last executing test programs: 3m17.090724436s ago: executing program 3 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000003d0007f350f4010000000000000000027c00100400fca00c00018008000600ffff0001429b7d1d9ffe52aaad75e6ae5e3bbcd01d80f0b14777e3056611cea3ee4b7ecda0007c1e67ff1b817336d20dd3f0f84aa1766c4666624cb96db708000000000000001a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x5d31c0abe601c91e}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x20, r5, 0x38ffd1a3552793bb, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004819}, 0x8000000) (async) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x11}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 3m16.966821135s ago: executing program 0 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 3m16.940464804s ago: executing program 3 (id=1285): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_mreq(r0, 0x0, 0x7, &(0x7f0000000000)={@loopback, @local}, 0x8) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x102}], 0x1, 0x45833af92e4b38bf, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x99}]}]}]}, 0x2c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000a00)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=[{0x98, 0xa1, 0xffff, "2f6fe9d459fbada09ffdc9cfc237d99251230a5d91795ddd7b5efe93b4bfb0e093dcd6a2f95f800677156ee257fd60fd1211ab2fb40b69266eed9ea1d2d89b3024a1034cfd7f5133ce5542f5d769d1cee2348d219a24074b5ed4d7429301ef325a264c3071e2dc08838a2a522fcb84a10deee2fb621edf4d592061ace5cb754090014bdfb87c"}, {0x18, 0x10c, 0x100, "eda645558b58"}, {0x98, 0x101, 0x8, "00bc7ce0b31bcb34b07a71d3e488fb8651ebc89131abb1b0a268cb11bc4145769e57f9cdb5d3d443ebacd861d89aba00c0ed041a6cf992108d9322de4fda7aafd64cbd3067dd72adbeced296889ae85f59c30961eac6f9ae9cea0b7279367f6f2c79fb19ba0ca761c870dae46579ba0b0bac6849d4d484ca042a5deb1cef7f838e19968d4d2d"}, {0x70, 0x108, 0x12, "bfe52537c73f0a792ba2fbba72ff036bf2cdfc0eadc732ac145b7dfb4927c44658b2684e5174f207d7b98161067bceb545648a1ba3ab2261d1805ad7b7b000541c3a049f8c2aa78dd4e6da004edd300fa1cb4a729ed9851e8f"}], 0x1b8}}, {{&(0x7f0000000100)=@x25, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="9daee578e6082b1b6b42716b65392fe1561377b383e3d9e2c11e1d14881122b4d16cd1f2563e93c87f6f45241a024a67936a41c91edf2643e66010aeb3fb7e9e268e6ef4fd37295c569c821be9998e871815dacd288f545f65ed1909110e1beda79908df50902a47ad5bbc58921f4ecee9649b41e286f588d11b36b747b8c4e522fb3fb63b13da2812f14a6fdc023fc7e48f3748b8afaf8358cff78f0a7e39cc5dae040065d43adb79848e70950024c3a35cd708a990a06c1af83e93521e6246fe13f22b2aca2ae1", 0xc8}, {&(0x7f0000000180)="fc1d420553074c1a43b43fb04bd38410d9602ea2420679a23ed6218160edb38e53f9b49d417cb4fa0dff8a34e4ec11fa0ce41a", 0x33}], 0x2, &(0x7f0000000a80)=[{0xa0, 0xde, 0xf74, "3f2aeab94684d20b3ce76a4e866bed2b385b96242121c235d66e51408639e198c1b3cceeafc95467d3e7acf0662fc3773d9c6679ca6a1bb9d4b55b8f9c89d3859d2937214dae128cd85c8928603e240300dc01bb01346956174a40a009ce8afca1c2443c8fcb02fe2b365743aa7de8dfff95164be44a5107451261ac569eb1929bf6cf82a2e8eb3b01acab"}, {0xe8, 0x10b, 0x5, "4cd18ed23249a666573c6a343a20b2bf34a7d064146deeca580a86ad695585a4939b13e65077aec0cc197b010aba54f49ba40e4626253e08caaa4f27dcd0e547df9d9c67c204936779c53090343049e9114c0eaabc3be712dedad409bbbf7438a186ef56ec1466ffb217199f7f92e88fb27425f496648c2a92f52f830be5f8b209d23cff786f85d76a145b1feb4d4c8bc7dfaac3ede8bf6ac1708db7630323f908fcc283b39e61e1528354369b38eb7d2a3452a959cab97f64f7612523154d8278c97dcf4ac8ef6290207bf90a8f849edb172b7435"}, {0xd0, 0x108, 0x0, "7a2393816d715b7245f4e57b4a405f352a0b8e376756c114a8d43dd72109ebccbacb4441d784c795e4be511f6f0eab49d72aac377cec3b5bb58244e4033c197042e97b542c216dff0d1826f4ea48ab380c9a1b6d2f1c08bf6685b13c7640c1f667cec4b7009196014148918ede5f248994f762f56b5e510f12a14622de9535961e24ecc592382dd1e837a17d30e0c46804d90da1e79580678462f8152c91abbdb3ba942291289281ce30e6fd7b9d4f9a386354a5c01052cfb47a"}, {0xe0, 0x109, 0x3, "5d5140e1730702ec42b17002ae2dece8d47dc0837cec443cb472168fe2a7d4a2f1ef2baa4761968e5416ff659d5c72c71ea0ddce79a30b60a6e3c4d60971e65313df83e6349e57bbb7ff97d7dc3c5869efbeb1e2ac278ca72e162e0e1f7f72611f144628446b4b7b748782397bcc571d9e61ad28d409a4e5fb71c9ad7e4180c482bc8c45293f7fe5a76779a93b45e7a78b8464177df6f72689019490825da1618091c85e5d18174c3346c363de520ac663acdcc5cb48a2c46c00a7f9d566863527b405b8664e0b7a5cfe47f4"}, {0x108, 0x10e, 0x6, "bd4fe7866668fca0edf3f15f4340339ddefa20e7e59f5858c9db48b6679b4b78800dd94c839779d5ffbc67c5a3b9497aaa3e4f060b1334b91bd289993952c04ddc0ba80226a9a3341d43d5e9e4bf359305e3bc465ba54257cdc938567b563c3c91199a390fb16e6f9972408d26b4398dfe2a4bf32f4f9ee91baa41fb9eeea7a52c0f1eba2390dfd8ffdb1d8e2093342f7bc2426701ab3853d11cbbe9cec68c3ccd719e8ad505b1454a276766500fb8f4849ef08bf66788956df5f9e1853d72ab9be8595c22f3cccfc65418e6f6a90b63714166e836be9c119509b742a671339af038561e137d2e2394e24a2b41c0841d6712d3"}], 0x440}}], 0x2, 0x24000090) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x44015}, 0x10044014) 3m16.534282302s ago: executing program 0 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@pppoe={0x18, 0x0, {0x1, @remote, 'bond_slave_0\x00'}}, {&(0x7f0000000000)=""/50, 0x32}, &(0x7f0000000040), 0x1}, 0xa0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) 3m16.465235147s ago: executing program 2 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d8dfd91b"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2dc00, &(0x7f0000000300)=ANY=[], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x37, 0x8, 0x8, &(0x7f00000006c0)}}, 0x3d) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000a00)='team0\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x2}, 0xc) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r13, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0xf, &(0x7f0000000380)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000240)='syzkaller\x00', 0xda, 0xe7, &(0x7f0000000400)=""/231, 0x41100, 0x5, '\x00', r4, @cgroup_sock_addr, r8, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r10, 0x1, r11, r12, 0xffffffffffffffff, r15], 0x0, 0x10, 0xc3}, 0x94) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r16, 0x84, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10) 3m16.343812059s ago: executing program 3 (id=1290): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="10000100000000000000fc0d04f72ace0083bc4cc41a00000000000000"], 0x10}], 0x1}, 0x80) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="020e0000140000000000000000000000030005000000000002000000ac1e000100000000000000000300060000000000020000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000004000300000000000000000000000000000000000000000000000000000000004401e40821898217a5df0d8a6fc4b1673e23cbefa454f97ef444a84b7c50f52e8dbf6b117a9f4ce7de42e61939b751ce7558a76d5c39e9af1f1250e5a9a9eb7852748ea32eab6f0283891427503ed1722c8e6c59caeafc5c282f46eccde3cdbc285e8b6187b0dc3c816f2e8fb1917e6bf97fe3bb7243def291e2b92c6af27c1861b67862580b94898765bb4dd0a9e257a4aa7410a01f793acac04e549fb23d219544c5b360f947fc8490aca74c5ff396964eb8edc1263e26c794da0109760b6116514b4c"], 0xa0}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/248, 0xf8, 0x120, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001e00)=ANY=[@ANYBLOB="b8220000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf256500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x22b8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r10 = socket$inet6(0xa, 0x2, 0x0) listen(r8, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r10, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @local, 0x1000006}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x4004040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m16.342743957s ago: executing program 0 (id=1291): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff8b, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffc, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x120, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x40c0010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r5}, 0x94) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m16.302040699s ago: executing program 2 (id=1292): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xf3, 0x48, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x5, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000088000000000006000000fffffdffffffffffffff0000000000000000d6534f62787c5dbea422fdbf2bfcd736a947adbda770d9b6e6632247630955ca2ff930a503d35538e58b613745d5132bffba2672da6a2ecc174956d6cad627d4fcf366d68683f2ec620f6a1fe3c3fda9bbcc142e802be110f90d70cbf32290cb61d712d58b4896e487f0416c1b2b9a1a4ed865056d0a3bde5e0e02"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @fallback=0x3}, 0x94) 3m16.087922216s ago: executing program 0 (id=1294): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x7}}, [{0x8, 0xb, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x4041080) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) 3m16.086914012s ago: executing program 2 (id=1295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={0x20, r2, 0x607, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004850}, 0x8000812) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 3m15.760141711s ago: executing program 2 (id=1298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) nanosleep(&(0x7f0000000380)={r4, r5+60000000}, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) r6 = socket$isdn(0x22, 0x3, 0x24) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f00000005001500030000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m15.267895912s ago: executing program 3 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r1) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x14, 0x0, 0x1, [@generic="b8a6"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3m15.183342549s ago: executing program 3 (id=1303): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8, &(0x7f0000000140)="f27ce94bc36a75aa31860cb80766fea4306419b121b968979c6dd180d924b5968c98b17fd1d4a09ac8176b70cdab1529a898d0d19dd18ffb50e0bbd40b54507c1b5113855ba510b84013aa7c539436a1e7d869d580167b8bf56c80d89eab1289256a6a26528c299c0ee37f8b3f7bce6a84c71f1508153a66cf9542bfc321362c70b5788c2d810688be2d9c94c6bd99aa5b46cb3b7ba9e778be670c470696ce42f9e106c9510b2fe9a67f9dd5977c978234643c689484033e686299329db327ab537a26b844cd535c701861ae4a8fd17d797f9c43b742b83a1267ad5197152926") ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080)) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r2, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaffaaaa0000662cc81a75ae4e8b00000e6600000006907864010100ffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90780000"], 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) (async) shutdown(r0, 0x1) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x188, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffe44}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000440)=0x10) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000380)={0x24, @long={0x3, 0xffff}}, 0x14) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r6, 0x2673876e}, &(0x7f0000000100)=0x8) 3m15.11892019s ago: executing program 0 (id=1304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) r8 = getpid() r9 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)=0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@RTM_NEWNSID={0x54, 0x58, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_PID={0x8, 0x2, r10}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4011) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) accept4(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000000)=0x80, 0x80800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {0x8000}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m14.972223498s ago: executing program 0 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r1], 0x158}, 0x1, 0xba01}, 0x44) 3m14.479421723s ago: executing program 32 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r1], 0x158}, 0x1, 0xba01}, 0x44) 3m14.440849084s ago: executing program 2 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB="000011c7666ee9409a298e091fa179547a89dd248a7b20bc660eabe931415550e80bbf46c5c4aef2c4e36a17249752f498e740232aa2b79c0f9146b7e8c5c97015be484d00bfbff01387e7f7d2ad90198df1a784175ac3a352ccafb7163ea03130c6308d601911f2239cb9ffcb34c46d7d67431be3d35f1ee69fd6ea84a1b49eef21", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m14.425217764s ago: executing program 2 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r5, 0x0, 0x31, 0x0, 0x0) listen(r4, 0x7f) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0xc0, 0x1400}}, 0x20}, 0x1, 0x0, 0x0, 0x40000100}, 0x44004) 3m13.995249097s ago: executing program 33 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r5, 0x0, 0x31, 0x0, 0x0) listen(r4, 0x7f) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0xc0, 0x1400}}, 0x20}, 0x1, 0x0, 0x0, 0x40000100}, 0x44004) 3m11.683766862s ago: executing program 3 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0xc}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x404888d}, 0x20000000) 3m11.304375626s ago: executing program 34 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0xc}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x404888d}, 0x20000000) 2.053380053s ago: executing program 4 (id=3606): socket(0x28, 0x5, 0x0) (async) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) sendto$packet(r1, &(0x7f0000000240)="ea215da3902eee4480d79f2cc470da4d09eb3b9bc4083d4aff90e2007acc3ba252cf4ea46d8c01f798046df9a335518dd2e2a2dd153d472f92d6d6dfb28255313ca7e734", 0x44, 0x4, &(0x7f0000000140)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.825742454s ago: executing program 1 (id=3611): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'vlan0\x00'}}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x40000) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x40000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@null, @netrom, @bcast, @rose, @remote, @remote, @rose, @default]}, &(0x7f0000000080)=0x48) (async) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@null, @netrom, @bcast, @rose, @remote, @remote, @rose, @default]}, &(0x7f0000000080)=0x48) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$can_j1939(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000300)={'mangle\x00', 0x75, "197f8dbe7880a6aab0a8597d7f6a1810e9a3cf9a8df856ebb2aabd8e952605afb39303b70474e197f5092468093bf3f36dc5151c777fbbba0cb93f7858556405b8dc070a123a460d4efa14862fe700fe151137770b29b24d9bbc814487872dbb26867da0977bc2704d4488a6a0ed0b5698b3500973"}, &(0x7f0000000240)=0x99) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000800003f00000008000300", @ANYRES32=r8, @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) 1.579686923s ago: executing program 1 (id=3617): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)="48000000140081fb7059ff00000004000aff0f0300000381300d0066c808222e40d6ee11000080006fabca1b4e7d06a6bd7cf750375ed08a562ad6e74703c48f93b82a0200006046", 0x48}], 0x1}, 0x10004000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r0, 0x9, 0x9, 0xf6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="df12c9f7b9a6000f000000000000", 0x0, 0x80000084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.523941202s ago: executing program 5 (id=3618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) close(0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) 1.424722776s ago: executing program 1 (id=3621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 1.413931004s ago: executing program 5 (id=3622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r1, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x4000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x4004000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x24000481}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xa00}, @NHA_OIF={0x8, 0x5, r9}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.275537755s ago: executing program 6 (id=3624): r0 = syz_init_net_socket$ax25(0x3, 0x4, 0x8) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @netrom}, [@rose, @bcast, @remote, @remote, @netrom, @null, @rose, @default]}, &(0x7f0000000100)=0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32], 0xc8}}, 0x0) 1.275186288s ago: executing program 5 (id=3625): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0xffffffffffffff97) 1.247880433s ago: executing program 6 (id=3626): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4, @ANYBLOB="77663aebfb3ad6e5a93302f173f1ec17398c2137e18b9fa3977211b770ad9ae09c035e6b20d731bd3185b5", @ANYRES8=r0, @ANYRES8=0x0, @ANYRESDEC=r1, @ANYRESHEX, @ANYRES8=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="40020481d70d42"], 0x7) (async) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="40020481d70d42"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="720ac4ff0000000071109a00000000009500000000000000c89b47722632fd827df9a7245e48583ecb9114b5cb54a7b3a64644fd2403317f59e09aeab20d274979f8f24171002d2326650832b95b614bf963b13190413afe28f71093ace915f1b1d2020000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x498791f552e75b59, &(0x7f0000000080)={'pim6reg0\x00', @ifru_mtu=0x5}) 1.232204656s ago: executing program 1 (id=3627): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) close(r3) r5 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r5) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xbd78, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.104812144s ago: executing program 7 (id=3628): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x30c01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='erofs_readpages\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800008000000000f7ffffffffffffff18110000", @ANYRES32=r6, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) close(r3) listen(r1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r9) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x40, @mcast1, 0x813}, 0x1c) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x3c, 0x0, 0x0) listen(r2, 0x4) 1.104505964s ago: executing program 4 (id=3629): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x10000, 0x4) 1.065425224s ago: executing program 5 (id=3630): r0 = socket(0x10, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES8=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x44040) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000006c0)={0x0, 0x1, 0x9}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000ac0)={r6, 0x1, 0x4}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.064995636s ago: executing program 6 (id=3631): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffe0}, {0xfff3, 0x1f}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20008004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000280)=""/69, &(0x7f0000000300)=0x45) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x20}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8021) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0xf, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040840) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000700)={0x0, 