last executing test programs: 4.025200843s ago: executing program 3 (id=4517): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002c0007012bd1f96c5fbddf25057c00000c00018008001600", @ANYRES32=r0, @ANYBLOB="0800038004000180"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002c0007012bd1f96c5fbddf25057c00000c00018008001600", @ANYRES32=r0, @ANYBLOB="0800038004000180"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r1) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) 3.768665204s ago: executing program 2 (id=4518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) recvmsg$unix(r1, &(0x7f0000001680)={&(0x7f0000000100), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/29, 0x1d}, {&(0x7f0000001540)=""/40, 0x28}], 0x8, &(0x7f0000001600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x10000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x24, 0x0, &(0x7f000000bac0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.759599143s ago: executing program 3 (id=4519): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0xc}, {0xffe0, 0x9}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 3.663160026s ago: executing program 0 (id=4521): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in=@multicast1, 0x4e21, 0x0, 0x4e20, 0x5, 0x2, 0xa0, 0x6f0195ef1583fd85, 0x0, r5, r8}, {0xfffffffffff00000, 0xffffffffffffffff, 0x401, 0x4, 0x2eb, 0x7, 0x4}, {0x800, 0xe, 0xffffffffffffffff, 0x10000}, 0xfffffffc, 0x6e6bb8, 0x2, 0x0, 0x3, 0x3}, {{@in=@multicast1, 0x4d2, 0x3c}, 0x4, @in=@rand_addr=0x64010100, 0x3500, 0x1, 0x3, 0x73, 0x40, 0x1, 0x800}}, 0xe8) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="588addb04cdce4", 0x7}], 0x1}}], 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0x4, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x8464, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0x0, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1b, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x6, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x7, 0x7, 0x7, {0x4, 0x2, 0x0, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0x7, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2be, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0x7, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x5, 0x1, 0x8, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.43595731s ago: executing program 4 (id=4525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x138, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delqdisc={0x0, 0x25, 0x20, 0x1070bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0xe}, {0xfff2, 0xffe0}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_gred, @qdisc_kind_options=@q_drr, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 3.426395046s ago: executing program 0 (id=4526): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x5) (async) listen(r5, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000002640)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r7, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="84", 0x1}, {&(0x7f0000000240)="90", 0x1}], 0x2}}], 0x1, 0x4604c880) (async) sendto$inet6(r7, &(0x7f0000000440)='\x00\x00', 0x1b, 0x20003bc4, 0x0, 0x0) close(r2) 3.304106079s ago: executing program 0 (id=4528): ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000)=0x518e) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xa, 0x8, 0xa097}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={r1, 0x20, &(0x7f00000010c0)={&(0x7f0000000080)=""/62, 0x3e, 0x0, &(0x7f00000000c0)=""/4096, 0x1000}}, 0x10) (async) writev(r1, &(0x7f0000001240)=[{&(0x7f0000001140)}, {&(0x7f0000001180)}, {&(0x7f00000011c0)="495e052f763c10c3ea29b51e6b522dc6fcb25da4a47893b03eaccc640d68f0db0d8cd2753be289ae01f27d181d358a0134e6c3433cf53f552fbdbd39afd959de03cb6ea58320e8999ccf2b14942bccf514a1afa8e7865efb8194a12d77", 0x5d}], 0x3) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="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", 0xfd) (async) r2 = accept4$tipc(r1, &(0x7f0000001380)=@name, &(0x7f00000013c0)=0x10, 0x80c00) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001400)={0x42, 0x3, 0x2}, 0x10) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000001440)={'veth0_macvtap\x00', @ifru_ivalue=0x9}) r3 = accept$ax25(r1, &(0x7f0000001480)={{0x3, @bcast}, [@default, @default, @remote, @remote, @default, @remote, @default, @bcast]}, &(0x7f0000001500)=0x48) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000001540)) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x68, r4, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x2c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x96}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) socket$inet6(0xa, 0x1, 0xfffff843) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x3) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x190, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x47}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x60b}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80, 0x9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x43e}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0xffffffff, 0xb]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xd, 0x7ff, 0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0xd217, 0x7, 0xc335, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x3, 0xffffff62, 0x1ff, 0x5, 0x9, 0x2c3, 0x3, 0xc36, 0x7f, 0x667]}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x611}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7, 0xfffffffc, 0xff, 0x9, 0x4, 0x4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) nanosleep(&(0x7f00000019c0)={0x77359400}, &(0x7f0000001a00)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={r1, 0x20, &(0x7f0000001c00)={&(0x7f0000001a40)=""/194, 0xc2, 0x0, &(0x7f0000001b40)=""/148, 0x94}}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000001c80)={0x3, 'veth1\x00', {}, 0x4}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) shutdown(r7, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001d00)) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001dc0)={0xa, &(0x7f0000001d40)=[{0x101, 0x4f, 0x8}, {0x52, 0x3, 0x99, 0x9}, {0x1, 0x0, 0x6, 0x7fff}, {0x9, 0xd, 0x2, 0x800}, {0xff80, 0xf8, 0x3, 0x1}, {0x5, 0x9, 0x7f, 0x2}, {0x6, 0x80, 0x5, 0x2}, {0x9, 0x5, 0x4, 0x9}, {0xf, 0x7, 0x5, 0x2}, {0x3, 0x2, 0x5, 0x81}]}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e40), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x38, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x88f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000002140)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002100)={&(0x7f0000001f80)=@bridge_getlink={0x17c, 0x12, 0x20, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x4405, 0x520}, [@IFLA_BROADCAST={0xa, 0x2, @random="e9aba3a7c25f"}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1000}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_AF_SPEC={0x134, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0xd, 0x0, 0x0, 0x7}, {0x8, 0xc, 0x0, 0x0, 0x5e7a}, {0x8, 0xe, 0x0, 0x0, 0x5}, {0x8, 0x1e, 0x0, 0x0, 0x5}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x3}, {0x8, 0x1b, 0x0, 0x0, 0x15d00000}, {0x8, 0x6, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x2}]}}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET6={0x4c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x4}, {0x8, 0x1a, 0x0, 0x0, 0x2}, {0x8, 0x16, 0x0, 0x0, 0x3}, {0x8, 0x1f, 0x0, 0x0, 0xa}, {0x8, 0x17, 0x0, 0x0, 0x6}, {0x8, 0x3, 0x0, 0x0, 0x8}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_PHYS_SWITCH_ID={0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x881}, 0x20008050) 3.303604366s ago: executing program 4 (id=4529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x38, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x38, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) (async) 3.26537554s ago: executing program 4 (id=4530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x70, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f00000001c0)='/proc/1/\b\x00\x00\x00\x00\x00\x00\x00\x98#YP\xee\x9c2G\xf0\x81*I\"_\x91\x0f\xd6\x86\xfe$\x7f\xbcK\x88\xe3\xe5\xcf\x8d\xbc\x86\xa26s\x96\xdf@\x89\x15\xb3{\x82\x14{\xec\xce\xce4\xff\x05\xec\b\xbfEU\x81\x1eA\x1c\xbe\xddj\xc7\x98\n\xa5K\x9f\xd7t\x04\xd0\x1f'}, 0x30) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg$alg(r5, &(0x7f0000004ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0101000000002b00000008000300", @ANYRES32=r8, @ANYBLOB="05003400d7000000080026006c0900001e001f0080000d0900000000000000060008001e000000060005000000030000040008011e0094008000170800000000000000060007001a000000060005000000020000"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r9, 0x84, 0x72, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) r10 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r10, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r11 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r5, &(0x7f00000000c0)={0x20000000}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r12) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 2.884377069s ago: executing program 1 (id=4538): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803800010024000100d9476c625f66746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004"], 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) 2.876812778s ago: executing program 2 (id=4539): r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000340)=""/101, 0x65}], 0x3, &(0x7f00000003c0)=""/195, 0xc3}, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2.813305618s ago: executing program 3 (id=4540): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) close(r3) recvfrom$unix(r2, &(0x7f0000000000)=""/14, 0xe, 0x100, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9", 0xf}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/149, 0x95}], 0x1}, 0x20000002) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000021c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0x3, @mcast2, 0x3}}}, 0x3a) getsockname(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x24004041}, 0x24040010) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.793579074s ago: executing program 1 (id=4541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xe) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x3ec0) (async) ppoll(&(0x7f0000000600)=[{r3, 0x101}], 0x1, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000540)={0x276a7ece4bfa0994}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) 2.787211718s ago: executing program 2 (id=4542): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273"], 0x294}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.636628795s ago: executing program 2 (id=4543): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006c007f000000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 2.63622599s ago: executing program 3 (id=4544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300596135178b6aa73e7eb67d530c93127bcc2f0159bf5040666d58b6b8fccc8f10f0aa1a416c03ea18cb715eb0b118ae004c", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x40000) 2.635104844s ago: executing program 1 (id=4545): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0xf, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="040000000400000002000000ff0f000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff0200000000000000000000000000000000001b04"], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="040000000400000002000000ff0f000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff0200000000000000000000000000000000001b04"], 0x50) close(r7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000500), &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='inet_sock_set_state\x00', 0xffffffffffffffff, 0x0, 0x400000baf}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x1, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000007d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x4e20, @loopback}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4020) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000004c0)={r2}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000004c0)={r2}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000003f0007010300000000000000027c0000100003800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) (async) write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 2.604261687s ago: executing program 3 (id=4546): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10) r0 = socket(0x2b, 0x2, 0x3) sendmsg$tipc(r0, &(0x7f0000001100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0xc19e73eedd89d223, 0x1, 0x4}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000}], 0x1, &(0x7f00000010c0)="4c7891a71f225119a83f1ed55e9480ae4bba6cc5980d728d017c18736082bf57e4eb6359a571ef5a715dfe", 0x2b, 0x4008000}, 0x8000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, 0x3, 0x7, 0x547e180bad8bc2e9, 0x0, 0x0, {0xb3f8ee411cefc763, 0x0, 0x8}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x70, 0xe, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000013c0)=""/193, &(0x7f00000014c0)=0xc1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001500)={0x0, @in={{0x2, 0xffff, @multicast2}}, 0x4, 0x7, 0x6, 0xfffffffd, 0x3}, &(0x7f00000015c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001600)={r2, 0xffff}, &(0x7f0000001640)=0x8) r3 = accept$inet(r0, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'dvmrp0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001700)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x2, @empty, 0x5}, @in6={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x101}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0xffffffff}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x1000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc0000000}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x540, @mcast1, 0x9b2300}], 0xdc) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001840), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x38, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x30}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001980), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x2c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}]}, 0x2c}}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x94, r7, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x1a}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6, 0x3}, {0x2, 0x2}, {0x5}, {0x48, 0x5}, {0x40, 0x6}, {0x3, 0x7}, {0x7, 0x5}, {0x7f, 0x5}, {0x30, 0x7}, {0x9, 0x4}, {0x0, 0x1}, {0xf, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x8, 0x1}, {0x8, 0x2}, {0x50, 0x4}, {0x3, 0x1}, {0x25, 0x4}], "3a0706d8217c45ca"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xb, 0x1}, {0xf, 0x7}, {0x9, 0x3}, {0x5, 0x2}, {0xd, 0x4}, {0x5, 0x3}, {0x10, 0x2}, {0x2e, 0x7}, {0x2, 0x2}, {0x80, 0x4}], "72dea430158a1f73"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x9, 0x6}, {0x50, 0x5}, {0x40}, {0x1, 0x7}, {0xe}, {0x5, 0x4}, {0x0, 0x3}, {0x80, 0x3}, {0x8, 0x7}, {0x6, 0x3}], "f2f5ad6c53547463"}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) clock_gettime(0x0, &(0x7f0000002380)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002300)=[{{&(0x7f0000001c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/217, 0xd9}, {&(0x7f0000001dc0)=""/235, 0xeb}], 0x2, &(0x7f0000001f00)=""/95, 0x5f}, 0x2}, {{&(0x7f0000001f80)=@x25, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/160, 0xa0}, {&(0x7f00000020c0)=""/66, 0x42}, {&(0x7f0000002140)=""/115, 0x73}, {&(0x7f00000021c0)=""/33, 0x21}], 0x4, &(0x7f0000002240)=""/130, 0x82}, 0xf}], 0x2, 0x2, &(0x7f00000023c0)={r8, r9+10000000}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002700)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002440)={0x268, 0x13, 0x100, 0x70bd2c, 0x25dfdbff, {0x2a, 0x0, 0x3, 0xd, {0x4e22, 0x4e21, [0x5, 0x5, 0x0, 0xf], [0xfff, 0x8, 0x3, 0x3], 0x0, [0x5, 0x7]}, 0xd, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x46, 0x1, "e6fda672ffdbd4edb737a2ddc749c6ba989877522405a0ca03b818f5d74c1842cd6185653bc16f70385f19b5ddf96280a11618c71ca291e0cb94551ca4867936ba3a"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "a4d6888a6a71ba557ef7d7d3fbf83dba1fa23b7aa98c4c16000e1d6f8b98f2ff40de75416a4bda38b76ea798f7bc9481b254e83ef45c36cd5de178a5a9b5277b2c36bbfa5c2e8805dc4374251e9c73e79ab3e89518af2127d1558b47f46c7313a89b6c4d2e1795742a91c83e9d4e"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "e0f3f755de31efba9ff50adf1c84ffb0520cff2d7b54bc42fb4d367347286cf9512bdc8456d5d2d20749d3fccde2ec1cd11bb6b375bc56a0a981454da59f3b1d3ee74ade2546579297cb1eb04932352f8fec3552272b0a563fdfe0574c7eff143aee0e8fe5f9f222eba70e70c7c8dd6c8c79400249584a0bd6260d3cbfd26977b9c98a33324083a839fe64700f6c27e232864ab498820035d20fe85345d0f1dac7cec96fdbf09bc494ab642fb0cd0f8fcf1defb268b168bcbc5fd4ef72c8b7f2c91b21bbe1b5d7214454858c3f313460a9e6b2a48a6a85d9fdefe3f8c9ae9b55933667b4f009840785e26faa054d033fddcbb5"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "37551b868e828d9c7e0e17573882015c00ce9aae87fa1ec64b99953129f2a97096d4557acd7680c2fe1b1f4634a88f40ffbb4ad010c6f37bd2d1757e03cf9d6446983e60a0b544d247e92ad06e4e4a8a811b2c783cdcb47a26f65caf59aa286de5b46580"}]}, 0x268}, 0x1, 0x0, 0x0, 0x40040082}, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000002740)={'raw\x00', 0xca, "482f2bd034e1b5f64d332648f6b23c812f767a412cc830b13ef50011a7fca08ae8aeb8238d8862085242bfc9357667e7c8c2e6dce860bc13ee17a47d2cd00c4e8b7d94eb2b9cc2d2fa7cf3c3d5345121954dd8e6221d6cdf984cfd8c755e87cf523906c64d8ce6acc7dd80ffc29d8e4d41c8adcc2ae2b6ceedcd8135573795f9fccfedd877b7c686ffd07abef18181ee97c5ee7bfd19f777a9cf9b5e9712008c35c7d3ae4a04f863ba5ac72cb4e755fdb9a5dea29dfaa3cb0a4bc409d75a41dacceee35b67bc13bb98ad"}, &(0x7f0000002840)=0xee) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000028c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x40, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x90) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x140) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000002ac0)=0xfffff208, 0x4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8000, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 2.440089398s ago: executing program 0 (id=4547): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="040000000100"], 0x50) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x24, 0x4, {}, {}, {0x4, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "1c16338a1f503ff0"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008001) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0xad, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5b38d61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91"}}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xa, 0xa, 0x20, 0x0, 0x2c, 0x0, r11}, {0x0, 0x8000a9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x10000, 0x800000000000000}, 0x800000}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}]}]}, 0xfc}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x90}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 