last executing test programs: 3.72120328s ago: executing program 0 (id=6102): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd28, 0x25dfdbfd, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @random="9a9081899330", {0x3, 0xffb}}, 0x9042, 0x1000, @broadcast, {0x0, 0x5, @random="ea897d5b41"}, @void, @void, [{0xdd, 0x8d, "017b2dcddb1be040ebac7a9f8b3157b1fe0e942469fcff2a9496bf2ebcd2c825f6fcd0d8ab3fa7e7497cd269a625fac7a1e73880ec82fa55a09155313fbbdcfbc6a79c66c04197a837189fe7c6b5e9a8469b64389fa579780a3767753206dc7f5df6d8ec9c73f06239a171fb21587e66f0f327d811236723dd53031be213b3170227f6fda98c7c63e2303a98b8"}, {0xdd, 0xf1, "1c60cd9d399af9f4543fa8429d49c0cf16afbac9eee96a9bf0f666bb61a1f53850ae0454405a2ef376fcda0329943eccf80b9e2e6e6506792f5291528732dac2f31fe6289b1d91ba46c7083991ba1a201c65fdb4621afadf15d3b755be237e65a36e723ee03fcb056b2ed0a8a2e67a174d91283e8582e666dc369459789f2c9c3b8ba80926dc022978a7a1fae6a87b0bcd141af9fd0b83845ff0f79504c693ea8527c376898be7d0b87e05e16f73659f9de20b6bb908df97b9408d2efaf374002acb869cf6625554df2aae5ac02e334171ac75df6ad86a7eefd4f888be9a2f82427a4ba7884f00e562be65bd98eaeb24d5"}, {0xdd, 0xfb, "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"}, {0xdd, 0xf8, "52f6e62f36496135270be293b18c0b0ea7f21322cad8a4c222460e21bc1a1ef723c0d5da7e0cadeef1f47831893eda0fb5df29d21288dc4f8c79cef10f784e178aa351134323a6e6ec86dea108140aa85198ee57b491bc697f6f7cf960804efff643ff049f1e4a9aec57cadabbbb35cb5001637b6c5e94c154b6835d8303cfb1e7e2fa2dd3fe93eef97a24a780695876d1d8e59c47ec914220b6846438d330830f81ca12c861935055a5a307196ce4ad899a612c62ac5d62334330ae1805221c95e4ff9543a5eca957d40944ffecca28484091a19d16f3a55a41753437ab814637aa1d93e1c035de6ddd7f7b086b012461be3ebaff1ce8a2"}, {0xdd, 0xa8, "0724ad476affceea5fee62f00b44087bee71464d4289dc82cdffefc86716967e47334f6f177961fbf2ba841831f01d3a8222e7e5a59319232a2f5e375b49b222ac72faeb50ef1fb89450025dd4d74a13fe7451f39abe13f351f8a5e10ca38471c9c5dd3b1139790e276a2182c3bcc52fd070bb3d4e923a19d599ee29785e3438c3196538754fa99be0205374db8869469eb4c2a1d78f09c3e43248eef8741c1b48bf02e1df41c16a"}, {0xdd, 0x1b, "501dab66fe028c40cdcaf696bc062c28b5323037b942dd171fab76"}, {0xdd, 0xd6, "817abe769cd0f71ccf0f23172d591d0d33cce3042b091b22ed716962b3b69507360534809580ac50581c8c94ab43f950d4a0c4534f9b35f840cecb0067fc66a45059159a19e8a8cbc5438dc94f9a327b78e06406f10aa2c44a284fad945f742d92d4a067f7d0b6dc37504893b326dce0f104997d123e8969f89e407e074bf0c66b31b70096d5ca02dec300bc2fcb89bb9365b1608a32d1d424f3644691a542299b5adb081786182256d1ece2044d9bd8000fe3a40acae7ecea8fb2600f681598e147dc1a6cd665c102f475ee55787cad68fca2015457"}, {0xdd, 0xb3, "03d92c7ae01c0607d92fda7f52bd235cc9aa337830181f2ac216d08c27605f83db3fc40ef69a5b2576c3a189fb1175fe12e370add9877fc9163b122d1f2d7b1f9fc10afa2886f10bc6badd7f4fb19c8c46e73a3a9852ddf4c747553619e5e524899f9b157656c1b167f019f9f2a34f64257c549bc828c850aebb48dd4997c0d1e86023ae4e3075216489bbdafb4fa1b1145098ee26001244857afaa96c04ee87b896803dd1babda126e3065b92ba91d4f9c2a2"}, {0xdd, 0x13, "f0e254d30bb078ddefaf262d008b192b771e84"}]}, 0x60b) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x77, @ipv4={'\x00', '\xff\xff', @empty}, 0x4000000}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000000)) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @empty, 0x9}, 0x1c) 3.539509799s ago: executing program 0 (id=6106): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080), 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.392238974s ago: executing program 0 (id=6109): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) 3.044672398s ago: executing program 0 (id=6115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0x6, 0x0, 0x9, 0x30, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x849, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x27, 0x80000, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="7d761bfd0f5d979b5f7f7b198a19f8182779048911d8a3f41891c70d807d88c17cd191880046772ca3f024cd4092b6f1254c463769c1779754beb2775b10e4824890285d58d1d5581bd9ff2771a1447e50be20af3e1ea07efbdfafbe11d6ab2d61af63e9a1432dcae8fa348da327b57ac89c232600b496da345353c147c555ab6115b18f57cd1d6d5e4094bde97e8eee9177d6ed414bcd025245336a22ec3cd7c6ceb7fa15728658f27adaea187745478e96007914858df5f285ce6ba19a9c945a88f998b79894ac3fae576e29e4e95c4cb166ea70", 0xd5}], 0x1, &(0x7f0000000300)=[{0xa0, 0x7, 0x8d, "a2aa3816730e2dddb42a2c3ce7b702479535cb0ad33ed90b04dab8099dfd26f880c6bfaa6295b2cf9537360b4f0005a52efa616c9154c1cb794449e4d2b9b2679cc9fd0ed7d0e25eded50cf37ba9388955143ebd65cb3399e508473fca435220710e1d0ef92491e2adc70836160772f517e25cc2564d666a185e09df0c56d811a2cdf3e9ff1447440418f22ba0"}, {0x88, 0x84, 0xfff, "c37def921c2f9da845f140fb7b4cdcb4cde59bb55ce717e4fd6b765759d8f20ccde44cd32abe7c73b63aae8dfabb023eb7bc314123f2e7d04b941adc0265a56194fcfbefae01a74d216ea70eddc5c207c6d7d29fb68fd3b756ca60de0ec0daf69642996d9895ec09b12e6dc6a74ee8b233"}, {0x18, 0x10f, 0x8, "c80a"}], 0x140}, 0x4000) 2.928619002s ago: executing program 0 (id=6117): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x5c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xa}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x28c, 0x97}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffa}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8021}, 0x4008040) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0, r9}, 0x14) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000005c0)=@xdp={0x2c, 0x4, r9, 0x827}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000640)={0x0, 0x21, '\x00', [@generic={0x5e, 0x86, "2a6747dc3cf88c90d8dd5f0a2525937b232887e070245420b648d5259d4148f858b5c830c541b59e676a49738aa12388f45cdd442bccc3191136c28c32c7f8c0e04f966b8d8d64eec3c653d48196365451b7318216b058560ec26cb1195d22c77d43af516b68054a8c9720a179538057a231ca2d38ee963a8bd79d405573d5ff7ed8cfd4c640"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x92}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x6}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x50, {0x2, 0x12, 0x35, 0x3, [0x5, 0x9, 0x46224179, 0x1, 0xfffffffffffffffd, 0x3, 0xe0, 0x9, 0x7]}}]}, 0x118) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2.748545833s ago: executing program 3 (id=6119): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e3, &(0x7f0000000000)={r0}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.573098567s ago: executing program 0 (id=6121): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a010400000000000000000200000028000480240001800b0001006e756d67656e000014000280080002400000000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000022000000000abe60ae97618be3b0e5668d85587d39f479831141a9c5b482ca04bf9148c0a236310a904b226ab63dd10660d6e34c26df6b0b52bf8073a6aa06c05699a220cbfe0252b9ecb5b4d2ceadb4485512e3cb905638c93657c6410aff2855eb368f5a35f600d638fe42646e2225dc"], 0x7c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111a771d09300001600"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2.384440225s ago: executing program 1 (id=6125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) r7 = openat$cgroup_ro(r5, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000208000440000000000900010073a7bb91fde3c95ac40003400000000a140000001107010000000000000000000000000a"], 0x64}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c0003000000000000000000140001"], 0x114}], 0x1}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f0000000300)="40cb35d7c791fab7ae7265cc4035e5202fab86cf4252355fb47e97e605f28af3dcd33601c57344120225c16b19895479043c1eec3042b8e9db8333bce6f785fb36ad35b40871e4227b23da08e48628ab18c11d815f3da79279be3fe5ebdbc6db0d76", &(0x7f0000000380)=@buf="b9ea9a8d69a14f60a6d009ae952a14658c4220bb2f3861409143fdd309fcfa7e20ff864082b7d12da1fc62625a72e2676989fb7175b2db9434a7b0dab89f5783908788d187b7bf5c1dfb6209aab97ef01696eefc2e9b29e992c48a0040ff1d938d7be1e1cc2cb944fc959582be4ecf171b769a742ac3a83a654f33c8c7fec0d70ddba66c277cf529c1a83f61edbe353ca853f6a54956357369f8e5845bf006ebec"}, 0x20) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001280)={0x0, "58f70c2a0e0958ceee9f88f578578685"}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000480)={0xa, [0x9, 0xc82d, 0xb, 0x1, 0x5c, 0x9, 0x1ff, 0xe, 0x3, 0x80]}, &(0x7f00000006c0)=0x18) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000002280)={{r5}, 0x0, 0x2, @unused=[0x8, 0x32, 0x3, 0x3], @devid=r10}) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x3, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_FILTER={0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa08c0220}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000b00), &(0x7f0000000b40)='%+9llu \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r11, 0x58, &(0x7f0000000700)}, 0x10) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x218, 0x30, 0x51b, 0x0, 0x25dfdbff, {}, [{0x204, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20000000}}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xfffffe82}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7}}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x218}}, 0x0) 2.253271262s ago: executing program 3 (id=6127): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f00000001c0)="2dbd9c4c604d14f1eae96fdc2afec72def591b4e7b599b4c1ff936ff1297da0db86d9d34f6762493ae351510b8143600dfaa096e8b5eb5d74082b195d2d10a295ea551fb08e5d86937f2cb447b5752b02d62c3d7fd79bb0f505f2320a066564799cb8ed87f1a387934638d7c33d5998d533aaf4dd8259a46fa4c364a0aee33a885aae2782eec9b3904f33852d1aafcf5faeb3757937430", &(0x7f0000000500)=""/253}, 0x20) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd28, 0x0, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x4, 0xc8, 0x9, 0x20000000}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x20000800) 2.169235709s ago: executing program 1 (id=6130): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x9, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'dummy0\x00'}]}}]}, 0x48}}, 0x20040054) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000000)) r10 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, 0x1c) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ipvlan1\x00', 0x400}) 2.027060526s ago: executing program 3 (id=6131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xb, 0x9}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r11, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) 1.479839571s ago: executing program 4 (id=6136): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0xf, 0x18}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000000c0)=""/56, 0x38, 0x0, &(0x7f0000000200)=""/187, 0xbb}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005001c00"/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x401, 0x800, 0xbe3, 0x20000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x401, 0x800, 0xbe3, 0x20000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000740)=r1}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x2}, 0xc) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x33, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ldst={0x0, 0x0, 0x4, 0xb, 0xa, 0x8, 0xffffffffffffffff}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @alu={0x7, 0x0, 0x1, 0x3, 0x9, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, r2, 0x8, &(0x7f0000000080)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x1, &(0x7f0000000800)=[r7, 0xffffffffffffffff, r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000840)=[{0x1, 0x1, 0xe, 0x4}], 0x10, 0xfeb}, 0x94) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r15, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) 1.47661883s ago: executing program 1 (id=6137): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r1, &(0x7f00000008c0)="3f030300031b12000000000789e9aaa911d7c2ff070088a800008100642c", 0x1e, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random}, 0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x5) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 1.203113478s ago: executing program 4 (id=6139): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20010040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x98, 0x43, 0x8, 0x70bd2d, 0x25dfdbfe, {0xd}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xffffffffffff4481}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x3}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x9}, @NDTPA_APP_PROBES={0x8, 0x9, 0x6}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x1}]}, @NDTA_THRESH3={0x8, 0x4, 0x8}, @NDTA_THRESH3={0x8, 0x4, 0x95}, @NDTA_PARMS={0x3c, 0x6, 0x0, 0x1, [@NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x1}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x5}, @NDTPA_LOCKTIME={0xc, 0xf, 0x1e}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x80}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2fa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffb}, @NL80211_ATTR_IE={0x87, 0x2a, [@challenge={0x10, 0x1, 0x3a}, @measure_req={0x26, 0x6f, {0x2, 0x3, 0xf0, "f03b4614904155df480a6417ff38605386c612eb59ed2de9e17663e68442ac326295ee27dc7f9814a23df1daeb6e8eb0322b8a83541c7b1a238356c626efab541ef43a5fc76a5657e10f277bb2404aa6dddd57360fc39fbc592ecfd41d5b79703bf94238c484fe4610c22e68"}}, @mesh_chsw={0x76, 0x6, {0xef, 0x71, 0x3, 0x11c}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ibss={0x6, 0x2, 0x2}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r0}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000480)={{r2}, 0x0, 0x2376, 0x7}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000004c0)=0x1c, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000500)=0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r5, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x63}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x20000011) socket$inet6_mptcp(0xa, 0x1, 0x106) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x7, 0x19, 0x5, {r7, r8/1000+60000}, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0xa, 0x1, 0x0, 0x0, "60fed77e311239c9fc92b1483bd1db2c13565f349d707e0500f46af73b853a5491ac6221dc835b3461170bbb3e3a4b7664f31d5a789e849ad43b7663b7d637b2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x38}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0xf, 0x3, 0x10000, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x0, 0x40, 0x8, 0x1295}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x44, 0x0, 0x6, 0x40200, r9, 0x3d7, '\x00', r10, r4, 0x5, 0x5}, 0x50) sendmsg$kcm(r2, &(0x7f0000000cc0)={&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x2, @private=0xa010100}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)="0297657b64baf010301e9d804667b9a6d3dae172154b9c2c13b70d1ea3667d936abc77fa255d7c2dd2f2aedda1cd3577150e85538c4f7c17579a55650717fef2f2e5b79f6ae217c2a60910dc0c6e9f2654b392eb03bcab584f3716859b9da254b2b219ebd3f9a0b6cc47d02acee05929cffe6a73800d8c17b9c6030a7057fcd764bf6b53d0420748430d034288f00c6f1a1ac6a3215fc3f35485ccaf5a5c092ca862ba0f95b889b24e81b21fcc71899b0782cceb8285e6ef61f658d3d88e7861d9297547f6d2be80a34c404dd2fc11780e7f43136f", 0xd5}], 0x1, &(0x7f0000000c00)=[{0x88, 0x110, 0x6, "2e982dacfa934d03b715e273234c1af3c7f71a7e5cd05d1f86638d5187055c72fb92e38339ae1e42a971f46e566303bc7ae2910727aca6d606ec0900931aa5aa5913844e1599bec4ff48ef7e9391e9c9f0156aa3637c223deae963dc21c723783061d6e884de2e6355949f538d63e60f402f3def"}], 0x88}, 0x1) r12 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl(r12, 0x6, &(0x7f0000000d00)="776946c01fca02a781cc41bd3abeb7053594ee6099b89cf9652bc18431c8b9409b295094f954e2dc69682af0bcee866f4f570bfded062bc1f6a7c8a46dfa15ba439e278ab6e5681e0b77aa63e55358cde8bf80228c7ba503b184a0141982dbbd128f940cec469bb2cabd66e9c991e825945e82bcc202d71aa7ebdbbd141f1767c04acbd51a4cdd5c8e9aa7388378e5b8f9dd5c799e078ff32e") r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x19}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r12, 0x8935, &(0x7f0000000f40)={'veth1_to_batadv\x00'}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000f80)=0x7ff, 0x4) ioctl$BTRFS_IOC_FS_INFO(r11, 0x8400941f, &(0x7f0000000fc0)) 1.021032466s ago: executing program 2 (id=6141): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={0xe8, r3, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x94, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) (rerun: 32) 1.020409615s ago: executing program 1 (id=6142): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)={0x80, r3, 0x603, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20007f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40082}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private=0xa010101}, 0x4}}, 0x2e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4c, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa298608d2dd600101000016110000000000000000000000ffffac1410bbfe8000000000000000000000000000aa00030e22001690788202000100000000198ac496d68f"], 0x0) 931.866664ms ago: executing program 3 (id=6143): syz_emit_ethernet(0x56, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x1, 0x2}, @window={0x3, 0x3, 0x9}, @generic={0x2, 0xe, "047eb1afe536d01fba05eb91"}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 914.722695ms ago: executing program 2 (id=6144): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "342a4f49e872f79d", "4b8b4e0802ff03fbe3c7a6f875981e00", "85372e3c", "090000e6ff00"}, 0x28) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000300)=""/203, 0xcb}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7ffd, 0xe) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a820008100000086dd603f1060001b2f00fc000800000000000000000000000000ff0200000000000000000000000000012420810000000000fffb700000000800000086dd0800"], 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x1, {0x2, 0x18, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 833.177678ms ago: executing program 4 (id=6145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x54, "4550337331394c7f55273a776f3611aaf87b79a7bc02188e54c835d254d9bdc59b1c90bf5bff0a7430df9b815499c71e4a4beb99d009b2a8996b03b54dc10987d1d8b033caa8ee232260296bc8e7e2b73acdc597"}, &(0x7f00000000c0)=0x5c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25048b000024006e001c0001800600060085cdb1eaea93aebc08580ee565a3ad800a0000100015002c2e7b282826402736242300"], 0x34}}, 0x0) 720.066594ms ago: executing program 4 (id=6146): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0xc) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) 635.656239ms ago: executing program 2 (id=6147): socket(0x10, 0x803, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair(0x1e, 0x2, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000980)={&(0x7f00000000c0)={0x27, r3, 0x1, 0x2, 0x7, 0x0, "6e10110908015694635efc359081ab54a46d055da465b792e7507f8f3e22874f41d5d4933a8890b154799e683beec1321133d9eb8ecd7b6ff6d9e0771ba658", 