0x0, 0xeaa6, 0x8}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000880)={'gretap0\x00', &(0x7f00000007c0)={'gre0\x00', r3, 0x8000, 0x20, 0x5, 0x9, {{0x1e, 0x4, 0x2, 0x13, 0x78, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x14, 0x3d, 0x0, 0x0, [0x3, 0x0, 0x8, 0x6]}, @generic={0x83, 0xe, "3f5576387106abcda006b777"}, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x2, [{@private=0xa010102, 0x80}]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x2}, {0x0, 0xd, "e2018b34e93ea915b50bd6"}, {0x1, 0x3, '8'}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xe4, [@loopback, @multicast2, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x20004000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000009c0)={0x0, 0x10}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a40)={r9, @in6={{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}}, 0x5, 0x6}, &(0x7f0000000b00)=0x90) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r10, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '[\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r11 = accept4$unix(r2, &(0x7f0000000c80)=@abs, &(0x7f0000000d00)=0x6e, 0x80000) ioctl$sock_ifreq(r11, 0x8938, &(0x7f0000000d40)={'macvlan1\x00', @ifru_mtu=0x101}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="9cb0f97f8ad44cebf0640c303845bc99fcb57197af9ebc3e6c0a75a8ac24296870170f9f33259818717c9125a6eea6440e3eea273c913a9546fe0088d5f924d98bf1f078a851502f045b579db9b58159c8be58", 0x53}], 0x1, &(0x7f0000000e40)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x30}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r12, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0xc00) syz_genetlink_get_family_id$fou(&(0x7f0000001000), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, r6, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x46}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0x4}, {0x6e}, {0x5, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xb, 0x1}, {0x6}, {0x1b, 0x1}, {0x4}, {0x6, 0x1}, {0xcc, 0x1}, {0x9}, {0x36, 0x1}, {0x2, 0x1}, {0x30}, {0x5}, {0xc}, {0x6}, {0x12}, {0x1b}, {0x9, 0x1}, {0x2, 0x1}, {0x3}, {0x9, 0x1}, {0x5}, {}, {0x1b}, {0xb}, {0x5, 0x1}, {0x30, 0x1}, {0x30, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x11) 950.740527ms ago: executing program 4 (id=3632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r10, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r9, 0x5bc30000) 609.234281ms ago: executing program 7 (id=3633): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001640)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="270502001a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf2f61952a03060000d4c6e9c07f0f7b68d90540739b00", 0x3c}, {&(0x7f0000000400)="2b9caa8f", 0x4}, {&(0x7f0000000840)="1c4657bac6978f77555f856780277c1a513a5e3b7811bb30bd3b9f9071ac4fe3c1a1b058222780c5bd6e441e4f9d9d44b263a2b62f39ea91537c79393aa661fbc0ae45997d5ca86c95ac81385e020bbcc5c0f93ec3e23d435e30e5f4db949d551a93df82b4feda16272f3074cd6555a83687fb681931d98765c88d5be636a2506d9d2f19c28d2d09710a867585ce31b63e484f6a66295026dbf41238530000000000000009807ce7bda28be3fa2b9c8d4658b40a7c22c62c1cb9fd65a15b7784dd70f48d30c1062809e64882a61bcdfcfea0228657b3", 0xd6}, {&(0x7f0000000640)="1f20ba1dc71f34c97ec88edfd7203c93df14e46b097c3fe2eced64e8966957b8c5c951c25355f1a91e3e448d4c64f2d3842629", 0x33}, {&(0x7f0000001980)="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", 0xbde}], 0x5}, 0x48081) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x48400008}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x339, 0x44}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008090) sendmsg$tipc(r1, &(0x7f0000000680)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="b7d6815d0eb16e66ac9da5840153a18ce1c1680f5a54eea54b4b7f9cedd54fe838538b4c60cae54dc4a9ef3f3725d5e730758f343c77875ba5ea8fd2a23c77199a1757f85f134a6488d8ffb208534414b674d91adb7aa9ca9b0ac191c61254b7cade5ef94888001999ea40c0f0594726e37ae90a7bab8aa3d9375f4610f564019c18be52f829c9bcca8146a1b6c518e5c00a003d", 0x94}, {&(0x7f00000001c0)="2dd1d04774368096cc1edf8e4ba00610268a98e3d6c183d31bdb0792dc630032cc3de7f2a0e53bc933206551040063acdd5c9ec1574c4464060f1fd72e1ba17a", 0x40}, {&(0x7f0000000300)="df162b822b6b2bf91e8303c5844750d2058dcf46bb4370f3a4ade5a1b3c3d5e5003cd38a27ebc58539fe92f6c5d6d76a43de49d2ac2e8a7453b9479ccfde2cc0b60f22f4e4385cd5f073164a2eef49dfacffe2b1570b5cf6591fd70eb00296da7921ba0c157cde", 0x67}, {&(0x7f0000000440)="6eea3c202bc03cad9f6597a8e703293b7f8a1518693fe929abb4aba7babd9a6821ff74b40bcfe7dddf71fd5624c7632d23d82c05876c1d1812dbef05eea1fbb233cb", 0x42}, {&(0x7f00000004c0)="1a15db3f06a936e45ecbfb7874e089fb0d1df9f232f14760ecbae84b3024970e0b2422cdaaa9a9e56e0bd9e0b8b81d30b758b9194abd2038b70ff4c570e2868f0738f0ae96f9bea8edba832b5c4bbe9269d0260638bdb9e76a3a0d62e5420be28ab00714aabe656f60c079030ad3a018be527ef99d2beae614a469120ede62cad0d9d520f6aaeb1804946d7ed773511012a8ac555b21f473438fca78a6a7e79fbddb44929f64e4902a9fd03d313673d8bebfd0f91a664a453720bf0f85f2469c2d496d", 0xc3}], 0x5, &(0x7f0000000380)="ae187f2599dce0", 0x7, 0x4000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000a80)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x9}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @loopback}], 0x6c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, &(0x7f00000000c0)) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) 560.263085ms ago: executing program 7 (id=3634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x20000800) 540.331514ms ago: executing program 6 (id=3635): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b8, 0x1a0, 0xd0, 0x360, 0x360, 0x360, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'rose0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff], 'bridge0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x4}, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2a, 0x9, 0x6, 0xb9, 0xed4, @mcast2, @remote, @loopback, [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff0000ff], 0x2000, 0x301}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 440.184464ms ago: executing program 4 (id=3636): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x1}, 0x14}}, 0x0) 433.51143ms ago: executing program 5 (id=3637): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r0 = socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) (async) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'caif0\x00', @multicast}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r6, 0x1, {0x1, 0x1, 0x1}, 0x1}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@getqdisc={0x48, 0x26, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {0x5, 0x4}, {0x7, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 410.17755ms ago: executing program 7 (id=3638): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(0x4) 229.883934ms ago: executing program 6 (id=3639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r0, 0x0, 0x8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r3, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) (async) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r1, 0x0, 0x8}, 0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) 8.217137ms ago: executing program 4 (id=3640): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x4, 0x2, 0x5, 0x6, 0x2, 0xac, 0x4, {0x5, 0xb, "5d9ac5613540eda5"}, 0x3, 0x7, 0x3, 0xf8, 0x48, "a4797d6caf8d7eb7b7ea33376b046eca6f4ee4830638e927f996b33fb99aa7d3b5b7b465581f81859936dfb641c664166ee13091b76c1dc698397e98dc1ac19597d57216dea84e99"}}, 0x61) 7.962069ms ago: executing program 7 (id=3641): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0xfffffffffffffff5) 5.220722ms ago: executing program 1 (id=3642): r0 = socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001900)=ANY=[@ANYBLOB="400000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0800000000000000140012800b0001006772657461700000040002a00a0001"], 0x40}}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x8, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, 0x0}, 0x94) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'vlan0\x00'}}) (async) socket$igmp6(0xa, 0x3, 0x2) 4.156185ms ago: executing program 6 (id=3643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a32000000001400000011"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001040)="8e00"/12, 0xc}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x38}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 2.074582ms ago: executing program 5 (id=3644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r1, r2}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) ioctl$SIOCAX25GETINFO(r5, 0x89ed, &(0x7f0000000240)) (async, rerun: 64) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd49032800030020000c0060000000040411"], 0xfdef) (rerun: 64) 1.763672ms ago: executing program 4 (id=3645): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x8}, 0x18) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103000000000000000002000000b18f02e634011206eab1a6466073239d1fa17978587a95d7b694cef58c36986c3492696c2a37c3b2a88648ad886244a6d949bfd572cd372aad56486f8cc3cfbc89cdeb2ae09da250ea130780cc2e13d81feff963eae90a7d5328329f4f499c39e0256d7f164603a450c1e6f0cf2e3ca944f617e91736bc7a68390292dcdeec0f03e2c4fe05627fa48bc0758497f740"], 0x14}}, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r4, 0x0, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4008800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x88ff) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000580)=0x4) 1.59377ms ago: executing program 7 (id=3646): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000000)) 0s ago: executing program 1 (id=3647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f0000000380)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x5, @private1, 0x918}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000440)="a9409ede217b0e5abfb8b5274ea8ca5b7ba2d90bc05359f04744561d33c68a8e97f504cc75caa2d5e5ad520eb9f8056fb0f778938fb6a86e355a3b9a0c6d7e593b85729da1c83e1db2dda66d3ea4fef477693f0f319aed899e967d792736d71938c83597f72c23895582", 0x6a}, {&(0x7f00000004c0)="da5e1c6db8e08c4cf074af3bfd791d1c0b43a22348471648f30e27252474fe654746b00c7aa642615eca5c98cae8cfe15404152bf54bd120b387c0e04ef67945b0c56f9ce2ce478f1fe4b8a20f00d1ac8da86a62432b88154da365c358e92440d87254a0207ad3f0628359c047890d709e51c2225c7c58b4cf565db2150bda0f7b76852abb3e52d8478d2165f5990ae1ebdd36936dd8f9421f8cc50e369bdbe64665d56654f82ff181e660e8f4af99ab5c2495f31452f05c903a34d4e8c151f72f9020b963152fff9d5a3ccb4b638e91e8", 0xd1}, {&(0x7f00000005c0)="273f422cd63a2d9752204b28c51286d16ee47962ce01f6b6e9b7da7d9ef008677e0a3e369f8178b37863ed9f2f1c8b6a110360ba08b06e6b9f566d4c21fcc1c929fd74d5422af95688a17f91e811945ff9b104a65b02f3071771e9628825f8", 0x5f}, {&(0x7f00000006c0)="cd5f97af23686b411cb711702677822d4af1f177ee87920b23ed09976ffa558741afa8f00f05844a9c21c6a803c23d0437d1fb936563fd3be34fdb2cd73a91ada060f3a06f2ff5f4a4a57179b2b17f0508d5747973c2b4046adf953b66fc3bb08100ecee8fc295df27de9a7584fbf62cd8ef0b93a9269ff4df27427d0103d174734dd1b2d3aac13192894133d591950803e67bc8dec1d7f24aa0228ec13a168f1fbde802a81a940b1631748a37a1a885edf4c981d72cc2fdb3cd382fbbc76f4d06f57129c1af6b11068348f96baa418acb919090c8bc099697b32abeb3816fdd792b5c", 0xe3}, {&(0x7f00000001c0)="bead10655191adb841bc8d2b7db15f549223adec0f424d1ad19653", 0x1b}, {&(0x7f00000007c0)="b5d1ae85af8e607d9c616b4b14674c214ebae6e568538e2aa8efad192576147acc71f264dcfd4c250427dbe1d43223582b0d7fa266a76468cc4b09534d2bdf23b98ad7fba12b968c3851e1d40eff2a50383a18c4d5f8aa87a5a7fd5125bb5c355ac2b92e4a1ba505d749ca8340a1e4a4909ec3678bb58604d8", 0x79}, {&(0x7f0000000840)="41259270570210c435b799961d217ea565d6d12b731a34cfa231da0456320eeebdd23cd87af3ccb101c617a7b97d796967674b09689eb39fec020faa1da479a2c70c808e8f0ec89ee4f9320d960fbf9f3e87dbd111b65e05bc63a8deed7ffc32e65ccbc565b17d5a8ec7444b7717969edc168698a9e27f4c3ff99a89f0d4f8", 0x7f}, {&(0x7f00000008c0)="66aa49b175dd4c72fe9613bcfe4af921cedb2f9f8989034e7e68e41b6caa81b4e9c4d4c71ed485986f1a95b9f30dd32d2783e66bc75fb1fefa0def2d2550b6165c1daeb4aefe334fb9f9c7c5fd0ef9a82dd22bd1fbc15d2a518eb97434ae33a6af4eb9", 0x63}, {&(0x7f0000000240)="7be768d0fe27d5484216324bbceccddc1c53b214ff2cd10c32e991f4aa15e86088515d8ac715cc5e503db8f7d3543df41410e470", 0x34}, {&(0x7f0000000940)="1f065976405a680fd87414aa8db6d53717c3324cb09b2ff7369197017ea4f42efa695455daccfe7dda7e877793a614d15291d2a02ab52f03a8c526763410688432ed103aae7cd3e8f18efe977e708288ff186124a9863ca3c8fbb05506868ea6b65bc5192eb33eed957eb383d12a995ae679b2e53ed70baf28ab84a2ba5d8309043f6a4a908a9bb08f0d4b48ea1325a5383b1244b280de5eb588af56239b04966c39300bbd9fa419d7c5028fa8c631e9b27b34c8bb7141d75cea43910613995c50dbde21e3a4d956ab4fbea7eef025", 0xcf}], 0xa}, 0x90) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40400a4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) kernel console output (not intermixed with test programs): m1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.545731][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.586828][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.604027][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.669964][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.688328][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.701361][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1306'. [ 207.711296][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.759951][T10775] syzkaller0: entered promiscuous mode [ 207.775053][T10775] syzkaller0: entered allmulticast mode [ 207.877844][T10775] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 207.904605][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 207.913461][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.931555][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.991847][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.004173][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.012331][T10782] netlink: 'syz.5.1384': attribute type 1 has an invalid length. [ 208.022082][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.030245][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.101132][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1384'. [ 208.138469][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.158111][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.279152][T10768] tipc: Disabling bearer [ 208.578108][T10799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1387'. [ 208.614167][T10799] sctp: [Deprecated]: syz.6.1387 (pid 10799) Use of int in maxseg socket option. [ 208.614167][T10799] Use struct sctp_assoc_value instead [ 208.668485][T10803] bond0: (slave bridge0): Releasing backup interface [ 208.710056][T10803] bridge_slave_0: left allmulticast mode [ 208.717775][T10803] bridge_slave_0: left promiscuous mode [ 208.734895][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.760405][T10805] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1390'. [ 208.790371][T10803] bond0: (slave bridge_slave_1): Releasing backup interface [ 208.814599][T10803] bond1: (slave veth0_to_bond): Releasing active interface [ 208.861717][T10803] bond0: (slave bond_slave_0): Releasing backup interface [ 208.892859][T10803] bond0: (slave bond_slave_1): Releasing backup interface [ 208.904491][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 208.919067][T10803] team0: Port device team_slave_0 removed [ 208.934259][T10803] team0: Port device team_slave_1 removed [ 208.952201][T10803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.968446][T10803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.990370][T10803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.185877][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1395'. [ 209.302860][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x54 [ 209.313836][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1394'. [ 209.498089][T10837] netlink: 'syz.6.1397': attribute type 2 has an invalid length. [ 209.806127][ T11] block nbd3: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 30 seconds [ 209.809946][T10852] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.818984][ T11] block nbd3: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 30 seconds [ 209.840468][ T11] block nbd3: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 30 seconds [ 209.851521][ T11] block nbd3: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 30 seconds [ 209.887093][T10853] netem: incorrect ge model size [ 209.957989][T10853] netem: change failed [ 210.342885][T10866] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 210.518177][T10871] netlink: 'syz.6.1410': attribute type 12 has an invalid length. [ 210.544276][T10871] netlink: 'syz.6.1410': attribute type 11 has an invalid length. [ 210.568351][T10875] tipc: Started in network mode [ 210.574618][T10875] tipc: Node identity cef4ef8412ea, cluster identity 4711 [ 210.584574][T10875] tipc: Enabled bearer , priority 0 [ 210.655804][T10875] lo: entered promiscuous mode [ 210.685272][T10875] lo: entered allmulticast mode [ 210.769078][T10856] infiniband syz2: set active [ 210.773908][T10856] infiniband syz2: added veth1_macvtap [ 210.802502][T10891] netlink: 'syz.1.1414': attribute type 4 has an invalid length. [ 210.878713][T10856] RDS/IB: syz2: added [ 210.918488][T10856] smc: adding ib device syz2 with port count 1 [ 210.954993][T10856] smc: ib device syz2 port 1 has no pnetid [ 211.017153][T10875] tipc: Disabling bearer [ 211.047751][T10896] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 211.690901][T10917] netlink: 'syz.6.1425': attribute type 4 has an invalid length. [ 212.282112][T10940] netlink: 'syz.6.1433': attribute type 1 has an invalid length. [ 212.290842][T10948] IPVS: length: 85 != 24 [ 212.311859][T10940] netlink: 'syz.6.1433': attribute type 1 has an invalid length. [ 212.321344][T10940] netlink: 'syz.6.1433': attribute type 1 has an invalid length. [ 212.330556][T10940] netlink: 'syz.6.1433': attribute type 2 has an invalid length. [ 212.338874][T10940] __nla_validate_parse: 3 callbacks suppressed [ 212.338888][T10940] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1433'. [ 212.552666][T10958] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 212.840785][T10975] netlink: 'syz.7.1443': attribute type 11 has an invalid length. [ 212.856142][T10975] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1443'. [ 213.187052][T10987] bond4: entered promiscuous mode [ 213.401624][T11006] netlink: 'syz.7.1451': attribute type 8 has an invalid length. [ 213.484040][ T50] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x54 [ 