last executing test programs: 2.827324049s ago: executing program 0 (id=3861): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0x12, 0x0, @random="e3b695648f54d27e2ebfa998893b"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x32}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20008804) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x40}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20044050) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x384, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xa9f, 0x39}}}}, [@NL80211_ATTR_FRAME_MATCH={0xc2, 0x5b, "9a58a65c50393989f6438679833b3b69f6217062184fc9bb6d84ff5f5c8a790fc738f31cf5fb48c3d677741479d72b7e8dec25a3362234fa399348960722ce14e5b26b069d2f70e4f78e2bed98f5e37a3604fb5fb6e6a57c662b44f3a96470508fcdcd8716ad23428ecc28124b2c215df14321727daa7b28f18acf70a164da3c57025524f6e1bcde68fbd6a52e1b8dade6287cb8a4bf2d99c082aec54545edd000f776c25483fbd05ead9b78b6f937e94bc6592905860bd2db8e6ae4b059"}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "5ac9bf995109258692fd7b5d46907e0a3723b1fa3bbdda62b98bc2b87aacd2746330b08f60c956028e02317bb97a2cfdd997e19d5e5ded5457288a9e339f4db56a7575955530771c3ae2368cd9291022b3f9cbdb759b9fce04e38f9cde528e7e03109aa5c50bee1b470058d728dd11727ff03804892b6fc53b448317b261deda778a2223e6c70d15bf086653500c0a4d1c402eb657fbf83c8e4cde83e844c6df9b6c9ddc53288f"}, @NL80211_ATTR_FRAME_MATCH={0xcd, 0x5b, "c4fd237ad0607d1d698c4065ab359700543962fcbc31eb62fbb382925632f593fb0a083a99f6184ed90c069aabcbcf4760c16b5b92e49aeb3fd01af83f3fbeec32e9230d740730a2ebf6173327b12d32abc7550e78847e99cd8d98213f12e467c4e49973c24ca7f5dd108d2fd375a60d461660a3c2e498f2d72b1f6abbbff1532750da476ab313c010008299ee0ccf6353e4569bde924157f80ad2cfe8011c34c815a193330c04fce0d2d1af8d94297dc818222b0eb4ccd6c6c217b4cd4881e87c52056bc965096551"}, @NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "6ec12754819e20d64845fa5cf41baedb19bfe006d2630a9d3961a83b"}, @NL80211_ATTR_FRAME_MATCH={0xfa, 0x5b, "695b8655c924f9dd757c78cab5d4a558a7df2e65270a605287eb9428ac13e6bce1f21ec29337f4927e05189029c28326f8708530b66a7eab92bba5606a18a7fe02a738ab7eeea779c7a4fc7d2602d343bf7752010e4ac62f33797e6990ce8cb9b900d131b795fccafe41435584a370531d45ff89a07609683d2efcfb7c69e6bce9da7a2fa0b5a3cc823fa8bd815bce8affba20d15ca51ba19d7164578cbfe8caeaa45d423a11c05b88b67bd1d75796bd7ceadda6b06dcfc1ddba2b3ae0596bd570706a52cd5e0e216665ce2bebdab9fbd24f46dd08f08ab0287ca27785c32dbbf1b6351c58c5d2bb53df84686090979abf01eb623c7e"}]}, 0x384}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) (rerun: 32) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x20040810) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) syz_genetlink_get_family_id$nbd(&(0x7f0000000b40), r3) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b80)={0x0, 0x1}, &(0x7f0000000bc0)=0x8) (rerun: 64) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000c00)={r10, 0x10000}, 0x8) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c40)={r10, 0xffff, 0x4, [0x35, 0x3, 0xc, 0x1]}, &(0x7f0000000c80)=0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r0) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x150, r11, 0x1, 0x2, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffff7}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x32}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xed, 0xa9, @random="c42151a3d422f37b5cfaf0745e88b9bea6e7ce826065ce0090eb735653f833a31bdf06c31b01715b4ce65a16a70650595b8c46233a93262232f9a8b92efe52d8cc6bb70b02306e5fcd1aa52a9147550e1554a009551938123c816245fcaf44cb90daf3281051e51bcc65133e7dbee5531b2c371ecaab6224a6f14af560d87b37873bd7d93e99691ccaf9108d22c92dbb0b97cdf444d45f53bd80cc07be38d7bf9cf260d3ac6114e29f56ce7f6e573c9ce4aa6d4a5b86816332c94a8e1fab45ab9b1fbcfb2fd7eb383abcc287b1fb7c04169a052d0fdea2f1d7a5f9f7b25ee530fde7ca19133aa54389"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xe28}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x150}}, 0x44890) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001040)) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001280), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r12, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r13, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8841}, 0x811) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r14, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}}, 0x4008010) 2.604887533s ago: executing program 0 (id=3865): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000680)="85", 0x1}, {&(0x7f0000000040)="f937033377faf5b3ba68a52b1d1720fdeb98c8e89ffab5c688c2b52c54b279313daef7b00d77d0dda01458e6710ec5419ef78a948cbdc3cf8332416e6c8ec2249a9f5680b32c9a921bd55fda4a0f9bd882a8742b9975e42d79c4a9fbf7ac5473ffccbd95465a58e780c01c6ee49c900ea7a8e1e14a3052a8ffe3db3b22a17393ef3044512ea5ebd949d2d6086dc8ead74123651cde9a30ce63b5061c54798f0047e3f9f1ab9a1b9f08b1c0937abce970f0c1585f17dc77a7e6714c0c49b3", 0xbe}, {&(0x7f0000000240)="108791869fdd075b693f6cc4723a95c8a8d9ea6ac15486030000000d85ccbfd981669631766815e0f102650500b74b7b56a974cd2bd0ed043c0e972200000000000000000045212b4eca0bcdd1ccb8dc402bee35715618a314dd1b90358310d31bd55b43cce267485f7698d515d5489bde7a1c788e7c62706789cf34a7fda0ed1ee78a0191ca389a5fbfea494fc4bf5dff9bcd74f90ee9bd92b919321d7ebbbbff1f1b32c4ad59085dab16724631", 0xae}, {&(0x7f00000006c0)="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", 0x1000}], 0x4, 0x0) r3 = socket$inet6(0xa, 0x6, 0x80000005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x74}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac02}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000016c0)={{0x0, 0x9, 0xaa21, 0x4, 0x8, 0x100000, 0x80000000, 0x8c9, 0x0, 0x521, 0x6, 0x1, 0xe, 0x6, 0x8000000000000001}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000026c0)={r9, r10, "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", "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"}) listen(r6, 0x8) accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0xfffffffffffffffd, 0x0) 1.921947607s ago: executing program 4 (id=3874): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12013, r0, 0xf3b64000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) shutdown(r3, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 1.754389355s ago: executing program 4 (id=3878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001200010000000000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776730000000000000000000000000004fbba4409caed644c5d0dc070b5b3303cd3f3223be884c3b736bb2d823"], 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x80000000, 0xe8, &(0x7f0000000140)=""/232, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000280)=[{0x1, 0x5, 0xd, 0x9}], 0x10, 0x81}, 0x94) r3 = socket(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000000400)={0x10, 0x3f2}, 0x10}], 0x2}, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r4, &(0x7f0000000000)="dbc1d8f6f6c31022", 0x8, 0x20008001, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x10, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB='>\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="48d1572dc2c22a7e592eb91d0cac0ddb40507569dc2ba981b0fa1aad489d996b47e154ffde9e517bf6c0767954fecae4d20fc9dd0000000000fb975327f0a27b58462fe3bdd214e4fa44f099837bead81b518d2262d30c596890c39839b31f540115d6108954ecb22658338866fda8ad43f2829c33ff026d952dfbbeb06e3150", @ANYRES64=r5], 0x20) 1.639971274s ago: executing program 2 (id=3880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0xc, 0x4) r1 = socket(0xa, 0x3, 0xff) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/180, 0xb4}, {0x0}], 0x2) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x3010}, 0x48) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) socket(0x5, 0x0, 0x7) (async) r8 = socket(0x5, 0x0, 0x7) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) (async) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 1.638272877s ago: executing program 0 (id=3881): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x8914}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @private1, @broadcast, @loopback}}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) 1.63783796s ago: executing program 4 (id=3882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xac4}], 0x1, 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0xc841}, 0x4000) recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/139, 0x8b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x40005}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4089, 0xff9}], 0x3}, 0x8}], 0x3, 0x22, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x104, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x66}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x84}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$pptp(0x18, 0x1, 0x2) (async) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xac4}], 0x1, 0x40, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0xc841}, 0x4000) (async) recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/139, 0x8b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x40005}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4089, 0xff9}], 0x3}, 0x8}], 0x3, 0x22, 0x0) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x104, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x66}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x84}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) (async) 1.5618468s ago: executing program 0 (id=3884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) shutdown(r0, 0x1) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x800) sendfile(r1, r0, &(0x7f0000000100)=0x2, 0x5) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 64) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=""/176, &(0x7f0000000240)=0xb0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000070c0)=[{{&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/33, 0x21}], 0x1, &(0x7f0000000380)=""/205, 0xcd}, 0x639bdee8}, {{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000001840)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/112, 0x70}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x6, &(0x7f00000018c0)=""/86, 0x56}, 0xa50f}, {{&(0x7f0000001940)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)=""/44, 0x2c}], 0x1, &(0x7f0000001a40)=""/58, 0x3a}, 0x6}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1, &(0x7f0000002ac0)=""/187, 0xbb}}, {{&(0x7f0000002b80)=@nfc, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)=""/153, 0x99}, 0xa}, {{&(0x7f0000002d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/15, 0xf}, {&(0x7f0000002dc0)=""/245, 0xf5}, {&(0x7f0000002ec0)=""/6, 0x6}], 0x3, &(0x7f0000002f40)=""/17, 0x11}, 0x98}, {{&(0x7f0000002f80)=@alg, 0x80, &(0x7f0000004740)=[{&(0x7f0000003000)=""/161, 0xa1}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/249, 0xf9}, {&(0x7f00000041c0)=""/164, 0xa4}, {&(0x7f0000004280)=""/206, 0xce}, {&(0x7f0000004380)=""/129, 0x81}, {&(0x7f0000004440)=""/194, 0xc2}, {&(0x7f0000004540)=""/219, 0xdb}, {&(0x7f0000004640)=""/198, 0xc6}], 0x9, &(0x7f0000004800)=""/1, 0x1}, 0x2aa2fabb}, {{&(0x7f0000004840)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f00000048c0)=""/79, 0x4f}, {&(0x7f0000004940)=""/132, 0x84}, {&(0x7f0000004a00)=""/167, 0xa7}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/236, 0xec}, {&(0x7f0000005bc0)=""/240, 0xf0}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/218, 0xda}, {&(0x7f0000006dc0)=""/142, 0x8e}, {&(0x7f0000006e80)=""/25, 0x19}], 0xa}, 0x200}, {{&(0x7f0000006f80)=@generic, 0x80, &(0x7f0000007080)=[{&(0x7f0000007000)=""/62, 0x3e}, {&(0x7f0000007040)=""/61, 0x3d}], 0x2}, 0x8}], 0x9, 0x40000000, &(0x7f0000007300)) (async) connect$inet6(r0, &(0x7f0000007340)={0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) (async, rerun: 32) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x150aa000) (rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000007380), 0x8) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000007480)={&(0x7f00000073c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000007400)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read(r1, &(0x7f00000074c0)=""/223, 0xdf) (async, rerun: 32) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, r2, 0x0) (async, rerun: 32) syz_emit_ethernet(0x6a, &(0x7f00000075c0)={@multicast, @local, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x5, 0x1, 0x1}}, {@generic={0x88e5, "4a85bf3722c7171cf6cb570a70e1fa793de3f8045d2fe07017ed1569702552c01bd9fee5c8d6c0b3e8ae3ec141ca2630bee25a28241a6b593893e5c44bce1fc8b90e94d9c8c6e6349bd87d6ecf24f0f16afe8d16"}}}, 0x0) (async, rerun: 32) connect$inet6(r0, &(0x7f0000007640)={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000007680)=0x200, 0x4) (async, rerun: 64) writev(r1, &(0x7f0000007c00)=[{&(0x7f00000076c0)="f153b1b26afb5ec616bb86753669710dc80aa781c2baed9e918fd13f609ecb046c59b06d70db487179d3912e3d2fcc1c46925ca17280ab583b1fe5ebc51afb13203eb826308ab81b56f2a3ccd1975e90c2e2d20c8e3bcbfe0bc3d90d6ce709c7afa87a6b6fc5c75a75bf4a414609ef420db755759d6cb2c502040bb4963a468fbcc1f3c095151accf231638b8473b0bb15b76aecf5b97e40f3fa829c7ba5a7531e9b7b4374f233c3cb84ba05d0c8956b7361bf4dbfd30f391b321859671805fa6e6508534ab75bf323e0ecfd295f31fb61671dc67da9470b8f00af2357785cf9d97f99a48bedcd41647c2fe0b421ba38202b0a7367", 0xf5}, {&(0x7f00000077c0)="ad374b9a2ce6efcfa06039003fee2b0eb924b8cb5796fc514f98d6edeb230a23660bb7e2d8222dbc64594c1812a31ef53a4e8e08af593387e3e2b0f27bd41e01ccb789a48fc44a90c1a72a10b51417f078c5787e09c7ef54fed5c169905b69c2a8aa9586fb112f81eee099aca7c6", 0x6e}, {&(0x7f0000007840)="0ffdf2f00836689cf2f0128a2fcece59e32d776eb474ce487af36f8be99109073993a650f3d15ef8b6c7538d766b3e97abb5478a34c1ce93afeaea6c88e94a9e8ff47544bdae1a3332229582e52990f9c09e673bca14c3b1947d36d9d2ce088d66b7d7918adf1d1764305f5ebb", 0x6d}, {&(0x7f00000078c0)="61c3e502868e126c79543230edce9acbabd9ad09204f1dadc12dd765ccb7f372235f8a08d93b259259bef038b2d73f366645df74f5add6033c38b76e0e131b00232345e278df52e022b266a8d95b58d959641645c0449ecf088ec69315a8f2e6f0fe4768fe3991d4e87768efb9", 0x6d}, {&(0x7f0000007940)="b30f90c2af62183063a710f3a21e90a612ff9a7ef4bce0a7b0882c65ef21807d2e1fcbef6c1ef78b96615c67946440d23f4f5d91bb0ca3c14d6061edd2a148a1eb116aa63bd0ba60a51b65ef3641cc29ed2559c14c06f19db0ddf8dd4592c2303a7886df", 0x64}, {&(0x7f00000079c0)="b066bb78253886f50d789d605c4e855dc2ae9e925a4a409e4f4401e5712b0c217a060a1ba38b97d10c991a4e11d7199cde0a25c67478878b87d0ec4858b242a4c9d6654aecae2ec1944d485453b1736eb82805a2ca999083782c282f529e44af8651a77ec447ecf3724fbfadf879ef1b3b0c90836eca0136fcec214ca4147440b9fde8", 0x83}, {&(0x7f0000007a80)="e4ea59897dbc8fa2ba1e1d69ad1ab461570d6e16d1b26922375abdde5cde720f28522bb04e3c76b27f03786963e6ff1eb0d8b55ede56307a460c797e9d734f6f12878b3410f8ee1c288250d8ae7300868a9e8e6047feb7c443f085723fdb350cd36dff2b8fa12ff1cb92618bb5d17a0627b991a26c2f20b0a005c75f196d5347083a6cc5c073980e6ab4634a13623ed47bf4040b6a8e6993b62250b3c029c1291899827dbb7099e5f9549b6e76950434949f0ba03f6b41e2361152a55db33ce0b71f363d18777c1981d653b3c1d2d2d6f9cc5188c38d1201cba7a1dbbd8788f32a8a44169464f96661f5440487805193", 0xf0}, {&(0x7f0000007b80)="29265137d89607806c6cee3e07206f97c0d123d33326e0b90e30181ddf8ab096323786dcdfbf67e04a4012e76b55ca30cea0da8ca548c9b37bcf9491494f5fb8718fc2312488833fb021d2f41239b0fcd8a4c1cf0fcc262e2c", 0x59}], 0x8) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$phonet(0x23, 0x2, 0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000007c80), r2) bind$phonet(r3, &(0x7f0000007cc0)={0x23, 0x9, 0x5, 0x5}, 0x10) (async, rerun: 32) connect$vsock_stream(r2, &(0x7f0000007d00)={0x28, 0x0, 0x2710, @local}, 0x10) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000007d80)={@dev, @empty, 0x0}, &(0x7f0000007dc0)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000007f40)={&(0x7f0000007d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007f00)={&(0x7f0000007e00)=@newqdisc={0xd0, 0x24, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10, 0xb}, {0xffff, 0x3}, {0x6, 0xffe0}}, [@TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa6, 0x8, 0x4, 0xeca, 0x1, 0x4, 0x4, 0x7}}, {0x12, 0x2, [0x2, 0x7, 0x0, 0x2, 0x3bed, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0x30, 0x3, 0x4, 0x2, 0x0, 0x3, 0x9, 0xa}}, {0x18, 0x2, [0x100, 0xfff9, 0x1, 0x6, 0x8000, 0x0, 0x9, 0x6a53, 0x0, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x100, 0x5}}}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007fc0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000008080)={&(0x7f0000007f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000008040)={&(0x7f0000008000)={0x24, r7, 0x110, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x403a}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x4000000) 1.420067357s ago: executing program 1 (id=3885): syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev, @mcast2, {[@routing={0x0, 0x0, 0xf5}]}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480100eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.418443305s ago: executing program 4 (id=3886): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c58230120542ab3292ea54c7beef915d564c90c200", 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r7, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x4}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x8010) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c00"], 0x1c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r6, 0x2000) r10 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 1.392488015s ago: executing program 2 (id=3887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@offload={0xc}]}, 0x134}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xe, 0x4e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r2, 0x0, 0x8000f25, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003c6c7832d03d82d167850af4e05f56c25a19303fa88e2c128bc456f4417aefd45ede4015d7da4a3ac565af8a01be5e3effc6142fd8f3de355cfd83caf8515758b144de93179aa41fa4afa"], 0x364}}, 0x40400c4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@offload={0xc}]}, 0x134}}, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xe, 0x4e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r3, 0x0, r2, 0x0, 0x8000f25, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) setsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000200), 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003c6c7832d03d82d167850af4e05f56c25a19303fa88e2c128bc456f4417aefd45ede4015d7da4a3ac565af8a01be5e3effc6142fd8f3de355cfd83caf8515758b144de93179aa41fa4afa"], 0x364}}, 0x40400c4) (async) 1.366574899s ago: executing program 0 (id=3888): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'geneve0\x00', 0x1000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000000c0)=""/123) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 1.299972705s ago: executing program 1 (id=3889): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x44}}, 0x48040) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x2, 0xa5fd, {{0x12, 0x4, 0x2, 0x25, 0x48, 0x66, 0x0, 0x29, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@rr={0x7, 0x7, 