last executing test programs: 3.357361789s ago: executing program 0 (id=3639): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001bc0)={@ifindex, 0xffffffffffffffff, 0x3, 0x2008}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000616f54ffffff7f71120200000000409500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 3.229232797s ago: executing program 0 (id=3643): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random='\x00\x00\x00\x00\x00 ', @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000", @ANYRES8=r1, @ANYRES8], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000140002007767310000000000000000000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}}, 0x18) sendmmsg$unix(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="03b2", 0x2}], 0x1, 0x0, 0x0, 0xc00c051}}], 0x1, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7fe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.171943103s ago: executing program 3 (id=3645): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@bcast, @default, @bcast, @bcast, @default, @default]}, &(0x7f00000000c0)=0xfffffed4, 0x800) close(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') ioctl$FIBMAP(r1, 0x1, &(0x7f0000000800)=0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3.146638209s ago: executing program 3 (id=3646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="34def8dc47f7b822d0190f103e15c7b8f3495c0ad74ba0a5df4c67cd142f448ca9a07989acd16d343d180ed4a9a769eb8c195679cce238b9726014fd1014c1cf8456a38ca9bed23d6a2c8560bf2d4e6821fe387f9dc829c6505e54b4177f5600475a8a381e8ae1ac4b03693d302dbbbbf48e256caa87c58f45a840630df618e4c6dbe7adaa621e20ed6f2bfd9f82dbb578e36625984fe9989c51d08471dc09d36422a8f53c800bfaf9f1d5", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@netfilter={0x3, 0x0, 0x0, 0x1}}, 0x1c) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x7) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x9, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1fd, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="71920ae485b6801f0b0a8340af23ae4f17014c9fd205e04df09f36074c3355cd0ae3c5413985aacca53e4baecb5641f2f11f992ae8265050b46aa4e0af4175ac57b61dcb1efb39fae97362b678e51854da7977ed183304aed94171d41d4f22cea87111b503bda4f5bb5cf6374e46b656798fd6e7ab1cd1fc9ae8b33fcaa8415feef5766c6ebc4262b1f279130c041732082d87cde53cc238cca9571f0ade0177f934adfb55e5e920d58ffd4808b71ab73b7c4a39546a1f40688daba03698b10b39741e0711daa69d866cdfb5f894736cf5c9a7f201ae09db167ebcd2f6446d626029663d40a2cdee58babc50014d", 0xee}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000003840)="95ef77b7f4c9ebb87e9a02cc53cec6be92940f83fd42277e32a7d90c943bd9eec9770adff7aaa5e0b1a88ea0092bf9c73db6426abcabcbbde97a8f4f690354bbf6086a98e88273bbf35d1133c633476761f23a309e6fa67d11f43fade8b7e7c8e73a6e042efa63cb6bab0e3d4758632b57a8e96b9c74934395e90002132c83afcaf3f5272c1b22b9c5a9767bd161e396520986f0de21d24ccab95c13cbbcbb26dffbc0afd05ca38170d4db00970d901a42137d81aebbf3ab53ddd61f5f3128fe3d9d2ccde24c2a1eb53dc544c8f92586b2cc48b43064f757e3e3ae31425af0823849db54da325d8ab870bcf8ed95f2a155d99b9db7d89b6ba368497750105cb4409305c7ecc5898e16e498fc2224f821b4b86f652d902b274d0724a9297c75ebdf7e5bea2d57d8c82664ecfe5361ba8b9d7385f5105ec4be3af5607e57b2654b3170424602061acddff5199a95b5718d4c2e96adba8d0a89a7407e7aee94f1646ccb9889ff903dada85efa0aa1d4b2873ee3ff6618fb8e7d8f78aa691dd47e711878f53c41739bd48514e25e1420ee1a3d89cd9f8e88cceb4267e6923d8c76785c786e48ffd753ae7bc6d766ed78de825720cbc9c01bef0b3e45d5217314dd6daad6d952af561a1f99b091be8ce09d810e456829bac6b7c215b0a6f63e29a8ab1c6b2201c66d58fe6144e48cb8abbfaf132566bca4f0e50369bd8317bdbbbda860b270d3ce7162bfd20c580ef4b68d4435dcd9b3172fb8f367b948c4850bcaca4b0dc1141596418c3e213dcb498800031a3c101de712843129b20ab475e8a90acaa70fdc2bfb7dc1b08d68e929ec93448ff45fb253327ef106f922f0505d0f077dc4e58b77a5458824aa0cd248b55383f87b4f96cc260e6f54816a8f457bc37cfe48c3f710bedb3f251e18b395169cbc285be2b2e70d31854e14644c6169dbe422a822b5210244bf49549aacc584f3d86a96a80cb8a55565a2ba74bf1dd541c5bcc625f9c424e75bb64d821c79d7403415934175c6429ab00999b2a4eb10906875046d9544dd7f7d6c8b2c785822c0fab4a25b002398ba22b7bd58b04874d29faad4d43618477156d844be1b254dd500bbde341f8fc21db59da82cb7401cb4cae262aabbff414e6d302dfe10beaa917d9793c1f1780ded2470ec527f26390a394cf690eb50459c3da2e6abf74a678afee36644c6b5c6662029fa05b8f985a1d4d795bb4b78ddc195d59ef54515497ec3bfec29131ba3cd93904853364fbea0330254657ceda5ee35d44180bef0000760ef833dd355d57c1534869d6f65fb62cd2d6ba1e5b801da107a68affa02d3f72812b956dc432b8cec00c8cf8941b6e85fa4021fa79cf553fdc39dc51694cf5c7fa9bc2c3df552a177d360b69ff1f84858ad0ad083e962171fc5ecf8c7c5d92acdf142a3fc1e10c9c2e5531d6904ce9a1c7222ea5bd8774635e98e23452826f72ac0769e95520852b09bad66323003bb7fd69430e376a9e2b6652e67b998de9ec3104b8b6482b604631ed7233d396656ade9b995885fd10b4e6954790b2be6e91e5eb2b234db354906fb26fe68b3070febb1543913381785392d8208f96e87cad6b1b148d37b30d0294e1d637a50e013c9d180003ea95c300bb4cd149dbe4fc2bb6f13724d8f72d618e7def5f5a79a0ad207ff6069cfd3972da39c6fc65cf93ff1c18c1df51736f2e00a9d58ff5711da74ecf844cd8289b4b0960d9a183e953ae1dbf398eccdab65a77e2e2d0a92574b5ac86cb33dfbd092c795ec144cb68db571b48fbcb7911ae765342a395930a0bd4d7513f7c5fe62d012168000e2eef8a604b21a2fa2012ddce9f05e4d401b6aecb3f0e57062b93a6308fd1ecae0097038d013180af725115aec5018d352c9284613c87ee1d041013371ee4b4f7b5ffa610a5045b9b82019f4c20cc104c180fd8594f332e9ca7c4d8b214bb94123b68808cbc9e574c8d555cc23e1593949162351ad395b6d4715c99e01564c2e2225e15daa5d9372794b9681a0f8074c3bd7c9890fb100ffc2932baf78fe92d6405d3199ee384cc6152f35f4c027a855684cfdce16867dd796d2d9cbc87fffe26d48d6d59960160b6071501c45f9e943e9d7dfc83d35406f8691bbe139e9ffed1e0a9ab83bde0540091378e6c64d335c7a47195be2dc557575b96b2b62cee4243b2d28c8d006cbf03bf18a4fd0dae60a4299d6574a07d2c2cb98542aa086b574e21077e9956f1d2365b55bb13769b4bebcd952c9e5dbe39cf35a3c311fd848e0982bf3f537556c7affe10bc419c40cb5544afa16d42d3ba09130674fdd512f062de87728450a91c83cd3cefd27cfb2ec71267108de60fac9ea72b70c32524812d227b4e762f8c4c0effe192dbdd8798968897b8f4663f21bd14a57e5eaf471137821c0e8e7c26335daf7dc32ab9ffcfb89476c1d4a42725fff2cb56e22422fa2c4ef17d47fc8cf5153c6a2021ae5e37a334d5ca0a61a6154b5bca15bd0120d860139999b3750a78efef867d3c818def594b8156cbf3b3e6e0fdcaaa58a63bcfab873860a1d6efa4a8dacab4c350026e47c4c089cb5c94b9973c4a63be5dd75fe49d7d3b8323da0be8f77fdfba9cfb3bf06395cd2b201225a1f36472247237e00744a8fc37e75989b2d0e41a2654911a21139e9416b4b4d327962b11eda99c5efa34cf1ffc9ef5cdea2bf0c513f3c9f702197d52b182b7af3827637d7fa459992f5e25f421bf76af2eefbcca35c4b259bdcfa6dc8afe0d99502f0318a1b0928f5e962ea86e08b1dab3ceb3e19f2abf9339376a655db1aab2eb12783fd7d65e020b2125037e630b63b3455f9d8507c7c78b8e741c40ddb3516661c64a458671406a015ab06fd3a8cdba04c3e4154d85f485ecac2a84d385069212aa8e0d25bee1f52c65103a50c01539e44d16bcc33b92546b5429d919a46901c667773cc34e2942c5222a2fdcbd4ab0ac3e0eb34ce215ed5289f11ed73ad27504b5836e4a8bcd2caa0f297b0b8412c6d981c0e707a80f8478ea5719fd3ea0e549939a4704a6e4dcf3902b947373b882303b182f9c1a307897aa43c069bb12877f6e9add7f5b0818199816a9a364ee0a9dd276e41af03556c47ac441eff935e4c2b2dec7ca42bbec6d0f0a51e1c5bd9760db54a4f28be7d40e378beb31c2cafdba43b1c6a22b2261c0a9eec5f6ce3e7018025aacd2f515247241a2e98e1f9a1aeec612b2a998e4e9f6ccfa4bcd29c24147f49227dd2f07c8f1ba4f16aef555e25f7322936c5ebd76a1eb2a96ab06d2a61fd5c537fce577767bfe39b45176b018053b3f3adfcd57d145e8ac26560ec9956bf689159b0af16e189f2c9bc5f208968ab1fb1fd425522976ec4d7629401ac1fb81e214fc39e508adf0db1d3ef275008183da6722d74386cce99c2e0991e77ba00e56ea4972eea99d8d5b78393d0af4dca3f96606ebfecde5c32d67aa75a40a074f2927d8bb4b7bbdd6b336cbd906e16f1006e92bfaf789ffb0a2ab9b79ac06c8ece93368e473df8af115bf06c4ed43b272b8fe4141862c931e241ae10fbce6ee8f57a580a92d4bef135b718da60655e395820ef66c24634a667362602d3e89d7b8fbe7750346b490d357e8596679e15460a652ba5c8dadf79a2857d889a9249641124d52ff97e4d10748dc415df1e52e4fbdab860ef0a8ab7f7cacbfc539f56792c046f2a758d655622979d9a7752b6bb63c0f86eb64f2b8c90ef03493ac0d6a7ed738a5d8bb3ed5916110fb2fe23d7c799f17d3de3f116dce2b2bed543c595d9830ada2b52bbeeae6b2a5d272a3add3174b1a3872b5b3cbc7ad382573eda722db5746581cc94157e6d204a27ceab8bf8abd73b395e7f58ad751cecade9fe0632ff71e912b7f706456daafea3c5ee59a5323edda4db1776fa6958922cf472d8edaa2450871ba1dd6d6ee9dd5f3872c55895cd6f098b136d3f5cd0ed67ba094385a799cff3bc2f8ee1ea8536b9612013ca670c63a30efb3b39b2539ae070ddabca91598eea2208be583856a1aa37753684807c4687551589ecfdd3f9a7fde19f778fc80909b2362ea4e68fabc59d018cb7a5569dfe7915fa34fadf6a3abf8bd1ffdee093e9eb456bcf7efadf59a75fb808d023387534f5d29f0381c27cdc6021331b18c0d5b54ab0f97828ca29d6c31949cc3007afa867197870d18b49c181fa46c3cd62529d0de42f853732a2e1a78692dfb3b6bba46403d956cfb54cd4ee63aa1afa9bd98ae85f655f480b13fef21644d9719e5d4b24c69f074e441c1b7fee3f13d6d60b8e75ef4cb1ecec63db423c17840b921074fafe1044e89138a0d9e6b7ea125924c046f1d973c88e7dd5d1fa44f43a597f6b5b2b980ba33cd079cdaee15d9e9aaae007ab4c94a3bfe8b4ac05d65a756ea64dec3aa19ae6669d79a65e2bffd886d95c1407bfa316ae5a0c5c1af7977f2fcc50e7dc96db0c927fad3a7d1c751da6d269c2232fb37f76d1d8d4d2dc6509865bc4cabf0d55fc8379ebf1c3ca2ca55332f48206472dc897a19b2f451d0ed379afdf3f01a8c443241ec92c3d454d3c5b7d3d0ebe3c100e6b039b773d5e07bc3c18a1c89a741e88806c63b74e73056910426f91bd1aeb6582b46fabb5fc9b97387ecba1c442181d1d4fd894cc994fb49df11939d231ca65756e57f8b063f1b65d0267cb316a1f33442a3d4e6ff18ce98c5fa589796c318f0f60e32bd2928f264cb7a419f366f55f76787cdb03fab5dd4d117671a19843094702bfd373e0203a4275c1560115a527cfb45b8d99b0fbabfd89482a59a88b78469f0f3efef3f86fe211edc9536390907d696350e2c2916672ebfbdec8c61c11c5f39fc104e528d8c0b5cea4fbd5834d60e6ae839f6335f3f3a9648223f763f7a6bbef21754447722da9487e6e041a276f95823aa6d4e618dd2be50ee4e7386f09c22055e4e39beb3ad4923842b81b7a482b8e6d771b3f9aa5275d0d98196ffde127cc1bbf1f973ede45374231c19bade25e1491dfd1155b6cedc87b9b3c6ae346f312f1dd99ca5663465833b2430255af37ef513e74305309fb0f4bfab6a151d626d2c4e04fa543a530c3a863cf3ce6dbe44e47d6ec8c2a00d6a0037e52ae0172756b9220dd6b543b98353c10a8e787266281ae1287b7f646d1ebb0a2b302918aabf697a51dbb8ebb7184463b9e901cb0e678f5f6e9065194a258dea3c72b1f0e523a5e94d6fdebe6dd472777d46a58e23fc14ea26183c383a0bd79f0907842361592b45af9d9a39a40959f24bddec99420614d4c751dcd4c89bd4f3d121ac9817cf19d323e5415e42d13c1a4bff3caefb6fc9d715a0042bea396b567f538924b20ff6149dd25c5f66af11c1aed15f277cc1890e6ecc5ea70d3c83e895e89324f7d8e59aeeda48e0b4c2dca245f808f010f1f50372bd526d3a054176fc2516e584baf2caf45306c6babc3aac0193f21be39de2138e6b8b58514c281c24e34be9a4b8f04437284c4a9cb776445976fcb504b09372c6f91094554d2086eda0e5df57d5b3211033e15f9ad9d1c1bc1e746bcc8fa6689310747ed60fbfdb26c2da07d94124a888510530838bb4b449827a2978a2e3e584ab44afc5c4fe8bfbadeb15aa112342fc39cc53944f6be8e96b848f791a22b6456a5d72de26bef47af352469a35e604144e5ffdf395311b3cda29733e5ccd35fc3a5c601e00bdb87c0d1b9be8e7801829a33c0f88c47928beb439878faa49fc57fd0186f5aec15147ee5bcad67ee8ed42d5ef293b8513742a486f9c7d1b8352e940581baf05a11b15cce8a51", 0x1000}, {&(0x7f0000000280)="33d217", 0x3}], 0x4, &(0x7f0000002780)=[{0xe8, 0x10d, 0xfffff5af, "94c9b85cc32f1721498a559d40cf2497fbbd57f3435dfc171daedc6ed559cef1b2724712a1b07ab6be633de7d0f7c6f54f9e88854b7130bd94e4ce99a64256471009f997d3bc13bd6d8f8ddbb52e74ac78b0085ecdee520884cbdbe93714b01029a83c3a9ef2999a17021d4f1cc49ef0e332996091a7410413dc4f24bbe6bae29724f59971912743f3ee2947491fe46048b228a78ed8cce60be1995549489679a23717f6d8dfedb1ea6d4361aa5dae8ba4480782b0f219b3f87fdd1b63055db660b5053822042e7aad0aafff989e226b5904fa10d2f3"}, {0x18, 0x115, 0xfffffff6, "8f495d6e0875b86f"}, {0xe8, 0x10c, 0x5, "a527bd414ebfd75d3315d5b2911c408c081d89bb994902036db4d64085e6d24ad9228eee611a3b8905b9946ac3fbe052cc8f4b95ab088b5c7ae8d93de03c6b72223f7cc5deb37413a51d9a96a3b5f7489ce0890943117edfd7afc2f2d4b3b9b113ded1f64bb0c5c16ee4f9c13b32cbad02aced5414d01e5bbbd959dca10d82d20dbeeae6203a4abeaecde445b63a083ba00436816e0e6128f9fcb3903440105a58d8e40ced54b2785167d1c143b0db13bb79497a1e2c21da5a9b9fb25d835c8e0081843c19ac9bab5ea7abe8f431c73d8e"}, {0xf0, 0x1c, 0x6, "4c250c4f3613563d75504dc5f442c00818b11d3b6ff67fe9f1dae4cf61bb5decf4a1ed428ccfae1849accbbaaa39bfa25ee54cb94f417190f30e61f923a82cd0a095835f380e81d48523312d9bfa502f96d0f5dcf0ef69e8f84d4dbcfa3e84d9c5571d4de0362061fba3c998f2eec840ac909e2be1e7472ab418006f3a858285377a71c26a596dc0ae438baa3077e9c834275b4ce9f194e505dfb7182e7528a919c99b3083a5782aad8ccb24b4af324dc37c4e23080a4284a31c82cd3b857a6b5d991b5008b5a37e410cbc89cc14cc6e15457399c90ae0edfee082"}, {0x18, 0x88, 0x6, "63368a6ac548ee"}, {0x60, 0x10c, 0x1000, "4f8bde8154c26e7e93b750a42f6ff399e262baf0efe526f61e3f13359780333a9ebe02766c821a8cee2392b690b93e15629312fcc53a9b4a9edf0e31a4362c5da3edf4d23d5a2bd95557"}, {0x78, 0x10d, 0x5, "3246ac5a4b4ea0325fd1ada43fdf282b3e6dee98a872e0aa16f4e16493739d554b449bf3e13b0f8c3853b9ca4caa717b97c394effeeddf5d023f1a5cff67a91db0c78da00ef214bac46dc62196eec9717d7b500b572289768773f74e7a70a3b2f98141b8f4ae74"}], 0x3c8}, 0x8080) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) 3.109728507s ago: executing program 4 (id=3647): r0 = socket(0xa, 0x5, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa0000000000e1cf000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/180], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r5, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r5, @ANYRES32=r8, @ANYRESDEC=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) close(0x4) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b040000000000000000020000001400000011000100000000be000000000000000a"], 0x3c}}, 0x0) (async, rerun: 64) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="a000000021000100fdffffff0000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x2000000}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000080)="ac", 0x1, 0x40000, &(0x7f0000000040)={0xa, 0x4e21, 0xe2b, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xc5f}, 0x1c) 3.013842755s ago: executing program 4 (id=3649): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000570300000a50000000060a0b040000000000000000020000002400048020000180080001006e6174001400028008000540000000030800014000020cf6e39c8fcba33053134a66ee810000000900010073797add000000000900020073797a3200000000140000001100010000000000000000000300000a53db532a35e87737a54a15de96266652b68e507f4c67f722b4e96ef7477d3b97e00e765e142068c126b457d556c8e8f0785118c56869791cc0e57c8c07d3ab0b64f9bff69a25e682c8ccde921694dcd276b092bf3dd8027487ff8f5ae1e13cf7b110c9f69f67e32f"], 0x78}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x128, 0x7, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xe5, 0x7, 0x1, 0x0, "59ea9a8693690be7a0efe03cd7a5eb94513d7693454c658db8ea5b1746c65d9a7293ca2e13f3d90e585cfd22a066d360baac2f1921871d6840f7b8fdaa267a41b5cef4372a1f22c5ec38613d453470c7dfe2993da94dc0a1c629357efc5b582a0cd542f647bf0e9d93faf8d4add339340cbe4aab409469f7ad6736be554273971d0a2bc44fbdced4a347605ff4ef84ed23ac91a4879442e7f2a44825ce582e0e24885a91cebe91defa9649601019224936f0d8b57fea1ed38ea72a12bafb81f4209ea9dfd37e92bfc59f2424c1ab7f324812ed09e04b72cf2efc5f82b8dd64c8d1"}]}, 0x128}, 0x1, 0x0, 0x0, 0x401}, 0x200000c1) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bba9"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) 2.875688053s ago: executing program 4 (id=3651): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) (async) socket$netlink(0x10, 0x3, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7f}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7f}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x8, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x10, 0x7800, 0x10000, 0x6, {{0x6a, 0x4, 0x1, 0x4, 0x1a8, 0x67, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0xc, [{@multicast2, 0x4}, {@loopback, 0xff}, {@local, 0xffffffff}, {@broadcast, 0x180000}]}, @timestamp_prespec={0x44, 0x3c, 0x41, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}, {@multicast2, 0x80000001}, {@broadcast, 0x27c}, {@remote, 0x67d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3a}, {@local, 0xffffff66}, {@local, 0x207}]}, @timestamp_addr={0x44, 0x3c, 0x55, 0x1, 0x9, [{@loopback, 0x401}, {@empty, 0x7fff}, {@multicast2}, {@remote, 0x5}, {@remote, 0x7}, {@multicast1, 0x200}, {@multicast2, 0x845}]}, @cipso={0x86, 0x6e, 0xffffffffffffffff, [{0x5, 0xb, "b8faf288e5299e7371"}, {0x1, 0xb, "e7ad55ef4c66c5a0d0"}, {0x7, 0xc, "bb13e4baaf7d88c24aca"}, {0x7, 0xf, "f4ec120b58d4d57f02c7fa7cde"}, {0x5, 0x10, "9fb63d32de9eae4eca835a310faf"}, {0x0, 0x8, "4a09844d47c9"}, {0x2, 0x9, "5a815443a3f84e"}, {0x0, 0x3, 'b'}, {0x6, 0x4, "d5af"}, {0x1, 0xf, "624e01d2561cd52dfe481a6248"}]}, @ssrr={0x89, 0x13, 0xf1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xa1, 0x1, 0x4, [{@multicast1}, {@private=0xa010101, 0x6}]}, @rr={0x7, 0xf, 0x54, [@broadcast, @remote, @rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x4, [{@remote, 0x1}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@multicast1, 0xffffffff}, {@rand_addr=0x64010102, 0x6}, {@empty, 0x32}, {@multicast2, 0xc}]}]}}}}}) accept4$netrom(r1, &(0x7f0000000300)={{}, [@remote, @remote, @netrom, @default, @netrom, @bcast, @null, @bcast]}, &(0x7f0000000380)=0x48, 0x80000) (async) r4 = accept4$netrom(r1, &(0x7f0000000300)={{}, [@remote, @remote, @netrom, @default, @netrom, @bcast, @null, @bcast]}, &(0x7f0000000380)=0x48, 0x80000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000003c0)={0x4, 0x8, 0x2}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7fffffff, '\x00', r3, r5, 0x2, 0x4, 0x3}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7fffffff, '\x00', r3, r5, 0x2, 0x4, 0x3}, 0x50) 2.667930315s ago: executing program 4 (id=3654): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x30000007}) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) unshare(0x8000000) 2.582475869s ago: executing program 4 (id=3655): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r4 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x400}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="ae10355a3319", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) 2.482901355s ago: executing program 4 (id=3658): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth0_to_hsr\x00', @local}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0c4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000000", 0xf, 0x41, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffff3500000000000000002e", @ANYRESOCT, @ANYBLOB="3bca63a3ee53a146fefe52bb52fd5ac0963bb5c6217b1b1f76f5fd90931d99842bcbe0c545346ddb095743ee058cc433e0ab5c637bc55597", @ANYBLOB="80a0a7ed6a8d58e6bf272a6a93f5c66f45ed930a54bdf523e742e0a6091c4040d0d1e9e809ecb6c2b00971c7f57f8b16f1d2ab03a0a089de62dbb1fc263065dc45d5c3b3d7c030298f08035f66495f1f3f08790e7021a4c502ab412cc29392272748b473b4501cfe04b1b837d5cce4d2b0e4e72b687e22f542aca2007bb232e8884cb9ead0bdf8bd873b0b7d0a5c94cae2e253c8b1200fce832a48996050b4c0909859e45d26d847cf87f0dd195ef3b56c12a94d5f6e99b68dc665d9a28098350ad6f99fa46d3c1aed2c2ea5f564", @ANYRESDEC, @ANYBLOB="7a57cf40b9d57021953cc3f7dac5822af0007768368fd2b507a8", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x46}, 0x28) 2.477302251s ago: executing program 1 (id=3659): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 2.39696542s ago: executing program 1 (id=3661): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000040)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.310655561s ago: executing program 1 (id=3663): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x13, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) r3 = accept(r0, &(0x7f0000000200)=@in, &(0x7f0000000040)=0x80) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="a9af1ae0f3ceac7f", 0x8}, {&(0x7f00000002c0)="c71ae5dfe74b5fbac419621be6b2013a4caaee3c6de532f724594167ef9bfee5d2a82d5ef54fdbf5b2a9", 0x2a}, {&(0x7f0000000380)="afa9392e09359cdbcf06f0b4a6a96691e6d4e65c6f0bec2f703c166655577f1ef8476786812d1b02ad7ba568b7a86ca5d111e6a19bf4b2dedb1ccb5b2b8371d65ef82867259814e2915ad3d61a0b5a33dd0c23dad816d6bc42683741a7f6", 0x5e}, {&(0x7f0000000400)="98f66c700570a18dc053a28eb26e2ef5d2d94268dad232088c65fdeaf389060cbb654d87df5237878e8d53c36adde0d85941dcc0cd7e9e2b04e9308c980ca80c782a41130a83ec355d24e3da16caae1e142c603f67b0f4eb9cf1e6d5008451a0e21e15962d703d6d89c3bbf38b89cd6729a880438cf47234d82cd6963ddc19fec66892a2261577", 0x87}], 0x4, &(0x7f00000004c0)=[{0xb8, 0x10a, 0x8, "944da542913dfd93a84610255af2340bb83eb44e3f6e8f78b4dcca8c1c8b4019a585abedc305da5248ad894633e6883be04da6ff32d78c1e94af00309265d5d7abe69e880ad052335a40a9c9a4cdcc9a8fc7f369e6f004b0f471042c813fa4fd510a5f1b5a3e86a036395bfe2933bcee47caec1f0b151fff22a2c366c1f9de358e3bb1a0705aafb004daec456c11a393ce55fbc9abfe8b05dad6c035310338679d9dfd2c2e9188"}], 