0x38}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000240)="157cbb9e096d651f3bcd856bbe0bd82fdb7d5c7ac2145fde406e2b8a7620fdd45f84cce452c39a745780bad0b82398279c8c436415a95897643b74b750213d8001151a2172c29a25a9dedbea85f0fecfddb7f04b2c071bc1843e0f3636c43a60a1bcbf5e15cfc5dfb22a2006ddbcf462b06fba119cc45b4bee51ce9f30ca7bc43d2407b01990bc44307fda0d38646b901630aad76000c5fa28a89d8c47a400fd219f", 0xa2}, {&(0x7f0000000380)="e917a20f6d9b95d44eff053a76d4d266514b297c144465fee8fad3e090e15c989f450b083ec677ba0983d6f5177fdf0b5506269b22f51c38b521edb1358aadcb440e7d03c3ee72f326162b8eed2d9eb24f0b40a07db61a5fe061bfaaba455a2b4ce936571b43cf2aca80ffee5c1154c9edb12cc63ce04e6178af232b37ede6377cb60128a9b41976d1735c6d7126fb88899c54a8deec21fec67e", 0x9a}, {&(0x7f00000004c0)="4fcd6c53baa2aaf32555f7ccdd6d2e8b71a6fbd36d418f012c3d0ee8bc0f1914abcc36ac4a3ccb08c4d7d406dde7b7f430c0a4cde947b78ff8107557d19b9e7b7506e54889041f220a11ab9241343765f798c492f2624f4d6a564aa30a5e699fc572c080a18226a345df34d3af3c4fb1ed08e82ac9f5a3e38a37178f8975286c11ecc1e1bf7e1bdfcad234853a54fc55addd11ddca486ab3f00e83c6f03cf4ec87ab7c22a1a3e36c76fa2928161418fd5f208a40e9af08c71a377d74ec27140d3a4146b5dbd035eaa8195ff822930d97fd80379a5cfa40601d99638d287c347eddbda96d5ab78a6ba2", 0xe9}, {&(0x7f00000005c0)="c82fb26959753678518a95623244caca4a12c4a85fe82e99bd763f36ab6791f49f5fae9f8fa7671e9b96cc677f6790ed6ef2e9e9297b1361f2a90f156cea49e718988c768f6de0958b", 0x49}, {&(0x7f0000000640)="923af7d2db3c6c84d882843f4141c77260b1330d7f6d28e1df8bb03ee0ed4093da5a33e81243495186695b5eb79b402a37f0474873e7165aebf179db4226c036d97ba46e3450f80e1002d7ad097b1fc3ea68f30bf23ae5e27eaeb01c2dadd0e97ffa9caf4a78790406c76dcd22fbc845c12873ef56076c9ec4e7ab421dc94c81f8bd9f2a2638b3940bfa0aa1e3f91ca35def857d79279ee8dfa09391df58e5794fa7015acb0324eff496207da5643906d7d7a3e7631e94b45ee912af94f5d97f87da4c023779643c1725b945f6544d83d5256be0f6d9fff246113839d95ef4f5510b48f2b44a19f3fabbf45155f2b21036aa3110ed5d", 0xf6}, {&(0x7f0000000140)="f268c48db9e5f063ce62f80a44cf7a5dc6ea9696b3345f0f080b6b2e48ad9380610b2093e91fb4945e77b243035677ae4cde6ae08ae066e9d126105541ce", 0x3e}, {&(0x7f0000000740)="3cc8a0479d6d6746d903578dfbc126219ec3170d2e850dae828156ec4429cfb5cfc1f4c00a18d45fbfc4a690b55ae964f73a214cd0dafb2a8cdee481dd709cca5960307148339b0bcc7d4dc0a6321084684dc4436d91612d914e6676e9a09cf324d39686dca7db747e0ff3a294afd5a0825210fb37af4c832c3baec858d1cc0573eb", 0x82}, {&(0x7f0000000300)="29155b9e9323580b1b60da0cb45377615079b10363164f76", 0x18}, {&(0x7f0000000800)="65a2f5ff1c68ba529958070be739338dc7140a0e489c0eb1036b85c1e117743255514c9553cfaa9a375a8c22db2cb9e760c37c1824878844172b27bcad29ef933e3b212c1666a3d9d3567df3f10c7caefac997d320cb1c25531711f1a2e61f166a7900adf160cd79bf95023f2bf8370ae32f71af5c0957b12df19be4038b2f07b72a4dc204c1bf05805dbdc3701dab53f41102bc336bc9086c3f32ce7195e599a2", 0xa1}], 0x9, &(0x7f0000000440)={0x38, 0x117, 0xfffffffc, "e2543f65641a92238960ab748579460c059cc59f5f85faa373a12d4eb64ac70fcf8070"}, 0x38, 0x20004000}, 0x8004) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xc040, 0x0, 0x0) 549.17922ms ago: executing program 4 (id=6148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x100}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x7}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 501.427211ms ago: executing program 3 (id=6149): socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000000600000008000000e439000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000000001000"/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000000600000008000000e439000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000000001000"/28], 0x48) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$phonet_pipe(r0, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x89f1, &(0x7f0000000040)={'bond0\x00'}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x4a9e3e0ca749b20, 'rdma'}]}, 0x8) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 418.308601ms ago: executing program 2 (id=6150): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0xb, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@can={{0x3, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "1937347dfa580535"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64030101}, 0x10) read(r1, &(0x7f0000000640)=""/37, 0x25) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x33e}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="86a6eb88", 0x4}, {&(0x7f00000002c0)="9e8e7daeeadbb346b63d412fd0754fede6b263305ae6a2f972d2588685c14262621aa431cfc67d4c44f876c8ad8bf6cc3d9e01549086e62e378d5f9a565ed94557b576404471e639410431ac3131c022335923059dac463f9638cdd3b7126f", 0x5f}, {&(0x7f0000000340)="3e538100b4162706ba52e919e55880db98d665b0aec8c3f17720b79893fd3e7be0a251d63dffff4d89c70efbdc1b54e5fec5b89f714dade86167a26744c3550a7b9b1e8b92d08f3dd9237557e83f153913596c1450126fb5753fb8ad8ef55b07a5c97d017167d03b3609a344a0b658141d523612", 0x74}, {&(0x7f00000003c0)="6810ce71cbf701822cb788b071cc8e8dbb0544a45cc3b8a6bf708130d97f69970924f46a4df94980bf3e2eae699509c706e5911a82e5584c42030077d9758f0068a06fe299216caa9adabc2b976abfa180f7682e8d16a3f747cd3591e8925570e90f2d368d2a", 0x66}, {&(0x7f0000000180)="a02858d09db7302f27a66c48d3786e1b1b5cf62b8cb32cce3769f142cb7fa2ea15b62934f202afa8e67592dbdb3adc69815b99a0a6b2f3241f32", 0x3a}], 0x5, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}], 0x2, 0x400c0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) listen(r1, 0x9) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 317.167803ms ago: executing program 1 (id=6151): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}}, 0x20000000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000540)={{r0}, "f7f4c0b66b83c824ba7fcd8af3d7d55ba8ec0d6bc3880dbe276e6de8d9477dc85329e73f85dc3f0dddf7fe1c296f9eed5ccd23159343ecdbd4d1c1907fd38aa57df915f33c968dd3a37e834258371d64d9c6910fe207839f1a60b62fa662f1891ba5f7cb7d8d8b5c463ab07a88152f80fcab8164e269d9f5ef447ceaaacf96f09f6f7ad0f4972534582188c5d51ca87dfe7ea70cd744479b1072b50c7371317014f810d0c2d94c67e666e84a187288af1c8eb98a0372ad084820ecf462d346d8e423836cdfc6b16c34e77ceae5b435cdc5781c7ed1fd9d72660dc2566e2a8d7f99f61bd13919fa0b22eb5eda050ccecdf86efc0007819da03ed4a84ff9d860ccd5a97d8a30b6e9cdc3f48607830ec7aa8ea9cd693d8c2eb1129648829cd4b737afdf5d120b9dd334a17c5e1bf0be8de0f86be3531724102456695f758e9441519e1d41ba9a3a927fd0d49ae8091dbe440716abbe6ffc4943ded7cb8c829236a2fdb0c4b9e5c48b66078a4215006aea66ed33b3f7866a834290175b7f31b723c977d2df6ba7e14159c6e53e6ea5478dda8cf93821c8ad7fc6b6b33a68dcc8e71aa68eedd313480d5f9087e6b32df1c5cdf48955990967ea0b4f0457e0d6d7042dd21189f65649059d6ff626e77a25733058e4bee6d15c73f24373bb70da0c47d858573a823657cec70218e683e0f2a9f1f1e5b6d3e22efb1d502ac1f9a9c8abc78fe8ae73a3d9f65f5138bf1b01364e457b95d793426afbcdf2fcaf892521794849aedac1d66f71fff9ade38bc3a0aa7481c08acde9b749af05c442a57e3ee67ac09e44c08a8e6d187c37b956b7ac7b26e2b2438ba10e869e8f91dd7047217eb638c8cc1741372103c3ac61bf6458eedf8f0a1c8842f283b2d575721c5d7e333e90d57339d3c678603a8e3385efd0a47f969ae772af94bd152a8876bd412fed0bd3a2ed74b8558022453af593a0fa2dc0e1379ecfdb96e727c046b68d161e7be072eb54d32695c33146ff7ee0f5065800d853756c5f2f3ef4e1ece1d0b7111512a0d2b5b27df791cc13cc38908c82894557006311c77df3df3ab72459f51262bee902b679ac2f96e1843975da6b3178c8554873b1e651e13f7f3d2d22ee480e3269ff01b759f4d72fb46ee7943d5aef3ec1652dacbf73e2d70cbb0452b65120446b9d91c3e6e4c26c9b639e48b14d0cdfe8bc9f4c41282facec2586b32e177950cf603d73418bdc4a921699607f0fcc0d6005310aa46fe8349a0c2efd931b8f9ebfec1d27261627252e349163dbea5e2ba973288b5de4eacfc99a04c2193021439dd85482ad42138deac4707fdb0073f4217f605c7101995ff910c77726d69c2a71a6f1839466fdefb1035bb6f80185691426e3db3ea9d85349a27fb09719cfcfd3b8bf1d4ea18805da1f5a861844eba20cd8f47d5ffcbe487f4e341559749d30d444d4775ad4dd8366216b524bbbdf57473f9bc0e0973ae5e5dc1a4bb26f5e4ad9df3fc9fbebee5136a625a7486278661727e5d314cce61aa270dfc1a185324896fbe863048e3be4eff23fe5446043122a227174f2e10213965d5c47115c149bc896304226388781e5ac4088ea7d5df5e5a7f380de3d58ce46419fbe82f85816bb3bc6077a156fe2e27d98f19e3e90115e4ab907df6fc62ce971d90fa2c2651ecaed34b21acbfc670783f0bb6f945604f6e063f69033e1a31fc835b8a159b7acbcee96a29492045d0b5bd02bcf14b62c358e2e34751818d364241fb8352b3f163e875fb7a1b70a12e27c276e803c99666aba2b6eb20bb7b38d50dd9cb5054fbf44fa4cacd3e01f038274e2d40f87357e677213af0e41fb9dca1dae8270c79b52429c13c155a4c881e464bc0f510a70379d4f4b9ff83ae0cf3d1777dcb95e751939ccda63caa598fae7db006c432acb8948f90dafe0f76e759b144c35f7a71e2d14e09b1da389c2874d0b37c8798a256ae43b481693087707be12cf2fd0f8afc7f4e65e4c74b56d0d3d2dd6dd187137197be8e8867b5cec7b9ee7d04e43be82fcaef00da0eba1dc628f87ba8b5daea14ddb693a75db4a77e98c8d371ed3e9e426643353a5816d7d73b9b828b5c76d6617b1edf83a127dc79e69395864475fb2751952b5544b9c3d4707f588fba39357e88a6613bc9b8c86d4ace73f419ea27f363ebf3cd8b1c698a278fed0b99c29fa703ea557bdad6d40191449ec08abacb1a62459f5a8150c31ada026d4a683f630af782678526b2df811236315532921d943f05c6c9940813fbaef989d8f20a50082f12d4a3a6088ee18491bf05ae0e05a9fcd1c716784be7bd496076698f0d7fe666dafa17cb5de6ea8636757e938d7d4fe49230443018159adade3ba1792495fc6eedab972195bd0107d1cef77624bbacd15644bec14b640dc6eddcc15ae86d0ad1e1f640082eeb572bfeccfcbe8714a6ae40cab61ad62cb5c96cd15219b31decacd57b331e2d93cc4b55977abad2083225278f5734f815fa91c012bf7a2d87111bfd35995c411c926b8e1052abd08b221d6be192d8798f38d579da3afd5f5a67516a2b5cd0c9269b86aadb6711354d5b65ed548eb50b2ca4b74e475bc1d61d9e734538e6bc02ddf95d2c0df09d1c20c6f37d8dd19097540db8e4ad2968fc28744fe1bcb1ea5f834cd0bcd3453957064457c3dda1d1a808c708c2bef00e1155fc212e1cb7fa9805b45f24489d75f8b2941038071f6207e5f520d1f77a8f3a90e724d95c3fd7de25197c424c0747607629893c93e8418b155b7eb7e8933a12ed402c722142ce4822cdcf0bb12c3bdcdb3e48eba3d08894575027ef6b448550ddc2ea52d223e69256a8a6f65fce61a4bf8d3b02ca428e750e679f28b36901ce539ff0a3afe71d03cfdfd90ed506fb625d52001cd734536a17358ae736d63d85f568d8a1033f577ff81801b8fbb7798ba1c0ba96a47363a8a06227193627ede7a6b87a4570f5a6917513485cd49bc1bd0d7f239eaa8d908fd75e68b5abb829d28aa96d64a9579a59049edc2ce8b70380ff9c6033bf47de43d9baccbdb86d17c8fe0a3ebd3fa888a5b99a0b979339bac93bc831c0789e18bda2dfb6bc7eb0ccd903ba2687bd3dc24199082b62273a0c9cdecfecfba2f037fbd9c413062b4e019778953c6dd039f0d06ca9ed3dcd86914fccda21f388a98ea5f57c3e35754039bbb3420942f36f3e6f8edd86ad5dfec202a0c2652aa7024c0c3d2186e2a7d8e2f7912e7ad6a9fbd83b8606396e10299dbd7b24e645627132711186cdb5c02fef586d3f43f66cef633ec1432447e3e55d522c93a993572e158435c174d31b157a87684e9625d9c2a10774fbb7ce83e109f629cbeff9acb5fdbc9c16e36b1c4ec958de196c5937f6dead1242ec89185798b4f498154ef781c11991ea18a667d6166df850f69b909010f4ef6055a824c992552463f7834bf4a3a54a60d852e3551fc857af1d7aa734a0f6a7000bc4ad1bccfdaff727b4595dc5264f41fcd88b803625111eb1a9bd9d4fcb38aa80e64b549507ebd0691a0fb1e1f997756cac2ddba7f73bfdf84eab7331846a54a076d2eb38ec5fd38a106255671464afaf8e17ed3952e9d5abb15a8ee06115a973c2e9ef3969211a6b0ecefb86fd86f4ce21f14a4c7b0d9797178820b9554ed0927ee20bfcca96b61ae7d6e583ba9ef9329f9c79463b1516f67bc74db06c2cdcc7d4a17cba3a04935150685837bf7f04147b3795bf5d862a6f8fe0b9b9bd9c7525b86207a126aade36439d9b60e5e2ad2a135f45dd8e2dcd49288e5f01c9319393146dd151c82ea2f7ab1f0448b16706799bd012b1390d9ea96878e28628c882cdbceeb5121d378b4dc7f837c488451fc5b78cd6ee57a71d5bd10bf3b6d9c52b7ed58f9f1135b1815260e18be1297605584953632d93121a8da8b288579b93930cffd5e8a4e3cf7dce70dcc430e46421111f27afc44ca6765b374e2497001c9011d6c8148a1822d6d15ea1927aca3528af9f10eb86a20e5d883b38bfcbe39774229ba8928a19552f8b2fb106d6bec17d1617bf1bc7b00c90090e47055502881596809e5e7bf70d7a319d8e0349ed9da3bf6fad84745b587f7a0b5c4083bdb5b8722494c5532a827c6fd1f1133acb445a2ae5e851601e55eec4932300ca322916f50e08bc980a11d760a046a3d3378aa666be39d858ca16c4d8c16db00bbdad1ed50d7cda08eb04fd98561e76af123fabede9fba80de036a3e485cec6e4e6cb2198de0f159bd2efbc6c5362dd0d48b3ddc1e6bb95fd1986b81ce2f10280c089dbad8d02e5b841f7099dc99d663da20c7be5f054f5a10c92ece865b58dbad7f46fe5ce2af49d7433ce3ab495135ae6421968ad56fe49ab36e4808eebe15db364c61efaf3a5f36272676787ed1ab95369041050675099c6074d6e36a2f29b310361f3e902f808179386b06b63be29b9b237a3be7dc7b165dcb93b8c2c7e746f870176995ed6fd9565b38e3906d33e1ab283da637ed14050c22993e802ba7879abe6d91cf1e51bf6d460c6ab88b6bb592b5ba681775ee7ad11184327edf70ff004427b083af4126d5d68254119a56f8ab1c18a0c932c379f05747d791fc8243b8755645ff1acdeb8be6ce782112fbcc793e534e813eca3b9a038d4eaa264963eec56f22fb80d6e2bbc7e532be739b3e7d6f3678d9fc42ec5e0a07216bc239f0634ca28d4b56702e887d0a4e0ad8a05fff7ba1772a5194c34819faf36a84bed1001c0eef83c78240b2c8955621acd1ad3b8cd0f625e2149057d00002a1044a64cf67603f6391c345933d5ce4afad3e6ff5224812b98c734be9deece0e900abe4659c40e6bc2f7dfe43cae07ed2e9738b99836a08784d588fbf2edfeb6f8c2c6c59ee51f830608faa5805d4954fed96939e6b1fe8828c9a52896dd6f0da0ddb9337ec1ec34eff345f52752a5d13b37d49da3b3b2289caf4f6aecc7737181ad63253323f62ec1f656ba1b75467e9c4a937895b24b5ca151cb249783001a82eb61e5de88f34d94abe6c58110d91b8e859c20e543052c0810c774e0954fc0ebf2e76106ac00d457a8bf33b378f6808d5b45deb212b4248cc347398c7c5663b78260c1118088268830ec3bf0fdf30203a594a0fdd3a79a9e3981bab3497c4664ab8d94af665a12581663301f0ad9ad904de6a2b8ec6658ebea18c7361c3b73d8a5bbdb5f47e2bc10264b787cc8a36311eae1005fb261555a0c9306d8bd3ce3de7c4aad7fa731a43d78380b636a75ebd1a2262fc9af4586d39fcf01f2fe83fc478a1a7cabdaaaf18030d138bf4738c2cbda976b7b12706a0ca15922ae52eec25fbf976baf1a4d010f8a44b52e6b007a44bfc815a91d976500124718d3af6d493904c43f5f6ecf4d41cd489f856e2e88c13e349d31850a7a9c8c5907ddd438c7129e75a073605b40201a7e24ed05d659665b7da92290a8a4009f37c4a830f21658b196cd341672a5c15b7bf5a673fe77936459f4b656789c033bfa9c64c5e8a566a9e470f7fff36fa7fc554e29167553802883649806e3e9e686dc53d0811185c12f441b7cd1b12bbffec290a7eb0ce8fddea5b38576ba87c56c6acd182bff4bbf0f0af2c14eaaaddd8e17cf902e2f57b0e950037a8f098fc5768da50b7384862077ef2c95dda58e9317e8f2d7b1498ec03e897c913cf633c8c4ef7f278d55d8cd7a10e13f798e4351dc8595c0a6300d6998793fa25fa1c1e6888647a32d21f94d0b85570ac8909d7dfab7d7662cf45c12923ebaf15df6f806e6e5df6cf47bdf668a71b35f2db"}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 283.111452ms ago: executing program 3 (id=6152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) socket$kcm(0x10, 0x2, 0x0) 176.625628ms ago: executing program 2 (id=6153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0xc8a1}, 0x24008004) 108.963508ms ago: executing program 4 (id=6154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r5, r2, 0x4, r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getpeername$l2tp6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x20) 94.267176ms ago: executing program 1 (id=6155): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) getpid() r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000000aa"], 0x30}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r8], 0xfc}, 0x1, 0x0, 0x0, 0x4004010}, 0x8044) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660055d04519001400e4000008119078e00000017f000001dbb3ab462ec8a092d57a33fe55da6d7aa85b2d018d49101c27ddd369f396dded7f4111c6d18b80942f6bec63e50b356746bfff14018446d21869850c0409841293b9926129e645d57d10db7b913ab09e2068c6c89245f12670648c10c823b644bea47909ac599582279cdd0e6838775f7d146460822ddacf6e1e3b4fb96f3d9332f436c9d53e96a798e8442f263ff5e4902964394b6825c39ea99d2e029a9494da35c4edcb82459bb994c6b1e9b44b7c9ab2ecf6f3d43ac21c8100"/246], 0x27) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040860) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x4fe0}, 0x1, 0x0, 0x0, 0x408c0}, 0x4800) 0s ago: executing program 2 (id=6156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f00000000c0), 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000001}}, {0x8}, {0x6, 0x11, 0x4000}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 447.738995][ T30] audit: type=1107 audit(1755403520.954:9): pid=19826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 447.943233][T19839] netlink: 'syz.0.4050': attribute type 1 has an invalid length. [ 448.046349][T19839] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4050'. [ 448.056090][T19839] netlink: 'syz.0.4050': attribute type 1 has an invalid length. [ 448.088127][T19840] ip6tnl3: entered promiscuous mode [ 448.271914][T19854] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 448.554156][ T5934] IPVS: starting estimator thread 0... [ 448.563714][T19871] IPVS: ip_vs_edit_dest(): server weight less than zero [ 448.589020][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4060'. [ 448.601615][ T2928] tipc: Subscription rejected, illegal request [ 448.655801][T19872] IPVS: using max 26 ests per chain, 62400 per kthread [ 448.733694][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4062'. [ 448.751195][T19876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.858036][T19876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.878397][T19876] batadv_slave_1 (unregistering): left promiscuous mode [ 449.208830][T19901] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4067'. [ 449.314155][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4072'. [ 449.346274][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'. [ 449.468065][T19914] macvlan2: entered promiscuous mode [ 449.494139][T19914] macvlan2: entered allmulticast mode [ 449.664489][T19927] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 449.929944][T19948] tipc: Enabled bearer , priority 0 [ 449.971693][T19948] syzkaller0: entered promiscuous mode [ 449.987812][T19948] syzkaller0: entered allmulticast mode [ 450.000432][T19948] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 450.069816][T19948] tipc: Resetting bearer [ 450.116293][T19947] tipc: Resetting bearer [ 450.166812][T19947] tipc: Disabling bearer [ 450.258187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.520639][T19971] openvswitch: netlink: Multiple metadata blocks provided [ 452.010735][T19973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.054136][T19973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.740644][T13834] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.751307][T20037] netlink: 'syz.1.4099': attribute type 2 has an invalid length. [ 452.769373][T13834] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.785691][T20037] __nla_validate_parse: 1 callbacks suppressed [ 452.785710][T20037] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4099'. [ 452.825695][T13834] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.850120][T20037] nbd: must specify a device to reconfigure [ 452.865972][T13834] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.924512][T20042] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 452.997343][T20048] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 