213.544201][T11015] netlink: 'syz.5.1453': attribute type 1 has an invalid length. [ 213.602614][T11015] netlink: 'syz.5.1453': attribute type 3 has an invalid length. [ 213.625498][T11015] netlink: 'syz.5.1453': attribute type 235 has an invalid length. [ 213.632048][T11016] macvtap1: entered promiscuous mode [ 213.656287][T11016] vlan0: entered promiscuous mode [ 213.672098][T11016] macvtap1: entered allmulticast mode [ 213.691580][T11016] vlan0: entered allmulticast mode [ 213.699591][T11016] veth0_vlan: entered allmulticast mode [ 213.742386][T11017] macvtap2: entered promiscuous mode [ 213.761476][T11017] macvtap2: entered allmulticast mode [ 213.803318][T11029] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 213.814317][T11031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.821881][T11031] IPv6: NLM_F_CREATE should be set when creating new route [ 213.823448][T11022] macvtap2: entered promiscuous mode [ 213.829262][T11031] IPv6: NLM_F_CREATE should be set when creating new route [ 213.829317][T11031] IPv6: NLM_F_CREATE should be set when creating new route [ 213.866814][T11022] macvtap2: entered allmulticast mode [ 213.891864][T11031] IPv6: sit1: Disabled Multicast RS [ 213.897900][T11024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.220993][T11040] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1460'. [ 214.301051][T11045] delete_channel: no stack [ 214.329320][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1462'. [ 214.893321][T11068] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.1469'. [ 214.915522][T11068] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.1469'. [ 214.939688][T11071] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1470'. [ 214.956899][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1470'. [ 215.607461][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1478'. [ 215.887820][T11107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.940031][T11107] bond1: (slave ip6erspan0): making interface the new active one [ 215.975815][T11107] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 216.364275][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1489'. [ 216.496034][T11147] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 216.519945][T11147] bond2 (unregistering): Released all slaves [ 216.914556][T11162] validate_nla: 7 callbacks suppressed [ 216.914576][T11162] netlink: 'syz.5.1496': attribute type 1 has an invalid length. [ 216.959881][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 217.856863][T11219] syzkaller1: entered promiscuous mode [ 217.873325][T11219] syzkaller1: entered allmulticast mode [ 217.898337][T11227] __nla_validate_parse: 3 callbacks suppressed [ 217.898357][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 218.315962][T11248] IPVS: length: 8 != 1152 [ 218.491812][T11254] netlink: 'syz.6.1520': attribute type 39 has an invalid length. [ 218.885552][T11276] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1526'. [ 219.035081][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1526'. [ 219.044607][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1526'. [ 219.549839][T11311] pim6reg: entered allmulticast mode [ 219.580072][T11315] netlink: 'syz.6.1540': attribute type 1 has an invalid length. [ 219.597695][T11311] pim6reg: left allmulticast mode [ 219.670609][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 219.743813][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1542'. [ 220.113642][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1547'. [ 220.485538][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1555'. [ 220.587975][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1559'. [ 220.902702][T11379] netlink: 'syz.5.1565': attribute type 4 has an invalid length. [ 221.014992][T11377] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 221.053344][T11377] bond2 (unregistering): Released all slaves [ 221.115157][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1567'. [ 221.507638][T11397] ip6t_srh: unknown srh invflags 4000 [ 222.955272][T11398] __nla_validate_parse: 1 callbacks suppressed [ 222.955295][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1570'. [ 223.148230][T11419] tipc: Invalid UDP bearer configuration [ 223.148288][T11419] tipc: Enabling of bearer rejected, failed to enable media [ 223.181510][T11421] netlink: 'syz.7.1576': attribute type 1 has an invalid length. [ 223.189955][T11421] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1576'. [ 223.201137][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1576'. [ 223.298055][T11435] tc_dump_action: action bad kind [ 223.801859][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1589'. [ 223.955081][T11468] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 223.984069][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1593'. [ 223.985198][T11468] bond1: option packets_per_slave: allowed values 0 - 65535 [ 224.003885][T11478] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1594'. [ 224.040658][T11468] bond1 (unregistering): Released all slaves [ 224.066932][T11480] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1589'. [ 224.244724][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1597'. [ 224.558691][T11512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1600'. [ 224.592417][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 224.636190][T11516] tap0: tun_chr_ioctl cmd 1074025672 [ 224.641548][T11516] tap0: ignored: set checksum disabled [ 224.888291][T11535] tipc: Enabled bearer , priority 0 [ 224.916354][T11535] syzkaller0: entered promiscuous mode [ 224.922120][T11535] syzkaller0: entered allmulticast mode [ 224.987090][T11527] tipc: Resetting bearer [ 225.040854][T11524] tipc: Resetting bearer [ 225.147645][T11524] tipc: Disabling bearer [ 226.261050][T11591] syzkaller0: entered allmulticast mode [ 227.630572][T11619] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 227.903454][T11635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.967117][T11625] x_tables: duplicate underflow at hook 3 [ 227.981181][T11638] __nla_validate_parse: 8 callbacks suppressed [ 227.981198][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1637'. [ 227.998102][T11639] netlink: 'syz.1.1634': attribute type 13 has an invalid length. [ 228.015769][T11639] netlink: 'syz.1.1634': attribute type 58 has an invalid length. [ 228.024021][T11639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1634'. [ 228.331117][T11658] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1640'. [ 228.363321][T11658] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1640'. [ 228.461744][T11669] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 228.799237][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1649'. [ 229.203398][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'. [ 229.321660][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1659'. [ 229.349326][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1659'. [ 229.408042][T11716] bridge0: port 3(vlan2) entered blocking state [ 229.424913][T11716] bridge0: port 3(vlan2) entered disabled state [ 229.440047][T11716] vlan2: entered allmulticast mode [ 229.455531][T11716] bridge0: entered allmulticast mode [ 229.491330][T11716] vlan2: left allmulticast mode [ 229.499272][T11716] bridge0: left allmulticast mode [ 229.674463][T11739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.844465][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1668'. [ 229.878355][T11746] netlink: 'syz.4.1667': attribute type 75 has an invalid length. [ 229.894058][T11746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.946886][T11746] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 230.035190][T11758] netlink: 'syz.6.1671': attribute type 13 has an invalid length. [ 230.188134][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1675'. [ 230.311675][T11768] netem: invalid attributes len -24 [ 230.325449][T11768] netem: change failed [ 230.362741][T11774] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 230.504390][T11799] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 230.945189][T11821] tipc: Started in network mode [ 230.965760][T11821] tipc: Node identity 46a245648c72, cluster identity 4711 [ 231.012126][T11821] tipc: Enabled bearer , priority 0 [ 231.043121][T11829] netlink: 'syz.1.1687': attribute type 15 has an invalid length. [ 231.061781][T11819] tipc: Enabling of bearer rejected, already enabled [ 231.187498][T11819] tipc: Disabling bearer [ 231.645126][T11860] netlink: 'syz.6.1696': attribute type 1 has an invalid length. [ 231.691129][T11867] netlink: 'syz.7.1698': attribute type 1 has an invalid length. [ 231.800769][T11867] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 231.892660][T11881] vlan2: entered allmulticast mode [ 231.942459][T11881] bridge0: entered allmulticast mode [ 232.225170][T11900] syz_tun: entered allmulticast mode [ 232.253263][T11900] dvmrp1: entered allmulticast mode [ 232.331328][T11912] netlink: 'syz.5.1710': attribute type 1 has an invalid length. [ 232.359193][T11896] syz_tun: left allmulticast mode [ 232.818144][T11941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.919558][T11941] Unknown options in mask b7f2 [ 232.989058][T11945] __nla_validate_parse: 7 callbacks suppressed [ 232.989079][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1717'. [ 233.510115][T11969] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1727'. [ 233.580242][T11978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1729'. [ 233.831725][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1730'. [ 233.851112][T11993] bridge_slave_1: left allmulticast mode [ 233.857720][T11993] bridge_slave_1: left promiscuous mode [ 233.900236][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.353082][T11993] bridge_slave_0: left allmulticast mode [ 234.359090][T11993] bridge_slave_0: left promiscuous mode [ 234.365029][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.986564][T12032] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1744'. [ 235.082270][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1744'. [ 235.153369][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1747'. [ 235.195262][T12047] netlink: 'syz.7.1746': attribute type 10 has an invalid length. [ 235.234547][T12047] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 235.320394][T12052] netlink: 'syz.6.1749': attribute type 33 has an invalid length. [ 235.329303][T12052] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1749'. [ 235.377899][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1749'. [ 235.551460][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1752'. [ 235.844716][T12073] : entered promiscuous mode [ 236.260414][T12099] tipc: Started in network mode [ 236.266783][T12099] tipc: Node identity da30027928ed, cluster identity 4711 [ 236.274673][T12099] tipc: Enabled bearer , priority 0 [ 236.289920][T12099] syzkaller0: entered promiscuous mode [ 236.305498][T12099] syzkaller0: entered allmulticast mode [ 236.318860][T12099] tipc: Resetting bearer [ 236.431932][T12098] tipc: Resetting bearer [ 236.478423][T12098] tipc: Disabling bearer [ 236.905194][T12131] netlink: 'syz.7.1775': attribute type 1 has an invalid length. [ 237.028291][T12140] netlink: 'syz.5.1778': attribute type 1 has an invalid length. [ 237.136765][T12140] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 237.440862][T12160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.454815][T12168] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 237.548722][T12170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.588402][T12170] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 237.614317][T12181] netlink: 'syz.6.1791': attribute type 1 has an invalid length. [ 237.619341][T12170] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 237.753294][T12187] netlink: 'syz.6.1793': attribute type 12 has an invalid length. [ 238.036145][T12205] vlan2: entered promiscuous mode [ 238.049209][T12205] bridge0: entered promiscuous mode [ 238.065301][T12203] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20003 [ 238.320080][T12217] syzkaller1: entered promiscuous mode [ 238.331211][T12217] syzkaller1: entered allmulticast mode [ 238.402968][T12222] __nla_validate_parse: 10 callbacks suppressed [ 238.402989][T12222] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1805'. [ 238.569416][T12235] netlink: 'syz.7.1810': attribute type 17 has an invalid length. [ 238.583023][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1810'. [ 238.594779][T12233] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 238.601575][T12233] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 238.613715][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1810'. [ 238.630932][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 238.689277][T12235] erspan0: entered promiscuous mode [ 238.714557][T12235] gretap0: entered promiscuous mode [ 238.727635][T12245] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1814'. [ 238.749645][T12247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1813'. [ 238.953408][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1815'. [ 239.075999][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1815'. [ 239.388434][T12292] tipc: Started in network mode [ 239.406412][T12292] tipc: Node identity 5ecb22beac6c, cluster identity 4711 [ 239.438181][T12292] tipc: Enabled bearer , priority 0 [ 239.478487][T12295] syzkaller0: entered promiscuous mode [ 239.484014][T12295] syzkaller0: entered allmulticast mode [ 239.508662][T12294] batadv2: entered allmulticast mode [ 239.551019][T12292] tipc: Resetting bearer [ 239.575812][T12287] tipc: Resetting bearer [ 239.621332][T12301] netlink: 'syz.5.1829': attribute type 1 has an invalid length. [ 239.636012][T12287] tipc: Disabling bearer [ 239.829476][T12311] netlink: 'syz.7.1833': attribute type 1 has an invalid length. [ 239.846228][ T11] block nbd3: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 60 seconds [ 239.857107][ T11] block nbd3: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 60 seconds [ 239.888997][ T11] block nbd3: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 60 seconds [ 239.900184][ T11] block nbd3: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 60 seconds [ 240.009585][T12318] bond0: Device is already in use. [ 240.070422][T12320] SET target dimension over the limit! [ 240.381805][T12344] bond2: option resend_igmp: invalid value (32767) [ 240.421284][T12344] bond2: option resend_igmp: allowed values 0 - 255 [ 240.469410][T12344] bond2 (unregistering): Released all slaves [ 240.570048][T12357] Cannot find del_set index 3 as target [ 240.687422][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1848'. [ 240.932286][T12370] dvmrp0: entered allmulticast mode [ 240.944998][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 241.161823][T12384] syzkaller1: entered promiscuous mode [ 241.173582][T12384] syzkaller1: entered allmulticast mode [ 241.196587][T12388] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 241.242587][T12388] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 241.742468][T12413] sch_fq: defrate 0 ignored. [ 241.985745][T12430] syzkaller0: entered promiscuous mode [ 241.991428][T12430] syzkaller0: entered allmulticast mode [ 242.207278][T12440] netlink: 'syz.7.1873': attribute type 2 has an invalid length. [ 242.215103][T12440] netlink: 'syz.7.1873': attribute type 1 has an invalid length. [ 242.262217][T12440] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 242.307492][T12446] syzkaller1: entered promiscuous mode [ 242.316157][T12446] syzkaller1: entered allmulticast mode [ 242.362689][T12444] batadv1: entered allmulticast mode [ 242.451702][T12452] netlink: 'syz.5.1878': attribute type 21 has an invalid length. [ 242.861371][T12474] netlink: 'syz.5.1885': attribute type 16 has an invalid length. [ 242.878340][T12474] netlink: 'syz.5.1885': attribute type 3 has an invalid length. [ 242.952838][T12479] tipc: Enabling of bearer rejected, media not registered [ 243.178610][T12491] netlink: 'syz.5.1891': attribute type 1 has an invalid length. [ 243.195348][T12484] macvtap2: entered promiscuous mode [ 243.201461][T12484] macvtap2: entered allmulticast mode [ 243.251447][T12494] netlink: 'syz.5.1891': attribute type 2 has an invalid length. [ 243.372312][T12491] bond2: entered promiscuous mode [ 243.401169][T12491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.425189][T12487] __nla_validate_parse: 9 callbacks suppressed [ 243.425207][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1888'. [ 243.605501][T12508] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.624074][T12508] netlink: 'syz.5.1895': attribute type 1 has an invalid length. [ 244.589980][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1903'. [ 244.675967][T12548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1904'. [ 244.762397][T12557] smc: net device vcan0 applied user defined pnetid SYZ1 [ 244.799750][T12557] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 244.943887][T12566] netlink: 'syz.5.1908': attribute type 1 has an invalid length. [ 245.138896][T12577] netlink: 35 bytes leftover after parsing attributes in process `syz.7.1911'. [ 245.546165][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1920'. [ 245.638606][T12611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.645999][T12611] IPv6: NLM_F_CREATE should be set when creating new route [ 245.653522][T12611] IPv6: NLM_F_CREATE should be set when creating new route [ 245.663639][T12611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.990493][T12619] sctp: [Deprecated]: syz.4.1926 (pid 12619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.990493][T12619] Use struct sctp_sack_info instead [ 246.010838][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 246.065726][T12629] syz.5.1927: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.107223][T12629] CPU: 1 UID: 0 PID: 12629 Comm: syz.5.1927 Not tainted syzkaller #0 PREEMPT(full) [ 246.107254][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.107277][T12629] Call Trace: [ 246.107286][T12629] [ 246.107295][T12629] dump_stack_lvl+0x189/0x250 [ 246.107329][T12629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.107353][T12629] ? __pfx__printk+0x10/0x10 [ 246.107378][T12629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.107409][T12629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.107443][T12629] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 246.107477][T12629] warn_alloc+0x214/0x310 [ 246.107510][T12629] ? stack_depot_save_flags+0x40/0x860 [ 246.107543][T12629] ? __pfx_warn_alloc+0x10/0x10 [ 246.107577][T12629] ? kasan_save_track+0x3e/0x80 [ 