0xb8}, 0x4884) 2.298143536s ago: executing program 0 (id=3664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r0}, 0x10) close(r1) (async, rerun: 64) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r2, &(0x7f0000000180), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x12000}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000300)) 2.250402702s ago: executing program 1 (id=3665): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x330, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x45}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8001}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000090) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008880) 2.16743302s ago: executing program 3 (id=3667): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) 2.166607567s ago: executing program 1 (id=3668): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0900000000000000140075006e657464657673696d3000000000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x4000054) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={0x8, {{0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf4}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x4f6c7fa9}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x50, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010426bd00", @ANYRES32=0x0, @ANYBLOB="0386000000000000140003006e69637666300000000000000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="0500270000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xffffffff}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x40) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r13, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r13, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f0000000400)={'wg2\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@deltaction={0xe4, 0x31, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4e37b3f5}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x17, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff7f}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40088c8}, 0xc884) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042cbd7000ffdbdf2509000000050033000100000008000600", @ANYRES32=r9, @ANYBLOB="0a0009000180c200000e0000080039000900000005002f0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x404c801) 2.121693476s ago: executing program 2 (id=3669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb3d8d91ccff5eb116aaaa0800461900200066000007019078ac1414bb0a010100820200000000907800660004fa7d5edd2e5a62af045a79b21c3a959365837dea78e41e"], 0x0) 2.078896949s ago: executing program 3 (id=3670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd29, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd29, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}}, 0x0) (async) 2.027936706s ago: executing program 0 (id=3671): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)='\agroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xffffe000) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7000000, 0x4010, r4, 0x2000) 1.9827318s ago: executing program 2 (id=3672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x203, @empty, 0x4ac2d78a}}, 0x0, 0x0, 0x2a, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "1d582e369b21933d", "63c351081298989dc4f499978b7e538f", "dd7fa0c6", "5d4225ff9ffd6d88"}, 0x28) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.953080918s ago: executing program 3 (id=3673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000006a80)=ANY=[@ANYBLOB="e4110000", @ANYRES16=r2, @ANYBLOB="00022bbd70000900000008000000b800028004000100a40003802800018004000300050002000000000004000300040003000d00c8188ec3cc8402006d61746368616c6c000000001c0001800800010005000000050002000000000008000100080000002c000180080001007f0000000400030004000300080001000c00000008000100060000000800010005000000300001800800010007000000080001003f64000004000300080001000f000000080001000600000008000200716671000400010008000200a2000000d0100280b0000500696491c1b4b598654c0799f57a4e3c89e94e5e46490c6264e29d2fd151b49be6e5be486d7c76bcd4b33d58203ca1fb7d732e2cf4fa8030996f64ccf69f4967f18e01dcf77b2df70000e1cf38d7963fe236ab125e8f167fa4a90c22742742aad49b5a3ffe56cdde8a32c1591759737cf2a1bd84b01d4fdea60ccec7827dbd5d8c090c9da752bd981a5c9da2cabbd6bf6352ade83c12a886fe71f616430c1f30e0f9c5673ac5fbde277524a99e04000100080002000900000008000200ff7f0000040001000410040046996031abdb93d70ecc60e10ee53127dd79abd1e25ab01fafac63e6c81234954d04db7b90d7b80aa234557695ede939eca7dd7569f73290a5373ae3506664d883403a94f3e4a96be70f49e2d1793817f631134d3cb9723d90c1d9687c9610086a12aeadac55dfc3fb9b14b8bb56e65f54445b29ec83995e93c781296f05713208fe0e6821f02d55c9993fe4c4ca091de560b1611e657bf082dbdf049f64d830ade26314bd2e2e24eb9db6905f6424ba762865fb917da74a9f1facb96f888dd780e11dd5e6cacf98d6e72c32e7c3dbf96cefb8daf457f476407a7741ee6dad6877237e17dfe607419c56ef5b29fc33d356c49a0dd960bc79320a0f23be96f633adf7aaf661ffea6beb6f22a8fe2e6c42ba9852346592369736bf23c7fbbc53ad2c84c9b2133ec012520d1a178d1df51dd848c5e2b2731ac8fccea7a4aac944494ad3f02cdd62a620da8e3bef9d0aa6b43ef0cf874ca99e09b692e532484b2583b2e6ee3f197d8d6fc10d742e59d9f8dd56f19a779b85809d02093d3caef5131d0675892988a33162a143d6d8d6d96a02f3bdb3a6cd6ef8c74a44e77c6eae1867632f6d13c50103abc2d4907beb8522209d2a591fe8716b8744273eb10dd39351ae70a9969500e274403f6914abfd8969cefc0f15d6e7ab9fd0ad7d6c141d6fed58fb05387f9e6416eb67bd211589c8ed66cef05ca111a86059f5ca6b4ecbb9b784741379b4e62f83fcafc86dafc7a294da00b44210be9d8c36a746e10b50db557ecd40d932d7884dda43de53a7f481bbe7f180a7d989636ab049647fcf2729e405d9ba9eabe27427590caae15f470729bb7dc806ff2d71efac37d5577d2297ec4d9e227a63df80acd51773f417797203fc5db7d09aca9c3d1c25f33c408d6f46e2316c2a4e539023d2587fd229972fffc5e3ebf220bb34d69adb26263e3bb1ed432d51a78a77d9dfd69327b9f5a6c60f98777ca9cc373f936c9b3d0c12fc8d8d334bd70574c834672259dff907f432e896099996192e5e753cc268d8191c2f9267dd643106033c7538109242361d3b544e095c249efa8ee7f2ca6c5c85edb975d0c9e2ad8bd03594fd0f8529d073852fe0e96fa5f75c30cea2a86937f53d9f2275f8d59b0ce056737463d92da5e74a474436a83531264dc8c75284cdc1555cf9de66095f8ee0cbffc19fa48d7b03fa80a89fe794fe685ba632682f6878557ab52165742a06ea995d5ecedfd385ea655285a0d2870c9a77b76bf8de6eb06b279f87c60fcb0f5bdcee4a373c805a36ab488ea8141f9e681c8df279fd2a9c6ee17ad3b60fc855c6dc0e64d5cac330e4eff0de12b59e5028809071bcc66f041a2978f587b796275aa701a1e0ca96e60adae47ecec2728bf56537705f958eef1b12385e1f33223a4b91ffb8129a3eb2841f224f1b83329ffecb87b9208c01f04e859f83bb1d2126a1a551bc834658e1a80e57a029e8cb1ef7577abb3cc193fd64c434a0898004a5d9d1700e0cbd14347fa76e1f840dab83b77f2721f2cfee4b14d5a3434a6f27d4963d392f857399578942c2c7cec3aa70374124f58b0bf35934bb7ef4bb199b7a2dec5856fbd5df301aea55b5d6a784e8a377d005a5b0eb24613fe31fc67a055e95e752fa4a4c856232260f91076ee85572c68d37afb60ca7841ab0214946c001129075999d5b5c72a3989cf79cbd0ff6c7b689463a2d47e6c7d13d8e008d197ed0d556a7e5b0dee9771e26d5ad585260c397c326941d0b245550bc15ebf910c61b183890f031bf261e1bd71c491253de6e212bdbde39d97a64716350a1c20ea979dea21be1d982a8b75e1d17ff65ea59653512ecf98f58546f3541a2772e5d93535e79d39b35c9872f4c5a3e3a209933044e0d3376e4d73164120f4b84b513afc02db738b334050c866824ad9f6e0d22637d2f039ce1f98611ff128baa7c4e7ba6cb3e347bb5dc66df649b68646010f8aafc8f01bf32cb1cd03d5f4d8b71b3653f16eb33dfd255d36fa8831ac8fbac2bac5eafa47e170edabe2c04759a66fcc92072872cdc3d3110a204c25008dd44285db9c3ddc806d3b2ec59b9026bc6c3f98f241557260db2314b1a56de61879ab3f588404f865361491017a5ece47968ad3db2e2fb62157841d09ddf642a0b9779e2a80ab18d1bcd2d0898ef8e2c12671aba7c8601a5a269bd69544f76063f12372a09505ee250de9dd12f54a5ce968c440066d6f3b69075622e53b30f64eaba52f98bcfd8692a24e49968aa7a715d5ae5c4040720ceb5975b5186612acfb655127b47e7d7c4b525549126ecdfcbc194aec8b43ab24af4c3a19568a03c74759b46d220877bf50eb2412b130425e86806e9c91b0a9bbed4674bc33e5ce45b37f56be46637dd02cd1e6aa912ebce89f0cf4268e58d3418186e971d81f4d23845d6340a45671338d09666cb21f97e69a4587214b510beb3a736ee9c410f8fa9f0ae6670602aba08123113712f391c5966e62f9a48828a9b0bb694701fa8ac5bcdcfdb73cae991b16fbdfc5b80bf29abeb0da90a5741a80cea8d71c6a5908b4b3b082fd143c2c02eed89318ea7e34f031fbee30d81b1350ec03956bbf80401fe20f64fdcc48d6b10c1b4cbb3eb699f0975b0d66b321cc00a285042007185f48cc53bc806f0dfe659a730fbccb4d703ecde60cef01d63c8b1475ddcb3af3dec45b51afae3daa03342a24833d6d60a176ad109efa54bf423b0be96e28d86513e45829b0a38d64e81809505cc5dd289e1996fe7b5989c9feb1108daa4d3cdbf8b3c961233c098e92a16119f7f972f0c9e4f87c07dff497ae3c8153675ca67895ddf7a9c026fa4b6d0f17fc3062bfc8f9a015c55ee7d5b93098c5de5a0bcf54902180592938d49ed01a2a9e675c0749543125896f04dfbf6c6cee37f5f001ed1c807ef136a63cd350aaee09c7acb7fa7fc520e359853e69be9cee11fd54be58544d79dd3b36b4dd03789700a4a6d60e5e97b66ce3402bfbfef8088028469934f93aaa0ef937e76e3a9dcd85658dbefffb106f4e0f6458df18588c264994f1c2bdd42fe158bd8407b45188fe42f0b07550c82d1fa1b61b9cd56c3b80576868ae66f022524037a74245d4dd5a32f4a3800c29b9f67600f3ff71c3717f05753bffc5897ee8262fd7f7364a0375d6bcbbfad8b4dd145dbe7fa4b331edab334e7376b8114eace929d87c46ff17b566289cf8c72c6e563661d7a3f75a459ca874588e0ebd2f6c73a54b53996d6aac88eb3a8c3d3f2e847fb781b7e0519114103f6b547ce88e98ca035b50e2f9665494b81f99d3b6c5f622820738ce8b2e4cf39bbda0f50ec0075a5f87ea0a3fbfff590048502deabbdcd6dfcedd86c433f047a6a160c40b74a4142feeb50715f3e855e0528bcfa7eb74af9eac01ef0936a491dfe6b7b4aed0f23b13a084e207312f4f341326c2efc00e2220c8a768a0552e59f271009532c7921d7dfee25de187783b861ef29efe5b3fb8f3596352e869e17a3a0d02d8d88d7686e50ee2550c36712bd0c2ac2e936f8bd7280604724abfd13101b08abf24068cc28b6872d8dd5660d890bf24fd6521dd973de91aa742e875de3e8db0dd2f462f09b3d6cfbbf0aaa25285ace69795bbaac60d6f4a14b9eb14f9b5c7334006a051b079462459417b890d9320353965649668ceaaf98d744cdda14b20a577cb50961d1ccd7437e6776ebfb354b7511ad42eef3018c872c01e1a0b1854e871ae43e505bb7e9ee7a1629b5c5efff591f984e3b8f3df5b21f54df9e857cd6f0c3ea9222adc720cbccd130e4149da567cd5922a87797d5f11c0192e73fd8c77743ccd0b44d70ddc1fffb109c52000dfa85b9fbad23969fdea6671afced4cb183d490d4467a0519401107ddf7f3939f81348268cdadfc4274ae13280162d9370705e84c8396b3fba560b38f2c1f1770152dc43b832ee284def145dbdd9314f26252fc762154e802eff849d1b7a81ce99da9725cc2ffdb348833d6fa0178e757270168dd1ca9df4a584282fb1d1b5a09fe81d2afe10301df95646ecaec78119e84678124db0413ae1f8a529a2f64e33f7d1d62186f7f4c0c4ce8d732fd308315364708757d43a93b225ed7c96f545949227a022b3ac97636ee088c572cac7a36cde20925ee70444c2449849e2a1f7f1a115d224dbb432154097db1a0699fefacf654cecfc8a1f53779ec1cf623ecc5daa623019a3db13b494a053f008b07690d4db1cffb3dab0fe7103ee4ec78011508ac028bdace313a2309d37b50faf55f0fea6e44a61907b54a62e7c0071b429546650405ca6f90202986aab2992f542f21c341a6e612631d0762f669c9943f833ee24705f70656ea1d317696617557784a762580daca12ee00844c9be9b70da2a9405efa264f9c09266e033f960c382305fb3fe99ed8978a2f6c6bca7b54f86b6075d7855a97ba96be234d11b07e183ff112727f53b4adeb47cb5693fd5a57ffed8f9101b4d553374a86c00f2764cbc78e498c7f1e33ce2cbcca06c01d315fafcecd232c6fb1d820dd2468165fb3dd2ad696c766841f881a65d271f39d9b9eeb64bda397bdc3c92d7c647bcdbca8a93a4df48a6252f5f59a2ac4602ef5c57a06c32ce6ff0b8a7ba0c206651d8372f5d806cc9795ae88955106f0db045f65989ac7dc4491ec1db0dda666637aa747f30a0d8a32d4ba17df6ee12982bb4feb2f6129a67d3d530aa802fcaeca1165b6e0f10712721c4b720b702b2f39548d5509f7f97ef98d4e88c65463ae97749c4c9144aaae28aa7ebc0398ae8722936cb524a83833c07a6dcdbb1b6920b246a80f68eacdb3724ea7ae7fbd85b66c1fc9589b01dd9b84ce41538fe1737ba151947541ae26eff76e1e5db59d8f8c09bc2c42bfd5c60f1b3c602135adc12039d0ad9642fe34364e480873c5874067770346c3971ca7f4f9dfd6036b94674daaa3f0cd1fb422abc61914006c054fdb3c453d1102f25dc7f7b59c75032bb8ddf9779362c8f941b01c6c2b893250b85aa13fb1d4a6350cee7bcfc8c50b8a0448a2f110ea63efe551f2a9e95b83a17b6dff5444911bab13598d13e75693825a9d930cceb0308bcc126b5229b8e768824656553cafdb76797bff198f133a92b68a67cce99e0a9e4cea7dac2f79feab8a4e83b418e268c29fa7553d11b74a6e9f8fdfe1d7aaafb4f31a0fdc2c1f5939bcc2c1e4456c7adaa68cd0ebc37e608a7bdae893a6cc15b86a54fd999deffc4dce9521d0e578021b5f9954419066bf168b09a218ebef84ea1dbebb67db0c93cc9fc86466c4d005f9ba15f8ac641a2debb525a501a3740bbba9dfc20983aa8e7927815e02882f1a734c9484eeb35fbee1a7fe48cd0d43b3ad7aef6838b78c10ea63a909d9903be94715e96b4828f68ff36de9ba500e7ef7d2a5bdc79cacec2d22e9b725cdc8a6b1ca7404da0d0ebccc763e170cebb80235b368d623bb904cd2603f0246ce59c33a92dec208067ded18155d47c05d186996db8104f69fdc9678581529803fd2b5359f4cd480cfb22055030befe61e7bf526f9afbc5732e4771bc416e683e9ee61dd846f0afa7dbe56a11489a8f2230eece9b82eb035d3e7714871ef32bbd99ab93f3104dc606dc4cd2850da239e18ca6471906ae860a9a43efe34b3d79be7c39a182f68dac15415632f263955ed0d9ff890806787d0131585cd7493c48d90cf56e65963585f7f8f3a17ad427f1d60df23b3e8b59f2466622f0110761d40f7f3fc3a22cbd8a405c84495cd16a669de9fa05625a8361e190a493060a0032bb88544cd40da19834edc13633168ac4e4275bd9f4800018008000100", @ANYRES32=r4, @ANYBLOB="1400020067656e65766530000000000000000000140002007465616d5f736c6176655f310000000014000200766574683100"/60], 0x11e4}, 0x1, 0x0, 0x0, 0x44805}, 0x0) socket$kcm(0x25, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x4c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x4c}}, 0x48c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000efff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r9}, 0x48) close(0xffffffffffffffff) r11 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={r11, r1, 0x0, 0x1, &(0x7f00000009c0)='\x00'}, 0x30) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r10}, 0x38) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(r3, &(0x7f00000004c0)={&(0x7f0000000440)=@tipc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/206, 0xce}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/121, 0x79}], 0x7, &(0x7f0000000900)=""/167, 0xa7}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@ipv6_delroute={0x64, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x3c, 0x2, {0x3a, 0x6, 0x4, 0x3, 0x7, 0x0, 0x2a, [@empty, @mcast2, @local]}}}]}, 0x64}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r5, r5, 0x2f, 0x2024, 0x4}, 0x20) 1.81530637s ago: executing program 0 (id=3674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.814715332s ago: executing program 2 (id=3675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x1}, {}, 0xfffffffc}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x54) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404}, 0x0) accept(r1, &(0x7f00000000c0)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 1.769705319s ago: executing program 2 (id=3676): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x9, 0xfffffffffffffffd}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x9, 0xfffffffffffffffd}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x48, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="2d3f79901ebda500b1a7c470d0e511d68d5c94a9f8a61803fa3a6b2456c60140d8bad6ffbd8cd4bda36f58af5be0f28db30ad03183d6c298debe32beaca238f72c398caad605b9bd8b5e6efe6c03c74f6265b67cedd4bec08fbbbf28aeffc6aeaff6af5dcb496cac6cca2b37f51433f3c2a5f1fa1d06bfb2df4fa20b3fe268f585263267bf976e8dafc32118709651dc641ce9f0c9aef11997b679c37c9050409cfb7253a4842493bfbe07d4b4a1287ab800137556b7288d5ef628888570d61ac646", 0xc2}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendto$inet(r0, &(0x7f00000004c0)="a7bc34d6f69f279fc6e8e3331858418623e7763fd9d5cb74f81f3c6552de6f494b8b9100adb43bb2a217d59ad8b99dd314345ac769ea8c45588c8064b50bbb1ef3752021f8c48a399632bf0509fa6f53b6b4a27207c8654e24a4c8aa29e4abc7743d6cc097bd1de4de4185dc242e8838f0659c24368f52b4d4fd3f18ddf7805ebc1e0b08366cd13fa721d2600fd42fdeb6f5135103885a9b0e02f6203d1e2d664d9c3c1f847f29c8156705207d0b2d626da294f5a23c6af4e4477862d76e0374899773813825ff4f378eaffd2c5579699b19654ea72a48ab2e482d7007ca066a8c8bfed6773663a61e8adbc4fa2ce077334f91c2f0f1a656339a53fa577e", 0xfe, 0x20000884, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000005c0), 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x0, [0x5, 0x3ff, 0x68a]}, &(0x7f0000000680)=0x44) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x0, [0x5, 0x3ff, 0x68a]}, &(0x7f0000000680)=0x44) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x130, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0x130}, 0x1, 0x0, 0x0, 0x24000804}, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000900)=0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000940)='ns/pid_for_children\x00') socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FICLONE(r5, 0x40049409, r4) (async) ioctl$FICLONE(r5, 0x40049409, r4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000980)=@ccm_128={{0x304}, "ca7cc352e6b9f3db", "ef4ebd9d13aa0d74b2436992a0eba626", "7881d992", "c5767b8fdebb9421"}, 0x28) close(r1) (async) close(r1) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r6, r1, &(0x7f00000009c0)=0x9, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) close(r7) getsockname$inet6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000a40)=0x1c) (async) getsockname$inet6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000a40)=0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00'}, 0x18) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000b00)={{0x8, 0x3}, 0x30}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xc8, &(0x7f0000000b40)="be2742212bda9247e1d4cd8de027a7d8f1fd5f7728a7bda5ef00cc29692f8f1acfc16dab440afb0816b84793b21ad6edae1d0b4af8a2aa0925d699b35292daccdec4f63c59dadc4ae83120d1943af5e36e26b3b297bce58556c5f68a463fc3c8fab6dd86f47c081989c968c7a343dee2d17c8249a32c5718c40ba9dfbd5691d565226b835622cb60513e1af5693cb9ef1390b5dc584e525543492ce1ee19a2c34b64dc5ecdfc4cabf5f3b9b06a5b09d6be81f1462526dc2643a9053decc29d63d73fa57b", 0xc4) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000c40)="bde75c3b83a1b188762336b8df4fa9f23d014b5d13f7b31b188eab6aa7", 0x1d, 0x40001, &(0x7f0000000c80)={0xa, 0x0, 0x2, @private2, 0x0, 0x3}, 0x20) write$tun(r0, &(0x7f0000000cc0)={@val={0x0, 0x805}, @val={0x1, 0x1, 0x3, 0x6, 0x6d, 0x5}, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x3}}, {@can={0xc, {{0x2}, 0x6, 0x3, 0x0, 0x0, "0a9c823ad4409e52"}}}}}, 0x34) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000d00)={0xfffffffffffffffe, {0x0, 0xf8, 0x5f51, 0x8001, 0xf}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004050}, 0x40894) 1.754792608s ago: executing program 1 (id=3677): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 1.691752123s ago: executing program 0 (id=3678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000a9b100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000200000000000000000000000054f9000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000004c0)={0x1, 0x0, 0x1000, 0x6f, &(0x7f0000000080)="a67175cacc018cb103da33e1df0c3a250741555aedb34d9a0ccabcd7cabc8e8040250e07b5be0449b77641d331cd77f06959e27a96163408d0debb7160cfe1c86244237a240652dca275671506a7bbd77cd5861d7406d353815e7473581fdfead3b2dc2cc04abfa73319037f76ad39", 0x90, 0x0, &(0x7f0000000400)="9be26a9a2e0a9251c9bd14c1e98826c70d637010e9f46d74a31f58badc30441bf2636fcefd731630bb0c2f586bacf02581d2504e087ecb73fed606cbf0d2a7030a80285cd3160817450a2920e2b31e64e31225c9aa14a93c2b4aaa0ebd83658d0c84001e43981ef04e504e0744c87b43fc8c1179584b1f038a759e2f08c7f5d0f9c7b8af817cdf9736f3373bc277293b"}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x7e, &(0x7f0000000100)={0x81, 0xa0a, 0x2, 0x9, 0x2, 0x100000000, 0x5f, 0x1}, &(0x7f0000000140)={0x5, 0x53a9, 0x5, 0x2, 0x6, 0x8, 0x7fffffff, 0x6}, &(0x7f00000001c0)={0x1516, 0x80000000, 0x7, 0x81, 0x0, 0x7, 0x4, 0x2}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) close(r0) 1.674171925s ago: executing program 2 (id=3679): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x16, 0x1, 0x8, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x21, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb64}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x2, 0x3, 0x1, 0x4, 0x1, 0x8, 0xfffffffffffffff0}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x40, 0x29, &(0x7f0000000440)=""/41, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xc, 0x2, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000500)=[{0x1, 0x4, 0xa, 0x7}, {0x2, 0x3, 0x6, 0x7}, {0x0, 0x2, 0x4, 0x6}, {0x5, 0x1, 0x4, 0x5}, {0x3, 0x2, 0xe, 0x9}, {0x5, 0x4, 0xd}, {0x3, 0x5, 0x4, 0xc}, {0x4, 0x2, 0x2, 0xa}, {0x3, 0x2, 0x1, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r0, r1, 0xc, 0x18, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x8, 0x3, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8, 0x1, 0x3}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000740)={@loopback, @local, @mcast1, 0x8, 0x3000, 0x40, 0x0, 0x6, 