453.090531][T20056] netlink: 808 bytes leftover after parsing attributes in process `syz.3.4103'. [ 453.101991][T20059] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4104'. [ 453.354076][T20068] team_slave_0: entered promiscuous mode [ 453.360945][T20068] team_slave_1: entered promiscuous mode [ 453.366766][T20068] geneve0: entered promiscuous mode [ 453.402955][T20068] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 453.453766][T20070] tap0: tun_chr_ioctl cmd 1074025672 [ 453.465033][T20070] tap0: ignored: set checksum disabled [ 453.490729][T20078] rdma_rxe: rxe_newlink: failed to add lo [ 453.593693][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'. [ 453.625683][T20086] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 453.700433][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4115'. [ 454.142428][T20124] syzkaller1: entered promiscuous mode [ 454.162600][T20124] syzkaller1: entered allmulticast mode [ 454.428884][T20135] netlink: 'syz.0.4125': attribute type 39 has an invalid length. [ 454.945040][T20173] netlink: 816 bytes leftover after parsing attributes in process `syz.0.4137'. [ 454.969330][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'. [ 454.978494][ T5870] Bluetooth: hci1: command tx timeout [ 454.988479][T20173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4137'. [ 455.048870][T20177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4138'. [ 455.117322][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'. [ 455.669607][T20202] lo speed is unknown, defaulting to 1000 [ 456.902295][T20261] bond0: (slave syz_tun): Releasing backup interface [ 457.776456][T20301] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 457.792591][T20301] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 457.801403][T20301] gretap2: entered promiscuous mode [ 457.807756][T20301] gretap2: entered allmulticast mode [ 458.138308][T20330] __nla_validate_parse: 13 callbacks suppressed [ 458.138338][T20330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4182'. [ 458.186677][T20328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4182'. [ 458.387792][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.398987][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.410394][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.422196][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.432887][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.443666][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.454021][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.464089][T20339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 458.849083][T20025] IPVS: starting estimator thread 0... [ 458.956858][T20365] IPVS: using max 25 ests per chain, 60000 per kthread [ 459.000589][T20374] xt_socket: unknown flags 0xd0 [ 459.057517][T20374] bond6: entered promiscuous mode [ 459.062740][T20374] bond6: entered allmulticast mode [ 459.069480][T20374] 8021q: adding VLAN 0 to HW filter on device bond6 [ 459.189811][T20374] bond6 (unregistering): Released all slaves [ 459.215035][T20380] tipc: Enabling of bearer rejected, failed to enable media [ 459.225505][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.234878][T20381] syzkaller0: entered allmulticast mode [ 459.691321][T20402] sctp: [Deprecated]: syz.2.4205 (pid 20402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.691321][T20402] Use struct sctp_sack_info instead [ 459.901049][T20410] openvswitch: netlink: IP tunnel dst address not specified [ 459.914807][T20410] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.984018][T20414] veth1_to_bond: entered allmulticast mode [ 460.002886][T20411] veth1_to_bond: left allmulticast mode [ 461.118952][T20432] netlink: 'syz.0.4215': attribute type 10 has an invalid length. [ 461.138881][ T55] block nbd3: Possible stuck request ffff888025405080: control (read@0,1024B). Runtime 90 seconds [ 461.151398][ T55] block nbd3: Possible stuck request ffff888025405240: control (read@1024,1024B). Runtime 90 seconds [ 461.166802][ T55] block nbd3: Possible stuck request ffff888025405400: control (read@2048,1024B). Runtime 90 seconds [ 461.185532][ T55] block nbd3: Possible stuck request ffff8880254055c0: control (read@3072,1024B). Runtime 90 seconds [ 461.233474][T20432] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 461.342530][T20442] tipc: New replicast peer: 255.255.255.255 [ 461.360821][T20442] tipc: Enabled bearer , priority 10 [ 461.503659][T20451] unknown channel width for channel at 909000KHz? [ 461.732176][T20461] sctp: [Deprecated]: syz.1.4225 (pid 20461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.732176][T20461] Use struct sctp_sack_info instead [ 462.746469][T20519] netlink: 'syz.2.4243': attribute type 11 has an invalid length. [ 462.961950][T20532] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 463.251301][T20542] vlan2: entered allmulticast mode [ 463.257455][T20542] veth1: entered allmulticast mode [ 463.300364][T20546] vlan2: entered allmulticast mode [ 463.728028][T20570] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 463.740790][T20579] __nla_validate_parse: 125 callbacks suppressed [ 463.740809][T20579] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4263'. [ 463.964242][T20588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4267'. [ 464.042440][T20592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4266'. [ 464.092938][T20592] netlink: 'syz.4.4266': attribute type 4 has an invalid length. [ 464.119331][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 464.150872][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 464.160930][T20597] netlink: 'syz.0.4269': attribute type 5 has an invalid length. [ 464.190680][T13831] tipc: Subscription rejected, illegal request [ 464.201403][T20597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4269'. [ 464.293914][T20597] geneve2: entered promiscuous mode [ 464.313265][T20597] geneve2: entered allmulticast mode [ 464.351216][T13841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 464.357941][T20610] netlink: 'syz.1.4272': attribute type 12 has an invalid length. [ 464.410180][T13841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 464.436419][T20610] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 464.469619][T13841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 464.494124][T13841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 464.642450][T20620] netlink: 'syz.4.4276': attribute type 12 has an invalid length. [ 464.680873][T20620] netlink: 'syz.4.4276': attribute type 29 has an invalid length. [ 464.700113][T20620] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4276'. [ 464.715534][T20629] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4280'. [ 464.734253][T20620] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4276'. [ 464.853040][T20632] bridge6: entered promiscuous mode [ 464.863796][T20632] bridge6: entered allmulticast mode [ 464.908358][T20637] netlink: 'syz.3.4283': attribute type 1 has an invalid length. [ 464.950503][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4282'. [ 465.213541][T20662] syzkaller1: entered promiscuous mode [ 465.230280][T20662] syzkaller1: entered allmulticast mode [ 465.245069][T20665] gretap2: entered promiscuous mode [ 465.251738][T20665] gretap2: entered allmulticast mode [ 465.293784][T20670] geneve2: entered promiscuous mode [ 465.631186][T20683] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.638089][T20683] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 466.330715][T20712] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 466.378027][T20712] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 466.388965][T20708] lo speed is unknown, defaulting to 1000 [ 466.821660][T20735] tipc: Enabled bearer , priority 0 [ 466.850207][T20735] syzkaller0: entered promiscuous mode [ 466.876519][T20735] syzkaller0: entered allmulticast mode [ 466.941831][T20734] tipc: Resetting bearer [ 467.002932][T20734] tipc: Disabling bearer [ 467.035854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.082618][T20745] gretap0: entered promiscuous mode [ 467.097381][T20745] 0{X功: renamed from gretap0 [ 467.150100][T20745] 0{X功: left promiscuous mode [ 467.155187][T20745] 0{X功: entered allmulticast mode [ 467.184139][T20745] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 467.246334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.267638][T20025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.283005][T20750] openvswitch: netlink: Missing key (keys=40, expected=100) [ 467.450728][T20755] tipc: Enabled bearer , priority 0 [ 467.474064][T20755] syzkaller0: entered promiscuous mode [ 467.490871][T20755] syzkaller0: entered allmulticast mode [ 467.527454][T20755] tipc: Resetting bearer [ 467.591697][T20767] netlink: 'syz.4.4322': attribute type 3 has an invalid length. [ 467.599514][T20765] gretap0: entered promiscuous mode [ 467.607305][T20028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.621852][T20765] gretap0: left promiscuous mode [ 467.703690][T20754] tipc: Resetting bearer [ 467.844455][T20754] tipc: Disabling bearer [ 467.950035][T13831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.016235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.193089][T20793] netlink: 'syz.3.4329': attribute type 1 has an invalid length. [ 468.534490][T20815] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 468.546794][T20813] xt_limit: Overflow, try lower: 604147548/4200216962 [ 468.569488][T20815] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 469.115921][T20844] veth3: entered allmulticast mode [ 469.199401][T20846] veth5: entered allmulticast mode [ 469.213224][T20850] __nla_validate_parse: 19 callbacks suppressed [ 469.213246][T20850] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4345'. [ 469.288987][T20856] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4347'. [ 469.329206][T20862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4344'. [ 469.341863][T20860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4348'. [ 469.458762][ T55] block nbd4: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 90 seconds [ 469.474909][ T55] block nbd4: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 90 seconds [ 469.486784][ T55] block nbd4: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 90 seconds [ 469.498175][ T55] block nbd4: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 90 seconds [ 469.640703][T20879] netlink: 'syz.2.4351': attribute type 1 has an invalid length. [ 469.656914][T20880] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 469.664105][T20878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4352'. [ 469.691424][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'. [ 469.708536][T20874] lo speed is unknown, defaulting to 1000 [ 469.725416][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'. [ 470.130328][T20899] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 470.175067][T20899] gretap2: left promiscuous mode [ 470.235712][T20899] gretap2: left allmulticast mode [ 470.277485][T20899] geneve2: left promiscuous mode [ 470.295558][T20899] geneve2: left allmulticast mode [ 470.329371][T20899] veth3: left allmulticast mode [ 470.345130][T20899] veth5: left allmulticast mode [ 470.358907][T13831] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 470.378938][T13831] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 470.404391][T13831] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 470.481845][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 470.859894][T20926] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4366'. [ 470.906715][T20928] tipc: Enabling of bearer rejected, failed to enable media [ 471.524875][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4376'. [ 471.566744][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4378'. [ 472.210612][T20985] bond0 (unregistering): (slave 1!): Releasing backup interface [ 472.222289][T20985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.237043][T20985] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 472.249014][T20985] bond0 (unregistering): Released all slaves [ 472.479663][T21008] netlink: 'syz.1.4392': attribute type 39 has an invalid length. [ 472.853113][T21023] net_ratelimit: 5 callbacks suppressed [ 472.853133][T21023] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 472.890186][T21026] netlink: 'syz.2.4398': attribute type 33 has an invalid length. [ 472.917665][T21026] netlink: 'syz.2.4398': attribute type 1 has an invalid length. [ 472.975552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.887065][T20025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.936722][ T55] block nbd1: Possible stuck request ffff88802539e000: control (read@0,4096B). Runtime 270 seconds [ 474.098018][T21090] tipc: Enabling of bearer rejected, failed to enable media [ 474.156989][T21090] syzkaller0: entered promiscuous mode [ 474.162574][T21090] syzkaller0: entered allmulticast mode [ 474.205861][T20025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.363269][T21104] __nla_validate_parse: 8 callbacks suppressed [ 474.363291][T21104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4421'. [ 474.388024][T21104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4421'. [ 474.624434][T21118] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 474.676162][T21120] rdma_rxe: rxe_newlink: failed to add lo [ 474.792633][T21120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.950550][T21137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4430'. [ 475.203123][T21152] netlink: 'syz.4.4435': attribute type 1 has an invalid length. [ 475.226037][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4433'. [ 475.264101][T21155] netlink: 'syz.0.4436': attribute type 1 has an invalid length. [ 475.294422][T21158] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4437'. [ 475.389836][T21152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.399457][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4439'. [ 475.458858][T21157] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 475.687853][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4443'. [ 475.734205][T21178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4443'. [ 475.754927][T21180] netlink: 'syz.4.4442': attribute type 1 has an invalid length. [ 475.874625][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4443'. [ 475.963144][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4447'. [ 476.307428][T21206] sctp: [Deprecated]: syz.2.4451 (pid 21206) Use of int in max_burst socket option deprecated. [ 476.307428][T21206] Use struct sctp_assoc_value instead [ 476.351169][T21210] netlink: 'syz.1.4452': attribute type 1 has an invalid length. [ 476.656619][ T5870] Bluetooth: hci3: command tx timeout [ 476.833482][T21230] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 476.888275][T21234] lo speed is unknown, defaulting to 1000 [ 477.153898][T21246] netlink: 'syz.0.4463': attribute type 83 has an invalid length. [ 477.318658][T21239] lo speed is unknown, defaulting to 1000 [ 477.944511][T21263] netlink: 'syz.1.4470': attribute type 1 has an invalid length. [ 478.718934][T21282] can: request_module (can-proto-0) failed. [ 479.495835][T21331] __nla_validate_parse: 45 callbacks suppressed [ 479.495857][T21331] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4490'. [ 479.689873][T21340] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4495'. [ 479.713085][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4495'. [ 479.781723][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4496'. [ 480.263776][T21375] sctp: [Deprecated]: syz.1.4501 (pid 21375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.263776][T21375] Use struct sctp_sack_info instead [ 480.773302][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4507'. [ 480.878287][T21393] netlink: 'syz.4.4505': attribute type 4 has an invalid length. [ 480.976358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.038863][T21402] lo speed is unknown, defaulting to 1000 [ 481.057013][T21407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.083512][T21408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.181663][T21410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4511'. [ 481.193017][T21400] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4508'. [ 481.252423][T21406] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4508'. [ 481.267369][T21416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4513'. [ 481.651147][T21435] IPv6: Can't replace route, no match found [ 481.725519][T21432] syzkaller1: entered promiscuous mode [ 481.731033][T21432] syzkaller1: entered allmulticast mode [ 482.004395][T21446] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4521'. [ 482.783998][T21482] netlink: 'syz.0.4532': attribute type 3 has an invalid length. [ 482.993186][T21500] netlink: 'syz.0.4535': attribute type 4 has an invalid length. [ 483.014195][T21500] netlink: 'syz.0.4535': attribute type 4 has an invalid length. [ 483.019734][T21497] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 483.064590][T21500] veth0: entered promiscuous mode [ 483.177064][T21490] veth0: left promiscuous mode [ 483.263189][T21513] IPv6: NLM_F_CREATE should be specified when creating new route [ 483.764523][T21538] 0{X功: renamed from gretap0 (while UP) [ 483.802999][T21538] 0{X功: entered allmulticast mode [ 483.819605][T21538] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 484.184301][T21564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.202909][T21560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.213744][T21570] netlink: 'syz.0.4558': attribute type 1 has an invalid length. [ 484.515937][T21589] netlink: 'syz.2.4564': attribute type 10 has an invalid length. [ 485.459430][T21645] __nla_validate_parse: 21 callbacks suppressed [ 485.459451][T21645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4579'. [ 485.476376][T21645] netlink: 'syz.4.4579': attribute type 7 has an invalid length. [ 485.486226][T21645] netlink: 'syz.4.4579': attribute type 8 has an invalid length. [ 485.494001][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4579'. [ 485.508548][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4577'. [ 485.533520][T21648] openvswitch: netlink: Unknown nsh attribute 0 [ 485.567971][T21648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.657378][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4582'. [ 485.682379][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4582'. [ 485.698659][T21660] netlink: 'syz.4.4582': attribute type 7 has an invalid length. [ 485.771722][T21660] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 486.130331][T21685] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4587'. [ 486.141092][T21679] tipc: Enabled bearer , priority 10 [ 486.149881][T21685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.259111][T21694] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 486.329750][T21695] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4589'. [ 486.370886][T21699] *#: renamed from dummy0 (while UP) [ 486.471699][T21702] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4591'. [ 486.473654][T21704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4593'. [ 486.499772][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4593'. [ 486.675780][T21723] erspan0: entered promiscuous mode [ 486.683303][T21723] erspan0: entered allmulticast mode [ 487.063698][T21751] netlink: 'syz.2.4605': attribute type 10 has an invalid length. [ 487.111494][T21751] team0: Device ipvlan1 failed to register rx_handler [ 487.457256][ T2928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.465004][ T2928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.486732][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.658654][T21783] bridge7: entered promiscuous mode [ 487.671806][T21783] bridge7: entered allmulticast mode [ 487.955431][T21800] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 488.036324][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.076315][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.673533][T21827] lo speed is unknown, defaulting to 1000 [ 488.765100][T21839] bond2: entered promiscuous mode [ 488.784729][T21839] bond2: entered allmulticast mode [ 488.820250][T21839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.095659][T21839] bond2 (unregistering): Released all slaves [ 489.640177][T21865] tipc: Started in network mode [ 489.645101][T21865] tipc: Node identity 080211, cluster identity 4711 [ 489.660987][T21865] tipc: Enabled bearer , priority 0 [ 489.699304][T21865] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 489.768467][T21865] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 489.837395][T21865] tipc: Resetting bearer [ 490.697368][ T5947] tipc: Node number set to 134353152 [ 490.772139][T21932] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 491.098358][T21951] sysfs: cannot create duplicate filename '/class/ieee80211/!