246.107605][T12629] ? __kasan_kmalloc+0x93/0xb0 [ 246.107638][T12629] ? xsk_setsockopt+0x4dc/0x8d0 [ 246.107659][T12629] ? do_sock_setsockopt+0x179/0x1b0 [ 246.107683][T12629] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 246.107706][T12629] ? do_syscall_64+0xfa/0xfa0 [ 246.107732][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.107765][T12629] __vmalloc_node_range_noprof+0x125/0x12d0 [ 246.107833][T12629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.107870][T12629] ? __kasan_kmalloc+0x93/0xb0 [ 246.107909][T12629] vmalloc_user_noprof+0xad/0xf0 [ 246.107941][T12629] ? xskq_create+0xbf/0x170 [ 246.107967][T12629] xskq_create+0xbf/0x170 [ 246.107995][T12629] xsk_init_queue+0xb0/0x110 [ 246.108023][T12629] xsk_setsockopt+0x4dc/0x8d0 [ 246.108049][T12629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.108076][T12629] ? __pfx_aa_sk_perm+0x10/0x10 [ 246.108116][T12629] ? aa_sock_opt_perm+0xff/0x1b0 [ 246.108151][T12629] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 246.108172][T12629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.108197][T12629] do_sock_setsockopt+0x179/0x1b0 [ 246.108227][T12629] __x64_sys_setsockopt+0x13f/0x1b0 [ 246.108259][T12629] do_syscall_64+0xfa/0xfa0 [ 246.108284][T12629] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.108310][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.108332][T12629] ? clear_bhb_loop+0x60/0xb0 [ 246.108359][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.108380][T12629] RIP: 0033:0x7fa80958eec9 [ 246.108411][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.108448][T12629] RSP: 002b:00007fa80a387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 246.108473][T12629] RAX: ffffffffffffffda RBX: 00007fa8097e5fa0 RCX: 00007fa80958eec9 [ 246.108489][T12629] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 246.108503][T12629] RBP: 00007fa809611f91 R08: 0000000000000004 R09: 0000000000000000 [ 246.108517][T12629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.108532][T12629] R13: 00007fa8097e6038 R14: 00007fa8097e5fa0 R15: 00007ffdb5e6d038 [ 246.108570][T12629] [ 246.108584][T12629] Mem-Info: [ 246.377244][T12636] 8021q: VLANs not supported on ip6tnl0 [ 246.395807][T12629] active_anon:5166 inactive_anon:0 isolated_anon:0 [ 246.395807][T12629] active_file:3017 inactive_file:39949 isolated_file:0 [ 246.395807][T12629] unevictable:768 dirty:66 writeback:0 [ 246.395807][T12629] slab_reclaimable:11580 slab_unreclaimable:107646 [ 246.395807][T12629] mapped:29127 shmem:1371 pagetables:1133 [ 246.395807][T12629] sec_pagetables:0 bounce:0 [ 246.395807][T12629] kernel_misc_reclaimable:0 [ 246.395807][T12629] free:1318304 free_pcp:14296 free_cma:0 [ 246.511570][T12643] syzkaller0: entered promiscuous mode [ 246.518554][T12643] syzkaller0: entered allmulticast mode [ 246.621672][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1934'. [ 246.632005][T12629] Node 0 active_anon:20364kB inactive_anon:0kB active_file:12068kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116508kB dirty:264kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12752kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.687772][T12629] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.719718][T12629] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.752778][T12629] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 246.758902][T12629] Node 0 DMA32 free:1367736kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20464kB inactive_anon:0kB active_file:12068kB inactive_file:159592kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:38432kB local_pcp:17236kB free_cma:0kB [ 246.797282][T12629] lowmem_reserve[]: 0 0 1 1 1 [ 246.802085][T12629] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.832357][T12629] lowmem_reserve[]: 0 0 0 0 0 [ 246.837190][T12629] Node 1 Normal free:3891280kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18756kB local_pcp:9568kB free_cma:0kB [ 246.884931][T12629] lowmem_reserve[]: 0 0 0 0 0 [ 246.891574][T12629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 246.905332][T12629] Node 0 DMA32: 1260*4kB (UM) 1030*8kB (UM) 316*16kB (UME) 374*32kB (UME) 98*64kB (UME) 35*128kB (UME) 17*256kB (UM) 14*512kB (UM) 30*1024kB (UME) 5*2048kB (UM) 311*4096kB (UM) = 1367392kB [ 246.925948][T12629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 246.939536][T12629] Node 1 Normal: 168*4kB (UE) 58*8kB (UME) 38*16kB (UME) 72*32kB (UME) 16*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3891280kB [ 246.996764][T12629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.016989][T12629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.073616][T12629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.091671][T12629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.111630][T12629] 44334 total pagecache pages [ 247.127758][T12629] 0 pages in swap cache [ 247.137540][T12629] Free swap = 124996kB [ 247.145967][T12629] Total swap = 124996kB [ 247.150170][T12629] 2097051 pages RAM [ 247.164293][T12629] 0 pages HighMem/MovableOnly [ 247.174453][T12629] 424543 pages reserved [ 247.184696][T12629] 0 pages cma reserved [ 247.184798][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1937'. [ 247.362484][T12680] validate_nla: 35 callbacks suppressed [ 247.362504][T12680] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 247.371403][T12677] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 247.494251][T12677] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.552124][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'. [ 248.060083][T12723] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1951'. [ 248.340171][T12743] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.358866][T12743] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.472339][T12749] __nla_validate_parse: 4 callbacks suppressed [ 248.472360][T12749] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1961'. [ 249.108353][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1974'. [ 249.123774][T12790] veth0_to_team: entered promiscuous mode [ 249.136256][T12790] veth0_to_team: entered allmulticast mode [ 249.700719][T12833] delete_channel: no stack [ 249.853453][T12845] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 249.892034][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1991'. [ 249.940515][T12849] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1991'. [ 250.148549][T12865] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 250.163728][T12865] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1995'. [ 250.174202][T12865] xt_policy: neither incoming nor outgoing policy selected [ 250.380934][T12874] xfrm1: entered allmulticast mode [ 250.791799][T12907] netlink: 'syz.4.2006': attribute type 11 has an invalid length. [ 251.350861][T12926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2017'. [ 251.621020][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 251.636127][T12939] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 251.667169][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 251.673600][T12947] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 251.700344][T12944] netlink: 'syz.6.2023': attribute type 1 has an invalid length. [ 251.957846][T12957] netlink: 'syz.7.2026': attribute type 1 has an invalid length. [ 251.979252][T12957] netlink: 'syz.7.2026': attribute type 2 has an invalid length. [ 252.568728][T12986] bond3: Removing last ns target with arp_interval on [ 252.662167][T12998] netlink: 'syz.1.2040': attribute type 4 has an invalid length. [ 253.187510][T13013] netlink: get zone limit has 4 unknown bytes [ 253.207376][T13015] netlink: get zone limit has 4 unknown bytes [ 253.345129][T13017] veth0_to_team: entered promiscuous mode [ 253.351952][T13017] veth0_to_team: entered allmulticast mode [ 253.379440][T13025] netlink: 'syz.6.2050': attribute type 1 has an invalid length. [ 253.401779][T13025] netlink: 236 bytes leftover after parsing attributes in process `syz.6.2050'. [ 253.484395][T13025] tipc: Enabled bearer , priority 13 [ 253.587529][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2053'. [ 253.831369][T13063] netlink: 'syz.6.2059': attribute type 2 has an invalid length. [ 253.931280][T13051] : renamed from bridge_slave_0 [ 254.595509][ T918] tipc: Node number set to 3402646884 [ 254.602887][T13090] tipc: Enabled bearer , priority 0 [ 254.641523][T13094] netlink: 'syz.5.2069': attribute type 1 has an invalid length. [ 254.659551][T13090] syzkaller0: entered promiscuous mode [ 254.665077][T13090] syzkaller0: entered allmulticast mode [ 254.727038][T13090] veth1_macvtap: left promiscuous mode [ 254.732753][T13090] macsec0: entered promiscuous mode [ 254.742885][T13090] macsec0: entered allmulticast mode [ 254.787595][T13097] veth1_macvtap: entered promiscuous mode [ 254.793398][T13097] veth1_macvtap: entered allmulticast mode [ 254.806295][T13097] macsec0: left promiscuous mode [ 254.811647][T13099] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 254.822085][T13097] macsec0: left allmulticast mode [ 254.840087][T13097] veth1_macvtap: left allmulticast mode [ 254.852086][T13099] tipc: Enabling of bearer rejected, failed to enable media [ 254.869017][T13090] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2066'. [ 254.891551][T13087] tipc: Resetting bearer [ 254.906852][T13101] netlink: 'syz.6.2071': attribute type 1 has an invalid length. [ 254.942835][T13087] tipc: Disabling bearer [ 254.960130][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2071'. [ 255.019970][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2071'. [ 255.047135][T13103] bridge3: left allmulticast mode [ 255.076513][T13103] bond4: left promiscuous mode [ 255.278031][T13121] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2076'. [ 255.308668][T13121] 0ªî{X¹¦: renamed from gretap0 [ 255.342658][T13121] 0ªî{X¹¦: entered allmulticast mode [ 255.360461][T13121] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 255.388311][T13123] netlink: 'syz.7.2077': attribute type 1 has an invalid length. [ 255.952481][T13145] syzkaller0: entered promiscuous mode [ 255.970482][T13145] syzkaller0: entered allmulticast mode [ 256.010466][T13146] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2084'. [ 256.029302][T13145] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2085'. [ 256.575292][T13182] dvmrp1: entered allmulticast mode [ 256.737116][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 256.769020][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 256.800113][T13194] netlink: 'syz.1.2097': attribute type 1 has an invalid length. [ 256.874508][T13200] bond7: (slave ip6gretap1): making interface the new active one [ 256.883698][T13200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.893566][T13200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.901894][T13200] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 256.918992][T13201] netlink: 'syz.6.2100': attribute type 29 has an invalid length. [ 256.947611][T13202] netlink: 'syz.6.2100': attribute type 29 has an invalid length. [ 256.959048][T13204] netlink: 'syz.7.2101': attribute type 33 has an invalid length. [ 256.960879][T13201] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2100'. [ 257.054006][ T30] audit: type=1800 audit(1760333595.270:6): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2102" name="memory.events" dev="tmpfs" ino=716 res=0 errno=0 [ 257.946682][T13263] GUP no longer grows the stack in syz.6.2119 (13263): 200000003000-20000000a000 (200000001000) [ 257.958361][T13263] CPU: 1 UID: 0 PID: 13263 Comm: syz.6.2119 Not tainted syzkaller #0 PREEMPT(full) [ 257.958394][T13263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.958409][T13263] Call Trace: [ 257.958418][T13263] [ 257.958428][T13263] dump_stack_lvl+0x189/0x250 [ 257.958462][T13263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.958489][T13263] ? __pfx__printk+0x10/0x10 [ 257.958510][T13263] ? find_vma+0xe7/0x160 [ 257.958557][T13263] __get_user_pages+0x2470/0x2a00 [ 257.958592][T13263] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 257.958667][T13263] ? rcu_is_watching+0x15/0xb0 [ 257.958700][T13263] __gup_longterm_locked+0xde4/0x1660 [ 257.958737][T13263] ? try_grab_folio_fast+0x1bf/0x6a0 [ 257.958779][T13263] ? gup_fast_fallback+0x1b86/0x22d0 [ 257.958811][T13263] gup_fast_fallback+0x1d65/0x22d0 [ 257.958881][T13263] ? __pfx_gup_fast_fallback+0x10/0x10 [ 257.958907][T13263] ? __mutex_lock+0x335/0x1350 [ 257.958948][T13263] ? is_valid_gup_args+0x11f/0x200 [ 257.958980][T13263] ? get_user_pages_fast+0x4d/0xb0 [ 257.959013][T13263] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 257.959057][T13263] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 257.959078][T13263] ? wait_for_space+0x248/0x2d0 [ 257.959115][T13263] iov_iter_get_pages2+0x5e/0xa0 [ 257.959154][T13263] __se_sys_vmsplice+0x548/0x10d0 [ 257.959200][T13263] ? futex_private_hash_put+0x4b/0x280 [ 257.959236][T13263] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 257.959275][T13263] ? __pfx_futex_wake+0x10/0x10 [ 257.959367][T13263] ? do_syscall_64+0xbe/0xfa0 [ 257.959399][T13263] do_syscall_64+0xfa/0xfa0 [ 257.959424][T13263] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.959451][T13263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.959473][T13263] ? clear_bhb_loop+0x60/0xb0 [ 257.959499][T13263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.959520][T13263] RIP: 0033:0x7f63b4f8eec9 [ 257.959540][T13263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.959560][T13263] RSP: 002b:00007f63b5d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 257.959584][T13263] RAX: ffffffffffffffda RBX: 00007f63b51e6090 RCX: 00007f63b4f8eec9 [ 257.959600][T13263] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 257.959626][T13263] RBP: 00007f63b5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 257.959640][T13263] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 257.959653][T13263] R13: 00007f63b51e6128 R14: 00007f63b51e6090 R15: 00007ffd0a6a7b18 [ 257.959703][T13263] [ 258.527769][T13285] SET target dimension over the limit! [ 258.557772][T13287] nbd: nbd0 already in use [ 258.971125][T13310] netlink: 'syz.5.2137': attribute type 1 has an invalid length. [ 259.391290][T13332] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 259.430950][T13330] __nla_validate_parse: 6 callbacks suppressed [ 259.430969][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 259.465294][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2144'. [ 259.666145][T13347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2148'. [ 259.843877][T13363] netlink: 'syz.5.2150': attribute type 1 has an invalid length. [ 259.891003][T13363] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2150'. [ 260.048246][T13370] sctp: [Deprecated]: syz.7.2152 (pid 13370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.048246][T13370] Use struct sctp_sack_info instead [ 260.152385][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 260.198774][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 260.249094][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 260.276046][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2153'. [ 260.352786][T13383] netlink: 'syz.7.2155': attribute type 1 has an invalid length. [ 260.360713][T13383] netlink: 'syz.7.2155': attribute type 11 has an invalid length. [ 260.371022][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2157'. [ 260.374358][T13383] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2155'. [ 260.678177][T13405] netlink: 'syz.7.2162': attribute type 29 has an invalid length. [ 260.710294][T13405] netlink: 'syz.7.2162': attribute type 29 has an invalid length. [ 260.791714][T13406] unsupported nla_type 58 [ 260.814950][T13409] sock: sock_timestamping_bind_phc: sock not bind to device [ 260.962264][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.022883][T13422] tipc: Enabled bearer , priority 0 [ 261.251932][T13434] netlink: 'syz.7.2169': attribute type 4 has an invalid length. [ 261.435922][T13427] syzkaller0: entered promiscuous mode [ 261.441474][T13427] syzkaller0: entered allmulticast mode [ 261.803065][T13412] tipc: Resetting bearer [ 262.016285][ T982] tipc: Node number set to 4071039678 [ 262.071630][T13412] tipc: Disabling bearer [ 262.185781][T13473] ip6gre1: entered allmulticast mode [ 262.514508][T13496] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 262.595701][T13496] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.608966][T13496] gretap1: entered promiscuous mode [ 262.614247][T13496] gretap1: entered allmulticast mode [ 262.638384][T13488] syzkaller0: refused to change device tx_queue_len [ 262.986885][T13487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.023709][T13487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.044358][T13487] bond0 (unregistering): Released all slaves [ 263.639679][T13466] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.686127][T13466] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.695129][T13466] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.749647][T13466] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.058476][T13574] hsr_slave_1 (unregistering): left promiscuous mode [ 264.749949][T13614] __nla_validate_parse: 39 callbacks suppressed [ 264.749969][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2210'. [ 264.804164][T13621] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2210'. [ 264.815875][T13616] lo: left promiscuous mode [ 264.820732][T13616] lo: left allmulticast mode [ 265.003599][T13628] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2214'. [ 265.003636][T13627] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2214'. [ 265.606900][T13616] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 266.035950][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2222'. [ 266.044894][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2222'. [ 266.277865][T13670] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2228'. [ 266.309598][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 266.575346][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 266.933784][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2240'. [ 266.988234][T13715] pim6reg1: entered promiscuous mode [ 266.993991][T13715] pim6reg1: entered allmulticast mode [ 267.107297][T13726] bridge_slave_1: left allmulticast mode [ 267.130508][T13726] bridge_slave_1: left promiscuous mode [ 267.142523][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.168794][T13731] openvswitch: netlink: Missing key (keys=40, expected=80) [ 267.180837][T13726] bridge_slave_0: left allmulticast mode [ 267.186741][T13726] bridge_slave_0: left promiscuous mode [ 267.193946][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.496286][T13737] tipc: Enabled bearer , priority 0 [ 267.666936][T13755] netlink: 'syz.7.2247': attribute type 7 has an invalid length. [ 267.695172][T13737] syzkaller0: entered promiscuous mode [ 267.721956][T13737] syzkaller0: entered allmulticast mode [ 267.731969][T13737] tipc: Resetting bearer [ 267.884748][T13463] tipc: Resetting bearer [ 267.910230][T13767] netlink: 'syz.7.2251': attribute type 11 has an invalid length. [ 267.920611][T13734] tipc: Resetting bearer [ 269.074470][T13734] tipc: Disabling bearer [ 269.302949][T13786] netlink: 'syz.4.2256': attribute type 12 has an invalid length. [ 269.319387][T13786] netlink: 'syz.4.2256': attribute type 29 has an invalid length. [ 269.326888][T13787] nbd: must specify at least one socket [ 269.333129][T13788] nbd: must specify at least one socket [ 269.338876][T13786] netlink: 'syz.4.2256': attribute type 1 has an invalid length. [ 269.348324][T13786] netlink: 'syz.4.2256': attribute type 2 has an invalid length. [ 269.490020][T13797] netlink: 'syz.1.2258': attribute type 7 has an invalid length. [ 269.642599][T13805] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 269.921565][ T11] block nbd3: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 90 seconds [ 269.932396][ T11] block nbd3: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 90 seconds [ 269.943803][ T11] block nbd3: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 90 seconds [ 269.956213][ T11] block nbd3: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 90 seconds [ 270.233687][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.719231][T13866] __nla_validate_parse: 15 callbacks suppressed [ 270.719252][T13866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2278'. [ 270.727864][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 270.746280][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2278'. [ 270.984294][T13881] ip6t_srh: unknown srh invflags 4000 [ 271.368472][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2285'. [ 271.388054][T13892] netlink: 'syz.5.2285': attribute type 30 has an invalid length. [ 271.403970][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'. [ 271.591517][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2287'. [ 271.609382][T13898] netlink: 'syz.4.2288': attribute type 1 has an invalid length. [ 271.983940][T13913] macvlan0: entered promiscuous mode [ 271.994524][T13913] macvlan0: left promiscuous mode [ 272.256495][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 272.300522][T13935] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 272.472784][T13948] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2303'. [ 272.509698][T13948] 8021q: VLANs not supported on ip_vti0 [ 272.556634][T13953] tipc: New replicast peer: 0.0.0.0 [ 272.562305][T13953] tipc: Enabled bearer , priority 10 [ 272.600233][T13954] Cannot find add_set index 1 as target [ 273.283253][T13997] ip6gretap0: mtu less than device minimum [ 273.386241][T13997] veth0_to_batadv: mtu less than device minimum [ 273.534584][T14005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.907887][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2322'. [ 273.930145][T14020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2323'. [ 274.264532][T14027] bridge_slave_0: entered promiscuous mode [ 274.291244][T14027] bridge_slave_0: entered allmulticast mode [ 274.419842][T14039] validate_nla: 2 callbacks suppressed [ 274.419862][T14039] netlink: 'syz.1.2329': attribute type 4 has an invalid length. [ 274.434309][T14043] netlink: 'syz.1.2329': attribute type 4 has an invalid length. [ 274.458917][T14039] tc_dump_action: action bad kind [ 275.369603][T14091] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 275.456116][T14096] netlink: 'syz.4.2346': attribute type 10 has an invalid length. [ 275.498061][T14096] bridge_slave_1: left allmulticast mode [ 275.535873][T14096] bridge_slave_1: left promiscuous mode [ 275.552514][T14096] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.582042][T14096] bridge_slave_1: entered allmulticast mode [ 275.602288][T14096] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 275.838614][T14114] __nla_validate_parse: 5 callbacks suppressed [ 275.838636][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 275.859984][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 276.104799][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2357'. [ 276.117394][T14131] netlink: 'syz.6.2357': attribute type 10 has an invalid length. [ 276.125534][T14131] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2357'. [ 276.134521][T14131] batadv0: entered promiscuous mode [ 276.141263][T14131] batadv0: entered allmulticast mode [ 276.156462][T14131] bridge0: port 3(batadv0) entered blocking state [ 276.173900][T14131] bridge0: port 3(batadv0) entered disabled state [ 276.198764][T14131] bridge0: port 3(batadv0) entered blocking state [ 276.205462][T14131] bridge0: port 3(batadv0) entered forwarding state [ 276.245742][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 276.255042][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 276.311015][T14142] xt_NFQUEUE: number of total queues is 0 [ 276.542770][T14152] netlink: 'syz.4.2362': attribute type 9 has an invalid length. [ 276.617727][T14152] netlink: 'syz.4.2362': attribute type 7 has an invalid length. [ 276.656166][T14152] netlink: 'syz.4.2362': attribute type 8 has an invalid length. [ 276.688432][T14151] netlink: 'syz.4.2362': attribute type 9 has an invalid length. [ 276.707696][T14151] netlink: 'syz.4.2362': attribute type 7 has an invalid length. [ 276.729834][T14151] netlink: 'syz.4.2362': attribute type 8 has an invalid length. [ 276.918290][T14178] xt_limit: Overflow, try lower: 271964/0 [ 276.989283][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2368'. [ 276.998755][T14180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2368'. [ 277.012753][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2368'. [ 277.042986][T14180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2368'. [ 278.249445][T14196] ip6gre1: entered allmulticast mode [ 278.260225][T14196] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 278.304427][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2373'. [ 278.321624][T14208] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2378'. [ 279.214224][T14252] bridge6: entered promiscuous mode [ 279.219839][T14252] bridge6: entered allmulticast mode [ 280.060986][T14290] netlink: 'syz.5.2403': attribute type 1 has an invalid length. [ 280.547143][T14307] Bluetooth: hci0: unsupported parameter 1024 [ 280.553279][T14307] Bluetooth: hci0: invalid length 11, exp 2 for type 13 [ 280.741204][T14325] Dead loop on virtual device ip6_vti0, fix it urgently! [ 280.800100][T14325] Dead loop on virtual device ip6_vti0, fix it urgently! [ 280.892450][T14330] netlink: 'syz.5.2417': attribute type 16 has an invalid length. [ 280.903737][T14330] __nla_validate_parse: 8 callbacks suppressed [ 280.903764][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'. [ 280.961173][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2417'. [ 281.078912][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2422'. [ 281.095290][T14350] x_tables: duplicate underflow at hook 2 [ 281.210278][T14342] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 281.225685][T14356] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2423'. [ 281.560981][T14367] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 281.573649][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2429'. [ 281.577199][T14367] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 281.655917][T14371] syzkaller0: entered promiscuous mode [ 281.662015][T14371] syzkaller0: entered allmulticast mode [ 281.738049][T14379] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2431'. [ 281.840927][T14379] x_tables: duplicate underflow at hook 3 [ 281.855921][T14379] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2431'. [ 282.023197][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 282.077678][T14395] netlink: 'syz.6.2437': attribute type 58 has an invalid length. [ 282.091345][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2438'. [ 282.100772][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2437'. [ 282.142272][T14396] tipc: Enabled bearer , priority 0 [ 282.190373][T14406] SET target dimension over the limit! [ 282.241164][T14396] tipc: Disabling bearer [ 282.463571][T14421] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 282.892274][T14451] vlan4: entered allmulticast mode [ 282.905098][T14451] hsr0: entered allmulticast mode [ 282.911343][T14451] hsr_slave_1: entered allmulticast mode [ 282.969357][T14452] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.056527][T14452] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.139242][T14452] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.202510][T14452] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.304107][ T6525] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.332545][T13466] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.362299][ T6525] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.384631][ T6525] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.208046][T14514] netlink: 'syz.7.2470': attribute type 1 has an invalid length. [ 284.221252][T14514] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 284.405866][T14529] tc_dump_action: action bad kind [ 285.128571][T14563] netlink: 'syz.1.2483': attribute type 8 has an invalid length. [ 285.229795][T14562] sctp: [Deprecated]: syz.5.2484 (pid 14562) Use of int in max_burst socket option deprecated. [ 285.229795][T14562] Use struct sctp_assoc_value instead [ 285.520699][T14579] netlink: 'syz.1.2489': attribute type 1 has an invalid length. [ 285.914417][T14612] __nla_validate_parse: 15 callbacks suppressed [ 285.914439][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 285.962509][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 286.098396][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 286.117336][T14623] netlink: 'syz.7.2500': attribute type 10 has an invalid length. [ 286.135578][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 286.242307][T14610] delete_channel: no stack [ 287.028196][T14672] netlink: 'syz.5.2515': attribute type 1 has an invalid length. [ 287.037028][T14672] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2515'. [ 287.119383][T14678] netlink: 'syz.6.2516': attribute type 11 has an invalid length. [ 287.142442][T14673] bond4: entered promiscuous mode [ 287.221474][T14677] bond_slave_0: entered promiscuous mode [ 287.227561][T14677] bond_slave_1: entered promiscuous mode [ 287.259093][T14677] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.277695][T14677] bond4: (slave macvlan2): making interface the new active one [ 287.299163][T14677] macvlan2: entered promiscuous mode [ 287.305096][T14677] bond0: entered promiscuous mode [ 287.337387][T14677] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 287.364189][T14673] bridge0: port 1(syz_tun) entered blocking state [ 287.401656][T14673] bridge0: port 1(syz_tun) entered disabled state [ 287.436704][T14673] syz_tun: entered allmulticast mode [ 287.451327][T14697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2522'. [ 287.462824][T14673] syz_tun: entered promiscuous mode [ 287.471976][T14680] netlink: 'syz.6.2516': attribute type 4 has an invalid length. [ 287.630128][T14705] netlink: 'syz.7.2523': attribute type 1 has an invalid length. [ 287.679777][T14709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2526'. [ 287.760752][T14713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2525'. [ 287.964651][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 288.123682][T14728] vlan3: entered promiscuous mode [ 288.125636][T14730] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2531'. [ 288.580229][T14753] tipc: Enabled bearer , priority 0 [ 288.633052][T14759] IPVS: length: 176 != 8 [ 288.681451][T14753] syzkaller0: entered promiscuous mode [ 288.688153][T14753] syzkaller0: entered allmulticast mode [ 288.696620][T14753] tipc: Resetting bearer [ 288.840528][T14761] team0: Port device team_slave_1 removed [ 288.875296][T14775] netlink: 'syz.4.2543': attribute type 1 has an invalid length. [ 288.894298][T14750] tipc: Resetting bearer [ 290.392696][T14750] tipc: Disabling bearer [ 290.403828][T14775] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 290.442858][T14798] syzkaller1: entered promiscuous mode [ 290.460870][T14798] syzkaller1: entered allmulticast mode [ 290.558286][T14810] openvswitch: netlink: Missing valid actions attribute. [ 290.586144][T14810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.653250][T14813] C: renamed from team_slave_0 [ 290.677094][T14813] netlink: 'syz.1.2550': attribute type 1 has an invalid length. [ 290.696489][T14813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 291.307789][T14841] __nla_validate_parse: 1 callbacks suppressed [ 291.307808][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2562'. [ 291.378898][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2562'. [ 291.479333][T14847] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.787960][T14865] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2567'. [ 291.803460][T14865] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2567'. [ 292.221791][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2576'. [ 292.335091][T14894] !€ÿ: renamed from bond_slave_0 (while UP) [ 292.415235][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2580'. [ 292.951194][T14904] hsr0 speed is unknown, defaulting to 1000 [ 292.978640][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.019441][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.045940][T14904] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 293.102619][T14904] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 293.185516][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.198545][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.230943][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.276064][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.283994][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.292719][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.302264][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.310633][T14904] hsr0 speed is unknown, defaulting to 1000 [ 293.452041][T14946] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2595'. [ 293.471105][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2594'. [ 293.624993][ T30] audit: type=1800 audit(1760333631.840:7): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2598" name="memory.events" dev="tmpfs" ino=1233 res=0 errno=0 [ 293.897615][T14971] netlink: 'syz.1.2599': attribute type 12 has an invalid length. [ 294.051482][T14971] bond10: option primary_reselect: invalid value (255) [ 294.117294][T14971] bond10 (unregistering): Released all slaves [ 294.449795][T14994] block nbd6: NBD_DISCONNECT [ 294.482583][T14994] nbd: device at index 6 is going down [ 294.696383][T14997] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2605'. [ 294.736906][T14998] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2606'. [ 295.156429][T15015] netlink: 'syz.4.2612': attribute type 1 has an invalid length. [ 295.170880][T15015] netlink: 'syz.4.2612': attribute type 1 has an invalid length. [ 295.434193][T15032] delete_channel: no stack [ 295.691688][T15049] xt_l2tp: missing protocol rule (udp|l2tpip) [ 295.846601][T15060] openvswitch: netlink: Missing valid actions attribute. [ 295.861320][T15060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.203977][T15083] tipc: Enabled bearer , priority 0 [ 296.226685][T15083] syzkaller0: entered promiscuous mode [ 296.233340][T15083] syzkaller0: entered allmulticast mode [ 296.261759][T15089] netlink: 'syz.4.2638': attribute type 1 has an invalid length. [ 296.300399][T15086] netlink: 'syz.5.2637': attribute type 1 has an invalid length. [ 296.334403][T15089] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.342232][T15083] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.463000][T15095] veth5: entered promiscuous mode [ 296.476657][T15095] bond8: (slave veth5): Enslaving as an active interface with a down link [ 296.508121][T15097] bond0: (slave geneve2): making interface the new active one [ 296.523101][T15108] __nla_validate_parse: 5 callbacks suppressed [ 296.523121][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'. [ 296.527103][T15097] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 296.582059][T15089] bond8: entered allmulticast mode [ 296.610175][ T36] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 296.631463][ T36] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 296.746274][ T36] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 296.765655][ T36] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 296.941429][T15082] tipc: Resetting bearer [ 296.978878][T15082] tipc: Disabling bearer [ 297.035966][T15117] syzkaller1: entered promiscuous mode [ 297.050520][T15117] syzkaller1: entered allmulticast mode [ 297.369328][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'. [ 297.576509][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2659'. [ 297.576682][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2659'. [ 297.729232][T15173] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2662'. [ 298.147600][T15189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2666'. [ 298.496379][T15202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.659201][T15214] macvlan0: entered promiscuous mode [ 298.673352][T15214] macvlan0: left promiscuous mode [ 299.077330][T15228] netlink: 'syz.7.2681': attribute type 1 has an invalid length. [ 299.153860][T15228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.230261][T15228] bond5: (slave gretap1): making interface the new active one [ 299.244637][T15228] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 299.254543][T15236] tipc: New replicast peer: 255.255.255.255 [ 299.264692][T15236] tipc: Enabled bearer , priority 10 [ 299.358255][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2683'. [ 299.423876][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2683'. [ 299.582952][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'. [ 299.704631][T15252] bond10: Invalid ad_actor_system MAC address. [ 299.721189][T15252] bond10: option ad_actor_system: invalid value (1) [ 299.737109][T15252] bond10 (unregistering): Released all slaves [ 300.014054][ T11] block nbd3: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 120 seconds [ 300.026830][ T11] block nbd3: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 