2.439023836s ago: executing program 1 (id=4548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call_complete\x00', r0, 0x0, 0x72}, 0x18) (async) socket$rxrpc(0x21, 0x2, 0x2) 2.337438383s ago: executing program 2 (id=4549): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 2.333759313s ago: executing program 1 (id=4550): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000200)="1a00000002000000", 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000008aa25a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f1d56cd1", @ANYRES16=r5, @ANYBLOB="030b28bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000040)={@private, @multicast2}, &(0x7f00000000c0)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="ed859bcb95dd29196c9e7c9946f78a5af5ff339c425c54bdea184fbf82be52693f625ab49f0852ec9121599b9cae28956905d0a9d7b21b26ad7742f4445bb95e8a4ec034a1aa4dd7f41c3d72a794d7dffd45caea319d279162169f107216d7e6b1c9768953a85b90c13a6be904b28738c3fe23aae6efbf7f91c085940fa1cd446ddf9525253c0a9758a7bab233ca3b9d98a3a0008a530501f6e6e4911672039f", 0xa0}], 0x1}, 0xc4) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f00000002c0)=r8}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)='>', 0x1}], 0x1}, 0x0) recvmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000140), 0x8) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 2.317513527s ago: executing program 4 (id=4551): r0 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) connect$caif(r0, &(0x7f0000000000)=@util={0x25, "910483ddf8b6928e20b35f1a19c589d6"}, 0x18) 2.303292691s ago: executing program 0 (id=4552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x30}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYBLOB], 0x48}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r6 = socket$inet6(0xa, 0xa, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000003c0)={0x33, 0x11, '\x00', [@generic={0x3, 0x36, "b67b2d66b56857390e7f01e9b5f7529ead0de22c6eb58da109ab652ed891e5e1de6393e96a52286919260fa7731a929ae6d16c7355e7"}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x6, [0x6, 0x2, 0x2, 0x2, 0xfffffffffffffff2]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @pad1, @ra={0x5, 0x2, 0x7f}]}, 0x98) 2.213289803s ago: executing program 4 (id=4553): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d6370a6d5"], 0x5) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.212803594s ago: executing program 2 (id=4554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd030011000000000000004b0c014600044b277107e7b893036500007f069078640101020000000011126e3de293db42945d2bbe2bd6aed44c0901", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="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"], 0x154) 2.190256054s ago: executing program 1 (id=4555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1f, 0x800, 0x80000001) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0xbc8, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0xd0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xc, 0x8, 0x7, 0x2, 0xff, 0x8, 0x3}}, {0xa, 0x2, [0x8000, 0x3, 0x1]}}, {{0x1c, 0x1, {0x9, 0x40, 0x5, 0x56, 0x2, 0xdf43, 0x800, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x5a, 0xc, 0x2, 0x200, 0x1, 0x4, 0x5, 0x4}}, {0xc, 0x2, [0x1, 0x1, 0x6, 0x52]}}, {{0x1c, 0x1, {0x9, 0xb5, 0x4, 0xc, 0x0, 0x200, 0x9, 0x2}}, {0x8, 0x2, [0x5, 0x800]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0xd0}}, 0x0) 1.993614884s ago: executing program 4 (id=4556): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7c, &(0x7f0000000040)="badd8e37a0feecff", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'veth0_virt_wifi\x00', @random="b2b14d468be8"}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000240)=0x2c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16=r4, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x4044004) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000008c0)="f06e00dcbcfd57c354333182854115b7", 0x10) close(r7) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) close(r8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x4) 653.093µs ago: executing program 0 (id=4557): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) close(r0) (async) close(r0) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'vlan0\x00', @random="21a800"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'vlan0\x00', @random="21a800"}) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) (async) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000016c0)={r7, r6, 0x25, 0x2, @val=@tcx={@void, @value=r7}}, 0x1c) sendto$packet(r4, &(0x7f0000000180)="bca7c30bb7ec32d0b07fb8e2b88ecee9ef84dfd234df05045b35b2b42b53b9a29271d3a7d2a311a2ea9d9aa4968fd04abf5789b6358fed8134580ff13b21409a0c1ec53b42ec6b11eac34b204e081010f767d6d7e7a6de", 0x57, 0x14, &(0x7f0000000200)={0x11, 0x6, r6, 0x1, 0x5, 0x6, @remote}, 0x14) 0s ago: executing program 3 (id=4558): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, r1, 0x0, 0x7, 0x80, 0x3, "4a3665d09e79031b0f6f1454d38d43565fa12b8aa13e4d8ca1edd610543b944c2b051d989c267a86aed3b1747071366e44ed12faa57d7c780f32f66cfcc39d", 0x18}, 0x60) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000000c0)=':\x00', 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x24}}, 0x24000000) ioctl$FIBMAP(r3, 0x1, &(0x7f00000002c0)=0x2) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x1, 0xde3a16b8e93d3943, 0x6, 0x7, 0x1}, @tail_call, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000480)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x3, 0xa, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x2, 0x1, 0x1}]}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000380)='xen_mc_flush_reason\x00', r7, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r3) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4048890) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x174, r10, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x102, 0xa8, @random="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"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ppoll(&(0x7f0000000ac0)=[{r6, 0x40}, {r0, 0x18}, {r6}, {r3, 0x8}, {r0, 0x92}, {r3, 0x8}, {r8, 0x8}, {r8, 0x6040}], 0x8, &(0x7f0000000b00)={0x77359400}, &(0x7f0000000b40)={[0x7]}, 0x8) socket$kcm(0x29, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r11, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x20000001) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000cc0)={'wlan1\x00'}) r12 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000d00)={{0x2, 0x4e20, @loopback}, {0x306, @remote}, 0x56, {0x2, 0x4e23, @loopback}, 'virt_wifi0\x00'}) r13 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000001580)={&(0x7f0000000d80)=@phonet={0x23, 0x40, 0x9, 0x8}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000e00)="085db1cb5c2e9030faaf1e38d8e29205e913a937be5a521e011cc73461aa92b672f5f0752a33860e3c77357e0dea26e61eff03451092cb639e671a2f99210050fa3b08c6b3f475db315826424a49b6610d5f0e55356b803fa756156b885e9ab17873d5f0fd1f7392a01df815378ae6c52542670406a0a9ebc737a3cc670c954ee15955e8ec192765587bd3c74e0cedfe8e9a5662fb670bf1e3a4a5c5da1622c09c3366d5dd908f92e569c4766285431c3aa5fc37cfe034bf704c4f28167cad", 0xbf}, {&(0x7f0000000ec0)="5c95dfac2e3334df9812e0afff361984ed6096abdce14f68164b09e37a264c89a715ff58d9ffb42c31ee1e9fb39b4e711c5b34234a5714206e643ee872cb57de99f54508448786a5298312a81be0c4d187ac81f26717852d7e899f829d09cbab3f98c3c4be683146d3bca8bc4cbcbc7523fa540d261f23054c4fb1c6d9ad8df848f355af5030c47dd78be4e9f62850e44375c20c7048c3bd1a61a3c7e4f3c9fd63aa6a8bca297cd4e8fddecde23d397c6157574f0fd0069ace417da6787036f603fd622e41af7ea0dae5bb1bbfad9ba592720040258fe6a339e0e71ada5adc7279aca1854cb1", 0xe6}, {&(0x7f0000000fc0)="69a4e4e110100c98c7f08e999ed2d5068862c0c31962ece54231e35f012fc4bdfcb7d119dc9fd5116b5fe7432f514a9d78a5bc930cc5b455960e86d3c5abf073ff070e95c429ca44ede8a9a9183afd768c0b1b9e8e73ed54df427fcba363147bf5be90dbe4bf8143d2e9bdbb9c40940a9f820bc49f384753425d9353d22fc939ddb3ccd9fae53347380f901a4bdb3115f22af7d52cb53e944061425a445a4ab14ffa4921ba94a9e013b76825af627cfe4f9a0da9ff8501afa0a3523d6af8e2f5f24336ccce0772352205bcaacc45440849a7718455322af28c8bde5e4c483b18dc2b", 0xe2}, {&(0x7f00000010c0)="6f393c14902e91e01798d07407bb6bbae8a36b4566751b57e70ce5832a9e7ce7baeac8ae1822c5f30893646bc73f965a84e6fc95e7632039bbcaeb3d124885e95bc9f1ebe3dace2739d39025094d1ffa36f5befe84864d9bab2411eb8593ba21a71b1651fd1a77b66a50b64e1529cf32f8909f227d783c8e81ff73d8114f38d9346f2523bf773e3befb33d92726b51c0ca1b17237e17", 0x96}, {&(0x7f0000001180)="d9a6eb4f8242de2425a8e9ee3975a33a461542c02df326848d484691e88fce770c203492dd92249dd199c963ac9a6f65c8afef386c1478992d9e251bfbefab558bff10f8b6ee6ed00dae31920b6ac398766b9475e13f977a460bf8e6c425dc121901b006f42d41cb56244699b1fd8251948ac9a205501a8fb72d91c3", 0x7c}, {&(0x7f0000001200)="5dee24b55efde3bc9e2c182d52d6bedf14016e894b0e9245e41e95323ae24b42c7f1904239aa7ccfd7e63e54e5f73427d48a0c68e48bb9bce05fc7541a248a4cc714b84b41c9fabb9fc867be3eaa15333fe505f9065f", 0x56}, {&(0x7f0000001280)="20c8b8d74accf4af4db95b32f73ae03e90588fb117170f648887d698d5689ac519b256061f796effadb0f4638c48f195dc87760ac24743391a514ba7e28f07927abcb770c1ff2093ae451c5156f21df0c87a31f03a00cacced992c4f316c0611f1b1dc482f4ffd84e1be6d801351d3fadc0088e3d7982f405f2b821bbd5527b624500bc4e6dd998dd1531e614fdc24cbc17f1b", 0x93}, {&(0x7f0000001340)="000e280c2ba7dc21e27f5f968589f4f6", 0x10}, {&(0x7f0000001380)="e38413", 0x3}, {&(0x7f00000013c0)="c370cbe4f9e891c1d25c3ebec307fd69bd4eccbb808f41b6c10af4b1bf18dd99b819409befe5af9187d03b38b3be00aef9c972c93244437c62ec66380c712229f61c735882ab04a2e49889bf07ad83e35e0b0ecd345a02fd4024692f988346a8815ccfe0da9d3ed58713b8809ac852bec63b263ff3d151d3d94fc59a1e1dbec464b7059531d546b24190d2b94183867fe653da0cfd585df3684b06d7de61033623a9ccbad2e77869704afd5b462188eaad90ebf8a92cc982c93fc6ab7c870aa07636157154876a3eb1c17331d9d2d41bef12ff7fa0d5c61409e64a7a045d9b7a4d5e0e3e45", 0xe5}], 0xa}, 0x0) kernel console output (not intermixed with test programs): g to 1000 [ 388.008855][T16259] wlan0 speed is unknown, defaulting to 1000 [ 388.059487][T16034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.098431][T16259] wlan0 speed is unknown, defaulting to 1000 [ 388.098800][T16034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.144086][T16259] wlan0 speed is unknown, defaulting to 1000 [ 388.144273][T16034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.163543][ T5836] Bluetooth: hci5: command tx timeout [ 388.191872][T16034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.198921][T16259] wlan0 speed is unknown, defaulting to 1000 [ 388.450370][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.537075][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.565886][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.573133][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.594045][T16315] tc_dump_action: action bad kind [ 388.604671][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.612021][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.424563][T16034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.587668][T16034] veth0_vlan: entered promiscuous mode [ 389.643743][T16034] veth1_vlan: entered promiscuous mode [ 389.736327][T16351] bridge0: entered promiscuous mode [ 389.741594][T16351] bridge0: entered allmulticast mode [ 389.758184][T16034] veth0_macvtap: entered promiscuous mode [ 389.786553][T16034] veth1_macvtap: entered promiscuous mode [ 389.852640][T16034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.868560][T16034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.929818][T16357] erspan0: entered allmulticast mode [ 389.974653][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.988028][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.017916][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.054777][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.076745][T16366] tipc: Enabled bearer , priority 0 [ 390.094335][T16366] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 390.102854][T16366] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 390.233249][ T5836] Bluetooth: hci5: command tx timeout [ 390.240009][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 390.286792][T16372] tipc: Resetting bearer [ 390.304712][T16374] netlink: 'syz.0.2993': attribute type 4 has an invalid length. [ 390.321411][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.333185][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.425916][T16379] ipvlan1: left allmulticast mode [ 390.458779][ T4724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.471069][ T4724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.500082][T16384] nbd: must specify a device to reconfigure [ 390.597393][T16387] veth0_to_team: entered promiscuous mode [ 390.605353][T16389] netlink: 'syz.2.2998': attribute type 1 has an invalid length. [ 390.684670][T16395] xt_NFQUEUE: number of total queues is 0 [ 390.778532][T16389] bond13: entered promiscuous mode [ 390.814071][T16389] 8021q: adding VLAN 0 to HW filter on device bond13 [ 390.896884][T16408] __nla_validate_parse: 7 callbacks suppressed [ 390.896902][T16408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3003'. [ 391.034567][T16410] bond13: (slave bridge8): making interface the new active one [ 391.059656][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'. [ 391.063767][T16410] bridge8: entered promiscuous mode [ 391.076823][T16410] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 391.188743][T16420] bridge: RTM_NEWNEIGH with invalid ether address [ 391.237956][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.247424][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.255838][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.263954][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.271479][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.317745][T16421] wg1 speed is unknown, defaulting to 1000 [ 391.329670][T16424] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 391.338032][T16424] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3007'. [ 391.650248][T16442] xt_l2tp: wrong L2TP version: 0 [ 391.820874][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 392.028355][T16458] team_slave_0: entered promiscuous mode [ 392.034396][T16458] team_slave_1: entered promiscuous mode [ 392.076642][T16458] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.117925][T16464] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 392.136177][T16421] wlan0 speed is unknown, defaulting to 1000 [ 392.187857][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'. [ 392.285218][T16472] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.314879][ T5151] Bluetooth: hci5: command tx timeout [ 392.458440][T16483] syzkaller0: entered promiscuous mode [ 392.470584][T16487] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3027'. [ 392.474349][T16483] syzkaller0: entered allmulticast mode [ 392.508335][T16421] chnl_net:caif_netlink_parms(): no params data found [ 392.516503][T16487] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3027'. [ 392.531518][T16487] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3027'. [ 392.545473][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 392.678787][T16495] netlink: 'syz.0.3028': attribute type 10 has an invalid length. [ 392.697112][T16495] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3028'. [ 392.752927][T16495] geneve0: entered promiscuous mode [ 392.758549][T16495] team0: entered promiscuous mode [ 392.776875][T16495] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.792359][T16495] bridge0: port 1(team0) entered blocking state [ 392.809402][T16495] bridge0: port 1(team0) entered disabled state [ 392.816776][T16495] team0: entered allmulticast mode [ 392.821925][T16495] geneve0: entered allmulticast mode [ 392.830682][T16495] team0: left allmulticast mode [ 392.839886][T16495] geneve0: left allmulticast mode [ 392.864772][T16503] tipc: Started in network mode [ 392.870704][T16503] tipc: Node identity e0000001, cluster identity 4711 [ 392.877941][T16503] tipc: Enabling of bearer rejected, failed to enable media [ 392.893429][T16421] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.900770][T16421] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.921110][T16421] bridge_slave_0: entered allmulticast mode [ 392.934391][T16421] bridge_slave_0: entered promiscuous mode [ 392.954951][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.971429][T16421] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.987590][T16421] bridge_slave_1: entered allmulticast mode [ 392.996885][T16421] bridge_slave_1: entered promiscuous mode [ 393.145791][T16520] bond9: ARP target 1.0.0.0 is already present [ 393.164303][T16520] bond9: option arp_ip_target: invalid value (1) [ 393.179391][T16520] bond9 (unregistering): Released all slaves [ 393.233693][T16421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.268220][T16421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.277284][T16538] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 393.352598][ T5151] Bluetooth: hci1: command tx timeout [ 393.366784][T16543] netlink: 'syz.1.3040': attribute type 2 has an invalid length. [ 393.398861][T16421] team0: Port device team_slave_0 added [ 393.407766][T16421] team0: Port device team_slave_1 added [ 393.464540][T16421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.473354][T16421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.512529][T16421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.529913][T16421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.538095][T16421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.565238][T16421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.610131][T16421] hsr_slave_0: entered promiscuous mode [ 393.616961][T16421] hsr_slave_1: entered promiscuous mode [ 393.623503][T16421] debugfs: 'hsr0' already exists in 'hsr' [ 393.629337][T16421] Cannot create hsr debugfs directory [ 393.769947][T16421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.876564][T16421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.985927][T16421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.313857][T16421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.348142][T16421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.414467][T16421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.438344][T16421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.484630][T16575] vlan2: entered allmulticast mode [ 394.534231][T16575] vlan2: entered allmulticast mode [ 394.605913][T16575] vlan2: entered allmulticast mode [ 394.674056][T16575] vlan2: entered allmulticast mode [ 394.757172][T16575] vlan2: entered allmulticast mode [ 394.837297][T16421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.858531][T16575] vlan2: entered allmulticast mode [ 394.916732][T16575] vlan2: entered allmulticast mode [ 394.978259][T16421] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.000198][T16575] vlan2: entered allmulticast mode [ 