0x20000, r5}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r5, r4, 0x4, 0x5, 0x3}, 0x50) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000000840)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'bond_slave_1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000008c0)="adefe57444b2e313395cc91c4379b66e519a05c20835b9542d68aed1c531cb8ca1ba0ca6030b2c08b07eb52254d27aac6ee0e47717221e4ebaf7b236ea679e5f9f5ac749f4f76bafc667eabefe56216b4712cc56b7", 0x55}, {&(0x7f0000000940)="be6ca912153510ee8a3528bc8b89d882ba607a7757df29390a40680d3bff9c58cb523e963af129c65210716bc1d03fba6ac770426a0493ab596d99d1c2e5b52eecdc", 0x42}], 0x2, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @dev={0xac, 0x14, 0x14, 0x21}}}}], 0x38}, 0x4044890) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000ac0)=0xc98, 0x4) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfd, 0x1, 0x22]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x50}}, 0x8014) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x1a4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xea19}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8025}, 0x880) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ec0), 0x41, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000f00), 0x4) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3f5, 0x400, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x850) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001040)={0x0, r2}, 0x10) pipe(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000001640)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001100)={0x4d4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffd504}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xd0, 0x0, 0x4, 0x2}, {0xc, 0x0, 0x3, 0x100}, {0x0, 0x6, 0x10, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x20004040}, 0x8040) connect$inet(r1, &(0x7f0000001680)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r12 = accept4$bt_l2cap(r11, 0x0, &(0x7f00000016c0), 0x800) setsockopt$bt_BT_RCVMTU(r12, 0x112, 0xd, &(0x7f0000001700)=0xffff, 0x2) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000001740)=""/253, &(0x7f0000001840)=0xfd) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000001880)={'bond_slave_1\x00', {0x2, 0x0, @multicast1}}) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f00000018c0), 0x4) sendmsg$NL80211_CMD_GET_SURVEY(r10, &(0x7f00000019c0)={&(0x7f0000001900), 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x17}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x20004000) 1.524339316s ago: executing program 2 (id=3680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x801) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) 0s ago: executing program 3 (id=3681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): : attribute type 11 has an invalid length. [ 232.897668][T12926] netlink: 'syz.2.2018': attribute type 12 has an invalid length. [ 232.898890][T12922] netlink: 'syz.1.2017': attribute type 12 has an invalid length. [ 232.925901][T12922] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2017'. [ 233.032857][T12935] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2019'. [ 233.250684][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 233.306530][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 233.367148][T12957] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 233.465638][T12957] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.523385][T12957] netlink: 'syz.3.2025': attribute type 4 has an invalid length. [ 233.548410][T12966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.772141][T12980] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 233.820687][T12983] policy can only be matched on NF_INET_PRE_ROUTING [ 233.820711][T12983] unable to load match [ 233.868465][T12987] netlink: 'syz.3.2037': attribute type 39 has an invalid length. [ 234.089279][T13002] ipvlan2: entered promiscuous mode [ 234.229635][T13017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.813172][T13062] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 235.024787][T13070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.050081][T13070] bond2: left allmulticast mode [ 235.061084][T13070] gtp0: left allmulticast mode [ 235.084487][T13070] macvtap1: left allmulticast mode [ 235.091549][T13070] veth1_vlan: left allmulticast mode [ 235.098744][T13070] macvtap2: left allmulticast mode [ 235.125824][ T1131] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.145897][ T1131] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.176520][ T1131] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.184912][ T1131] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.233971][ T1131] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.254155][ T1131] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.278542][ T1131] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.293450][ T1131] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.328891][T13086] bridge0: port 1(veth0_to_bridge) entered blocking state [ 235.348580][T13086] bridge0: port 1(veth0_to_bridge) entered disabled state [ 235.374443][T13086] veth0_to_bridge: entered allmulticast mode [ 235.391286][T13086] veth0_to_bridge: entered promiscuous mode [ 235.583876][T13113] TCP: TCP_TX_DELAY enabled [ 236.369827][T13151] __nla_validate_parse: 17 callbacks suppressed [ 236.369846][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 236.447394][T13154] bridge2: entered promiscuous mode [ 236.452649][T13154] bridge2: entered allmulticast mode [ 236.479140][T13157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2080'. [ 236.509572][T13157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2080'. [ 236.554680][T13165] netlink: 'syz.4.2082': attribute type 11 has an invalid length. [ 236.563333][T13165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2082'. [ 236.661661][T13173] tap0: tun_chr_ioctl cmd 1074025676 [ 236.674331][T13176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2084'. [ 236.684056][T13173] tap0: owner set to 0 [ 236.693297][T13173] netlink: 'syz.1.2085': attribute type 15 has an invalid length. [ 236.703003][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2085'. [ 236.935588][T13190] can: request_module (can-proto-0) failed. [ 236.944709][T13199] openvswitch: netlink: EtherType 0 is less than min 600 [ 236.957033][T13193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2091'. [ 237.047529][T13199] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 237.499349][T13231] sctp: [Deprecated]: syz.3.2103 (pid 13231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.499349][T13231] Use struct sctp_sack_info instead [ 237.667865][T13240] validate_nla: 1 callbacks suppressed [ 237.667897][T13240] netlink: 'syz.2.2105': attribute type 10 has an invalid length. [ 237.686156][T13241] netlink: 'syz.2.2105': attribute type 10 has an invalid length. [ 237.696367][T13240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2105'. [ 237.696482][T13241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2105'. [ 237.715402][T13240] dummy0: entered promiscuous mode [ 237.729087][T13240] bridge0: port 3(dummy0) entered blocking state [ 237.735871][T13240] bridge0: port 3(dummy0) entered disabled state [ 237.748010][T13240] dummy0: entered allmulticast mode [ 237.784500][T13247] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2107'. [ 237.861044][T13251] netlink: 'syz.2.2109': attribute type 11 has an invalid length. [ 238.331379][T13288] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 238.425846][T13288] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.448994][T13288] bond0: (slave bond7): making interface the new active one [ 238.457197][T13288] bond0: (slave bond7): Enslaving as an active interface with an up link [ 238.505620][T13303] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 238.679232][T13304] bond5: (slave gretap1): making interface the new active one [ 238.712408][T13304] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 238.912474][T13326] netlink: 'syz.0.2129': attribute type 15 has an invalid length. [ 238.956045][T13326] netlink: 'syz.0.2129': attribute type 15 has an invalid length. [ 238.958128][ T1131] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 238.984653][ T1131] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 239.016763][ T1131] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 239.025018][ T1131] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 239.776124][T13384] tipc: Enabled bearer , priority 0 [ 239.795584][T13384] syzkaller0: entered promiscuous mode [ 239.801663][T13384] syzkaller0: entered allmulticast mode [ 239.904634][T13384] tipc: Resetting bearer [ 239.955725][T13383] tipc: Resetting bearer [ 240.021703][T13383] tipc: Disabling bearer [ 240.341242][T13416] bridge: RTM_NEWNEIGH with invalid ether address [ 240.347276][T13423] netlink: 'syz.1.2154': attribute type 17 has an invalid length. [ 240.363775][T13423] gretap0: entered promiscuous mode [ 240.385470][T13423] gretap0: left promiscuous mode [ 240.604652][T13439] tun0: tun_chr_ioctl cmd 1074025675 [ 240.646713][T13439] tun0: persist disabled [ 240.726130][T13446] netlink: 'syz.1.2162': attribute type 11 has an invalid length. [ 240.745436][T13446] netlink: 'syz.1.2162': attribute type 11 has an invalid length. [ 240.818669][T13450] syzkaller0: entered promiscuous mode [ 240.825915][T13450] syzkaller0: entered allmulticast mode [ 241.057224][T13469] FAULT_INJECTION: forcing a failure. [ 241.057224][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 241.073863][T13469] CPU: 0 UID: 0 PID: 13469 Comm: syz.2.2170 Not tainted syzkaller #0 PREEMPT(full) [ 241.073888][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.073911][T13469] Call Trace: [ 241.073918][T13469] [ 241.073925][T13469] dump_stack_lvl+0x189/0x250 [ 241.073948][T13469] ? __pfx____ratelimit+0x10/0x10 [ 241.073964][T13469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.073982][T13469] ? __pfx__printk+0x10/0x10 [ 241.074007][T13469] ? __pfx___might_resched+0x10/0x10 [ 241.074023][T13469] ? fs_reclaim_acquire+0x7d/0x100 [ 241.074045][T13469] should_fail_ex+0x414/0x560 [ 241.074077][T13469] should_failslab+0xa8/0x100 [ 241.074099][T13469] __kvmalloc_node_noprof+0x175/0x920 [ 241.074119][T13469] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 241.074148][T13469] alloc_netdev_mqs+0x8a6/0x11b0 [ 241.074177][T13469] ieee802154_if_add+0xd3/0xfe0 [ 241.074203][T13469] ? __pfx_ieee802154_if_add+0x10/0x10 [ 241.074228][T13469] ? mutex_is_locked+0x17/0x50 [ 241.074255][T13469] ? rtnl_is_locked+0x15/0x20 [ 241.074274][T13469] ? __dev_get_by_index+0xf4/0x110 [ 241.074302][T13469] ? nl802154_pre_doit+0x714/0x9c0 [ 241.074334][T13469] ieee802154_add_iface+0x44/0x70 [ 241.074357][T13469] nl802154_new_interface+0x2ce/0x490 [ 241.074376][T13469] genl_family_rcv_msg_doit+0x215/0x300 [ 241.074398][T13469] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.074428][T13469] ? bpf_lsm_capable+0x9/0x20 [ 241.074447][T13469] ? security_capable+0x7e/0x2e0 [ 241.074473][T13469] genl_rcv_msg+0x60e/0x790 [ 241.074498][T13469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.074520][T13469] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 241.074546][T13469] ? __pfx_nl802154_new_interface+0x10/0x10 [ 241.074560][T13469] ? __pfx_nl802154_post_doit+0x10/0x10 [ 241.074601][T13469] netlink_rcv_skb+0x208/0x470 [ 241.074623][T13469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.074640][T13469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.074679][T13469] ? down_read+0x274/0x2e0 [ 241.074696][T13469] ? genl_rcv+0xd/0x40 [ 241.074714][T13469] genl_rcv+0x28/0x40 [ 241.074729][T13469] netlink_unicast+0x82f/0x9e0 [ 241.074757][T13469] ? __pfx_netlink_unicast+0x10/0x10 [ 241.074778][T13469] ? netlink_sendmsg+0x642/0xb30 [ 241.074797][T13469] ? skb_put+0x11b/0x210 [ 241.074818][T13469] netlink_sendmsg+0x805/0xb30 [ 241.074849][T13469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.074880][T13469] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.074902][T13469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.074917][T13469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.074939][T13469] __sock_sendmsg+0x21c/0x270 [ 241.074973][T13469] ____sys_sendmsg+0x505/0x820 [ 241.075000][T13469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.075031][T13469] ? import_iovec+0x74/0xa0 [ 241.075054][T13469] ___sys_sendmsg+0x21f/0x2a0 [ 241.075077][T13469] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.075105][T13469] ? rcu_read_lock_any_held+0xb3/0x120 [ 241.075151][T13469] ? __fget_files+0x2a/0x420 [ 241.075169][T13469] ? __fget_files+0x3a0/0x420 [ 241.075199][T13469] __x64_sys_sendmsg+0x19b/0x260 [ 241.075221][T13469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.075251][T13469] ? __pfx_ksys_write+0x10/0x10 [ 241.075271][T13469] ? do_syscall_64+0xbe/0xf80 [ 241.075299][T13469] do_syscall_64+0xfa/0xf80 [ 241.075318][T13469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.075336][T13469] ? clear_bhb_loop+0x60/0xb0 [ 241.075356][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.075371][T13469] RIP: 0033:0x7fd08078f749 [ 241.075388][T13469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.075403][T13469] RSP: 002b:00007fd081592038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.075422][T13469] RAX: ffffffffffffffda RBX: 00007fd0809e5fa0 RCX: 00007fd08078f749 [ 241.075435][T13469] RDX: 0000000020004014 RSI: 0000200000002f40 RDI: 0000000000000005 [ 241.075446][T13469] RBP: 00007fd081592090 R08: 0000000000000000 R09: 0000000000000000 [ 241.075455][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.075465][T13469] R13: 00007fd0809e6038 R14: 00007fd0809e5fa0 R15: 00007ffd3af09ef8 [ 241.075493][T13469] [ 241.163431][T13470] syz.0.2169: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.522362][T13480] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 241.536014][T13481] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 241.544021][T13470] CPU: 1 UID: 0 PID: 13470 Comm: syz.0.2169 Not tainted syzkaller #0 PREEMPT(full) [ 241.544046][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.544056][T13470] Call Trace: [ 241.544064][T13470] [ 241.544071][T13470] dump_stack_lvl+0x189/0x250 [ 241.544102][T13470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.544122][T13470] ? __pfx__printk+0x10/0x10 [ 241.544146][T13470] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.544166][T13470] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.544187][T13470] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 241.544209][T13470] warn_alloc+0x214/0x310 [ 241.544230][T13470] ? stack_trace_save+0x9c/0xe0 [ 241.544257][T13470] ? __pfx_warn_alloc+0x10/0x10 [ 241.544289][T13470] ? kasan_save_track+0x4f/0x80 [ 241.544305][T13470] ? kasan_save_track+0x3e/0x80 [ 241.544320][T13470] ? __kasan_kmalloc+0x93/0xb0 [ 241.544336][T13470] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 241.544352][T13470] ? xskq_create+0x56/0x170 [ 241.544393][T13470] ? xsk_setsockopt+0x4dc/0x8d0 [ 241.544423][T13470] ? do_sock_setsockopt+0x17c/0x1b0 [ 241.544442][T13470] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 241.544459][T13470] ? do_syscall_64+0xfa/0xf80 [ 241.544481][T13470] __vmalloc_node_range_noprof+0x134/0x16a0 [ 241.544533][T13470] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.544559][T13470] ? __kasan_kmalloc+0x93/0xb0 [ 241.544583][T13470] vmalloc_user_noprof+0xad/0xf0 [ 241.544601][T13470] ? xskq_create+0xbf/0x170 [ 241.544625][T13470] xskq_create+0xbf/0x170 [ 241.544652][T13470] xsk_init_queue+0xb0/0x110 [ 241.544678][T13470] xsk_setsockopt+0x4dc/0x8d0 [ 241.544703][T13470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.544729][T13470] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.544760][T13470] ? aa_sock_opt_perm+0xff/0x1a0 [ 241.544798][T13470] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 241.544814][T13470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.544836][T13470] do_sock_setsockopt+0x17c/0x1b0 [ 241.544861][T13470] __x64_sys_setsockopt+0x13f/0x1b0 [ 241.544887][T13470] do_syscall_64+0xfa/0xf80 [ 241.544906][T13470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.544923][T13470] ? clear_bhb_loop+0x60/0xb0 [ 241.544945][T13470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.544962][T13470] RIP: 0033:0x7f334a78f749 [ 241.544978][T13470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.544992][T13470] RSP: 002b:00007f334b5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.545012][T13470] RAX: ffffffffffffffda RBX: 00007f334a9e5fa0 RCX: 00007f334a78f749 [ 241.545025][T13470] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 241.545035][T13470] RBP: 00007f334a813f91 R08: 0000000000000004 R09: 0000000000000000 [ 241.545046][T13470] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.545057][T13470] R13: 00007f334a9e6038 R14: 00007f334a9e5fa0 R15: 00007ffe5a2e9838 [ 241.545089][T13470] [ 241.545109][T13470] Mem-Info: [ 241.731925][T13480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.735090][T13470] active_anon:3861 inactive_anon:0 isolated_anon:0 [ 241.735090][T13470] active_file:3086 inactive_file:39940 isolated_file:0 [ 241.735090][T13470] unevictable:768 dirty:168 writeback:0 [ 241.735090][T13470] slab_reclaimable:12517 slab_unreclaimable:110452 [ 241.735090][T13470] mapped:28977 shmem:1361 pagetables:943 [ 241.735090][T13470] sec_pagetables:0 bounce:0 [ 241.735090][T13470] kernel_misc_reclaimable:0 [ 241.735090][T13470] free:1310495 free_pcp:14875 free_cma:0 [ 241.908254][T13470] Node 0 active_anon:15304kB inactive_anon:0kB active_file:12344kB inactive_file:159560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115920kB dirty:672kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12768kB pagetables:3680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.970802][T13470] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 242.006955][T13470] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.042387][T13470] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 242.048511][T13470] Node 0 DMA32 free:1341404kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15432kB inactive_anon:0kB active_file:12344kB inactive_file:159560kB unevictable:1536kB writepending:672kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:39624kB local_pcp:18716kB free_cma:0kB [ 242.123475][T13498] tipc: Enabled bearer , priority 0 [ 242.131855][T13470] lowmem_reserve[]: 0 0 1 1 1 [ 242.137946][T13498] syzkaller0: entered promiscuous mode [ 242.146646][T13498] syzkaller0: entered allmulticast mode [ 242.153887][T13470] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.194035][T13501] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 242.205226][T13470] lowmem_reserve[]: 0 0 0 0 0 [ 242.223736][T13509] __nla_validate_parse: 20 callbacks suppressed [ 242.223754][T13509] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2180'. [ 242.241179][T13470] Node 1 Normal free:3887840kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16848kB local_pcp:11712kB free_cma:0kB [ 242.294766][T13497] tipc: Resetting bearer [ 242.300853][T13470] lowmem_reserve[]: 0 0 0 0 0 [ 242.300903][T13470] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.320070][T13470] Node 0 DMA32: 3037*4kB (UM) 2209*8kB (UE) 839*16kB (UME) 118*32kB (U) 50*64kB (UE) 36*128kB (UM) 37*256kB (UM) 16*512kB (UME) 10*1024kB (UME) 9*2048kB (UM) 303*4096kB (UM) = 1342252kB [ 242.339517][T13470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 242.351882][T13470] Node 1 Normal: 202*4kB (UME) 51*8kB (UME) 42*16kB (UME) 96*32kB (UME) 30*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887840kB [ 242.352983][T13497] tipc: Disabling bearer [ 242.378575][T13470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.388711][T13470] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 242.404082][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2182'. [ 242.420945][T13470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.433721][T13470] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.443961][T13470] 44384 total pagecache pages [ 242.449425][T13470] 0 pages in swap cache [ 242.458542][T13512] sctp: [Deprecated]: syz.1.2182 (pid 13512) Use of int in maxseg socket option. [ 242.458542][T13512] Use struct sctp_assoc_value instead [ 242.484784][T13470] Free swap = 124996kB [ 242.504318][T13470] Total swap = 124996kB [ 242.540582][T13470] 2097051 pages RAM [ 242.544435][T13470] 0 pages HighMem/MovableOnly [ 242.574056][T13470] 425122 pages reserved [ 242.584672][T13470] 0 pages cma reserved [ 242.607227][T13522] x_tables: duplicate underflow at hook 1 [ 242.715709][T13530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2188'. [ 242.774684][T13539] openvswitch: netlink: IP tunnel TTL not specified. [ 242.865129][T13547] addrtype_mt_checkentry_v1: 55 callbacks suppressed [ 242.865151][T13547] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 243.108974][T13564] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2200'. [ 243.131160][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 243.140763][T13557] openvswitch: netlink: Flow key attr not present in new flow. [ 243.448542][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 243.500706][T13586] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2207'. [ 243.529046][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 243.538694][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 243.592977][T13595] netlink: 'syz.4.2211': attribute type 1 has an invalid length. [ 243.662387][T13597] netlink: 'syz.3.2210': attribute type 21 has an invalid length. [ 243.847297][T13595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.975054][T13595] bond7 (unregistering): Released all slaves [ 244.043033][T13599] tunl0: entered promiscuous mode [ 244.055978][T13599] netlink: 'syz.1.2212': attribute type 3 has an invalid length. [ 244.074917][T13599] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2212'. [ 244.442618][T13641] netlink: 'syz.2.2219': attribute type 21 has an invalid length. [ 244.855991][T13671] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 244.878938][T13671] netlink: 'syz.2.2228': attribute type 2 has an invalid length. [ 255.751757][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.672153][T13708] delete_channel: no stack [ 274.684357][T13708] delete_channel: no stack [ 274.740970][T13712] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 274.752228][T13722] netlink: 'syz.1.2242': attribute type 39 has an invalid length. [ 274.858140][T13711] __nla_validate_parse: 5 callbacks suppressed [ 274.858157][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2241'. [ 274.876522][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2241'. [ 274.908685][T13730] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2245'. [ 274.920147][T13732] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 274.933436][T13732] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 275.086106][T13743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2249'. [ 275.104038][T13742] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 275.115011][T13742] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2248'. [ 275.150033][T13743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2249'. [ 275.317417][T13761] sctp: [Deprecated]: syz.3.2255 (pid 13761) Use of int in max_burst socket option deprecated. [ 275.317417][T13761] Use struct sctp_assoc_value instead [ 275.355623][T13765] netlink: 'syz.1.2257': attribute type 4 has an invalid length. [ 275.365459][T13765] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2257'. [ 275.384041][T13768] netlink: 'syz.1.2257': attribute type 4 has an invalid length. [ 275.393730][T13768] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2257'. [ 275.549818][T13779] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 276.363222][T13824] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 276.402168][T13824] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.418990][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2273'. [ 276.762707][T13845] pim6reg1: tun_chr_ioctl cmd 1074025673 [ 277.060321][T13845] pim6reg1: tun_chr_ioctl cmd 1074025672 [ 277.066644][T13845] pim6reg1: ignored: set checksum disabled [ 277.100681][T13864] netlink: 'syz.0.2281': attribute type 5 has an invalid length. [ 277.214783][T13869] team_slave_0: Caught tx_queue_len zero misconfig [ 277.215367][T13871] netlink: 'syz.4.2282': attribute type 21 has an invalid length. [ 277.239959][T13869] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2283'. [ 277.254398][T13871] netlink: 'syz.4.2282': attribute type 5 has an invalid length. [ 277.278094][T13874] bridge4: entered promiscuous mode [ 277.283492][T13874] bridge4: entered allmulticast mode [ 277.291856][T13874] team0: Port device bridge4 added [ 277.305911][T13874] bridge0: port 4(team0) entered blocking state [ 277.313186][T13874] bridge0: port 4(team0) entered disabled state [ 277.338698][T13874] team0: entered allmulticast mode [ 277.352567][T13874] team_slave_0: entered allmulticast mode [ 277.366636][T13874] team_slave_1: entered allmulticast mode [ 277.376569][T13874] geneve0: entered allmulticast mode [ 277.400791][T13874] team0: entered promiscuous mode [ 277.414757][T13874] team_slave_0: entered promiscuous mode [ 277.441808][T13874] team_slave_1: entered promiscuous mode [ 277.452809][T13874] geneve0: entered promiscuous mode [ 277.518504][T13888] netlink: 'syz.0.2289': attribute type 3 has an invalid length. [ 277.526580][T13888] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 277.810375][T13911] xt_cgroup: invalid path, errno=-2 [ 277.957659][T13925] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 277.970975][T13925] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 278.440898][T13952] bond11 (unregistering): Released all slaves [ 278.482817][T13967] sctp: [Deprecated]: syz.3.2312 (pid 13967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.482817][T13967] Use struct sctp_sack_info instead [ 279.048444][T14005] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.086666][T14007] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.245389][T14014] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 279.604794][T14037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.723983][T14046] bond6: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.808625][T14046] bond6: (slave C): Enslaving as a backup interface with an up link [ 279.819935][T14046] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 279.867940][T14057] team0: Caught tx_queue_len zero misconfig [ 279.963720][T14060] __nla_validate_parse: 18 callbacks suppressed [ 279.963739][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 279.980220][T14064] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2347'. [ 279.989955][T14064] netem: invalid attributes len -24 [ 280.006801][T14064] netem: change failed [ 280.016983][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 280.043291][T14060] openvswitch: netlink: Flow actions attr not present in new flow. [ 280.709635][T14077] lec:lec_atm_close: lec0: Shut down! [ 280.766798][T14108] syzkaller1: entered promiscuous mode [ 280.772400][T14108] syzkaller1: entered allmulticast mode [ 280.814589][T14115] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 281.014552][T14122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 281.031980][T14126] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 281.077793][T14130] tipc: Started in network mode [ 281.082701][T14130] tipc: Node identity f2fbedca71b, cluster identity 4711 [ 281.134052][T14130] tipc: Enabled bearer , priority 0 [ 281.169968][T14130] syzkaller0: entered promiscuous mode [ 281.182344][T14130] syzkaller0: entered allmulticast mode [ 281.217317][T14138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2369'. [ 281.241835][T14141] validate_nla: 5 callbacks suppressed [ 281.241855][T14141] netlink: 'syz.4.2371': attribute type 1 has an invalid length. [ 281.259331][T14124] tipc: Resetting bearer [ 281.272180][T14143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2369'. [ 281.286808][T14141] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2371'. [ 281.297647][T14124] tipc: Disabling bearer [ 281.314229][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'. [ 281.496111][T14157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2375'. [ 281.602835][T14155] netlink: 'syz.2.2375': attribute type 1 has an invalid length. [ 281.612983][T14155] netlink: 'syz.2.2375': attribute type 3 has an invalid length. [ 281.622322][T14155] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2375'. [ 281.632450][T14155] NCSI netlink: No device for ifindex 813332851 [ 281.781378][T14171] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 281.961170][T14189] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 282.005331][T14189] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 282.302018][T14215] nft_compat: unsupported protocol 0 [ 282.441860][T14232] can: request_module (can-proto-5) failed. [ 282.729354][T14178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.900714][T14253] netlink: 'syz.2.2402': attribute type 1 has an invalid length. [ 283.190444][T14270] vlan2: entered allmulticast mode [ 283.195665][T14270] bridge_slave_0: entered allmulticast mode [ 283.214640][ T30] audit: type=1107 audit(1767151082.716:6): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='â©äú^׫õÜÿƒÐn⽿•²gïkÉ °„¼È´ÿ4M&´ÎÚðW±{eGÒü+µ&‡£¬@À' H­«¬Ïa‚ßÉÏ…½d^1' [ 283.529519][T14299] IPv6: sit5: Disabled Multicast RS [ 283.548646][T14299] sit5: entered allmulticast mode [ 283.851214][T14320] sctp: [Deprecated]: syz.4.2420 (pid 14320) Use of int in max_burst socket option. [ 283.851214][T14320] Use struct sctp_assoc_value instead [ 283.871331][T14316] syzkaller0: entered promiscuous mode [ 283.906869][T14316] syzkaller0: entered allmulticast mode [ 284.148205][T14332] netlink: 'syz.3.2426': attribute type 15 has an invalid length. [ 284.164687][T14332] netlink: 'syz.3.2426': attribute type 15 has an invalid length. [ 284.328290][T14353] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 284.359638][T14355] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 284.478705][T14358] bond7: (slave gretap2): making interface the new active one [ 284.488898][T14370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.497171][T14358] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 284.752836][T14390] macvlan0: entered promiscuous mode [ 285.371370][T14416] __nla_validate_parse: 20 callbacks suppressed [ 285.371390][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 285.539023][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 285.550617][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 285.716911][T14437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2458'. [ 285.997536][T14451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.011506][T14460] syzkaller0: entered promiscuous mode [ 286.019368][T14460] syzkaller0: entered allmulticast mode [ 286.027017][T14462] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2462'. [ 286.399674][T14473] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2467'. [ 287.564376][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2472'. [ 287.582839][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2472'. [ 287.638652][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2472'. [ 287.667376][T14498] validate_nla: 2 callbacks suppressed [ 287.667395][T14498] netlink: 'syz.2.2474': attribute type 10 has an invalid length. [ 287.699095][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2472'. [ 287.716672][T14498] team0: left allmulticast mode [ 287.721577][T14498] team_slave_0: left allmulticast mode [ 287.739626][T14504] netlink: 'syz.0.2476': attribute type 1 has an invalid length. [ 287.755270][T14498] team_slave_1: left allmulticast mode [ 287.773754][T14498] geneve0: left allmulticast mode [ 287.779492][T14498] team0: left promiscuous mode [ 287.784420][T14498] team_slave_0: left promiscuous mode [ 287.791796][T14498] team_slave_1: left promiscuous mode [ 287.809793][T14498] geneve0: left promiscuous mode [ 287.827714][T14498] bridge0: port 4(team0) entered disabled state [ 287.855299][T14498] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.891563][T14498] bond0: (slave team0): Enslaving as an active interface with an up link [ 288.255343][T14537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.331974][T14537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.480190][T14561] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 288.494943][T14561] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 288.754761][T14582] bond7: invalid ARP target 0.0.0.0 specified for addition [ 288.762294][T14582] bond7: option arp_ip_target: invalid value (0) [ 288.771319][T14582] bond7 (unregistering): Released all slaves [ 288.813058][T14590] xt_cgroup: path and classid specified [ 288.828880][T14585] netlink: 'syz.3.2503': attribute type 10 has an invalid length. [ 288.930251][T14597] netlink: 'syz.0.2508': attribute type 9 has an invalid length. [ 288.940970][T14597] netlink: 'syz.0.2508': attribute type 6 has an invalid length. [ 288.968241][T14603] : renamed from bond_slave_0 (while UP) [ 289.379827][T14639] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 289.390300][T14638] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 289.525641][T14646] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 289.596906][T14646] bond9 (unregistering): Released all slaves [ 289.642288][T14650] ip6tnl2: entered promiscuous mode [ 289.669332][T14650] ip6tnl2: entered allmulticast mode [ 290.305340][T14699] netlink: 'syz.2.2539': attribute type 10 has an invalid length. [ 290.339128][T14699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.371285][T14699] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 291.303433][T14759] __nla_validate_parse: 19 callbacks suppressed [ 291.303452][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 291.324857][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 291.354747][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2558'. [ 291.361743][T14766] xt_l2tp: missing protocol rule (udp|l2tpip) [ 291.366126][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 291.379540][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2558'. [ 291.389279][T14764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.521602][T14772] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 291.615434][T14777] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 291.752810][T14788] xt_hashlimit: overflow, try lower: 3/0 [ 291.854912][T14798] lo: Caught tx_queue_len zero misconfig [ 292.001308][T14792] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2570'. [ 292.019913][T14803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'. [ 292.103337][T14812] xt_recent: Unsupported userspace flags (000000b1) [ 292.125711][T14811] xt_recent: Unsupported userspace flags (000000b1) [ 292.150395][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2574'. [ 292.336124][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 292.376201][T14820] 8021q: adding VLAN 0 to HW filter on device bond12 [ 292.385121][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2580'. [ 292.612066][T14840] bond_slave_0: Caught tx_queue_len zero misconfig [ 292.833916][T14859] dvmrp0: entered allmulticast mode [ 294.020498][T14927] bond9 (unregistering): Released all slaves [ 294.440823][T14965] C: entered promiscuous mode [ 294.445990][T14965] tunl0: entered promiscuous mode [ 294.473300][T14965] gre0: left allmulticast mode [ 294.560998][T14965] gretap0: entered promiscuous mode [ 294.606935][T14965] erspan0: entered promiscuous mode [ 294.612617][T14965] ip_vti0: entered promiscuous mode [ 294.758445][T14944] infiniband !yz!: set down [ 294.763377][T14944] infiniband !yz!: added team_slave_0 [ 294.913751][T14944] RDS/IB: !yz!: added [ 294.928345][T14944] smc: adding ib device !yz! with port count 1 [ 294.936672][T14944] smc: ib device !yz! port 1 has no pnetid [ 294.938825][T14990] validate_nla: 7 callbacks suppressed [ 294.938842][T14990] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 294.960251][T14988] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 295.679972][T15032] netlink: 'syz.0.2643': attribute type 1 has an invalid length. [ 295.702683][T15034] tunl0: Caught tx_queue_len zero misconfig [ 296.648122][T15093] : entered promiscuous mode [ 296.730756][T15101] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 296.739390][T15101] __nla_validate_parse: 15 callbacks suppressed [ 296.739408][T15101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2663'. [ 296.773799][T15097] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 296.867701][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2665'. [ 296.899269][T15103] dvmrp6: entered allmulticast mode [ 297.113732][T15113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 297.439717][T15125] netlink: 'syz.4.2671': attribute type 39 has an invalid length. [ 297.545513][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'. [ 297.576105][T15131] netlink: 'syz.3.2674': attribute type 4 has an invalid length. [ 297.655440][T15133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2675'. [ 297.774708][T15141] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2678'. [ 297.791031][T15141] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2678'. [ 297.950968][T15158] netlink: 'syz.1.2682': attribute type 4 has an invalid length. [ 298.038203][T15164] netlink: 'syz.4.2686': attribute type 1 has an invalid length. [ 298.050700][T15164] netlink: 'syz.4.2686': attribute type 1 has an invalid length. [ 298.217168][T15178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2686'. [ 298.356616][T15187] netlink: 'syz.1.2692': attribute type 1 has an invalid length. [ 298.404485][T15189] netlink: 'syz.2.2691': attribute type 4 has an invalid length. [ 298.416106][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 298.430186][T15191] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2693'. [ 298.443850][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 299.412243][T15253] tipc: Enabling of bearer rejected, failed to enable media [ 299.522152][T15272] xt_ipcomp: unknown flags 1D [ 299.540008][T15272] xt_ipcomp: unknown flags 1D [ 299.545010][T15272] xt_ipcomp: unknown flags 1D [ 299.550418][T15272] xt_ipcomp: unknown flags 1D [ 299.556178][T15272] xt_ipcomp: unknown flags 1D [ 299.561311][T15272] xt_ipcomp: unknown flags 1D [ 299.583678][T15272] xt_ipcomp: unknown flags 1D [ 299.600386][T15272] xt_ipcomp: unknown flags 1D [ 299.617583][T15272] xt_ipcomp: unknown flags 1D [ 299.622931][T15272] xt_ipcomp: unknown flags 1D [ 300.140464][T15316] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 300.160833][T15322] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 300.221729][T15324] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 300.399100][T15335] No such timeout policy "syz0" [ 300.410004][T15337] No such timeout policy "syz0" [ 301.962187][T15431] __nla_validate_parse: 24 callbacks suppressed [ 301.962205][T15431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2769'. [ 302.240212][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 302.310078][T15448] geneve2: entered promiscuous mode [ 302.317678][ T3448] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 302.338055][ T3448] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 302.368066][ T3448] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 302.385237][ T3448] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 302.559914][T15460] sctp: [Deprecated]: syz.0.2778 (pid 15460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.559914][T15460] Use struct sctp_sack_info instead [ 302.648435][T15467] x_tables: duplicate underflow at hook 1 [ 302.740499][T15469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2782'. [ 302.950516][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2786'. [ 303.105555][T15501] 8021q: VLANs not supported on caif0 [ 303.361343][T15516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2792'. [ 303.802927][T15549] ip6gre1: entered promiscuous mode [ 303.823315][T15549] ip6gre1: entered allmulticast mode [ 303.832297][T15550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.860357][T15552] ªªªªª: renamed from veth0_virt_wifi [ 304.165870][T15562] bond9: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 304.190657][T15562] bond9: (slave C): Enslaving as a backup interface with an up link [ 304.210197][T15562] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 304.231344][T15569] sch_tbf: peakrate 4294967295 