last executing test programs: 35.868512718s ago: executing program 2 (id=1832): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x100, 0x11}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="89e7ee0c7cdad9b4b47380c988cafbe863ca162afbdb9ceacc04d25983c69f6e0db294b5dacba21c815735", 0x2b}], 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000440)={0x20002012}) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffd40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="060000000c3f2f798ea3ee4fb000006f31c947f70a1aeb0000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000ffffffff00"/21], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0020000000170040000000000000d7318a470000fe07e28f45c6b655f50e0999338447efb2b6b97bdedabd42b9ef5d9ee561628e006a34b8d4892efaf41db02b27ee0256ff79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x98, 0x36, &(0x7f0000000300)="7637e8ec2d0615fea3bffe689bbb743d459abd85c24d2b6af5e77f53f97fbb618ced49452435b8d50184f175082e2c9b54be59485608d26038c94e39ac31643566c32b67e747a1f134c1e85202deb0e10c15c979a3458e3a1c78997db7568cbfc9b7c7709edf2d09c95a888d850487c598e2491c6af0e1fef507cbb3b2137c4fc10d5c8bfc20c1b9f59e2c1727518338b3ebd62fc5e388c0", &(0x7f00000003c0)=""/54, 0x2, 0x0, 0xed, 0x3c, &(0x7f00000004c0)="3ddfeec9014d897cc7b59723460ce3c467bf93ae871348df0094d0e701ec7f4c40fd4aeea48322bb4589b2184d14967c5370e9afd02b32c48609bfc8b78f7324894d1778985987918f66508efcbf56fee55d0514d78733a246d0c82ccec06d6236c4fb5a765da8ef41927526bae7657eb43098b0d4eac4cf1eb0e01ccb4da0af5169144c3370f4450cbf667186065df16065784f2450b779d505bd185ddd2ecc444ef40e6dc2c1e275f8a92e33cfca8767260fc1a0ce6184a13b490931c9edd76ae55e87340ca0bb1930afdf288b26c77c223eb7473d170b5cc031f0ec5441db11bb6f7d13d7159b3e59a0210f", &(0x7f00000005c0)="b4740f1fd23405df7a1e8e1fa8fd8b763c0a1710a117ea0ead5854eb518cc1aa7978b8636a1c9c5acd14c932cfe0e43ad4727ad24bc4adc73f7a0bc3", 0x5, 0x0, 0x7fffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r10, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r5, @ANYRES32=r10], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x20000804}, 0x0) 35.192036772s ago: executing program 1 (id=1840): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) listen(r3, 0xffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000800)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @broadcast}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 33.470473661s ago: executing program 1 (id=1845): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad91ffff0000000037010000f8ffffffb702000008000000b70300000400000056000000060000002c93000000000000b50300000000000085000000f2000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6f}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x18}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket(0x38, 0x4, 0xd1a7904e) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x2a, "a211084912266798f75fa304ee75dad47b3fe2a2edab4bba803e9c40fe7798cd888e5723612a7c34d4f6"}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x80000}, 0x1c) 33.428795944s ago: executing program 2 (id=1846): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(0xffffffffffffffff, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@local, @broadcast, 0x0}, &(0x7f0000000180)=0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x101, '\x00', r7, r8, 0x3, 0x2, 0x5}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000090) syz_genetlink_get_family_id$nl80211(0x0, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000280)=[{r1}, {r3, 0x2}, {r3}, {r4, 0x610}], 0x4, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 32.436759479s ago: executing program 1 (id=1849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) unshare(0x20000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @remote}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x4}}], 0x48, 0x20000004}, 0x4044000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x884) 31.977076343s ago: executing program 2 (id=1850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3100000010000504fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080014000000000005001600fc00000004001200"], 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="010000400000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="dc005a80d80001800500060002000000050007000000000033000200291938230e220c465429242e2539160a1038382c223e10503b441a4a301e035724af272e1121090200000026412f01000500070001000000050006000200000005000400010000004e0002"], 0xf8}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="ed4d00000000000000003100000008"], 0x24}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="02000000000000006c0900000000000000000000000000000000000000000000000000000000000000000000000000000100000000000040fbffffffffffffff000000000000000007000000000004000200000000000000000000000000000000080000000000000000030100002000"], 0xb8}}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000200)=""/241, 0x27, 0xf1, 0x1, 0x9, 0x10000}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x60, r12, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0xffffffffffffffe5, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e22, 0x2, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f00000006c0)={0x4879, 0x3, 0x6, 0x8, 0x8}, 0x14) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) ioctl$FICLONE(r8, 0x40049409, r1) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa420800490000240064000000879078ac1414bbac14140c890700e0476159158cd3407000006a860600000000000000"], 0x0) sendmsg$nl_xfrm(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 31.620600129s ago: executing program 1 (id=1851): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x8, 0x10}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="12000000180001002bbd7000fbdbdf251d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x8, 0x10}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="12000000180001002bbd7000fbdbdf251d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 31.544852993s ago: executing program 2 (id=1852): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000080}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0x4, 0x7fffffff00000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000800}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0xc, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000240)=""/130, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) 31.521019195s ago: executing program 2 (id=1853): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x83}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000007000000324900000000000001000000", @ANYRES32=0x1, @ANYBLOB="208be65d2fc69d7734cdfbc269f34cd2e8", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x1, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 31.341114327s ago: executing program 2 (id=1854): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffffc, 0x1, 0x1000, 0x1, 0x4, 0x9, 0xa1, 0xfff, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x401, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x1, 0x0, 0xe, 0x2b11, 0x104, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x100, 0x3, 0x0, 0xfffe, 0x8, 0x7, 0x79c, 0x2, 0x1, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x5, 0x180000, 0x80007, 0x80bf44, 0x5, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xba2a, 0x4, 0x5, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xffffffff, 0x0, 0x6, 0x8, 0x8, 0xffffffff, 0x2, 0x2, 0x81, 0x100, 0x5, 0x68, 0x81, 0xb, 0x5, 0x6, 0x5, 0x2, 0x1, 0x12, 0xd9a, 0x9, 0x2a2, 0x0, 0xffff, 0x9, 0x5, 0x8, 0x0, 0x98fa, 0x2, 0x0, 0x7, 0x4, 0x5, 0x401, 0xd, 0x0, 0x8, 0x1, 0x200, 0xc5e, 0xffffffff]}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000280)=0x7, 0x8) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r4, r2, 0x0, r2}, 0x10) socket$netlink(0x10, 0x3, 0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 31.255791619s ago: executing program 1 (id=1856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="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"], 0x174}}, 0x4000000) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x48, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 31.051213968s ago: executing program 1 (id=1857): r0 = socket(0x1a, 0x1, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/988], 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffed9, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtclass={0x38, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0xc, 0x1}, {0xa, 0xf}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xb4, 0x23}}]}, 0x38}}, 0x0) write(r0, &(0x7f00000001c0)="1c0000001a005fe723001f000000ff020000000000000000000000007b9f7be039", 0x21) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x80800) shutdown(r1, 0x1) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x5, 0x0, 0x7, 0x4, 0xe]}, &(0x7f0000000200)=0x54) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x7, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_buf(r7, 0x0, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080003400000001308000140000000020900010073797a30"], 0xc4}}, 0x5) 30.560713811s ago: executing program 3 (id=1862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x6820, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}, {0x2, 0x1, "fef4b66989e619"}]}}}}}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xff0a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000226d900850000005e00000095000000000000000000d15ed120ce466b97e22b842f70780778d49b79bd5a9eb93e9dc94254e679eaec15ecb36103d87331f90f7b2996bf035f1e677c54ee0dab5a2ebbe69340cf9b94e3418429ace986e5ed1edf47f48b6ff08014b512dbc9f15fcb206e76b420c1"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x73, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0000}, 0x94) 29.65402096s ago: executing program 0 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x8001}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xf11, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x31}]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x44}}, 0x0) 29.568730199s ago: executing program 4 (id=1865): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5f06, 0x0, r2, 0xe1d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x23, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x400001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x0, 0x4, 0x4, 0x2, 0x8, 0xfffffffffffffffc}, @generic={0x4, 0x2, 0x0, 0x3, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 29.567425326s ago: executing program 3 (id=1866): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x13, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'pim6reg0\x00', 0x9b03}) 29.320682283s ago: executing program 0 (id=1867): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="54cc0d320000fbdbdf250100000001000000010000000a000000050002000c00009744000700", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000480)="003fd5b961a0e4e3ff030000000000000968834b02e6bdfaa68565accde53c82c19a583942677ccfa34e5fd23a6299097025b050ba67c7e329dfc9c7a62ae8c224daff9f60c39035174f369f2ef004d2e25773e418adae1c7689ac0b6f460c92f4c6f991ba9c3f0d0a20975f239bb00ed66e768c99457e44bebd5b82d27cc4e19b56c6f6053d9247e8cc8f53d349c7b320e23588d0074d9dd1c516567c96bba5e1493165907772f27ce8fcdc0c5b79d074093014ea4e9092c80c111911a10ca909237f00"/210, 0xd2) setsockopt$sock_linger(r3, 0x1, 0x3e, &(0x7f0000000000), 0x8) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close(r6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000002400010300000010800000001100000004002f80"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 29.269376701s ago: executing program 4 (id=1868): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0x8, 0x1161, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x19, 0xffffffffffffffff, &(0x7f0000000240)) r5 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x12) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) 29.024731932s ago: executing program 3 (id=1869): r0 = socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) 29.024057062s ago: executing program 0 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000004850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000bca2000000000000a60200b704000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000000000000"], 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x3, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x94) 28.890583079s ago: executing program 3 (id=1871): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x44e, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="88a20c78b5a6fc21235c10034b674c52bc74f851488d71717ea21966d430e10f35583af16db3e733e926b45805efa58b0df17edb22a2c48eab94c7cfb6b68a092d9c37bca18aba39b8cca3f3b813315eae77f75aa7c17e7d8b33df53a5a0bfd3d3be4e0f982512dc8e70cd931f55f9c7dbc314d9f630deb7608d0868001ed87f9d854930c183a49deebac4c242101de15a8171505e63938c62ebeb0894e62aaa4673e53a570d7a4dfb5e0339108b2460973966c9416aee41103f1232195e0e56b08efe1685491e7ad8fcd68cfa134baee8215b7cc5a929fc95c72ee5183858cc01adc21f51f5"], 0x0) 28.213795728s ago: executing program 3 (id=1872): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) (async) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x495, 0x2, 0xd928, 0x6}, &(0x7f00000000c0)=0x98) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x120}}, 0x0) 28.193948329s ago: executing program 4 (id=1873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@default, @bcast, @bcast, @netrom, @netrom, @netrom, @netrom, @netrom]}, &(0x7f0000000080)=0x48, 0x800) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x1, 0x9, "1873fb4f652abcc994"}) 28.000014393s ago: executing program 4 (id=1874): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf252d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200488c0) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='qgroup_num_dirty_extents\x00', r6}, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000001c0)={0x0, 0x800e, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a80)={0x3dc, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_IE={0x28d, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xae, 0x96}}, @channel_switch={0x25, 0x3, {0x0, 0xaf, 0x2}}, @measure_req={0x26, 0x60, {0x1, 0x3, 0xf8, "48bac01b79fe955f7725c3d96987140a704a7ca996972851448aa2ebfb22ead905852edbd8f1d819e8b39a8a26295a3809e42839f0489757bffdf4962952415a4c5951f791ec05ade06a239b3daafbcd437215f8358e48e81bbfefa5bd"}}, @fast_bss_trans={0x37, 0xf7, {0x8, 0x6, "25d887e9700bee6409826d07c8939327", "351d95a37f1a0b9cb5b4408d3d2405ef794e8dacf92cedd123d62bfd299e7838", "3133c29d32ad1b4ce5b19bedd8c8812e865868c3c58318d95e914c7444c1bedf", [{0x3, 0x1a, "0fc5e83e99213a3dc1b002abb3c35ab4dcb7de6e6f99a733953f"}, {0x3, 0x24, "fa9c5b16c0b63d204863038278faf57e1908688373973acdb0ae247ecccdfa6a8c07b66e"}, {0x3, 0x17, "a270a920e942934725c8b2e70466237e498dca203e815d"}, {0x1, 0x3, "31cb11"}, {0x4, 