395.023096][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.030211][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.078430][T16575] vlan2: entered allmulticast mode [ 395.111293][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.118467][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.157335][T16575] vlan2: entered allmulticast mode [ 395.237342][T16575] vlan2: entered allmulticast mode [ 395.432709][ T5151] Bluetooth: hci1: command 0x041b tx timeout [ 395.731757][T16421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.809747][T16421] veth0_vlan: entered promiscuous mode [ 395.877453][T16421] veth1_vlan: entered promiscuous mode [ 395.906010][T16658] dvmrp0: entered allmulticast mode [ 395.924097][T16655] tipc: Enabled bearer , priority 0 [ 395.949767][T16665] syzkaller0: entered promiscuous mode [ 395.972179][T16665] syzkaller0: entered allmulticast mode [ 396.001134][T16655] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 396.063188][T16655] tipc: Resetting bearer [ 396.070165][T16421] veth0_macvtap: entered promiscuous mode [ 396.135071][T16421] veth1_macvtap: entered promiscuous mode [ 396.173184][T16678] netlink: 'syz.1.3077': attribute type 4 has an invalid length. [ 396.207346][T16677] 8021q: VLANs not supported on wg2 [ 396.211693][T16678] netlink: 'syz.1.3077': attribute type 4 has an invalid length. [ 396.234294][T16654] tipc: Resetting bearer [ 396.251161][T16654] tipc: Disabling bearer [ 396.266667][T16677] __nla_validate_parse: 14 callbacks suppressed [ 396.266685][T16677] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3079'. [ 396.324097][T16671] netlink: 828 bytes leftover after parsing attributes in process `syz.1.3077'. [ 396.365021][T16421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.381051][T16678] ip6gre1: entered allmulticast mode [ 396.381684][T16685] xt_hashlimit: size too large, truncated to 1048576 [ 396.423679][T16421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.460938][ T1133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.494330][ T1133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.515346][ T1133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.546868][ T1133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.588235][T16696] xt_NFQUEUE: number of total queues is 0 [ 396.692418][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.722979][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.813861][T16703] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3087'. [ 396.850393][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.870311][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.913068][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 396.924056][T16703] bond14 (unregistering): Released all slaves [ 397.044769][T16716] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3091'. [ 397.094375][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 397.126656][T16725] team0: left allmulticast mode [ 397.228208][T16716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3091'. [ 397.329284][T16729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3095'. [ 397.362800][T16729] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3095'. [ 397.515048][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 397.543204][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.554816][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.565820][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.573860][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.581682][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.792917][T16740] wg1 speed is unknown, defaulting to 1000 [ 398.464442][T16770] Cannot find add_set index 0 as target [ 398.470178][T16767] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 398.626378][T16777] netlink: 'syz.3.3105': attribute type 3 has an invalid length. [ 398.652100][T16777] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3105'. [ 398.976989][T16806] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 399.259022][ T62] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.285472][ T62] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.318695][ T62] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.349129][T16740] chnl_net:caif_netlink_parms(): no params data found [ 399.405002][ T62] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.416170][ T62] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.426722][ T62] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.493859][ T62] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.511519][T16835] xt_l2tp: v2 doesn't support IP mode [ 399.530141][ T62] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.541723][ T62] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.593534][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 399.647356][ T62] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.657716][ T62] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.668748][ T62] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.678618][ T5836] Bluetooth: hci4: command tx timeout [ 399.682258][T16840] netlink: 'syz.4.3121': attribute type 10 has an invalid length. [ 399.741590][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.754984][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.766390][T16740] bridge_slave_0: entered allmulticast mode [ 399.775454][T16740] bridge_slave_0: entered promiscuous mode [ 399.803535][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.816342][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.826183][T16740] bridge_slave_1: entered allmulticast mode [ 399.836961][T16740] bridge_slave_1: entered promiscuous mode [ 399.957807][T16862] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.984443][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.005175][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.103957][T16861] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 400.117951][T16866] netlink: 'syz.3.3130': attribute type 7 has an invalid length. [ 400.146552][T16865] netlink: 'syz.3.3130': attribute type 7 has an invalid length. [ 400.166683][T16866] netlink: 'syz.3.3130': attribute type 8 has an invalid length. [ 400.194999][T16740] team0: Port device team_slave_0 added [ 400.200746][T16865] netlink: 'syz.3.3130': attribute type 8 has an invalid length. [ 400.261551][T16740] team0: Port device team_slave_1 added [ 400.306308][T16866] gretap0: entered promiscuous mode [ 400.318406][T16866] batadv_slave_1: entered promiscuous mode [ 400.326612][T16866] batadv_slave_1: left promiscuous mode [ 400.396747][T16866] gretap0: left promiscuous mode [ 400.415149][T16865] gretap0: entered promiscuous mode [ 400.422458][T16865] batadv_slave_1: entered promiscuous mode [ 400.428505][T16865] batadv_slave_1: left promiscuous mode [ 400.436984][T16865] gretap0: left promiscuous mode [ 400.716751][T16889] netlink: 'syz.3.3133': attribute type 15 has an invalid length. [ 400.771801][ T62] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 400.780960][ T62] ip6gretap1 (unregistering): left allmulticast mode [ 400.915216][ T62] bond5 (unregistering): (slave gretap2): Releasing active interface [ 401.045992][ T62] team0: Port device geneve0 removed [ 401.253545][ T62] bond0 (unregistering): (slave bridge4): Releasing backup interface [ 401.393812][ T62] bond5 (unregistering): (slave bridge7): Releasing active interface [ 401.579615][ T62] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.589613][ T62] ` (unregistering): Released all slaves [ 401.676209][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 401.696730][ T62] bond1 (unregistering): Released all slaves [ 401.709122][ T62] bond0 (unregistering): Released all slaves [ 401.721511][ T62] bond2 (unregistering): Released all slaves [ 401.734145][ T62] bond3 (unregistering): Released all slaves [ 401.755062][ T5836] Bluetooth: hci4: command tx timeout [ 401.850558][ T62] bond4 (unregistering): Released all slaves [ 401.863753][ T62] bond5 (unregistering): Released all slaves [ 401.876746][ T62] bond6 (unregistering): Released all slaves [ 401.974766][ T62] bond7 (unregistering): Released all slaves [ 402.070661][ T62] bond8 (unregistering): Released all slaves [ 402.084375][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.091333][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.117682][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.129218][T16884] __nla_validate_parse: 15 callbacks suppressed [ 402.129237][T16884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3134'. [ 402.249485][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.265464][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.274776][T16892] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 402.292451][ T30] audit: type=1800 audit(1767319092.014:2): pid=16892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3132" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 402.341608][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.353255][T16892] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 402.353287][T16892] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 402.543229][T16913] netlink: 'syz.1.3141': attribute type 11 has an invalid length. [ 402.553105][T16913] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3141'. [ 402.659602][T16740] hsr_slave_0: entered promiscuous mode [ 402.685416][T16740] hsr_slave_1: entered promiscuous mode [ 402.710213][T16740] debugfs: 'hsr0' already exists in 'hsr' [ 402.726938][T16740] Cannot create hsr debugfs directory [ 402.791047][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 403.147344][T16943] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3148'. [ 403.253912][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'. [ 403.286433][T16943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3148'. [ 403.295697][T16943] gre0: entered promiscuous mode [ 403.306612][T16947] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 403.324110][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3149'. [ 403.787290][T16971] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3153'. [ 403.825439][T16740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.836657][ T5836] Bluetooth: hci4: command tx timeout [ 403.883885][T16740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.908866][ T62] : left promiscuous mode [ 403.936580][T16740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.957265][T16740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.005381][T16987] ip6t_rpfilter: unknown options [ 404.040479][T16987] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3157'. [ 404.063158][T16987] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3157'. [ 404.090124][ T62] tipc: Disabling bearer [ 404.102986][T16998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.103275][ T62] tipc: Left network mode [ 404.200287][T16997] bond14: option arp_all_targets: invalid value (18446744073709551613) [ 404.214554][T16997] bond14 (unregistering): Released all slaves [ 404.468864][T17020] syzkaller0: entered promiscuous mode [ 404.478447][T17020] syzkaller0: entered allmulticast mode [ 404.497257][T17028] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 404.517273][T17028] netlink: 'syz.3.3165': attribute type 5 has an invalid length. [ 404.796169][T17037] netlink: 'syz.3.3169': attribute type 12 has an invalid length. [ 404.804789][T17037] netlink: 'syz.3.3169': attribute type 29 has an invalid length. [ 404.816360][T17038] netlink: 'syz.3.3169': attribute type 12 has an invalid length. [ 404.831002][T17038] netlink: 'syz.3.3169': attribute type 29 has an invalid length. [ 404.906784][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.005239][T17044] tipc: Enabling of bearer rejected, already enabled [ 405.039536][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.113279][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.120458][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.174427][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.181620][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.804733][ T62] hsr_slave_0: left promiscuous mode [ 405.822582][ T62] hsr_slave_1: left promiscuous mode [ 405.890666][ T62] veth1_macvtap: left promiscuous mode [ 405.913741][ T5836] Bluetooth: hci4: command tx timeout [ 407.522463][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 408.065389][ T36] smc: removing ib device sy [ 408.554793][T17071] 8021q: VLANs not supported on ip6tnl0 [ 408.746503][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.923715][T16740] veth0_vlan: entered promiscuous mode [ 408.959626][T16740] veth1_vlan: entered promiscuous mode [ 409.012854][T17091] __nla_validate_parse: 6 callbacks suppressed [ 409.012873][T17091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3182'. [ 409.195229][T16740] veth0_macvtap: entered promiscuous mode [ 409.239879][T16740] veth1_macvtap: entered promiscuous mode [ 409.293472][T17096] IPVS: Unknown mcast interface: vcan0 [ 409.326091][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.377480][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.421150][ T3522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.463441][ T3522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.509665][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.572802][ T3522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.604312][ T3522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.642447][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.678265][T17114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3190'. [ 409.751373][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.817972][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.856815][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.914430][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.973869][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.057792][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.131021][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.270426][T17103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.412354][ T6371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.440033][T17137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3196'. [ 410.456204][ T6371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.510509][T17138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3196'. [ 410.634861][ T6371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.661639][ T6371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.852332][T17154] syzkaller0: entered promiscuous mode [ 410.898691][T17154] syzkaller0: entered allmulticast mode [ 411.525479][ T62] IPVS: stop unused estimator thread 0... [ 411.674294][T17197] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 411.718901][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.739701][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.748490][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.757100][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.775579][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.867146][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 411.899181][T17201] wg1 speed is unknown, defaulting to 1000 [ 411.948886][T17207] sctp: [Deprecated]: syz.3.3214 (pid 17207) Use of int in maxseg socket option. [ 411.948886][T17207] Use struct sctp_assoc_value instead [ 412.124214][T17213] Bluetooth: MGMT ver 1.23 [ 412.389645][T17219] lo: entered promiscuous mode [ 412.403004][T17219] tunl0: entered promiscuous mode [ 412.413653][T17219] gre0: entered promiscuous mode [ 412.444287][T17219] gretap0: entered promiscuous mode [ 412.478424][T17219] erspan0: entered promiscuous mode [ 412.510759][T17219] ip_vti0: entered promiscuous mode [ 412.719046][T17238] bridge1: entered promiscuous mode [ 412.760561][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 412.812588][ T4494] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 412.825464][ T4494] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 412.852070][ T4494] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.873009][ T4494] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 412.982751][ T4494] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 413.010271][ T4494] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 413.025264][ T4494] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.036242][ T4494] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 413.069416][T17201] chnl_net:caif_netlink_parms(): no params data found [ 413.107947][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3233'. [ 413.141205][T17267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3233'. [ 413.165027][ T4494] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 413.176390][ T4494] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 413.188211][ T4494] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.223016][ T4494] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 413.421253][ T4494] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 413.434959][ T4494] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 413.446397][ T4494] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.457159][ T4494] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 413.471384][T17296] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3240'. [ 413.518971][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 413.638887][T17300] netlink: 'syz.3.3237': attribute type 3 has an invalid length. [ 413.653042][T17201] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.661467][T17300] block nbd3: not configured, cannot reconfigure [ 413.668107][T17201] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.676156][T17201] bridge_slave_0: entered allmulticast mode [ 413.686951][T17201] bridge_slave_0: entered promiscuous mode [ 413.698541][T17201] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.706561][T17201] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.739628][T17201] bridge_slave_1: entered allmulticast mode [ 413.751312][T17201] bridge_slave_1: entered promiscuous mode [ 413.832432][ T5836] Bluetooth: hci0: command tx timeout [ 413.954070][T17201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.997247][T17201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.275496][T17201] team0: Port device team_slave_0 added [ 414.290187][T17201] team0: Port device team_slave_1 added [ 414.356729][T17325] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 414.503303][T17201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.542679][T17201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.581002][T17201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.599306][T17201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.606972][T17201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.646144][T17201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.716007][ T4494] tipc: Resetting bearer [ 415.047628][ T4494] tipc: Disabling bearer [ 415.064641][ T4494] bond4 (unregistering): (slave gretap1): Releasing active