瀵$蘒L賤y岗丌匘xUD寃榼漽' [ 491.141964][T21951] CPU: 1 UID: 0 PID: 21951 Comm: syz.2.4656 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 491.142010][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.142035][T21951] Call Trace: [ 491.142044][T21951] [ 491.142054][T21951] dump_stack_lvl+0x189/0x250 [ 491.142089][T21951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.142115][T21951] ? __pfx__printk+0x10/0x10 [ 491.142151][T21951] ? kernfs_path_from_node+0x2f/0x290 [ 491.142173][T21951] ? kernfs_path_from_node+0x250/0x290 [ 491.142193][T21951] ? kernfs_path_from_node+0x2f/0x290 [ 491.142221][T21951] sysfs_warn_dup+0x8e/0xa0 [ 491.142243][T21951] sysfs_do_create_link_sd+0xc0/0x110 [ 491.142268][T21951] device_add_class_symlinks+0x1cf/0x240 [ 491.142295][T21951] device_add+0x475/0xb50 [ 491.142321][T21951] wiphy_register+0x1ba6/0x28d0 [ 491.142370][T21951] ? __pfx_wiphy_register+0x10/0x10 [ 491.142400][T21951] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 491.142432][T21951] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 491.142472][T21951] ieee80211_register_hw+0x3425/0x4080 [ 491.142517][T21951] ? ieee80211_register_hw+0x1451/0x4080 [ 491.142550][T21951] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 491.142578][T21951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 491.142615][T21951] ? __hrtimer_setup+0x187/0x210 [ 491.142685][T21951] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 491.142719][T21951] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 491.142781][T21951] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 491.142805][T21951] ? trace_kmalloc+0x1f/0xd0 [ 491.142829][T21951] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 491.142858][T21951] ? kstrndup+0xbf/0x160 [ 491.142891][T21951] hwsim_new_radio_nl+0xea4/0x1b10 [ 491.142954][T21951] ? __pfx___nla_validate_parse+0x10/0x10 [ 491.143002][T21951] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 491.143046][T21951] ? __nla_parse+0x40/0x60 [ 491.143081][T21951] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 491.143115][T21951] genl_family_rcv_msg_doit+0x215/0x300 [ 491.143148][T21951] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 491.143188][T21951] ? bpf_lsm_capable+0x9/0x20 [ 491.143214][T21951] ? security_capable+0x7e/0x2e0 [ 491.143251][T21951] genl_rcv_msg+0x60e/0x790 [ 491.143282][T21951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.143304][T21951] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 491.143352][T21951] netlink_rcv_skb+0x208/0x470 [ 491.143379][T21951] ? __lock_acquire+0xab9/0xd20 [ 491.143431][T21951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.143457][T21951] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.143510][T21951] ? down_read+0x1ad/0x2e0 [ 491.143546][T21951] genl_rcv+0x28/0x40 [ 491.143566][T21951] netlink_unicast+0x82c/0x9e0 [ 491.143605][T21951] ? __pfx_netlink_unicast+0x10/0x10 [ 491.143644][T21951] ? netlink_sendmsg+0x642/0xb30 [ 491.143672][T21951] ? skb_put+0x11b/0x210 [ 491.143696][T21951] netlink_sendmsg+0x805/0xb30 [ 491.143740][T21951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.143775][T21951] ? aa_sock_msg_perm+0xf1/0x1d0 [ 491.143811][T21951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.143833][T21951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.143865][T21951] __sock_sendmsg+0x219/0x270 [ 491.143897][T21951] ____sys_sendmsg+0x505/0x830 [ 491.143925][T21951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.143971][T21951] ? import_iovec+0x74/0xa0 [ 491.143999][T21951] ___sys_sendmsg+0x21f/0x2a0 [ 491.144023][T21951] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.144088][T21951] ? __fget_files+0x2a/0x420 [ 491.144105][T21951] ? __fget_files+0x3a0/0x420 [ 491.144136][T21951] __x64_sys_sendmsg+0x19b/0x260 [ 491.144161][T21951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.144195][T21951] ? rcu_is_watching+0x15/0xb0 [ 491.144222][T21951] ? do_syscall_64+0xbe/0x3b0 [ 491.144256][T21951] do_syscall_64+0xfa/0x3b0 [ 491.144285][T21951] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.144312][T21951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.144332][T21951] ? clear_bhb_loop+0x60/0xb0 [ 491.144376][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.144405][T21951] RIP: 0033:0x7f532518ebe9 [ 491.144425][T21951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.144444][T21951] RSP: 002b:00007f5326025038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.144467][T21951] RAX: ffffffffffffffda RBX: 00007f53253b5fa0 RCX: 00007f532518ebe9 [ 491.144483][T21951] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 491.144496][T21951] RBP: 00007f5325211e19 R08: 0000000000000000 R09: 0000000000000000 [ 491.144509][T21951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.144521][T21951] R13: 00007f53253b6038 R14: 00007f53253b5fa0 R15: 00007ffdd0bc69e8 [ 491.144558][T21951] [ 491.626337][ T55] block nbd3: Possible stuck request ffff888025405080: control (read@0,1024B). Runtime 120 seconds [ 491.637580][ T55] block nbd3: Possible stuck request ffff888025405240: control (read@1024,1024B). Runtime 120 seconds [ 491.648889][ T55] block nbd3: Possible stuck request ffff888025405400: control (read@2048,1024B). Runtime 120 seconds [ 491.660009][ T55] block nbd3: Possible stuck request ffff8880254055c0: control (read@3072,1024B). Runtime 120 seconds [ 491.775436][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.830004][T21962] __nla_validate_parse: 11 callbacks suppressed [ 491.830025][T21962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4659'. [ 492.110727][T21979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4663'. [ 492.541264][T22004] openvswitch: netlink: Message has 4 unknown bytes. [ 492.566806][T22003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4668'. [ 492.600475][T22003] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 492.608433][T22003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.956446][T22026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4674'. [ 493.122596][T22032] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 493.205061][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4679'. [ 493.287883][T22047] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 493.401436][T22053] netlink: 'syz.2.4681': attribute type 1 has an invalid length. [ 493.411062][T22053] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4681'. [ 493.530939][T22058] netlink: 'syz.4.4683': attribute type 1 has an invalid length. [ 493.573543][T22058] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4683'. [ 493.606745][T22060] netlink: ct family unspecified [ 493.611782][T22060] openvswitch: netlink: Actions may not be safe on all matching packets [ 493.843678][T22075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4686'. [ 493.898889][T22081] netlink: 'syz.1.4688': attribute type 16 has an invalid length. [ 493.948086][T22081] netlink: 'syz.1.4688': attribute type 17 has an invalid length. [ 494.024650][T22081] 0{X功: left allmulticast mode [ 494.054113][T22081] erspan0: left promiscuous mode [ 494.096506][T22081] erspan0: left allmulticast mode [ 494.119060][T22081] 8021q: adding VLAN 0 to HW filter on device ` [ 494.130933][T22081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.442092][T22105] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4694'. [ 494.488597][T22104] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4695'. [ 494.506197][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.514405][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.570593][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.633987][T22109] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 494.647317][T22117] C: renamed from lo (while UP) [ 494.722277][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.781949][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.798952][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.861644][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.962577][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 494.997706][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 495.018675][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 495.049586][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 495.080656][T22109] syzkaller0 speed is unknown, defaulting to 1000 [ 495.955778][T22177] dvmrp0: entered allmulticast mode [ 496.060084][T22189] netlink: 'syz.2.4719': attribute type 32 has an invalid length. [ 496.098278][T22185] ipvlan2: entered promiscuous mode [ 496.158396][T22177] dvmrp0: left allmulticast mode [ 496.222575][T13831] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.247785][T13831] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.303708][T22198] netlink: 'syz.4.4721': attribute type 10 has an invalid length. [ 496.355332][T13831] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.379164][T13841] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.975530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.361255][T22257] __nla_validate_parse: 11 callbacks suppressed [ 497.361275][T22257] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4737'. [ 497.388684][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4736'. [ 497.399066][T22257] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4737'. [ 497.468772][T22264] netlink: 'syz.0.4739': attribute type 1 has an invalid length. [ 497.483010][T22264] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4739'. [ 497.610187][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4741'. [ 497.794502][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4745'. [ 497.931438][T22296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4744'. [ 497.962861][T22296] macsec0: entered promiscuous mode [ 497.992709][T22296] macsec0: entered allmulticast mode [ 498.067270][T22296] veth1_macvtap: entered allmulticast mode [ 498.083102][T22306] netlink: 'syz.1.4750': attribute type 10 has an invalid length. [ 498.103057][T22306] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.110806][T22306] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.159570][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4750'. [ 498.231916][T22306] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.239191][T22306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.246766][T22306] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.253946][T22306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.278264][T22317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4752'. [ 498.292511][T22306] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.299847][T22306] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.326617][T22312] bridge_slave_1: left allmulticast mode [ 498.332326][T22312] bridge_slave_1: left promiscuous mode [ 498.386326][T22312] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.414409][T22312] bridge_slave_0: left allmulticast mode [ 498.442349][T22312] bridge_slave_0: left promiscuous mode [ 498.477013][T22312] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.137484][T22364] bridge_slave_0: left allmulticast mode [ 499.143180][T22364] bridge_slave_0: left promiscuous mode [ 499.158739][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.196831][T22364] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.231410][T22364] bridge_slave_1: left allmulticast mode [ 499.242226][T22364] bridge_slave_1: left promiscuous mode [ 499.297388][T22364] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.329983][T22364] bond0: (slave bond_slave_0): Releasing backup interface [ 499.344279][T22371] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 499.356499][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.371719][T22371] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 499.375713][T22364] bond0: (slave bond_slave_1): Releasing backup interface [ 499.420250][T22364] team0: Port device team_slave_0 removed [ 499.450901][T22364] team0: Port device team_slave_1 removed [ 499.459072][T22364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.479572][T22364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.506223][T22364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.519028][T22364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.536725][ T55] block nbd4: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 120 seconds [ 499.548117][ T55] block nbd4: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 120 seconds [ 499.559956][ T55] block nbd4: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 120 seconds [ 499.571651][ T55] block nbd4: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 120 seconds [ 499.593867][T22364] bond1: (slave ip6gretap1): Releasing backup interface [ 499.623070][T22364] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 52:d4:96:d4:dd:08 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 499.649118][T22364] bond1: (slave veth1): Releasing backup interface [ 499.663917][T22365] team0: Mode changed to "broadcast" [ 499.684106][T22369] netlink: 'syz.2.4760': attribute type 12 has an invalid length. [ 499.686295][T20025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 499.743433][T22374] bridge4: entered promiscuous mode [ 499.759622][T22374] bridge4: entered allmulticast mode [ 499.890370][T22376] lo speed is unknown, defaulting to 1000 [ 500.193954][T22388] netlink: zone id is out of range [ 500.236945][T22388] netlink: zone id is out of range [ 500.242306][T22388] netlink: zone id is out of range [ 500.296791][T22388] netlink: zone id is out of range [ 500.311545][T22388] netlink: zone id is out of range [ 500.337025][T20025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.345003][T22388] netlink: zone id is out of range [ 500.353646][T22376] syzkaller0 speed is unknown, defaulting to 1000 [ 500.481301][T22400] netlink: 'syz.3.4772': attribute type 14 has an invalid length. [ 500.510962][T22401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4772'. [ 500.815395][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.946422][T22422] IPv6: Can't replace route, no match found [ 501.479533][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 501.504081][T22454] can: request_module (can-proto-0) failed. [ 501.630806][T22464] tipc: Enabling of bearer rejected, already enabled [ 502.129132][T22494] netlink: 'syz.0.4801': attribute type 33 has an invalid length. [ 502.223655][T22498] netlink: 'syz.3.4803': attribute type 1 has an invalid length. [ 503.114968][T22547] bridge5: entered promiscuous mode [ 503.124812][T22547] bridge5: entered allmulticast mode [ 503.234381][T22548] sctp: [Deprecated]: syz.2.4817 (pid 22548) Use of int in max_burst socket option deprecated. [ 503.234381][T22548] Use struct sctp_assoc_value instead [ 503.698393][T22579] netlink: 'syz.3.4823': attribute type 1 has an invalid length. [ 503.751189][T22588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.779464][T22588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.018060][ T55] block nbd1: Possible stuck request ffff88802539e000: control (read@0,4096B). Runtime 300 seconds [ 504.271615][T22611] netlink: 'syz.4.4833': attribute type 2 has an invalid length. [ 504.366004][T22613] tipc: Enabled bearer , priority 0 [ 504.382447][T22613] syzkaller0: entered promiscuous mode [ 504.404585][T22613] syzkaller0: entered allmulticast mode [ 504.450600][T22613] tipc: Resetting bearer [ 504.482402][T22612] tipc: Resetting bearer [ 504.634377][T22612] tipc: Disabling bearer [ 504.833152][T22637] __nla_validate_parse: 7 callbacks suppressed [ 504.833170][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4842'. [ 504.872533][T22637] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 504.877089][T22640] net_ratelimit: 8 callbacks suppressed [ 504.877118][T22640] openvswitch: netlink: IPv6 tunnel dst address is zero [ 504.952739][T22640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4843'. [ 505.012221][T22647] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 505.059685][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4847'. [ 