120 seconds [ 300.038839][ T11] block nbd3: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 120 seconds [ 300.050137][ T11] block nbd3: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 120 seconds [ 300.299436][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2698'. [ 300.635916][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 300.694416][T15324] netlink: 'syz.5.2706': attribute type 11 has an invalid length. [ 301.389535][T15355] team0: Cannot enslave team device to itself [ 301.592847][T15371] __nla_validate_parse: 6 callbacks suppressed [ 301.592869][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2718'. [ 301.601974][T15373] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2720'. [ 301.676051][T15373] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2720'. [ 301.709528][T15373] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2720'. [ 301.719490][T15374] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2720'. [ 301.765971][T15374] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2720'. [ 301.788369][T15374] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2720'. [ 302.113437][T15400] netlink: 'syz.1.2727': attribute type 1 has an invalid length. [ 302.126806][T15401] netlink: 'syz.1.2727': attribute type 1 has an invalid length. [ 302.201774][T15406] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2729'. [ 302.204081][T15405] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2728'. [ 302.510669][T15416] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 302.549755][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2733'. [ 302.553820][T15416] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.568102][T15417] bridge0: port 3(batadv0) entered disabled state [ 302.582635][T15417] bridge_slave_1: left allmulticast mode [ 302.589103][T15417] bridge_slave_1: left promiscuous mode [ 302.600063][T15417] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.613417][T15417] bridge_slave_0: left allmulticast mode [ 302.619620][T15417] bridge_slave_0: left promiscuous mode [ 302.627339][T15417] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.709359][T15424] netlink: 'syz.1.2734': attribute type 16 has an invalid length. [ 302.980560][T15423] netlink: 'syz.1.2734': attribute type 4 has an invalid length. [ 303.027212][T15441] veth0_to_batadv: mtu less than device minimum [ 303.255928][T15449] xt_TCPMSS: Only works on TCP SYN packets [ 303.592020][T15472] tipc: Enabled bearer , priority 0 [ 303.621224][T15472] syzkaller0: entered promiscuous mode [ 303.645505][T15472] syzkaller0: entered allmulticast mode [ 303.673040][T15472] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 303.708408][T15472] tipc: Resetting bearer [ 303.724968][T15471] tipc: Resetting bearer [ 303.777234][T15471] tipc: Disabling bearer [ 304.619593][T15528] netlink: 'syz.5.2766': attribute type 1 has an invalid length. [ 304.909609][T15553] netlink: 'syz.6.2773': attribute type 1 has an invalid length. [ 305.282202][T15574] IPv6: sit2: Disabled Multicast RS [ 305.298308][T15574] sit2: entered allmulticast mode [ 305.636174][T15599] netlink: 'syz.5.2786': attribute type 1 has an invalid length. [ 305.746820][T15599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.781901][T15603] bond5: entered allmulticast mode [ 305.867182][T15611] netlink: 'syz.6.2791': attribute type 1 has an invalid length. [ 306.001113][T15616] netlink: 'syz.1.2788': attribute type 4 has an invalid length. [ 306.116001][T15618] sctp: [Deprecated]: syz.5.2792 (pid 15618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.116001][T15618] Use struct sctp_sack_info instead [ 306.130011][T15626] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 306.144317][T15616] `: renamed from bond0 [ 306.636775][T15639] __nla_validate_parse: 49 callbacks suppressed [ 306.636797][T15639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2801'. [ 306.657455][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2801'. [ 306.733198][T15654] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2805'. [ 306.794150][T13457] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.803427][T13457] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.835765][T15654] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2805'. [ 306.843334][T13457] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.854188][T15659] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2808'. [ 306.891543][T15654] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2805'. [ 306.892982][T15656] tipc: Enabled bearer , priority 0 [ 306.913289][T15656] ip_vti0: entered promiscuous mode [ 306.919039][T15656] ip_vti0: entered allmulticast mode [ 306.927082][T13457] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.941875][T15656] tipc: Resetting bearer [ 306.956319][T15655] tipc: Disabling bearer [ 307.177145][T15667] syzkaller1: entered promiscuous mode [ 307.188789][T15667] syzkaller1: entered allmulticast mode [ 307.264156][T15679] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2812'. [ 307.284598][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 307.328990][T15680] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2812'. [ 307.340232][T15682] ipt_REJECT: ECHOREPLY no longer supported. [ 307.352640][T15680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2812'. [ 307.534188][T13463] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 307.617174][T15698] pim6reg: entered allmulticast mode [ 307.624369][T15698] pim6reg: left allmulticast mode [ 308.521465][T15751] veth7: entered allmulticast mode [ 308.830868][T15775] netlink: 'syz.5.2844': attribute type 58 has an invalid length. [ 308.843252][T15778] netlink: 'syz.5.2844': attribute type 58 has an invalid length. [ 309.420593][T15817] netlink: 'syz.1.2855': attribute type 1 has an invalid length. [ 309.967337][T15842] netlink: 'syz.4.2865': attribute type 1 has an invalid length. [ 313.417250][ T5196] udevd[5196]: worker [6073] /devices/virtual/block/nbd3 is taking a long time [ 319.355581][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 319.356310][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 330.076352][ T11] block nbd3: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 150 seconds [ 330.087291][ T11] block nbd3: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 150 seconds [ 330.099652][ T11] block nbd3: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 150 seconds [ 330.110691][ T11] block nbd3: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 150 seconds [ 334.009945][T15866] __nla_validate_parse: 18 callbacks suppressed [ 334.009984][T15866] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2875'. [ 334.229009][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2878'. [ 335.876692][T15957] netlink: zone id is out of range [ 335.881874][T15957] netlink: zone id is out of range [ 335.929898][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2907'. [ 335.950310][T15957] netlink: zone id is out of range [ 336.042144][T15960] 8021q: adding VLAN 0 to HW filter on device bond10 [ 336.081527][T15962] Bluetooth: MGMT ver 1.23 [ 336.118644][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2908'. [ 336.127557][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2907'. [ 336.273824][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.282060][T15957] netlink: set zone limit has 8 unknown bytes [ 336.299805][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.308783][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.317377][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.325889][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.503925][T15977] veth0_to_batadv: mtu less than device minimum [ 337.009270][T16003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.020434][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2917'. [ 337.030771][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 337.065096][T15974] hsr0 speed is unknown, defaulting to 1000 [ 337.509553][T16033] netlink: 'syz.7.2924': attribute type 27 has an invalid length. [ 337.552672][T16034] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 337.552742][T15974] chnl_net:caif_netlink_parms(): no params data found [ 337.561957][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 337.738535][T16036] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.798759][T16037] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 338.104775][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.121252][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.128979][T15974] bridge_slave_0: entered allmulticast mode [ 338.138827][T15974] bridge_slave_0: entered promiscuous mode [ 338.148458][T16058] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2933'. [ 338.159046][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.167652][T16057] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2933'. [ 338.177729][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.185008][T15974] bridge_slave_1: entered allmulticast mode [ 338.193890][T15974] bridge_slave_1: entered promiscuous mode [ 338.402572][ T5831] Bluetooth: hci5: command tx timeout [ 338.426139][T16057] bond0 (unregistering): left promiscuous mode [ 338.439209][T16057] bond_slave_0: left promiscuous mode [ 338.444919][T16057] bond_slave_1: left promiscuous mode [ 338.470337][T16057] bond4: (slave macvlan2): Releasing active interface [ 338.481565][T16057] macvlan2 (unregistering): left promiscuous mode [ 338.501299][T16057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.517000][T16057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.532441][T16057] bond0 (unregistering): Released all slaves [ 338.579023][T16073] netlink: 'syz.4.2938': attribute type 3 has an invalid length. [ 338.752235][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.819079][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.977642][T16090] bond3: option xmit_hash_policy: invalid value (64) [ 338.989178][T16090] bond3 (unregistering): Released all slaves [ 339.061341][T15974] team0: Port device team_slave_0 added [ 339.074535][T15974] team0: Port device team_slave_1 added [ 339.111168][T16100] tipc: Enabling of bearer rejected, already enabled [ 339.211932][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.235480][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.277717][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.292404][T16106] __nla_validate_parse: 5 callbacks suppressed [ 339.292423][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2945'. [ 339.403068][ T12] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 339.564114][ T12] bond3 (unregistering): (slave gretap1): Releasing active interface [ 340.079066][ T12] ` (unregistering): Released all slaves [ 340.168509][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 340.178080][ T12] bond1 (unregistering): (slave veth5): Releasing active interface [ 340.187694][ T12] bond1 (unregistering): Released all slaves [ 340.202313][ T12] bond2 (unregistering): Released all slaves [ 340.217865][ T12] bond3 (unregistering): Released all slaves [ 340.232199][ T12] bond4 (unregistering): Released all slaves [ 340.328396][ T12] bond5 (unregistering): Released all slaves [ 340.418556][ T12] bond6 (unregistering): Released all slaves [ 340.433706][ T12] bond7 (unregistering): Released all slaves [ 340.448093][ T12] bond8 (unregistering): Released all slaves [ 340.463059][ T12] bond9 (unregistering): Released all slaves [ 340.475583][ T5831] Bluetooth: hci5: command tx timeout [ 340.483157][ T12] bond10 (unregistering): Released all slaves [ 340.504846][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.512049][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.538447][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.561405][T16108] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 340.733790][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2952'. [ 340.744977][ T12] 8ÿ: left promiscuous mode [ 340.818136][T16120] netlink: 'syz.5.2951': attribute type 4 has an invalid length. [ 340.919124][T16124] bond3: Unable to set down delay as MII monitoring is disabled [ 340.940410][T16124] bond3 (unregistering): Released all slaves [ 340.964486][ T12] tipc: Disabling bearer [ 340.972335][ T12] tipc: Left network mode [ 340.983238][T15974] hsr_slave_0: entered promiscuous mode [ 340.990606][T15974] hsr_slave_1: entered promiscuous mode [ 341.011012][T16132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2957'. [ 341.073742][T16132] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2957'. [ 341.101252][T16132] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2957'. [ 341.153307][T16139] sctp: [Deprecated]: syz.6.2959 (pid 16139) Use of int in maxseg socket option. [ 341.153307][T16139] Use struct sctp_assoc_value instead [ 341.303449][T16143] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2960'. [ 341.463009][T16145] Bluetooth: MGMT ver 1.23 [ 341.508351][T16145] netlink: 'syz.5.2961': attribute type 1 has an invalid length. [ 341.508351][T16147] netlink: 'syz.5.2961': attribute type 1 has an invalid length. [ 341.927339][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2965'. [ 342.013873][ T12] hsr_slave_0: left promiscuous mode [ 342.026775][T16176] netlink: 'syz.5.2969': attribute type 1 has an invalid length. [ 342.055177][T16176] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2969'. [ 342.072438][ T12] hsr_slave_1: left promiscuous mode [ 342.189077][ T918] IPVS: starting estimator thread 0... [ 342.211876][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2970'. [ 342.232214][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2972'. [ 342.305874][T16186] IPVS: using max 27 ests per chain, 64800 per kthread [ 342.566164][ T5831] Bluetooth: hci5: command tx timeout [ 342.883687][ T12] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 343.008078][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.080128][T16190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.098500][T16190] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 343.116080][T16190] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 343.553735][ T12] IPVS: stop unused estimator thread 0... [ 343.690428][T15974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.702634][T15974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.734705][T15974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.781122][T15974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.947767][T16248] netlink: 'syz.4.2987': attribute type 11 has an invalid length. [ 343.972160][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.017267][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.033732][T13463] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.040950][T13463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.076821][T13463] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.084031][T13463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.488935][T16275] __nla_validate_parse: 7 callbacks suppressed [ 344.488956][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2995'. [ 344.492680][T16277] x_tables: duplicate underflow at hook 2 [ 344.597974][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.637206][ T5831] Bluetooth: hci5: command tx timeout [ 344.670328][T15974] veth0_vlan: entered promiscuous mode [ 344.687621][T15974] veth1_vlan: entered promiscuous mode [ 344.753332][T15974] veth0_macvtap: entered promiscuous mode [ 344.784278][T15974] veth1_macvtap: entered promiscuous mode [ 344.829988][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.846935][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.883019][T13463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.913905][T13463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.946120][T13463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.959108][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3001'. [ 344.965591][T16288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3002'. [ 344.976285][T13463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.196879][T13457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.204755][T13457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.309887][T13463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.324266][T13463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.451555][T16320] netlink: 'syz.6.3010': attribute type 1 has an invalid length. [ 345.495786][T16318] netlink: 'syz.6.3010': attribute type 1 has an invalid length. [ 345.617934][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 345.911140][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3018'. [ 345.990397][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3021'. [ 346.400643][T16369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.825718][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.835880][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.859365][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.868085][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.883828][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.916197][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3033'. [ 347.365701][T16397] netlink: 'syz.5.3036': attribute type 10 has an invalid length. [ 347.553567][T16401] raw_sendmsg: syz.7.3038 forgot to set AF_INET. Fix it! [ 347.573727][T16382] hsr0 speed is unknown, defaulting to 1000 [ 347.754614][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3043'. [ 347.939078][T16423] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3045'. [ 348.082041][T16382] chnl_net:caif_netlink_parms(): no params data found [ 348.100556][T16433] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3047'. [ 348.383061][T16446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 348.386123][T16382] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.413262][T16382] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.430917][T16382] bridge_slave_0: entered allmulticast mode [ 348.439501][T16382] bridge_slave_0: entered promiscuous mode [ 348.502725][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.518703][T16382] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.527358][T16382] bridge_slave_1: entered allmulticast mode [ 348.536774][T16382] bridge_slave_1: entered promiscuous mode [ 348.734193][T16382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.783870][T16382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.813389][T16473] netlink: 'syz.6.3056': attribute type 3 has an invalid length. [ 348.831647][T16472] netlink: 'syz.6.3056': attribute type 3 has an invalid length. [ 348.952232][T16465] syzkaller0: entered promiscuous mode [ 348.959219][T16465] syzkaller0: entered allmulticast