interface [ 415.084611][ T4494] bond5 (unregistering): (slave gretap2): Releasing active interface [ 415.147382][ T4494] dvmrp0 (unregistering): left allmulticast mode [ 415.178584][ T4494] bond14 (unregistering): (slave geneve4): Releasing active interface [ 415.204836][ T4494] bond9 (unregistering): (slave geneve2): Releasing active interface [ 415.234352][ T4494] team0: Port device geneve0 removed [ 415.722645][ T4494] bond0 (unregistering): Released all slaves [ 415.735056][ T4494] bond1 (unregistering): Released all slaves [ 415.747719][ T4494] bond2 (unregistering): Released all slaves [ 415.845310][ T4494] bond3 (unregistering): Released all slaves [ 415.859041][ T4494] bond4 (unregistering): Released all slaves [ 415.912374][ T5836] Bluetooth: hci0: command tx timeout [ 415.957550][ T4494] bond5 (unregistering): Released all slaves [ 415.970596][ T4494] bond6 (unregistering): (slave C): Releasing backup interface [ 415.978857][ T4494] bond6 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 415.993690][ T4494] bond6 (unregistering): Released all slaves [ 416.093018][ T4494] bond7 (unregistering): Released all slaves [ 416.185890][ T4494] bond8 (unregistering): Released all slaves [ 416.199168][ T4494] bond9 (unregistering): Released all slaves [ 416.297801][ T4494] bond10 (unregistering): Released all slaves [ 416.310587][ T4494] bond11 (unregistering): (slave veth11): Releasing active interface [ 416.322946][ T4494] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 416.334797][ T4494] bond11 (unregistering): Released all slaves [ 416.351173][ T4494] bond12 (unregistering): Released all slaves [ 416.445348][ T4494] bond13 (unregistering): Released all slaves [ 416.541592][ T4494] bond14 (unregistering): Released all slaves [ 416.751444][T17363] syz.0.3257: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.772674][T17363] CPU: 1 UID: 0 PID: 17363 Comm: syz.0.3257 Not tainted syzkaller #0 PREEMPT(full) [ 416.772708][T17363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.772728][T17363] Call Trace: [ 416.772737][T17363] [ 416.772745][T17363] dump_stack_lvl+0xe8/0x150 [ 416.772777][T17363] warn_alloc+0x214/0x310 [ 416.772799][T17363] ? stack_trace_save+0x9c/0xe0 [ 416.772832][T17363] ? __pfx_warn_alloc+0x10/0x10 [ 416.772860][T17363] ? kasan_save_track+0x4f/0x80 [ 416.772878][T17363] ? kasan_save_track+0x3e/0x80 [ 416.772896][T17363] ? __kasan_kmalloc+0x93/0xb0 [ 416.772915][T17363] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 416.772934][T17363] ? xskq_create+0x56/0x170 [ 416.772962][T17363] ? xsk_setsockopt+0x4dc/0x8d0 [ 416.772986][T17363] ? do_sock_setsockopt+0x17c/0x1b0 [ 416.773007][T17363] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 416.773026][T17363] ? do_syscall_64+0xec/0xf80 [ 416.773051][T17363] __vmalloc_node_range_noprof+0x134/0x16a0 [ 416.773101][T17363] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.773127][T17363] ? __kasan_kmalloc+0x93/0xb0 [ 416.773154][T17363] vmalloc_user_noprof+0xad/0xf0 [ 416.773174][T17363] ? xskq_create+0xbf/0x170 [ 416.773202][T17363] xskq_create+0xbf/0x170 [ 416.773233][T17363] xsk_init_queue+0xb0/0x110 [ 416.773262][T17363] xsk_setsockopt+0x4dc/0x8d0 [ 416.773292][T17363] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.773318][T17363] ? __pfx_aa_sk_perm+0x10/0x10 [ 416.773345][T17363] ? aa_sock_opt_perm+0xff/0x1a0 [ 416.773371][T17363] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.773388][T17363] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.773415][T17363] do_sock_setsockopt+0x17c/0x1b0 [ 416.773438][T17363] __x64_sys_setsockopt+0x13f/0x1b0 [ 416.773465][T17363] do_syscall_64+0xec/0xf80 [ 416.773484][T17363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.773502][T17363] ? trace_irq_disable+0x37/0x100 [ 416.773528][T17363] ? clear_bhb_loop+0x60/0xb0 [ 416.773551][T17363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.773577][T17363] RIP: 0033:0x7f65ab18f749 [ 416.773596][T17363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.773614][T17363] RSP: 002b:00007f65ac09a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.773635][T17363] RAX: ffffffffffffffda RBX: 00007f65ab3e5fa0 RCX: 00007f65ab18f749 [ 416.773650][T17363] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 416.773662][T17363] RBP: 00007f65ab213f91 R08: 0000000000000004 R09: 0000000000000000 [ 416.773674][T17363] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.773686][T17363] R13: 00007f65ab3e6038 R14: 00007f65ab3e5fa0 R15: 00007ffe7df7b248 [ 416.773724][T17363] [ 416.773736][T17363] Mem-Info: [ 416.858524][T17370] __nla_validate_parse: 4 callbacks suppressed [ 416.858541][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 416.866824][T17363] active_anon:4755 inactive_anon:0 isolated_anon:0 [ 416.866824][T17363] active_file:2628 inactive_file:40088 isolated_file:0 [ 416.866824][T17363] unevictable:768 dirty:143 writeback:0 [ 416.866824][T17363] slab_reclaimable:12952 slab_unreclaimable:134830 [ 416.866824][T17363] mapped:29139 shmem:1372 pagetables:1186 [ 416.866824][T17363] sec_pagetables:0 bounce:0 [ 416.866824][T17363] kernel_misc_reclaimable:0 [ 416.866824][T17363] free:1286953 free_pcp:12951 free_cma:0 [ 416.868864][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'. [ 416.883671][T17363] Node 0 active_anon:19020kB inactive_anon:0kB active_file:10512kB inactive_file:160148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116556kB dirty:564kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13940kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 416.895997][T17370] netlink: 'syz.0.3257': attribute type 14 has an invalid length. [ 416.910842][T17363] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 416.928723][T17370] netlink: 'syz.0.3257': attribute type 13 has an invalid length. [ 416.952687][T17363] Node 0 [ 417.123539][ T6371] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.228103][T17363] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.258082][T17363] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 417.264244][T17363] Node 0 DMA32 free:1251604kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19308kB inactive_anon:0kB active_file:10512kB inactive_file:160148kB unevictable:1536kB writepending:508kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:34916kB local_pcp:15028kB free_cma:0kB [ 417.298911][T17363] lowmem_reserve[]: 0 0 1 1 1 [ 417.304212][T17363] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.334931][T17363] lowmem_reserve[]: 0 0 0 0 0 [ 417.340229][T17363] Node 1 Normal free:3880848kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16216kB local_pcp:5928kB free_cma:0kB [ 417.373889][T17363] lowmem_reserve[]: 0 0 0 0 0 [ 417.378666][T17363] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.391881][T17363] Node 0 DMA32: 3169*4kB (UME) 3730*8kB (UM) 1390*16kB (UME) 443*32kB (UME) 323*64kB (UME) 438*128kB (UME) 391*256kB (UME) 303*512kB (UM) 201*1024kB (U) 56*2048kB (UME) 127*4096kB (UM) = 1251604kB [ 417.412508][T17363] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 417.425671][T17363] Node 1 Normal: 198*4kB (UME) 49*8kB (UME) 45*16kB (UME) 159*32kB (UME) 53*64kB (UME) 6*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 943*4096kB (M) = 3880848kB [ 417.446244][T17363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.456526][T17363] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.466617][T17363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.476806][T17363] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.493301][T17201] hsr_slave_0: entered promiscuous mode [ 417.500277][T17201] hsr_slave_1: entered promiscuous mode [ 417.509486][T17363] 44085 total pagecache pages [ 417.515725][T17363] 0 pages in swap cache [ 417.520923][T17363] Free swap = 124996kB [ 417.527074][T17363] Total swap = 124996kB [ 417.531330][T17363] 2097051 pages RAM [ 417.536048][T17363] 0 pages HighMem/MovableOnly [ 417.540731][T17363] 425082 pages reserved [ 417.590786][T17363] 0 pages cma reserved [ 417.811326][T17388] netlink: 'syz.0.3265': attribute type 1 has an invalid length. [ 417.830330][T17387] netlink: 'syz.0.3265': attribute type 1 has an invalid length. [ 417.936860][T17388] vlan2: entered allmulticast mode [ 417.948995][T17388] veth1_virt_wifi: entered allmulticast mode [ 417.959635][T17387] tipc: Started in network mode [ 417.972278][T17387] tipc: Node identity e0000001, cluster identity 4711 [ 417.979216][T17387] tipc: Enabling of bearer rejected, failed to enable media [ 417.993627][ T5836] Bluetooth: hci0: command tx timeout [ 418.006365][T17404] net_ratelimit: 1 callbacks suppressed [ 418.006382][T17404] openvswitch: netlink: VXLAN extension 111 out of range max 1 [ 418.099210][T17406] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 418.117883][T17406] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 418.236737][ T4494] tipc: Disabling bearer [ 418.258158][ T4494] tipc: Disabling bearer [ 418.284757][ T4494] tipc: Left network mode [ 418.344882][ T4494] IPVS: stopping backup sync thread 8903 ... [ 418.429776][T17417] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 418.667662][T17432] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 418.749373][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3278'. [ 418.893813][T17440] netlink: 'syz.2.3280': attribute type 13 has an invalid length. [ 418.930195][T17440] sit0: left allmulticast mode [ 418.942409][T17440] ip6tnl0: left allmulticast mode [ 418.947900][T17440] ip6gre0: left allmulticast mode [ 418.963691][T17440] syz_tun: left allmulticast mode [ 418.977107][T17440] ip6gretap0: left allmulticast mode [ 418.990205][T17440] nlmon0: left allmulticast mode [ 418.996652][T17440] caif0: left allmulticast mode [ 419.003402][T17440] vxcan0: left allmulticast mode [ 419.010800][T17440] vxcan1: left allmulticast mode [ 419.030938][T17440] veth0: left allmulticast mode [ 419.053346][T17440] wg0: left allmulticast mode [ 419.059098][T17440] wg1: left allmulticast mode [ 419.067456][T17440] wg2: left allmulticast mode [ 419.073353][T17440] veth0_to_bridge: left allmulticast mode [ 419.080846][T17440] bridge_slave_0: left allmulticast mode [ 419.087268][T17440] veth1_to_bridge: left allmulticast mode [ 419.093739][T17440] bridge_slave_1: left allmulticast mode [ 419.099782][T17440] veth0_to_bond: left allmulticast mode [ 419.107606][T17440] bond_slave_0: left allmulticast mode [ 419.114125][T17440] veth1_to_bond: left allmulticast mode [ 419.119942][T17440] bond_slave_1: left allmulticast mode [ 419.126150][T17440] veth0_to_team: left allmulticast mode [ 419.131932][T17440] team_slave_0: left allmulticast mode [ 419.138188][T17440] veth1_to_team: left allmulticast mode [ 419.144437][T17440] team_slave_1: left allmulticast mode [ 419.150132][T17440] veth0_to_batadv: left allmulticast mode [ 419.156819][T17440] batadv_slave_0: left allmulticast mode [ 419.164465][T17440] veth1_to_batadv: left allmulticast mode [ 419.170610][T17440] batadv_slave_1: left allmulticast mode [ 419.177397][T17440] xfrm0: left allmulticast mode [ 419.183043][T17440] veth1_to_hsr: left allmulticast mode [ 419.188949][T17440] hsr0: left allmulticast mode [ 419.194525][T17440] veth1_vlan: left allmulticast mode [ 419.200251][T17440] vlan0: left promiscuous mode [ 419.205790][T17440] vlan0: left allmulticast mode [ 419.210895][T17440] vlan1: left allmulticast mode [ 419.219473][T17440] macvlan0: left allmulticast mode [ 419.225185][T17440] macvlan1: left allmulticast mode [ 419.230541][T17440] ipvlan0: left allmulticast mode [ 419.236448][T17440] veth0_vlan: left allmulticast mode [ 419.243797][T17440] veth1_macvtap: left allmulticast mode [ 419.249605][T17440] veth0_macvtap: left allmulticast mode [ 419.256018][T17440] macvtap0: left allmulticast mode [ 419.267343][T17440] macsec0: left allmulticast mode [ 419.273800][T17440] geneve0: left allmulticast mode [ 419.279126][T17440] geneve1: left allmulticast mode [ 419.285182][T17440] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 419.292874][T17440] mac80211_hwsim hwsim9 : left allmulticast mode [ 419.299668][T17440] ip6gre1: left allmulticast mode [ 419.305471][T17440] bond0: left allmulticast mode [ 419.311080][T17440] ip6tnl1: left allmulticast mode [ 419.316663][T17440] macsec1: left allmulticast mode [ 419.321915][T17440] vcan0: left allmulticast mode [ 419.327245][T17440] vcan1: left allmulticast mode [ 419.332452][T17440] bond1: left allmulticast mode [ 419.337515][T17440] geneve2: left allmulticast mode [ 419.343279][T17440] vxlan0: left allmulticast mode [ 419.348440][T17440] geneve3: left allmulticast mode [ 419.354264][T17440] erspan1: left allmulticast mode [ 419.359510][T17440] bridge1: left allmulticast mode [ 419.366054][T17440] xfrm1: left allmulticast mode [ 419.371242][T17440] ip6erspan0: left allmulticast mode [ 419.377388][T17440] bond2: left allmulticast mode [ 419.383077][T17440] bond3: left allmulticast mode [ 419.388186][T17440] bond4: left allmulticast mode [ 419.393845][T17440] veth2: left allmulticast mode [ 419.399023][T17440] veth3: left allmulticast mode [ 419.404821][T17440] gre1: left allmulticast mode [ 419.409885][T17440] vlan2: left allmulticast mode [ 419.415313][T17440] hsr_slave_1: left allmulticast mode [ 419.421011][T17440] mac80211_hwsim hwsim20 wlan2: left allmulticast mode [ 419.428912][T17440] bridge2: left allmulticast mode [ 419.435395][T17440] batadv0.5: left allmulticast mode [ 419.440604][T17440] batadv0: left allmulticast mode [ 419.446459][T17440] mac80211_hwsim hwsim21 wlan3: left allmulticast mode [ 419.453987][T17440] mac80211_hwsim hwsim22 wlan4: left allmulticast mode [ 419.461098][T17440] wireguard0: left allmulticast mode [ 419.468062][T17440] sit1: left allmulticast mode [ 419.473639][T17440] ip6tnl2: left allmulticast mode [ 419.480109][T17440] bond5: left allmulticast mode [ 419.485741][T17440] bridge3: left allmulticast mode [ 419.491053][T17440] gretap1: left allmulticast mode [ 419.501401][T17440] bond6: left allmulticast mode [ 419.507020][T17440] gretap2: left allmulticast mode [ 419.512799][T17440] sit2: left allmulticast mode [ 419.517877][T17440] sit3: left allmulticast mode [ 419.523936][T17440] ip6gre2: left allmulticast mode [ 419.529304][T17440] netdevsim netdevsim2 eth0: left allmulticast mode [ 419.536794][T17440] netdevsim netdevsim2 eth1: left allmulticast mode [ 419.544153][T17440] netdevsim netdevsim2 eth2: left allmulticast mode [ 419.551021][T17440] netdevsim netdevsim2 eth3: left allmulticast mode [ 419.558434][T17440] veth4: left allmulticast mode [ 419.564063][T17440] veth5: left allmulticast mode [ 419.570010][T17440] bond7: left allmulticast mode [ 419.575664][T17440] bond8: left allmulticast mode [ 419.580795][T17440] xfrm2: left allmulticast mode [ 419.586466][T17440] ip6gre3: left allmulticast mode [ 419.591741][T17440] veth6: left allmulticast mode [ 419.597659][T17440] veth7: left allmulticast mode [ 419.603489][T17440] bond9: left allmulticast mode [ 419.608611][T17440] bridge0: left allmulticast mode [ 419.615518][T17440] wireguard1: left promiscuous mode [ 419.620754][T17440] wireguard1: left allmulticast mode [ 419.635707][T17440] sit4: left promiscuous mode [ 419.640405][T17440] sit4: left allmulticast mode [ 419.650643][T17440] bond13: left promiscuous mode [ 419.655862][T17440] bridge8: left promiscuous mode [ 419.724308][T17457] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3281'. [ 420.013820][T17471] tipc: Enabling of bearer rejected, already enabled [ 420.023491][T17471] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 420.031506][T17471] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 420.043967][T17201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.072538][ T5836] Bluetooth: hci0: command tx timeout [ 420.076597][T17201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.124523][ T4494] batadv0: left promiscuous mode [ 420.138470][ T4494] hsr_slave_0: left promiscuous mode [ 420.155058][ T4494] hsr_slave_1: left promiscuous mode [ 420.165485][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.183793][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.203912][ T4494] batman_adv: batadv0: Interface deactivated: dummy0 [ 420.210764][ T4494] batman_adv: batadv0: Removing interface: dummy0 [ 420.265612][ T4494] batman_adv: batadv0: Interface deactivated: veth13 [ 420.272841][ T4494] batman_adv: batadv0: Removing interface: veth13 [ 420.316097][ T4494] veth1_vlan: left promiscuous mode [ 420.332675][ T4494] veth0_vlan: left promiscuous mode [ 420.577890][T17490] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3289'. [ 420.647056][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 420.657785][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 420.871017][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 420.915873][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 421.263945][T17201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.288027][T17201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.413238][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3291'. [ 421.535312][T17505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.680111][T17520] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 421.688757][ T6061] IPVS: starting estimator thread 0... [ 421.784744][T17522] IPVS: using max 30 ests per chain, 72000 per kthread [ 421.845712][T17201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.868851][T17530] netlink: 'syz.1.3300': attribute type 21 has an invalid length. [ 421.946461][T17530] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 422.000514][T17530] bond1 (unregistering): Released all slaves [ 422.065720][T17201] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.073232][ T30] audit: type=1800 audit(1767319111.814:3): pid=17537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3302" name="memory.events" dev="tmpfs" ino=3305 res=0 errno=0 [ 422.097505][ T30] audit: type=1804 audit(1767319111.824:4): pid=17537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3302" name="/newroot/645/memory.events" dev="tmpfs" ino=3305 res=1 errno=0 [ 422.131827][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.139047][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.156493][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.163714][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.241213][T17547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3303'. [ 422.605366][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3308'. [ 422.758000][T17201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.359299][T17602] netlink: 'syz.2.3314': attribute type 1 has an invalid length. [ 423.392611][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'. [ 423.503941][T17201] veth0_vlan: entered promiscuous mode [ 423.567415][T17201] veth1_vlan: entered promiscuous mode [ 423.588429][ T4494] IPVS: stop unused estimator thread 0... [ 423.600983][T17201] veth0_macvtap: entered promiscuous mode [ 423.616353][T17201] veth1_macvtap: entered promiscuous mode [ 423.767340][T17201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.784907][T17621] Cannot find del_set index 49151 as target [ 423.796682][T17201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.805038][T17621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3323'. [ 423.914394][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.954619][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.993072][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 424.011013][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.027006][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.045529][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 424.064652][ T4494] bridge_slave_0: left allmulticast mode [ 424.079336][ T4494] bridge_slave_0: left promiscuous mode [ 424.099556][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.135767][ T4494] veth0_to_bond: left allmulticast mode [ 424.141346][ T4494] veth0_to_bond: left promiscuous mode [ 424.147552][ T4494] bridge4: port 2(veth0_to_bond) entered disabled state [ 424.176818][ T4494] veth7: left allmulticast mode [ 424.182368][ T4494] veth7: left promiscuous mode [ 424.187888][ T4494] bridge4: port 1(veth7) entered disabled state [ 424.359857][T17655] netlink: 198504 bytes leftover after parsing attributes in process `syz.0.3329'. [ 424.369997][T17660] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3329'. [ 424.634742][ T4494] bond1 (unregistering): (slave gretap1): Releasing active interface [ 424.645844][ T4494] gretap1 (unregistering): left promiscuous mode [ 424.653102][ T4494] gretap1 (unregistering): left allmulticast mode [ 425.113760][ T4494] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 425.251729][ T4494] bond7 (unregistering): (slave bridge10): Releasing active interface [ 425.367350][ T4494] bond1 (unregistering): left promiscuous mode [ 425.386878][ T4494] bond1 (unregistering): Released all slaves [ 425.406990][ T4494] bond0 (unregistering): Released all slaves [ 425.499709][ T4494] bond2 (unregistering): Released all slaves [ 425.592055][ T4494] bond3 (unregistering): Released all slaves [ 425.683760][ T4494] bond4 (unregistering): Released all slaves [ 425.777686][ T4494] bond5 (unregistering): Released all slaves [ 425.790408][ T4494] bond6 (unregistering): Released all slaves [ 425.804267][ T4494] bond7 (unregistering): Released all slaves [ 426.019529][ T4494] tipc: Left network mode [ 426.091070][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.127311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.210510][T17673] tipc: Started in network mode [ 426.229639][T17673] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 426.230101][ T4494] IPVS: stopping backup sync thread 12459 ... [ 426.246923][T17675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3334'. [ 426.269034][T17673] tipc: Enabled bearer , priority 10 [ 426.290465][T17680] netlink: 'syz.0.3336': attribute type 11 has an invalid length. [ 426.302895][T17680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3336'. [ 426.344137][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.379727][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.501734][T17691] tls_set_device_offload: netdev not found [ 426.730651][T17700] netlink: 'syz.4.3343': attribute type 5 has an invalid length. [ 426.818162][T17705] netlink: 'syz.3.3344': attribute type 16 has an invalid length. [ 426.872740][T17705] netlink: 'syz.3.3344': attribute type 17 has an invalid length. [ 426.906287][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.945034][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.956371][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.966488][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.975866][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.983800][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.993492][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.071543][T17703] tipc: Resetting bearer [ 427.093207][T17703] tipc: Resetting bearer [ 427.157516][ T6368] tipc: Resetting bearer [ 427.182925][T17705] lo: left promiscuous mode [ 427.205373][T17705] tunl0: left promiscuous mode [ 427.214312][T17705] gre0: left promiscuous mode [ 427.266629][T17705] gretap0: left promiscuous mode [ 427.275556][T17705] erspan0: left promiscuous mode [ 427.283630][T17705] ip_vti0: left promiscuous mode [ 427.298750][T17705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.398503][ T5902] tipc: Node number set to 10005162 [ 427.662344][T17711] wg1 speed is unknown, defaulting to 1000 [ 427.670912][T17737] syzkaller1: entered promiscuous mode [ 427.693371][T17737] syzkaller1: entered allmulticast mode [ 427.843019][T17743] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 427.901736][T17745] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 427.943243][T17745] bond2 (unregistering): Released all slaves [ 428.219623][T17761] __nla_validate_parse: 12 callbacks suppressed [ 428.219727][T17761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3366'. [ 428.459991][T17775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3369'. [ 428.501125][ T4494] hsr_slave_0: left promiscuous mode [ 428.511929][ T4494] hsr_slave_1: left promiscuous mode [ 428.528738][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.548145][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.568281][ T4494] batman_adv: batadv0: Interface deactivated: veth3 [ 428.585351][ T4494] batman_adv: batadv0: Removing interface: veth3 [ 428.649534][ T4494] batadv0: left promiscuous mode [ 428.655493][ T4494] veth1_vlan: left promiscuous mode [ 428.660979][ T4494] veth0_vlan: left promiscuous mode [ 428.818199][ T4494] pim6reg (unregistering): left allmulticast mode [ 429.034143][ T5836] Bluetooth: hci3: command tx timeout [ 429.438197][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3376'. [ 429.518628][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 429.556377][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 430.048343][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 430.081540][T17788] wg1 speed is unknown, defaulting to 1000 [ 430.557594][T17823] ip6gre1: entered allmulticast mode [ 430.601873][T17711] chnl_net:caif_netlink_parms(): no params data found [ 430.610656][ T4494] IPVS: stop unused estimator thread 0... [ 430.935018][T17844] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 430.992643][T17839] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 431.091696][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 431.112515][ T5836] Bluetooth: hci3: command tx timeout [ 432.563903][T17711] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.571348][T17711] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.580544][T17711] bridge_slave_0: entered allmulticast mode [ 432.588215][T17711] bridge_slave_0: entered promiscuous mode [ 432.609624][T17861] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3389'. [ 432.640983][T17711] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.648839][T17711] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.663486][T17711] bridge_slave_1: entered allmulticast mode [ 432.671494][T17711] bridge_slave_1: entered promiscuous mode [ 432.743669][T17866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3390'. [ 432.780403][T17711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.818825][T17711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.961932][T17711] team0: Port device team_slave_0 added [ 432.985016][T17711] team0: Port device team_slave_1 added [ 433.074772][T17711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.081842][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.111292][T17711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.125339][T17711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.133104][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.166880][T17887] tls_set_device_offload_rx: netdev not found [ 433.175676][T17711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.193515][ T5836] Bluetooth: hci3: command tx timeout [ 433.243487][T17890] netlink: 'syz.4.3398': attribute type 1 has an invalid length. [ 433.263707][T17895] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 1, id = 0 [ 433.285716][T17711] hsr_slave_0: entered promiscuous mode [ 433.299044][T17711] hsr_slave_1: entered promiscuous mode [ 433.314575][T17711] debugfs: 'hsr0' already exists in 'hsr' [ 433.332064][T17711] Cannot create hsr debugfs directory [ 433.442837][T17903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.510515][T17908] netlink: 'syz.3.3404': attribute type 4 has an invalid length. [ 433.577053][T17911] netlink: 'syz.3.3404': attribute type 4 has an invalid length. [ 433.685604][T17919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3406'. [ 433.728793][T17921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3406'. [ 433.773212][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3406'. [ 433.784062][T17920] block nbd1: Unsupported socket: should be TCP or UNIX. [ 434.042818][T17944] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3410'. [ 434.067813][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.076482][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.148428][T17944] openvswitch: netlink: Invalid VLAN frame [ 434.241009][T17711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 434.270177][T17950] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 434.286863][T17711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.383707][T17711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.439159][T17711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.530081][T17979] veth7: entered promiscuous mode [ 434.536491][T17979] veth7: entered allmulticast mode [ 434.575672][T17979] veth9: entered promiscuous mode [ 434.581130][T17979] veth9: entered allmulticast mode [ 434.608998][T17979] veth11: entered promiscuous mode [ 434.614827][T17979] veth11: entered allmulticast mode [ 434.650177][T17979] veth13: entered promiscuous mode [ 434.655776][T17979] veth13: entered allmulticast mode [ 434.700261][T17979] veth15: entered promiscuous mode [ 434.705744][T17979] veth15: entered allmulticast mode [ 434.748482][T17979] veth17: entered promiscuous mode [ 434.755134][T17979] veth17: entered allmulticast mode [ 434.813505][T17979] veth19: entered promiscuous mode [ 434.819228][T17979] veth19: entered allmulticast mode [ 434.847591][T17979] veth21: entered promiscuous mode [ 434.853587][T17979] veth21: entered allmulticast mode [ 434.887311][T17979] veth23: entered promiscuous mode [ 434.893518][T17979] veth23: entered allmulticast mode [ 434.946541][T17979] veth25: entered promiscuous mode [ 434.951867][T17979] veth25: entered allmulticast mode [ 434.987606][T17979] veth27: entered promiscuous mode [ 434.994011][T17979] veth27: entered allmulticast mode [ 435.005986][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3423'. [ 435.044152][T17979] veth29: entered promiscuous mode [ 435.049569][T17979] veth29: entered allmulticast mode [ 435.110416][T17979] veth31: entered promiscuous mode [ 435.117823][T17979] veth31: entered allmulticast mode [ 435.137954][T18023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.205887][T17979] veth33: entered promiscuous mode [ 435.206890][T18025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3428'. [ 435.211035][T17979] veth33: entered allmulticast mode [ 435.256342][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 435.264773][T17979] veth35: entered promiscuous mode [ 435.270447][T17979] veth35: entered allmulticast mode [ 435.272958][ T5836] Bluetooth: hci3: command tx timeout [ 435.282939][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 435.333726][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 435.344892][T17711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.398290][T17979] veth37: entered promiscuous mode [ 435.404110][T17979] veth37: entered allmulticast mode [ 435.416703][ T6368] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.426652][ T6368] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.460407][ T6368] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.468313][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3432'. [ 435.492023][ T6368] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.609511][T17711] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.803948][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.811359][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.844564][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.851742][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.090638][T18073] netlink: 'syz.1.3443': attribute type 33 has an invalid length. [ 436.121575][T18076] netlink: 'syz.0.3444': attribute type 4 has an invalid length. [ 436.134902][T18073] team_slave_0: left promiscuous mode [ 436.163883][T18073] team_slave_1: left promiscuous mode [ 436.241371][T18083] netlink: 'syz.3.3445': attribute type 1 has an invalid length. [ 436.401695][T18092] : renamed from ip6gre0 (while UP) [ 436.424256][T17711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.508632][T17711] veth0_vlan: entered promiscuous mode [ 436.522574][T17711] veth1_vlan: entered promiscuous mode [ 436.590887][T17711] veth0_macvtap: entered promiscuous mode [ 436.615855][T17711] veth1_macvtap: entered promiscuous mode [ 436.693145][T18096] syzkaller0: entered promiscuous mode [ 436.698659][T18096] syzkaller0: entered allmulticast mode [ 436.876853][T18118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.563045][T17711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.682052][T17711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.698471][T18168] netlink: 'syz.1.3465': attribute type 2 has an invalid length. [ 438.707620][T18168] netlink: 'syz.1.3465': attribute type 8 has an invalid length. [ 438.717291][T18167] ip6_vti0: entered promiscuous mode [ 438.732040][T18168] __nla_validate_parse: 7 callbacks suppressed [ 438.732057][T18168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3465'. [ 438.753647][ T6367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.793629][ T6367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.825134][ T6367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.896779][ T6367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.130615][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.151011][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.289608][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.339149][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.449989][T18205] tipc: Enabled bearer , priority 0 [ 439.485536][T18205] syzkaller0: entered promiscuous mode [ 439.491055][T18205] syzkaller0: entered allmulticast mode [ 439.524076][T18205] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 439.684127][T18204] tipc: Resetting bearer [ 439.715708][T18204] tipc: Disabling bearer [ 440.040175][T18250] erspan0: entered allmulticast mode [ 440.155568][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.166147][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.261562][T18257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.282241][T18257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.309130][T18266] siw: device registration error -23 [ 440.394515][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3493'. [ 440.394857][T18260] macvtap1: entered promiscuous mode [ 440.409514][T18260] vlan0: entered promiscuous mode [ 440.416338][T18260] macvtap1: entered allmulticast mode [ 440.421729][T18260] vlan0: entered allmulticast mode [ 440.427760][T18260] veth0_vlan: entered allmulticast mode [ 440.541789][T18257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.567889][T18257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.605184][T18276] netlink: 'syz.3.3495': attribute type 39 has an invalid length. [ 440.769950][T18257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.797351][T18257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.938965][T18257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.975847][T18257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.017435][T18303] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3500'. [ 441.029610][T18303] netlink: 'syz.1.3500': attribute type 2 has an invalid length. [ 441.039542][T18303] netlink: 'syz.1.3500': attribute type 11 has an invalid length. [ 441.058444][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3502'. [ 441.068449][T18303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3500'. [ 441.099106][T18310] geneve2: entered promiscuous mode [ 441.240106][ T1089] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.258494][ T1089] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.337032][ T1089] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.349901][T18322] netlink: 'syz.0.3507': attribute type 13 has an invalid length. [ 441.356059][ T1089] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.382995][ T1089] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.391244][ T1089] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.446757][ T1089] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.455227][ T1089] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.477116][T18322] erspan0: refused to change device tx_queue_len [ 441.486183][T18322] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 441.741770][T18340] geneve2: entered promiscuous mode [ 441.776874][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 441.786412][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 441.800611][T18340] netlink: 'syz.1.3511': attribute type 3 has an invalid length. [ 441.950764][T18359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3519'. [ 442.033228][T18363] team0: Device ip6gre2 is of different type [ 442.297659][T18383] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 442.299315][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 442.318169][T18383] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3525'. [ 442.637909][T18401] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 442.655045][T18402] netlink: 'syz.0.3531': attribute type 83 has an invalid length. [ 442.971078][T18427] netlink: 'syz.4.3538': attribute type 6 has an invalid length. [ 443.502889][T18450] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 443.844895][T18484] __nla_validate_parse: 5 callbacks suppressed [ 443.844911][T18484] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3551'. [ 445.071518][T18480] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 445.253297][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 445.313172][T18494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3555'. [ 445.326158][T18494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3555'. [ 445.514808][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3562'. [ 445.785147][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 445.815997][T18538] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 