0x1a, "8631c7d962f023bffce0e4aae0ce2924b7366c9925a03615de99"}, {0xf, 0x27, "3f89c3d8ddfcc0bb6b4a76b9e4a314b1b1f7009c6020412c2b814a7452c3c8198761f336577dae"}]}}, @random_vendor={0xdd, 0xf4, "db068f2336e814cb4458c1dacd249d14a3b1a4a66d645db245cedac1a4807fb2a4d0e3efd90b7f710ce9ec4a82a5eacb38c8a769035c1b40a7602021bb5588efa36576c5168c8e823a84aab705faa5288bdc61a555c57a50fb43c7a07f564d90049b41d9009dc1cd667147b3d6221962da7ac387af2ebc3735af088c0ef98ba36e2ace517e858ef6b0d376d61c88111c245581700f413462bcbb58abedc2d05543b968507fab056bce073e97c1253b4679af5054aa639c3af5111a284c9d24221db03f39fb7643220591038d3f4a770a701ddfab75c2205bdd5dacb357893a305e1267592db9597176736722e916a3535ae21e94"}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x5, 0x5, @device_a, 0x4, 0x5, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x2, 0x7, 0xb0, 0xc2}}, @cf={0x4, 0x6, {0x0, 0x4, 0xb3f, 0x4}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="acc6cf62a064"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x33, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x9, @broadcast, 0x81, @value=@broadcast, 0x2, 0x7ff, @broadcast, 0x10}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xdb, 0x2a, [@ibss={0x6, 0x2, 0x10}, @mesh_chsw={0x76, 0x6, {0x4, 0x40, 0x17, 0x1}}, @tim={0x5, 0xb2, {0xfb, 0xdd, 0x5, "8557a029a9afddb37d0003cee16808f07ba72f020be44cbc342ccf6ee5444f0df8032faff398f4b2b127d13e74085f43802afce4535b6edf6fc6e06271d5e74329c96e12476f650fa7a575ad355fd21c1728116dd075f163c22a396000026b82112927f2d049e2d6cf9893c8d18bf142699de10585058458576c0a5509c4241f1178ab149ca86b1d4c14bcbcd0c416afe3ba97e6d9b7f242426f6ceffc82ec0de3bbf5b6f802b356f39989795b0952"}}, @rann={0x7e, 0x15, {{0x0, 0x41}, 0xfc, 0xd9, @device_a, 0x10, 0x4, 0x1}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r13, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare(0x26020480) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r14}, 0x10) r15 = socket$inet(0x2, 0x2, 0x11) setsockopt$sock_int(r15, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r15, 0x0) recvmmsg(r15, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 27.992993598s ago: executing program 3 (id=1875): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000000400)={0x3c, @multicast1, 0x4e20, 0x1, 'lblcr\x00', 0x10, 0x100, 0x6c}, 0x2c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r11 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042bbd7000fedbdf250800000005000d0000000000060003000800009e0804ec3eb20005800400060000000500070002000000050004000800000005000600070000000200040009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000540)=0x3, 0xfffffda6) 27.954294126s ago: executing program 0 (id=1876): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000400)="042974498fd017a697c5f2b52d1f90afeb986ceef40bfc1747822eafb24d2c153005bd7e18ac0fa76baf46550ae77f1ec7d9bafbd11be5a4828725c49829bce59e75da002806e0d91a65159aeb2051354f6ac4bca5797b02ffabd5dddae11b858fafe326afd1aa0ee814215e0747", 0x6e}], 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES16=r8, @ANYRES32=r9, @ANYRESHEX=r0], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b00080000001e571b1a"], 0x28}}, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r11 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_buf(r11, 0x6, 0xd, &(0x7f0000000100)="976963", 0x3) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x2400c0c1) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010101010000000800000000070000000800083d0000022dc18c063b331b6876d9c66e6e9dd9ff4b42a889143f1eb3d51e463f0c338d74821eb16073dce0b94d82b92ff2fd47bf39dda1c347ec97ae81885688b74cff11cfdb6e5a21eb9b6147f28ed6a037251c02"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r10, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x80000) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) socket$kcm(0x10, 0x2, 0x0) 27.818741908s ago: executing program 4 (id=1877): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x3c, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r3 = socket(0x2, 0x3, 0xff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0) sendmmsg$inet(r3, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a", 0x2d}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}], 0x2}}], 0x2, 0x488c4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r7, @ANYBLOB="0804000000000000"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendto$inet(r1, &(0x7f0000000380)="a6", 0x1, 0x2004c840, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.728819345s ago: executing program 0 (id=1878): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0xc, 0x2b, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x2e, 0x0, @val=@perf_event={0x5}}, 0x18) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x50, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200c0010}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x90}}], 0x1, 0xc800) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x868, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r7, 0xfff0, 0x6}, &(0x7f0000000180)=0x8) 27.532791052s ago: executing program 0 (id=1879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) (async, rerun: 64) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (async, rerun: 64) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 17.696663988s ago: executing program 4 (id=1880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e9b96da09cbd5e6add696ddf90000a63e", 0x11}, {0x0}], 0x2) 14.046306325s ago: executing program 32 (id=1854): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffffc, 0x1, 0x1000, 0x1, 0x4, 0x9, 0xa1, 0xfff, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x401, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x1, 0x0, 0xe, 0x2b11, 0x104, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x100, 0x3, 0x0, 0xfffe, 0x8, 0x7, 0x79c, 0x2, 0x1, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x5, 0x180000, 0x80007, 0x80bf44, 0x5, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xba2a, 0x4, 0x5, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xffffffff, 0x0, 0x6, 0x8, 0x8, 0xffffffff, 0x2, 0x2, 0x81, 0x100, 0x5, 0x68, 0x81, 0xb, 0x5, 0x6, 0x5, 0x2, 0x1, 0x12, 0xd9a, 0x9, 0x2a2, 0x0, 0xffff, 0x9, 0x5, 0x8, 0x0, 0x98fa, 0x2, 0x0, 0x7, 0x4, 0x5, 0x401, 0xd, 0x0, 0x8, 0x1, 0x200, 0xc5e, 0xffffffff]}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000280)=0x7, 0x8) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r4, r2, 0x0, r2}, 0x10) socket$netlink(0x10, 0x3, 0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 10.981590137s ago: executing program 33 (id=1857): r0 = socket(0x1a, 0x1, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/988], 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffed9, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtclass={0x38, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0xc, 0x1}, {0xa, 0xf}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0xb4, 0x23}}]}, 0x38}}, 0x0) write(r0, &(0x7f00000001c0)="1c0000001a005fe723001f000000ff020000000000000000000000007b9f7be039", 0x21) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x80800) shutdown(r1, 0x1) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x5, 0x0, 0x7, 0x4, 0xe]}, &(0x7f0000000200)=0x54) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x7, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_buf(r7, 0x0, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080003400000001308000140000000020900010073797a30"], 0xc4}}, 0x5) 7.790996183s ago: executing program 34 (id=1879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc000200a}) (async, rerun: 64) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (async, rerun: 64) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 4.626821218s ago: executing program 35 (id=1875): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000000400)={0x3c, @multicast1, 0x4e20, 0x1, 'lblcr\x00', 0x10, 0x100, 0x6c}, 0x2c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r11 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042bbd7000fedbdf250800000005000d0000000000060003000800009e0804ec3eb20005800400060000000500070002000000050004000800000005000600070000000200040009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000540)=0x3, 0xfffffda6) 0s ago: executing program 36 (id=1880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e9b96da09cbd5e6add696ddf90000a63e", 0x11}, {0x0}], 0x2) kernel console output (not intermixed with test programs): 915][ T7910] tipc: Resetting bearer [ 217.068514][ T5990] IPVS: starting estimator thread 0... [ 217.100741][ T7910] tipc: Disabling bearer [ 217.190506][ T7918] IPVS: using max 28 ests per chain, 67200 per kthread [ 217.456364][ T7936] net_ratelimit: 34 callbacks suppressed [ 217.456384][ T7936] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 217.502750][ T7936] batman_adv: batadv0: adding TT local entry 00:00:00:00:ff:ff to non-existent VLAN 815 [ 217.548893][ T7932] netlink: 192 bytes leftover after parsing attributes in process `syz.0.485'. [ 217.794842][ T7934] delete_channel: no stack [ 218.208432][ T7967] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 218.252282][ T7970] geneve3: entered promiscuous mode [ 218.259006][ T3867] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 49091 - 0 [ 218.266993][ T7970] netlink: 48 bytes leftover after parsing attributes in process `syz.1.494'. [ 218.292494][ T3867] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 49091 - 0 [ 218.346800][ T3867] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 49091 - 0 [ 218.364224][ T3867] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 49091 - 0 [ 218.436327][ T7979] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20001 [ 219.557444][ T8032] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 219.557444][ T8029] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 219.596057][ T8029] batadv0: entered allmulticast mode [ 219.635710][ T8038] netlink: 'syz.0.509': attribute type 10 has an invalid length. [ 219.672399][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.686967][ T8029] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 219.717914][ T8038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.509'. [ 219.752518][ T8038] batadv0: entered promiscuous mode [ 219.800603][ T8038] bond0: (slave batadv0): Releasing backup interface [ 219.827524][ T8038] bridge0: port 3(batadv0) entered blocking state [ 219.866571][ T8038] bridge0: port 3(batadv0) entered disabled state [ 220.041597][ T8032] batadv0: left promiscuous mode [ 220.047733][ T8032] bridge0: port 3(batadv0) entered disabled state [ 220.071114][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.101892][ T8032] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 220.139237][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 220.635837][ T8071] netlink: 48 bytes leftover after parsing attributes in process `syz.4.517'. [ 220.683758][ T8071] netlink: 48 bytes leftover after parsing attributes in process `syz.4.517'. [ 220.712845][ T8072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 220.788146][ T8079] ieee802154 phy0 wpan0: encryption failed: -90 [ 220.914954][ T8085] netlink: 'syz.1.522': attribute type 31 has an invalid length. [ 220.991424][ T8085] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.005147][ T8085] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.050044][ T8085] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 49091 - 0 [ 221.163324][ T8092] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 221.224862][ T8092] bond2 (unregistering): Released all slaves [ 221.246933][ T8104] __nla_validate_parse: 1 callbacks suppressed [ 221.246954][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 221.323115][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 221.348312][ T8085] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.361396][ T8085] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.381050][ T8085] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 49091 - 0 [ 221.556652][ T8085] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.591165][ T8085] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.615835][ T8085] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 49091 - 0 [ 221.719167][ T8116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.805465][ T8085] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.847172][ T8085] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.876556][ T8085] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 49091 - 0 [ 222.274541][ T8116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.424344][ T8116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.504012][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.513210][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 49091 - 0 [ 222.527021][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.540546][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 222.581842][ T8116] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.636333][ T2990] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.647555][ T2990] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 49091 - 0 [ 222.657197][ T2990] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.708110][ T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.745008][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 49091 - 0 [ 222.761817][ T37] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.837300][ T37] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.863624][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 49091 - 0 [ 222.872827][ T37] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.891135][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.984696][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.057239][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.121883][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.172022][ T8142] syzkaller0: entered promiscuous mode [ 223.178504][ T8142] syzkaller0: entered allmulticast mode [ 223.253169][ T8148] netlink: 'syz.2.535': attribute type 9 has an invalid length. [ 223.295021][ T8148] netlink: 'syz.2.535': attribute type 6 has an invalid length. [ 223.379956][ T8158] bridge0: port 2(erspan0) entered blocking state [ 223.388708][ T8158] bridge0: port 2(erspan0) entered disabled state [ 223.412956][ T8158] erspan0: entered allmulticast mode [ 223.430131][ T8158] erspan0: entered promiscuous mode [ 223.445356][ T8158] bridge0: port 2(erspan0) entered blocking state [ 223.452335][ T8158] bridge0: port 2(erspan0) entered forwarding state [ 223.479192][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.518687][ T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.552786][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.563769][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.673110][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 223.971137][ T8199] netlink: 256 bytes leftover after parsing attributes in process `syz.3.546'. [ 223.980621][ T8199] unsupported nlmsg_type 40 [ 224.124242][ T8206] sctp: [Deprecated]: syz.2.544 (pid 8206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.124242][ T8206] Use struct sctp_sack_info instead [ 224.141001][ T8208] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.547'. [ 224.175425][ T8208] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 224.505174][ T8212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.655551][ T8212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.737135][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 224.825194][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.553'. [ 224.943742][ T8212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.174397][ T8212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.317499][ T8251] x_tables: duplicate underflow at hook 2 [ 225.825878][ T8244] syz.2.555 (8244) used obsolete PPPIOCDETACH ioctl [ 226.142590][ T3477] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.194030][ T3477] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.251302][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.313846][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.483282][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.566'. [ 226.511582][ T8277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.566'. [ 226.605406][ T8281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.567'. [ 226.621101][ T8283] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 226.674241][ T8292] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 226.691543][ T8283] !