0x4, [@rand_addr=0x64010101]}, @end, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x7, 0xbf, [@local]}, @generic={0x18, 0x5, "ef6141"}, @timestamp={0x44, 0x8, 0xda, 0x0, 0x1, [0xffff]}, @end, @rr={0x7, 0xf, 0x77, [@dev={0xac, 0x14, 0x14, 0x2f}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @can={0x1d, r4}, @xdp={0x2c, 0x9, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='wg0\x00', 0x9cf, 0x6, 0x5ce}) 1.299021992s ago: executing program 2 (id=3890): getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r0, @in6={{0xa, 0x4e24, 0x10001, @mcast2, 0x2}}, 0x2, 0xfffc, 0x8, 0x101, 0x22, 0xced, 0x6}, &(0x7f0000000140)=0x9c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={r0, 0x27, "f74ca3334a868db66ebe20b5e747bb45c7dd0bb2d3edaaa424602a209cfbacc9f37edd82bdf905"}, &(0x7f00000001c0)=0x2f) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280)=0xcf, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4480302}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf342}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000048}, 0x81) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r6) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r8, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'pimreg\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x8045) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000008c0)={'veth0_to_team\x00', 0x8000}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x80089419, &(0x7f0000000900)) r11 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000d00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)={0x320, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff7e0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x592}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff56}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x407}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf402}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}]}, 0x320}}, 0x4008004) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000d40)) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000001100)={{}, {0x8001}, 0x100, 0x0, 0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)="7a6b2966a56cb468ddaed6de9429b793e5a262816606dd60314298d1bb5981f4ad150b4c7d3f5a9fa0e0ed210bd6213897e62bdff975ac6d095a523703e9025a17b4257976fcc01dd14d36cb24", 0x4d, 0x0, &(0x7f0000000e80)={0x2, 0x194, {0x1, 0xc, 0xbe, "0e1b027ac1c04f9d9b9474eef16217b0609272c388abe16e4c88b447f0a91b5ff6d870fd5c6861e30747f6d8b06fbedde0814077804b9ed22f0d9d4ce52d47eaf8e7be700e9882d6e22ed5a7d2dd892f5b81f7bf476d284efaef001a9c56d4067948d6007c9d9354e2f01cbb7df6d0675614544b5c64f103969f9a0197efee69e2dd5bcd4c497b89c9e68085fc4f13275a9f11ec4f7a7259ec6989dbb85d93f6502fefd7f62a5870ca56d178c2d97dc92c75aab78f2f1531dea11191fde2", 0xc9, "a2d7841c8066370621e6fb1aab05a439b030b9152aa3521d2d97f824b9a8747f73c8d1c80888759c5d539480316a2c22ab9ca162516e3f4c59207155f43995019f3f28135f8d5ec7555c002d2c258a147dfd45eca179ec71f1b395fbe3e5fd5b5fcf3f1ec4ff1628f01cae7bd44b159bf1dab4807a36570bef825372173c05ee66668cfbe669e0886e6d2e161da1f35228c8b5641b5ce434fe513f4e6402477a153199f75ab8fe4bd1d4b85958dd66a519b6d2a93859af8726ed8a651f1eb05ebc565febf502c9f3c4"}, 0xd7, "94087c993cdf2f66c7c5c56af622109f092676e49d44524bf8b43094732037ae28b192106e1a3bbf2241318624384f8a7d8d43c1d953806ba8cd8c980576bdc0a3b078d4cdd8fac1e62b296cf59dbd5248420972b9271a46e43a2d443486a200be88b1e69817bc8587d9e2bb03361f60376cce0c33b2e7f00e3dcb59c2b1d624ecc11d9f3b6d54a705c1366cf2f10defe5d08fa7f11a5a5e762f3a4ba7ca73a74311ee327a9ab96ee0ffb22122ff11554561ff2b0e109e47bddbcd6e5af4f1dc6a263cb57ceb27845d481d3504044488dc6d245f026d2a"}, 0x277}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000001180)=0x800, 0x4) connect$bt_l2cap(r10, &(0x7f00000011c0)={0x1f, 0x5, @none, 0xe, 0x1}, 0xe) ioctl$FS_IOC_GETFSUUID(r10, 0x80111500, &(0x7f0000001200)) setsockopt$MRT6_DEL_MFC(r10, 0x29, 0xcd, &(0x7f0000001240)={{0xa, 0x4e23, 0xb, @local, 0x6}, {0xa, 0x4e20, 0x55d, @dev={0xfe, 0x80, '\x00', 0x41}, 0xfffff5d3}, 0x1, {[0xd, 0x3, 0x7fff, 0x7, 0x3, 0x5, 0x3d, 0x200]}}, 0x5c) ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000091}, 0x1) 1.22257096s ago: executing program 1 (id=3891): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) (async) listen(r0, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1.210784723s ago: executing program 4 (id=3892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = accept(r4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000440)="61c8075efa13eb5d8e5617cfba559dc50019c54880a03b0639589870a7bd48634b575715eba073980bb7a545f861a4fe54ae78e1d13dbf6506d19b379c615044925c390169ad9e9bf3fa2e0ad5e40ab728eaf5ba2dc8a78591aea65e1848dbec0100000054fdae488218d3849fc95b18672fce79cad5c3a2b070e7946857ed6ad4ebd9290dc2c9eb5ff46fd7aa", &(0x7f00000002c0)=@tcp6=r5}, 0x20) ppoll(&(0x7f0000000000)=[{r5, 0x2420}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f00000001c0)={0x3a, 0x6, 0xb, 0x5, 0x5, 0x81}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.096063288s ago: executing program 2 (id=3893): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="775e8f623ca36f9dd53c56ede8ada463722538c0f4a77b43cdc1afe23eb9c9d5cb09b46d086239afc77f10fc5f20be046b3ea88ebf0d2b48130e8303659306127dce41b68383e8a83df49a52f5f81252d001f05bb120e0f7aaade2639a356ac0d45d30d5c955d1cc90f8dedc22c863acdf1a8c2d09c72997c17fcb979b31d3f70b042c292f7e6aedb1c301e6f3b29bd3c99c378c98c3f6fc17c860c9c8710d9edfae10d92d2604c14f8e8bbb1cc5fd", 0xaf}, {&(0x7f00000002c0)="d02c5269cef5ccac811bec0fd035bfe4323ad1c577f304ce81f3abb12220e2e95e42aeeba61d28aaadb632a92bc4ca42fc614f744b6b97ea8ec343aec4c56fd77e7008d0a5b703bab1cca57c5c83721ea81a49c1a5546d373aaaae6b389f4bf8f65c78e607e59aa8963535990c52316be069df0116584f623e51c62227a0915ffc071753bb1fae70559e78fd04793f5ca389a33ff0aebf0252bd9dcc95da25017243861a371fef83a0625b6357c841d31e9089f30636ec1b963de547f15117b9685d08876da5972a86b8f6ad05b573646847b4ac158a9286c36a0d79cbca18", 0xdf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0x6c6}], 0x1}}], 0x2, 0x400c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.087973193s ago: executing program 1 (id=3894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000100)={"ce858d24024358d7330b45ed656225ef", 0x0, 0x0, {0x80000001, 0x9}, {0x646, 0x24}, 0x3, [0x3a, 0x7f, 0xfffffffffffffff8, 0x8, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x5, 0x7, 0xa, 0x3, 0x50, 0x0, 0x8, 0xffff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"0f081d122ab6fd1ef66c384b62586040", r2, 0x0, {0x4, 0x4}, {0xc98e05b, 0x1}, 0x1, [0x3, 0x5, 0x5, 0x20, 0x7, 0x7fffffff, 0x8, 0x8, 0x7, 0x0, 0x50c, 0xff, 0xfff, 0xd93d, 0x6, 0xed]}) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000240)=0xfef, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@initdev, @initdev}, &(0x7f0000000300)=0xc) 984.783739ms ago: executing program 0 (id=3895): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0a0000000000000000000051e4871f274bc419ec21", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000500"/28, @ANYRES64=r0], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x19, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7bf, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0xc, 0x0, 0x5, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="08d3e5389fd5", 0x6}], 0x1}, 0x4004040) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xd, 0x80000000, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x7800, 0x1, 0x9, 0x6}}) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r8, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)={0x10}, 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_kthread_stop_ret\x00', r7, 0x0, 0x2000003}, 0x18) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) (rerun: 32) 888.068136ms ago: executing program 1 (id=3897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r3, r4, 0x2f, 0x10, 0x4, @void, @value=r3}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0x644, 0x9, 0x7, 0x0, 0x0, [{{r1}, 0x4}, {{r2}, 0x8}, {{r0}, 0x2400000000000000}, {{r0}, 0x100000001}, {{r1}, 0x6}, {{r1}}, {{r5}}]}) 760.75404ms ago: executing program 1 (id=3898): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) close(r5) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x12c, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3415}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffff}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x8060) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa8, r7, 0x216, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x7, 0x0, @random="238d06"}, {0x21, 0x0, @random="769261b7c8f49dfb88397896134c362667cec1046d96262512e9189ba9"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3aafccec}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c001) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="8d66e20d0d8d00000000008008004819ede9ec00280067000006019078e0000002e0000002890b05e0000002ac1e0001000f00d26c2a3889149e4b3a31ec52129078676d0006"], &(0x7f0000000080)={0x1, 0x2, [0x83f, 0xcc7, 0x1a5, 0x5dc]}) 596.564834ms ago: executing program 3 (id=3901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r1, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x44, r4, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}}, 0x0) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_emit_ethernet(0x37, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x1, 0x84, 0x0, @empty, @local, {[], "bd"}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x4, 0x7, 0xe48, 0x0, 0xffd, 0x10000, 0x9, 0x9}}) accept4$x25(r6, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80800) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) 541.160324ms ago: executing program 3 (id=3902): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) tee(r0, r1, 0x0, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) write$cgroup_freezer_state(r1, &(0x7f0000000100)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2004, 0xbb, &(0x7f000000cf3d)=""/187, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 399.87325ms ago: executing program 3 (id=3903): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r3, 0x331, 0x70bd29, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x34, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x800}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffe, 0xfb}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x4000) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r9) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r15) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r16, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r16, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}}, 0x200048c0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r14, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 352.39139ms ago: executing program 3 (id=3904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000), 0x10) close(r3) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 211.245942ms ago: executing program 2 (id=3905): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'veth0_macvtap\x00'}, 0x18) read$rfkill(r0, &(0x7f0000000080), 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000000c0)={0x3, {{0x2, 0x4e22, @remote}}, 0x0, 0x6, [{{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @local}}]}, 0x390) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff7, 0x2, 0x80000001, 0x100, 0x2, 0x8], 0x6, &(0x7f0000000480)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000005c0)={{0xfffffff9, 0x8}, 0x100, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000700)=0x2, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000740)) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000780), 0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=0x4) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000840)={0x73, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0x4, 'lc\x00', 0x8, 0x19c00000, 0x29}, 0x2c) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000880)) bind$bt_rfcomm(r0, &(0x7f00000008c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa) readv(r0, &(0x7f0000001a80)=[{&(0x7f0000000900)=""/45, 0x2d}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/133, 0x85}, {&(0x7f0000001a00)=""/72, 0x48}], 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000001ac0)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001b40)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x20, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b00)='vlan0\x00', 0x7, 0x0, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001c00)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x120, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000001bc0), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0x40, 0x20, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x6, 0x4], 0x6, 0x7}, {0x0, [0x2, 0x3, 0x3, 0x4, 0x0, 0x2], 0x3, 0x2}}}}, {{@ip={@local, @broadcast, 0xffffff00, 0xff, 'veth1_virt_wifi\x00', 'pimreg\x00', {0xff}, {}, 0x73, 0x2, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x4, 0x2, 0x2}}}, @common=@ah={{0x30}, {[0x3, 0x3ff]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001fc0)={r0}, 0x8) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xffffa41a}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x579c}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) r5 = openat$cgroup_ro(r2, &(0x7f0000002180)='blkio.bfq.empty_time\x00', 0x0, 0x0) socket(0x1, 0x3, 0x3) getsockname$packet(r5, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0x14) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "67de247be9953a5b", "0845374d303a0eb52978017b33922bb5769af756133376aaa2c8e0842517c06f", "85c0149a", "1a8c784cafa7aff8"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), r5) bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@bloom_filter={0x1e, 0x10001, 0xfffffff8, 0xffffff54, 0x14053, 0x1, 0xfffffff7, '\x00', r6, r0, 0x1, 0x3, 0x3, 0xc, @void, @value, @value=r0}, 0x50) 147.986366ms ago: executing program 3 (id=3906): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_deladdr={0x34, 0x15, 0x300, 0x70bd25, 0x25dfdbfb, {0x2, 0x18, 0x78, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'veth0_to_team\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x34, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x800}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffe, 0xfb}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 142.58264ms ago: executing program 4 (id=3907): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x13, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x19, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffc01}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8cb}, @jmp={0x5, 0x0, 0x1, 0x5, 0x4}, @jmp={0x5, 0x0, 0xc, 0xb, 0x2, 0x30, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xf, &(0x7f0000000340)=""/15, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x6, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x1, 0x1, 0x9}], 0x10, 0x93f2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000600)='bond0\x00'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r3, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x12, 0x0, &(0x7f0000003c00)) syz_open_procfs$namespace(r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000006c0)=[0x9, 0x4, 0x1, 0x0, 0xf], 0x0, 0x6, 0x5, 0x1, r4}}, 0x40) 136.603754ms ago: executing program 2 (id=3908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 0s ago: executing program 3 (id=3909): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 316.170798][T13628] ? clear_bhb_loop+0x60/0xb0 [ 316.170824][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.170844][T13628] RIP: 0033:0x7fadeb38ebe9 [ 316.170863][T13628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.170881][T13628] RSP: 002b:00007fadec138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.170903][T13628] RAX: ffffffffffffffda RBX: 00007fadeb5b5fa0 RCX: 00007fadeb38ebe9 [ 316.170918][T13628] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 316.170930][T13628] RBP: 00007fadeb411e19 R08: 0000000000000004 R09: 0000000000000000 [ 316.170943][T13628] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 316.170956][T13628] R13: 00007fadeb5b6038 R14: 00007fadeb5b5fa0 R15: 00007ffe1847cb98 [ 316.170990][T13628] [ 316.170998][T13628] Mem-Info: [ 316.441495][T13628] active_anon:7545 inactive_anon:0 isolated_anon:0 [ 316.441495][T13628] active_file:3206 inactive_file:39912 isolated_file:0 [ 316.441495][T13628] unevictable:768 dirty:89 writeback:0 [ 316.441495][T13628] slab_reclaimable:12204 slab_unreclaimable:114479 [ 316.441495][T13628] mapped:29317 shmem:1359 pagetables:1011 [ 316.441495][T13628] sec_pagetables:0 bounce:0 [ 316.441495][T13628] kernel_misc_reclaimable:0 [ 316.441495][T13628] free:1307776 free_pcp:13697 free_cma:0 [ 316.512174][T13650] netlink: 'syz.1.2310': attribute type 4 has an invalid length. [ 316.521546][T13651] netlink: 'syz.1.2310': attribute type 4 has an invalid length. [ 316.524661][T13628] Node 0 active_anon:30080kB inactive_anon:0kB active_file:12824kB inactive_file:159448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117168kB dirty:356kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13108kB pagetables:3992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.558952][T13650] netlink: 'syz.1.2310': attribute type 4 has an invalid length. [ 316.566813][T13628] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.600482][T13628] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.629718][T13628] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 316.643030][T13628] Node 0 DMA32 free:1319668kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30032kB inactive_anon:0kB active_file:12824kB inactive_file:157872kB unevictable:1536kB writepending:356kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:35496kB local_pcp:15348kB free_cma:0kB [ 316.679718][T13628] lowmem_reserve[]: 0 0 1 1 1 [ 316.684622][T13628] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 316.718148][T13628] lowmem_reserve[]: 0 0 0 0 0 [ 316.733157][T13628] Node 1 Normal free:3896064kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:10464kB free_cma:0kB [ 316.859580][T13628] lowmem_reserve[]: 0 0 0 0 0 [ 316.864397][T13628] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.917324][T13628] Node 0 DMA32: 2*4kB (UM) 177*8kB (U) 157*16kB (UE) 639*32kB (UM) 207*64kB (UM) 83*128kB (UME) 38*256kB (UME) 34*512kB (UM) 21*1024kB (UM) 9*2048kB (UME) 294*4096kB (UM) = 1319552kB [ 316.954253][T13628] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 316.969222][T13628] Node 1 Normal: 192*4kB (UE) 44*8kB (UME) 44*16kB (UME) 53*32kB (UME) 25*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896064kB [ 316.997028][T13628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.008239][T13628] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.018194][T13628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.043471][T13628] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.059769][T13672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.071226][T13628] 44474 total pagecache pages [ 317.079125][T13628] 0 pages in swap