445.845937][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 446.197876][T18562] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3577'. [ 446.279543][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3578'. [ 446.281801][T18568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.330389][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3578'. [ 446.388675][T18573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.520049][T18577] bond2 (unregistering): Released all slaves [ 446.669236][T18600] validate_nla: 1 callbacks suppressed [ 446.669253][T18600] netlink: 'syz.3.3588': attribute type 5 has an invalid length. [ 446.689416][T18600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 446.802351][T18602] netlink: 'syz.1.3589': attribute type 21 has an invalid length. [ 446.811381][T18602] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.828826][T18608] syzkaller0: entered promiscuous mode [ 446.847820][T18608] syzkaller0: entered allmulticast mode [ 447.006343][T18623] netlink: 'syz.4.3596': attribute type 1 has an invalid length. [ 447.323943][T18626] bond2: (slave bridge1): making interface the new active one [ 447.394663][T18626] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 447.785028][T18658] tipc: Enabling of bearer rejected, failed to enable media [ 448.117876][T18678] syz_tun: entered allmulticast mode [ 448.155168][T18678] dvmrp8: entered allmulticast mode [ 448.182788][T18681] netlink: 'syz.3.3613': attribute type 2 has an invalid length. [ 448.231785][T18681] 9: entered promiscuous mode [ 448.256447][T18677] syz_tun: left allmulticast mode [ 448.472577][T18702] netlink: 'syz.4.3617': attribute type 5 has an invalid length. [ 449.474693][T18753] netlink: 'syz.0.3631': attribute type 12 has an invalid length. [ 449.484120][T18753] netlink: 'syz.0.3631': attribute type 29 has an invalid length. [ 449.508315][T18753] __nla_validate_parse: 40 callbacks suppressed [ 449.508333][T18753] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3631'. [ 449.543014][T18753] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3631'. [ 449.566085][T18756] netlink: 'syz.4.3633': attribute type 2 has an invalid length. [ 449.621275][T18764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3635'. [ 449.815097][T18771] netlink: 'syz.4.3636': attribute type 30 has an invalid length. [ 449.844015][T18778] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3639'. [ 450.410720][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'. [ 450.439949][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'. [ 450.464219][T18807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3647'. [ 450.573475][T18795] team0 (unregistering): Port device team_slave_0 removed [ 450.599480][T18795] team0 (unregistering): Port device team_slave_1 removed [ 450.714207][T18822] netlink: 'syz.4.3650': attribute type 83 has an invalid length. [ 451.066921][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3656'. [ 451.162741][T18846] nbd: must specify at least one socket [ 451.176212][ T5200] udevd[5200]: worker [18603] terminated by signal 33 (Unknown signal 33) [ 451.657003][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 451.724774][T18873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3663'. [ 451.727701][T18875] pim6reg: entered allmulticast mode [ 451.831127][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.838499][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.194285][T18897] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 452.205093][T18897] validate_nla: 1 callbacks suppressed [ 452.205110][T18897] netlink: 'syz.3.3673': attribute type 5 has an invalid length. [ 454.423422][T18915] sit0: entered promiscuous mode [ 454.623315][T18921] __nla_validate_parse: 3 callbacks suppressed [ 454.623334][T18921] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3677'. [ 454.716861][T18931] netlink: 'syz.4.3681': attribute type 32 has an invalid length. [ 454.725451][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 454.753804][T18935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3682'. [ 454.763550][T18935] unsupported nlmsg_type 40 [ 454.803447][T18931] bond3: option coupled_control: invalid value (52) [ 454.811869][T18931] bond3 (unregistering): Released all slaves [ 455.106373][T18947] netlink: 'syz.4.3684': attribute type 4 has an invalid length. [ 455.135506][T18934] delete_channel: no stack [ 455.299604][T18957] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 455.443299][T18963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3688'. [ 455.584855][T18964] netlink: 'syz.0.3688': attribute type 1 has an invalid length. [ 455.593381][T18964] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3688'. [ 455.626695][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 455.953720][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3693'. [ 456.205890][T18995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3698'. [ 456.237047][T18995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3698'. [ 456.266392][T18995] gretap0: entered promiscuous mode [ 456.303609][T18995] gretap0: left promiscuous mode [ 456.725659][T19029] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3707'. [ 456.767488][T19031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.085739][T19047] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 457.129823][T19047] bond3: option packets_per_slave: allowed values 0 - 65535 [ 457.161400][T19047] bond3 (unregistering): Released all slaves [ 457.203063][T19058] netlink: 'syz.2.3718': attribute type 5 has an invalid length. [ 457.236327][T19051] vlan2: entered allmulticast mode [ 457.252336][T19051] hsr0: entered allmulticast mode [ 457.264458][T19051] hsr_slave_0: entered allmulticast mode [ 457.277898][T19051] hsr_slave_1: entered allmulticast mode [ 457.684702][T19079] tipc: New replicast peer: 255.255.255.255 [ 457.691659][T19079] tipc: Enabled bearer , priority 10 [ 457.709280][T19077] wg1 speed is unknown, defaulting to 1000 [ 457.955033][T19097] netlink: 'syz.4.3731': attribute type 1 has an invalid length. [ 458.158734][T19106] syzkaller0: entered allmulticast mode [ 458.254349][T19116] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 458.306656][T19113] syzkaller1: entered promiscuous mode [ 458.342815][T19113] syzkaller1: entered allmulticast mode [ 458.378410][T19113] syzkaller1: left promiscuous mode [ 458.392301][T19113] syzkaller1: left allmulticast mode [ 458.813229][T17669] tipc: Node number set to 3758096385 [ 459.688313][T19190] tipc: Enabled bearer , priority 11 [ 459.738603][T19193] __nla_validate_parse: 6 callbacks suppressed [ 459.738623][T19193] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3759'. [ 459.926474][T19203] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3764'. [ 460.067627][T19203] netlink: 'syz.4.3764': attribute type 29 has an invalid length. [ 460.083753][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3764'. [ 460.456366][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3771'. [ 460.503653][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3771'. [ 460.555198][T19226] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3772'. [ 460.615591][T19226] syzkaller0: entered promiscuous mode [ 460.641508][T19226] syzkaller0: entered allmulticast mode [ 460.738547][T19226] pim6reg1: entered promiscuous mode [ 460.755868][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3774'. [ 460.757223][T19226] pim6reg1: entered allmulticast mode [ 461.198106][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3779'. [ 461.382903][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028b88800: rx timeout, send abort [ 461.535133][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3784'. [ 461.692023][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'. [ 461.883641][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f414c00: rx timeout, send abort [ 461.892026][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028b88800: abort rx timeout. Force session deactivation [ 461.937026][T19282] syzkaller0: entered promiscuous mode [ 461.952629][T19282] syzkaller0: entered allmulticast mode [ 462.035549][T19288] Cannot find add_set index 0 as target [ 462.036748][T19286] netlink: 'syz.1.3790': attribute type 18 has an invalid length. [ 462.099717][ T6368] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.116798][T19291] syzkaller0: entered promiscuous mode [ 462.122589][T19291] syzkaller0: entered allmulticast mode [ 462.146739][ T6368] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.303765][ T6368] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.347383][ T6368] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.393067][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f414c00: abort rx timeout. Force session deactivation [ 462.683030][T19312] netlink: 'syz.0.3799': attribute type 4 has an invalid length. [ 462.747329][T19320] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.978541][T19319] syzkaller0: entered promiscuous mode [ 462.994423][T19319] syzkaller0: entered allmulticast mode [ 463.016283][T19335] syzkaller0: entered promiscuous mode [ 463.029825][T19335] syzkaller0: entered allmulticast mode [ 463.266893][T19347] sctp: [Deprecated]: syz.3.3808 (pid 19347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.266893][T19347] Use struct sctp_sack_info instead [ 463.536625][T19357] netlink: 'syz.4.3812': attribute type 1 has an invalid length. [ 463.596913][ T981] IPVS: starting estimator thread 0... [ 463.607776][T19367] block nbd1: Unsupported socket: should be TCP or UNIX. [ 463.655517][T19357] bond4: entered promiscuous mode [ 463.681672][T19357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.724053][T19368] IPVS: using max 28 ests per chain, 67200 per kthread [ 463.799162][T19371] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 463.932989][T19378] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 464.093313][T19392] tipc: Enabled bearer , priority 0 [ 464.197580][T19392] tipc: Disabling bearer [ 464.218029][T19402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.278960][T19405] sctp: [Deprecated]: syz.1.3825 (pid 19405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.278960][T19405] Use struct sctp_sack_info instead [ 464.318797][T19405] C: renamed from team_slave_0 (while UP) [ 464.354662][T19405] netlink: 'syz.1.3825': attribute type 1 has an invalid length. [ 464.365585][T19405] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 464.580158][T19413] Can't find ip_set type [ 464.633587][T19412] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 464.986383][T19443] __nla_validate_parse: 12 callbacks suppressed [ 464.986404][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'. [ 465.165472][T19453] tipc: Started in network mode [ 465.166530][T19455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3843'. [ 465.185825][T19453] tipc: Node identity 561064fc790a, cluster identity 4711 [ 465.195413][T19453] tipc: Enabled bearer , priority 0 [ 465.202494][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 465.214267][T19455] netlink: 'syz.0.3843': attribute type 4 has an invalid length. [ 465.234537][T19460] syzkaller0: entered promiscuous mode [ 465.253594][T19460] syzkaller0: entered allmulticast mode [ 465.269403][T19461] netlink: 'syz.0.3843': attribute type 4 has an invalid length. [ 465.287677][T19453] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 465.355448][T19453] tipc: Resetting bearer [ 465.376700][T19463] : entered promiscuous mode [ 465.383430][T19452] tipc: Resetting bearer [ 465.429046][T19452] tipc: Disabling bearer [ 465.631248][T19475] xt_TCPMSS: Only works on TCP SYN packets [ 465.640093][T19475] netlink: 'syz.1.3848': attribute type 21 has an invalid length. [ 465.653350][T19475] netlink: 'syz.1.3848': attribute type 6 has an invalid length. [ 465.662937][T19475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3848'. [ 465.791118][T19486] netlink: 2884 bytes leftover after parsing attributes in process `syz.2.3851'. [ 465.872130][T19487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3851'. [ 465.894073][T19487] IPv6: Can't replace route, no match found [ 466.002705][ T5836] Bluetooth: hci3: command tx timeout [ 466.060955][T19486] hsr_slave_1 (unregistering): left promiscuous mode [ 466.071250][T19495] netlink: 'syz.1.3854': attribute type 1 has an invalid length. [ 466.093129][T19492] netlink: 'syz.1.3854': attribute type 1 has an invalid length. [ 466.095661][T19499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3856'. [ 466.221054][T19490] netlink: 'syz.4.3853': attribute type 10 has an invalid length. [ 466.295493][T19490] team0: Device veth0_macvtap failed to register rx_handler [ 466.384531][T19508] netlink: 'syz.0.3858': attribute type 1 has an invalid length. [ 466.394012][T19505] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3857'. [ 466.414310][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 466.509598][T19508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.558544][T19512] xt_policy: too many policy elements [ 466.571347][T19506] xt_policy: too many policy elements [ 466.592760][T19508] vlan3: entered allmulticast mode [ 466.598052][T19508] veth1: entered allmulticast mode [ 466.611076][T19508] bond3: (slave vlan3): making interface the new active one [ 466.630955][T19508] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 466.790786][T19522] gtp0: entered promiscuous mode [ 466.952943][T19533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3867'. [ 466.983749][T19532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 467.126659][T19533] bond6 (unregistering): Released all slaves [ 467.270846][T19548] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 467.323678][T19548] bond3 (unregistering): Released all slaves [ 467.517645][T19553] clip:clip_setentry: non-CLIP VCC [ 467.525658][T19545] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.065309][T19588] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 468.274902][T19602] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 468.919477][T19624] tipc: Enabling of bearer rejected, failed to enable media [ 468.940313][T19625] validate_nla: 2 callbacks suppressed [ 468.940332][T19625] netlink: 'syz.2.3892': attribute type 10 has an invalid length. [ 468.966698][T19624] netlink: 'syz.1.3890': attribute type 9 has an invalid length. [ 468.985471][T19623] netlink: 'syz.2.3892': attribute type 10 has an invalid length. [ 469.045383][T19623] team0: Port device geneve0 added [ 469.349673][T19656] netlink: 'syz.3.3900': attribute type 4 has an invalid length. [ 469.532398][T19676] netlink: 'syz.0.3908': attribute type 1 has an invalid length. [ 469.617592][T19676] bond5: entered promiscuous mode [ 469.636536][T19689] netlink: 'syz.3.3909': attribute type 1 has an invalid length. [ 469.653826][T19676] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.683866][T19687] netlink: 'syz.4.3910': attribute type 3 has an invalid length. [ 469.702800][T19687] netlink: 'syz.4.3910': attribute type 3 has an invalid length. [ 469.710655][T19687] netlink: 'syz.4.3910': attribute type 3 has an invalid length. [ 469.719668][T19687] netlink: 'syz.4.3910': attribute type 3 has an invalid length. [ 469.847363][T19687] nbd: must specify a size in bytes for the device [ 470.198310][T19721] pim6reg: entered allmulticast mode [ 470.205244][T19725] pim6reg: left allmulticast mode [ 470.366621][T19728] x_tables: duplicate entry at hook 1 [ 470.416129][T19737] bridge3: entered promiscuous mode [ 470.421396][T19737] bridge3: entered allmulticast mode [ 470.607379][T19745] xt_cluster: node mask cannot exceed total number of nodes [ 470.772840][T19757] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 471.041914][ T1133] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x41 [ 472.336719][T19778] tipc: Enabling of bearer rejected, failed to enable media [ 472.678283][T19812] pim6reg: left allmulticast mode [ 473.010593][T19834] __nla_validate_parse: 19 callbacks suppressed [ 473.010610][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 473.043094][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'. [ 473.197130][T19852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3950'. [ 473.298460][T19843] "syz.0.3950" (19843) uses obsolete ecb(arc4) skcipher [ 473.313596][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 473.362357][T19861] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3948'. [ 473.557339][T19871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3956'. [ 473.567577][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3957'. [ 473.591744][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3957'. [ 473.748246][T19884] team_slave_0: entered promiscuous mode [ 473.754095][T19884] team_slave_1: entered promiscuous mode [ 473.793805][T19884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 474.096585][T19890] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 474.117740][T19885] wg1 speed is unknown, defaulting to 1000 [ 474.169723][T19902] syzkaller1: entered promiscuous mode [ 474.194763][T19902] syzkaller1: entered allmulticast mode [ 474.437449][T19910] openvswitch: netlink: Message has 592 unknown bytes. [ 474.445893][T19910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.461510][T19912] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 474.476459][T19908] netlink: 'syz.1.3968': attribute type 11 has an invalid length. [ 474.488887][T19908] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3968'. [ 474.667909][T19920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3972'. [ 474.855086][T19932] validate_nla: 50 callbacks suppressed [ 474.855111][T19932] netlink: 'syz.0.3976': attribute type 1 has an invalid length. [ 474.882012][T19932] netlink: 'syz.0.3976': attribute type 2 has an invalid length. [ 475.264228][T19944] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 475.338427][T19944] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.669189][T19965] bridge: RTM_NEWNEIGH with invalid ether address [ 475.782316][T19972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.914367][ T30] audit: type=1800 audit(1767319165.664:5): pid=19991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3990" name="memory.events" dev="tmpfs" ino=689 res=0 errno=0 [ 476.454095][T20025] delete_channel: no stack [ 476.597494][T20031] bridge_slave_1: left allmulticast mode [ 476.603550][T20031] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.675551][T20031] bridge_slave_0: left allmulticast mode [ 476.681279][T20031] bridge_slave_0: left promiscuous mode [ 476.691484][T20031] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.968960][T20035] wg1 speed is unknown, defaulting to 1000 [ 477.090743][T20064] Cannot find add_set index 0 as target [ 477.098855][T20064] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 477.117910][T20068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.134860][T20073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.462963][T20086] netlink: 