is lower than or equals to rate 14774389595959039374 ! [ 304.427181][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2816'. [ 304.459379][T15591] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2818'. [ 304.513209][T15591] xt_hashlimit: overflow, rate too high: 0 [ 304.580813][T15600] delete_channel: no stack [ 304.729869][T15608] validate_nla: 3 callbacks suppressed [ 304.729886][T15608] netlink: 'syz.0.2826': attribute type 21 has an invalid length. [ 304.758971][T15608] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 304.825633][T15627] C: left promiscuous mode [ 304.844121][T15627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 304.964970][T15639] openvswitch: netlink: Message has 592 unknown bytes. [ 304.972141][T15639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.225269][T15649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2835'. [ 305.254621][T15649] bond8: Unable to set down delay as MII monitoring is disabled [ 305.264550][T15649] bond8 (unregistering): Released all slaves [ 305.799393][T15671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2840'. [ 306.145483][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2847'. [ 306.350258][T15700] sctp: [Deprecated]: syz.0.2849 (pid 15700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.350258][T15700] Use struct sctp_sack_info instead [ 306.675355][T15718] openvswitch: netlink: IP tunnel dst address not specified [ 306.903353][T15728] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.922631][T15728] bond8: (slave lo): Enslaving as a backup interface with an up link [ 306.932647][T15728] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 306.967352][T15733] macvlan0: entered promiscuous mode [ 307.030728][T15737] __nla_validate_parse: 3 callbacks suppressed [ 307.030746][T15737] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2864'. [ 307.098779][T15740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2863'. [ 307.195564][T15747] bond6: (slave C): Releasing backup interface [ 307.219814][T15747] bond6: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 307.263394][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2866'. [ 307.510258][T15747] bridge0: port 1(veth0_to_bridge) entered disabled state [ 307.529987][T15747] veth0_to_bridge: left allmulticast mode [ 307.535756][T15747] veth0_to_bridge: left promiscuous mode [ 307.543187][T15747] bridge0: port 1(veth0_to_bridge) entered disabled state [ 307.707342][T15747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.742735][T15761] syzkaller0: entered promiscuous mode [ 307.767399][T15761] syzkaller0: entered allmulticast mode [ 308.018616][T15785] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 308.048638][T15787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2872'. [ 308.429015][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.472241][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 308.634198][T15825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.745355][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2885'. [ 308.810184][T15836] netlink: 'syz.2.2886': attribute type 2 has an invalid length. [ 308.839814][T15836] netlink: 'syz.2.2886': attribute type 1 has an invalid length. [ 308.865128][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 308.899371][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 309.101798][T15854] tipc: Enabled bearer , priority 0 [ 309.123378][T15854] syzkaller0: entered promiscuous mode [ 309.134844][T15854] syzkaller0: entered allmulticast mode [ 309.191395][T15859] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 309.202911][T15854] tipc: Resetting bearer [ 309.225278][T15859] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 309.240191][T15858] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 309.277899][T15854] tipc: Resetting bearer [ 309.290999][T15858] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 309.331404][T15854] tipc: Disabling bearer [ 309.356532][T15870] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 309.519784][T15877] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2899'. [ 309.534104][T15878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2899'. [ 309.980202][T15906] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 310.097708][T15915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.133134][T15915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.184375][T15870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 310.196933][T15870] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 310.219107][T15870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.232127][T15870] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 310.268666][T15870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.272385][T15928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.274771][T15870] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 310.295814][T15929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.303903][T15870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.330360][T15870] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 310.352880][T15870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 310.359089][T15870] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 310.453302][T15935] .: renamed from bridge_slave_1 [ 310.524153][T15941] netlink: 'syz.0.2918': attribute type 21 has an invalid length. [ 310.583191][T15947] netlink: 'syz.1.2920': attribute type 2 has an invalid length. [ 310.640931][T15947] : entered promiscuous mode [ 310.662776][T15947] netlink: 'syz.1.2920': attribute type 11 has an invalid length. [ 310.808454][T15959] syzkaller0: entered promiscuous mode [ 310.814159][T15959] syzkaller0: entered allmulticast mode [ 311.303750][T15993] netlink: 'syz.4.2935': attribute type 11 has an invalid length. [ 311.528250][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.540569][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.551134][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.561013][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.568878][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.588704][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.596055][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.605810][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.615035][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.622747][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.648404][T16010] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 311.720191][T16013] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 311.936832][T16024] vlan2: entered promiscuous mode [ 311.941946][T16024] geneve1: entered promiscuous mode [ 311.960198][T16024] vlan2: entered allmulticast mode [ 311.971122][T16024] geneve1: entered allmulticast mode [ 312.007596][T16027] netlink: 'syz.1.2947': attribute type 9 has an invalid length. [ 312.040318][T16027] netlink: 'syz.1.2947': attribute type 11 has an invalid length. [ 312.093608][T16027] netlink: 'syz.1.2947': attribute type 12 has an invalid length. [ 312.117226][T16028] __nla_validate_parse: 16 callbacks suppressed [ 312.117249][T16028] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2947'. [ 312.135483][T16027] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2947'. [ 312.260029][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2950'. [ 312.306996][T16041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2952'. [ 312.353901][T16043] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 312.366055][T16043] bond7 (unregistering): Released all slaves [ 312.396992][T16044] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 312.506090][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 312.880238][T16005] chnl_net:caif_netlink_parms(): no params data found [ 312.961067][T16080] IPVS: rr: FWM 3 0x00000003 - no destination available [ 312.969138][T16080] IPVS: rr: FWM 3 0x00000003 - no destination available [ 313.158747][T16005] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.166140][T16005] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.174046][T16005] bridge_slave_0: entered allmulticast mode [ 313.183115][T16005] bridge_slave_0: entered promiscuous mode [ 313.193646][T16005] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.201525][T16005] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.210997][T16005] bridge_slave_1: entered allmulticast mode [ 313.220627][T16005] bridge_slave_1: entered promiscuous mode [ 313.282944][T16005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.299448][T16005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.364056][T16005] team0: Port device team_slave_0 added [ 313.374302][T16005] team0: Port device team_slave_1 added [ 313.409234][T16005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.416919][T16005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.443569][T16005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.458880][T16005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.465911][T16005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.493313][T16005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.535240][T16005] hsr_slave_0: entered promiscuous mode [ 313.541728][T16005] hsr_slave_1: entered promiscuous mode [ 313.548547][T16005] debugfs: 'hsr0' already exists in 'hsr' [ 313.554286][T16005] Cannot create hsr debugfs directory [ 313.657524][T16005] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 313.668461][ T5839] Bluetooth: hci5: command tx timeout [ 313.771330][T16005] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 313.878583][T16005] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 313.961922][T16005] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 314.022005][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2971'. [ 314.045574][T16114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.159330][T16126] xt_TCPMSS: Only works on TCP SYN packets [ 314.183966][T16127] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 314.231869][T16005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.292593][T16005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.338473][T16005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.342189][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 314.365264][T16005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.471857][T16144] syzkaller1: entered promiscuous mode [ 314.479813][T16144] syzkaller1: entered allmulticast mode [ 314.649120][T16153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2981'. [ 314.949566][T16150] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 314.989200][T16005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.072657][T16005] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.099880][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.107167][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.163866][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.171094][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.357837][T16182] Bluetooth: MGMT ver 1.23 [ 315.760019][ T5152] Bluetooth: hci5: command tx timeout [ 315.786928][T16005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.842641][T16005] veth0_vlan: entered promiscuous mode [ 315.844331][T16215] netlink: 'syz.3.2996': attribute type 2 has an invalid length. [ 315.855478][T16005] veth1_vlan: entered promiscuous mode [ 315.889109][T16215] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 315.911955][T16219] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2998'. [ 315.929602][T16005] veth0_macvtap: entered promiscuous mode [ 315.934449][T16219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2998'. [ 315.953044][T16005] veth1_macvtap: entered promiscuous mode [ 316.078484][T16005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.113955][T16005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.154680][ T1105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.179158][ T1105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.209061][ T1105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.237130][ T1105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.514265][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.542809][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.674500][ T6396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.692074][ T6396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.793277][T16280] netlink: 'syz.2.2938': attribute type 4 has an invalid length. [ 317.234060][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.246012][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.255640][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.263019][T16297] __nla_validate_parse: 8 callbacks suppressed [ 317.263038][T16297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3023'. [ 317.287777][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.295974][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.322643][T16300] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3024'. [ 317.331959][T16300] openvswitch: netlink: Missing key (keys=40, expected=100) [ 317.352509][T16301] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 317.807360][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 317.817557][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 317.826672][ T5846] Bluetooth: hci5: command 0x040f tx timeout [ 317.844171][T16321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3029'. [ 317.871174][T16325] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 317.985748][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 318.070253][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3035'. [ 318.091292][T16332] hsr_slave_0: left promiscuous mode [ 318.097600][T16332] hsr_slave_1: left promiscuous mode [ 318.261299][T16294] chnl_net:caif_netlink_parms(): no params data found [ 318.327808][T16342] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3038'. [ 318.427976][T16341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.572531][T16294] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.582073][T16294] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.590322][T16294] bridge_slave_0: entered allmulticast mode [ 318.600357][T16294] bridge_slave_0: entered promiscuous mode [ 318.638468][T16294] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.655978][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.670102][T16294] bridge_slave_1: entered allmulticast mode [ 318.679377][T16294] bridge_slave_1: entered promiscuous mode [ 318.791657][T16294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.809499][T16294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.939636][T16294] team0: Port device team_slave_0 added [ 318.952464][T16369] netlink: 'syz.0.3045': attribute type 1 has an invalid length. [ 318.964953][T16380] IPv6: NLM_F_REPLACE set, but no existing node found! [ 318.984073][T16378] ipvlan3: entered allmulticast mode [ 319.006822][T16378] batadv_slave_1: entered allmulticast mode [ 319.019126][T16378] batman_adv: batadv0: Adding interface: ipvlan3 [ 319.036585][T16378] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.076634][T16378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.087771][T16378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.100308][T16378] batman_adv: batadv0: Interface activated: ipvlan3 [ 319.100446][T16382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3048'. [ 319.125111][T16294] team0: Port device team_slave_1 added [ 319.185120][T16294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.207701][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.273529][T16294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.290177][T16392] netlink: 'syz.4.3052': attribute type 1 has an invalid length. [ 319.298149][T16392] netlink: 'syz.4.3052': attribute type 1 has an invalid length. [ 319.307139][T16392] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.3052'. [ 319.426500][ T5839] Bluetooth: hci4: command tx timeout [ 319.441451][T16294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.469798][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.520799][T16294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.530861][T16402] x_tables: duplicate entry at hook 3 [ 319.805067][T16412] tipc: MTU too low for tipc bearer [ 319.821614][T16294] hsr_slave_0: entered promiscuous mode [ 319.840491][T16294] hsr_slave_1: entered promiscuous mode [ 319.920924][ T5839] Bluetooth: hci5: command 0x040f tx timeout [ 320.011563][T16425] syzkaller0: entered promiscuous mode [ 320.019545][T16425] syzkaller0: entered allmulticast mode [ 320.171469][T16436] syzkaller0: entered promiscuous mode [ 320.177500][T16436] syzkaller0: entered allmulticast mode [ 320.617304][T16465] netlink: 'syz.0.3074': attribute type 11 has an invalid length. [ 320.632091][T16294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.647192][T16294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 320.825358][T16294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.837357][T16294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 320.869815][T16484] sit1: entered promiscuous mode [ 320.874810][T16484] sit1: entered allmulticast mode [ 320.940681][T16294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.958922][T16294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.089870][T16294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.101351][T16294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.444298][T16294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.482046][T16294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.506998][ T5839] Bluetooth: hci4: command tx timeout [ 321.523717][T16294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.564710][T16294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.597651][T16523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.611952][T16518] tipc: Enabling of bearer rejected, failed to enable media [ 321.663591][T16518] syzkaller1: entered promiscuous mode [ 321.676755][T16518] syzkaller1: entered allmulticast mode [ 321.861847][T16537] netlink: 'syz.0.3093': attribute type 2 has an invalid length. [ 321.899207][T16537] 9: entered promiscuous mode [ 321.989106][ T5839] Bluetooth: hci5: command 0x040f tx timeout [ 322.091946][T16549] netlink: 'syz.4.3097': attribute type 1 has an invalid length. [ 322.126827][T16294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.159102][T16546] netlink: 'syz.4.3097': attribute type 1 has an invalid length. [ 322.168225][T16546] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 322.212159][T16553] syzkaller0: entered promiscuous mode [ 322.251368][T16553] syzkaller0: entered allmulticast mode [ 322.269664][T16294] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.341522][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.348739][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.433021][T16572] __nla_validate_parse: 16 callbacks suppressed [ 322.433040][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 322.443273][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.451484][T16568] netlink: 'syz.4.3105': attribute type 10 has an invalid length. [ 322.456677][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.509201][T16568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.548622][T16568] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 322.704209][T16586] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3109'. [ 323.003349][T16596] netlink: 'syz.4.3113': attribute type 1 has an invalid length. [ 323.033801][T16596] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3113'. [ 323.059519][T16598] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 323.080224][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 323.185862][T16607] openvswitch: netlink: Flow key attribute not present in set flow. [ 323.210599][T16609] netlink: 'syz.4.3117': attribute type 4 has an invalid length. [ 323.238851][T16294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.275416][T16609] netlink: 'syz.4.3117': attribute type 4 has an invalid length. [ 323.326010][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3117'. [ 323.380648][T16615] bond0: (slave rose0): Enslaving as an active interface with an up link [ 323.448096][T16294] veth0_vlan: entered promiscuous mode [ 