cache [ 317.088974][T13628] Free swap = 124996kB [ 317.095670][T13672] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 317.106486][T13628] Total swap = 124996kB [ 317.115325][T13628] 2097051 pages RAM [ 317.119916][T13628] 0 pages HighMem/MovableOnly [ 317.127943][T13628] 425656 pages reserved [ 317.133727][T13628] 0 pages cma reserved [ 317.168575][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 317.612173][T13709] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 317.975142][T13733] netlink: 'syz.1.2337': attribute type 2 has an invalid length. [ 317.999815][T13736] digital: digital_start_poll: Unknown protocol [ 318.066431][T13738] IPv6: Can't replace route, no match found [ 318.074712][T13738] veth0: entered promiscuous mode [ 318.170181][T13741] bridge: RTM_NEWNEIGH with invalid ether address [ 318.180799][T13741] delete_channel: no stack [ 318.186799][T13741] sctp: [Deprecated]: syz.0.2339 (pid 13741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.186799][T13741] Use struct sctp_sack_info instead [ 318.209931][T13741] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 318.682113][T13774] openvswitch: netlink: Multiple metadata blocks provided [ 318.732602][T13769] tipc: Enabling of bearer rejected, already enabled [ 318.756326][T13779] netlink: 'syz.2.2349': attribute type 1 has an invalid length. [ 320.226860][T13867] netlink: 'syz.2.2380': attribute type 2 has an invalid length. [ 320.235332][T13867] __nla_validate_parse: 85 callbacks suppressed [ 320.235353][T13867] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2380'. [ 320.624401][T13891] batadv0: left allmulticast mode [ 320.633228][T13891] batadv0: left promiscuous mode [ 320.641288][T13891] bridge0: port 3(batadv0) entered disabled state [ 320.760896][T13899] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 320.899174][T13908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2392'. [ 320.921855][T13911] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2394'. [ 320.934480][T13912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2389'. [ 321.169277][ T95] block nbd2: Possible stuck request ffff8880253d0000: control (read@0,1024B). Runtime 150 seconds [ 321.180611][ T95] block nbd2: Possible stuck request ffff8880253d01c0: control (read@1024,1024B). Runtime 150 seconds [ 321.192163][ T95] block nbd2: Possible stuck request ffff8880253d0380: control (read@2048,1024B). Runtime 150 seconds [ 321.204134][ T95] block nbd2: Possible stuck request ffff8880253d0540: control (read@3072,1024B). Runtime 150 seconds [ 321.350490][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 321.433253][T13934] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 321.651105][T13934] tipc: Resetting bearer [ 321.672412][ T6180] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.696671][ T6180] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 321.737893][T13948] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 321.775567][ T6180] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.796805][ T6180] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 321.900137][ T6180] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.923870][ T6180] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 321.957774][ T6180] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.974704][ T6180] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 322.192729][T13979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2415'. [ 322.205537][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2416'. [ 322.279874][T13984] tipc: Enabled bearer , priority 10 [ 322.311216][T13989] openvswitch: netlink: Flow actions attr not present in new flow. [ 322.331399][T13984] netlink: 'syz.2.2418': attribute type 3 has an invalid length. [ 322.349922][T13984] netlink: 196656 bytes leftover after parsing attributes in process `syz.2.2418'. [ 322.365793][T13985] netlink: 'syz.2.2418': attribute type 3 has an invalid length. [ 322.386902][T13985] netlink: 196656 bytes leftover after parsing attributes in process `syz.2.2418'. [ 322.405015][T13993] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2416'. [ 322.457706][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.715492][T14001] netlink: 'syz.4.2422': attribute type 29 has an invalid length. [ 322.728918][T14001] netlink: 'syz.4.2422': attribute type 29 has an invalid length. [ 322.763460][T14013] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 322.774635][T14013] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 322.800637][T14013] tipc: Resetting bearer [ 322.893075][T14020] vlan2: entered promiscuous mode [ 322.922614][T14020] vlan2: entered allmulticast mode [ 322.928936][T14020] hsr_slave_1: entered allmulticast mode [ 323.655919][T14079] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 323.708845][T14079] bond5: (slave gretap1): making interface the new active one [ 323.720904][T14079] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 324.596493][T14129] openvswitch: netlink: Multiple metadata blocks provided [ 324.618166][T14129] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 325.192895][T14167] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 325.309493][T14173] delete_channel: no stack [ 325.475957][T14185] netlink: 'syz.4.2483': attribute type 1 has an invalid length. [ 325.484270][T14185] __nla_validate_parse: 12 callbacks suppressed [ 325.484283][T14185] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2483'. [ 325.661533][ T95] block nbd0: Possible stuck request ffff88802533e000: control (read@0,4096B). Runtime 210 seconds [ 325.763232][T14204] netlink: 'syz.1.2487': attribute type 2 has an invalid length. [ 325.821245][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 325.956272][T14218] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 326.173674][ T3559] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.185090][ T3559] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.205420][ T3559] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.224692][ T3559] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.268616][T14236] syzkaller0: entered promiscuous mode [ 326.276317][T14236] syzkaller0: entered allmulticast mode [ 326.435820][T14245] dvmrp1: entered allmulticast mode [ 326.493832][T14241] netlink: 'syz.0.2498': attribute type 29 has an invalid length. [ 326.514658][T14243] netlink: 'syz.0.2498': attribute type 29 has an invalid length. [ 326.579795][T14241] netlink: 'syz.0.2498': attribute type 2 has an invalid length. [ 326.587905][T14241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.809517][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2507'. [ 326.877423][T14270] netlink: 'syz.0.2503': attribute type 13 has an invalid length. [ 326.905798][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2509'. [ 326.997093][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 327.016811][T14270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.050381][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 327.070084][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 327.091637][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 327.128915][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 327.151567][T14276] vxcan1 speed is unknown, defaulting to 1000 [ 327.343124][T14294] syzkaller1: entered promiscuous mode [ 327.355588][T14294] syzkaller1: entered allmulticast mode [ 327.371554][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2515'. [ 327.620881][T14309] tipc: Bearer : already 2 bearers with priority 10 [ 327.629894][T14309] tipc: Bearer : trying with adjusted priority [ 327.639618][T14309] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 327.703978][T14315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.789672][T14276] lo speed is unknown, defaulting to 1000 [ 328.034903][T14324] sctp: [Deprecated]: syz.4.2522 (pid 14324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.034903][T14324] Use struct sctp_sack_info instead [ 328.282645][T14328] batadv0: entered allmulticast mode [ 328.576470][T14336] netlink: 'syz.3.2528': attribute type 3 has an invalid length. [ 328.581967][T14337] netlink: 'syz.4.2527': attribute type 64 has an invalid length. [ 328.884462][T14353] veth0_to_team: entered promiscuous mode [ 328.893811][T14353] veth0_to_team: entered allmulticast mode [ 329.511513][T14391] netlink: 'syz.3.2545': attribute type 2 has an invalid length. [ 329.688201][T14403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.698712][T14398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.723161][T14396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.038146][T14426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.079167][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.101507][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.173220][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.191996][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.290124][T14432] batadv_slave_0: entered promiscuous mode [ 330.307951][T14432] batadv_slave_1: entered promiscuous mode [ 330.341568][T14432] debugfs: 'hsr1' already exists in 'hsr' [ 330.363258][T14432] Cannot create hsr debugfs directory [ 330.522730][T14441] netlink: 'syz.0.2555': attribute type 29 has an invalid length. [ 330.580816][T14447] tipc: Enabled bearer , priority 0 [ 330.601984][T14447] syzkaller0: entered promiscuous mode [ 330.611086][T14447] syzkaller0: entered allmulticast mode [ 330.637920][T14447] tipc: Resetting bearer [ 330.671816][T14445] tipc: Resetting bearer [ 330.715085][T14445] tipc: Disabling bearer [ 330.733467][T14455] netlink: 'syz.2.2559': attribute type 4 has an invalid length. [ 330.924902][T14461] netlink: 'syz.3.2562': attribute type 29 has an invalid length. [ 330.949171][T14461] __nla_validate_parse: 21 callbacks suppressed [ 330.949194][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'. [ 331.283245][T14489] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2570'. [ 331.415956][T14495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2571'. [ 331.676562][T14516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2575'. [ 332.458717][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 332.718716][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2595'. [ 333.079259][T14585] netlink: 'syz.3.2602': attribute type 4 has an invalid length. [ 333.613206][T14616] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2611'. [ 334.131947][T14646] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2622'. [ 334.349978][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 334.362913][T14661] sock: sock_set_timeout: `syz.0.2628' (pid 14661) tries to set negative timeout [ 334.404359][T14660] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 334.456249][T14660] vlan3: entered allmulticast mode [ 334.462495][T14660] veth1: entered allmulticast mode [ 334.676012][T14674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2630'. [ 335.708254][T14728] macvlan4: entered promiscuous mode [ 335.713787][T14728] macvlan4: entered allmulticast mode [ 335.722230][T14728] veth1_to_bond: entered promiscuous mode [ 335.734397][T14728] veth1_to_bond: entered allmulticast mode [ 335.748493][T14728] team0: Port device macvlan4 added [ 335.976913][T14750] __nla_validate_parse: 3 callbacks suppressed [ 335.976935][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 336.019150][T14750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.141941][T14755] erspan0: entered allmulticast mode [ 336.267425][T14766] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2658'. [ 336.325025][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2658'. [ 336.383527][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 336.644040][T14784] netlink: 'syz.4.2663': attribute type 29 has an invalid length. [ 336.657399][T14788] netlink: 'syz.4.2663': attribute type 29 has an invalid length. [ 336.673068][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 336.698888][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 336.714300][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 336.735831][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 336.759694][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 336.803424][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 337.012619][T14806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.161838][T14820] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 337.187889][T14820] netlink: 'syz.2.2673': attribute type 2 has an invalid length. [ 337.195958][T14820] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 337.293809][T14823] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 337.408114][T14831] tipc: Enabled bearer , priority 0 [ 337.415285][T14833] netlink: 'syz.0.2679': attribute type 14 has an invalid length. [ 337.434746][T14831] syzkaller0: entered promiscuous mode [ 337.441120][T14833] netlink: 'syz.0.2679': attribute type 14 has an invalid length. [ 337.449218][T14831] syzkaller0: entered allmulticast mode [ 337.460386][T14831] tipc: Resetting bearer [ 337.477768][T14830] tipc: Resetting bearer [ 337.510827][T14830] tipc: Disabling bearer [ 337.554356][T14840] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 337.761407][T14853] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 337.930696][T14864] netlink: 'syz.4.2689': attribute type 1 has an invalid length. [ 337.935582][T14861] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 337.955680][T14864] netlink: 'syz.4.2689': attribute type 1 has an invalid length. [ 337.968470][T14861] bond8: (slave vcan1): Error -95 calling set_mac_address [ 337.989585][T14867] netlink: 'syz.0.2688': attribute type 11 has an invalid length. [ 338.157832][T14875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.163109][T14878] ip6gre0: Master is either lo or non-ether device [ 338.229413][T14880] netlink: 'syz.0.2695': attribute type 1 has an invalid length. [ 338.332106][T14890] xt_limit: Overflow, try lower: 271964/0 [ 338.874484][T14928] bond6: entered promiscuous mode [ 338.883666][T14928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.925467][T14928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.933039][T14928] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 338.944177][T14928] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 338.964880][T14928] bond6: (slave wireguard0): making interface the new active one [ 338.973467][T14928] wireguard0: entered promiscuous mode [ 338.997048][T14928] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 339.094259][T14938] veth0_to_bond: mtu greater than device maximum [ 339.619717][T14970] IPVS: length: 142 != 8 [ 340.174672][T15008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.662678][T15043] lo: entered promiscuous mode [ 340.684730][T15043] tunl0: entered promiscuous mode [ 340.702689][T15043] gre0: entered promiscuous mode [ 340.779592][T15043] tipc: Resetting bearer [ 340.798342][T15043] tipc: Resetting bearer [ 340.960149][T15043] erspan0: entered promiscuous mode [ 340.980884][T15043] ip_vti0: entered promiscuous mode [ 341.203771][T15064] __nla_validate_parse: 92 callbacks suppressed [ 341.203792][T15064] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2755'. [ 342.374404][T15086] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.2763'. [ 342.396725][T15089] vlan4: entered promiscuous mode [ 342.413679][T15089] vlan4: entered allmulticast mode [ 342.427672][T15089] hsr_slave_1: entered allmulticast mode [ 342.435895][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2766'. [ 342.503737][T15093] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 342.530713][T15094] validate_nla: 6 callbacks suppressed [ 342.530732][T15094] netlink: 'syz.1.2766': attribute type 1 has an invalid length. [ 342.545651][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2766'. [ 342.575418][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 342.601130][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 342.611425][T15094] 8021q: adding VLAN 0 to HW filter on device bond6 [ 342.991251][T15127] 8021q: VLANs not supported on wg1 [ 343.153835][T15136] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2778'. [ 343.183619][T15136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.202960][T15139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.330543][T15194] netlink: 8400 bytes leftover after parsing attributes in process `syz.0.2790'. [ 344.455829][T15198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2794'. [ 344.483771][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 345.051272][T15218] syzkaller1: entered promiscuous mode [ 345.056895][T15218] syzkaller1: entered allmulticast mode [ 345.703667][T15242] nbd: must specify a device to reconfigure [ 345.992597][T15254] netlink: 'syz.1.2814': attribute type 2 has an invalid length. [ 346.499878][T15283] can: request_module (can-proto-0) failed. [ 347.041567][T15332] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 347.050018][T15332] __nla_validate_parse: 5 callbacks suppressed [ 347.050036][T15332] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2836'. [ 347.071532][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 347.158113][T15337] netlink: 'syz.2.2838': attribute type 15 has an invalid length. [ 347.186875][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 347.211501][T15337] netlink: 'syz.2.2838': attribute type 15 has an invalid length. [ 347.219462][ T13] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.219531][ T13] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.228514][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 347.245932][ T13] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.260909][ T13] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.434061][T15353] netlink: 'syz.1.2843': attribute type 1 has an invalid length. [ 347.463083][T15353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2843'. [ 347.722112][T15368] netlink: 'syz.0.2848': attribute type 1 has an invalid length. [ 347.756004][T15368] netlink: 'syz.0.2848': attribute type 2 has an invalid length. [ 347.937045][T15383] netlink: 'syz.4.2854': attribute type 21 has an invalid length. [ 347.953776][T15383] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2854'. [ 348.460969][T15397] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 348.488409][T15400] netlink: 'syz.4.2857': attribute type 178 has an invalid length. [ 348.525709][T15403] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2858'. [ 348.812164][T15412] vxcan1 speed is unknown, defaulting to 1000 [ 348.881656][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2864'. [ 348.933286][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.945239][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.959607][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.970304][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.990207][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.186029][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 349.213167][T15429] tipc: Enabled bearer , priority 0 [ 349.224110][T15429] syzkaller0: entered promiscuous mode [ 349.234900][T15429] syzkaller0: entered allmulticast mode [ 349.265389][T15412] lo speed is unknown, defaulting to 1000 [ 349.270299][T15417] vxcan1 speed is unknown, defaulting to 1000 [ 349.600646][T15428] tipc: Resetting bearer [ 349.651417][T15428] tipc: Disabling bearer [ 349.780834][T15452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2874'. [ 349.961219][T15417] lo speed is unknown, defaulting to 1000 [ 350.190827][T15465] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 350.505025][T15503] netlink: 'syz.0.2885': attribute type 3 has an invalid length. [ 350.522314][T15503] netlink: 'syz.0.2885': attribute type 2 has an invalid length. [ 350.531199][ T5186] Bluetooth: hci0: command tx timeout [ 350.782734][T15512] pim6reg: entered allmulticast mode [ 351.037432][ T5186] Bluetooth: hci2: command tx timeout [ 351.104768][T15526] nbd: must specify an index to disconnect [ 351.255392][ T95] block nbd2: Possible stuck request ffff8880253d0000: control (read@0,1024B). Runtime 180 seconds [ 351.266283][ T95] block nbd2: Possible stuck request ffff8880253d01c0: control (read@1024,1024B). Runtime 180 seconds [ 351.281110][ T95] block nbd2: Possible stuck request ffff8880253d0380: control (read@2048,1024B). Runtime 180 seconds [ 351.292233][ T95] block nbd2: Possible stuck request ffff8880253d0540: control (read@3072,1024B). Runtime 180 seconds [ 351.527076][T15546] netlink: 'syz.0.2896': attribute type 4 has an invalid length. [ 351.568538][T15538] syzkaller0: entered promiscuous mode [ 351.574204][T15538] syzkaller0: entered allmulticast mode [ 353.089935][ T5186] Bluetooth: hci2: command tx timeout [ 353.107018][T15417] chnl_net:caif_netlink_parms(): no params data found [ 353.261753][T15573] __nla_validate_parse: 11 callbacks suppressed [ 353.261774][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 353.301126][T15568] pim6reg1: entered promiscuous mode [ 353.306499][T15568] pim6reg1: entered allmulticast mode [ 353.314991][T15579] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2903'. [ 353.318395][T15578] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2905'. [ 353.410704][T15579] veth1_macvtap: left promiscuous mode [ 353.462999][T15417] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.507398][T15417] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.528944][T15417] bridge_slave_0: entered allmulticast mode [ 353.559331][T15417] bridge_slave_0: entered promiscuous mode [ 353.613790][T15417] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.631769][T15417] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.640085][T15417] bridge_slave_1: entered allmulticast mode [ 353.650683][T15417] bridge_slave_1: entered promiscuous mode [ 353.674150][T15593] veth0: entered promiscuous mode [ 353.681378][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2907'. [ 353.845380][T15417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.872994][T15417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.970793][T15417] team0: Port device team_slave_0 added [ 353.983612][T15417] team0: Port device team_slave_1 added [ 354.020203][T15591] veth0: left promiscuous mode [ 354.095574][T15614] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2912'. [ 354.158098][T15417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.165120][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.192389][T15417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.215256][T15417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.233935][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.263635][T15622] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 354.295984][T15417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.316783][T15627] netlink: 'syz.0.2916': attribute type 4 has an invalid length. [ 354.410203][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2917'. [ 354.446516][T15417] hsr_slave_0: entered promiscuous mode [ 354.458201][T15417] hsr_slave_1: entered promiscuous mode [ 354.466029][T15417] debugfs: 'hsr0' already exists in 'hsr' [ 354.473423][T15417] Cannot create hsr debugfs directory [ 354.498288][T15638] veth1_macvtap: left promiscuous mode [ 354.703581][T15644] bond7: entered allmulticast mode [ 354.710610][T15644] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.724208][T15644] bridge0: port 1(bond7) entered blocking state [ 354.730858][T15644] bridge0: port 1(bond7) entered disabled state [ 354.744486][T15644] bond7: entered promiscuous mode [ 354.963009][T15657] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 354.985595][T15417] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.083645][T15662] syzkaller0: entered promiscuous mode [ 355.101461][T15662] syzkaller0: entered allmulticast mode [ 355.122615][T15665] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 355.145720][T15417] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.167422][ T5186] Bluetooth: hci2: command tx timeout [ 355.208814][T15417] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.520605][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 355.559362][T15417] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.685280][T15691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2937'. [ 355.729449][ T95] block nbd0: Possible stuck request ffff88802533e000: control (read@0,4096B). Runtime 240 seconds [ 355.839441][T15698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2938'. [ 355.881800][T15700] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.073645][T15417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.094728][T15417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.122118][T15417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.158530][T15417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.432855][T15417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.479191][T15417] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.504089][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.511444][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.563421][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.570693][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.119777][T15766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.247596][ T5186] Bluetooth: hci2: command tx timeout [ 357.382531][T15417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.497627][T15789] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 357.553759][T15417] veth0_vlan: entered promiscuous mode [ 357.559501][T15789] netlink: 'syz.0.2962': attribute type 83 has an invalid length. [ 357.570191][T15417] veth1_vlan: entered promiscuous mode [ 357.581347][T15789] sctp: [Deprecated]: syz.0.2962 (pid 15789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.581347][T15789] Use struct sctp_sack_info instead [ 357.618270][T15792] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2965'. [ 357.745721][T15417] veth0_macvtap: entered promiscuous mode [ 357.810637][T15417] veth1_macvtap: entered promiscuous mode [ 357.856606][T15417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.917894][T15417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.970745][ T6187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.041096][ T6187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.122482][ T6187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.158215][T15491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.279443][T15822] __nla_validate_parse: 1 callbacks suppressed [ 358.279463][T15822] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2973'. [ 358.295020][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.340564][ T6195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.367958][ T6195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.423144][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.450367][T15829] syzkaller1: entered promiscuous mode [ 358.456299][T15829] syzkaller1: entered allmulticast mode [ 358.457242][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.546940][T15833] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2977'. [ 358.664838][T15833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2977'. [ 358.685222][T15833] smc: removing ib device syz0 [ 358.742285][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 358.751972][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 358.763776][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 358.982198][T15843] tipc: Started in network mode [ 359.017509][T15843] tipc: Node identity 1eb1d802206d, cluster identity 4711 [ 359.037559][T15843] tipc: Enabled bearer , priority 0 [ 359.052060][T15843] syzkaller0: entered promiscuous mode [ 359.078147][T15843] syzkaller0: entered allmulticast mode [ 359.142628][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'. [ 359.190050][T15844] tipc: Resetting bearer [ 359.260417][T15842] tipc: Resetting bearer [ 359.321719][T15842] tipc: Disabling bearer [ 359.540133][ T5866] syz_tun (unregistering): left promiscuous mode [ 359.814723][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.826999][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.838508][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.847090][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.856477][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.904122][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 360.196654][T15859] vxcan1 speed is unknown, defaulting to 1000 [ 360.415777][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 360.510498][T15890] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 360.543816][T15885] netlink: 'syz.1.2989': attribute type 10 has an invalid length. [ 360.695060][T15885] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 360.758468][T15890] bridge_slave_0: left allmulticast mode [ 360.770430][T15890] bridge_slave_0: left promiscuous mode [ 360.776422][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.830867][T15890] bridge_slave_1: left allmulticast mode [ 360.836759][T15890] bridge_slave_1: left promiscuous mode [ 360.846729][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.885397][T15890] bond0: (slave bond_slave_0): Releasing backup interface [ 360.913734][T15890] bond0: (slave bond_slave_1): Releasing backup interface [ 360.972286][T15890] team0: Port device team_slave_0 removed [ 360.993621][T15890] team0: Port device team_slave_1 removed [ 361.014102][T15890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.026699][T15890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.059091][T15890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.066782][T15890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.173881][T15890] bond0: (slave wlan1): Releasing backup interface [ 361.248067][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 361.321736][T15898] tipc: Enabled bearer , priority 0 [ 361.414239][T15900] syzkaller0: entered promiscuous mode [ 361.423649][T15900] syzkaller0: entered allmulticast mode [ 361.633884][T15914] tipc: Resetting bearer [ 361.661822][T15914] tipc: Disabling bearer [ 361.907246][ T51] Bluetooth: hci1: command tx timeout [ 362.154997][T15943] smc: net device bond0 applied user defined pnetid SYZ0 [ 362.163313][T15943] smc: net device bond0 erased user defined pnetid SYZ0 [ 362.173634][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'. [ 362.433566][T15859] chnl_net:caif_netlink_parms(): no params data found [ 362.582955][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.591105][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.599081][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.607006][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.609534][T15969] sctp: [Deprecated]: syz.3.3008 (pid 15969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.609534][T15969] Use struct sctp_sack_info instead [ 362.615016][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.639563][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.647547][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.655497][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.663644][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 362.671854][T15967] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 363.100023][T15859] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.113046][T15859] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.120595][T15859] bridge_slave_0: entered allmulticast mode [ 363.139510][T15859] bridge_slave_0: entered promiscuous mode [ 363.161918][T15859] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.192081][T15859] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.207491][T15859] bridge_slave_1: entered allmulticast mode [ 363.234219][T15859] bridge_slave_1: entered promiscuous mode [ 363.423943][T16002] netlink: 'syz.1.3016': attribute type 1 has an invalid length. [ 363.452427][T16002] __nla_validate_parse: 4 callbacks suppressed [ 363.452446][T16002] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3016'. [ 363.482548][T15859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.523806][T15859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.561415][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 363.781289][T15859] team0: Port device team_slave_0 added [ 363.794640][T15859] team0: Port device team_slave_1 added [ 363.808278][T16012] tipc: Enabled bearer , priority 0 [ 363.873693][T16012] syzkaller0: entered promiscuous mode [ 363.882906][T16012] syzkaller0: entered allmulticast mode [ 363.945861][T15859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.953831][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.978663][T16029] nbd: must specify a size in bytes for the device [ 363.989972][ T51] Bluetooth: hci1: command tx timeout [ 364.005682][T15859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.035879][T16014] tipc: Resetting bearer [ 364.043674][T15859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.052871][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.081121][T15859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.100482][T16010] tipc: Resetting bearer [ 364.123928][T16010] tipc: Disabling bearer [ 364.224237][T15859] hsr_slave_0: entered promiscuous mode [ 364.243546][T15859] hsr_slave_1: entered promiscuous mode [ 364.271643][T15859] debugfs: 'hsr0' already exists in 'hsr' [ 364.280629][T15859] Cannot create hsr debugfs directory [ 364.294299][T16037] netlink: 'syz.3.3028': attribute type 39 has an invalid length. [ 364.389036][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 364.752326][T15859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.867074][ T5869] IPVS: starting estimator thread 0... [ 364.925238][T15859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.967456][T16063] IPVS: using max 25 ests per chain, 60000 per kthread [ 365.170038][T15859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.316236][T15859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.602301][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 365.727763][T15859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.802130][T15859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.848762][T15859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.894905][T15859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.048688][ T51] Bluetooth: hci1: command tx timeout [ 366.164528][T15859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.211951][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'. [ 366.231016][T16139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3058'. [ 366.321059][T16139] syzkaller0: entered promiscuous mode [ 366.326721][T16139] syzkaller0: entered allmulticast mode [ 366.347745][ T6195] syzkaller0: tun_net_xmit 48 [ 366.356129][T16140] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 366.364369][T16140] syzkaller0: Linktype set failed because interface is up [ 366.364378][T16139] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 366.376128][T15859] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.585689][T16152] netlink: 'syz.3.3063': attribute type 23 has an invalid length. [ 368.127754][ T51] Bluetooth: hci1: command tx timeout [ 368.874930][T15491] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.882184][T15491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.906759][T16161] bridge1: entered promiscuous mode [ 368.913705][T16161] bridge1: entered allmulticast mode [ 368.989833][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.997046][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.059028][T16176] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 369.239869][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3069'. [ 369.274856][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3069'. [ 369.330358][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3071'. [ 369.402020][T16185] netlink: 'syz.2.3071': attribute type 1 has an invalid length. [ 369.554290][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3074'. [ 369.603259][T15859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.606588][T16198] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.976208][T15859] veth0_vlan: entered promiscuous mode [ 369.993917][T15859] veth1_vlan: entered promiscuous mode [ 370.030694][T15859] veth0_macvtap: entered promiscuous mode [ 370.044584][T15859] veth1_macvtap: entered promiscuous mode [ 370.068425][T15859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.085424][T15859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.103785][T15491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.113124][T15491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.122918][T15491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.132216][T15491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.217965][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.226527][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.263332][ T6204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.274430][ T6204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.360488][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 370.550565][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3080'. [ 370.973365][T16248] tipc: Enabling of bearer rejected, failed to enable media [ 371.319353][T16264] tipc: Started in network mode [ 371.324363][T16264] tipc: Node identity 022c41de4cfd, cluster identity 4711 [ 371.338846][T16264] tipc: Enabled bearer , priority 0 [ 371.372328][T16262] syzkaller0: entered promiscuous mode [ 371.407956][T16262] syzkaller0: entered allmulticast mode [ 371.462750][T16264] tipc: Resetting bearer [ 371.488465][T16269] netlink: 'syz.3.3093': attribute type 8 has an invalid length. [ 371.545141][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.561504][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.571341][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.590691][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.603214][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.634291][T15491] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.655213][T15491] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 