©9: entered promiscuous mode [ 226.719749][ T8292] !©9: left promiscuous mode [ 226.875267][ T8299] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004 [ 226.929565][ T8305] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.003567][ T8311] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 227.097526][ T8311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.124586][ T8311] bond4: entered allmulticast mode [ 227.171313][ T8317] bond2: Removing last ns target with arp_interval on [ 227.206144][ T8311] syzkaller0: entered promiscuous mode [ 227.221548][ T8311] syzkaller0: entered allmulticast mode [ 227.480091][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.584'. [ 227.508498][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 227.569949][ T8341] syzkaller1: entered promiscuous mode [ 227.575756][ T8341] syzkaller1: entered allmulticast mode [ 227.635968][ T8345] raw_sendmsg: syz.1.587 forgot to set AF_INET. Fix it! [ 227.727188][ T8350] team0: No ports can be present during mode change [ 227.809240][ T8353] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 227.974790][ T8366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.591'. [ 228.041425][ T8369] netlink: 'syz.1.591': attribute type 12 has an invalid length. [ 228.144365][ T8363] netlink: 'syz.3.592': attribute type 13 has an invalid length. [ 228.751995][ T8386] batadv0: left allmulticast mode [ 228.820135][ T8386] bond1: left promiscuous mode [ 228.839117][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 228.841230][ T8386] vxcan2: left allmulticast mode [ 228.887902][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.914554][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.942239][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.978553][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.008354][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.037449][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.068398][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.088753][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.110032][ T8404] netlink: 'syz.0.604': attribute type 4 has an invalid length. [ 229.119984][ T8403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.602'. [ 229.122578][ T8406] netlink: 9 bytes leftover after parsing attributes in process `syz.3.605'. [ 229.184871][ T8406] netlink: 9 bytes leftover after parsing attributes in process `syz.3.605'. [ 229.579985][ T8428] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 229.864978][ T8442] batadv_slave_0: entered promiscuous mode [ 229.935776][ T8445] veth2: entered allmulticast mode [ 230.564163][ T8462] syzkaller1: entered promiscuous mode [ 230.571655][ T8462] syzkaller1: entered allmulticast mode [ 230.579176][ T8440] batadv_slave_0: left promiscuous mode [ 230.715845][ T8464] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 230.738489][ T8465] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 231.033092][ T8485] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 231.139837][ T8483] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 231.268705][ T8490] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.316861][ T8490] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 231.502523][ T8485] macvlan2: entered promiscuous mode [ 231.508494][ T8485] macvlan2: entered allmulticast mode [ 231.618576][ T8506] __nla_validate_parse: 5 callbacks suppressed [ 231.618596][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 231.637577][ T8506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.635'. [ 231.651012][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 231.870718][ T8523] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 232.008792][ T8523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.016905][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 232.158217][ T8549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.677040][ T8618] bridge0: port 3(veth0_to_bridge) entered blocking state [ 233.687866][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 233.748365][ T8618] bridge0: port 3(veth0_to_bridge) entered disabled state [ 233.781166][ T8618] veth0_to_bridge: entered allmulticast mode [ 233.789224][ T8618] veth0_to_bridge: entered promiscuous mode [ 234.024538][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'. [ 234.648517][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 234.727072][ T8657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'. [ 234.769507][ T8657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.670'. [ 234.865854][ T8650] syzkaller0: entered promiscuous mode [ 234.874011][ T8650] syzkaller0: entered allmulticast mode [ 235.114898][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.672'. [ 235.155433][ T8657] veth2: entered allmulticast mode [ 235.267022][ T8662] batman_adv: batadv0: Adding interface: vlan0 [ 235.285554][ T8662] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.370286][ T8662] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 235.673228][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.686120][ T8663] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.700186][ T8663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.735289][ T8687] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 236.890779][ T8692] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.942957][ T8692] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 237.069780][ T8704] __nla_validate_parse: 20 callbacks suppressed [ 237.069802][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 237.465674][ T8724] lo: entered allmulticast mode [ 237.471350][ T8724] lo: left allmulticast mode [ 237.558197][ T8733] macvlan0: entered promiscuous mode [ 237.564025][ T8733] macvlan0: entered allmulticast mode [ 237.570346][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.689'. [ 237.579847][ T8733] veth1_vlan: entered allmulticast mode [ 237.600929][ T8733] tipc: Enabled bearer , priority 0 [ 237.640969][ T8731] tipc: Disabling bearer [ 237.682573][ T8735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.691'. [ 237.796175][ T8735] netlink: 284 bytes leftover after parsing attributes in process `syz.4.691'. [ 237.887932][ T8744] tipc: Started in network mode [ 237.922482][ T8744] tipc: Node identity ff, cluster identity 4711 [ 237.929236][ T8744] tipc: Enabling of bearer rejected, failed to enable media [ 238.011294][ T8758] netlink: 'syz.4.700': attribute type 2 has an invalid length. [ 238.792397][ T8790] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 238.803603][ T8790] netlink: 224 bytes leftover after parsing attributes in process `syz.1.707'. [ 238.953258][ T8793] vxcan2: entered allmulticast mode [ 239.214692][ T8798] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.232058][ T10] IPVS: starting estimator thread 0... [ 239.329924][ T8804] IPVS: using max 27 ests per chain, 64800 per kthread [ 239.433976][ T8811] netlink: 34 bytes leftover after parsing attributes in process `syz.0.711'. [ 239.722607][ T8826] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.715'. [ 240.232684][ T8843] netlink: 4140 bytes leftover after parsing attributes in process `syz.4.720'. [ 240.640036][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.725'. [ 241.261644][ T8898] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 241.570390][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'. [ 241.814322][ T8922] syzkaller0: entered promiscuous mode [ 241.823322][ T8922] syzkaller0: entered allmulticast mode [ 242.206288][ T8954] __nla_validate_parse: 1 callbacks suppressed [ 242.206307][ T8954] netlink: 56 bytes leftover after parsing attributes in process `syz.3.741'. [ 242.507329][ T8969] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 243.107391][ T8979] netlink: 'syz.0.748': attribute type 33 has an invalid length. [ 243.115783][ T8979] netlink: 152 bytes leftover after parsing attributes in process `syz.0.748'. [ 244.156964][ T8996] netlink: 220 bytes leftover after parsing attributes in process `syz.4.752'. [ 244.234001][ T9000] netlink: 'syz.4.752': attribute type 13 has an invalid length. [ 244.244902][ T9000] netlink: 'syz.4.752': attribute type 17 has an invalid length. [ 244.508191][ T9013] x_tables: duplicate underflow at hook 2 [ 245.478908][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.761'. [ 245.629191][ T9027] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.673896][ T9034] netlink: 'syz.0.763': attribute type 5 has an invalid length. [ 245.740967][ T9039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.888579][ T9049] netlink: 108 bytes leftover after parsing attributes in process `syz.4.767'. [ 246.967670][ T9080] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 247.044450][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.776'. [ 247.055297][ T9084] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.775'. [ 247.079959][ T9084] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 247.246875][ T9086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.777'. [ 247.285657][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 247.815367][ T9130] x_tables: duplicate underflow at hook 1 [ 248.020277][ T9140] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 248.037259][ T9139] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 248.066234][ T9140] bond0: (slave batadv0): Releasing backup interface [ 248.088242][ T9140] veth0_to_bridge: left allmulticast mode [ 248.102973][ T9140] veth0_to_bridge: left promiscuous mode [ 248.116948][ T9140] bridge0: port 3(veth0_to_bridge) entered disabled state [ 248.149768][ T9140] bridge_slave_0: left allmulticast mode [ 248.165766][ T9140] bridge_slave_0: left promiscuous mode [ 248.182154][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.211737][ T9140] bridge_slave_1: left allmulticast mode [ 248.229507][ T9140] bridge_slave_1: left promiscuous mode [ 248.240547][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.254918][ T9140] bond0: (slave bond_slave_0): Releasing backup interface [ 248.267781][ T9140] bond0: (slave bond_slave_1): Releasing backup interface [ 248.282034][ T9149] netlink: 'syz.3.793': attribute type 8 has an invalid length. [ 248.311720][ T9140] team0: Port device team_slave_0 removed [ 248.321701][ T9140] team0: Port device team_slave_1 removed [ 248.328467][ T9140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.337460][ T9140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.346584][ T9140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.563845][ T9156] xt_CT: No such helper "snmp_trap" [ 248.575092][ T9156] netlink: 76 bytes leftover after parsing attributes in process `syz.2.794'. [ 248.881844][ T9168] netlink: 260 bytes leftover after parsing attributes in process `syz.1.796'. [ 249.403314][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 249.408555][ T9192] netlink: 'syz.1.803': attribute type 33 has an invalid length. [ 249.426191][ T9192] netlink: 152 bytes leftover after parsing attributes in process `syz.1.803'. [ 249.461529][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 249.480998][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 249.499041][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 249.806300][ T9198] bond1: option ad_actor_sys_prio: invalid value (0) [ 249.842123][ T9198] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 249.882177][ T9198] bond1 (unregistering): Released all slaves [ 250.235733][ T9212] netlink: 188 bytes leftover after parsing attributes in process `syz.2.806'. [ 250.257397][ T9215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.264741][ T9215] IPv6: NLM_F_CREATE should be set when creating new route [ 250.272181][ T9215] IPv6: NLM_F_CREATE should be set when creating new route [ 250.412455][ T9219] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.461743][ T9221] netlink: 'syz.2.809': attribute type 10 has an invalid length. [ 250.543701][ T9221] veth0_vlan: left promiscuous mode [ 250.581293][ T9221] veth0_vlan: entered promiscuous mode [ 250.612073][ T9221] team0: Device veth0_vlan failed to register rx_handler [ 250.652640][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 250.751088][ T9219] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.860360][ T9229] openvswitch: netlink: Flow key attr not present in new flow. [ 250.878821][ T9219] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.970352][ T9219] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.191655][ T9239] netlink: 'syz.1.814': attribute type 9 has an invalid length. [ 251.218380][ T81] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.251303][ T9221] syz.2.809 (9221) used greatest stack depth: 17984 bytes left [ 251.285716][ T81] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.321038][ T81] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.366090][ T81] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.132370][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.573285][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.462387][ T9287] __nla_validate_parse: 11 callbacks suppressed [ 327.462409][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 327.530944][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.827'. [ 