ? __might_fault+0xaf/0x130 [ 809.497625][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.497653][ C0] ? import_iovec+0x73/0xa0 [ 809.497670][ C0] ___sys_sendmsg+0x2a5/0x360 [ 809.497693][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 809.497715][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.497743][ C0] ? futex_wait+0x2a2/0x390 [ 809.497772][ C0] ? __fget_files+0x2a/0x420 [ 809.497791][ C0] ? __fget_files+0x3a0/0x420 [ 809.497815][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.497840][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.497869][ C0] ? rcu_is_watching+0x15/0xb0 [ 809.497895][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.497911][ C0] do_syscall_64+0x15f/0xf80 [ 809.497930][ C0] ? trace_irq_disable+0x3b/0x140 [ 809.497946][ C0] ? clear_bhb_loop+0x40/0x90 [ 809.497964][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.497979][ C0] RIP: 0033:0x7f9e05f9c819 [ 809.497993][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.498006][ C0] RSP: 002b:00007f9e06e50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.498022][ C0] RAX: ffffffffffffffda RBX: 00007f9e06215fa0 RCX: 00007f9e05f9c819 [ 809.498034][ C0] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000005 [ 809.498045][ C0] RBP: 00007f9e06032c91 R08: 0000000000000000 R09: 0000000000000000 [ 809.498056][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.498065][ C0] R13: 00007f9e06216038 R14: 00007f9e06215fa0 R15: 00007fff53610568 [ 809.498086][ C0] [ 809.499831][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 809.499879][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 809.499936][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.499975][ T31] Call Trace: [ 809.499995][ T31] [ 809.500023][ T31] vpanic+0x56c/0xa60 [ 809.500135][ T31] ? __pfx_vpanic+0x10/0x10 [ 809.500239][ T31] ? irqentry_exit+0x218/0x730 [ 809.500316][ T31] panic+0xc5/0xd0 [ 809.500390][ T31] ? __pfx_panic+0x10/0x10 [ 809.500501][ T31] watchdog+0xff4/0x1000 [ 809.500575][ T31] ? watchdog+0x209/0x1000 [ 809.500649][ T31] kthread+0x388/0x470 [ 809.500705][ T31] ? __pfx_watchdog+0x10/0x10 [ 809.500760][ T31] ? __pfx_kthread+0x10/0x10 [ 809.500815][ T31] ret_from_fork+0x514/0xb70 [ 809.500891][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 809.500965][ T31] ? __switch_to+0xc79/0x1410 [ 809.501032][ T31] ? __pfx_kthread+0x10/0x10 [ 809.501097][ T31] ret_from_fork_asm+0x1a/0x30 [ 809.501223][ T31] [ 809.509236][ T31] Kernel Offset: disabled