323.454181][T16620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3121'. [ 323.463991][T16620] netlink: 'syz.4.3121': attribute type 22 has an invalid length. [ 323.464389][T16617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 323.474415][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 323.534788][T16294] veth1_vlan: entered promiscuous mode [ 323.539771][T16622] block nbd1: not configured, cannot reconfigure [ 323.586730][ T5839] Bluetooth: hci4: command tx timeout [ 323.610297][T16620] netlink: 'syz.4.3121': attribute type 22 has an invalid length. [ 323.618715][T16294] veth0_macvtap: entered promiscuous mode [ 323.637614][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 323.653413][T16294] veth1_macvtap: entered promiscuous mode [ 323.715453][T16294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.739966][T16294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.794585][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.807193][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.822466][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.847711][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.060235][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'. [ 324.076570][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.084444][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.184965][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.202948][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.223871][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 324.661609][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.670741][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.700147][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.708484][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.716069][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.212517][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.255677][T16709] IPv6: NLM_F_REPLACE set, but no existing node found! [ 325.423221][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.575989][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.666525][ T5839] Bluetooth: hci4: command tx timeout [ 325.721020][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.833242][T16744] sock: sock_set_timeout: `syz.4.3159' (pid 16744) tries to set negative timeout [ 325.959322][T16755] batadv_slave_1: entered promiscuous mode [ 326.157785][T16764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.407103][ T12] vlan0 (unregistering): left allmulticast mode [ 326.413587][ T12] erspan0 (unregistering): left allmulticast mode [ 326.420283][ T12] vlan0 (unregistering): left promiscuous mode [ 326.786887][ T5839] Bluetooth: hci2: command tx timeout [ 326.895407][T16776] xt_policy: output policy not valid in PREROUTING and INPUT [ 328.518269][ T12] bond4 (unregistering): (slave gretap1): Releasing active interface [ 328.579504][ T12] dvmrp0 (unregistering): left allmulticast mode [ 328.606047][ T12] team0: Port device geneve0 removed [ 328.866607][ T5839] Bluetooth: hci2: command tx timeout [ 328.969241][ T12] bond0 (unregistering): Released all slaves [ 329.068544][ T12] bond1 (unregistering): Released all slaves [ 329.081032][ T12] bond2 (unregistering): Released all slaves [ 329.094532][ T12] bond3 (unregistering): Released all slaves [ 329.112164][ T12] bond4 (unregistering): Released all slaves [ 329.128649][ T12] bond5 (unregistering): Released all slaves [ 329.141867][ T12] bond6 (unregistering): Released all slaves [ 329.157979][ T12] bond7 (unregistering): Released all slaves [ 329.171574][T16755] batadv_slave_1: left promiscuous mode [ 329.212983][T16680] chnl_net:caif_netlink_parms(): no params data found [ 329.365429][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.379392][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.390516][T14751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.424329][T16786] __nla_validate_parse: 8 callbacks suppressed [ 329.424347][T16786] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3171'. [ 329.609671][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 329.622077][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3175'. [ 329.631926][T16802] validate_nla: 1 callbacks suppressed [ 329.631940][T16802] netlink: 'syz.2.3175': attribute type 15 has an invalid length. [ 329.678920][T16801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3175'. [ 329.689481][ T1105] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 329.703764][T16808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3177'. [ 329.715877][T16808] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3177'. [ 329.718230][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.736297][T16801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3175'. [ 329.744687][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.757676][T16680] bridge_slave_0: entered allmulticast mode [ 329.765689][T16680] bridge_slave_0: entered promiscuous mode [ 329.779322][ T1105] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 329.791703][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3178'. [ 329.801445][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.809037][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.825684][T16680] bridge_slave_1: entered allmulticast mode [ 329.833851][T16680] bridge_slave_1: entered promiscuous mode [ 329.843513][ T1105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 329.868862][T16813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.876473][T16813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.898000][T16813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.903376][T16816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3180'. [ 329.914886][T16813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.955547][ T1105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 330.056651][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.122355][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 330.221938][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.231425][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.282656][ T3665] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 330.292410][ T3665] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 330.399321][ T3665] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 330.423702][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.426686][ T3665] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 330.432519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.473299][T16680] team0: Port device team_slave_0 added [ 330.494107][T16680] team0: Port device team_slave_1 added [ 330.633870][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.656312][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.717220][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.760267][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.784510][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.846472][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.866926][T16875] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 330.868447][T16876] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 330.881843][ T12] : left promiscuous mode [ 330.947797][ T5839] Bluetooth: hci2: command tx timeout [ 331.012677][T16888] netlink: 'syz.3.3196': attribute type 4 has an invalid length. [ 331.049211][T16888] netlink: 'syz.3.3196': attribute type 4 has an invalid length. [ 331.135934][ T12] tipc: Left network mode [ 331.166563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.179943][T16680] hsr_slave_0: entered promiscuous mode [ 331.187641][T16680] hsr_slave_1: entered promiscuous mode [ 331.194056][T16680] debugfs: 'hsr0' already exists in 'hsr' [ 331.200412][T16680] Cannot create hsr debugfs directory [ 331.217432][T16898] nbd: device at index 64 is going down [ 331.246543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.280784][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.876526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.292690][T16680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.327370][T16680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.347797][T16680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.415932][T16680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.764092][T16976] netlink: 'syz.3.3221': attribute type 27 has an invalid length. [ 332.784204][T16976] netlink: 'syz.3.3221': attribute type 4 has an invalid length. [ 332.957715][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.026782][ T5839] Bluetooth: hci2: command tx timeout [ 333.074232][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.093752][T16995] bridge8: entered promiscuous mode [ 333.116298][T16995] bridge8: entered allmulticast mode [ 333.130486][T16995] team0: Port device bridge8 added [ 333.164444][T16999] bridge0: port 3(team0) entered blocking state [ 333.188562][T16999] bridge0: port 3(team0) entered disabled state [ 333.199943][T16999] team0: entered allmulticast mode [ 333.205211][T16999] team_slave_0: entered allmulticast mode [ 333.246380][T16999] team_slave_1: entered allmulticast mode [ 333.252154][T16999] batadv1: entered allmulticast mode [ 333.263602][T16999] team0: left allmulticast mode [ 333.270167][T16999] team_slave_0: left allmulticast mode [ 333.288434][T16999] team_slave_1: left allmulticast mode [ 333.300715][T16999] batadv1: left allmulticast mode [ 333.374619][ T3883] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.381880][ T3883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.489930][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.497153][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.587952][T17022] netlink: 'syz.3.3232': attribute type 11 has an invalid length. [ 333.601326][T17022] netlink: 'syz.3.3232': attribute type 11 has an invalid length. [ 333.994590][T17038] tipc: Started in network mode [ 334.019188][T17038] tipc: Node identity aa05a61324, cluster identity 4711 [ 334.047149][T17038] tipc: Enabled bearer , priority 0 [ 334.065676][T17042] syzkaller0: entered promiscuous mode [ 334.122631][T17042] syzkaller0: entered allmulticast mode [ 334.376786][ T12] veth1_macvtap: left promiscuous mode [ 334.383046][ T12] veth1_vlan: left promiscuous mode [ 334.398386][ T795] net_ratelimit: 4 callbacks suppressed [ 334.398403][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.417208][ T12] veth0_vlan: left promiscuous mode [ 334.467616][ T3665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.479456][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.503817][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.569827][ T12] pim6reg (unregistering): left allmulticast mode [ 334.951021][ T3665] smc: removing ib device !yz! [ 335.117479][T14751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.295208][T17042] tipc: Resetting bearer [ 335.317870][T17042] tipc: Disabling bearer [ 335.348501][ T795] tipc: Node number set to 2382734867 [ 335.372035][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.427163][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.663408][T17087] __nla_validate_parse: 13 callbacks suppressed [ 335.663427][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 335.724964][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 335.762911][T14751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.963361][T16680] veth0_vlan: entered promiscuous mode [ 336.122347][T16680] veth1_vlan: entered promiscuous mode [ 336.263624][T16680] veth0_macvtap: entered promiscuous mode [ 336.362551][T16680] veth1_macvtap: entered promiscuous mode [ 336.390954][T14754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.432943][T17117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3251'. [ 336.458153][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.470049][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.514255][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.561876][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.582059][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.609239][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.639045][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.782124][T17131] netlink: 'syz.3.3258': attribute type 21 has an invalid length. [ 336.876492][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.898091][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.021408][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.027065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.076384][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.286578][T17143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3263'. [ 337.305940][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 337.373298][T17147] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3262'. [ 337.899060][T17170] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3271'. [ 337.937924][T17175] bond0: option ad_select: unable to set because the bond device is up [ 338.006712][ T12] IPVS: stop unused estimator thread 0... [ 338.064831][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.077218][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.088425][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.109988][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.117862][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.048834][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 339.094320][T17241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3288'. [ 339.105892][T17244] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3289'. [ 339.130076][T17177] chnl_net:caif_netlink_parms(): no params data found [ 339.229071][T17253] netlink: 'syz.3.3290': attribute type 2 has an invalid length. [ 339.235414][T17252] netlink: 'syz.3.3290': attribute type 2 has an invalid length. [ 339.270912][T17252] : entered promiscuous mode [ 339.382579][T17177] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.396434][T17177] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.403733][T17177] bridge_slave_0: entered allmulticast mode [ 339.424839][T17177] bridge_slave_0: entered promiscuous mode [ 339.443219][T17177] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.466581][T17177] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.475164][T17177] bridge_slave_1: entered allmulticast mode [ 339.484684][T17177] bridge_slave_1: entered promiscuous mode [ 339.559272][T17177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.580840][T17177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.587621][ T5978] net_ratelimit: 6 callbacks suppressed [ 339.587639][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.661701][T17177] team0: Port device team_slave_0 added [ 339.681703][T17177] team0: Port device team_slave_1 added [ 339.809430][T17278] macvtap1: entered promiscuous mode [ 339.814746][T17278] vlan0: entered promiscuous mode [ 339.820254][T17278] macvtap1: entered allmulticast mode [ 339.825962][T17278] vlan0: entered allmulticast mode [ 339.833305][T17278] veth0_vlan: entered allmulticast mode [ 339.859773][T17177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.892248][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.969366][T17177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.987891][T17177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.999417][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.028398][T17177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.149437][ T5846] Bluetooth: hci1: command tx timeout [ 340.189667][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.236682][T17177] hsr_slave_0: entered promiscuous mode [ 340.243470][T17177] hsr_slave_1: entered promiscuous mode [ 340.252355][T17177] debugfs: 'hsr0' already exists in 'hsr' [ 340.258469][T17177] Cannot create hsr debugfs directory [ 340.377322][T17314] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 340.628061][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.698015][T17330] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 340.717378][T17330] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 340.942926][T17177] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.968369][T17177] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 340.998721][T17177] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.118178][T17177] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.138297][T17177] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 341.159589][T17354] __nla_validate_parse: 8 callbacks suppressed [ 341.159607][T17354] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3321'. [ 341.175959][T17177] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.197412][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.229990][T17357] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 341.249226][T17357] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3322'. [ 341.275993][T17357] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3322'. [ 341.296717][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 341.337177][T17357] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3322'. [ 341.346161][T17357] netlink: 'syz.3.3322': attribute type 2 has an invalid length. [ 341.387459][T17357] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3322'. [ 341.407850][T17359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.412234][T17361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'. [ 341.416129][T17359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.466772][T17359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.480602][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.504892][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.515744][T17357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.534205][T17177] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.545138][T17177] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 341.573904][T17177] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.652614][T17177] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.679791][T17177] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 341.704070][T17177] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.887006][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 341.981142][T17391] bond1: option xmit_hash_policy: invalid value (64) [ 342.011102][T17391] bond1 (unregistering): Released all slaves [ 342.100503][T17177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.131244][T17177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.155940][T17177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.230497][T17177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.235256][ T5846] Bluetooth: hci1: command tx timeout [ 342.604307][T17448] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3347'. [ 342.633053][T17452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3349'. [ 342.658632][T17177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.783231][T17177] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.803102][T17459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 342.841940][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.849140][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.911257][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.918558][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.211278][T17481] tipc: Trying to set illegal importance in message [ 343.221040][T17484] netlink: 'syz.1.3361': attribute type 2 has an invalid length. [ 343.234039][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.236911][T17484] netlink: 'syz.1.3361': attribute type 2 has an invalid length. [ 343.242935][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.290823][T17485] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.298083][T17485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.305591][T17485] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.312790][T17485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.391206][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.398559][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.531658][T17177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.582079][T17501] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 343.668854][T17177] veth0_vlan: entered promiscuous mode [ 343.706093][T17177] veth1_vlan: entered promiscuous mode [ 343.770885][T17177] veth0_macvtap: entered promiscuous