327.539869][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 327.661596][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.832'. [ 327.687914][ T9300] netlink: 'syz.0.831': attribute type 21 has an invalid length. [ 327.700211][ T9300] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 327.708122][ T9300] netlink: 144 bytes leftover after parsing attributes in process `syz.0.831'. [ 328.133108][ T9313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.835'. [ 328.401735][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 328.580457][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.838'. [ 328.616697][ T9325] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 328.623863][ T9330] syzkaller1: entered promiscuous mode [ 328.630667][ T9330] syzkaller1: entered allmulticast mode [ 328.643662][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 328.714833][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 328.842730][ T9334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.877820][ T9336] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 328.896635][ T9336] bond3: (slave macvlan3): making interface the new active one [ 328.907437][ T9336] bond3: (slave macvlan3): Enslaving as an active interface with an up link [ 329.211337][ T9354] tipc: Enabled bearer , priority 0 [ 329.223625][ T9355] syzkaller0: entered promiscuous mode [ 329.230462][ T9355] syzkaller0: entered allmulticast mode [ 329.440673][ T9355] tipc: Resetting bearer [ 329.487221][ T9355] tipc: Disabling bearer [ 329.580099][ T9343] netlink: 'syz.2.843': attribute type 6 has an invalid length. [ 329.700046][ T9373] tipc: Enabled bearer , priority 0 [ 329.717032][ T9373] syzkaller0: entered promiscuous mode [ 329.734414][ T9373] syzkaller0: entered allmulticast mode [ 329.838095][ T9383] tipc: Resetting bearer [ 329.996217][ T9378] tipc: Enabled bearer , priority 0 [ 330.101239][ T9388] syzkaller0: entered promiscuous mode [ 330.107368][ T9388] syzkaller0: entered allmulticast mode [ 330.113900][ T9388] tipc: Resetting bearer [ 330.126254][ T9372] tipc: Resetting bearer [ 330.150979][ T9372] tipc: Disabling bearer [ 330.266437][ T9377] tipc: Resetting bearer [ 330.518408][ T9415] netlink: 'syz.1.856': attribute type 5 has an invalid length. [ 330.639928][ T9423] openvswitch: netlink: Flow key attr not present in new flow. [ 332.482244][ T9377] tipc: Disabling bearer [ 332.497483][ T9429] netlink: 'syz.2.860': attribute type 12 has an invalid length. [ 332.626062][ T9445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.764073][ T9453] __nla_validate_parse: 3 callbacks suppressed [ 332.764094][ T9453] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.865'. [ 332.788138][ T9453] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 333.373269][ T9472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.415091][ T9486] syzkaller0: entered promiscuous mode [ 333.423011][ T9486] syzkaller0: entered allmulticast mode [ 333.626480][ T9494] netlink: 'syz.1.878': attribute type 6 has an invalid length. [ 335.199741][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 335.265719][ T9516] ć˙î˙: entered promiscuous mode [ 335.274256][ T9509] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 335.322544][ T9515] bond4: entered promiscuous mode [ 335.327665][ T9515] bond4: entered allmulticast mode [ 335.335673][ T9515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.672092][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 335.923227][ T9554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.892'. [ 336.945149][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 336.967745][ T9549] netlink: 'syz.1.891': attribute type 7 has an invalid length. [ 337.007698][ T9586] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 337.266903][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'. [ 337.403678][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'. [ 337.414892][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 337.596951][ T9600] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 337.626735][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.902'. [ 337.649179][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.902'. [ 337.681654][ T9602] mac80211_hwsim hwsim6 ŞŞŞŞŞ;: renamed from wlan0 [ 337.928349][ T9612] __nla_validate_parse: 2 callbacks suppressed [ 337.928370][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 337.986844][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.000698][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.046863][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.060167][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.071358][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.082262][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.115853][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.140542][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 338.180527][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 339.187121][ T9652] netlink: 'syz.3.914': attribute type 13 has an invalid length. [ 339.442627][ T9652] veth1_vlan: left allmulticast mode [ 339.799781][ T9666] netlink: 'syz.4.918': attribute type 62 has an invalid length. [ 340.535030][ T9686] ip6t_srh: unknown srh invflags 4000 [ 340.669262][ T9688] Unsupported ieee802154 address type: 0 [ 340.939846][ T9700] xt_nat: multiple ranges no longer supported [ 341.048243][ T9705] xt_nat: multiple ranges no longer supported [ 341.717195][ T3548] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.725799][ T3548] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.734321][ T3548] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.842133][ T3548] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.289999][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 343.355386][ T9824] __nla_validate_parse: 139 callbacks suppressed [ 343.355468][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 343.441228][ T9829] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:21 [ 343.603727][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 343.743383][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 343.793107][ T9838] hsr_slave_1 (unregistering): left promiscuous mode [ 343.798033][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.974'. [ 343.982804][ T9855] netlink: 64 bytes leftover after parsing attributes in process `syz.1.976'. [ 343.997794][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 344.203172][ T9864] Cannot find del_set index 2 as target [ 344.209150][ T9865] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 344.225378][ T9866] syzkaller0: entered promiscuous mode [ 344.231758][ T9866] syzkaller0: entered allmulticast mode [ 344.247846][ T9865] netlink: 224 bytes leftover after parsing attributes in process `syz.1.979'. [ 344.302492][ T9864] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 344.310887][ T9864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.979'. [ 344.503075][ T9881] netlink: 'syz.1.983': attribute type 10 has an invalid length. [ 344.524909][ T9879] netlink: 'syz.3.982': attribute type 9 has an invalid length. [ 344.535402][ T9881] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 344.544182][ T9879] netlink: 'syz.3.982': attribute type 11 has an invalid length. [ 344.558828][ T9879] netlink: 'syz.3.982': attribute type 12 has an invalid length. [ 344.585477][ T9879] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.982'. [ 344.618757][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 344.928640][ T9904] netlink: 'syz.2.991': attribute type 10 has an invalid length. [ 344.993204][ T9904] team0: Port device geneve0 added [ 345.368721][ T9921] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 346.200054][ T9966] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 346.247350][ T9966] netlink: 'syz.2.1005': attribute type 2 has an invalid length. [ 346.284489][ T9966] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 346.562748][ T9979] tipc: Enabled bearer , priority 0 [ 346.607268][ T9979] syzkaller0: entered promiscuous mode [ 346.625019][ T9979] syzkaller0: entered allmulticast mode [ 346.633242][ T6080] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.822033][ T9995] tipc: Resetting bearer [ 346.828155][ T6080] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.848268][ T9991] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 346.884849][ T6080] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.898079][ T9977] tipc: Resetting bearer [ 346.967964][ T9977] tipc: Disabling bearer [ 346.995921][T10001] IPv6: Can't replace route, no match found [ 347.004793][ T6080] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.776744][T10026] bond1: entered promiscuous mode [ 347.803403][T10026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.871122][T10032] : entered promiscuous mode [ 347.913784][T10035] bond1: (slave bridge5): making interface the new active one [ 347.921821][T10035] bridge5: entered promiscuous mode [ 347.928750][T10035] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 348.068348][ T6015] IPVS: starting estimator thread 0... [ 348.171106][T10045] IPVS: using max 29 ests per chain, 69600 per kthread [ 348.477680][T10080] __nla_validate_parse: 16 callbacks suppressed [ 348.477702][T10080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1036'. [ 348.644014][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 348.655548][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 348.740713][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 348.816732][T10096] bond4: (slave bridge5): making interface the new active one [ 348.845077][T10096] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 348.876289][T10093] syzkaller0: entered promiscuous mode [ 348.885454][T10093] syzkaller0: entered allmulticast mode [ 348.912033][T10089] : renamed from veth0_to_bond (while UP) [ 349.141668][T10106] xt_cgroup: invalid path, errno=-2 [ 349.262503][T10109] validate_nla: 10 callbacks suppressed [ 349.262523][T10109] netlink: 'syz.3.1043': attribute type 12 has an invalid length. [ 349.411102][T10117] FAULT_INJECTION: forcing a failure. [ 349.411102][T10117] name failslab, interval 1, probability 0, space 0, times 0 [ 349.460097][T10117] CPU: 0 UID: 0 PID: 10117 Comm: syz.3.1045 Not tainted syzkaller #0 PREEMPT(full) [ 349.460128][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.460149][T10117] Call Trace: [ 349.460157][T10117] [ 349.460166][T10117] dump_stack_lvl+0xe8/0x150 [ 349.460212][T10117] should_fail_ex+0x414/0x560 [ 349.460253][T10117] should_failslab+0xa8/0x100 [ 349.460282][T10117] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 349.460318][T10117] ? __alloc_skb+0x1dc/0x3a0 [ 349.460339][T10117] ? __local_bh_enable_ip+0xd0/0x130 [ 349.460363][T10117] ? __alloc_skb+0x198/0x3a0 [ 349.460386][T10117] __alloc_skb+0x1dc/0x3a0 [ 349.460413][T10117] netlink_dump+0x1b7/0xe90 [ 349.460447][T10117] ? __netlink_lookup+0xbd/0x8a0 [ 349.460480][T10117] ? __pfx_netlink_dump+0x10/0x10 [ 349.460504][T10117] ? __netlink_lookup+0x7db/0x8a0 [ 349.460548][T10117] ? netlink_lookup+0x30/0x200 [ 349.460572][T10117] ? netlink_lookup+0x30/0x200 [ 349.460598][T10117] ? netlink_lookup+0x30/0x200 [ 349.460631][T10117] __netlink_dump_start+0x5cb/0x7e0 [ 349.460666][T10117] rdma_nl_rcv+0x749/0x980 [ 349.460705][T10117] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 349.460728][T10117] ? __pfx_nldev_res_get_cq_dumpit+0x10/0x10 [ 349.460776][T10117] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.460812][T10117] netlink_unicast+0x82f/0x9e0 [ 349.460847][T10117] ? __pfx_netlink_unicast+0x10/0x10 [ 349.460869][T10117] ? __alloc_skb+0x198/0x3a0 [ 349.460900][T10117] ? netlink_sendmsg+0x642/0xb30 [ 349.460927][T10117] ? skb_put+0x11b/0x210 [ 349.460954][T10117] netlink_sendmsg+0x805/0xb30 [ 349.460993][T10117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.461025][T10117] ? aa_sock_msg_perm+0xf1/0x1b0 [ 349.461056][T10117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.461075][T10117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.461102][T10117] __sock_sendmsg+0x21c/0x270 [ 349.461136][T10117] ____sys_sendmsg+0x505/0x820 [ 349.461168][T10117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.461204][T10117] ? import_iovec+0x74/0xa0 [ 349.461236][T10117] ___sys_sendmsg+0x21f/0x2a0 [ 349.461265][T10117] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.461330][T10117] ? __fget_files+0x2a/0x420 [ 349.461354][T10117] ? __fget_files+0x3a0/0x420 [ 349.461389][T10117] __x64_sys_sendmsg+0x19b/0x260 [ 349.461416][T10117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.461451][T10117] ? __pfx_ksys_write+0x10/0x10 [ 349.461485][T10117] do_syscall_64+0xec/0xf80 [ 349.461507][T10117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.461528][T10117] ? trace_irq_disable+0x37/0x100 [ 349.461557][T10117] ? clear_bhb_loop+0x60/0xb0 [ 349.461584][T10117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.461605][T10117] RIP: 0033:0x7feb21b8f749 [ 349.461634][T10117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.461651][T10117] RSP: 002b:00007feb22a91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.461678][T10117] RAX: ffffffffffffffda RBX: 00007feb21de5fa0 RCX: 00007feb21b8f749 [ 349.461694][T10117] RDX: 0000000000004006 RSI: 0000200000000340 RDI: 0000000000000003 [ 349.461707][T10117] RBP: 00007feb22a91090 R08: 0000000000000000 R09: 0000000000000000 [ 349.461719][T10117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.461731][T10117] R13: 00007feb21de6038 R14: 00007feb21de5fa0 R15: 00007ffc62864a08 [ 349.461767][T10117] [ 349.866992][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 350.003702][T10121] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1042'. [ 350.454770][T10112] infiniband syz1: set active [ 350.497285][T10112] infiniband syz1: added bond0 [ 350.574577][T10112] RDS/IB: syz1: added [ 350.586948][T10112] smc: adding ib device syz1 with port count 1 [ 350.601906][T10112] smc: ib device syz1 port 1 has no pnetid [ 350.695645][T10143] syzkaller0: entered promiscuous mode [ 350.710181][T10143] syzkaller0: entered allmulticast mode [ 350.747395][T10143] tipc: Enabled bearer , priority 0 [ 350.781786][T10142] tipc: Resetting bearer [ 350.861481][T10142] tipc: Disabling bearer [ 351.433123][T10162] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 351.497259][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1055'. [ 351.532912][T10164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.550963][T10170] netlink: 'syz.2.1057': attribute type 12 has an invalid length. [ 353.471973][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 353.558285][T10180] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 353.569053][T10180] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 354.041463][T10201] tipc: Enabled bearer , priority 0 [ 354.053152][T10202] syzkaller0: entered promiscuous mode [ 354.058697][T10202] syzkaller0: entered allmulticast mode [ 354.174983][T10202] tipc: Resetting bearer [ 354.251935][T10202] tipc: Disabling bearer [ 354.282152][T10207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1066'. [ 354.342521][T10207] team0: entered promiscuous mode [ 354.390547][T10207] team_slave_0: entered promiscuous mode [ 354.410944][T10207] team_slave_1: entered promiscuous mode [ 354.426064][T10207] team0: entered allmulticast mode [ 354.519804][T10207] team_slave_0: entered allmulticast mode [ 354.527945][T10207] team_slave_1: entered allmulticast mode [ 354.539558][T10207] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 354.579525][T10213] bond0: option min_links: invalid value (18446744071830523904) [ 354.590013][T10213] bond0: option min_links: allowed values 0 - 2147483647 [ 354.787166][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 354.999888][T10231] Bluetooth: MGMT ver 1.23 [ 355.118950][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 355.361834][T10253] netlink: 'syz.4.1077': attribute type 10 has an invalid length. [ 355.369827][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 355.401429][T10253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.428500][T10253] team0: Port device bond0 added [ 355.790061][T10265] debugfs: 'netdev:syzkaller0' already exists in 'phy8' [ 356.005075][T10269] tipc: Enabled bearer , priority 0 [ 356.048447][T10267] tipc: Disabling bearer [ 356.671573][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'. [ 356.877659][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 356.913026][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 356.938105][T10299] netlink: 58 bytes leftover after parsing attributes in process `syz.3.1090'. [ 356.954265][T10303] tipc: Enabling of bearer rejected, failed to enable media [ 356.971098][T10304] tipc: Enabling of bearer rejected, failed to enable media [ 357.120946][T10189] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.140384][T10189] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.159565][T10189] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.177254][T10189] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.291893][T10318] gretap2: entered allmulticast mode [ 358.129701][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1102'. [ 358.166919][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1102'. [ 358.298288][T10361] bond0: entered promiscuous mode [ 358.335461][T10361] bond_slave_0: entered promiscuous mode [ 358.368911][T10361] bond_slave_1: entered promiscuous mode [ 358.454551][T10368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1110'. [ 358.818655][T10382] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 358.927193][T10390] veth0: entered promiscuous mode [ 359.135114][T10405] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 359.149206][T10405] !: entered promiscuous mode [ 359.154829][T10403] tipc: Enabled bearer , priority 0 [ 359.163933][T10405] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 359.165214][T10403] syzkaller0: entered promiscuous mode [ 359.177558][T10403] syzkaller0: entered allmulticast mode [ 359.186400][T10405] !: left promiscuous mode [ 359.226473][T10400] tipc: Resetting bearer [ 359.302128][T10400] tipc: Disabling bearer [ 359.471801][T10414] macsec1: entered promiscuous mode [ 359.481722][T10414] bridge0: entered promiscuous mode [ 359.726456][T10387] veth0: left promiscuous mode [ 359.860706][T10430] __nla_validate_parse: 1 callbacks suppressed [ 359.860726][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'. [ 359.890198][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 360.658357][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 360.943049][T10462] netlink: 'syz.0.1134': attribute type 13 has an invalid length. [ 361.014213][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 361.792373][T10490] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1142'. [ 361.836012][T10490] sctp: [Deprecated]: syz.4.1142 (pid 10490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.836012][T10490] Use struct sctp_sack_info instead [ 361.961942][T10505] tipc: Enabled bearer , priority 0 [ 361.978113][T10505] veth0_vlan: entered allmulticast mode [ 362.001948][T10505] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 362.037235][T10505] netlink: 'syz.4.1146': attribute type 13 has an invalid length. [ 362.302295][T10509] tipc: Resetting bearer [ 362.319780][T10510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.386264][T10502] tipc: Disabling bearer [ 362.428128][T10518] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 362.835064][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1154'. [ 362.900203][T10534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1153'. [ 362.946225][T10540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1155'. [ 363.153587][T10549] macvlan0: left promiscuous mode [ 363.172604][T10549] macvlan0: left allmulticast mode [ 363.177999][T10549] netlink: 'syz.3.1159': attribute type 2 has an invalid length. [ 364.233272][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 364.359044][T10596] netlink: 'syz.4.1166': attribute type 2 has an invalid length. [ 364.576290][T10587] netlink: 'syz.3.1164': attribute type 3 has an invalid length. [ 364.755190][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 364.803899][T10612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.303109][T10624] tipc: Enabled bearer , priority 0 [ 365.325808][T10624] syzkaller0: entered promiscuous mode [ 365.339262][T10624] syzkaller0: entered allmulticast mode [ 365.388452][T10624] tipc: Resetting bearer [ 365.413852][T10624] tipc: Disabling bearer [ 365.886686][ T30] audit: type=1800 audit(1767754258.994:5): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1181" name=CB dev="tmpfs" ino=1085 res=0 errno=0 [ 366.052008][T10663] syzkaller0: entered promiscuous mode [ 366.057567][T10663] syzkaller0: entered allmulticast mode [ 366.083697][T10663] 0: reclassify loop, rule prio 0, protocol 800 [ 366.614906][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.632313][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.680681][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.712238][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.712371][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.768665][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.782485][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.808713][T10688] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1187'. [ 366.819008][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.829230][T10688] nbd: must specify an index to disconnect [ 366.844809][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1186'. [ 366.876162][T10691] syzkaller0: entered promiscuous mode [ 366.899867][T10691] syzkaller0: entered allmulticast mode [ 366.907901][T10690] tipc: Enabled bearer , priority 0 [ 367.013588][T10690] tipc: Resetting bearer [ 367.079863][T10700] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 367.108688][T10690] tipc: Disabling bearer [ 367.251162][T10700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.409232][T10705] bond6: (slave veth3): Enslaving as an active interface with a down link [ 367.426155][T10700] vlan2: entered allmulticast mode [ 367.432130][T10700] veth1: entered allmulticast mode [ 367.438305][T10700] bond6: (slave vlan2): Opening slave failed [ 367.443540][T10721] xt_nat: multiple ranges no longer supported [ 367.751574][T10733] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 368.797784][T10775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.818332][T10777] tipc: Enabled bearer , priority 0 [ 368.834414][T10777] syzkaller0: entered promiscuous mode [ 368.841312][T10777] syzkaller0: entered allmulticast mode [ 368.865277][T10777] tipc: Resetting bearer [ 368.877466][T10776] tipc: Resetting bearer [ 368.902996][T10776] tipc: Disabling bearer [ 369.233316][T10789] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 369.241440][T10789] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 369.343454][T10793] syzkaller0: entered promiscuous mode [ 369.361051][T10793] syzkaller0: entered allmulticast mode [ 369.378335][T10791] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 369.395408][T10791] : entered promiscuous mode [ 369.491553][T10793] netem: change failed [ 369.533049][T10797] lo speed is unknown, defaulting to 1000 [ 369.545922][T10797] lo speed is unknown, defaulting to 1000 [ 369.554399][T10797] lo speed is unknown, defaulting to 1000 [ 369.618794][T10800] geneve2: entered promiscuous mode [ 369.632539][ T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 369.670826][ T61] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 369.679249][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 369.690101][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 369.966874][T10797] infiniband syz0: set active [ 369.973667][ T9] lo speed is unknown, defaulting to 1000 [ 369.991877][T10797] infiniband syz0: added lo [ 370.001340][T10797] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 370.029101][T10797] infiniband syz0: Couldn't open port 1 [ 370.074054][T10816] tipc: Enabled bearer , priority 0 [ 370.120595][T10797] RDS/IB: syz0: added [ 370.124760][T10797] smc: adding ib device syz0 with port count 1 [ 370.160027][T10797] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 370.167800][ T9] lo speed is unknown, defaulting to 1000 [ 370.189056][T10797] lo speed is unknown, defaulting to 1000 [ 370.241245][T10823] tipc: Disabling bearer [ 370.430709][T10820] netlink: 'syz.2.1226': attribute type 9 has an invalid length. [ 370.440649][T10820] netlink: 'syz.2.1226': attribute type 6 has an invalid length. [ 370.467236][T10835] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 370.480410][T10833] netlink: 'syz.4.1230': attribute type 4 has an invalid length. [ 370.578271][T10835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 370.666861][T10797] lo speed is unknown, defaulting to 1000 [ 370.677006][T10847] netlink: 'syz.1.1233': attribute type 83 has an invalid length. [ 371.105501][T10797] lo speed is unknown, defaulting to 1000 [ 371.533117][T10852] lo speed is unknown, defaulting to 1000 [ 371.721211][T10876] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 371.900911][T10886] __nla_validate_parse: 80 callbacks suppressed [ 371.900930][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 371.928820][T10797] lo speed is unknown, defaulting to 1000 [ 372.005876][T10888] netlink: 'syz.4.1244': attribute type 4 has an invalid length. [ 372.089786][T10888] netlink: 'syz.4.1244': attribute type 4 has an invalid length. [ 372.193163][T10888] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1244'. [ 372.202502][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 372.450300][T10797] lo speed is unknown, defaulting to 1000 [ 372.750472][T10924] syzkaller0: entered promiscuous mode [ 372.756856][T10924] syzkaller0: entered allmulticast mode [ 372.839600][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 372.901932][T10926] bridge4: port 1(ip6gretap1) entered blocking state [ 372.909286][T10926] bridge4: port 1(ip6gretap1) entered disabled state [ 372.918115][T10926] ip6gretap1: entered allmulticast mode [ 372.980185][T10926] ip6gretap1: entered promiscuous mode [ 373.067500][T10930] bridge4: port 2(veth5) entered blocking state [ 373.074525][T10930] bridge4: port 2(veth5) entered disabled state [ 373.081414][T10930] veth5: entered allmulticast mode [ 373.123149][T10930] veth5: entered promiscuous mode [ 373.136952][T10930] bridge4: port 2(veth5) entered blocking state [ 373.144117][T10930] bridge4: port 2(veth5) entered forwarding state [ 373.199256][ T2990] bridge4: port 2(veth5) entered disabled state [ 373.427522][T10944] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 373.490458][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 373.603673][T10953] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1258'. [ 373.613105][T10953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1258'. [ 373.621095][T10944] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 373.693018][T10963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1259'. [ 374.027430][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 374.066408][T10940] lo speed is unknown, defaulting to 1000 [ 374.071364][T10980] syzkaller0: entered promiscuous mode [ 374.094370][T10980] syzkaller0: entered allmulticast mode [ 374.142156][T10980] tipc: Enabled bearer , priority 0 [ 374.157500][T10976] tipc: Resetting bearer [ 374.223998][T10976] tipc: Disabling bearer [ 374.843632][T11021] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 374.935432][T11030] netlink: zone id is out of range [ 374.969556][T11030] netlink: zone id is out of range [ 374.974747][T11030] netlink: zone id is out of range [ 375.065669][T11030] netlink: zone id is out of range [ 375.079424][T11030] netlink: zone id is out of range [ 375.084610][T11030] netlink: zone id is out of range [ 375.101038][T11030] netlink: zone id is out of range [ 375.109558][T11030] netlink: zone id is out of range [ 375.118878][T11030] netlink: zone id is out of range [ 375.124553][T11030] netlink: zone id is out of range [ 375.310544][T11050] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 375.318519][T11050] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 375.326812][T11050] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1276'. [ 375.518585][T11059] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 375.529863][T11057] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 375.822597][T11071] bond0: Caught tx_queue_len zero misconfig [ 376.133861][T11085] batadv0: entered promiscuous mode [ 376.461529][T11104] syzkaller1: entered promiscuous mode [ 376.481009][T11104] syzkaller1: entered allmulticast mode [ 376.608592][T11114] tipc: Enabled bearer , priority 0 [ 376.634239][T11114] syzkaller0: entered promiscuous mode [ 376.643201][T11116] xt_cgroup: invalid path, errno=-2 [ 376.657920][T11114] syzkaller0: entered allmulticast mode [ 376.806982][T11114] tipc: Resetting bearer [ 376.943283][T11111] tipc: Resetting bearer [ 376.950827][T11138] netlink: 'syz.3.1301': attribute type 13 has an invalid length. [ 376.958933][T11138] __nla_validate_parse: 14 callbacks suppressed [ 376.958955][T11138] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1301'. [ 376.997974][T11111] tipc: Disabling bearer [ 377.017637][T11138] syz_tun: refused to change device tx_queue_len [ 377.214948][T11149] syzkaller0: entered promiscuous mode [ 377.234518][T11149] syzkaller0: entered allmulticast mode [ 377.929815][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 377.975212][T11160] lo speed