mode [ 348.967205][ T5831] Bluetooth: hci0: command tx timeout [ 348.975792][T16442] hsr0 speed is unknown, defaulting to 1000 [ 348.995630][T16476] netlink: 'syz.6.3056': attribute type 10 has an invalid length. [ 349.017916][T16382] team0: Port device team_slave_0 added [ 350.290546][T16476] team0: Port device geneve0 added [ 350.300923][T16382] team0: Port device team_slave_1 added [ 350.426487][T16382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.444144][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.485174][T16382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.507919][T16382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.514916][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.572465][T16382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.755528][T16487] __nla_validate_parse: 3 callbacks suppressed [ 350.755548][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3061'. [ 350.781077][T16382] hsr_slave_0: entered promiscuous mode [ 350.788248][T16382] hsr_slave_1: entered promiscuous mode [ 350.794689][T16382] debugfs: 'hsr0' already exists in 'hsr' [ 350.812998][T16382] Cannot create hsr debugfs directory [ 350.879040][T16498] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3061'. [ 350.895561][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3061'. [ 351.045950][ T5831] Bluetooth: hci0: command tx timeout [ 351.183561][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'. [ 351.270576][T16513] netlink: del zone limit has 4 unknown bytes [ 351.522170][T16382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.557791][T16382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.619627][T16526] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3073'. [ 351.747500][T16382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.785316][T16382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.952182][T16382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.986048][T16382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.117264][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3080'. [ 352.140551][T16382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.155142][T16382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.287594][T16555] netlink: 'syz.6.3082': attribute type 2 has an invalid length. [ 352.295658][T16555] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3082'. [ 352.304988][T16555] nbd: must specify a device to reconfigure [ 352.506121][T16382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.542920][T16558] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3084'. [ 352.545541][T16382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.581950][T16382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.602939][T16382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.953237][T16382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.964426][T16593] netlink: 'syz.5.3092': attribute type 11 has an invalid length. [ 352.988016][T16593] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3092'. [ 353.007386][T16382] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.026609][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.033829][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.119140][ T5831] Bluetooth: hci0: command tx timeout [ 353.171680][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.178878][T13457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.497643][T16614] veth1_to_bond: entered allmulticast mode [ 353.506556][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3099'. [ 353.628102][T16614] veth1_to_bond (unregistering): left allmulticast mode [ 354.155249][T16630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.169422][T16630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.180941][T16630] bond0 (unregistering): Released all slaves [ 354.221035][T16655] netlink: 'syz.6.3108': attribute type 1 has an invalid length. [ 354.236570][T16655] netlink: 'syz.6.3108': attribute type 10 has an invalid length. [ 354.244469][T16655] netlink: 'syz.6.3108': attribute type 4 has an invalid length. [ 354.342145][T16382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.431367][T16664] netlink: del zone limit has 4 unknown bytes [ 354.459624][T16667] netlink: 'syz.1.3112': attribute type 11 has an invalid length. [ 354.468204][T16667] netlink: 'syz.1.3112': attribute type 5 has an invalid length. [ 354.487593][T16666] netlink: 'syz.1.3112': attribute type 11 has an invalid length. [ 354.499068][T16666] netlink: 'syz.1.3112': attribute type 5 has an invalid length. [ 354.702143][T16683] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 354.843692][T16683] vlan2: entered allmulticast mode [ 354.849950][T16683] bond0: entered allmulticast mode [ 354.928077][T16690] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 354.940509][T16690] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 354.991319][T16694] team0: Port device team_slave_0 removed [ 355.009533][T16694] team0: Port device team_slave_1 removed [ 355.021517][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.031879][T16694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.060773][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.093123][T16694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.129247][T16694] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.152520][T16714] IPv6: Can't replace route, no match found [ 355.194811][ T24] hsr0 speed is unknown, defaulting to 1000 [ 355.205651][ T5831] Bluetooth: hci0: command tx timeout [ 355.281126][T16382] veth0_vlan: entered promiscuous mode [ 355.322161][T16382] veth1_vlan: entered promiscuous mode [ 355.436734][T16382] veth0_macvtap: entered promiscuous mode [ 355.460494][T16382] veth1_macvtap: entered promiscuous mode [ 355.519290][T16382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.561230][T16382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.633031][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.653482][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.681925][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.700608][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.714335][T16735] netlink: 'syz.7.3128': attribute type 1 has an invalid length. [ 355.758530][T16735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.798078][T16735] bond6: (slave gretap2): making interface the new active one [ 355.807656][T16735] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 355.834842][T16735] xt_NFQUEUE: number of total queues is 0 [ 355.904105][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.944984][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.023603][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.037845][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.182515][T16756] __nla_validate_parse: 9 callbacks suppressed [ 356.182535][T16756] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3133'. [ 356.596463][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3141'. [ 356.607793][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3141'. [ 356.789971][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'. [ 356.844657][T16795] bond1: Invalid ad_actor_system MAC address. [ 356.852051][T16795] bond1: option ad_actor_system: invalid value (1) [ 356.869680][T16795] bond1 (unregistering): Released all slaves [ 357.282112][T16825] veth0: entered promiscuous mode [ 357.326846][T16823] veth0: left promiscuous mode [ 357.504375][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3159'. [ 357.538387][T16838] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 357.708789][T16849] team0: No ports can be present during mode change [ 357.722278][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 357.774574][T16854] Bluetooth: MGMT ver 1.23 [ 357.797080][T16849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.941911][T16859] syzkaller0: entered promiscuous mode [ 357.948142][T16859] syzkaller0: entered allmulticast mode [ 358.041726][T16877] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 359.520196][ T5196] udevd[5196]: worker [6073] /devices/virtual/block/nbd3 timeout; kill it [ 359.535139][ T5196] udevd[5196]: seq 14290 '/devices/virtual/block/nbd3' killed [ 359.577724][T16891] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3176'. [ 359.647814][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3178'. [ 359.690306][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'. [ 359.704729][T16900] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 359.727059][T16897] bridge0: entered promiscuous mode [ 359.732808][T16897] macsec1: entered promiscuous mode [ 359.740850][T16897] macsec1: entered allmulticast mode [ 359.749412][T16897] bridge0: entered allmulticast mode [ 359.758164][T16897] bridge0: port 3(macsec1) entered blocking state [ 359.767653][T16897] bridge0: port 3(macsec1) entered disabled state [ 359.794726][T16897] bridge0: left allmulticast mode [ 359.809237][T16897] bridge0: left promiscuous mode [ 359.884003][T16909] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3181'. [ 359.892709][T16900] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 359.904870][T16900] bond7 (unregistering): Released all slaves [ 360.162433][ T11] block nbd3: Possible stuck request ffff88802513e000: control (read@0,1024B). Runtime 180 seconds [ 360.173605][ T11] block nbd3: Possible stuck request ffff88802513e1c0: control (read@1024,1024B). Runtime 180 seconds [ 360.185138][ T11] block nbd3: Possible stuck request ffff88802513e380: control (read@2048,1024B). Runtime 180 seconds [ 360.198207][ T11] block nbd3: Possible stuck request ffff88802513e540: control (read@3072,1024B). Runtime 180 seconds [ 360.294745][T16926] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 360.310628][T16919] net veth1_virt_wifi .: renamed from virt_wifi0 [ 360.364929][T16928] tipc: Started in network mode [ 360.370166][T16928] tipc: Node identity ae2cbf95ef3a, cluster identity 4711 [ 360.379013][T16928] tipc: Enabled bearer , priority 0 [ 360.408741][T16928] syzkaller0: entered promiscuous mode [ 360.414429][T16928] syzkaller0: entered allmulticast mode [ 360.464391][T16928] tipc: Resetting bearer [ 360.506733][T16927] tipc: Resetting bearer [ 360.554550][T16927] tipc: Disabling bearer [ 360.970453][T16968] sctp: [Deprecated]: syz.5.3204 (pid 16968) Use of int in maxseg socket option. [ 360.970453][T16968] Use struct sctp_assoc_value instead [ 361.020863][T16962] tipc: Enabled bearer , priority 0 [ 361.055889][T16962] syzkaller0: entered promiscuous mode [ 361.061519][T16962] syzkaller0: entered allmulticast mode [ 361.070699][ T5915] IPVS: starting estimator thread 0... [ 361.197139][T16976] IPVS: using max 24 ests per chain, 57600 per kthread [ 361.216807][T16962] tipc: Resetting bearer [ 361.232032][T16957] tipc: Resetting bearer [ 361.261546][T16957] tipc: Disabling bearer [ 361.526934][T17003] netlink: 'syz.1.3211': attribute type 29 has an invalid length. [ 361.539733][T16997] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 361.553577][T16997] bond3 (unregistering): Released all slaves [ 361.587913][T17001] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 361.815130][T17019] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.903593][T17021] tipc: Enabled bearer , priority 0 [ 361.911758][T17025] tipc: Enabling of bearer rejected, already enabled [ 361.954089][T17021] syzkaller0: entered promiscuous mode [ 361.960156][T17021] syzkaller0: entered allmulticast mode [ 361.989097][T17025] __nla_validate_parse: 4 callbacks suppressed [ 361.989241][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3217'. [ 362.001075][T17030] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3220'. [ 362.006130][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3217'. [ 362.022608][T17030] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3220'. [ 362.049596][T17021] tipc: Resetting bearer [ 362.068682][T17020] tipc: Resetting bearer [ 362.106546][T17020] tipc: Disabling bearer [ 362.162513][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 362.524290][T17051] netlink: 'syz.7.3228': attribute type 4 has an invalid length. [ 362.535961][T17052] netlink: 'syz.4.3227': attribute type 11 has an invalid length. [ 362.543852][T17052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3227'. [ 362.565785][T17051] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3228'. [ 362.630203][T17051] netlink: 'syz.7.3228': attribute type 1 has an invalid length. [ 362.656404][T17051] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3228'. [ 362.677860][T17051] netlink: 'syz.7.3228': attribute type 1 has an invalid length. [ 362.878484][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 363.288801][T17099] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 363.459405][T17101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'. [ 363.859852][T17126] tipc: Can't bind to reserved service type 2 [ 363.984710][T13463] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.994414][T13463] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.022355][T13463] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.039694][T13463] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.494228][T17166] netlink: 'syz.4.3257': attribute type 2 has an invalid length. [ 364.715161][T17172] bond7: entered promiscuous mode [ 364.921872][T17192] netlink: zone id is out of range [ 364.940951][T17192] netlink: zone id is out of range [ 364.960301][T17192] netlink: zone id is out of range [ 364.969588][T17192] netlink: zone id is out of range [ 364.980543][T17192] netlink: zone id is out of range [ 364.996442][T17192] netlink: zone id is out of range [ 365.015928][T17192] netlink: zone id is out of range [ 365.024057][T17192] netlink: zone id is out of range [ 365.038729][T17192] netlink: zone id is out of range [ 365.053336][T17192] netlink: zone id is out of range [ 365.721826][T17245] netlink: 'syz.7.3283': attribute type 23 has an invalid length. [ 365.847655][T17247] netlink: 'syz.1.3286': attribute type 1 has an invalid length. [ 366.327124][T17270] nbd: must specify an index to disconnect [ 366.538102][T17275] wg2: entered promiscuous mode [ 366.543029][T17275] wg2: entered allmulticast mode [ 366.739002][T17297] netlink: 'syz.7.3306': attribute type 24 has an invalid length. [ 367.091097][T17320] __nla_validate_parse: 15 callbacks suppressed [ 367.091118][T17320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3315'. [ 367.109995][T17320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3315'. [ 367.134783][T17320] veth0: entered promiscuous mode [ 367.143842][T17322] tipc: Enabling of bearer rejected, failed to enable media [ 367.164151][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3316'. [ 367.174891][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'. [ 367.237778][T17324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.348268][T17339] netlink: 548 bytes leftover after parsing attributes in process `syz.1.3315'. [ 367.380224][T17328] netlink: 'syz.1.3315': attribute type 29 has an invalid length. [ 367.424062][T17324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.434168][T17324] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 367.446066][T17324] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 367.470911][T17332] netlink: 'syz.1.3315': attribute type 29 has an invalid length. [ 368.766611][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3337'. [ 368.962426][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3340'. [ 368.990888][T17418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3340'. [ 369.147932][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3341'. [ 369.258571][T17431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3345'. [ 369.477564][T17442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.541374][T17443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.550464][T17443] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 369.563588][T17443] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 369.834283][T17468] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 370.203127][T17490] veth0: entered promiscuous mode [ 370.284899][T17490] veth0: left promiscuous mode [ 370.287540][T17498] nbd: nbd1 already in use [ 370.308185][T17498] block nbd1: NBD_DISCONNECT [ 370.319860][T17498] block nbd1: Send disconnect failed -32 [ 370.400665][T17498] nbd: nbd0 already in use [ 370.688708][T17520] netlink: 'syz.4.3374': attribute type 2 has an invalid length. [ 370.690198][T17519] netlink: 'syz.4.3374': attribute type 2 has an invalid length. [ 370.716329][T17518] netlink: 'syz.4.3374': attribute type 2 has an invalid length. [ 370.778456][T17524] tipc: Enabled bearer , priority 0 [ 370.789588][T17524] syzkaller0: entered promiscuous mode [ 370.795110][T17524] syzkaller0: entered allmulticast mode [ 370.854570][T17524] tipc: Resetting bearer [ 370.869903][T17522] tipc: Resetting bearer [ 370.873519][T17538] netlink: 'syz.7.3377': attribute type 1 has an invalid length. [ 370.898640][T17522] tipc: Disabling bearer [ 370.975183][T17537] bond2: entered promiscuous mode [ 370.992450][T17537] bond_slave_0: entered promiscuous mode [ 370.998309][T17537] bond_slave_1: entered promiscuous mode [ 371.005888][T17537] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 371.011052][T17543] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 371.014916][T17537] bond2: (slave macvlan3): making interface the new active one [ 371.044845][T17537] macvlan3: entered promiscuous mode [ 371.053028][T17537] bond0: entered promiscuous mode [ 371.060213][T17537] bond2: (slave macvlan3): Enslaving as an active interface with an up link [ 371.070055][T17549] bridge0: port 3(syz_tun) entered blocking state [ 371.114496][T17549] bridge0: port 3(syz_tun) entered disabled state [ 371.131802][T17549] syz_tun: entered allmulticast mode [ 371.151169][T17549] syz_tun: entered promiscuous mode [ 371.174511][T17549] bridge0: port 3(syz_tun) entered blocking state [ 371.181180][T17549] bridge0: port 3(syz_tun) entered forwarding state [ 371.235209][T17554] net_ratelimit: 17 callbacks suppressed [ 371.235229][T17554] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 371.780522][T17587] tipc: Enabled bearer , priority 0 [ 371.788483][T17587] syzkaller0: entered promiscuous mode [ 371.794216][T17587] syzkaller0: entered allmulticast mode [ 371.817721][T17587] tipc: Resetting bearer [ 371.864445][T17586] tipc: Resetting bearer [ 371.932352][T17586] tipc: Disabling bearer [ 372.123512][T17605] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.153157][T17613] netlink: 'syz.7.3400': attribute type 32 has an invalid length. [ 372.241862][T17610] __nla_validate_parse: 11 callbacks suppressed [ 