505.085956][T22651] dummy0: entered promiscuous mode [ 505.092809][T22651] batadv_slave_1: entered promiscuous mode [ 505.108112][T22651] debugfs: 'hsr1' already exists in 'hsr' [ 505.113971][T22651] Cannot create hsr debugfs directory [ 505.150531][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 505.344939][T22663] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 505.355080][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4852'. [ 505.395075][T22666] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 505.497057][T22671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4853'. [ 505.609905][T22675] tipc: Enabled bearer , priority 0 [ 505.631508][T22675] syzkaller0: entered promiscuous mode [ 505.645738][T22675] syzkaller0: entered allmulticast mode [ 505.727947][T22675] tipc: Resetting bearer [ 505.746683][T22680] netlink: 'syz.3.4858': attribute type 8 has an invalid length. [ 505.803326][T22673] tipc: Resetting bearer [ 505.868895][T22673] tipc: Disabling bearer [ 506.023625][T22693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4863'. [ 506.049187][T22689] netlink: 'syz.0.4862': attribute type 1 has an invalid length. [ 506.078016][T22694] sit3: entered promiscuous mode [ 506.091164][T22694] sit3: entered allmulticast mode [ 506.275089][T22716] netlink: 'syz.0.4866': attribute type 2 has an invalid length. [ 506.362840][T22726] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 506.381852][T22726] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 506.607703][T22735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4870'. [ 506.621965][T22735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4870'. [ 506.815280][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 506.823451][ C1] lec:lec_tx_timeout: lec0 [ 506.896750][ T5870] Bluetooth: hci0: command tx timeout [ 507.314948][T22755] netlink: 'syz.3.4876': attribute type 1 has an invalid length. [ 507.674253][ T30] audit: type=1800 audit(1755403580.914:10): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4882" name="memory.events" dev="tmpfs" ino=1683 res=0 errno=0 [ 510.369279][T22792] tipc: Enabling of bearer rejected, already enabled [ 510.762055][T22824] netlink: 476 bytes leftover after parsing attributes in process `syz.0.4894'. [ 510.940948][T22840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4900'. [ 511.006846][T22835] veth9: entered allmulticast mode [ 511.349014][T22867] netlink: 'syz.2.4906': attribute type 11 has an invalid length. [ 511.492591][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4909'. [ 511.693951][T22888] netlink: 'syz.3.4912': attribute type 1 has an invalid length. [ 511.710912][T22888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4912'. [ 511.882673][T22896] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4916'. [ 512.036217][T22904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4917'. [ 512.097309][T22904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4917'. [ 512.106832][T22910] nbd: nbd4 already in use [ 512.184467][T22922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4923'. [ 512.267818][T22922] vlan2: entered promiscuous mode [ 512.283171][T22922] erspan0: entered promiscuous mode [ 512.293931][T22924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4924'. [ 512.521569][T22944] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4928'. [ 512.549357][T22944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.619079][T22945] syzkaller0: mtu less than device minimum [ 512.746175][ T13] tipc: Subscription rejected, illegal request [ 512.796601][T22951] syzkaller1: entered promiscuous mode [ 512.827427][T22951] syzkaller1: entered allmulticast mode [ 512.888809][T22960] netlink: 'syz.3.4932': attribute type 2 has an invalid length. [ 512.934184][T22951] syzkaller1: left promiscuous mode [ 512.943004][T22951] syzkaller1: left allmulticast mode [ 513.384107][T22984] pimreg: entered allmulticast mode [ 514.313992][T23036] netlink: 'syz.3.4961': attribute type 1 has an invalid length. [ 514.353061][T23036] netlink: 'syz.3.4961': attribute type 1 has an invalid length. [ 514.714214][T23059] netlink: 'syz.4.4967': attribute type 1 has an invalid length. [ 514.760916][T23067] bond0: entered allmulticast mode [ 514.776482][T23067] bond_slave_0: entered allmulticast mode [ 514.782757][T23067] bond_slave_1: entered allmulticast mode [ 514.805528][T23067] bridge_slave_1: entered allmulticast mode [ 514.947397][T23076] netlink: 'syz.4.4972': attribute type 11 has an invalid length. [ 515.071625][T23079] vlan3: entered promiscuous mode [ 515.078490][T23079] bridge0: entered promiscuous mode [ 515.140052][T23090] netlink: 'syz.1.4976': attribute type 1 has an invalid length. [ 515.160104][T23090] netlink: 'syz.1.4976': attribute type 2 has an invalid length. [ 515.219492][T23093] block nbd2: Unsupported socket: shutdown callout must be supported. [ 515.561909][T23117] netlink: 'syz.1.4984': attribute type 1 has an invalid length. [ 515.848432][T23130] __nla_validate_parse: 12 callbacks suppressed [ 515.848450][T23130] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4988'. [ 515.990032][T23138] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4990'. [ 516.027466][T23138] vlan3: entered allmulticast mode [ 516.033264][T23138] 0{X功: entered allmulticast mode [ 516.188822][T23149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.215940][T23153] bond6: (slave geneve2): making interface the new active one [ 516.227095][T23153] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 516.294627][T23158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4995'. [ 516.720423][T23181] sctp: [Deprecated]: syz.0.5003 (pid 23181) Use of int in maxseg socket option. [ 516.720423][T23181] Use struct sctp_assoc_value instead [ 517.070534][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5008'. [ 517.271005][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5013'. [ 517.281670][T23208] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5013'. [ 517.338084][T23209] validate_nla: 1 callbacks suppressed [ 517.338109][T23209] netlink: 'syz.4.5011': attribute type 4 has an invalid length. [ 517.594727][T23225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5018'. [ 517.612439][T23223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5016'. [ 517.636529][T23223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5016'. [ 517.696561][T23223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5016'. [ 517.837493][T23233] bond0: left allmulticast mode [ 517.842423][T23233] bond_slave_0: left allmulticast mode [ 517.876210][T23233] bond_slave_1: left allmulticast mode [ 517.881752][T23233] bridge_slave_1: left allmulticast mode [ 518.084750][T13831] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.095838][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.121066][T13831] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.134804][T13831] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.152622][T13831] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.621029][T23271] netlink: 'syz.3.5035': attribute type 11 has an invalid length. [ 518.626776][T23276] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 518.780097][T23283] sctp: [Deprecated]: syz.4.5037 (pid 23283) Use of int in max_burst socket option deprecated. [ 518.780097][T23283] Use struct sctp_assoc_value instead [ 518.964415][T23296] netlink: 'syz.1.5039': attribute type 2 has an invalid length. [ 518.999686][T23296] netlink: 'syz.1.5039': attribute type 8 has an invalid length. [ 519.581727][T23331] lo: entered promiscuous mode [ 519.592159][T23331] tunl0: entered promiscuous mode [ 519.600395][T23331] gre0: entered promiscuous mode [ 519.616229][T23331] gretap0: entered promiscuous mode [ 519.621965][T23331] erspan0: entered promiscuous mode [ 519.628099][T23331] ip_vti0: entered promiscuous mode [ 519.844385][T23348] netlink: 'syz.1.5052': attribute type 6 has an invalid length. [ 519.866020][T23350] netlink: 'syz.0.5055': attribute type 1 has an invalid length. [ 520.079683][T23362] netlink: 'syz.0.5056': attribute type 1 has an invalid length. [ 520.159996][T23362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.358665][T23381] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 520.574659][T23385] 8021q: adding VLAN 0 to HW filter on device bond7 [ 520.620661][T23387] vlan2: entered allmulticast mode [ 520.627146][T23387] bond7: entered allmulticast mode [ 520.706101][T23390] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 520.867317][T23396] netlink: 'syz.4.5068': attribute type 17 has an invalid length. [ 520.905717][T23396] __nla_validate_parse: 23 callbacks suppressed [ 520.905738][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5068'. [ 520.956912][T23396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5068'. [ 521.068574][T23414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5075'. [ 521.290566][T23426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5080'. [ 521.307679][T23426] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5080'. [ 521.317477][T23426] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5080'. [ 521.342046][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5081'. [ 521.675759][T23454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5085'. [ 521.938111][ T55] block nbd3: Possible stuck request ffff888025405080: control (read@0,1024B). Runtime 150 seconds [ 521.951808][ T55] block nbd3: Possible stuck request ffff888025405240: control (read@1024,1024B). Runtime 150 seconds [ 521.963106][ T55] block nbd3: Possible stuck request ffff888025405400: control (read@2048,1024B). Runtime 150 seconds [ 521.976912][ T55] block nbd3: Possible stuck request ffff8880254055c0: control (read@3072,1024B). Runtime 150 seconds [ 522.196293][T23480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5090'. [ 522.238710][T23480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5090'. [ 522.378362][T23489] netlink: 'syz.4.5097': attribute type 1 has an invalid length. [ 522.461454][T23489] 8021q: adding VLAN 0 to HW filter on device bond11 [ 522.520416][T23489] netlink: 'syz.4.5097': attribute type 1 has an invalid length. [ 522.739644][T23503] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 522.954561][T23512] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 523.203682][T23526] macvlan2: entered promiscuous mode [ 523.261544][T23526] macvlan2: entered allmulticast mode [ 523.278186][T23526] bond4: entered promiscuous mode [ 523.311143][T23526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.351476][T23539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.444013][T23544] netlink: 'syz.2.5112': attribute type 2 has an invalid length. [ 523.499833][T23526] bond4: left promiscuous mode [ 523.722549][T23553] !: renamed from dummy0 (while UP) [ 524.250267][T23595] netlink: 'syz.4.5129': attribute type 1 has an invalid length. [ 524.266179][T23595] nbd: illegal input index 1048576 [ 525.407710][T23653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.324342][T23701] __nla_validate_parse: 27 callbacks suppressed [ 526.324363][T23701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5157'. [ 526.366579][T23701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5157'. [ 526.489211][T23696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.620575][T23714] !: renamed from bond_slave_0 (while UP) [ 526.721694][T23719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5164'. [ 526.750431][T23719] netlink: 'syz.4.5164': attribute type 7 has an invalid length. [ 526.776535][T23719] netlink: 'syz.4.5164': attribute type 8 has an invalid length. [ 526.784302][T23719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5164'. [ 526.974441][T23728] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5166'. [ 527.479382][T23756] bridge9: entered promiscuous mode [ 527.484705][T23756] bridge9: entered allmulticast mode [ 527.712790][T23763] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 527.729138][T23763] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 527.741358][T23763] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 527.754299][T23763] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 527.778128][T23763] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 527.791709][T23765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.049852][T23829] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 529.066795][T23833] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 529.444181][T23853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5200'. [ 529.502974][T23859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5202'. [ 529.529227][T23853] vxlan1: entered promiscuous mode [ 529.540465][T23853] vxlan1: entered allmulticast mode [ 529.616090][ T55] block nbd4: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 150 seconds [ 529.627479][ T55] block nbd4: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 150 seconds [ 529.639100][ T55] block nbd4: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 150 seconds [ 529.650423][ T55] block nbd4: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 150 seconds [ 529.700915][T23864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5204'. [ 529.712400][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5204'. [ 529.733771][T23862] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5203'. [ 530.255501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.279842][T23903] tipc: Enabling of bearer rejected, already enabled [ 530.686703][ T5947] IPVS: starting estimator thread 0... [ 530.694481][T23929] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 530.775605][T23930] IPVS: using max 27 ests per chain, 64800 per kthread [ 531.135813][ T5870] Bluetooth: hci0: command tx timeout [ 531.211450][T23955] block nbd2: Unsupported socket: shutdown callout must be supported. [ 531.419005][T23967] netlink: 'syz.1.5234': attribute type 9 has an invalid length. [ 531.436983][T23967] __nla_validate_parse: 6 callbacks suppressed [ 531.437003][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5234'. [ 531.464865][T23967] netlink: 'syz.1.5234': attribute type 9 has an invalid length. [ 531.474974][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5234'. [ 531.505006][T23970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.533689][T23970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.902756][T23994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5242'. [ 532.185432][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.312722][T23989] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.320572][T23989] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.592364][T23989] wg1: left promiscuous mode [ 532.676050][T23989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.703413][T23989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.866965][T23989] veth1_macvtap: left allmulticast mode [ 532.872815][T23989] macsec0: left promiscuous mode [ 533.066253][T23989] bridge2: left promiscuous mode [ 533.071607][T23989] sit1: left promiscuous mode [ 533.087047][T23989] macvlan2: left promiscuous mode [ 533.169925][T13841] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.185991][T13841] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.203825][T13841] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.237780][T13841] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.027725][T24071] netlink: 'syz.1.5255': attribute type 1 has an invalid length. [ 534.064894][T24071] netlink: 'syz.1.5255': attribute type 1 has an invalid length. [ 534.100115][ T55] block nbd1: Possible stuck request ffff88802539e000: control (read@0,4096B). Runtime 330 seconds [ 534.275956][T24083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5260'. [ 534.276070][T24079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5260'. [ 534.760329][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5267'. [ 534.876516][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5269'. [ 534.892226][T24112] chnl_net:caif_netlink_parms(): no params data found [ 534.940496][T24115] pimreg: entered allmulticast mode [ 534.975850][T24117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.010444][T24119] pimreg: left allmulticast mode [ 535.326356][T24129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5276'. [ 535.342532][T24134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5277'. [ 535.379975][T24134] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 535.563808][T24144] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.5278'. [ 535.970540][T24165] netlink: 'syz.0.5282': attribute type 11 has an invalid length. [ 536.485064][T24189] __nla_validate_parse: 3 callbacks suppressed [ 536.485086][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'. [ 536.686469][T24209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5292'. [ 536.809386][T24196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.973048][T24228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5296'. [ 537.028927][T24230] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5297'. [ 537.150692][T24230] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.191071][T24230] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.212169][T24230] ` (unregistering): Released all slaves [ 537.268559][T24237] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 537.356387][T24243] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5299'. [ 537.437887][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5304'. [ 537.619892][T24258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'. [ 537.639498][T24258] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 537.663058][T24258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.689094][T24263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5307'. [ 537.714187][T24263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5307'. [ 537.859128][T24274] IPVS: Error connecting to the multicast addr [ 537.898036][T24277] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5309'. [ 540.701795][T24346] netlink: 'syz.0.5330': attribute type 10 has an invalid length. [ 540.732455][T24346] mac80211_hwsim hwsim36 wlan1: left promiscuous mode [ 540.770045][T24346] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 540.805695][T24354] bond0: (slave bridge_slave_1): Releasing backup interface [ 540.827804][T24354] bond0: (slave bond_slave_0): Releasing backup interface [ 540.846901][T24354] bond0: (slave bond_slave_1): Releasing backup