is unknown, defaulting to 1000 [ 378.173052][ T6732] wlan1: Trigger new scan to find an IBSS to join [ 378.205471][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 378.651326][T11198] xt_ecn: cannot match TCP bits for non-tcp packets [ 378.822080][T11206] x_tables: duplicate underflow at hook 1 [ 379.239679][T11224] netlink: 'syz.0.1326': attribute type 13 has an invalid length. [ 379.275053][T11225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1325'. [ 379.307028][T11212] syzkaller0: entered promiscuous mode [ 379.312753][T11212] syzkaller0: entered allmulticast mode [ 380.926201][ T5896] lo speed is unknown, defaulting to 1000 [ 381.028564][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 381.133371][ T152] wlan1: Trigger new scan to find an IBSS to join [ 381.486298][T11263] netlink: 'syz.0.1336': attribute type 4 has an invalid length. [ 381.718231][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1344'. [ 381.749506][T11282] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1343'. [ 381.894633][T11292] tipc: Enabled bearer , priority 0 [ 381.907763][T11292] syzkaller0: entered promiscuous mode [ 381.919591][T11292] syzkaller0: entered allmulticast mode [ 381.935592][T11297] netlink: 'syz.4.1347': attribute type 3 has an invalid length. [ 381.945852][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1347'. [ 382.080014][T11292] tipc: Resetting bearer [ 382.149766][T11302] lo: entered promiscuous mode [ 382.155308][T11302] tunl0: entered promiscuous mode [ 382.163086][T11302] gre0: entered promiscuous mode [ 382.168727][T11302] gretap0: entered promiscuous mode [ 382.196166][T11302] erspan0: entered promiscuous mode [ 382.209942][T11302] ip_vti0: entered promiscuous mode [ 382.226242][T11302] ip6_vti0: entered promiscuous mode [ 382.233444][T11302] sit0: entered promiscuous mode [ 382.259161][T11302] ip6tnl0: entered promiscuous mode [ 382.274882][T11302] ip6gre0: entered promiscuous mode [ 382.287187][T11302] syz_tun: entered promiscuous mode [ 382.372626][T11302] ip6gretap0: entered promiscuous mode [ 382.378675][T11302] bridge0: entered promiscuous mode [ 382.470221][T11302] vcan0: entered promiscuous mode [ 382.475976][T11302] bond0: entered promiscuous mode [ 382.584130][T11318] x_tables: duplicate underflow at hook 1 [ 382.616070][T11302] team0: entered promiscuous mode [ 382.644416][T11302] nlmon0: entered promiscuous mode [ 382.656370][T11302] caif0: entered promiscuous mode [ 382.661635][T11302] net_ratelimit: 4 callbacks suppressed [ 382.661655][T11302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.723377][T11300] tipc: Resetting bearer [ 382.873007][T11330] xt_hashlimit: size too large, truncated to 1048576 [ 382.924437][T11300] tipc: Disabling bearer [ 383.023714][T11333] –: renamed from veth1_to_team (while UP) [ 383.123293][ T131] tipc: Node number set to 1041921985 [ 383.301143][ T5832] block nbd1: Receive control failed (result -32) [ 383.350136][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 383.372067][T11351] netlink: 'syz.1.1360': attribute type 5 has an invalid length. [ 383.401159][T11351] netlink: 'syz.1.1360': attribute type 5 has an invalid length. [ 383.411993][T11357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1358'. [ 383.434783][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 383.567204][T11353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 383.710237][T11359] batadv0: entered promiscuous mode [ 383.760193][T11359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.776706][T11359] bond6: (slave macvlan2): making interface the new active one [ 383.791120][T11359] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 383.811614][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 383.934235][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1366'. [ 384.024867][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.108896][T11345] lo speed is unknown, defaulting to 1000 [ 384.170157][ T3477] wlan1: Trigger new scan to find an IBSS to join [ 384.350346][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 384.361853][T11396] netlink: 261 bytes leftover after parsing attributes in process `syz.4.1370'. [ 384.394280][T11396] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 384.645716][T11406] netlink: 'syz.3.1374': attribute type 4 has an invalid length. [ 384.694439][T11406] netlink: 'syz.3.1374': attribute type 4 has an invalid length. [ 384.766323][T11397] lo speed is unknown, defaulting to 1000 [ 385.121163][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.196710][T11426] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 385.248159][T11423] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1377'. [ 385.700185][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'. [ 385.898357][T11440] veth0_to_bridge: entered promiscuous mode [ 385.913257][T11440] veth0_to_bridge: entered allmulticast mode [ 386.723536][T11467] netlink: 'syz.1.1390': attribute type 8 has an invalid length. [ 386.745774][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 386.805896][T11467] bond0: entered promiscuous mode [ 386.812187][T11467] bond_slave_0: entered promiscuous mode [ 386.818383][T11467] bond_slave_1: entered promiscuous mode [ 386.825195][T11467] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 386.856976][T11467] bond0: left promiscuous mode [ 386.863611][T11467] bond_slave_0: left promiscuous mode [ 386.869807][T11467] bond_slave_1: left promiscuous mode [ 386.875692][T11467] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 386.944075][T11471] syzkaller0: entered promiscuous mode [ 386.969475][T11471] syzkaller0: entered allmulticast mode [ 386.995566][T11471] tipc: Enabling of bearer rejected, failed to enable media [ 387.049230][T11474] pim6reg: entered allmulticast mode [ 387.101586][T11445] lo speed is unknown, defaulting to 1000 [ 387.314467][T11480] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 389.806164][T11461] lo speed is unknown, defaulting to 1000 [ 389.867024][T11473] pim6reg: left allmulticast mode [ 390.386838][T11499] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 390.400967][T11469] lo speed is unknown, defaulting to 1000 [ 390.441828][T11507] __nla_validate_parse: 1 callbacks suppressed [ 390.441849][T11507] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1398'. [ 390.732788][T11514] sctp: [Deprecated]: syz.3.1400 (pid 11514) Use of int in max_burst socket option deprecated. [ 390.732788][T11514] Use struct sctp_assoc_value instead [ 390.962031][T11526] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 391.223152][T11530] 8021q: adding VLAN 0 to HW filter on device bond8 [ 391.487788][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 391.705061][T11545] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1407'. [ 392.193499][T11549] syz.0.1409: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 392.259526][T11549] CPU: 0 UID: 0 PID: 11549 Comm: syz.0.1409 Not tainted syzkaller #0 PREEMPT(full) [ 392.259560][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.259579][T11549] Call Trace: [ 392.259589][T11549] [ 392.259599][T11549] dump_stack_lvl+0xe8/0x150 [ 392.259635][T11549] warn_alloc+0x214/0x310 [ 392.259661][T11549] ? stack_trace_save+0x9c/0xe0 [ 392.259701][T11549] ? __pfx_warn_alloc+0x10/0x10 [ 392.259733][T11549] ? kasan_save_track+0x4f/0x80 [ 392.259753][T11549] ? kasan_save_track+0x3e/0x80 [ 392.259774][T11549] ? __kasan_kmalloc+0x93/0xb0 [ 392.259796][T11549] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 392.259817][T11549] ? xskq_create+0x56/0x170 [ 392.259849][T11549] ? xsk_setsockopt+0x4dc/0x8d0 [ 392.259878][T11549] ? do_sock_setsockopt+0x17c/0x1b0 [ 392.259902][T11549] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 392.259925][T11549] ? do_syscall_64+0xec/0xf80 [ 392.259952][T11549] __vmalloc_node_range_noprof+0x134/0x16a0 [ 392.260011][T11549] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.260042][T11549] ? __kasan_kmalloc+0x93/0xb0 [ 392.260074][T11549] vmalloc_user_noprof+0xad/0xf0 [ 392.260096][T11549] ? xskq_create+0xbf/0x170 [ 392.260131][T11549] xskq_create+0xbf/0x170 [ 392.260168][T11549] xsk_init_queue+0xb0/0x110 [ 392.260211][T11549] xsk_setsockopt+0x4dc/0x8d0 [ 392.260246][T11549] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.260279][T11549] ? __pfx_aa_sk_perm+0x10/0x10 [ 392.260311][T11549] ? aa_sock_opt_perm+0xff/0x1a0 [ 392.260344][T11549] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 392.260365][T11549] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.260399][T11549] do_sock_setsockopt+0x17c/0x1b0 [ 392.260430][T11549] __x64_sys_setsockopt+0x13f/0x1b0 [ 392.260463][T11549] do_syscall_64+0xec/0xf80 [ 392.260486][T11549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.260507][T11549] ? trace_irq_disable+0x37/0x100 [ 392.260543][T11549] ? clear_bhb_loop+0x60/0xb0 [ 392.260571][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.260599][T11549] RIP: 0033:0x7f833cd8f749 [ 392.260620][T11549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.260640][T11549] RSP: 002b:00007f833dd04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.260664][T11549] RAX: ffffffffffffffda RBX: 00007f833cfe5fa0 RCX: 00007f833cd8f749 [ 392.260682][T11549] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 392.260695][T11549] RBP: 00007f833ce13f91 R08: 0000000000000004 R09: 0000000000000000 [ 392.260709][T11549] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.260723][T11549] R13: 00007f833cfe6038 R14: 00007f833cfe5fa0 R15: 00007ffe05d5c618 [ 392.260761][T11549] [ 392.260870][T11549] Mem-Info: [ 392.579526][T11549] active_anon:10239 inactive_anon:0 isolated_anon:0 [ 392.579526][T11549] active_file:3464 inactive_file:39990 isolated_file:0 [ 392.579526][T11549] unevictable:768 dirty:68 writeback:0 [ 392.579526][T11549] slab_reclaimable:11800 slab_unreclaimable:134098 [ 392.579526][T11549] mapped:29242 shmem:1827 pagetables:1156 [ 392.579526][T11549] sec_pagetables:0 bounce:0 [ 392.579526][T11549] kernel_misc_reclaimable:0 [ 392.579526][T11549] free:1281048 free_pcp:20009 free_cma:0 [ 392.682360][T11549] Node 0 active_anon:39056kB inactive_anon:0kB active_file:13856kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117068kB dirty:272kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14204kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.725971][T11549] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 392.756911][T11549] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.802515][T11549] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 392.808440][T11549] Node 0 DMA32 free:1227740kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39056kB inactive_anon:0kB active_file:13856kB inactive_file:159756kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:62576kB local_pcp:30436kB free_cma:0kB [ 392.844313][T11549] lowmem_reserve[]: 0 0 1 1 1 [ 392.849684][T11549] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.882884][T11564] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 392.909459][T11549] lowmem_reserve[]: 0 0 0 0 0 [ 392.915900][T11549] Node 1 Normal free:3882392kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18472kB local_pcp:8488kB free_cma:0kB [ 392.967459][T11549] lowmem_reserve[]: 0 0 0 0 0 [ 392.972505][T11549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.986124][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 392.995745][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 393.005012][T11549] Node 0 DMA32: 791*4kB (UME) 1789*8kB (UME) 790*16kB (UME) 659*32kB (UME) 205*64kB (UME) 153*128kB (UME) 113*256kB (UM) 56*512kB (UME) 41*1024kB (UM) 32*2048kB (UM) 239*4096kB (UME) = 1227972kB [ 393.049680][T11549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 393.089843][T11549] Node 1 Normal: 196*4kB (UE) 55*8kB (UME) 49*16kB (UME) 110*32kB (UME) 24*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3882392kB [ 393.125698][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1415'. [ 393.136783][T11574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1415'. [ 393.157256][T11564] bond7: entered promiscuous mode [ 393.162923][T11549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.180384][T11564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 393.187810][ T37] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 393.188219][T11549] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.197401][ T37] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 393.223542][T11549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.249454][T11549] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.281371][T11549] 44806 total pagecache pages [ 393.286137][T11549] 0 pages in swap cache [ 393.301022][ T37] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 393.301067][T11549] Free swap = 124996kB [ 393.314431][T11549] Total swap = 124996kB [ 393.318628][T11549] 2097051 pages RAM [ 393.323627][ T37] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 393.337281][T11549] 0 pages HighMem/MovableOnly [ 393.346173][T11549] 425082 pages reserved [ 393.351787][T11549] 0 pages cma reserved [ 393.411724][T11584] netlink: 'syz.4.1417': attribute type 39 has an invalid length. [ 393.421395][T11572] syzkaller0: entered promiscuous mode [ 393.427035][T11572] syzkaller0: entered allmulticast mode [ 393.441239][T11576] pim6reg1: entered promiscuous mode [ 393.446615][T11576] pim6reg1: entered allmulticast mode [ 393.475061][T11582] syzkaller0: entered promiscuous mode [ 393.480773][T11582] syzkaller0: entered allmulticast mode [ 393.532949][T11582] tipc: Enabled bearer , priority 0 [ 393.854561][T11598] xt_bpf: check failed: parse error [ 393.877486][T11598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.618912][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'. [ 394.633108][T11609] netlink: 'syz.0.1423': attribute type 9 has an invalid length. [ 394.641061][T11609] netlink: 212252 bytes leftover after parsing attributes in process `syz.0.1423'. [ 395.382440][T11590] tipc: Resetting bearer [ 395.395081][T11581] tipc: Resetting bearer [ 395.444028][T11581] tipc: Disabling bearer [ 395.487842][T11615] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1425'. [ 395.497660][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 395.954676][T11647] batadv1: entered promiscuous mode [ 396.014131][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 396.160699][T11657] nbd2: detected capacity change from 0 to 127 [ 396.411038][T11669] netlink: 764 bytes leftover after parsing attributes in process `syz.1.1441'. [ 396.619092][T11677] macvlan1: entered promiscuous mode [ 396.625239][T11677] macvlan1: entered allmulticast mode [ 396.632704][ T5832] block nbd2: Receive control failed (result -32) [ 396.639637][T11677] veth1_vlan: entered allmulticast mode [ 396.686203][T11673] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 