371.678028][T15491] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.742218][T16259] tipc: Resetting bearer [ 371.766917][T16259] tipc: Disabling bearer [ 371.801686][T15491] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.823163][T15491] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 371.834732][T15491] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.914249][T16272] vxcan1 speed is unknown, defaulting to 1000 [ 371.979593][T15491] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.007368][T15491] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 372.043614][T15491] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.094549][T16291] sch_tbf: peakrate 9 is lower than or equals to rate 9 ! [ 372.147858][T15491] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.169896][T15491] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 372.201184][T15491] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.211724][T16298] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 372.726939][T15491] tipc: Resetting bearer [ 372.804112][T16328] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3111'. [ 372.931033][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3112'. [ 372.988665][T15491] team0: Port device ip6gretap1 removed [ 373.135221][T15491] tipc: Disabling bearer [ 373.158248][T15491] bond4 (unregistering): (slave gretap1): Releasing active interface [ 373.660610][ T51] Bluetooth: hci4: command tx timeout [ 373.713845][T15491] bond0 (unregistering): Released all slaves [ 373.730424][T15491] bond1 (unregistering): Released all slaves [ 373.842271][T15491] bond2 (unregistering): (slave veth5): Releasing active interface [ 373.852505][T15491] bond2 (unregistering): Released all slaves [ 373.870846][T15491] bond3 (unregistering): Released all slaves [ 373.979900][T15491] bond4 (unregistering): Released all slaves [ 374.090858][T15491] bond5 (unregistering): Released all slaves [ 374.196470][T15491] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 374.205114][T15491] wireguard0: left promiscuous mode [ 374.214387][T15491] bond6 (unregistering): Released all slaves [ 374.243777][T16328] team0: Device wireguard0 is of different type [ 374.459694][T16341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3114'. [ 374.510159][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3116'. [ 374.620817][T16353] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3118'. [ 374.632770][T16346] batman_adv: batadv0: Removing interface: dummy0 [ 374.653364][T16347] sit0: entered promiscuous mode [ 374.663825][T16347] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 374.672258][T16347] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3115'. [ 374.754485][T16272] chnl_net:caif_netlink_parms(): no params data found [ 374.910706][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3120'. [ 375.002741][T16366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3121'. [ 375.019618][T16366] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3121'. [ 375.047633][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.070311][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.095419][T16272] bridge_slave_0: entered allmulticast mode [ 375.112294][T16272] bridge_slave_0: entered promiscuous mode [ 375.118277][T16369] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3121'. [ 375.126123][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.141621][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.151330][T16272] bridge_slave_1: entered allmulticast mode [ 375.162072][T16272] bridge_slave_1: entered promiscuous mode [ 375.282253][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 375.300507][T16373] vxcan1 speed is unknown, defaulting to 1000 [ 375.311185][T16372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'. [ 375.436178][T16272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.484752][T16272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.728069][ T51] Bluetooth: hci4: command tx timeout [ 375.809591][T16272] team0: Port device team_slave_0 added [ 375.853489][T16272] team0: Port device team_slave_1 added [ 376.000855][T15491] : left promiscuous mode [ 376.062060][T16272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.071893][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.084320][T16406] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 376.098376][T16272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.119550][T16272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.126685][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.154219][T16272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.176939][T15491] tipc: Left network mode [ 376.183548][T16400] netlink: 'syz.0.3132': attribute type 23 has an invalid length. [ 376.280510][T16406] 8021q: adding VLAN 0 to HW filter on device bond8 [ 376.560146][T16425] netlink: 'syz.4.3138': attribute type 32 has an invalid length. [ 376.574844][T16272] hsr_slave_0: entered promiscuous mode [ 376.581651][T16272] hsr_slave_1: entered promiscuous mode [ 376.589119][T16272] debugfs: 'hsr0' already exists in 'hsr' [ 376.595018][T16272] Cannot create hsr debugfs directory [ 376.606641][T16425] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 376.896078][T16438] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 377.318708][T16461] netlink: 'syz.0.3147': attribute type 2 has an invalid length. [ 377.340568][T16459] sit0: entered promiscuous mode [ 377.394940][T16459] netlink: 'syz.4.3145': attribute type 1 has an invalid length. [ 377.423609][T16452] netlink: 'syz.4.3145': attribute type 1 has an invalid length. [ 377.536236][T15491] batadv_slave_0: left promiscuous mode [ 377.550391][T15491] batadv_slave_1: left promiscuous mode [ 377.653318][T15491] hsr_slave_0: left promiscuous mode [ 377.707130][T15491] vlan0: left allmulticast mode [ 377.720427][T15491] veth0_vlan: left allmulticast mode [ 377.725852][T15491] vlan0: left promiscuous mode [ 377.732759][T15491] veth1_macvtap: left promiscuous mode [ 377.739198][T15491] veth0_macvtap: left promiscuous mode [ 377.745671][T15491] veth1_vlan: left promiscuous mode [ 377.753256][T15491] veth0_vlan: left promiscuous mode [ 377.810298][ T5186] Bluetooth: hci4: command tx timeout [ 377.821972][T16481] nbd5: detected capacity change from 0 to 127 [ 377.881722][T16489] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.895319][T16489] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.905667][T16489] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.965389][T15491] pim6reg (unregistering): left allmulticast mode [ 378.458744][ T51] block nbd5: Receive control failed (result -32) [ 379.650976][T16514] __nla_validate_parse: 13 callbacks suppressed [ 379.650998][T16514] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3161'. [ 379.699545][T16521] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3164'. [ 379.714900][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 379.727076][T16521] netlink: 9868 bytes leftover after parsing attributes in process `syz.4.3164'. [ 379.854814][T16519] dvmrp1: entered allmulticast mode [ 379.887992][ T51] Bluetooth: hci4: command tx timeout [ 380.091952][T16537] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3169'. [ 380.195376][T16272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.231304][T16272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.238503][T16543] net_ratelimit: 45 callbacks suppressed [ 380.238524][T16543] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 380.272062][T16272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.290120][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'. [ 380.303817][T16272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.337778][T16543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.346905][T16543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.368794][T16543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.376475][T16543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.522252][T16560] netlink: 'syz.3.3174': attribute type 1 has an invalid length. [ 380.545617][T16560] nbd: couldn't find a device at index -373156329 [ 380.616132][T16563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3175'. [ 380.892926][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.978937][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.090815][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.098098][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.165962][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.173451][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.190413][T16583] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 381.246877][T16586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3182'. [ 381.304438][T16583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.335743][ T95] block nbd2: Possible stuck request ffff8880253d0000: control (read@0,1024B). Runtime 210 seconds [ 381.347342][ T95] block nbd2: Possible stuck request ffff8880253d01c0: control (read@1024,1024B). Runtime 210 seconds [ 381.358676][ T95] block nbd2: Possible stuck request ffff8880253d0380: control (read@2048,1024B). Runtime 210 seconds [ 381.372351][ T95] block nbd2: Possible stuck request ffff8880253d0540: control (read@3072,1024B). Runtime 210 seconds [ 381.406073][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3184'. [ 382.024962][T16627] vxcan1 speed is unknown, defaulting to 1000 [ 382.037742][T16628] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 382.065898][T16628] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 382.209703][T16272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.323460][T16636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.358538][T16272] veth0_vlan: entered promiscuous mode [ 382.446302][T16272] veth1_vlan: entered promiscuous mode [ 382.578986][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'. [ 382.738568][T16272] veth0_macvtap: entered promiscuous mode [ 382.786376][T16272] veth1_macvtap: entered promiscuous mode [ 382.885876][T16272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.973664][T16655] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.263184][T16655] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.326848][T16272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.433296][T16655] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.494864][T15491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.529696][T15491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.604689][T16681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 383.605466][T16655] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.645726][T15491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.689571][T15491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.812750][T16687] netlink: 'syz.3.3209': attribute type 10 has an invalid length. [ 383.876537][ T6195] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.894232][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.926715][ T6198] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.948210][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.968417][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.007356][ T6187] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.031363][ T6187] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.046945][ T6187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.056521][ T6187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.300478][T16705] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.378835][T16707] vlan2: entered allmulticast mode [ 384.394308][T16707] gretap0: entered allmulticast mode [ 384.728901][T16720] __nla_validate_parse: 12 callbacks suppressed [ 384.728923][T16720] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3222'. [ 384.905056][T16728] syz.0.3224: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 384.957717][T16728] CPU: 0 UID: 0 PID: 16728 Comm: syz.0.3224 Not tainted syzkaller #0 PREEMPT(full) [ 384.957748][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.957766][T16728] Call Trace: [ 384.957776][T16728] [ 384.957786][T16728] dump_stack_lvl+0x189/0x250 [ 384.957823][T16728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.957851][T16728] ? __pfx__printk+0x10/0x10 [ 384.957883][T16728] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.957911][T16728] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.957939][T16728] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 384.957969][T16728] warn_alloc+0x214/0x310 [ 384.958005][T16728] ? stack_depot_save_flags+0x40/0x860 [ 384.958038][T16728] ? __pfx_warn_alloc+0x10/0x10 [ 384.958075][T16728] ? kasan_save_track+0x4f/0x80 [ 384.958103][T16728] ? xskq_create+0x56/0x170 [ 384.958130][T16728] ? xsk_init_queue+0xb0/0x110 [ 384.958154][T16728] ? xsk_setsockopt+0x4dc/0x8d0 [ 384.958178][T16728] ? do_sock_setsockopt+0x17c/0x1b0 [ 384.958209][T16728] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 384.958227][T16728] ? do_syscall_64+0xfa/0x3b0 [ 384.958257][T16728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.958287][T16728] __vmalloc_node_range_noprof+0x125/0x12f0 [ 384.958355][T16728] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.958396][T16728] ? __kasan_kmalloc+0x93/0xb0 [ 384.958430][T16728] vmalloc_user_noprof+0xad/0xf0 [ 384.958462][T16728] ? xskq_create+0xbf/0x170 [ 384.958490][T16728] xskq_create+0xbf/0x170 [ 384.958521][T16728] xsk_init_queue+0xb0/0x110 [ 384.958553][T16728] xsk_setsockopt+0x4dc/0x8d0 [ 384.958584][T16728] ? __pfx_xsk_setsockopt+0x10/0x10 [ 384.958612][T16728] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.958648][T16728] ? aa_sock_opt_perm+0xff/0x1b0 [ 384.958684][T16728] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 384.958709][T16728] ? __pfx_xsk_setsockopt+0x10/0x10 [ 384.958736][T16728] do_sock_setsockopt+0x17c/0x1b0 [ 384.958778][T16728] __x64_sys_setsockopt+0x13f/0x1b0 [ 384.958806][T16728] do_syscall_64+0xfa/0x3b0 [ 384.958836][T16728] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.958870][T16728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.958893][T16728] ? clear_bhb_loop+0x60/0xb0 [ 384.958934][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.958971][T16728] RIP: 0033:0x7fadeb38ebe9 [ 384.958998][T16728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.959018][T16728] RSP: 002b:00007fadec138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.959049][T16728] RAX: ffffffffffffffda RBX: 00007fadeb5b5fa0 RCX: 00007fadeb38ebe9 [ 384.959071][T16728] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 384.959084][T16728] RBP: 00007fadeb411e19 R08: 0000000000000004 R09: 0000000000000000 [ 384.959098][T16728] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.959118][T16728] R13: 00007fadeb5b6038 R14: 00007fadeb5b5fa0 R15: 00007ffe1847cb98 [ 384.959159][T16728] [ 385.063538][T16728] Mem-Info: [ 385.271257][T16728] active_anon:7496 inactive_anon:0 isolated_anon:0 [ 385.271257][T16728] active_file:3271 inactive_file:39948 isolated_file:0 [ 385.271257][T16728] unevictable:768 dirty:84 writeback:0 [ 385.271257][T16728] slab_reclaimable:12493 slab_unreclaimable:128400 [ 385.271257][T16728] mapped:29346 shmem:1359 pagetables:941 [ 385.271257][T16728] sec_pagetables:0 bounce:0 [ 385.271257][T16728] kernel_misc_reclaimable:0 [ 385.271257][T16728] free:1291537 free_pcp:13936 free_cma:0 [ 385.272761][ T5186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.333740][ T5186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.338513][T16728] Node 0 active_anon:29984kB inactive_anon:0kB active_file:13084kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117384kB dirty:336kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14724kB pagetables:3612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.384134][ T5186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.393165][T16728] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.429178][T16728] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.464527][ T5186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.479425][ T5186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.488910][T16728] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 385.520640][T16728] Node 0 DMA32 free:1254416kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29936kB inactive_anon:0kB active_file:13084kB inactive_file:158016kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:36776kB local_pcp:21204kB free_cma:0kB [ 385.574858][T16728] lowmem_reserve[]: 0 0 1 1 1 [ 385.590645][T16734] vxcan1 speed is unknown, defaulting to 1000 [ 385.592533][T16728] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 385.743439][T16728] lowmem_reserve[]: 0 0 0 0 0 [ 385.772263][T16728] Node 1 Normal free:3896348kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:8640kB free_cma:0kB [ 385.775906][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'. [ 385.824187][ T95] block nbd0: Possible stuck request ffff88802533e000: control (read@0,4096B). Runtime 270 seconds [ 385.847342][T16728] lowmem_reserve[]: 0 0 0 0 0 [ 385.852278][T16728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 385.885555][T16728] Node 0 DMA32: 312*4kB (UME) 82*8kB (UM) 22*16kB (M) 65*32kB (UME) 62*64kB (ME) 39*128kB (UME) 50*256kB (UME) 120*512kB (UME) 41*1024kB (UME) 7*2048kB (UME) 271*4096kB (UM) = 1253872kB [ 385.920414][T16728] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 385.983604][T16728] Node 1 Normal: 191*4kB (UE) 44*8kB (UME) 44*16kB (UME) 60*32kB (UME) 26*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896348kB [ 386.055347][T16728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.079248][T16728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.095518][T16728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.106079][T16728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.122363][T16728] 44575 total pagecache pages [ 386.129628][T16728] 0 pages in swap cache [ 386.133919][T16728] Free swap = 124996kB [ 386.138882][T16728] Total swap = 124996kB [ 386.143363][T16728] 2097051 pages RAM [ 386.147785][T16728] 0 pages HighMem/MovableOnly [ 386.154174][T16728] 425656 pages reserved [ 386.159410][T16728] 0 pages cma reserved [ 386.312848][T16768] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 386.377193][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 386.449200][T16772] : renamed from hsr0 (while UP) [ 386.542646][T16775] netlink: 'syz.1.3239': attribute type 1 has an invalid length. [ 386.560879][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 386.642334][T16734] chnl_net:caif_netlink_parms(): no params data found [ 386.897883][T16792] nbd6: detected capacity change from 0 to 549764202496 [ 386.909498][ T5186] block nbd6: Receive control failed (result -32) [ 386.955641][T16795] IPVS: Error joining to the multicast group [ 