interface [ 540.862256][T24354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.872367][T24354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.887338][T24354] bond0: (slave wlan1): Releasing backup interface [ 540.923070][T24357] veth1_to_bond: entered allmulticast mode [ 540.998110][T24367] bond0: (slave bond_slave_1): Releasing backup interface [ 541.052497][T24367] veth1_to_bond (unregistering): left allmulticast mode [ 541.087547][T24366] lo speed is unknown, defaulting to 1000 [ 541.864338][T24366] syzkaller0 speed is unknown, defaulting to 1000 [ 542.062282][T24418] __nla_validate_parse: 7 callbacks suppressed [ 542.062302][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5349'. [ 542.121745][T24420] netlink: 'syz.3.5350': attribute type 1 has an invalid length. [ 542.130120][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5350'. [ 542.178576][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5349'. [ 542.606482][T24439] netlink: 'syz.4.5354': attribute type 25 has an invalid length. [ 542.647663][T24438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5354'. [ 543.321335][T24465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5361'. [ 544.085792][T24535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5371'. [ 544.164634][T24539] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 544.298292][T24548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.326271][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5375'. [ 544.571302][T24566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5380'. [ 544.684818][T24570] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 544.748988][T24557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5380'. [ 545.312325][T24604] lo speed is unknown, defaulting to 1000 [ 545.401016][T24612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.708345][T24604] syzkaller0 speed is unknown, defaulting to 1000 [ 545.764710][T24624] syzkaller1: entered promiscuous mode [ 545.772311][T24624] syzkaller1: entered allmulticast mode [ 546.096095][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5400'. [ 546.744498][ T5870] Bluetooth: hci1: command tx timeout [ 546.932869][T24668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.122824][T24682] netlink: 'syz.3.5414': attribute type 1 has an invalid length. [ 547.171732][T24684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.523188][T24702] tipc: Enabling of bearer rejected, failed to enable media [ 547.560712][T24703] tipc: Enabling of bearer rejected, failed to enable media [ 547.723635][T24713] __nla_validate_parse: 3 callbacks suppressed [ 547.723656][T24713] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5425'. [ 547.754758][T24719] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5428'. [ 547.781298][T24721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5427'. [ 547.837940][T24721] tipc: Enabling of bearer rejected, media not registered [ 547.956690][T24721] openvswitch: netlink: Key type 85 is out of range max 32 [ 547.969453][T24730] syzkaller1: entered promiscuous mode [ 547.985544][T24730] syzkaller1: entered allmulticast mode [ 548.014230][T24730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5431'. [ 548.189797][T24742] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 548.219880][T24746] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 548.238244][T24748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5439'. [ 548.268236][T24744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5438'. [ 548.302532][T24744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5438'. [ 548.336237][T24744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5438'. [ 548.362446][T24744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5438'. [ 548.435445][T24755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5442'. [ 549.219862][T24796] tipc: Enabled bearer , priority 12 [ 549.337736][T24799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.756417][T24828] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001 [ 549.981192][T24832] syzkaller0: entered promiscuous mode [ 550.003185][T24832] syzkaller0: entered allmulticast mode [ 550.041658][T24844] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 550.363441][T24859] tipc: Can't bind to reserved service type 1 [ 551.977488][T24855] lo: entered allmulticast mode [ 551.982700][T24855] lo: left allmulticast mode [ 552.009627][T24875] syz.2.5479: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 552.036490][ T55] block nbd3: Possible stuck request ffff888025405080: control (read@0,1024B). Runtime 180 seconds [ 552.041141][T24875] CPU: 1 UID: 0 PID: 24875 Comm: syz.2.5479 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 552.041174][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.041188][T24875] Call Trace: [ 552.041197][T24875] [ 552.041208][T24875] dump_stack_lvl+0x189/0x250 [ 552.041248][T24875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.041274][T24875] ? __pfx__printk+0x10/0x10 [ 552.041308][T24875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 552.041337][T24875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 552.041366][T24875] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 552.041397][T24875] warn_alloc+0x214/0x310 [ 552.041442][T24875] ? __pfx_warn_alloc+0x10/0x10 [ 552.041488][T24875] ? __get_vm_area_node+0x28f/0x300 [ 552.041521][T24875] ? fq_pie_init+0x430/0x840 [ 552.041554][T24875] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 552.041625][T24875] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 552.041667][T24875] ? rcu_is_watching+0x15/0xb0 [ 552.041691][T24875] ? fq_pie_init+0x430/0x840 [ 552.041716][T24875] ? fq_pie_init+0x430/0x840 [ 552.041741][T24875] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 552.041773][T24875] ? fq_pie_init+0x430/0x840 [ 552.041800][T24875] ? tcf_block_get+0x67/0xa0 [ 552.041829][T24875] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 552.041875][T24875] fq_pie_init+0x430/0x840 [ 552.041907][T24875] ? __pfx_fq_pie_init+0x10/0x10 [ 552.041934][T24875] qdisc_create+0x7ac/0xea0 [ 552.041973][T24875] tc_modify_qdisc+0x1538/0x20e0 [ 552.042021][T24875] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 552.042088][T24875] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 552.042114][T24875] rtnetlink_rcv_msg+0x77c/0xb70 [ 552.042153][T24875] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 552.042186][T24875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 552.042217][T24875] ? ref_tracker_free+0x63a/0x7d0 [ 552.042251][T24875] ? __asan_memcpy+0x40/0x70 [ 552.042277][T24875] ? __pfx_ref_tracker_free+0x10/0x10 [ 552.042323][T24875] netlink_rcv_skb+0x208/0x470 [ 552.042369][T24875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 552.042402][T24875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.042447][T24875] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.042490][T24875] netlink_unicast+0x82c/0x9e0 [ 552.042529][T24875] ? __pfx_netlink_unicast+0x10/0x10 [ 552.042561][T24875] ? netlink_sendmsg+0x642/0xb30 [ 552.042591][T24875] ? skb_put+0x11b/0x210 [ 552.042616][T24875] netlink_sendmsg+0x805/0xb30 [ 552.042659][T24875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.042696][T24875] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.042733][T24875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.042756][T24875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.042789][T24875] __sock_sendmsg+0x219/0x270 [ 552.042821][T24875] ____sys_sendmsg+0x505/0x830 [ 552.042862][T24875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.042897][T24875] ? import_iovec+0x74/0xa0 [ 552.042927][T24875] ___sys_sendmsg+0x21f/0x2a0 [ 552.042953][T24875] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.043020][T24875] ? __fget_files+0x2a/0x420 [ 552.043041][T24875] ? __fget_files+0x3a0/0x420 [ 552.043073][T24875] __x64_sys_sendmsg+0x19b/0x260 [ 552.043100][T24875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.043137][T24875] ? rcu_is_watching+0x15/0xb0 [ 552.043165][T24875] ? do_syscall_64+0xbe/0x3b0 [ 552.043202][T24875] do_syscall_64+0xfa/0x3b0 [ 552.043231][T24875] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.043260][T24875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.043283][T24875] ? clear_bhb_loop+0x60/0xb0 [ 552.043310][T24875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.043331][T24875] RIP: 0033:0x7f532518ebe9 [ 552.043351][T24875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.043370][T24875] RSP: 002b:00007f5326025038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.043394][T24875] RAX: ffffffffffffffda RBX: 00007f53253b5fa0 RCX: 00007f532518ebe9 [ 552.043411][T24875] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000005 [ 552.043424][T24875] RBP: 00007f5325211e19 R08: 0000000000000000 R09: 0000000000000000 [ 552.043438][T24875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.043451][T24875] R13: 00007f53253b6038 R14: 00007f53253b5fa0 R15: 00007ffdd0bc69e8 [ 552.043487][T24875] [ 552.043506][T24875] Mem-Info: [ 552.047560][ T55] block nbd3: Possible stuck request ffff888025405240: control (read@1024,1024B). Runtime 180 seconds [ 552.047616][ T55] block nbd3: Possible stuck request ffff888025405400: control (read@2048,1024B). Runtime 180 seconds [ 552.047643][ T55] block nbd3: Possible stuck request ffff8880254055c0: control (read@3072,1024B). Runtime 180 seconds [ 552.541116][T24875] active_anon:6087 inactive_anon:0 isolated_anon:0 [ 552.541116][T24875] active_file:2760 inactive_file:40015 isolated_file:0 [ 552.541116][T24875] unevictable:768 dirty:62 writeback:0 [ 552.541116][T24875] slab_reclaimable:13252 slab_unreclaimable:140637 [ 552.541116][T24875] mapped:29239 shmem:1367 pagetables:1417 [ 552.541116][T24875] sec_pagetables:0 bounce:0 [ 552.541116][T24875] kernel_misc_reclaimable:0 [ 552.541116][T24875] free:1269469 free_pcp:16426 free_cma:0 [ 552.593355][T24875] Node 0 active_anon:24348kB inactive_anon:0kB active_file:11040kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116956kB dirty:248kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16116kB pagetables:5620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 552.629460][T24875] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 552.663776][T24875] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 552.694124][T24875] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 552.700512][T24875] Node 0 DMA32 free:1165372kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24400kB inactive_anon:0kB active_file:11040kB inactive_file:158280kB unevictable:1536kB writepending:248kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:50548kB local_pcp:28592kB free_cma:0kB [ 552.742340][T24875] lowmem_reserve[]: 0 0 1 1 1 [ 552.748846][T24875] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 552.789312][T24875] lowmem_reserve[]: 0 0 0 0 0 [ 552.794185][T24875] Node 1 Normal free:3897376kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15968kB local_pcp:9696kB free_cma:0kB [ 552.838261][T24875] lowmem_reserve[]: 0 0 0 0 0 [ 552.843069][T24875] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 552.863583][T24875] Node 0 DMA32: 366*4kB (UME) 107*8kB (UM) 104*16kB (UME) 54*32kB (UM) 46*64kB (M) 26*128kB (UME) 262*256kB (UME) 324*512kB (UM) 140*1024kB (UME) 1*2048kB (U) 190*4096kB (UM) = 1168592kB [ 552.891303][T24875] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 552.915980][T24875] Node 1 Normal: 162*4kB (UME) 45*8kB (UME) 43*16kB (UME) 180*32kB (UME) 42*64kB (UME) 15*128kB (UME) 5*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3897376kB [ 552.934981][T24875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 552.960338][T24875] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 552.973223][T24875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 552.984785][T24875] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 552.997536][T24875] 44141 total pagecache pages [ 553.002262][T24875] 0 pages in swap cache [ 553.007746][T24875] Free swap = 124996kB [ 553.011923][T24875] Total swap = 124996kB [ 553.017214][T24875] 2097051 pages RAM [ 553.021039][T24875] 0 pages HighMem/MovableOnly [ 553.026322][T24875] 425656 pages reserved [ 553.030491][T24875] 0 pages cma reserved [ 553.302152][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 553.612029][T24952] __nla_validate_parse: 9 callbacks suppressed [ 553.612051][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5497'. [ 553.949327][T24976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5503'. [ 554.799688][T25022] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 554.827762][T25022] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 555.287096][T25042] netlink: 'syz.2.5523': attribute type 11 has an invalid length. [ 555.309086][T25042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5523'. [ 555.489812][T25048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5525'. [ 555.849971][T25060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5529'. [ 555.873066][T25058] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5530'. [ 555.946977][T25070] netlink: 'syz.0.5529': attribute type 1 has an invalid length. [ 556.022995][T25077] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5532'. [ 556.065341][T25078] netlink: 'syz.3.5532': attribute type 10 has an invalid length. [ 556.073444][T25078] bridge_slave_1: left allmulticast mode [ 556.107163][T25077] netlink: zone id is out of range [ 556.112489][T25077] netlink: get zone limit has 8 unknown bytes [ 556.128689][T25078] bridge_slave_1: left promiscuous mode [ 556.134527][T25078] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.227361][T25078] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 556.405092][T25102] netlink: 'syz.0.5537': attribute type 5 has an invalid length. [ 556.493300][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5538'. [ 556.623653][T25121] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5542'. [ 556.638435][T25121] 0{X功: renamed from gretap0 [ 556.649972][T25121] 0{X功: left promiscuous mode [ 556.655062][T25121] 0{X功: entered allmulticast mode [ 556.684606][T25126] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5542'. [ 556.709018][T25121] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 556.727122][T25126] 1{X功: renamed from 30{X功 (while UP) [ 556.738766][T25126] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 556.800258][T25086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.989651][T25138] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 557.238018][T25153] netlink: 'syz.4.5550': attribute type 8 has an invalid length. [ 557.725010][T25175] netlink: 'syz.2.5557': attribute type 1 has an invalid length. [ 557.742606][T25175] netlink: 'syz.2.5557': attribute type 2 has an invalid length. [ 558.284284][T25205] lo: entered allmulticast mode [ 558.292946][T25205] lo: left allmulticast mode [ 558.293833][T25201] sctp: [Deprecated]: syz.4.5566 (pid 25201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.293833][T25201] Use struct sctp_sack_info instead [ 558.413496][T25209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.641668][T25219] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 558.688981][T25219] netlink: 'syz.0.5574': attribute type 2 has an invalid length. [ 558.697109][T25219] __nla_validate_parse: 11 callbacks suppressed [ 558.697126][T25219] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5574'. [ 558.998281][T25230] geneve3: entered promiscuous mode [ 559.030623][T24507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.071406][T24507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.103550][T24507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.136719][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5579'. [ 559.155993][T24507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.259187][T25241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.431935][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.443621][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.456164][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.467342][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.479419][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.504025][T25248] gtp0: entered promiscuous mode [ 559.534656][T25255] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5584'. [ 559.623776][T25246] lo speed is unknown, defaulting to 1000 [ 559.627105][T25255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5584'. [ 559.698727][ T55] block nbd4: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 180 seconds [ 559.710055][ T55] block nbd4: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 180 seconds [ 559.721143][ T55] block nbd4: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 180 seconds [ 559.732470][ T55] block nbd4: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 180 seconds [ 560.136935][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5592'. [ 560.185584][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5592'. [ 560.303304][T25288] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5595'. [ 560.346614][T25246] syzkaller0 speed is unknown, defaulting to 1000 [ 560.376728][T25290] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5597'. [ 560.412363][T25290] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 560.779331][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5600'. [ 560.813424][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5600'. [ 560.841953][T25246] chnl_net:caif_netlink_parms(): no params data found [ 561.142568][T25246] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.150784][T25246] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.171143][T25246] bridge_slave_0: entered allmulticast mode [ 561.187460][T25246] bridge_slave_0: entered promiscuous mode [ 561.207133][T25246] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.214495][T25246] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.236796][T25246] bridge_slave_1: entered allmulticast mode [ 561.244717][T25246] bridge_slave_1: entered promiscuous mode [ 561.279726][T25323] nbd: nbd0 already in use [ 561.284710][T25323] block nbd0: NBD_DISCONNECT [ 561.290054][T25323] block nbd0: Send disconnect failed -32 [ 561.297304][T25323] block nbd0: shutting down sockets [ 561.463991][T25246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.481775][T25246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.537892][ T5870] Bluetooth: hci4: command tx timeout [ 