396.747851][T11686] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 3, id = 0 [ 396.781769][T11673] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 397.123691][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 397.300193][T11706] x_tables: duplicate underflow at hook 1 [ 397.362218][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1451'. [ 397.574419][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'. [ 397.624644][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 397.678417][T11717] netlink: 'syz.1.1453': attribute type 13 has an invalid length. [ 397.707260][T11695] lo speed is unknown, defaulting to 1000 [ 397.770957][T11717] veth1_vlan: left allmulticast mode [ 397.913762][T11717] bridge0: left promiscuous mode [ 397.952434][ T6729] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.979553][ T6729] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 49091 - 0 [ 397.995443][ T6729] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 398.035472][ T6729] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.051645][ T6729] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 49091 - 0 [ 398.060979][ T6729] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 398.190198][ T6729] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.203025][ T6729] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 49091 - 0 [ 398.218197][ T6729] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 398.227068][ T6729] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.236871][ T6729] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 49091 - 0 [ 398.245760][ T6729] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 400.132585][T11720] lo speed is unknown, defaulting to 1000 [ 400.139781][T11740] tipc: Enabled bearer , priority 0 [ 400.146859][T11741] syzkaller0: entered promiscuous mode [ 400.153508][T11741] syzkaller0: entered allmulticast mode [ 400.282603][T11746] tipc: Resetting bearer [ 400.324840][T11746] tipc: Disabling bearer [ 400.427709][T11766] xt_connbytes: Forcing CT accounting to be enabled [ 401.360665][T11769] lo speed is unknown, defaulting to 1000 [ 401.858068][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 401.874360][T11806] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 401.955034][T11808] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 402.131628][T11808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.209526][T11810] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 402.284473][T11816] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 402.372517][T11819] syzkaller0: entered promiscuous mode [ 402.378484][T11819] syzkaller0: entered allmulticast mode [ 402.388750][T11824] syzkaller0: entered promiscuous mode [ 402.402026][T11824] syzkaller0: entered allmulticast mode [ 402.410156][ T2990] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 402.519493][T10188] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.547534][T10188] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 402.689465][T10188] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.730814][ T6016] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.759534][ T6016] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.789519][T10188] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.809536][T10188] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.849479][T10188] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 402.885012][T11834] netlink: 'syz.2.1478': attribute type 13 has an invalid length. [ 403.094149][T11834] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.101776][T11834] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.305046][T11834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.324341][T11834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.484742][ T6016] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.505499][ T6016] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.528682][ T6016] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.554733][ T6016] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.587498][T11865] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1484'. [ 403.781476][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1485'. [ 403.792347][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 403.816747][T11868] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1485'. [ 404.049779][T11886] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 404.068662][T11886] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 404.114035][T11886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.122804][T11890] netlink: 'syz.2.1492': attribute type 12 has an invalid length. [ 404.131291][T11883] netlink: 'syz.2.1492': attribute type 12 has an invalid length. [ 404.140020][T11888] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 404.196133][T11894] bond5: (slave geneve0): making interface the new active one [ 404.205488][T11894] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 404.217725][ T3477] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 404.246537][ T3477] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 404.281784][ T3477] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 404.302556][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1494'. [ 404.302570][T11900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1494'. [ 404.305775][T11900] 8021q: VLANs not supported on vxcan0 [ 404.348723][ T3477] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 404.361239][T11899] 8021q: VLANs not supported on vxcan0 [ 404.593543][T11914] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 404.800651][T11931] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1504'. [ 405.067412][T11946] sctp: [Deprecated]: syz.1.1510 (pid 11946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.067412][T11946] Use struct sctp_sack_info instead [ 405.354762][T11959] netlink: 'syz.2.1513': attribute type 4 has an invalid length. [ 405.711958][T11979] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1519'. [ 405.919608][T11948] lo speed is unknown, defaulting to 1000 [ 406.007342][T11991] syzkaller0: entered promiscuous mode [ 406.018002][T11991] syzkaller0: entered allmulticast mode [ 406.039800][T11992] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 406.081084][T11992] syzkaller0: entered promiscuous mode [ 406.086648][T11992] syzkaller0: entered allmulticast mode [ 407.804944][T12012] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.008806][T12012] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.155140][T12012] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.248383][T12012] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.375985][T12040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1531'. [ 408.399894][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 408.431356][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 408.452254][ T61] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 408.491987][ T61] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 408.522352][T12025] lo speed is unknown, defaulting to 1000 [ 408.853003][T12050] syz.1.1534 (12050) used greatest stack depth: 17344 bytes left [ 408.942552][T12003] lo speed is unknown, defaulting to 1000 [ 409.172567][T12056] netlink: 'syz.1.1536': attribute type 11 has an invalid length. [ 409.252141][T12059] syzkaller1: entered promiscuous mode [ 409.260433][T12059] syzkaller1: entered allmulticast mode [ 409.374073][T12064] netlink: 'syz.1.1539': attribute type 7 has an invalid length. [ 409.384083][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 409.410786][T12064] netlink: 'syz.1.1539': attribute type 7 has an invalid length. [ 409.439598][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 409.508400][T12068] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 409.547079][T12033] lo speed is unknown, defaulting to 1000 [ 410.035745][T12076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1542'. [ 410.732771][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1545'. [ 411.325828][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 411.354277][T12104] netem: unknown loss type 0 [ 411.369834][T12104] netem: change failed [ 411.492423][T12108] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 411.518970][T12108] bond9 (unregistering): Released all slaves [ 411.910047][T12117] Bluetooth: MGMT ver 1.23 [ 411.929892][T12117] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 412.097289][T12126] netlink: 'syz.2.1555': attribute type 13 has an invalid length. [ 412.141196][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 412.159748][T12132] lo: Caught tx_queue_len zero misconfig [ 412.453732][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 412.958463][T12166] netlink: 'syz.0.1563': attribute type 7 has an invalid length. [ 413.046772][T10189] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.064754][T10189] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.086105][T10189] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.114332][T10189] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.267729][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 413.296068][T12175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'. [ 413.380262][T12175] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 413.388069][T12175] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1566'. [ 413.633493][T12183] netlink: 'syz.2.1569': attribute type 42 has an invalid length. [ 413.642097][T12165] lo speed is unknown, defaulting to 1000 [ 413.647737][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 413.711834][T12187] net_ratelimit: 24 callbacks suppressed [ 413.711856][T12187] netlink: zone id is out of range [ 413.749527][T12187] netlink: zone id is out of range [ 413.769889][T12187] netlink: set zone limit has 8 unknown bytes [ 414.099189][T12215] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1578'. [ 414.203498][T12216] bond6: entered promiscuous mode [ 414.208603][T12216] bond6: entered allmulticast mode [ 414.251880][T12216] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.271826][T12225] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1579'. [ 414.319800][T12223] syzkaller0: entered promiscuous mode [ 414.326285][T12223] syzkaller0: entered allmulticast mode [ 414.332836][T12226] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1579'. [ 414.602292][T12235] tipc: Enabled bearer , priority 0 [ 414.633498][T12233] xt_hashlimit: max too large, truncated to 1048576 [ 414.683521][T12235] syzkaller0: entered promiscuous mode [ 414.689044][T12235] syzkaller0: entered allmulticast mode [ 416.517545][T12236] tipc: Resetting bearer [ 416.544094][T12234] tipc: Resetting bearer [ 416.561432][T12234] tipc: Disabling bearer [ 416.780305][T12258] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 416.798579][T12258] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 416.953388][T12269] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1591'. [ 417.092796][T12248] lo speed is unknown, defaulting to 1000 [ 417.097461][T12277] IPVS: length: 132 != 8 [ 417.276954][T12283] veth0: entered promiscuous mode [ 417.340805][T12285] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 417.822129][T12282] lo speed is unknown, defaulting to 1000 [ 417.922081][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1600'. [ 417.946101][T12303] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1600'. [ 418.151378][T12283] veth0: left promiscuous mode [ 419.294335][T12336] netlink: 'syz.4.1610': attribute type 39 has an invalid length. [ 419.399072][T12343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1613'. [ 419.419113][T12343] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 419.469133][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 419.482200][T12347] netlink: 'syz.1.1613': attribute type 5 has an invalid length. [ 419.495693][T12347] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1613'. [ 419.543259][T12347] geneve5: entered promiscuous mode [ 419.580574][T12347] geneve5: entered allmulticast mode [ 419.596657][T12345] netlink: 'syz.0.1614': attribute type 13 has an invalid length. [ 419.615458][T12343] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 419.679933][ T61] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 419.945032][T12366] netlink: 'syz.4.1619': attribute type 3 has an invalid length. [ 419.962782][ T61] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 420.006152][T12366] netlink: 'syz.4.1619': attribute type 3 has an invalid length. [ 420.048394][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 420.095484][T12367] delete_channel: no stack [ 420.660056][T12371] lo speed is unknown, defaulting to 1000 [ 421.135725][T12343] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 421.164078][T12343] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 421.211670][T12379] lo speed is unknown, defaulting to 1000 [ 421.304332][T12343] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 421.317524][T12343] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 421.596839][T10187] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 421.613320][T10187] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.638343][T10188] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 421.647020][T10188] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.674346][T10188] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 421.689492][T10188] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.719792][T12378] lo speed is unknown, defaulting to 1000 [ 421.758251][T10187] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 421.767006][T10187] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.783915][T12394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 421.794037][T12394] netem: change failed [ 422.030583][T12404] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 422.150850][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1630'. [ 422.174352][T12404] bond4: entered promiscuous mode [ 422.179820][T12404] bond4: entered allmulticast mode [ 422.336700][T12409] bond4: (slave ip6gretap2): making interface the new active one [ 422.359454][T12409] ip6gretap2: entered promiscuous mode [ 422.365316][T12409] ip6gretap2: entered allmulticast mode [ 422.377134][T12409] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 422.394628][T12412] bond4: left promiscuous mode [ 422.399765][T12412] ip6gretap2: left promiscuous mode [ 422.405498][T12412] bond4: left allmulticast mode [ 422.411782][T12412] ip6gretap2: left allmulticast mode [ 422.431216][T12412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.664371][T12419] netlink: 'syz.2.1632': attribute type 13 has an invalid length. [ 423.412255][T12428] tipc: Enabled bearer , priority 0 [ 423.457530][T12428] syzkaller0: entered promiscuous mode [ 