'syz.3.4012': attribute type 1 has an invalid length. [ 477.578781][T20094] netlink: 'syz.4.4014': attribute type 3 has an invalid length. [ 477.610093][T20086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.750811][T20095] macvlan2: entered promiscuous mode [ 477.762532][T20095] macvlan2: entered allmulticast mode [ 478.115483][T20116] bridge6: port 1(veth3) entered blocking state [ 478.132489][T20116] bridge6: port 1(veth3) entered disabled state [ 478.139017][T20116] veth3: entered allmulticast mode [ 478.177874][T20116] veth3: entered promiscuous mode [ 478.189771][T20123] bridge6: port 2(veth0_to_bond) entered blocking state [ 478.201455][T20123] bridge6: port 2(veth0_to_bond) entered disabled state [ 478.209094][T20123] veth0_to_bond: entered allmulticast mode [ 478.216137][T20123] veth0_to_bond: entered promiscuous mode [ 478.223379][T20122] __nla_validate_parse: 10 callbacks suppressed [ 478.223396][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4020'. [ 478.411384][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4023'. [ 478.644272][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4029'. [ 478.695055][T20153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4029'. [ 478.723976][T20157] batman_adv: batadv0: Adding interface: veth41 [ 478.733607][T20157] batman_adv: batadv0: The MTU of interface veth41 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.761377][T20157] batman_adv: batadv0: Interface activated: veth41 [ 478.769962][T20167] IPVS: length: 8 != 1152 [ 478.811461][T20153] netlink: 'syz.4.4029': attribute type 7 has an invalid length. [ 478.855076][T20153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4029'. [ 478.873299][T20153] netlink: 'syz.4.4029': attribute type 7 has an invalid length. [ 478.891300][T20153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4029'. [ 478.920991][T20173] xt_NFQUEUE: number of total queues is 0 [ 478.969859][T20176] netlink: 'syz.3.4037': attribute type 3 has an invalid length. [ 478.978518][T20176] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4037'. [ 478.994851][T20173] syzkaller0: entered promiscuous mode [ 479.018294][T20173] syzkaller0: entered allmulticast mode [ 479.057849][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 479.129920][T20174] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 479.649870][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4047'. [ 479.693154][T20224] netlink: 'syz.4.4049': attribute type 1 has an invalid length. [ 479.701724][T20224] netlink: 'syz.4.4049': attribute type 2 has an invalid length. [ 479.850157][T20234] netlink: 536 bytes leftover after parsing attributes in process `syz.3.4050'. [ 479.955628][T20243] bond8: option lp_interval: invalid value (0) [ 479.961830][T20243] bond8: option lp_interval: allowed values 1 - 2147483647 [ 479.972975][T20243] bond8 (unregistering): Released all slaves [ 480.075855][T20249] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.497386][T20275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.736695][T20292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.857585][T20302] nft_compat: unsupported protocol 0 [ 480.871469][T20302] nft_compat: unsupported protocol 0 [ 480.902888][T20302] nft_compat: unsupported protocol 0 [ 480.937123][T20302] nft_compat: unsupported protocol 0 [ 480.945471][T20302] nft_compat: unsupported protocol 0 [ 480.951093][T20302] nft_compat: unsupported protocol 0 [ 480.963826][T20302] nft_compat: unsupported protocol 0 [ 480.976926][T20302] nft_compat: unsupported protocol 0 [ 480.984231][T20302] nft_compat: unsupported protocol 0 [ 480.993107][T20302] nft_compat: unsupported protocol 0 [ 480.998960][T20302] nft_compat: unsupported protocol 0 [ 481.004968][T20302] nft_compat: unsupported protocol 0 [ 481.022929][T20302] nft_compat: unsupported protocol 0 [ 481.028609][T20302] nft_compat: unsupported protocol 0 [ 481.037250][T20302] nft_compat: unsupported protocol 0 [ 481.043167][T20302] nft_compat: unsupported protocol 0 [ 481.070059][T20302] nft_compat: unsupported protocol 0 [ 481.080697][T20302] nft_compat: unsupported protocol 0 [ 481.089858][T20302] nft_compat: unsupported protocol 0 [ 481.095701][T20302] nft_compat: unsupported protocol 0 [ 481.102292][T20302] nft_compat: unsupported protocol 0 [ 481.115058][T20302] nft_compat: unsupported protocol 0 [ 481.120636][T20302] nft_compat: unsupported protocol 0 [ 481.167528][T20302] nft_compat: unsupported protocol 0 [ 481.182328][T20302] nft_compat: unsupported protocol 0 [ 481.196196][T20302] nft_compat: unsupported protocol 0 [ 481.226636][T20302] nft_compat: unsupported protocol 0 [ 481.263761][T20302] nft_compat: unsupported protocol 0 [ 481.269332][T20302] nft_compat: unsupported protocol 0 [ 481.306260][T20336] Cannot find add_set index 2 as target [ 481.319672][T20302] nft_compat: unsupported protocol 0 [ 481.328917][T20302] nft_compat: unsupported protocol 0 [ 481.336170][T20302] nft_compat: unsupported protocol 0 [ 481.343109][T20302] nft_compat: unsupported protocol 0 [ 481.349757][T20302] nft_compat: unsupported protocol 0 [ 481.350093][T20332] block nbd1: Unsupported socket: should be TCP or UNIX. [ 481.355722][T20302] nft_compat: unsupported protocol 0 [ 481.355948][T20302] nft_compat: unsupported protocol 0 [ 481.404309][T20302] nft_compat: unsupported protocol 0 [ 481.411500][T20302] nft_compat: unsupported protocol 0 [ 481.420028][T20302] nft_compat: unsupported protocol 0 [ 481.426721][T20302] nft_compat: unsupported protocol 0 [ 481.427091][T20341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.433869][T20302] nft_compat: unsupported protocol 0 [ 481.457296][T20340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.469527][T20302] nft_compat: unsupported protocol 0 [ 481.475949][T20302] nft_compat: unsupported protocol 0 [ 481.481469][T20302] nft_compat: unsupported protocol 0 [ 481.489873][T20302] nft_compat: unsupported protocol 0 [ 481.496035][T20302] nft_compat: unsupported protocol 0 [ 481.501672][T20302] nft_compat: unsupported protocol 0 [ 481.517631][T20302] nft_compat: unsupported protocol 0 [ 481.525398][T20302] nft_compat: unsupported protocol 0 [ 481.537576][T20302] nft_compat: unsupported protocol 0 [ 481.543758][T20302] nft_compat: unsupported protocol 0 [ 481.549387][T20302] nft_compat: unsupported protocol 0 [ 481.555383][T20302] nft_compat: unsupported protocol 0 [ 481.561009][T20302] nft_compat: unsupported protocol 0 [ 481.567423][T20302] nft_compat: unsupported protocol 0 [ 481.578200][T20302] nft_compat: unsupported protocol 0 [ 481.587418][T20302] nft_compat: unsupported protocol 0 [ 481.620424][T20302] nft_compat: unsupported protocol 0 [ 481.636649][T20302] nft_compat: unsupported protocol 0 [ 481.652839][T20302] nft_compat: unsupported protocol 0 [ 481.668398][T20302] nft_compat: unsupported protocol 0 [ 481.733736][T20361] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 481.751311][T20361] nbd: error processing sock list [ 481.758677][T20361] block nbd1: shutting down sockets [ 481.799104][T17989] IPVS: starting estimator thread 0... [ 481.901130][T20364] IPVS: using max 31 ests per chain, 74400 per kthread [ 481.954010][T20370] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 482.457893][T20404] Cannot find add_set index 0 as target [ 482.791391][T20428] gre0: entered promiscuous mode [ 482.812957][T20428] gre0: entered allmulticast mode [ 482.889017][T20437] tipc: Enabling of bearer rejected, failed to enable media [ 482.950244][T20430] netlink: 'syz.0.4111': attribute type 12 has an invalid length. [ 483.151014][T20452] netlink: Unknown conntrack attr (0) [ 483.321680][T20459] bond6: ARP target 1.0.0.0 is already present [ 483.331013][T20459] bond6: option arp_ip_target: invalid value (1) [ 483.351548][T20465] __nla_validate_parse: 18 callbacks suppressed [ 483.351567][T20465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4123'. [ 483.351643][T20459] bond6 (unregistering): Released all slaves [ 483.440871][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 483.683116][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 483.759572][T20499] netlink: 'syz.0.4132': attribute type 1 has an invalid length. [ 483.787818][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4132'. [ 483.918439][T20503] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 483.944416][T20509] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 483.991484][T20508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4138'. [ 484.149759][T20523] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4140'. [ 484.154455][T20524] netlink: 'syz.3.4141': attribute type 10 has an invalid length. [ 484.209320][T20527] xt_policy: output policy not valid in PREROUTING and INPUT [ 484.210948][T20524] bridge_slave_1: left allmulticast mode [ 484.242693][T20524] bridge_slave_1: left promiscuous mode [ 484.254872][T20524] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.276456][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4144'. [ 484.299894][T20524] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 484.548831][T20551] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 484.630783][T20558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4153'. [ 484.790848][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4156'. [ 484.838057][T20566] veth3: entered allmulticast mode [ 485.000205][T20573] netlink: 'syz.1.4159': attribute type 11 has an invalid length. [ 485.011434][T20573] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4159'. [ 485.121547][T20586] netlink: 'syz.1.4163': attribute type 1 has an invalid length. [ 485.129976][T20589] netlink: 'syz.1.4163': attribute type 1 has an invalid length. [ 485.196149][T20586] bond3: (slave veth5): Enslaving as an active interface with a down link [ 485.220733][T20589] bond3: (slave veth0_to_bond): making interface the new active one [ 485.233555][T20589] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 485.250456][T20586] bond3: entered promiscuous mode [ 485.256150][T20586] veth0_to_bond: entered promiscuous mode [ 485.262540][T20586] bond3: entered allmulticast mode [ 485.267896][T20586] veth0_to_bond: entered allmulticast mode [ 485.498094][T20604] syzkaller0: entered allmulticast mode [ 485.524942][T20606] syzkaller0: entered promiscuous mode [ 485.539946][T20606] syzkaller0: entered allmulticast mode [ 485.793380][T20617] netlink: 'syz.2.4173': attribute type 21 has an invalid length. [ 485.822719][T20617] netlink: 'syz.2.4173': attribute type 5 has an invalid length. [ 486.115955][T20638] netlink: 'syz.4.4182': attribute type 1 has an invalid length. [ 486.380516][T20649] netlink: 'syz.2.4187': attribute type 5 has an invalid length. [ 486.780279][T20682] IPv6: addrconf: prefix option has invalid lifetime [ 487.417715][T20727] netlink: 'syz.3.4210': attribute type 4 has an invalid length. [ 487.721753][T20758] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 501.595755][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.605260][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.792441][ T5151] Bluetooth: hci5: command 0x0406 tx timeout [ 513.912426][ T5151] Bluetooth: hci1: command 0x041b tx timeout [ 515.729442][T20788] netlink: 'syz.4.4230': attribute type 21 has an invalid length. [ 515.729451][T20786] __nla_validate_parse: 12 callbacks suppressed [ 515.729468][T20786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4228'. [ 515.729552][T20788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4230'. [ 515.752548][T20786] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4228'. [ 515.814795][T20786] netlink: 'syz.2.4228': attribute type 5 has an invalid length. [ 515.830594][T20786] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4228'. [ 515.919554][T20795] bond4 (unregistering): Released all slaves [ 515.988182][T20799] macsec2: entered promiscuous mode [ 516.064595][T20804] tipc: New replicast peer: 255.255.255.255 [ 516.071801][T20804] tipc: Enabled bearer , priority 10 [ 516.158665][T20806] netlink: 'syz.4.4235': attribute type 1 has an invalid length. [ 516.169456][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4235'. [ 516.201204][T20818] Bluetooth: MGMT ver 1.23 [ 516.521594][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4243'. [ 516.584992][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 516.620189][T20836] bridge_slave_1: left allmulticast mode [ 516.627581][T20836] bridge_slave_1: left promiscuous mode [ 516.634886][T20836] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.659131][T20836] bridge_slave_0: left promiscuous mode [ 516.675296][T20836] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.704354][T20844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4244'. [ 516.893412][T20847] wg1 speed is unknown, defaulting to 1000 [ 517.005461][T20856] sctp: [Deprecated]: syz.1.4253 (pid 20856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.005461][T20856] Use struct sctp_sack_info instead [ 517.197170][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4257'. [ 517.215749][T20870] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 517.358622][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4260'. [ 518.195969][T20929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.209981][T20929] netlink: 'syz.4.4275': attribute type 4 has an invalid length. [ 518.385645][T20940] netlink: 'syz.2.4280': attribute type 83 has an invalid length. [ 518.655960][T20957] syzkaller0: entered promiscuous mode [ 518.680766][T20957] syzkaller0: entered allmulticast mode [ 518.713441][T20956] tipc: Enabled bearer , priority 0 [ 518.741633][T20968] netlink: 'syz.2.4287': attribute type 12 has an invalid length. [ 518.796668][T20956] tipc: Resetting bearer [ 518.837058][T20956] tipc: Disabling bearer [ 518.951355][T20982] openvswitch: netlink: Actions may not be safe on all matching packets [ 519.385721][T21013] syzkaller0: entered promiscuous mode [ 519.391229][T21013] syzkaller0: entered allmulticast mode [ 519.437297][T21013] 0: reclassify loop, rule prio 0, protocol 800 [ 520.093515][T21049] netlink: 'syz.3.4312': attribute type 11 has an invalid length. [ 520.142954][T21058] netlink: 'syz.0.4316': attribute type 1 has an invalid length. [ 520.181776][T21056] 8021q: VLANs not supported on ip_vti0 [ 520.307267][T21067] veth0_to_bond: left allmulticast mode [ 520.327047][T21067] veth0_to_bond: left promiscuous mode [ 520.344044][T21073] xt_policy: too many policy elements [ 520.363809][T21067] bridge6: port 2(veth0_to_bond) entered disabled state [ 520.567315][T21089] atomic_op ffff8880770b2198 conn xmit_atomic 0000000000000000 [ 520.567497][T21092] netlink: 'syz.0.4324': attribute type 21 has an invalid length. [ 520.670944][T21092] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 520.726781][T21092] bond8 (unregistering): Released all slaves [ 520.731399][T21101] netlink: 'syz.1.4327': attribute type 1 has an invalid length. [ 520.887634][T21101] bond4: (slave gretap1): making interface the new active one [ 520.917161][T21101] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 520.974733][T21111] __nla_validate_parse: 11 callbacks suppressed [ 520.974752][T21111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4331'. [ 521.017161][T21117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4333'. [ 521.192612][T21133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4336'. [ 521.407294][T21142] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4341'. [ 521.482610][T21144] wg1 speed is unknown, defaulting to 1000 [ 521.618059][T21158] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4342'. [ 521.882194][T21176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4349'. [ 522.150420][T21185] wg1 speed is unknown, defaulting to 1000 [ 522.841153][T21179] delete_channel: no stack [ 522.843987][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4359'. [ 523.310145][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 523.544437][T21234] openvswitch: netlink: Duplicate or invalid key (type 0). [ 523.574778][T21234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.723141][T21243] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 523.735313][T21245] netlink: 'syz.1.4367': attribute type 1 has an invalid length. [ 523.815248][T21245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 523.845903][T21248] bond5: (slave geneve4): making interface the new active one [ 523.859625][T21248] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 523.891694][T21252] sctp: [Deprecated]: syz.2.4368 (pid 21252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.891694][T21252] Use struct sctp_sack_info instead [ 523.923744][T21257] netlink: 408 bytes leftover after parsing attributes in process `syz.3.4370'. [ 523.951847][T21252] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4368'. [ 524.090226][T21269] netlink: 'syz.4.4372': attribute type 1 has an invalid length. [ 524.163297][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 524.324599][T21280] syzkaller0: entered promiscuous mode [ 524.330232][T21280] syzkaller0: entered allmulticast mode [ 526.337831][T21316] netlink: 'syz.4.4387': attribute type 1 has an invalid length. [ 526.352551][T21316] __nla_validate_parse: 1 callbacks suppressed [ 526.352569][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4387'. [ 526.464970][T21323] Cannot find set identified by id 0 to match [ 526.732977][T21346] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4396'. [ 526.766303][T21345] netlink: 'syz.1.4396': attribute type 83 has an invalid length. [ 526.893007][T21354] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 526.964173][T21354] netlink: 'syz.0.4399': attribute type 2 has an invalid length. [ 527.149131][T21370] macvtap1: entered promiscuous mode [ 527.163393][T21370] macvtap1: entered allmulticast mode [ 527.177951][T21370] veth1_vlan: entered allmulticast mode [ 527.225561][ T6367] bridge_slave_1: left allmulticast mode [ 527.247632][T21384] netlink: 'syz.4.4409': attribute type 1 has an invalid length. [ 527.253567][ T6367] bridge_slave_1: left promiscuous mode [ 527.271487][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.303675][ T6367] bridge_slave_0: left promiscuous mode [ 527.309715][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.348593][T21390] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 528.447449][ T6367] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 528.892886][ T6367] bond0 (unregistering): (slave 32): Releasing backup interface [ 528.902527][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.911760][ T6367] bond0 (unregistering): Released all slaves [ 528.924379][ T6367] bond1 (unregistering): Released all slaves [ 528.937405][ T6367] bond2 (unregistering): Released all slaves [ 528.949173][ T6367] bond3 (unregistering): Released all slaves [ 528.963430][ T6367] bond4 (unregistering): Released all slaves [ 528.979561][ T6367] bond5 (unregistering): (slave C): Releasing backup