561.573327][T25340] tipc: Enabled bearer , priority 0 [ 561.729460][T25342] syzkaller0: entered promiscuous mode [ 561.766955][T25342] syzkaller0: entered allmulticast mode [ 561.792465][T25246] team0: Port device team_slave_0 added [ 561.843932][T25246] team0: Port device team_slave_1 added [ 561.983030][T25246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.010418][T25246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.052910][T25246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.074076][T25354] tipc: Resetting bearer [ 562.128867][T25354] tipc: Disabling bearer [ 562.149977][T25246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.157743][T25246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.187266][T25246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.293037][T25369] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 562.344780][T25246] hsr_slave_0: entered promiscuous mode [ 562.379259][T25246] hsr_slave_1: entered promiscuous mode [ 562.392484][T25246] debugfs: 'hsr0' already exists in 'hsr' [ 562.404613][T25246] Cannot create hsr debugfs directory [ 562.552547][T25381] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 562.906938][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 562.932597][T25397] tipc: Enabling of bearer rejected, already enabled [ 563.082048][T25246] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.126678][T25246] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.260717][T25419] netlink: 'syz.3.5630': attribute type 9 has an invalid length. [ 563.362286][T25246] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.389153][T25246] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.584269][T25246] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.608793][T25246] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.627210][ T5870] Bluetooth: hci4: command 0x041b tx timeout [ 563.791997][T25246] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.816578][T25246] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.988462][T24506] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 564.122937][T25460] lo speed is unknown, defaulting to 1000 [ 564.176169][ T55] block nbd1: Possible stuck request ffff88802539e000: control (read@0,4096B). Runtime 360 seconds [ 564.387789][T25460] syzkaller0 speed is unknown, defaulting to 1000 [ 564.680613][T25246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 564.701380][T25246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 564.860904][T25246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 564.891409][T25246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 565.383716][T25246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.433738][T25515] veth0: entered promiscuous mode [ 565.452127][T25515] __nla_validate_parse: 9 callbacks suppressed [ 565.452146][T25515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5653'. [ 565.579365][T25523] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 565.653977][T25527] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 565.677864][T25246] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.695507][ T5868] Bluetooth: hci4: command 0x041b tx timeout [ 565.707351][T24472] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.714522][T24472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.774764][T24508] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.782006][T24508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.899803][T25536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5659'. [ 566.373238][T25560] tipc: Enabled bearer , priority 0 [ 566.404040][T25246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.422480][T25563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5668'. [ 566.438756][T25559] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 566.564858][T25559] tipc: Disabling bearer [ 566.596544][T25570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5670'. [ 566.627000][T25246] veth0_vlan: entered promiscuous mode [ 566.677603][T25573] lo speed is unknown, defaulting to 1000 [ 566.678158][T25246] veth1_vlan: entered promiscuous mode [ 566.810037][T25246] veth0_macvtap: entered promiscuous mode [ 566.851514][T25246] veth1_macvtap: entered promiscuous mode [ 566.933301][T25246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.985603][T25246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.017730][T13834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.044810][T13834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.120253][T13834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.154540][T13834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.164247][T25592] netlink: 816 bytes leftover after parsing attributes in process `syz.0.5675'. [ 567.399970][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5677'. [ 567.440225][T25573] syzkaller0 speed is unknown, defaulting to 1000 [ 567.523665][T24507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.555934][T24507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.724501][T25612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5681'. [ 567.737722][T24475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.767203][T24475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.776763][ T5868] Bluetooth: hci4: command 0x041b tx timeout [ 567.831356][T25609] can: request_module (can-proto-0) failed. [ 567.916744][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.924784][ C1] lec:lec_tx_timeout: lec0 [ 568.474720][T25629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.647753][T24508] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 568.791031][T25655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5689'. [ 569.331668][T25680] netlink: 'syz.4.5697': attribute type 6 has an invalid length. [ 569.360628][T25680] netlink: 'syz.4.5697': attribute type 6 has an invalid length. [ 569.502881][T25685] netlink: 'syz.0.5700': attribute type 7 has an invalid length. [ 569.546767][T25685] netlink: 'syz.0.5700': attribute type 8 has an invalid length. [ 569.568861][T25690] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5699'. [ 569.583547][T25690] veth0: entered promiscuous mode [ 569.603618][T25691] veth0: left promiscuous mode [ 569.854060][T25699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.856816][ T5868] Bluetooth: hci4: command 0x041b tx timeout [ 569.884839][T25703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5704'. [ 569.954194][T25703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.285785][T25720] bond12: entered promiscuous mode [ 570.291027][T25720] bond12: entered allmulticast mode [ 570.297216][T25720] 8021q: adding VLAN 0 to HW filter on device bond12 [ 570.328901][T25722] bond13: entered promiscuous mode [ 570.334068][T25722] bond13: entered allmulticast mode [ 570.342113][T25722] 8021q: adding VLAN 0 to HW filter on device bond13 [ 570.676222][T25753] __nla_validate_parse: 1 callbacks suppressed [ 570.676241][T25753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5719'. [ 570.935095][T25762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.993943][T25766] macsec1: entered promiscuous mode [ 571.004889][T25766] macsec1: entered allmulticast mode [ 571.139445][T25774] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5727'. [ 571.187002][T24472] tipc: Subscription rejected, illegal request [ 571.394385][T25784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5731'. [ 571.430925][T25789] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.5730'. [ 571.632747][T25803] syzkaller1: entered promiscuous mode [ 571.644802][T25803] syzkaller1: entered allmulticast mode [ 571.644968][T25810] netlink: 'syz.0.5736': attribute type 11 has an invalid length. [ 571.770616][T25808] tipc: Enabled bearer , priority 0 [ 571.794367][T25811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.807809][T25817] syzkaller0: entered promiscuous mode [ 571.813337][T25817] syzkaller0: entered allmulticast mode [ 571.856711][T25808] tipc: Resetting bearer [ 571.883588][T25807] tipc: Resetting bearer [ 572.008762][T25807] tipc: Disabling bearer [ 572.423610][T25851] sctp: [Deprecated]: syz.1.5749 (pid 25851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.423610][T25851] Use struct sctp_sack_info instead [ 572.468773][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5748'. [ 572.987442][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5759'. [ 573.289254][T25911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5764'. [ 573.497274][T25922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5767'. [ 573.660976][T25930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5770'. [ 573.786638][T25931] nbd0: detected capacity change from 0 to 549764202496 [ 573.796668][ T5868] block nbd0: Receive control failed (result -32) [ 574.082797][T25955] sctp: [Deprecated]: syz.4.5774 (pid 25955) Use of int in max_burst socket option. [ 574.082797][T25955] Use struct sctp_assoc_value instead [ 574.110775][T25957] veth0_virt_wifi: mtu less than device minimum [ 574.351763][T25920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5764'. [ 574.418887][T25968] netlink: 'syz.3.5776': attribute type 4 has an invalid length. [ 574.637993][T25904] delete_channel: no stack [ 574.707357][T25984] vlan1: entered allmulticast mode [ 574.721454][T25984] veth0_vlan: entered allmulticast mode [ 575.010244][T25999] netlink: 'syz.1.5785': attribute type 4 has an invalid length. [ 575.192174][T26010] tipc: Enabled bearer , priority 12 [ 575.512490][T24472] tipc: Subscription rejected, illegal request [ 575.924172][T26043] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 576.196583][T24020] tipc: Node number set to 1448036318 [ 576.735885][ T5870] Bluetooth: hci4: command 0x041b tx timeout [ 578.816255][ T5868] Bluetooth: hci4: command 0x041b tx timeout [ 582.100189][ T55] block nbd3: Possible stuck request ffff888025405080: control (read@0,1024B). Runtime 210 seconds [ 582.111404][ T55] block nbd3: Possible stuck request ffff888025405240: control (read@1024,1024B). Runtime 210 seconds [ 582.122532][ T55] block nbd3: Possible stuck request ffff888025405400: control (read@2048,1024B). Runtime 210 seconds [ 582.133625][ T55] block nbd3: Possible stuck request ffff8880254055c0: control (read@3072,1024B). Runtime 210 seconds [ 589.776560][ T55] block nbd4: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 210 seconds [ 589.788238][ T55] block nbd4: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 210 seconds [ 589.799493][ T55] block nbd4: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 210 seconds [ 589.810621][ T55] block nbd4: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 210 seconds [ 594.041554][T24023] IPVS: starting estimator thread 0... [ 594.090571][T26081] delete_channel: no stack [ 594.155903][T26078] IPVS: using max 30 ests per chain, 72000 per kthread [ 594.207960][T26087] __nla_validate_parse: 10 callbacks suppressed [ 594.207981][T26087] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5813'. [ 594.257723][ T55] block nbd1: Possible stuck request ffff88802539e000: control (read@0,4096B). Runtime 390 seconds [ 594.312933][T26092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5815'. [ 594.344620][T26089] bond0: (slave bridge0): Releasing backup interface [ 594.397766][T26089] bond0: (slave 1!): Error -34 calling ndo_bpf [ 594.427684][T26089] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 594.538779][T26101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.727388][T26107] vlan1 (unregistering): left allmulticast mode [ 594.733826][T26107] veth0_vlan (unregistering): left allmulticast mode [ 594.755046][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5819'. [ 594.827793][T26067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.858976][T26121] netlink: 'syz.0.5823': attribute type 1 has an invalid length. [ 594.869329][T26121] netlink: 'syz.0.5823': attribute type 3 has an invalid length. [ 594.880072][T26121] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5823'. [ 594.890905][T26121] NCSI netlink: No device for ifindex 0 [ 595.017346][T26129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.033666][T26126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5825'. [ 595.190908][T26138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.253651][T26143] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 595.277347][T26145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5833'. [ 595.287119][T26145] openvswitch: netlink: Flow key attr not present in new flow. [ 595.385031][T26155] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5834'. [ 595.514667][T26158] bond2: entered promiscuous mode [ 595.562843][T26158] bond2: entered allmulticast mode [ 595.601612][T26158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.983379][T26190] netlink: 'syz.0.5842': attribute type 1 has an invalid length. [ 596.082259][T26158] bond2 (unregistering): Released all slaves [ 596.132852][T26190] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 596.319119][T26209] tipc: Enabled bearer , priority 10 [ 596.628824][T26231] tipc: Enabled bearer , priority 0 [ 596.699251][T26196] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 596.728559][T26233] syzkaller0: entered promiscuous mode [ 596.734827][T26233] syzkaller0: entered allmulticast mode [ 596.885924][T26233] tipc: Resetting bearer [ 596.941590][T26245] netlink: 'syz.4.5853': attribute type 2 has an invalid length. [ 596.952210][T26245] netlink: 'syz.4.5853': attribute type 1 has an invalid length. [ 596.998681][T26233] tipc: Disabling bearer [ 597.115987][T26258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5857'. [ 597.132702][T26259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5856'. [ 597.248975][T26264] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5859'. [ 597.302978][T26267] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 597.332804][T26267] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 597.628528][T26290] netlink: 'syz.0.5865': attribute type 3 has an invalid length. [ 597.896411][T26302] netlink: 'syz.3.5870': attribute type 1 has an invalid length. [ 598.021160][T26312] nftables ruleset with unbound set [ 598.103534][T26308] 8021q: adding VLAN 0 to HW filter on device bond16 [ 598.115056][T26308] bond15: (slave bond16): making interface the new active one [ 598.124288][T26308] bond15: (slave bond16): Enslaving as an active interface with an up link [ 598.135783][T26302] bond15: entered promiscuous mode [ 598.161419][T26302] bond16: entered promiscuous mode [ 598.198911][T26302] bond15: entered allmulticast mode [ 598.207854][T26324] netlink: 'syz.2.5876': attribute type 2 has an invalid length. [ 598.223181][T26302] bond16: entered allmulticast mode [ 598.231651][T26302] 8021q: adding VLAN 0 to HW filter on device bond15 [ 598.492432][T26338] tipc: Enabled bearer , priority 0 [ 598.634846][T26338] syzkaller0: entered promiscuous mode [ 598.696872][T13835] tipc: Subscription rejected, illegal request [ 598.705883][T26338] syzkaller0: entered allmulticast mode [ 598.735474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.094257][T26337] tipc: Resetting bearer [ 599.458308][T26391] openvswitch: netlink: Missing key (keys=40, expected=80) [ 599.469035][T26395] openvswitch: netlink: Missing key (keys=40, expected=80) [ 599.530841][T26397] netlink: 'syz.0.5895': attribute type 6 has an invalid length. [ 599.677732][T13835] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 601.059917][T26337] tipc: Disabling bearer [ 601.076294][T26413] veth0_to_bond: mtu greater than device maximum [ 601.164672][T26417] tipc: Resetting bearer [ 601.444703][T26447] __nla_validate_parse: 9 callbacks suppressed [ 601.444724][T26447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5906'. [ 601.514094][T26444] netlink: 'syz.1.5902': attribute type 6 has an invalid length. [ 601.530252][T26447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.554625][T26447] team0: Port device bond2 added [ 601.564588][T26444] IPVS: length: 153 != 8 [ 601.633584][T26434] lo speed is unknown, defaulting to 1000 [ 601.668544][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5910'. [ 602.047999][T26473] netlink: 'syz.4.5912': attribute type 83 has an invalid length. [ 602.141192][T26474] netlink: 'syz.3.5915': attribute type 11 has an invalid length. [ 602.160719][T26474] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5915'. [ 602.279484][T26478] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 602.567859][T26434] syzkaller0 speed is unknown, defaulting to 1000 [ 602.654483][T26484] veth5: entered promiscuous mode [ 602.686825][T26484] veth5: entered allmulticast mode [ 603.583006][T26524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.599828][T26528] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5933'. [ 603.602270][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5930'. [ 603.627858][T26526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5930'. [ 603.733725][T26541] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5936'. [ 603.753903][T26541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5936'. [ 603.763407][T26541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5936'. [ 603.999422][T26550] netlink: 'syz.1.5938': attribute type 1 has an invalid length. [ 604.007583][T26550] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5938'. [ 604.601006][T26557] 0{X功: renamed from gretap0 (while UP) [ 604.621427][T26557] 0{X功: entered allmulticast mode [ 604.633157][T26557] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 605.087892][T26581] tipc: Started in network mode [ 605.099140][T26581] tipc: Node identity 5a07a8de9391, cluster identity 4711 [ 605.124902][T26581] tipc: Enabled bearer , priority 0 [ 605.160654][T26586] syzkaller0: entered promiscuous mode [ 605.182299][T26586] syzkaller0: entered allmulticast mode [ 605.278697][T26586] tipc: Resetting bearer [ 605.373316][T26592] bond0: option ad_select: unable to set because the bond device is up [ 605.406470][T26580] tipc: Resetting bearer [ 605.457336][T26580] tipc: Disabling bearer [ 605.562962][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.590485][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.600134][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.620655][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.629627][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.709454][T26597] lo speed is unknown, defaulting to 1000 [ 606.067173][T26597] syzkaller0 