372.241884][T17610] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3401'. [ 372.270211][T17610] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3401'. [ 372.289488][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 372.428361][T17626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3405'. [ 372.735759][T17644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3410'. [ 372.773409][T17647] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3411'. [ 372.798914][T17644] netlink: 'syz.1.3410': attribute type 10 has an invalid length. [ 372.818564][T17647] tipc: Enabling of bearer rejected, failed to enable media [ 372.905827][T17661] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3411'. [ 373.018154][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 373.126465][T17677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 373.186914][T17679] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 373.353728][T17681] xt_hashlimit: size too large, truncated to 1048576 [ 373.431730][T17689] netlink: 'syz.1.3423': attribute type 1 has an invalid length. [ 373.440255][T17689] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3423'. [ 373.455705][T17696] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 373.688782][T17711] bridge4: entered promiscuous mode [ 373.698538][T17711] bridge4: entered allmulticast mode [ 373.701520][T17719] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3431'. [ 373.714477][T17713] team0: Cannot enslave team device to itself [ 374.603812][T17774] netlink: 'syz.5.3449': attribute type 10 has an invalid length. [ 374.681940][T17779] netlink: 'syz.4.3451': attribute type 1 has an invalid length. [ 374.745058][T17782] tap0: tun_chr_ioctl cmd 1074025676 [ 374.785844][T17782] tap0: owner set to 0 [ 375.213133][T17808] netlink: 'syz.5.3456': attribute type 3 has an invalid length. [ 375.478865][T17829] tipc: Enabled bearer , priority 0 [ 375.486825][T17829] syzkaller0: entered promiscuous mode [ 375.495196][T17829] syzkaller0: entered allmulticast mode [ 375.549432][T17829] tipc: Resetting bearer [ 375.562350][T17828] tipc: Resetting bearer [ 375.631641][T17828] tipc: Disabling bearer [ 375.699315][T17838] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 375.877354][T17855] sctp: [Deprecated]: syz.7.3469 (pid 17855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.877354][T17855] Use struct sctp_sack_info instead [ 375.936334][T17856] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 376.019217][T17858] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 376.052936][T17858] netlink: 'syz.5.3471': attribute type 10 has an invalid length. [ 376.473142][T17858] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 376.497100][ T24] hsr0 speed is unknown, defaulting to 1000 [ 376.504949][T13466] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.519854][ T24] syz1: Port: 1 Link DOWN [ 376.529999][T13466] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.540738][T13466] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 376.671190][T13466] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.683835][T17883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.701593][T13466] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.751625][T13466] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 376.775499][T13466] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.784440][T13466] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.819578][T13466] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 376.842103][T13463] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.857622][T13463] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.877929][T13463] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 376.988938][T17898] team_slave_0: entered promiscuous mode [ 376.994801][T17898] team_slave_1: entered promiscuous mode [ 377.004911][T17898] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 377.094271][T17901] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 377.682518][T17943] netlink: get zone limit has 4 unknown bytes [ 377.818303][T17957] netlink: 'syz.6.3502': attribute type 1 has an invalid length. [ 377.890064][T17957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.029777][T17951] bond4: (slave gretap2): making interface the new active one [ 378.042579][T17951] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 378.172011][T17972] netlink: 'syz.1.3507': attribute type 21 has an invalid length. [ 378.172017][T17975] netlink: 'syz.1.3507': attribute type 21 has an invalid length. [ 378.172095][T17972] __nla_validate_parse: 14 callbacks suppressed [ 378.172111][T17972] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3507'. [ 378.210977][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3509'. [ 378.220797][T17975] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3507'. [ 378.536870][T17977] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 378.550315][T17977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.563679][T17977] bond0 (unregistering): Released all slaves [ 378.864588][T18009] x_tables: duplicate underflow at hook 1 [ 378.975273][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3518'. [ 379.006545][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3518'. [ 379.084822][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3520'. [ 379.142439][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3521'. [ 379.185587][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3521'. [ 379.320654][T18035] bond3: Removing last arp target with arp_interval on [ 379.470887][T18042] tap0: tun_chr_ioctl cmd 2148553947 [ 379.482445][T18042] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 379.889216][T18067] ip6t_rpfilter: unknown options [ 380.177249][T18080] syzkaller0: entered promiscuous mode [ 380.182787][T18080] syzkaller0: entered allmulticast mode [ 381.266790][T18098] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 382.033507][T18111] team_slave_0: entered promiscuous mode [ 382.039323][T18111] team_slave_1: entered promiscuous mode [ 382.059364][T18111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.083590][T18111] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 382.207460][T18120] SET target dimension over the limit! [ 382.302120][T18125] tipc: Enabled bearer , priority 0 [ 382.339279][T18122] syzkaller0: entered promiscuous mode [ 382.385605][T18122] syzkaller0: entered allmulticast mode [ 382.417477][T18131] tipc: Resetting bearer [ 382.478739][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 382.500226][T18131] tipc: Resetting bearer [ 382.540617][T18131] tipc: Disabling bearer [ 382.630502][T18139] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3554'. [ 382.830832][T18146] netlink: 'syz.6.3558': attribute type 1 has an invalid length. [ 382.844852][T18146] netlink: 'syz.6.3558': attribute type 1 has an invalid length. [ 382.856970][T18146] netlink: 'syz.6.3558': attribute type 2 has an invalid length. [ 382.923752][T18156] x_tables: duplicate underflow at hook 1 [ 383.144339][T18166] rdma_rxe: rxe_newlink: failed to add bond0 [ 383.266698][T18174] Cannot find del_set index 49151 as target [ 383.268556][T18172] __nla_validate_parse: 2 callbacks suppressed [ 383.268578][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3564'. [ 383.338932][T18178] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3567'. [ 383.356804][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 383.360694][T18178] netlink: 'syz.5.3567': attribute type 4 has an invalid length. [ 383.385119][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3566'. [ 383.448035][T18188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3569'. [ 383.624444][T18191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.655200][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3574'. [ 383.743633][T18215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3576'. [ 383.764600][T18215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3576'. [ 383.788747][T18213] tipc: Enabled bearer , priority 0 [ 383.889416][T18220] netlink: 'syz.1.3575': attribute type 25 has an invalid length. [ 384.188562][ T5915] IPVS: starting estimator thread 0... [ 384.265042][T18235] tipc: Enabled bearer , priority 10 [ 384.286493][T18236] IPVS: using max 26 ests per chain, 62400 per kthread [ 384.312484][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3583'. [ 384.881913][T18264] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3589'. [ 385.017537][T18273] lo: entered promiscuous mode [ 385.026456][T18273] netlink: 'syz.6.3594': attribute type 2 has an invalid length. [ 385.044495][T18273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.066906][T18274] tipc: New replicast peer: 255.255.255.255 [ 385.092951][T18274] tipc: Enabled bearer , priority 10 [ 385.326159][ T43] tipc: Node number set to 1092009877 [ 385.449151][T18298] tipc: Enabled bearer , priority 0 [ 385.476267][T18298] syzkaller0: entered promiscuous mode [ 385.481791][T18298] syzkaller0: entered allmulticast mode [ 385.517769][T18298] tipc: Resetting bearer [ 385.565660][T18297] tipc: Resetting bearer [ 385.594417][T18297] tipc: Disabling bearer [ 385.652055][T18315] tc_dump_action: action bad kind [ 385.659873][T18310] netlink: 'syz.6.3603': attribute type 5 has an invalid length. [ 385.670741][T18306] vcan0: entered allmulticast mode [ 385.753681][T18321] sch_fq: defrate 0 ignored. [ 385.794166][T18326] netlink: 'syz.1.3608': attribute type 1 has an invalid length. [ 385.803282][T18326] netlink: 'syz.1.3608': attribute type 1 has an invalid length. [ 385.813051][T18326] netlink: 'syz.1.3608': attribute type 4 has an invalid length. [ 385.821579][T18326] NCSI netlink: No device for ifindex 830110067 [ 385.938151][T13457] tipc: Subscription rejected, illegal request [ 386.109981][T18347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.485500][ T43] tipc: Node number set to 3693014916 [ 386.844985][T18402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.964051][T18407] bond4: (slave veth3): Enslaving as an active interface with a down link [ 386.976837][T18403] syzkaller0: entered promiscuous mode [ 386.982347][T18403] syzkaller0: entered allmulticast mode [ 387.013720][T18402] veth5: entered promiscuous mode [ 387.024632][T18402] bond4: (slave veth5): Enslaving as an active interface with a down link [ 387.044233][T18413] vlan2: entered allmulticast mode [ 387.049886][T18413] bond4: entered allmulticast mode [ 387.061482][T18413] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 387.489743][T13466] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 387.712082][T18462] ------------[ cut here ]------------ [ 387.718184][T18462] workqueue: cannot queue hci_tx_work on wq hci0 [ 387.724639][T18462] WARNING: CPU: 0 PID: 18462 at kernel/workqueue.c:2258 __queue_work+0xd38/0xfb0 [ 387.733802][T18462] Modules linked in: [ 387.737926][T18462] CPU: 0 UID: 0 PID: 18462 Comm: syz.4.3645 Not tainted syzkaller #0 PREEMPT(full) [ 387.747324][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.757427][T18462] RIP: 0010:__queue_work+0xd38/0xfb0 [ 387.762750][T18462] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 b2 9b 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 eb 69 8b 4c 89 fa e8 b9 31 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 9a 14 36 00 90 0f 0b 90 e9 dd fc ff [ 387.782382][T18462] RSP: 0018:ffffc90002fd7490 EFLAGS: 00010046 [ 387.788492][T18462] RAX: 9f08a3007a055900 RBX: 0000000000000000 RCX: ffff888068dabc80 [ 387.796477][T18462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 387.804461][T18462] RBP: 1ffff1100fb10838 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 387.812442][T18462] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 387.820433][T18462] R13: ffff888051778b70 R14: ffff888068dabc80 R15: ffff88807d884178 [ 387.828425][T18462] FS: 00007f3a9bbe86c0(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 387.837369][T18462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.843963][T18462] CR2: 0000001b31123ffc CR3: 0000000068272000 CR4: 00000000003526f0 [ 387.851946][T18462] Call Trace: [ 387.855230][T18462] [ 387.858183][T18462] ? rcu_is_watching+0x15/0xb0 [ 387.862968][T18462] queue_work_on+0x181/0x270 [ 387.867663][T18462] ? hci_send_acl+0x949/0xd90 [ 387.872354][T18462] ? __pfx_queue_work_on+0x10/0x10 [ 387.877481][T18462] ? l2cap_do_send+0x154/0x2c0 [ 387.882268][T18462] l2cap_chan_send+0x1110/0x2790 [ 387.887226][T18462] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.892451][T18462] ? __pfx_l2cap_chan_send+0x10/0x10 [ 387.897768][T18462] l2cap_sock_sendmsg+0x32e/0x4a0 [ 387.902815][T18462] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 387.908384][T18462] ? aa_sock_msg_perm+0xf1/0x1d0 [ 387.913335][T18462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.918645][T18462] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 387.924208][T18462] __sock_sendmsg+0x21c/0x270 [ 387.928902][T18462] ____sys_sendmsg+0x52d/0x830 [ 387.933682][T18462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.938985][T18462] ? import_iovec+0x74/0xa0 [ 387.943508][T18462] ___sys_sendmsg+0x21f/0x2a0 [ 387.948195][T18462] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.953459][T18462] ? __might_fault+0xb0/0x130 [ 387.958153][T18462] __sys_sendmmsg+0x227/0x430 [ 387.962846][T18462] ? __pfx___sys_sendmmsg+0x10/0x10 [ 387.968066][T18462] ? __pfx_do_futex+0x10/0x10 [ 387.972873][T18462] __x64_sys_sendmmsg+0xa0/0xc0 [ 387.977732][T18462] do_syscall_64+0xfa/0xfa0 [ 387.982244][T18462] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.987454][T18462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.993527][T18462] ? clear_bhb_loop+0x60/0xb0 [ 387.998326][T18462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.004227][T18462] RIP: 0033:0x7f3a9ad8eec9 [ 388.008647][T18462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.028258][T18462] RSP: 002b:00007f3a9bbe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.036681][T18462] RAX: ffffffffffffffda RBX: 00007f3a9afe6090 RCX: 00007f3a9ad8eec9 [ 388.044657][T18462] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000005 [ 388.052631][T18462] RBP: 00007f3a9ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.060605][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.068579][T18462] R13: 00007f3a9afe6128 R14: 00007f3a9afe6090 R15: 00007ffe002974e8 [ 388.076573][T18462] [ 388.079596][T18462] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.086878][T18462] CPU: 0 UID: 0 PID: 18462 Comm: syz.4.3645 Not tainted syzkaller #0 PREEMPT(full) [ 388.096251][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.106310][T18462] Call Trace: [ 388.109591][T18462] [ 388.112528][T18462] dump_stack_lvl+0x99/0x250 [ 388.117126][T18462] ? __asan_memcpy+0x40/0x70 [ 388.121728][T18462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.126931][T18462] ? __pfx__printk+0x10/0x10 [ 388.131544][T18462] vpanic+0x237/0x6d0 [ 388.135539][T18462] ? __pfx_vpanic+0x10/0x10 [ 388.140156][T18462] panic+0xb9/0xc0 [ 388.143894][T18462] ? __pfx_panic+0x10/0x10 [ 388.148341][T18462] __warn+0x31b/0x4b0 [ 388.152333][T18462] ? __queue_work+0xd38/0xfb0 [ 388.157036][T18462] ? __queue_work+0xd38/0xfb0 [ 388.161719][T18462] report_bug+0x2be/0x4f0 [ 388.166067][T18462] ? __queue_work+0xd38/0xfb0 [ 388.170750][T18462] ? __queue_work+0xd38/0xfb0 [ 388.175431][T18462] ? __queue_work+0xd3a/0xfb0 [ 388.180118][T18462] handle_bug+0x84/0x160 [ 388.184373][T18462] exc_invalid_op+0x1a/0x50 [ 388.188889][T18462] asm_exc_invalid_op+0x1a/0x20 [ 388.193760][T18462] RIP: 0010:__queue_work+0xd38/0xfb0 [ 388.199050][T18462] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 b2 9b 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 eb 69 8b 4c 89 fa e8 b9 31 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 9a 14 36 00 90 0f 0b 90 e9 dd fc ff [ 388.218664][T18462] RSP: 0018:ffffc90002fd7490 EFLAGS: 00010046 [ 388.224741][T18462] RAX: 9f08a3007a055900 RBX: 0000000000000000 RCX: ffff888068dabc80 [ 388.232720][T18462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 388.240694][T18462] RBP: 1ffff1100fb10838 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 388.248671][T18462] R10: dffffc0000000000 R11: ffffed10170c4853 R12: dffffc0000000000 [ 388.256649][T18462] R13: ffff888051778b70 R14: ffff888068dabc80 R15: ffff88807d884178 [ 388.264649][T18462] ? rcu_is_watching+0x15/0xb0 [ 388.269430][T18462] queue_work_on+0x181/0x270 [ 388.274032][T18462] ? hci_send_acl+0x949/0xd90 [ 388.278808][T18462] ? __pfx_queue_work_on+0x10/0x10 [ 388.283948][T18462] ? l2cap_do_send+0x154/0x2c0 [ 388.288723][T18462] l2cap_chan_send+0x1110/0x2790 [ 388.293673][T18462] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.298890][T18462] ? __pfx_l2cap_chan_send+0x10/0x10 [ 388.304202][T18462] l2cap_sock_sendmsg+0x32e/0x4a0 [ 388.309248][T18462] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 388.314818][T18462] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.319770][T18462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.325067][T18462] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 388.330631][T18462] __sock_sendmsg+0x21c/0x270 [ 388.335324][T18462] ____sys_sendmsg+0x52d/0x830 [ 388.340115][T18462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.345425][T18462] ? import_iovec+0x74/0xa0 [ 388.349939][T18462] ___sys_sendmsg+0x21f/0x2a0 [ 388.354629][T18462] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.359887][T18462] ? __might_fault+0xb0/0x130 [ 388.364580][T18462] __sys_sendmmsg+0x227/0x430 [ 388.369276][T18462] ? __pfx___sys_sendmmsg+0x10/0x10 [ 388.374489][T18462] ? __pfx_do_futex+0x10/0x10 [ 388.379206][T18462] __x64_sys_sendmmsg+0xa0/0xc0 [ 388.384074][T18462] do_syscall_64+0xfa/0xfa0 [ 388.388588][T18462] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.393797][T18462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.399866][T18462] ? clear_bhb_loop+0x60/0xb0 [ 388.404551][T18462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.410446][T18462] RIP: 0033:0x7f3a9ad8eec9 [ 388.414871][T18462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.434487][T18462] RSP: 002b:00007f3a9bbe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.442914][T18462] RAX: ffffffffffffffda RBX: 00007f3a9afe6090 RCX: 00007f3a9ad8eec9 [ 388.450887][T18462] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000005 [ 388.459032][T18462] RBP: 00007f3a9ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.467018][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.475009][T18462] R13: 00007f3a9afe6128 R14: 00007f3a9afe6090 R15: 00007ffe002974e8 [ 388.483032][T18462] [ 388.486383][T18462] Kernel Offset: disabled [ 388.490715][T18462] Rebooting in 86400 seconds..