mode [ 343.824726][T17177] veth1_macvtap: entered promiscuous mode [ 343.871091][T17177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.914138][T17177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.968975][ T3883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.005002][ T3883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.025802][ T3883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.048076][ T3883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.138472][T17534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.188182][T17534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.307211][ T5846] Bluetooth: hci1: command tx timeout [ 344.341191][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.357051][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.439201][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.447801][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.630086][T17545] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002 [ 344.653664][ T5978] IPVS: starting estimator thread 0... [ 344.660477][T17545] net_ratelimit: 89 callbacks suppressed [ 344.660494][T17545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.766980][T17548] IPVS: using max 29 ests per chain, 69600 per kthread [ 344.787223][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.796182][T17553] syzkaller1: entered promiscuous mode [ 344.812479][T17553] syzkaller1: entered allmulticast mode [ 344.833299][T17559] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 344.870114][T14754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.887320][T17559] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 345.204443][T17574] tipc: Started in network mode [ 345.210641][T17574] tipc: Node identity d67c9d60bc36, cluster identity 4711 [ 345.235623][T17574] tipc: Enabled bearer , priority 0 [ 345.243919][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.254290][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.262881][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.273710][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.282389][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.303989][T17574] syzkaller0: entered promiscuous mode [ 345.324911][T17574] syzkaller0: entered allmulticast mode [ 345.367633][T17574] tipc: Resetting bearer [ 345.399253][T17590] nftables ruleset with unbound chain [ 345.712810][ T3947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.724520][ T3947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.736116][T14751] IPVS: starting estimator thread 0... [ 345.805366][T17606] SET target dimension over the limit! [ 345.827629][T17610] IPVS: using max 29 ests per chain, 69600 per kthread [ 345.830525][T17613] syzkaller0: entered promiscuous mode [ 345.840536][T17613] syzkaller0: entered allmulticast mode [ 345.841555][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.891500][ T3947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.902861][ T3947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.951119][T17568] tipc: Resetting bearer [ 345.967994][T17568] tipc: Disabling bearer [ 345.996815][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.063301][T17621] netlink: 'syz.2.3402': attribute type 32 has an invalid length. [ 346.101873][ T3947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.124957][ T3947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.157772][T17620] : renamed from bond_slave_0 (while UP) [ 346.197604][T17621] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 346.204256][T17582] chnl_net:caif_netlink_parms(): no params data found [ 346.309664][ T3947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.339024][ T3947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.385483][T17643] __nla_validate_parse: 47 callbacks suppressed [ 346.385503][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 346.401339][ T5839] Bluetooth: hci1: command tx timeout [ 346.406942][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3406'. [ 346.417406][T17643] netlink: 'syz.1.3406': attribute type 15 has an invalid length. [ 346.507448][T17648] netlink: 'syz.3.3409': attribute type 1 has an invalid length. [ 346.572045][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'. [ 346.572604][T17643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 346.645130][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.729185][ T1105] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 346.746117][ T1105] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 346.763518][T17652] bond1 (unregistering): Released all slaves [ 346.801896][T17663] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3413'. [ 346.806545][ T1105] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 346.831937][ T1105] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 346.876621][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.922466][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3414'. [ 347.007958][T17677] smc: net device gre0 applied user defined pnetid SYZ1 [ 347.015883][T17677] smc: net device gre0 erased user defined pnetid SYZ1 [ 347.086864][T17582] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.095174][T17582] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.102934][T17582] bridge_slave_0: entered allmulticast mode [ 347.111165][T17582] bridge_slave_0: entered promiscuous mode [ 347.127469][T17683] netlink: 'syz.0.3418': attribute type 9 has an invalid length. [ 347.135234][T17683] netlink: 'syz.0.3418': attribute type 6 has an invalid length. [ 347.158469][T17582] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.190278][T17582] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.205401][T17582] bridge_slave_1: entered allmulticast mode [ 347.230957][T17582] bridge_slave_1: entered promiscuous mode [ 347.248826][T17692] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3422'. [ 347.311512][ T3947] bridge_slave_1: left allmulticast mode [ 347.319737][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.357099][ T5839] Bluetooth: hci0: command tx timeout [ 347.369624][ T3947] bridge_slave_0: left allmulticast mode [ 347.380867][ T3947] bridge_slave_0: left promiscuous mode [ 347.388517][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.758498][ T3947] bond5 (unregistering): (slave gretap1): Releasing active interface [ 347.824710][ T3947] dvmrp6 (unregistering): left allmulticast mode [ 347.912098][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.997248][ T3947] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 348.005346][ T3947] bridge2 (unregistering): left promiscuous mode [ 348.292539][ T3947] team0: Port device bridge8 removed [ 348.349631][ T3947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.361195][ T3947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.372619][ T3947] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 348.383889][ T3947] bond0 (unregistering): Released all slaves [ 348.477465][ T3947] bond1 (unregistering): Released all slaves [ 348.567922][ T3947] bond2 (unregistering): Released all slaves [ 348.583242][ T3947] bond3 (unregistering): Released all slaves [ 348.596827][ T3947] bond4 (unregistering): Released all slaves [ 348.609081][ T3947] bond5 (unregistering): Released all slaves [ 348.704232][ T3947] bond6 (unregistering): Released all slaves [ 348.719075][ T3947] bond7 (unregistering): Released all slaves [ 348.734276][ T3947] bond8 (unregistering): (slave lo): Releasing backup interface [ 348.742448][ T3947] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 348.759378][ T3947] bond8 (unregistering): Released all slaves [ 348.834074][T17582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.884655][T17582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.918272][ T3947] : left promiscuous mode [ 348.952302][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.978853][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3427'. [ 349.070089][T17723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3431'. [ 349.085285][T17723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3431'. [ 349.103905][ T3947] tipc: Left network mode [ 349.108517][T17582] team0: Port device team_slave_0 added [ 349.111722][T17582] team0: Port device team_slave_1 added [ 349.209285][ T3947] IPVS: stopping master sync thread 9744 ... [ 349.218705][ T3947] IPVS: stopping backup sync thread 16325 ... [ 349.325362][T17582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.337894][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.383609][T17582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.413432][T17582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.428412][ T5839] Bluetooth: hci0: command tx timeout [ 349.431060][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.470061][T17582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.697973][T17753] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 349.737670][T17582] hsr_slave_0: entered promiscuous mode [ 349.746861][ C1] net_ratelimit: 1 callbacks suppressed [ 349.746879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.761419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.769841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.787013][T17582] hsr_slave_1: entered promiscuous mode [ 349.793708][T17582] debugfs: 'hsr0' already exists in 'hsr' [ 349.809640][T17582] Cannot create hsr debugfs directory [ 349.988211][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.120486][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 350.166125][T17774] syzkaller1: entered promiscuous mode [ 350.173868][T17774] syzkaller1: entered allmulticast mode [ 350.189300][T17781] bridge_slave_1: left allmulticast mode [ 350.196159][T17781] bridge_slave_1: left promiscuous mode [ 350.202133][T17781] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.211853][T17781] bridge_slave_0: left allmulticast mode [ 350.219066][T17781] bridge_slave_0: left promiscuous mode [ 350.224832][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.360793][ T3947] hsr_slave_0: left promiscuous mode [ 350.375793][ T3947] hsr_slave_1: left promiscuous mode [ 350.379719][T17790] openvswitch: netlink: Key type 98 is out of range max 32 [ 350.384904][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.415768][ T3947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.441215][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.452867][ T3947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.463219][ T3947] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 350.483652][ T3947] batman_adv: batadv0: Removing interface: ipvlan3 [ 350.578975][ T3947] vlan0: left allmulticast mode [ 350.594303][ T3947] veth0_vlan: left allmulticast mode [ 350.602890][ T3947] vlan0: left promiscuous mode [ 350.609135][ T3947] team_slave_0: left promiscuous mode [ 350.614879][ T3947] team_slave_1: left promiscuous mode [ 350.620498][ T3947] batadv1: left promiscuous mode [ 350.631335][ T3947] veth1_macvtap: left promiscuous mode [ 350.645547][ T3947] veth0_macvtap: left promiscuous mode [ 350.651633][ T3947] veth1_vlan: left promiscuous mode [ 350.657205][ T3947] veth0_vlan: left promiscuous mode [ 350.842167][T17814] netlink: 'syz.0.3454': attribute type 21 has an invalid length. [ 350.953320][T17820] netlink: 'syz.0.3454': attribute type 1 has an invalid length. [ 350.967780][T17820] netlink: 'syz.0.3454': attribute type 3 has an invalid length. [ 351.029386][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.268098][ T3947] team0 (unregistering): Port device batadv1 removed [ 351.516423][ T5839] Bluetooth: hci0: command tx timeout [ 351.610224][ T3947] team0 (unregistering): Port device team_slave_1 removed [ 351.654436][ T3947] team0 (unregistering): Port device team_slave_0 removed [ 351.752007][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.879493][ T3947] vcan0 (unregistering): left allmulticast mode [ 351.923589][T17814] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 351.925400][T17817] __nla_validate_parse: 1 callbacks suppressed [ 351.925419][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 352.015093][T17824] vlan2: entered promiscuous mode [ 352.021484][T17824] vlan2: entered allmulticast mode [ 352.036325][T17824] hsr_slave_1: entered allmulticast mode [ 352.073480][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.082166][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 352.183989][T17833] ipvlan2: entered promiscuous mode [ 352.569608][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3466'. [ 352.599358][T17857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3466'. [ 352.642048][T17858] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 352.655100][T17863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.664484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.676098][ T1315] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 352.701345][T17858] bond1 (unregistering): Released all slaves [ 352.795519][T17872] netlink: 'syz.1.3471': attribute type 27 has an invalid length. [ 352.834257][T17872] vlan2: entered promiscuous mode [ 352.844338][T17874] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 352.850333][T17872] bridge0: entered promiscuous mode [ 352.888264][ T3947] IPVS: stop unused estimator thread 0... [ 352.958951][T17878] xt_socket: unknown flags 0x50 [ 353.074034][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'. [ 353.213474][T17885] xt_l2tp: missing protocol rule (udp|l2tpip) [ 353.354004][T17582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.398770][T17582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.434068][T17899] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3476'. [ 353.466872][T17582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.501151][T17582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.535588][T17905] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3478'. [ 353.586360][ T5839] Bluetooth: hci0: command tx timeout [ 353.819458][T17582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.992529][T17582] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.034369][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.041650][ T6396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.125982][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.133235][ T6396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.233138][T17950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3490'. [ 354.290923][T17953] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 354.341513][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 354.613560][T17582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.651177][T17975] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.659823][T17975] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.770370][T17980] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 354.783664][T17980] bond2 (unregistering): Released all slaves [ 354.874576][T17988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3498'. [ 355.161202][T18006] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 355.223527][T18006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.263204][T18006] bond2: (slave veth3): Enslaving as an active interface with a down link [ 355.324430][T18006] bond3: option resend_igmp: invalid value (32767) [ 355.335370][T18006] bond3: option resend_igmp: allowed values 0 - 255 [ 355.348949][T18006] bond3 (unregistering): Released all slaves [ 355.422234][T18017] vlan3: entered allmulticast mode [ 355.428130][T18017] veth1: entered allmulticast mode [ 355.434230][T18017] veth1: entered promiscuous mode [ 355.440798][T18017] veth1: left promiscuous mode [ 355.448536][T18017] bond2: (slave vlan3): making interface the new active one [ 355.458480][T18017] veth1: entered promiscuous mode [ 355.465872][T18017] vlan3: entered promiscuous mode [ 355.482421][T18017] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 355.612973][T18033] net_ratelimit: 6 callbacks suppressed [ 355.612995][T18033] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 355.631875][T18037] netlink: 'syz.2.3510': attribute type 1 has an invalid length. [ 355.641263][T18037] netlink: 'syz.2.3510': attribute type 2 has an invalid length. [ 355.650688][T18036] netlink: 'syz.2.3510': attribute type 1 has an invalid length. [ 355.677386][T18036] netlink: 'syz.2.3510': attribute type 2 has an invalid length. [ 355.702440][T17582] veth0_vlan: entered promiscuous mode [ 355.745213][T17582] veth1_vlan: entered promiscuous mode [ 355.863359][T17582] veth0_macvtap: entered promiscuous mode [ 355.927404][T17582] veth1_macvtap: entered promiscuous mode [ 355.991808][T17582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.030311][T17582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.068829][ T3883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.082107][T18059] Bluetooth: MGMT ver 1.23 [ 356.097359][T18059] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 356.123468][ T3883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.132972][ T3883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.185457][T18059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.195784][ T1105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.365300][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.397399][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.450861][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.473969][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.855086][T18101] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 356.921107][T18101] bond1 (unregistering): Released all slaves [ 357.170104][T18112] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.189828][T18118] __nla_validate_parse: 8 callbacks suppressed [ 357.189840][T18118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3535'. [ 357.242207][T18112] unsupported nlmsg_type 40 [ 357.273747][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3532'. [ 357.319138][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'. [ 357.353249][T18127] tipc: Enabling of bearer rejected, media not registered [ 357.389125][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3541'. [ 357.409096][T18132] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3540'. [ 357.474185][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.498034][T18140] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3543'. [ 357.524700][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.563861][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.577538][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.603149][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.615025][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 357.615292][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.633130][T18146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3545'. [ 357.643252][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 357.653265][T18146] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3545'. [ 357.654705][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.692651][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.715388][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.730442][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.762320][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.772193][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.792488][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.803634][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.822587][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.848072][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.877367][T18136] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 357.896500][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.920295][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.942799][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.985263][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.011620][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.027435][T18166] xt_nat: multiple ranges no longer supported [ 358.048709][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.082727][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.120510][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.169138][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.414785][ T1105] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 358.572341][ T1105] bond2 (unregistering): (slave gretap1): Releasing active interface [ 358.634879][ T1105] dvmrp0 (unregistering): left allmulticast mode [ 358.653901][ T1105] bond5 (unregistering): (slave geneve2): Releasing active interface [ 358.868035][ T1105] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 359.089859][ T1105] ` (unregistering): (slave 32): Releasing backup interface [ 359.098132][ T1105] : left allmulticast mode [ 359.104218][ T1105] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.112900][ T1105] bond_slave_1: left allmulticast mode [ 359.120511][ T1105] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 359.129960][ T1105] bridge_slave_1: left allmulticast mode [ 359.135894][ T1105] ` (unregistering): Released all slaves [ 359.227063][ T1105] bond1 (unregistering): Released all slaves [ 359.239231][ T1105] bond2 (unregistering): Released all slaves [ 359.251541][ T1105] bond3 (unregistering): Released all slaves [ 359.264147][ T1105] bond4 (unregistering): Released all slaves [ 359.366651][ T1105] bond5 (unregistering): Released all slaves [ 359.381899][ T1105] bond6 (unregistering): Released all slaves [ 359.394742][ T1105] bond0 (unregistering): (slave bond7): Releasing backup interface [ 359.403435][ T1105] bond0 (unregistering): Released all slaves [ 359.497528][ T1105] bond7 (unregistering): Released all slaves [ 359.511811][ T1105] bond8 (unregistering): Released all slaves [ 359.524728][ T1105] bond9 (unregistering): (slave C): Releasing backup interface [ 359.532807][ T1105] bond9 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 359.545353][ T1105] bond9 (unregistering): Released all slaves [ 359.561793][ T1105] bond10 (unregistering): Released all slaves [ 359.575895][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.613098][T18177] tipc: Started in network mode [ 359.625463][T18177] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 359.642744][T18177] tipc: Enabled bearer , priority 10 [ 359.781355][T18199] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 359.820973][ T1105] tipc: Left network mode [ 360.666875][ T1105] hsr_slave_0: left promiscuous mode [ 360.685208][ T1105] hsr_slave_1: left promiscuous mode [ 360.696062][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.726569][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.735197][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.754779][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.778373][ T1105] veth1_macvtap: left promiscuous mode [ 360.783951][ T1105] veth0_macvtap: left promiscuous mode [ 360.792342][ T1105] veth0_vlan: left promiscuous mode [ 360.804783][T18265] sctp: [Deprecated]: syz.2.3574 (pid 18265) Use of int in max_burst socket option. [ 360.804783][T18265] Use struct sctp_assoc_value instead [ 361.600634][ T5897] tipc: Node number set to 1 [ 361.744081][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.751962][T18256] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.877629][T18256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.894110][T18256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.006594][T18264] geneve2: entered promiscuous mode [ 362.011911][T18264] geneve2: entered allmulticast mode [ 362.556907][T18281] team0 (unregistering): Port device team_slave_0 removed [ 362.569682][T18281] team0 (unregistering): Port device team_slave_1 removed [ 362.603739][ T6396] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.629985][ T6396] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 362.661129][T18309] __nla_validate_parse: 5 callbacks suppressed [ 362.661150][T18309] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3588'. [ 362.705673][ T6396] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.717658][ T6396] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 362.734261][T18311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3589'. [ 362.800182][ T6396] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.843306][ T6396] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 362.864657][ T6396] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.883412][ T6396] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 362.884366][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 362.948843][T18315] validate_nla: 16 callbacks suppressed [ 362.948863][T18315] netlink: 'syz.2.3590': attribute type 5 has an invalid length. [ 362.973272][T18315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3590'. [ 363.058721][T18328] Bluetooth: MGMT ver 1.23 [ 363.596463][T18314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.627922][T18314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.903306][T18314] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 363.988588][ T6396] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 363.997900][ T6396] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.006944][ T6396] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.041030][T18315] geneve2: entered promiscuous mode [ 364.058544][T18315] geneve2: entered allmulticast mode [ 364.107560][ T6396] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 364.138021][ T6396] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.161610][ T6396] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.182238][ T1105] IPVS: stop unused estimator thread 0... [ 364.272965][ T6396] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 364.298723][ T6396] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.318684][ T6396] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.347802][ T6396] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 364.361485][ T6396] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.372451][ T6396] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.408458][ T6396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 364.418457][ T6396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 364.452103][ T6396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 364.492898][ T6396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 364.529419][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 364.556331][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 364.565234][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 364.907437][T18392] netlink: 'syz.4.3615': attribute type 12 has an invalid length. [ 364.960141][T18397] veth0: entered promiscuous mode [ 364.965614][T18397] veth0: left promiscuous mode [ 364.967254][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3615'. [ 364.972712][T18397] netlink: 'syz.4.3615': attribute type 12 has an invalid length. [ 364.989842][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3615'. [ 365.040077][T18397] netlink: 'syz.4.3615': attribute type 12 has an invalid length. [ 365.044856][ T3883] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.053348][T18403] netlink: 'syz.3.3617': attribute type 1 has an invalid length. [ 365.060559][T18392] netlink: 'syz.4.3615': attribute type 12 has an invalid length. [ 365.078709][ T3883] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.081914][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3615'. [ 365.097995][ T3883] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.117594][ T3883] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.173558][T18407] batadv0: mtu less than device minimum [ 365.283294][T18413] netlink: 'syz.4.3619': attribute type 10 has an invalid length. [ 365.294027][T18413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.305315][T18413] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 365.946654][T18446] nbd0: detected capacity change from 0 to 127 [ 365.980423][T18450] tipc: Enabled bearer , priority 0 [ 365.989310][T18450] syzkaller0: entered promiscuous mode [ 365.997315][T18450] syzkaller0: entered allmulticast mode [ 366.028693][T18450] tipc: Resetting bearer [ 366.044752][T18449] tipc: Resetting bearer [ 366.080560][T18449] tipc: Disabling bearer [ 366.654479][ T5839] block nbd0: Receive control failed (result -32) [ 366.666637][ T1131] vlan3: left promiscuous mode [ 366.828789][T18513] netlink: 'syz.1.3653': attribute type 10 has an invalid length. [ 366.835256][T18515] tipc: Enabling of bearer rejected, failed to enable media [ 366.879689][T18513] team0: Device veth1_macvtap failed to register rx_handler [ 366.903307][T18514] tipc: Enabling of bearer rejected, failed to enable media [ 367.119753][T18532] syzkaller0: entered promiscuous mode [ 367.125443][T18532] syzkaller0: entered allmulticast mode [ 367.638560][T18576] tipc: Enabling of bearer rejected, failed to enable media [ 367.955159][ C0] hrtimer: interrupt took 44116693 ns [ 491.616235][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 491.623243][ C1] rcu: 0-...!: (1 GPs behind) idle=334c/1/0x4000000000000000 softirq=68494/68494 fqs=5 [ 491.634010][ C1] rcu: (detected by 1, t=10502 jiffies, g=61109, q=1079 ncpus=2) [ 491.641839][ C1] Sending NMI from CPU 1 to CPUs 0: [ 491.641873][ C0] NMI backtrace for cpu 0 [ 491.641894][ C0] CPU: 0 UID: 0 PID: 18605 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 491.641911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.641925][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70 [ 491.641951][ C0] Code: 5b e9 03 35 5b 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 b0 7e 92 <65> 8b 15 c8 fd bc 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 491.641964][ C0] RSP: 0018:ffffc90000007d10 EFLAGS: 00000002 [ 491.641978][ C0] RAX: ffffffff81af4cb9 RBX: 0000000000000001 RCX: ffff88802ce61e80 [ 491.641990][ C0] RDX: ffff88802ce61e80 RSI: ffffffff8bc08340 RDI: ffffffff8bc08300 [ 491.642001][ C0] RBP: ffffc90000007e90 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 491.642012][ C0] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: ffff8880529de300 [ 491.642023][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86283c0 [ 491.642034][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 491.642047][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.642058][ C0] CR2: 00007f9cd4e7bb4c CR3: 000000006b8b2000 CR4: 00000000003526f0 [ 491.642072][ C0] Call Trace: [ 491.642080][ C0] [ 491.642086][ C0] debug_deactivate+0x89/0x1e0 [ 491.642111][ C0] __hrtimer_run_queues+0x2b0/0xc30 [ 491.642128][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 491.642154][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 491.642171][ C0] ? read_tsc+0x9/0x20 [ 491.642194][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 491.642226][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 491.642246][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 491.642262][ C0] [ 491.642267][ C0] [ 491.642274][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.642290][ C0] RIP: 0010:unwind_next_frame+0x524/0x23d0 [ 491.642307][ C0] Code: 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 <48> 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 e9 [ 491.642319][ C0] RSP: 0018:ffffc9000e7c6ff8 EFLAGS: 00000283 [ 491.642332][ C0] RAX: ffffffff8b5bbf7a RBX: ffffffff90092954 RCX: ffffffff9009294c [ 491.642344][ C0] RDX: ffffffff90092920 RSI: ffffffff90bc2b42 RDI: ffffffff8bc08300 [ 491.642355][ C0] RBP: ffffffff9009293c R08: 000000000000000e R09: ffffffff8df41a20 [ 491.642365][ C0] R10: ffffc9000e7c7118 R11: ffffffff81ada120 R12: ffffffff8b5bbff1 [ 491.642382][ C0] R13: ffffffff90092938 R14: ffffc9000e7c70c8 R15: ffffffff90092948 [ 491.642394][ C0] ? exc_page_fault+0x81/0x100 [ 491.642408][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 491.642430][ C0] ? exc_page_fault+0xa/0x100 [ 491.642452][ C0] ? unwind_next_frame+0xd4/0x23d0 [ 491.642472][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 491.642488][ C0] ? exc_page_fault+0x82/0x100 [ 491.642501][ C0] ? exc_page_fault+0x82/0x100 [ 491.642517][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 491.642537][ C0] arch_stack_walk+0x11c/0x150 [ 491.642557][ C0] ? exc_page_fault+0x82/0x100 [ 491.642573][ C0] stack_trace_save+0x9c/0xe0 [ 491.642592][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 491.642612][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 491.642631][ C0] kasan_save_track+0x3e/0x80 [ 491.642646][ C0] ? kasan_save_track+0x3e/0x80 [ 491.642659][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 491.642674][ C0] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 491.642693][ C0] ? __pmd_alloc+0xc2/0x5d0 [ 491.642711][ C0] ? handle_mm_fault+0xe51/0x32b0 [ 491.642728][ C0] ? do_user_addr_fault+0x764/0x1380 [ 491.642742][ C0] ? exc_page_fault+0x82/0x100 [ 491.642780][ C0] __kasan_slab_alloc+0x6c/0x80 [ 491.642796][ C0] kmem_cache_alloc_noprof+0x37d/0x710 [ 491.642816][ C0] ? set_page_refcounted+0xa0/0x1e0 [ 491.642833][ C0] ? __pmd_alloc+0xc2/0x5d0 [ 491.642854][ C0] __pmd_alloc+0xc2/0x5d0 [ 491.642875][ C0] handle_mm_fault+0xe51/0x32b0 [ 491.642902][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 491.642925][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 491.642955][ C0] ? lock_mm_and_find_vma+0x9c/0x300 [ 491.642971][ C0] do_user_addr_fault+0x764/0x1380 [ 491.642994][ C0] exc_page_fault+0x82/0x100 [ 491.643010][ C0] asm_exc_page_fault+0x26/0x30 [ 491.643024][ C0] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 491.643042][ C0] Code: c9 75 f6 e9 92 59 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 491.643054][ C0] RSP: 0018:ffffc9000e7c78f8 EFLAGS: 00050206 [ 491.643066][ C0] RAX: 0000000000000000 RBX: 00007f9cd4e7c310 RCX: 00000000000004b4 [ 491.643076][ C0] RDX: 0000000000000000 RSI: ffffffff8d979363 RDI: 00007f9cd4e7bb4c [ 491.643087][ C0] RBP: dffffc0000000000 R08: ffffffff820f72d0 R09: ffff88801d7d0f80 [ 491.643098][ C0] R10: dffffc0000000000 R11: ffffed10059cc3d1 R12: 00007f9cd4e7bb4c [ 491.643109][ C0] R13: 0000000000000b4c R14: 00000000000004b4 R15: ffff888028c960a8 [ 491.643124][ C0] ? __might_fault+0xb0/0x130 [ 491.643147][ C0] elf_load+0x4d2/0x6c0 [ 491.643171][ C0] load_elf_interp+0x4ce/0xb60 [ 491.643198][ C0] load_elf_binary+0x1a01/0x2740 [ 491.643234][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 491.643261][ C0] bprm_execve+0x92e/0x1400 [ 491.643284][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 491.643298][ C0] ? copy_string_kernel+0x25f/0x2a0 [ 491.643320][ C0] kernel_execve+0x8f0/0x9f0 [ 491.643340][ C0] call_usermodehelper_exec_async+0x210/0x360 [ 491.643356][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 491.643373][ C0] ret_from_fork+0x599/0xb30 [ 491.643394][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 491.643414][ C0] ? __switch_to_asm+0x39/0x70 [ 491.643431][ C0] ? __switch_to_asm+0x33/0x70 [ 491.643448][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 491.643465][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.643491][ C0] [ 491.643866][ C1] rcu: rcu_preempt kthread starved for 10492 jiffies! g61109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 492.234843][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 492.244914][ C1] rcu: RCU grace-period kthread stack dump: [ 492.250795][ C1] task:rcu_preempt state:R running task stack:27272 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 492.264292][ C1] Call Trace: [ 492.267570][ C1] [ 492.270539][ C1] __schedule+0x14bc/0x5000 [ 492.275068][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 492.280270][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 492.286429][ C1] ? __pfx___schedule+0x10/0x10 [ 492.291288][ C1] ? schedule+0x91/0x360 [ 492.295551][ C1] schedule+0x165/0x360 [ 492.299708][ C1] schedule_timeout+0x12b/0x270 [ 492.304571][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 492.309942][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 492.315841][ C1] ? __pfx_process_timeout+0x10/0x10 [ 492.321130][ C1] ? prepare_to_swait_event+0x341/0x380 [ 492.326682][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 492.331547][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 492.337706][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 492.342998][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 492.348229][ C1] ? finish_swait+0xcd/0x1f0 [ 492.352846][ C1] rcu_gp_kthread+0x99/0x390 [ 492.357446][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 492.362649][ C1] ? __kthread_parkme+0x7b/0x200 [ 492.367588][ C1] ? __kthread_parkme+0x1a1/0x200 [ 492.372617][ C1] kthread+0x711/0x8a0 [ 492.376699][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 492.381894][ C1] ? __pfx_kthread+0x10/0x10 [ 492.386483][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.391685][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 492.396875][ C1] ? __pfx_kthread+0x10/0x10 [ 492.401469][ C1] ret_from_fork+0x599/0xb30 [ 492.406066][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 492.411187][ C1] ? __switch_to_asm+0x39/0x70 [ 492.415959][ C1] ? __switch_to_asm+0x33/0x70 [ 492.420723][ C1] ? __pfx_kthread+0x10/0x10 [ 492.425311][ C1] ret_from_fork_asm+0x1a/0x30 [ 492.430092][ C1] [ 492.433103][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 492.439418][ C1] CPU: 1 UID: 0 PID: 3665 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 492.448955][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.459002][ C1] Workqueue: events_unbound toggle_allocation_gate [ 492.465506][ C1] RIP: 0010:smp_call_function_many_cond+0xccd/0x12b0 [ 492.472184][ C1] Code: 00 00 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4a 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 f5 95 0b 00 eb 38 90 42 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 [ 492.491801][ C1] RSP: 0018:ffffc9000c9c7620 EFLAGS: 00000293 [ 492.497879][ C1] RAX: ffffffff81b61c77 RBX: 1ffff110170c856d RCX: ffff888030d08000 [ 492.505850][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 492.513821][ C1] RBP: ffffc9000c9c77a0 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 492.521879][ C1] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: ffff8880b8642b68 [ 492.529852][ C1] R13: dffffc0000000000 R14: ffff8880b873bb00 R15: 0000000000000000 [ 492.537826][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 492.546759][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.553337][ C1] CR2: 00007faeebed6a10 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 492.561312][ C1] Call Trace: [ 492.564592][ C1] [ 492.567540][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 492.572580][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 492.578915][ C1] ? kmem_cache_alloc_bulk_noprof+0xaa/0x720 [ 492.584891][ C1] ? __pfx___text_poke+0x10/0x10 [ 492.589826][ C1] ? rcu_is_watching+0x15/0xb0 [ 492.594601][ C1] ? trace_contention_end+0x39/0x100 [ 492.599895][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 492.604924][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 492.610047][ C1] smp_text_poke_batch_finish+0x5f9/0x1130 [ 492.615861][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 492.622024][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 492.627049][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 492.633297][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 492.639554][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 492.645542][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 492.651443][ C1] static_key_enable+0x1a/0x20 [ 492.656213][ C1] toggle_allocation_gate+0xad/0x240 [ 492.661498][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 492.667394][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 492.673121][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 492.678835][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 492.684553][ C1] process_scheduled_works+0xad1/0x1770 [ 492.690129][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.696125][ C1] worker_thread+0x8a0/0xda0 [ 492.700739][ C1] kthread+0x711/0x8a0 [ 492.704813][ C1] ? __pfx_worker_thread+0x10/0x10 [ 492.709920][ C1] ? __pfx_kthread+0x10/0x10 [ 492.714511][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.719723][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 492.724920][ C1] ? __pfx_kthread+0x10/0x10 [ 492.729510][ C1] ret_from_fork+0x599/0xb30 [ 492.734108][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 492.739228][ C1] ? __switch_to_asm+0x39/0x70 [ 492.743993][ C1] ? __switch_to_asm+0x33/0x70 [ 492.748754][ C1] ? __pfx_kthread+0x10/0x10 [ 492.753353][ C1] ret_from_fork_asm+0x1a/0x30 [ 492.758137][ C1]