speed is unknown, defaulting to 1000 [ 606.079908][T26627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.351920][T26634] lo speed is unknown, defaulting to 1000 [ 606.417677][T26597] chnl_net:caif_netlink_parms(): no params data found [ 606.548639][T26645] tipc: Enabled bearer , priority 0 [ 606.656298][T26645] tipc: Resetting bearer [ 606.658588][T26652] netlink: 'syz.2.5965': attribute type 2 has an invalid length. [ 606.714805][T26597] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.723828][T26597] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.737616][T26597] bridge_slave_0: entered allmulticast mode [ 606.746397][T26597] bridge_slave_0: entered promiscuous mode [ 606.852554][T26643] tipc: Disabling bearer [ 606.907394][T26597] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.917667][T26597] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.928103][T26597] bridge_slave_1: entered allmulticast mode [ 606.950936][T26597] bridge_slave_1: entered promiscuous mode [ 607.069295][T26634] syzkaller0 speed is unknown, defaulting to 1000 [ 607.113259][T26597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.159603][T26597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.314794][T26597] team0: Port device team_slave_0 added [ 607.338876][T26597] team0: Port device team_slave_1 added [ 607.698228][ T5868] Bluetooth: hci0: command tx timeout [ 607.807239][T26688] __nla_validate_parse: 4 callbacks suppressed [ 607.807259][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5975'. [ 607.834329][T26597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.848767][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5974'. [ 607.873411][T26597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.908681][T26597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.941309][T26597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.967512][T26597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.019476][T26597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.074826][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5976'. [ 608.183802][T26700] geneve2: entered promiscuous mode [ 608.372976][T26597] hsr_slave_0: entered promiscuous mode [ 608.382681][T26597] hsr_slave_1: entered promiscuous mode [ 608.390131][T26597] debugfs: 'hsr0' already exists in 'hsr' [ 608.396986][T26597] Cannot create hsr debugfs directory [ 608.613142][T26721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5980'. [ 608.906096][T24472] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 608.923615][T24472] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 608.974136][T26735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.020341][T24472] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 609.063615][T26740] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 609.081738][T26740] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5985'. [ 609.176108][T26747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5984'. [ 609.232390][T24472] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 609.313504][T26756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5988'. [ 609.382355][T26597] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.475933][T26597] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.562575][T26765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5991'. [ 609.582473][T26765] bond0: entered promiscuous mode [ 609.590067][T26765] bond0: left promiscuous mode [ 609.632242][T26597] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.713142][T26597] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.776273][ T5868] Bluetooth: hci0: command tx timeout [ 609.923762][T26597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 609.939203][T26597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 609.954805][T26597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 609.970672][T26597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 610.010279][T26783] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 610.134656][T26788] netlink: 'syz.1.5996': attribute type 1 has an invalid length. [ 610.152695][T26788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5996'. [ 610.162358][T26788] nbd: couldn't find device at index 1048576 [ 610.169805][T26789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5997'. [ 610.213758][T26597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.261242][T26597] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.281034][T24507] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.288237][T24507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.311014][T24507] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.318226][T24507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.623904][T26805] netlink: 'syz.0.6001': attribute type 4 has an invalid length. [ 611.019446][T26819] lo speed is unknown, defaulting to 1000 [ 611.067227][T26597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.213781][T26829] netlink: 'syz.0.6008': attribute type 33 has an invalid length. [ 611.647051][T26846] netlink: 'syz.1.6012': attribute type 4 has an invalid length. [ 611.857910][ T5868] Bluetooth: hci0: command tx timeout [ 612.039144][T26597] veth0_vlan: entered promiscuous mode [ 612.044998][T26826] lo speed is unknown, defaulting to 1000 [ 612.053837][T26819] syzkaller0 speed is unknown, defaulting to 1000 [ 612.091040][T26597] veth1_vlan: entered promiscuous mode [ 612.181463][ T55] block nbd3: Possible stuck request ffff888025405080: control (read@0,1024B). Runtime 240 seconds [ 612.192433][ T55] block nbd3: Possible stuck request ffff888025405240: control (read@1024,1024B). Runtime 240 seconds [ 612.203747][ T55] block nbd3: Possible stuck request ffff888025405400: control (read@2048,1024B). Runtime 240 seconds [ 612.215329][ T55] block nbd3: Possible stuck request ffff8880254055c0: control (read@3072,1024B). Runtime 240 seconds [ 612.657787][T26597] veth0_macvtap: entered promiscuous mode [ 612.692605][T24507] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.736373][T24507] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.771982][T26597] veth1_macvtap: entered promiscuous mode [ 612.806062][T24507] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.814836][T24507] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.873973][T26886] __nla_validate_parse: 7 callbacks suppressed [ 612.873993][T26886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6020'. [ 612.898921][T26597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.036082][T26826] syzkaller0 speed is unknown, defaulting to 1000 [ 613.038835][T26597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.148929][T24501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.196649][T24501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.270687][T24501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.314345][T24501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.460120][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6025'. [ 613.733054][T26907] netlink: 'syz.0.6026': attribute type 10 has an invalid length. [ 613.937058][ T5868] Bluetooth: hci0: command tx timeout [ 614.048755][T26917] vlan0: entered promiscuous mode [ 614.053843][T26917] bridge0: entered promiscuous mode [ 614.173722][T24501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.205665][T24501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.330730][T24501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.358753][T24501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.393214][T26932] team0: Device ip6gre2 is of different type [ 614.596438][T26943] team_slave_0: mtu greater than device maximum [ 614.609769][T26943] netlink: 'syz.2.6035': attribute type 10 has an invalid length. [ 614.646825][T26943] team0: Port device 0! added [ 614.694992][T26946] netlink: 'syz.2.6035': attribute type 10 has an invalid length. [ 614.793838][T26945] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.802608][T26948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.817910][T26948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.840519][T26948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.849275][T26948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.901289][T26959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6039'. [ 614.913048][T26946] team0: Port device 0! removed [ 614.930087][T26946] bond0: (slave 0!): Enslaving as an active interface with an up link [ 614.960963][T26960] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6038'. [ 615.007596][T26956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6038'. [ 615.196501][T26974] delete_channel: no stack [ 615.278163][T26974] netlink: 'syz.4.6042': attribute type 1 has an invalid length. [ 615.507111][T26988] netlink: 'syz.3.6045': attribute type 6 has an invalid length. [ 616.154217][T27035] netlink: 'syz.0.6061': attribute type 11 has an invalid length. [ 616.164045][T27036] netlink: 'syz.0.6061': attribute type 11 has an invalid length. [ 616.197245][T27036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6061'. [ 616.256654][T27035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6061'. [ 616.274588][T27036] ip6tnl2: entered promiscuous mode [ 616.463399][T27055] nbd: nbd0 already in use [ 616.480473][T27055] nbd: nbd0 already in use [ 616.613010][T27060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6067'. [ 616.636148][T27060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6067'. [ 616.666744][T27062] tipc: Enabling of bearer rejected, failed to enable media [ 616.681175][T27064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6069'. [ 616.707476][T27065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.146664][T27083] netlink: 'syz.2.6076': attribute type 1 has an invalid length. [ 618.215192][T27142] __nla_validate_parse: 8 callbacks suppressed [ 618.215211][T27142] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6092'. [ 618.258663][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6091'. [ 618.314254][T27145] Bluetooth: MGMT ver 1.23 [ 618.325911][T27147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6094'. [ 618.455097][T27154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6094'. [ 618.563359][T27156] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 618.597802][T27156] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 618.620996][T27160] sch_tbf: burst 127 is lower than device veth1_to_team mtu (1514) ! [ 618.737310][T27166] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6099'. [ 618.757680][T27156] tipc: Resetting bearer [ 618.868668][T27173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.879305][T27170] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 618.978628][T27182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6104'. [ 619.132406][T27192] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6108'. [ 619.262633][T27192] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6108'. [ 619.272795][T27192] netem: invalid attributes len -24 [ 619.278765][T27192] netem: change failed [ 619.290450][T27201] netlink: 'syz.2.6110': attribute type 1 has an invalid length. [ 619.307094][T27198] netlink: 'syz.0.6109': attribute type 1 has an invalid length. [ 619.324754][T27202] netlink: 'syz.2.6110': attribute type 1 has an invalid length. [ 619.335854][T27202] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 619.363938][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6109'. [ 619.502414][T27213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6112'. [ 619.709190][T27226] netlink: 'syz.2.6116': attribute type 9 has an invalid length. [ 619.709877][T27224] netlink: 'syz.2.6116': attribute type 9 has an invalid length. [ 619.856057][ T55] block nbd4: Possible stuck request ffff888025460000: control (read@0,1024B). Runtime 240 seconds [ 619.867178][ T55] block nbd4: Possible stuck request ffff8880254601c0: control (read@1024,1024B). Runtime 240 seconds [ 619.878210][ T55] block nbd4: Possible stuck request ffff888025460380: control (read@2048,1024B). Runtime 240 seconds [ 619.889438][ T55] block nbd4: Possible stuck request ffff888025460540: control (read@3072,1024B). Runtime 240 seconds [ 620.260221][T27255] netlink: 'syz.1.6125': attribute type 1 has an invalid length. [ 620.723995][T27279] netlink: 'syz.2.6132': attribute type 12 has an invalid length. [ 620.994639][T27286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.001128][T27287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.281821][T24475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.327243][T24475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.351974][T27300] openvswitch: netlink: Missing key (keys=40, expected=100) [ 621.361502][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 621.374399][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 621.385916][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.394639][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.404317][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.547789][T24475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.570975][T24475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.717751][T24475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.734518][T24475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.771501][T27301] lo speed is unknown, defaulting to 1000 [ 621.786769][T27323] openvswitch: netlink: Message has 16 unknown bytes. [ 621.848405][T27322] tun0: tun_chr_ioctl cmd 1074025675 [ 621.862849][T27322] tun0: persist disabled [ 621.942355][T24475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.973986][T24475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.334391][T27301] syzkaller0 speed is unknown, defaulting to 1000 [ 622.519922][T27349] netlink: 'syz.4.6154': attribute type 6 has an invalid length. [ 622.957097][T24475] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 622.969047][T24475] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 622.978596][T24475] CPU: 0 UID: 0 PID: 24475 Comm: kworker/u8:22 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 622.990938][T24475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.000996][T24475] Workqueue: netns cleanup_net [ 623.005784][T24475] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 623.011436][T24475] Code: ff ff ff e8 9d 2c 41 01 89 c5 31 ff 89 c6 e8 72 81 87 f7 85 ed 74 40 e8 29 7d 87 f7 eb 05 e8 22 7d 87 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 5c e6 ea f7 4d 8b 27 49 8d 7f 30 [ 623.031038][T24475] RSP: 0018:ffffc900157674b0 EFLAGS: 00010206 [ 623.037112][T24475] RAX: 000000001fffe000 RBX: ffff8880443be538 RCX: ffff88801ebf0000 [ 623.045094][T24475] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 623.053062][T24475] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 623.061093][T24475] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888033302c28 [ 623.069095][T24475] R13: dffffc0000000000 R14: ffff888033302c00 R15: 00000000ffff0000 [ 623.077071][T24475] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 623.086013][T24475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.092599][T24475] CR2: 00007f96b6e35e9c CR3: 000000003d064000 CR4: 00000000003526f0 [ 623.100571][T24475] Call Trace: [ 623.103848][T24475] [ 623.106779][T24475] ? ipv6_mc_down+0x2a3/0x360 [ 623.111465][T24475] ipv6_mc_destroy_dev+0x45/0x5a0 [ 623.116517][T24475] ? addrconf_ifdown+0x1396/0x1880 [ 623.121649][T24475] addrconf_ifdown+0x139e/0x1880 [ 623.126588][T24475] ? tls_dev_event+0x717/0xec0 [ 623.131363][T24475] ? __pfx_addrconf_ifdown+0x10/0x10 [ 623.136669][T24475] addrconf_notify+0x1bc/0x1010 [ 623.141546][T24475] notifier_call_chain+0x1b6/0x3e0 [ 623.146700][T24475] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 623.153121][T24475] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 623.159887][T24475] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 623.166130][T24475] ? net_generic+0x1e/0x240 [ 623.170645][T24475] ? remove_nexthop+0x114/0x180 [ 623.175501][T24475] ops_undo_list+0x3dc/0x990 [ 623.180114][T24475] ? __pfx_ops_undo_list+0x10/0x10 [ 623.185231][T24475] ? do_raw_spin_unlock+0x122/0x240 [ 623.190448][T24475] cleanup_net+0x4c5/0x800 [ 623.194869][T24475] ? __pfx_cleanup_net+0x10/0x10 [ 623.199815][T24475] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.205031][T24475] ? process_scheduled_works+0x9ef/0x17b0 [ 623.210780][T24475] ? process_scheduled_works+0x9ef/0x17b0 [ 623.216503][T24475] process_scheduled_works+0xade/0x17b0 [ 623.222077][T24475] ? __pfx_process_scheduled_works+0x10/0x10 [ 623.228062][T24475] worker_thread+0x8a0/0xda0 [ 623.232655][T24475] kthread+0x70e/0x8a0 [ 623.236728][T24475] ? __pfx_worker_thread+0x10/0x10 [ 623.241850][T24475] ? __pfx_kthread+0x10/0x10 [ 623.246451][T24475] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.251646][T24475] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.256844][T24475] ? __pfx_kthread+0x10/0x10 [ 623.261461][T24475] ret_from_fork+0x3f9/0x770 [ 623.266049][T24475] ? __pfx_ret_from_fork+0x10/0x10 [ 623.271161][T24475] ? __switch_to_asm+0x39/0x70 [ 623.275936][T24475] ? __switch_to_asm+0x33/0x70 [ 623.280734][T24475] ? __pfx_kthread+0x10/0x10 [ 623.285334][T24475] ret_from_fork_asm+0x1a/0x30 [ 623.290120][T24475] [ 623.293151][T24475] Modules linked in: [ 623.299448][T24475] ---[ end trace 0000000000000000 ]--- [ 623.306802][T24475] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 623.312544][T24475] Code: ff ff ff e8 9d 2c 41 01 89 c5 31 ff 89 c6 e8 72 81 87 f7 85 ed 74 40 e8 29 7d 87 f7 eb 05 e8 22 7d 87 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 5c e6 ea f7 4d 8b 27 49 8d 7f 30 [ 623.336879][T24475] RSP: 0018:ffffc900157674b0 EFLAGS: 00010206 [ 623.343098][T24475] RAX: 000000001fffe000 RBX: ffff8880443be538 RCX: ffff88801ebf0000 [ 623.351438][T24475] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 623.360590][T24475] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 623.368697][T24475] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888033302c28 [ 623.377805][T24475] R13: dffffc0000000000 R14: ffff888033302c00 R15: 00000000ffff0000 [ 623.387507][T24475] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 623.396887][T24475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.403523][T24475] CR2: 000000110c3716f4 CR3: 0000000077ec2000 CR4: 00000000003526f0 [ 623.411976][T24475] Kernel panic - not syncing: Fatal exception [ 623.418230][T24475] Kernel Offset: disabled [ 623.422557][T24475] Rebooting in 86400 seconds..