386.972473][T16734] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.989956][T16734] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.002613][T16734] bridge_slave_0: entered allmulticast mode [ 387.013929][T16734] bridge_slave_0: entered promiscuous mode [ 387.050235][T16800] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 387.078421][T16734] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.117732][T16734] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.125059][T16734] bridge_slave_1: entered allmulticast mode [ 387.158681][T16734] bridge_slave_1: entered promiscuous mode [ 387.291141][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3250'. [ 387.355373][T16734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.403487][T16734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.546239][T16734] team0: Port device team_slave_0 added [ 387.555846][T16734] team0: Port device team_slave_1 added [ 387.567607][ T5186] Bluetooth: hci5: command tx timeout [ 387.638792][T16734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.645978][T16734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.676886][T16734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.700190][T16734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.708357][T16825] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3253'. [ 387.747681][T16734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.774200][T16734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.794625][T16828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3253'. [ 387.834386][T16825] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3253'. [ 387.873775][T16825] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3253'. [ 388.078658][T16734] hsr_slave_0: entered promiscuous mode [ 388.088460][T16734] hsr_slave_1: entered promiscuous mode [ 388.099070][T16734] debugfs: 'hsr0' already exists in 'hsr' [ 388.104952][T16734] Cannot create hsr debugfs directory [ 388.208275][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'. [ 388.564953][T16856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.991433][T16734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.016029][T16734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.036977][T16734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.060123][T16734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.433112][T16734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.454248][T16892] netlink: 'syz.2.3275': attribute type 32 has an invalid length. [ 389.481983][T16734] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.503492][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.510791][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.531599][T16902] netlink: 'syz.0.3276': attribute type 3 has an invalid length. [ 389.557894][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.565167][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.649812][ T5186] Bluetooth: hci5: command tx timeout [ 389.871941][T16894] infiniband syz!: set active [ 389.876821][T16894] infiniband syz!: added team_slave_0 [ 389.910176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888048f4bc00: rx timeout, send abort [ 389.919966][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888048f4bc00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 389.978676][T16894] RDS/IB: syz!: added [ 389.982791][T16894] smc: adding ib device syz! with port count 1 [ 390.008628][T16894] smc: ib device syz! port 1 has pnetid [ 390.264848][T16734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.416725][T16734] veth0_vlan: entered promiscuous mode [ 390.479125][T16734] veth1_vlan: entered promiscuous mode [ 390.505119][T16931] wireguard: wg1: Could not create IPv4 socket [ 390.579067][T16734] veth0_macvtap: entered promiscuous mode [ 390.612118][T16734] veth1_macvtap: entered promiscuous mode [ 390.676077][T16734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.695965][T16937] __nla_validate_parse: 6 callbacks suppressed [ 390.695985][T16937] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3286'. [ 390.722033][T16734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.780397][ T6195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.812494][ T6195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.856615][ T6195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.872278][ T6195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.129509][ T6195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.153951][ T6195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.331987][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 391.363146][ T6195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.383251][ T6195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.574709][T16965] netlink: 'syz.1.3293': attribute type 4 has an invalid length. [ 391.622544][T16965] netlink: 'syz.1.3293': attribute type 4 has an invalid length. [ 391.660138][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 391.675259][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 391.726847][T16970] bridge_slave_1: left allmulticast mode [ 391.737501][ T5186] Bluetooth: hci5: command tx timeout [ 391.763039][T16970] bridge_slave_1: left promiscuous mode [ 391.802689][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.846006][T16970] bridge_slave_0: left allmulticast mode [ 391.855298][T16970] bridge_slave_0: left promiscuous mode [ 391.879179][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.421239][T16979] sctp: [Deprecated]: syz.3.3298 (pid 16979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.421239][T16979] Use struct sctp_sack_info instead [ 392.572047][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.581689][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.598234][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.632123][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.643634][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.852811][T16985] vxcan1 speed is unknown, defaulting to 1000 [ 393.065236][T17001] tipc: New replicast peer: 255.255.255.255 [ 393.074996][T16999] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 393.092400][T17001] tipc: Enabled bearer , priority 10 [ 393.165187][T17002] netlink: 'syz.1.3303': attribute type 8 has an invalid length. [ 393.229431][T16999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.283386][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3306'. [ 393.298489][T16999] vlan3: entered allmulticast mode [ 393.307844][T16999] veth1: entered allmulticast mode [ 393.599597][T17016] tipc: Started in network mode [ 393.605129][T17016] tipc: Node identity aac847fbe767, cluster identity 4711 [ 393.616759][T17016] tipc: Enabled bearer , priority 0 [ 393.628797][T17016] syzkaller0: entered promiscuous mode [ 393.634507][T17016] syzkaller0: entered allmulticast mode [ 393.673173][T17016] tipc: Resetting bearer [ 393.682763][T17015] tipc: Resetting bearer [ 393.705070][T17015] tipc: Disabling bearer [ 393.807324][ T51] Bluetooth: hci5: command tx timeout [ 394.116942][T17028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.189509][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 394.219186][ T7230] tipc: Node number set to 1322336734 [ 394.224880][T17028] netlink: 'syz.3.3312': attribute type 5 has an invalid length. [ 394.233715][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'. [ 394.251754][T17028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3312'. [ 394.286664][T17033] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3313'. [ 394.469802][T17028] geneve2: entered promiscuous mode [ 394.479789][T17028] geneve2: entered allmulticast mode [ 394.513258][ T6195] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 394.542768][ T6195] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 394.587394][ T6195] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 394.596441][ T6195] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 394.697347][ T51] Bluetooth: hci3: command tx timeout [ 394.733590][T17043] netlink: 'syz.1.3316': attribute type 18 has an invalid length. [ 395.019719][T17040] team0 (unregistering): Port device team_slave_0 removed [ 395.032286][T17040] team0 (unregistering): Port device team_slave_1 removed [ 395.116090][ T1335] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.140797][ T1335] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.154500][T16985] chnl_net:caif_netlink_parms(): no params data found [ 395.187423][ T1335] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.195696][ T1335] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.299231][T17054] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.318515][T17051] tipc: Enabled bearer , priority 0 [ 395.359782][T17055] netlink: 'syz.4.3320': attribute type 8 has an invalid length. [ 395.420615][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3320'. [ 395.453586][T17059] syzkaller0: entered promiscuous mode [ 395.486916][T17059] syzkaller0: entered allmulticast mode [ 395.568100][T17059] tipc: Resetting bearer [ 395.593384][T17065] lo: entered promiscuous mode [ 395.619435][T17065] tunl0: entered promiscuous mode [ 395.643672][T17065] gre0: entered promiscuous mode [ 395.679585][T17065] gretap0: entered promiscuous mode [ 395.716063][T17065] erspan0: entered promiscuous mode [ 395.739188][T17065] ip_vti0: entered promiscuous mode [ 395.771158][T17049] tipc: Resetting bearer [ 395.827790][T17049] tipc: Disabling bearer [ 395.968431][T17081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3327'. [ 396.074434][T16985] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.090644][T16985] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.094591][T17082] netlink: 'syz.4.3326': attribute type 9 has an invalid length. [ 396.118078][T16985] bridge_slave_0: entered allmulticast mode [ 396.130284][T16985] bridge_slave_0: entered promiscuous mode [ 396.221340][T16985] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.247581][T16985] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.254996][T16985] bridge_slave_1: entered allmulticast mode [ 396.279767][T16985] bridge_slave_1: entered promiscuous mode [ 396.466938][T17103] netlink: 'syz.1.3333': attribute type 1 has an invalid length. [ 396.485579][T16985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.580526][T17110] bond2: (slave bridge2): making interface the new active one [ 396.590196][T17110] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 396.626211][T16985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.751700][T16985] team0: Port device team_slave_0 added [ 396.762654][T16985] team0: Port device team_slave_1 added [ 396.780150][ T51] Bluetooth: hci3: command tx timeout [ 396.893246][T17124] netlink: 'syz.1.3340': attribute type 4 has an invalid length. [ 396.914932][T17117] vlan2: entered promiscuous mode [ 396.935758][T17117] bridge0: entered promiscuous mode [ 397.229678][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.244443][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.533316][T16985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.543291][T16985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.574507][T16985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.588978][T16985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.596320][T16985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.629119][T16985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.692962][ T6195] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.716770][ T6195] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 397.757215][ T6195] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.777672][ T6195] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 397.820572][ T6195] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.858972][ T6195] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 397.885429][ T6195] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.911090][ T6195] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 398.220752][T16985] hsr_slave_0: entered promiscuous mode [ 398.272886][T17178] netlink: 'syz.2.3351': attribute type 1 has an invalid length. [ 398.281976][T16985] hsr_slave_1: entered promiscuous mode [ 398.321641][T16985] debugfs: 'hsr0' already exists in 'hsr' [ 398.331798][T16985] Cannot create hsr debugfs directory [ 398.574170][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'. [ 398.585024][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3353'. [ 398.643541][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3354'. [ 398.693183][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3355'. [ 398.704849][T17188] netlink: 'syz.2.3354': attribute type 1 has an invalid length. [ 398.723420][T17188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.771948][T17190] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3356'. [ 398.852271][ T51] Bluetooth: hci3: command tx timeout [ 398.914179][T16985] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.937225][T16985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.081426][T16985] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.111278][T16985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.141716][T17197] tipc: New replicast peer: 255.255.255.255 [ 399.149801][T17197] tipc: Enabled bearer , priority 10 [ 399.245780][T16985] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.302631][T16985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.383837][T17214] netlink: 'syz.2.3365': attribute type 21 has an invalid length. [ 399.405476][T16985] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.425025][T16985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.485607][ T6198] bond1: left promiscuous mode [ 399.511244][ T6198] bridge0: port 4(bond1) entered disabled state [ 399.511971][T17222] netlink: 'syz.4.3367': attribute type 15 has an invalid length. [ 399.545596][ T6198] bridge_slave_1: left allmulticast mode [ 399.559010][ T6198] bridge_slave_1: left promiscuous mode [ 399.571635][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.596755][ T6198] bridge_slave_0: left allmulticast mode [ 399.609371][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3367'. [ 399.626380][ T6198] bridge_slave_0: left promiscuous mode [ 399.632849][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.685963][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3368'. [ 399.702152][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3368'. [ 399.796931][ T6198] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 400.113174][ T6198] dvmrp1 (unregistering): left allmulticast mode [ 400.277348][T13234] tipc: Node number set to 1303332859 [ 400.452631][ T6198] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 400.939557][ T51] Bluetooth: hci3: command tx timeout [ 401.554650][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.564254][ T6198] bond0 (unregistering): Released all slaves [ 401.672319][ T6198] bond1 (unregistering): Released all slaves [ 401.776344][ T6198] bond2 (unregistering): Released all slaves [ 401.892243][ T6198] bond3 (unregistering): Released all slaves [ 402.000089][ T6198] bond4 (unregistering): Released all slaves [ 402.017365][ T6198] bond5 (unregistering): Released all slaves [ 402.129711][ T6198] bond6 (unregistering): Released all slaves [ 402.145446][T17214] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 402.372100][ T6198] tipc: Disabling bearer [ 402.420287][ T6198] tipc: Left network mode [ 402.435873][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3372'. [ 402.469491][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 402.812678][T16985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.836894][T16985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.870343][T16985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.914905][T16985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.388671][T17278] tipc: Started in network mode [ 403.403182][T17278] tipc: Node identity 92456815e668, cluster identity 4711 [ 403.431628][T17278] tipc: Enabled bearer , priority 0 [ 403.465062][T17280] syzkaller0: entered promiscuous mode [ 403.489057][T17280] syzkaller0: entered allmulticast mode [ 403.597772][T17276] tipc: Resetting bearer [ 403.670565][T17276] tipc: Disabling bearer [ 403.780362][ T6198] batadv_slave_0: left promiscuous mode [ 403.834485][ T6198] batadv_slave_1: left promiscuous mode [ 403.888123][ T6198] hsr_slave_0: left promiscuous mode [ 403.917398][ T6198] hsr_slave_1: left promiscuous mode [ 404.077926][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3389'. [ 404.247672][ T6198] pim6reg (unregistering): left allmulticast mode [ 404.606293][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 404.651001][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 405.250931][T17304] tipc: Enabled bearer , priority 0 [ 405.260265][T17311] syzkaller0: entered promiscuous mode [ 405.266374][T17311] syzkaller0: entered allmulticast mode [ 405.273640][T17328] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3392'. [ 405.392898][T16985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.451842][T17317] tipc: Resetting bearer [ 405.492759][T17317] tipc: Disabling bearer [ 405.535548][T17335] netlink: 'syz.3.3394': attribute type 16 has an invalid length. [ 405.547451][T17335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3394'. [ 405.558150][T16985] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.565232][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3395'. [ 405.580233][T17337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3395'. [ 405.615524][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.622748][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.691454][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.698700][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.814105][T17347] tipc: Enabled bearer , priority 0 [ 405.846406][T17347] syzkaller0: entered promiscuous mode [ 405.852584][ T6198] IPVS: stop unused estimator thread 0... [ 405.874091][T17347] syzkaller0: entered allmulticast mode [ 405.892858][T17353] netlink: 'syz.4.3401': attribute type 7 has an invalid length. [ 405.955795][T17353] : entered promiscuous mode [ 405.960892][T17358] netlink: 'syz.2.3402': attribute type 12 has an invalid length. [ 405.986947][T16985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.000427][T16985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.013417][T17360] netlink: 'syz.2.3402': attribute type 1 has an invalid length. [ 406.022499][T17342] tipc: Resetting bearer [ 406.058445][T17342] tipc: Disabling bearer [ 406.096255][T17358] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 406.316963][T17372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3404'. [ 406.347118][T17366] syzkaller0: entered promiscuous mode [ 406.371691][T17366] syzkaller0: entered allmulticast mode [ 406.701096][T17384] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3407'. [ 408.479888][T17381] smc: net device bond0 applied user defined pnetid SYZ2 [ 408.671976][T17384] smc: removing net