interface [ 528.994593][ T6367] bond5 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 529.006132][ T6367] bond5 (unregistering): Released all slaves [ 529.018632][ T6367] bond6 (unregistering): (slave bond7): Releasing backup interface [ 529.027539][ T6367] bond6 (unregistering): Released all slaves [ 529.131146][ T6367] bond7 (unregistering): Released all slaves [ 529.144391][ T6367] bond8 (unregistering): (slave veth9): Releasing active interface [ 529.153337][ T6367] bond8 (unregistering): Released all slaves [ 529.165650][T21384] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 529.278557][T21405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4414'. [ 529.337634][ T6367] : left promiscuous mode [ 529.465459][ T6367] tipc: Disabling bearer [ 529.488673][ T6367] tipc: Left network mode [ 529.550559][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4420'. [ 529.583127][ T6367] IPVS: stopping master sync thread 13475 ... [ 529.615347][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'. [ 529.695988][T21430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4423'. [ 529.880915][T21435] netlink: 576 bytes leftover after parsing attributes in process `syz.1.4425'. [ 529.975345][T21443] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20 [ 530.150637][T21448] netlink: zone id is out of range [ 530.172967][T21448] netlink: zone id is out of range [ 530.188254][T21448] netlink: del zone limit has 4 unknown bytes [ 530.283175][T21461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'. [ 530.614258][ T6367] hsr_slave_0: left promiscuous mode [ 530.623062][ T6367] hsr_slave_1: left promiscuous mode [ 530.740305][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4441'. [ 531.358973][T21525] netlink: 186396 bytes leftover after parsing attributes in process `syz.1.4448'. [ 531.505303][T21533] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4449'. [ 531.578354][T21537] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4450'. [ 531.589977][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 531.637584][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 531.645792][ T6163] smc: removing ib device !yz! [ 531.688896][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4447'. [ 531.699472][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4447'. [ 532.214207][T21526] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 532.229819][T21543] vcan2: entered promiscuous mode [ 532.263169][T21543] vcan2: entered allmulticast mode [ 532.391077][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4453'. [ 532.402359][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4453'. [ 532.813818][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'. [ 532.833295][T21582] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4459'. [ 532.948169][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4461'. [ 532.965825][T21585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4461'. [ 532.987074][T21585] netlink: 'syz.2.4461': attribute type 142 has an invalid length. [ 533.582424][T21622] syzkaller0: entered promiscuous mode [ 533.587968][T21622] syzkaller0: entered allmulticast mode [ 533.863112][T21639] netlink: 'syz.0.4476': attribute type 58 has an invalid length. [ 534.100077][T21645] netlink: 'syz.0.4478': attribute type 3 has an invalid length. [ 534.109796][T21643] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20003 [ 534.135873][T21645] netlink: 'syz.0.4478': attribute type 3 has an invalid length. [ 534.326321][T21623] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 534.583843][ T6367] IPVS: stop unused estimator thread 0... [ 535.328289][T21699] openvswitch: netlink: Invalid VLAN frame [ 535.557253][T21695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.596362][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 535.603510][T21695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.636635][T21695] bond0 (unregistering): Released all slaves [ 535.968927][T21730] netlink: 'syz.0.4501': attribute type 13 has an invalid length. [ 535.998403][T21730] erspan0: refused to change device tx_queue_len [ 536.007084][T21730] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 536.425561][T21758] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 536.479230][T21758] netlink: 'syz.2.4508': attribute type 1 has an invalid length. [ 536.487211][T21758] netlink: 'syz.2.4508': attribute type 2 has an invalid length. [ 536.496499][T21766] netlink: 'syz.0.4511': attribute type 12 has an invalid length. [ 536.505887][T21766] netlink: 'syz.0.4511': attribute type 29 has an invalid length. [ 536.519134][T21766] __nla_validate_parse: 10 callbacks suppressed [ 536.519154][T21766] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4511'. [ 536.537617][T21766] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4511'. [ 536.549622][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4511'. [ 536.758964][T21782] netlink: 'syz.3.4514': attribute type 8 has an invalid length. [ 536.931146][T21790] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.274683][T21806] syzkaller0: entered promiscuous mode [ 537.291411][T21806] syzkaller0: entered allmulticast mode [ 537.424833][T21816] Cannot find add_set index 65532 as target [ 537.448740][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065bd2000: rx timeout, send abort [ 537.553945][T21828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 537.569388][T21828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 537.640449][T21841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4530'. [ 537.896946][T21857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4536'. [ 537.948851][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065bd2400: rx timeout, send abort [ 537.957294][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065bd2000: abort rx timeout. Force session deactivation [ 538.058529][T21865] netlink: 'syz.3.4540': attribute type 11 has an invalid length. [ 538.117509][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4542'. [ 538.349608][T21889] validate_nla: 10 callbacks suppressed [ 538.349626][T21889] netlink: 'syz.1.4545': attribute type 8 has an invalid length. [ 538.375965][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 538.380103][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 538.457172][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065bd2400: abort rx timeout. Force session deactivation [ 538.669175][T21903] netlink: 'syz.0.4552': attribute type 1 has an invalid length. [ 538.712436][T21906] tipc: Enabled bearer , priority 10 [ 538.778041][ C0] hrtimer: interrupt took 52349889 ns [ 643.801890][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 643.808879][ C1] rcu: 0-...!: (5 ticks this GP) idle=05fc/1/0x4000000000000000 softirq=90791/90791 fqs=9 [ 643.819840][ C1] rcu: (detected by 1, t=10502 jiffies, g=77689, q=1267 ncpus=2) [ 643.827670][ C1] Sending NMI from CPU 1 to CPUs 0: [ 643.827705][ C0] NMI backtrace for cpu 0 [ 643.827725][ C0] CPU: 0 UID: 0 PID: 21915 Comm: syz.4.4556 Not tainted syzkaller #0 PREEMPT(full) [ 643.827745][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.827756][ C0] RIP: 0010:lock_release+0xd/0x3b0 [ 643.827778][ C0] Code: 2f 00 00 00 e9 0e ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 20 f1 e1 10 48 89 44 [ 643.827793][ C0] RSP: 0018:ffffc90000007ac0 EFLAGS: 00000006 [ 643.827809][ C0] RAX: ffffffff8970671c RBX: ffffffff89706658 RCX: ffff88804d9a8000 [ 643.827822][ C0] RDX: 0000000000010100 RSI: ffffffff89706658 RDI: ffffffff8df41aa0 [ 643.827834][ C0] RBP: 0000000000000001 R08: ffff88806413d19f R09: 1ffff1100c827a33 [ 643.827846][ C0] R10: dffffc0000000000 R11: ffffed100c827a34 R12: ffff88806413d320 [ 643.827858][ C0] R13: ffff88806413d000 R14: 1886c783875a2800 R15: ffff88807c286000 [ 643.827872][ C0] FS: 00007fcd983da6c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 643.827886][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.827898][ C0] CR2: 000000110c2405f9 CR3: 0000000075d88000 CR4: 00000000003526f0 [ 643.827913][ C0] Call Trace: [ 643.827923][ C0] [ 643.827934][ C0] advance_sched+0xb23/0xc90 [ 643.827968][ C0] ? __pfx_advance_sched+0x10/0x10 [ 643.827989][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 643.828010][ C0] ? lock_acquire+0x107/0x340 [ 643.828035][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 643.828062][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 643.828085][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 643.828120][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 643.828141][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 643.828158][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 643.828175][ C0] RIP: 0010:handle_softirqs+0x161/0x7c0 [ 643.828193][ C0] Code: 89 6c 24 20 0f b7 db 48 c7 c7 60 d8 69 8b e8 d6 79 d4 09 65 66 c7 05 74 dd fa 10 00 00 e8 57 8c 43 00 fb 48 c7 c5 c0 c0 c0 8d ff ff ff ff 0f bc c3 41 89 c6 41 ff c6 0f 84 85 03 00 00 89 5c [ 643.828207][ C0] RSP: 0018:ffffc90000007f40 EFLAGS: 00000206 [ 643.828221][ C0] RAX: 0000000000001b0c RBX: 0000000000000386 RCX: 0000000000000102 [ 643.828232][ C0] RDX: 0000000000000003 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0 [ 643.828243][ C0] RBP: ffffffff8dc0c0c0 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 643.828255][ C0] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: 0000000000000000 [ 643.828267][ C0] R13: 0000000000000000 R14: ffff88804d9a8000 R15: 0000000000000000 [ 643.828290][ C0] ? __irq_exit_rcu+0x60/0x150 [ 643.828311][ C0] __irq_exit_rcu+0x60/0x150 [ 643.828328][ C0] irq_exit_rcu+0x9/0x30 [ 643.828343][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 643.828359][ C0] [ 643.828365][ C0] [ 643.828371][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 643.828388][ C0] RIP: 0010:kasan_check_range+0x1dc/0x2c0 [ 643.828409][ C0] Code: 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 cc cc cc cc cc 45 84 ff 75 63 41 f7 c7 00 ff 00 00 75 5f 41 [ 643.828423][ C0] RSP: 0018:ffffc9000bc5f2b0 EFLAGS: 00000256 [ 643.828437][ C0] RAX: 0000000000000001 RBX: ffff8880b8640b40 RCX: ffffffff819e91ce [ 643.828449][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b8640b40 [ 643.828459][ C0] RBP: ffffc9000bc5f358 R08: ffff8880b8640b43 R09: 1ffff110170c8168 [ 643.828472][ C0] R10: dffffc0000000000 R11: ffffed10170c8169 R12: 1ffff9200178be58 [ 643.828484][ C0] R13: 0000000000000981 R14: ffffc9000bc5f2e0 R15: dffffc0000000000 [ 643.828501][ C0] ? do_raw_spin_trylock+0x9e/0x180 [ 643.828526][ C0] do_raw_spin_trylock+0x9e/0x180 [ 643.828548][ C0] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 643.828574][ C0] ? zone_watermark_fast+0x3d/0x230 [ 643.828593][ C0] _raw_spin_trylock+0x21/0x80 [ 643.828616][ C0] get_page_from_freelist+0x6ea/0x2580 [ 643.828642][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 643.828671][ C0] ? prepare_alloc_pages+0x22b/0x650 [ 643.828693][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 643.828713][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 643.828735][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 643.828758][ C0] ? policy_nodemask+0x27c/0x720 [ 643.828780][ C0] alloc_pages_mpol+0x232/0x4a0 [ 643.828802][ C0] vma_alloc_folio_noprof+0xe4/0x200 [ 643.828822][ C0] ? page_table_check_set+0x148/0x610 [ 643.828838][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 643.828857][ C0] ? css_rstat_updated+0x239/0x520 [ 643.828884][ C0] ? ___pte_offset_map+0x29/0x240 [ 643.828908][ C0] folio_prealloc+0x30/0x180 [ 643.828925][ C0] do_pte_missing+0x14e8/0x3330 [ 643.828953][ C0] handle_mm_fault+0x1b26/0x32b0 [ 643.828975][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 643.829004][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 643.829031][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 643.829059][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 643.829087][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 643.829114][ C0] __get_user_pages+0x1650/0x29f0 [ 643.829152][ C0] populate_vma_page_range+0x29f/0x3a0 [ 643.829174][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 643.829198][ C0] ? down_read+0x274/0x2e0 [ 643.829214][ C0] ? __mm_populate+0x160/0x380 [ 643.829235][ C0] __mm_populate+0x24c/0x380 [ 643.829256][ C0] ? __pfx___mm_populate+0x10/0x10 [ 643.829282][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 643.829300][ C0] ? __se_sys_futex+0x36f/0x400 [ 643.829320][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 643.829341][ C0] ? rcu_is_watching+0x15/0xb0 [ 643.829362][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 643.829384][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 643.829402][ C0] do_syscall_64+0xec/0xf80 [ 643.829419][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.829435][ C0] ? trace_irq_disable+0x37/0x100 [ 643.829455][ C0] ? clear_bhb_loop+0x60/0xb0 [ 643.829474][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.829490][ C0] RIP: 0033:0x7fcd9758f749 [ 643.829506][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.829520][ C0] RSP: 002b:00007fcd983da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 643.829536][ C0] RAX: ffffffffffffffda RBX: 00007fcd977e5fa0 RCX: 00007fcd9758f749 [ 643.829548][ C0] RDX: b80393884f01a506 RSI: 0000000000b36000 RDI: 0000200000000000 [ 643.829560][ C0] RBP: 00007fcd97613f91 R08: ffffffffffffffff R09: 0000000000000000 [ 643.829571][ C0] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 643.829582][ C0] R13: 00007fcd977e6038 R14: 00007fcd977e5fa0 R15: 00007fffbc162a68 [ 643.829603][ C0] [ 643.829700][ C1] rcu: rcu_preempt kthread starved for 7405 jiffies! g77689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 644.498983][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 644.508955][ C1] rcu: RCU grace-period kthread stack dump: [ 644.514930][ C1] task:rcu_preempt state:R running task stack:27480 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 644.528431][ C1] Call Trace: [ 644.531889][ C1] [ 644.534824][ C1] __schedule+0x149b/0x4fd0 [ 644.539342][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 644.544281][ C1] ? do_raw_spin_lock+0x121/0x290 [ 644.549326][ C1] ? __pfx___schedule+0x10/0x10 [ 644.554201][ C1] ? schedule+0x91/0x360 [ 644.558445][ C1] schedule+0x165/0x360 [ 644.562604][ C1] schedule_timeout+0x12b/0x270 [ 644.567460][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 644.572842][ C1] ? __pfx_process_timeout+0x10/0x10 [ 644.578143][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 644.584041][ C1] ? prepare_to_swait_event+0x341/0x380 [ 644.589612][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 644.594494][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 644.600665][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 644.605967][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 644.611207][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 644.617129][ C1] rcu_gp_kthread+0x99/0x390 [ 644.621731][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 644.626930][ C1] ? __kthread_parkme+0x7b/0x200 [ 644.631866][ C1] ? __kthread_parkme+0x1a1/0x200 [ 644.636902][ C1] kthread+0x711/0x8a0 [ 644.640983][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 644.646193][ C1] ? __pfx_kthread+0x10/0x10 [ 644.650799][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.656011][ C1] ? __pfx_kthread+0x10/0x10 [ 644.660604][ C1] ret_from_fork+0x510/0xa50 [ 644.665199][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 644.670314][ C1] ? __switch_to+0xc9e/0x1480 [ 644.674999][ C1] ? __pfx_kthread+0x10/0x10 [ 644.679590][ C1] ret_from_fork_asm+0x1a/0x30 [ 644.684372][ C1] [ 644.687396][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 644.693713][ C1] CPU: 1 UID: 0 PID: 21548 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 644.702644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.712692][ C1] RIP: 0010:smp_call_function_many_cond+0xcca/0x1260 [ 644.719374][ C1] Code: 89 ee 83 e6 01 31 ff e8 e4 97 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 8f 93 0b 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 73 93 0b 00 eb e4 44 [ 644.739064][ C1] RSP: 0000:ffffc90002e67820 EFLAGS: 00000293 [ 644.745130][ C1] RAX: 0000000000000000 RBX: 1ffff110170c856d RCX: ffff888025090000 [ 644.753095][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 644.761073][ C1] RBP: ffffc90002e67950 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 644.769047][ C1] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: ffff8880b8642b68 [ 644.777122][ C1] R13: dffffc0000000000 R14: ffff8880b873bb00 R15: 0000000000000000 [ 644.785205][ C1] FS: 00007ff9eaf57880(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 644.794151][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.800732][ C1] CR2: 0000560b42a0a568 CR3: 0000000053b90000 CR4: 00000000003526f0 [ 644.808707][ C1] Call Trace: [ 644.811986][ C1] [ 644.814918][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 644.820309][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 644.825518][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 644.831855][ C1] ? rcu_is_watching+0x15/0xb0 [ 644.836622][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 644.842000][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 644.847207][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 644.852333][ C1] flush_tlb_mm_range+0x60a/0x1170 [ 644.857455][ C1] ? page_table_check_clear+0x4b8/0x5f0 [ 644.863003][ C1] ptep_clear_flush+0x120/0x170 [ 644.867862][ C1] do_wp_page+0x1bb1/0x5810 [ 644.872387][ C1] ? do_wp_page+0x1622/0x5810 [ 644.877091][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 644.882049][ C1] ? do_raw_spin_lock+0x121/0x290 [ 644.887094][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 644.892490][ C1] handle_mm_fault+0x14c5/0x32b0 [ 644.897542][ C1] ? handle_mm_fault+0xdb/0x32b0 [ 644.902840][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 644.908138][ C1] ? lock_vma_under_rcu+0x42c/0x4a0 [ 644.913347][ C1] ? do_raw_spin_lock+0x121/0x290 [ 644.918391][ C1] do_user_addr_fault+0xa7c/0x1380 [ 644.923510][ C1] ? rcu_is_watching+0x15/0xb0 [ 644.928279][ C1] ? trace_page_fault_user+0x84/0x1c0 [ 644.933655][ C1] exc_page_fault+0x71/0xd0 [ 644.938168][ C1] asm_exc_page_fault+0x26/0x30 [ 644.943019][ C1] RIP: 0033:0x7ff9ea8b5b69 [ 644.947435][ C1] Code: 10 48 81 f9 ff 03 00 00 76 28 48 8b 57 20 48 85 d2 74 1f 48 3b 7a 28 75 76 48 8b 4f 28 48 3b 79 20 75 6c 48 83 78 20 00 74 17 <48> 89 4a 28 48 89 51 20 48 83 c4 08 c3 66 2e 0f 1f 84 00 00 00 00 [ 644.967145][ C1] RSP: 002b:00007ffcc29b7d50 EFLAGS: 00010202 [ 644.973296][ C1] RAX: 00007ff9ea9f21d0 RBX: 0000560b42a0a540 RCX: 0000560b42a0a540 [ 644.981272][ C1] RDX: 0000560b42a0a540 RSI: 00007ff9ea9f21d0 RDI: 0000560b42a0a540 [ 644.989237][ C1] RBP: 00007ff9ea9f1ac0 R08: 0000000000002760 R09: 0000000000000000 [ 644.997208][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000049c0 [ 645.005174][ C1] R13: 0000560b42a0ef00 R14: 00000000000003e0 R15: 00007ff9ea9f1ac0 [ 645.013162][ C1]