device bond0 with user defined pnetid SYZ2 [ 408.684286][T17384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.696650][T17384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.707703][T17384] bond0 (unregistering): Released all slaves [ 408.735073][T17403] syz_tun: entered allmulticast mode [ 408.741407][T17403] syz_tun: left allmulticast mode [ 408.751031][T17418] tipc: Enabling of bearer rejected, failed to enable media [ 408.845090][T16985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.999388][T17427] tipc: Enabled bearer , priority 0 [ 409.037628][T16985] veth0_vlan: entered promiscuous mode [ 409.052436][T17427] syzkaller0: entered promiscuous mode [ 409.058261][T17427] syzkaller0: entered allmulticast mode [ 409.145884][T16985] veth1_vlan: entered promiscuous mode [ 409.175887][T17426] tipc: Resetting bearer [ 409.238244][T17426] tipc: Disabling bearer [ 409.357762][T16985] veth0_macvtap: entered promiscuous mode [ 409.435555][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 409.479999][T17458] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.623525][T17458] bridge_slave_1 (unregistering): left allmulticast mode [ 409.665020][T17458] bridge_slave_1 (unregistering): left promiscuous mode [ 409.695791][T17458] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.773558][T16985] veth1_macvtap: entered promiscuous mode [ 409.844221][T16985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.874811][T16985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.913998][ T6202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.925514][ T6202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.941160][ T6202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.955111][ T6202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.094975][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.109766][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.201096][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.231289][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.292730][T17496] syzkaller0: entered promiscuous mode [ 410.301405][T17496] syzkaller0: entered allmulticast mode [ 410.461434][T17504] 8021q: VLANs not supported on wg2 [ 411.069676][T17515] netlink: 'syz.4.3440': attribute type 2 has an invalid length. [ 411.089638][T17515] netlink: 'syz.4.3440': attribute type 2 has an invalid length. [ 411.103214][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3440'. [ 411.305622][T17529] tipc: Enabled bearer , priority 0 [ 411.314993][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 411.407084][T17529] tipc: Disabling bearer [ 411.424182][ T95] block nbd2: Possible stuck request ffff8880253d0000: control (read@0,1024B). Runtime 240 seconds [ 411.436287][ T95] block nbd2: Possible stuck request ffff8880253d01c0: control (read@1024,1024B). Runtime 240 seconds [ 411.447909][ T95] block nbd2: Possible stuck request ffff8880253d0380: control (read@2048,1024B). Runtime 240 seconds [ 411.459718][ T95] block nbd2: Possible stuck request ffff8880253d0540: control (read@3072,1024B). Runtime 240 seconds [ 411.585837][T17547] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 411.603660][T17547] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 411.922633][T17565] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3458'. [ 411.930016][T17562] tipc: Enabled bearer , priority 0 [ 411.940026][T17562] syzkaller0: entered promiscuous mode [ 411.945541][T17562] syzkaller0: entered allmulticast mode [ 411.987273][T17567] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3458'. [ 411.996901][T17559] tipc: Resetting bearer [ 412.025243][T17559] tipc: Disabling bearer [ 412.269238][T17573] vlan2: entered allmulticast mode [ 412.274439][T17573] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 412.284475][T17553] vxcan1 speed is unknown, defaulting to 1000 [ 412.438283][T17577] netlink: 'syz.0.3461': attribute type 2 has an invalid length. [ 412.503409][T17581] tipc: Enabled bearer , priority 0 [ 412.541240][T17581] syzkaller0: entered promiscuous mode [ 412.546955][T17581] syzkaller0: entered allmulticast mode [ 412.634278][T17581] tipc: Resetting bearer [ 412.667450][T17579] tipc: Resetting bearer [ 412.711940][T17579] tipc: Disabling bearer [ 412.765598][T17587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3466'. [ 412.806309][T17589] netlink: 'syz.0.3467': attribute type 10 has an invalid length. [ 412.844202][T17589] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 412.994766][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'. [ 413.006998][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'. [ 413.174341][T17601] tipc: Enabled bearer , priority 0 [ 413.202042][T17601] syzkaller0: entered promiscuous mode [ 413.208552][T17605] netlink: 'syz.4.3471': attribute type 11 has an invalid length. [ 413.217572][T17601] syzkaller0: entered allmulticast mode [ 413.262951][T17600] tipc: Resetting bearer [ 413.295495][T17600] tipc: Disabling bearer [ 413.895163][T17626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.935690][T17626] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3478'. [ 414.335861][T17637] sctp: [Deprecated]: syz.3.3483 (pid 17637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.335861][T17637] Use struct sctp_sack_info instead [ 414.564888][T17646] tipc: Enabled bearer , priority 0 [ 414.649818][T17646] syzkaller0: entered promiscuous mode [ 414.666954][T17646] syzkaller0: entered allmulticast mode [ 414.703757][T17651] delete_channel: no stack [ 414.732856][T17646] tipc: Resetting bearer [ 414.754384][T17645] tipc: Resetting bearer [ 414.804590][T17645] tipc: Disabling bearer [ 414.948555][T17661] : entered promiscuous mode [ 414.958493][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3491'. [ 414.986606][T17664] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3492'. [ 415.139503][T17673] tipc: Enabling of bearer rejected, failed to enable media [ 415.232181][T17678] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3498'. [ 415.294089][T17679] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3498'. [ 415.323280][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 415.352737][T17688] netlink: 'syz.2.3502': attribute type 1 has an invalid length. [ 415.362892][T17679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3498'. [ 415.402368][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.510867][T17701] netlink: 'syz.2.3506': attribute type 1 has an invalid length. [ 415.595061][T17701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.798891][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 415.819397][T17718] netlink: 'syz.2.3508': attribute type 1 has an invalid length. [ 415.882312][T17718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.898738][ T95] block nbd0: Possible stuck request ffff88802533e000: control (read@0,4096B). Runtime 300 seconds [ 415.932797][T17720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.990738][T17718] bond2: (slave gretap1): making interface the new active one [ 415.999806][T17718] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 416.159516][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3513'. [ 416.315259][T17737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.524160][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'. [ 416.575321][T17753] netlink: 'syz.2.3520': attribute type 12 has an invalid length. [ 416.760650][T17761] netlink: 'syz.1.3523': attribute type 33 has an invalid length. [ 416.779852][T17768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3523'. [ 416.810493][T17763] netlink: 'syz.0.3525': attribute type 64 has an invalid length. [ 416.842268][T17763] netlink: 'syz.0.3525': attribute type 3 has an invalid length. [ 417.005999][T17773] tipc: Enabled bearer , priority 0 [ 417.034195][T17777] sch_tbf: burst 127 is lower than device xfrm0 mtu (1500) ! [ 417.053179][T17773] tipc: Resetting bearer [ 417.135433][T17772] tipc: Disabling bearer [ 417.165014][ T6198] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.195464][ T6198] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.268292][ T6198] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.277069][ T6198] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.355913][T17796] netlink: 'syz.1.3536': attribute type 1 has an invalid length. [ 417.693942][ T6198] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.713093][ T6198] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.771553][ T6198] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.814033][ T6198] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.120555][T17837] tipc: Started in network mode [ 418.144872][T17837] tipc: Node identity 22dfbcf633ba, cluster identity 4711 [ 418.162042][T17837] tipc: Enabled bearer , priority 0 [ 418.215724][T17837] tipc: Resetting bearer [ 418.258871][T17836] tipc: Disabling bearer [ 418.469589][T17852] netlink: 'syz.0.3554': attribute type 24 has an invalid length. [ 418.515740][T17854] netlink: 'syz.1.3555': attribute type 1 has an invalid length. [ 418.798908][T17869] netlink: 'syz.1.3558': attribute type 5 has an invalid length. [ 418.867655][T17865] netlink: 'syz.1.3558': attribute type 5 has an invalid length. [ 418.877974][T17869] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 419.113239][T17892] vlan3: entered promiscuous mode [ 419.144462][T17894] vlan3: entered promiscuous mode [ 420.139188][T17947] IPVS: Scheduler module ip_vs_sip not found [ 420.231775][ T5869] IPVS: starting estimator thread 0... [ 420.253617][T17960] __nla_validate_parse: 13 callbacks suppressed [ 420.253637][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3587'. [ 420.338507][T17957] IPVS: using max 24 ests per chain, 57600 per kthread [ 421.388728][T17989] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 421.450238][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3597'. [ 421.483256][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3597'. [ 421.517201][T17989] bond3: entered promiscuous mode [ 421.522871][T17989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.675703][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'. [ 421.703328][T17998] smc: adding net device bond0 with user defined pnetid SYZ2 [ 421.739339][T17998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.793484][T18000] vlan3: entered allmulticast mode [ 421.802889][T18000] veth1: entered allmulticast mode [ 421.812689][T18000] bond0: (slave vlan3): Opening slave failed [ 421.869665][T18013] validate_nla: 1 callbacks suppressed [ 421.869687][T18013] netlink: 'syz.4.3603': attribute type 4 has an invalid length. [ 422.531875][T18055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3616'. [ 422.573179][T18056] netlink: 'syz.1.3615': attribute type 1 has an invalid length. [ 422.791976][T18068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3615'. [ 422.803514][T18068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.877929][T18059] veth5: entered promiscuous mode [ 422.889729][T18059] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 423.385160][T18083] tipc: Enabled bearer , priority 0 [ 423.393112][T18083] syzkaller0: entered promiscuous mode [ 423.399341][T18083] syzkaller0: entered allmulticast mode [ 423.433865][T18087] netlink: 'syz.3.3623': attribute type 8 has an invalid length. [ 423.453660][T18083] tipc: Resetting bearer [ 423.464896][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3621'. [ 423.476196][T18081] tipc: Resetting bearer [ 423.516779][T18081] tipc: Disabling bearer [ 423.658628][T18061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.665464][T18061] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 423.687372][T18095] netlink: 'syz.1.3624': attribute type 1 has an invalid length. [ 423.810576][T18061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.845349][T18061] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 423.993733][T18061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.029910][T18061] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 424.114789][T18061] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 424.121568][T18061] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 424.133407][T18061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.140179][T18061] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 424.238350][T18115] tipc: Enabling of bearer rejected, failed to enable media [ 424.365918][T18116] netlink: 'syz.2.3632': attribute type 11 has an invalid length. [ 424.392352][T18116] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3632'. [ 424.692084][T18142] pim6reg1: entered promiscuous mode [ 424.705859][T18142] pim6reg1: entered allmulticast mode [ 424.774702][T18149] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3641'. [ 424.820153][T18149] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 424.871939][T18149] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 425.906828][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3659'. [ 425.958654][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3659'. [ 425.973816][T18213] netlink: 400 bytes leftover after parsing attributes in process `syz.2.3661'. [ 426.192548][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'. [ 426.453388][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 426.717777][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 426.883373][T18269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3684'. [ 427.065688][T18269] hsr_slave_1 (unregistering): left promiscuous mode [ 427.210694][T18282] netlink: 'syz.0.3687': attribute type 33 has an invalid length. [ 427.236435][T18282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3687'. [ 427.262257][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 428.300709][T18342] netlink: 'syz.4.3703': attribute type 1 has an invalid length. [ 428.346873][T18344] vlan3: entered allmulticast mode [ 428.369236][T18344] veth1: entered allmulticast mode [ 428.410112][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'. [ 428.473131][T18342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 428.583136][T18351] tipc: Enabled bearer , priority 0 [ 428.591271][T18347] syzkaller0: entered promiscuous mode [ 428.597875][T18347] syzkaller0: entered allmulticast mode [ 428.698390][T18349] tipc: Resetting bearer [ 428.739296][T18346] tipc: Resetting bearer [ 428.812811][T18346] tipc: Disabling bearer [ 429.672143][T18423] netlink: 'syz.3.3730': attribute type 1 has an invalid length. [ 429.994330][T18442] netlink: 'syz.2.3736': attribute type 1 has an invalid length. [ 430.018726][T18444] netlink: 'syz.2.3736': attribute type 1 has an invalid length. [ 430.210559][T18463] sock: sock_set_timeout: `syz.0.3740' (pid 18463) tries to set negative timeout [ 430.566211][T18473] syzkaller0: entered promiscuous mode [ 430.573011][T18473] syzkaller0: entered allmulticast mode [ 430.601774][T18478] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.417353][T18494] tipc: Enabling of bearer rejected, failed to enable media [ 432.551936][T18510] tunl0: entered promiscuous mode [ 432.584935][T18510] netlink: 'syz.0.3752': attribute type 3 has an invalid length. [ 432.595717][T18510] __nla_validate_parse: 9 callbacks suppressed [ 432.595739][T18510] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3752'. [ 432.658380][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3753'. [ 433.162554][T18550] pimreg3: entered allmulticast mode [ 433.189070][T18553] tipc: Enabled bearer , priority 0 [ 433.225790][T18553] syzkaller0: entered promiscuous mode [ 433.257333][T18553] syzkaller0: entered allmulticast mode [ 433.333155][T18553] tipc: Resetting bearer [ 433.344238][T18551] tipc: Resetting bearer [ 433.388750][T18551] tipc: Disabling bearer [ 433.482809][T18571] netlink: 'syz.4.3768': attribute type 18 has an invalid length. [ 433.534231][ T6185] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.553345][ T6185] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.611702][ T6185] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.642815][ T6185] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.719122][T18580] netlink: 'syz.3.3772': attribute type 29 has an invalid length. [ 433.743409][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 433.760099][T18583] netlink: 'syz.4.3773': attribute type 1 has an invalid length. [ 433.867606][T18583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 433.984047][T18596] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3777'. [ 434.233593][T18605] netlink: 'syz.0.3781': attribute type 3 has an invalid length. [ 434.271705][T18605] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3781'. [ 434.305226][T18605] netlink: 'syz.0.3781': attribute type 3 has an invalid length. [ 434.325525][T18614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3782'. [ 434.347920][T18605] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3781'. [ 434.364524][T18605] netlink: 'syz.0.3781': attribute type 3 has an invalid length. [ 434.395511][T18605] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3781'. [ 434.436735][T18605] netlink: 'syz.0.3781': attribute type 3 has an invalid length. [ 434.459402][T18605] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3781'. [ 434.488300][T18605] netlink: 'syz.0.3781': attribute type 3 has an invalid length. [ 434.508795][T18605] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3781'. [ 434.535017][T18605] netlink: 'syz.0.3781': attribute type 3 has an invalid length. [ 435.484764][T18679] GUP no longer grows the stack in syz.4.3804 (18679): 200000003000-20000000a000 (200000001000) [ 435.497324][T18679] CPU: 1 UID: 0 PID: 18679 Comm: syz.4.3804 Not tainted syzkaller #0 PREEMPT(full) [ 435.497370][T18679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.497392][T18679] Call Trace: [ 435.497405][T18679] [ 435.497419][T18679] dump_stack_lvl+0x189/0x250 [ 435.497459][T18679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.497486][T18679] ? __pfx__printk+0x10/0x10 [ 435.497513][T18679] ? find_vma+0xe7/0x160 [ 435.497542][T18679] ? __lock_acquire+0xab9/0xd20 [ 435.497589][T18679] __get_user_pages+0x24d0/0x2ce0 [ 435.497618][T18679] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 435.497680][T18679] ? rcu_is_watching+0x15/0xb0 [ 435.497709][T18679] __gup_longterm_locked+0xde9/0x1660 [ 435.497753][T18679] ? sanity_check_pinned_pages+0x123a/0x1300 [ 435.497789][T18679] gup_fast_fallback+0x1e6a/0x2010 [ 435.497856][T18679] ? __pfx_gup_fast_fallback+0x10/0x10 [ 435.497882][T18679] ? stack_trace_save+0x9c/0xe0 [ 435.497907][T18679] ? __pfx_stack_trace_save+0x10/0x10 [ 435.497953][T18679] ? pin_user_pages_fast+0x4d/0xb0 [ 435.497984][T18679] iov_iter_extract_pages+0x35a/0x5e0 [ 435.498021][T18679] extract_iter_to_sg+0xe46/0x24e0 [ 435.498074][T18679] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 435.498130][T18679] ? __asan_memset+0x22/0x50 [ 435.498167][T18679] af_alg_get_rsgl+0x436/0x810 [ 435.498216][T18679] aead_recvmsg+0x4cc/0x13f0 [ 435.498274][T18679] ? __pfx_aead_recvmsg+0x10/0x10 [ 435.498309][T18679] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 435.498334][T18679] ? __pfx_aead_recvmsg+0x10/0x10 [ 435.498365][T18679] sock_recvmsg_nosec+0x186/0x1c0 [ 435.498399][T18679] ____sys_recvmsg+0x3aa/0x460 [ 435.498434][T18679] ? __pfx_____sys_recvmsg+0x10/0x10 [ 435.498477][T18679] ? import_iovec+0x74/0xa0 [ 435.498507][T18679] ___sys_recvmsg+0x1b5/0x510 [ 435.498538][T18679] ? __pfx____sys_recvmsg+0x10/0x10 [ 435.498601][T18679] ? __might_fault+0xb0/0x130 [ 435.498636][T18679] do_recvmmsg+0x307/0x770 [ 435.498670][T18679] ? __pfx_do_recvmmsg+0x10/0x10 [ 435.498691][T18679] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 435.498741][T18679] ? __pfx_do_futex+0x10/0x10 [ 435.498788][T18679] __x64_sys_recvmmsg+0x190/0x240 [ 435.498816][T18679] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 435.498837][T18679] ? rcu_is_watching+0x15/0xb0 [ 435.498864][T18679] ? do_syscall_64+0xbe/0x3b0 [ 435.498900][T18679] do_syscall_64+0xfa/0x3b0 [ 435.498931][T18679] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.498961][T18679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.498983][T18679] ? clear_bhb_loop+0x60/0xb0 [ 435.499011][T18679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.499032][T18679] RIP: 0033:0x7fd809d8ebe9 [ 435.499052][T18679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.499071][T18679] RSP: 002b:00007fd80abcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 435.499094][T18679] RAX: ffffffffffffffda RBX: 00007fd809fb5fa0 RCX: 00007fd809d8ebe9 [ 435.499110][T18679] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b [ 435.499123][T18679] RBP: 00007fd809e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 435.499136][T18679] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 435.499155][T18679] R13: 00007fd809fb6038 R14: 00007fd809fb5fa0 R15: 00007ffc877c2138 [ 435.499191][T18679] [ 435.948386][T18687] tipc: Enabled bearer , priority 0 [ 435.965294][T18686] tipc: Disabling bearer [ 436.093609][T18695] netlink: 'syz.2.3810': attribute type 11 has an invalid length. [ 436.101792][T18695] netlink: 'syz.2.3810': attribute type 11 has an invalid length. [ 436.904414][T18738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.945407][T18742] unsupported nlmsg_type 40 [ 437.662304][T18777] __nla_validate_parse: 37 callbacks suppressed [ 437.662325][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 437.682986][T18777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3834'. [ 437.697445][T18777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3834'. [ 438.390901][T18823] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 438.536131][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3849'. [ 438.545012][T18829] FAULT_INJECTION: forcing a failure. [ 438.545012][T18829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.559335][T18829] CPU: 1 UID: 0 PID: 18829 Comm: syz.3.3851 Not tainted syzkaller #0 PREEMPT(full) [ 438.559365][T18829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.559378][T18829] Call Trace: [ 438.559387][T18829] [ 438.559396][T18829] dump_stack_lvl+0x189/0x250 [ 438.559427][T18829] ? __pfx____ratelimit+0x10/0x10 [ 438.559457][T18829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.559491][T18829] ? __pfx__printk+0x10/0x10 [ 438.559536][T18829] should_fail_ex+0x414/0x560 [ 438.559570][T18829] _copy_to_user+0x31/0xb0 [ 438.559597][T18829] simple_read_from_buffer+0xe1/0x170 [ 438.559641][T18829] proc_fail_nth_read+0x1b3/0x220 [ 438.559669][T18829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.559697][T18829] ? rw_verify_area+0x2a6/0x4d0 [ 438.559723][T18829] ? __lock_acquire+0xab9/0xd20 [ 438.559752][T18829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.559779][T18829] vfs_read+0x200/0xa30 [ 438.559805][T18829] ? fdget_pos+0x247/0x320 [ 438.559829][T18829] ? __pfx___mutex_lock+0x10/0x10 [ 438.559862][T18829] ? __pfx_vfs_read+0x10/0x10 [ 438.559891][T18829] ? __fget_files+0x2a/0x420 [ 438.559929][T18829] ? __fget_files+0x3a0/0x420 [ 438.559960][T18829] ? __fget_files+0x2a/0x420 [ 438.560003][T18829] ksys_read+0x145/0x250 [ 438.560034][T18829] ? __pfx_ksys_read+0x10/0x10 [ 438.560059][T18829] ? rcu_is_watching+0x15/0xb0 [ 438.560087][T18829] ? do_syscall_64+0xbe/0x3b0 [ 438.560122][T18829] do_syscall_64+0xfa/0x3b0 [ 438.560150][T18829] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.560178][T18829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.560198][T18829] ? clear_bhb_loop+0x60/0xb0 [ 438.560225][T18829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.560245][T18829] RIP: 0033:0x7f2e2098d5fc [ 438.560264][T18829] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 438.560282][T18829] RSP: 002b:00007f2e21837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.560304][T18829] RAX: ffffffffffffffda RBX: 00007f2e20bb5fa0 RCX: 00007f2e2098d5fc [ 438.560319][T18829] RDX: 000000000000000f RSI: 00007f2e218370a0 RDI: 0000000000000004 [ 438.560332][T18829] RBP: 00007f2e21837090 R08: 0000000000000000 R09: 0000000000000000 [ 438.560344][T18829] R10: 0000000010048095 R11: 0000000000000246 R12: 0000000000000001 [ 438.560358][T18829] R13: 00007f2e20bb6038 R14: 00007f2e20bb5fa0 R15: 00007ffcf59d1618 [ 438.560393][T18829] [ 438.819099][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3852'. [ 438.890099][T18837] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3854'. [ 438.950303][T18840] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3854'. [ 439.228042][T18853] validate_nla: 29 callbacks suppressed [ 439.228065][T18853] netlink: 'syz.0.3858': attribute type 15 has an invalid length. [ 439.253785][T18853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3858'. [ 439.370937][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3859'. [ 439.382563][T18862] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.419308][T18862] sock: sock_timestamping_bind_phc: sock not bind to device [ 439.667037][ T43] IPVS: starting estimator thread 0... [ 439.767316][T18875] IPVS: using max 24 ests per chain, 57600 per kthread [ 439.798431][T18883] netlink: 'syz.0.3865': attribute type 11 has an invalid length. [ 439.806328][T18883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3865'. [ 439.924391][T18887] tipc: Enabled bearer , priority 0 [ 439.936644][T18887] syzkaller0: entered promiscuous mode [ 439.957446][T18887] syzkaller0: entered allmulticast mode [ 439.975590][T18887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 440.012802][T18896] netlink: 'syz.2.3870': attribute type 11 has an invalid length. [ 440.073450][T18887] tipc: Resetting bearer [ 440.096629][T18886] tipc: Resetting bearer [ 440.165598][T18886] tipc: Disabling bearer [ 440.634421][T18930] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 440.921975][T18958] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 440.982430][T18959] netlink: 'syz.0.3888': attribute type 2 has an invalid length. [ 441.055382][T18959] tap0: tun_chr_ioctl cmd 2148553947 [ 441.125339][T18970] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 441.141311][T18972] tipc: Enabled bearer , priority 0 [ 441.157036][T18972] syzkaller0: entered promiscuous mode [ 441.164073][T18972] syzkaller0: entered allmulticast mode [ 441.345282][T18983] gre1: entered promiscuous mode [ 441.358717][T18983] gre1: entered allmulticast mode [ 441.493693][ T95] block nbd2: Possible stuck request ffff8880253d0000: control (read@0,1024B). Runtime 270 seconds [ 441.505448][ T95] block nbd2: Possible stuck request ffff8880253d01c0: control (read@1024,1024B). Runtime 270 seconds [ 441.516780][ T95] block nbd2: Possible stuck request ffff8880253d0380: control (read@2048,1024B). Runtime 270 seconds [ 441.528492][ T95] block nbd2: Possible stuck request ffff8880253d0540: control (read@3072,1024B). Runtime 270 seconds [ 441.900976][T19005] hsr_slave_1 (unregistering): left promiscuous mode [ 441.913833][T18965] tipc: Resetting bearer [ 441.941244][T18965] tipc: Disabling bearer [ 442.114634][T19013] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 442.135025][T19013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.255608][T19019] [ 442.258064][T19019] ====================================================== [ 442.265095][T19019] WARNING: possible circular locking dependency detected [ 442.272162][T19019] syzkaller #0 Not tainted [ 442.276579][T19019] ------------------------------------------------------ [ 442.283610][T19019] syz.3.3909/19019 is trying to acquire lock: [ 442.289693][T19019] ffff8880272abe70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720 [ 442.299549][T19019] [ 442.299549][T19019] but task is already holding lock: [ 442.306915][T19019] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 442.316409][T19019] [ 442.316409][T19019] which lock already depends on the new lock. [ 442.316409][T19019] [ 442.326901][T19019] [ 442.326901][T19019] the existing dependency chain (in reverse order) is: [ 442.335934][T19019] [ 442.335934][T19019] -> #2 (nr_node_list_lock){+...}-{3:3}: [ 442.343771][T19019] lock_acquire+0x120/0x360 [ 442.348820][T19019] _raw_spin_lock_bh+0x36/0x50 [ 442.354131][T19019] nr_rt_device_down+0xa9/0x720 [ 442.359516][T19019] nr_device_event+0x137/0x150 [ 442.364816][T19019] notifier_call_chain+0x1b3/0x3e0 [ 442.370470][T19019] __dev_notify_flags+0x18d/0x2e0 [ 442.376054][T19019] netif_change_flags+0xe8/0x1a0 [ 442.381600][T19019] dev_change_flags+0x130/0x260 [ 442.386983][T19019] dev_ioctl+0x7b4/0x1150 [ 442.391843][T19019] sock_do_ioctl+0x22c/0x300 [ 442.396961][T19019] sock_ioctl+0x576/0x790 [ 442.401815][T19019] __se_sys_ioctl+0xfc/0x170 [ 442.406931][T19019] do_syscall_64+0xfa/0x3b0 [ 442.411965][T19019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.418381][T19019] [ 442.418381][T19019] -> #1 (nr_neigh_list_lock){+...}-{3:3}: [ 442.426294][T19019] lock_acquire+0x120/0x360 [ 442.431501][T19019] _raw_spin_lock_bh+0x36/0x50 [ 442.436792][T19019] nr_remove_neigh+0x25/0xe0 [ 442.441914][T19019] nr_add_node+0x1d9f/0x2570 [ 442.447123][T19019] nr_rt_ioctl+0xc12/0xd50 [ 442.452076][T19019] sock_do_ioctl+0xd9/0x300 [ 442.457114][T19019] sock_ioctl+0x576/0x790 [ 442.462073][T19019] __se_sys_ioctl+0xfc/0x170 [ 442.467196][T19019] do_syscall_64+0xfa/0x3b0 [ 442.472334][T19019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.478865][T19019] [ 442.478865][T19019] -> #0 (&nr_node->node_lock){+...}-{3:3}: [ 442.486867][T19019] validate_chain+0xb9b/0x2140 [ 442.492240][T19019] __lock_acquire+0xab9/0xd20 [ 442.497456][T19019] lock_acquire+0x120/0x360 [ 442.502487][T19019] _raw_spin_lock_bh+0x36/0x50 [ 442.507777][T19019] nr_rt_device_down+0x12a/0x720 [ 442.513262][T19019] nr_device_event+0x137/0x150 [ 442.518570][T19019] notifier_call_chain+0x1b3/0x3e0 [ 442.524221][T19019] __dev_notify_flags+0x18d/0x2e0 [ 442.529894][T19019] netif_change_flags+0xe8/0x1a0 [ 442.535604][T19019] dev_change_flags+0x130/0x260 [ 442.541188][T19019] dev_ioctl+0x7b4/0x1150 [ 442.546052][T19019] sock_do_ioctl+0x22c/0x300 [ 442.551271][T19019] sock_ioctl+0x576/0x790 [ 442.556124][T19019] __se_sys_ioctl+0xfc/0x170 [ 442.561248][T19019] do_syscall_64+0xfa/0x3b0 [ 442.566286][T19019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.572704][T19019] [ 442.572704][T19019] other info that might help us debug this: [ 442.572704][T19019] [ 442.582934][T19019] Chain exists of: [ 442.582934][T19019] &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock [ 442.582934][T19019] [ 442.596767][T19019] Possible unsafe locking scenario: [ 442.596767][T19019] [ 442.604310][T19019] CPU0 CPU1 [ 442.609675][T19019] ---- ---- [ 442.615142][T19019] lock(nr_node_list_lock); [ 442.619736][T19019] lock(nr_neigh_list_lock); [ 442.626940][T19019] lock(nr_node_list_lock); [ 442.634077][T19019] lock(&nr_node->node_lock); [ 442.638845][T19019] [ 442.638845][T19019] *** DEADLOCK *** [ 442.638845][T19019] [ 442.646982][T19019] 3 locks held by syz.3.3909/19019: [ 442.652177][T19019] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 442.661166][T19019] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 442.671192][T19019] #2: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 442.681309][T19019] [ 442.681309][T19019] stack backtrace: [ 442.687395][T19019] CPU: 1 UID: 0 PID: 19019 Comm: syz.3.3909 Not tainted syzkaller #0 PREEMPT(full) [ 442.687420][T19019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.687433][T19019] Call Trace: [ 442.687441][T19019] [ 442.687450][T19019] dump_stack_lvl+0x189/0x250 [ 442.687479][T19019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.687504][T19019] ? __pfx__printk+0x10/0x10 [ 442.687535][T19019] ? print_lock_name+0xde/0x100 [ 442.687564][T19019] print_circular_bug+0x2ee/0x310 [ 442.687589][T19019] check_noncircular+0x134/0x160 [ 442.687615][T19019] validate_chain+0xb9b/0x2140 [ 442.687648][T19019] __lock_acquire+0xab9/0xd20 [ 442.687677][T19019] ? nr_rt_device_down+0x12a/0x720 [ 442.687697][T19019] lock_acquire+0x120/0x360 [ 442.687721][T19019] ? nr_rt_device_down+0x12a/0x720 [ 442.687746][T19019] ? nr_rt_device_down+0x12a/0x720 [ 442.687766][T19019] _raw_spin_lock_bh+0x36/0x50 [ 442.687787][T19019] ? nr_rt_device_down+0x12a/0x720 [ 442.687807][T19019] nr_rt_device_down+0x12a/0x720 [ 442.687830][T19019] nr_device_event+0x137/0x150 [ 442.687849][T19019] notifier_call_chain+0x1b3/0x3e0 [ 442.687871][T19019] __dev_notify_flags+0x18d/0x2e0 [ 442.687900][T19019] ? __pfx___dev_notify_flags+0x10/0x10 [ 442.687926][T19019] ? __dev_change_flags+0x4cc/0x6d0 [ 442.687945][T19019] ? __pfx___dev_change_flags+0x10/0x10 [ 442.687961][T19019] ? full_name_hash+0x92/0xe0 [ 442.687981][T19019] netif_change_flags+0xe8/0x1a0 [ 442.687999][T19019] dev_change_flags+0x130/0x260 [ 442.688028][T19019] dev_ioctl+0x7b4/0x1150 [ 442.688054][T19019] sock_do_ioctl+0x22c/0x300 [ 442.688076][T19019] ? __pfx_sock_do_ioctl+0x10/0x10 [ 442.688095][T19019] ? __lock_acquire+0xab9/0xd20 [ 442.688127][T19019] sock_ioctl+0x576/0x790 [ 442.688148][T19019] ? __pfx_sock_ioctl+0x10/0x10 [ 442.688168][T19019] ? __fget_files+0x2a/0x420 [ 442.688193][T19019] ? __fget_files+0x3a0/0x420 [ 442.688219][T19019] ? __fget_files+0x2a/0x420 [ 442.688253][T19019] ? bpf_lsm_file_ioctl+0x9/0x20 [ 442.688275][T19019] ? __pfx_sock_ioctl+0x10/0x10 [ 442.688295][T19019] __se_sys_ioctl+0xfc/0x170 [ 442.688317][T19019] do_syscall_64+0xfa/0x3b0 [ 442.688341][T19019] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.688364][T19019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.688381][T19019] ? clear_bhb_loop+0x60/0xb0 [ 442.688400][T19019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.688417][T19019] RIP: 0033:0x7f2e2098ebe9 [ 442.688433][T19019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.688448][T19019] RSP: 002b:00007f2e21837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.688466][T19019] RAX: ffffffffffffffda RBX: 00007f2e20bb5fa0 RCX: 00007f2e2098ebe9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 442.688480][T19019] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 442.688492][T19019] RBP: 00007f2e20a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 442.688503][T19019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.688513][T19019] R13: 00007f2e20bb6038 R14: 00007f2e20bb5fa0 R15: 00007ffcf59d1618 [ 442.688533][T19019] [ 443.763722][ T6198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.878616][ T6198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.953365][ T6198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.009241][ T6198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.070000][ T6198] bridge_slave_0: left allmulticast mode [ 444.075668][ T6198] bridge_slave_0: left promiscuous mode [ 444.082122][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.189539][ T6198] bond2 (unregistering): (slave gretap1): Releasing active interface [ 444.346731][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.357543][ T6198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.367259][ T6198] bond0 (unregistering): Released all slaves [ 444.457088][ T6198] bond1 (unregistering): Released all slaves [ 444.469530][ T6198] bond2 (unregistering): Released all slaves [ 444.522927][ T6198] tipc: Left network mode [ 444.901464][ T6198] hsr_slave_0: left promiscuous mode [ 444.907597][ T6198] hsr_slave_1: left promiscuous mode [ 444.913342][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.923119][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.930670][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.942435][ T6198] veth1_macvtap: left promiscuous mode [ 444.948669][ T6198] veth0_macvtap: left promiscuous mode [ 445.181796][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 445.218165][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 445.225987][ T6185] smc: removing ib device syz! [ 445.329419][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.971512][ T6198] IPVS: stop unused estimator thread 0... [ 445.998790][ T95] block nbd0: Possible stuck request ffff88802533e000: control (read@0,4096B). Runtime 330 seconds [ 446.052584][ T6198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.062942][ T6198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.102850][ T6198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.113271][ T6198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.172576][ T6198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.183160][ T6198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.227903][ T6198] bond0: (slave netdevsim0): Releasing backup interface [ 446.236256][ T6198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.246647][ T6198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.323436][ T6198] bridge_slave_1: left allmulticast mode [ 446.329236][ T6198] bridge_slave_1: left promiscuous mode [ 446.334947][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.344907][ T6198] bridge_slave_0: left allmulticast mode [ 446.350785][ T6198] bridge_slave_0: left promiscuous mode [ 446.356479][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.494572][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.504834][ T6198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.514775][ T6198] bond0 (unregistering): Released all slaves [ 446.554612][ T6198] : left promiscuous mode [ 446.588803][ T6198] tipc: Left network mode [ 446.777436][ T6198] hsr_slave_0: left promiscuous mode [ 446.783534][ T6198] hsr_slave_1: left promiscuous mode [ 446.791301][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.799962][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.807867][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.815361][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.824974][ T6198] veth1_macvtap: left promiscuous mode [ 446.830663][ T6198] veth0_macvtap: left promiscuous mode [ 446.836213][ T6198] veth1_vlan: left promiscuous mode [ 446.841736][ T6198] veth0_vlan: left promiscuous mode [ 447.005942][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 447.032182][ T6198] team0 (unregistering): Port device team_slave_0 removed