423.507808][T12428] syzkaller0: entered allmulticast mode [ 423.574975][T12428] veth1_virt_wifi: mtu less than device minimum [ 423.602435][T12427] tipc: Resetting bearer [ 423.666175][T12427] tipc: Disabling bearer [ 423.750336][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 423.840530][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 423.889887][T12449] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1639'. [ 424.127083][T12462] bond7 (unregistering): Released all slaves [ 424.153685][T12465] netlink: 566 bytes leftover after parsing attributes in process `syz.4.1643'. [ 424.765035][T12478] netlink: 'syz.2.1646': attribute type 13 has an invalid length. [ 424.792349][T12488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 424.895484][T12490] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1650'. [ 424.912763][T12490] veth0: entered promiscuous mode [ 424.930006][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'. [ 424.953899][T12489] veth0: left promiscuous mode [ 425.313870][T12500] bridge0: entered promiscuous mode [ 425.321134][T12500] vlan4: entered promiscuous mode [ 425.438202][T12477] lo speed is unknown, defaulting to 1000 [ 425.591391][T12506] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1655'. [ 426.023978][T12519] syzkaller0: entered promiscuous mode [ 426.031161][T12519] syzkaller0: entered allmulticast mode [ 426.551643][T12517] lo speed is unknown, defaulting to 1000 [ 426.758591][T12539] netlink: 'syz.2.1664': attribute type 3 has an invalid length. [ 426.777956][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 426.797804][T12539] 8021q: VLANs not supported on ip6_vti0 [ 426.940788][T12544] netlink: 'syz.3.1665': attribute type 13 has an invalid length. [ 426.993047][T12546] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1666'. [ 427.257247][T12549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1667'. [ 427.650208][T12551] syzkaller0: entered promiscuous mode [ 427.691642][T12551] syzkaller0: entered allmulticast mode [ 428.478303][T12554] lo speed is unknown, defaulting to 1000 [ 428.571282][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 428.599651][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 429.091881][T12581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1676'. [ 429.133874][T12572] tipc: Enabling of bearer rejected, failed to enable media [ 429.259558][T12587] x_tables: duplicate underflow at hook 2 [ 429.353720][T12593] veth0_to_bridge: entered promiscuous mode [ 429.369636][T12585] veth0_to_bridge: left promiscuous mode [ 429.632157][T12597] netlink: 'syz.4.1679': attribute type 13 has an invalid length. [ 430.495901][T12606] __nla_validate_parse: 1 callbacks suppressed [ 430.495921][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1682'. [ 430.775701][T12609] syzkaller0: entered promiscuous mode [ 430.819752][T12609] syzkaller0: entered allmulticast mode [ 432.304676][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'. [ 432.853306][T12600] lo speed is unknown, defaulting to 1000 [ 432.973218][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 433.227340][T12654] veth0_virt_wifi: entered allmulticast mode [ 433.250456][T12648] netlink: 'syz.2.1693': attribute type 13 has an invalid length. [ 433.680288][T12631] lo speed is unknown, defaulting to 1000 [ 434.537496][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1696'. [ 434.612304][T12673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.748142][T12681] lo: left promiscuous mode [ 434.762709][T12681] tunl0: left promiscuous mode [ 434.770887][T12681] gre0: left promiscuous mode [ 434.791670][T12681] erspan0: left promiscuous mode [ 434.808684][T12681] ip_vti0: left promiscuous mode [ 434.827343][T12681] ip6_vti0: left promiscuous mode [ 434.847421][T12681] sit0: left promiscuous mode [ 434.861630][T12681] ip6tnl0: left promiscuous mode [ 434.873173][T12681] ip6gre0: left promiscuous mode [ 434.878997][T12681] syz_tun: left promiscuous mode [ 434.886359][T12681] ip6gretap0: left promiscuous mode [ 434.895618][T12681] bridge0: left promiscuous mode [ 434.903583][T12681] vcan0: left promiscuous mode [ 434.909371][T12681] bond0: left promiscuous mode [ 434.928275][T12681] team0: left promiscuous mode [ 434.950777][T12681] nlmon0: left promiscuous mode [ 434.960676][T12681] caif0: left promiscuous mode [ 434.965558][T12681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.009851][T12676] macvlan1: entered promiscuous mode [ 435.016490][T12676] ipvlan0: entered promiscuous mode [ 435.061325][T12676] ipvlan0: left promiscuous mode [ 435.069952][T12676] macvlan1: left promiscuous mode [ 435.222259][T12688] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.390314][T12688] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.449229][T12695] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 435.552527][T12688] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.644350][T12697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.676171][T12688] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.882898][ T6732] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.939459][T12711] netlink: 'syz.4.1705': attribute type 13 has an invalid length. [ 435.949700][T10188] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.971807][T10188] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.024638][ T30] audit: type=1800 audit(1767754329.134:6): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1706" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1848 res=0 errno=0 [ 436.128686][ T6729] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.151326][T12719] syzkaller0: entered promiscuous mode [ 436.162125][T12719] syzkaller0: entered allmulticast mode [ 436.336017][T12724] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1709'. [ 436.529670][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 436.550824][T12737] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1713'. [ 436.576765][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1712'. [ 436.778056][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1715'. [ 436.787452][T12748] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1715'. [ 437.183701][T12762] Unsupported ieee802154 address type: 0 [ 439.192176][T12793] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1727'. [ 439.301387][T12801] netlink: 'syz.2.1726': attribute type 13 has an invalid length. [ 440.142917][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 440.260877][T12811] lo speed is unknown, defaulting to 1000 [ 440.538147][T12847] tipc: Enabling of bearer rejected, failed to enable media [ 440.959168][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 440.991650][T12878] netlink: 'syz.0.1745': attribute type 13 has an invalid length. [ 441.064829][T12877] tun0: tun_chr_ioctl cmd 1074025675 [ 441.070579][T12877] tun0: persist enabled [ 441.081074][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 441.093453][T12867] tun0: tun_chr_ioctl cmd 1074025675 [ 441.099080][T12867] tun0: persist disabled [ 441.383969][T12885] pim6reg1: entered promiscuous mode [ 441.426688][T12885] pim6reg1: entered allmulticast mode [ 441.839753][T12890] SET target dimension over the limit! [ 441.875875][T12899] vlan2: entered promiscuous mode [ 441.919483][T12899] ip6gretap0: entered promiscuous mode [ 442.344907][T12906] geneve3: entered promiscuous mode [ 442.398815][ T6231] lo speed is unknown, defaulting to 1000 [ 442.413357][ T6231] syz0: Port: 1 Link DOWN [ 442.556310][ T3477] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.588336][ T3477] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.625251][ T6222] lo speed is unknown, defaulting to 1000 [ 442.657409][ T3477] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.693969][ T3477] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.744565][ T3477] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.766873][ T3477] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.876203][ T3477] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.905996][ T3477] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.095919][T12952] netlink: 'syz.1.1759': attribute type 1 has an invalid length. [ 443.257207][T12947] veth5: entered promiscuous mode [ 443.292216][T12952] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 443.831243][T12988] netlink: 'syz.1.1762': attribute type 13 has an invalid length. [ 444.140441][T12913] lo speed is unknown, defaulting to 1000 [ 444.528337][T13007] __nla_validate_parse: 63 callbacks suppressed [ 444.528359][T13007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1769'. [ 444.596827][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 444.761559][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1771'. [ 445.455755][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.534914][T13038] bond3: entered promiscuous mode [ 445.555826][T13038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.998223][T13065] netlink: 'syz.0.1780': attribute type 13 has an invalid length. [ 446.410004][T13068] nbd4: detected capacity change from 0 to 63 [ 446.421273][ T5832] block nbd4: Receive control failed (result -32) [ 446.608048][T13081] tipc: Enabling of bearer rejected, failed to enable media [ 446.679796][T13032] lo speed is unknown, defaulting to 1000 [ 447.287297][T13022] lo speed is unknown, defaulting to 1000 [ 448.241697][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 448.385720][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 448.420556][T13133] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1790'. [ 448.444978][T13132] nbd: couldn't find device at index 536870912 [ 449.144888][T13155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1796'. [ 449.468761][T13163] netlink: 'syz.3.1797': attribute type 13 has an invalid length. [ 450.425155][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 450.696404][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 450.832266][T13193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1803'. [ 450.940110][T13199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 450.978381][T13199] IPVS: set_ctl: invalid protocol: 12336 48.48.48.48:12336 [ 451.606314][T13218] tipc: Enabled bearer , priority 0 [ 451.625047][T13218] syzkaller0: entered promiscuous mode [ 451.641891][T13218] syzkaller0: entered allmulticast mode [ 451.706349][T13218] tipc: Resetting bearer [ 451.869974][T13217] tipc: Resetting bearer [ 452.018263][T13217] tipc: Disabling bearer [ 452.259656][T13244] netlink: 'syz.2.1810': attribute type 13 has an invalid length. [ 452.344636][T13239] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 452.394417][T13239] bond7 (unregistering): Released all slaves [ 452.480433][T13231] lo speed is unknown, defaulting to 1000 [ 452.963824][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 452.989617][T13254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.100102][T13259] syzkaller1: entered promiscuous mode [ 453.137608][T13259] syzkaller1: entered allmulticast mode [ 453.238906][T13264] tipc: Enabled bearer , priority 0 [ 453.318889][T13264] syzkaller0: entered promiscuous mode [ 453.355253][T13264] syzkaller0: entered allmulticast mode [ 453.381009][T13264] tipc: Resetting bearer [ 453.450718][T13263] tipc: Resetting bearer [ 453.500518][T13263] tipc: Disabling bearer [ 453.510738][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1821'. [ 454.362429][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 454.424247][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 454.445980][T13290] netlink: 'syz.3.1826': attribute type 13 has an invalid length. [ 454.514738][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 454.547805][T13276] lo speed is unknown, defaulting to 1000 [ 454.557342][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 454.975482][T13311] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 455.002860][T13311] bond7 (unregistering): Released all slaves [ 455.045557][T13316] tipc: Enabled bearer , priority 0 [ 455.167156][T13316] syzkaller0: entered promiscuous mode [ 455.173361][T13316] syzkaller0: entered allmulticast mode [ 455.180695][T13316] tipc: Resetting bearer [ 455.275958][T13314] tipc: Resetting bearer [ 455.662376][T13348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1842'. [ 455.683304][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 455.739819][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 455.773521][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 455.773993][T13352] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1843'. [ 455.867555][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 457.119428][T13314] tipc: Disabling bearer [ 457.315235][T13363] netlink: 'syz.3.1844': attribute type 4 has an invalid length. [ 457.354852][T13363] netlink: 'syz.3.1844': attribute type 4 has an invalid length. [ 457.463004][T13374] netlink: 'syz.1.1845': attribute type 13 has an invalid length. [ 457.668513][T13360] lo speed is unknown, defaulting to 1000 [ 458.472364][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 458.809156][T13387] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1850'. [ 458.851011][T13383] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 458.893545][T13384] macvlan4: entered promiscuous mode [ 458.903064][T13384] macvlan4: entered allmulticast mode [ 458.910467][T13384] bond7: entered promiscuous mode [ 458.915864][T13384] bridge4: entered promiscuous mode [ 458.922540][T13384] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 458.934367][T13384] bond7: left promiscuous mode [ 458.939561][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 458.949043][T13384] bridge4: left promiscuous mode [ 458.982384][T13388] block nbd3: shutting down sockets [ 458.997785][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1850'. [ 459.133925][T13391] netlink: 'syz.1.1851': attribute type 7 has an invalid length. [ 459.222865][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.223933][T13391] netlink: 'syz.1.1851': attribute type 7 has an invalid length. [ 459.252711][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.299454][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.308091][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.832027][T13416] team0: left promiscuous mode [ 459.836881][T13416] team_slave_0: left promiscuous mode [ 459.843028][T13416] team_slave_1: left promiscuous mode [ 459.848862][T13416] veth0_to_bridge: left promiscuous mode [ 459.870127][T13416] macvlan1: left promiscuous mode [ 459.876753][T13416] geneve2: left promiscuous mode [ 459.896671][T13416] geneve3: left promiscuous mode [ 459.913302][T13416] bond4: left promiscuous mode [ 459.918332][T13416] macsec1: left promiscuous mode [ 459.957558][T13416] bond6: left promiscuous mode [ 459.963257][T13416] geneve5: left promiscuous mode [ 459.989411][T13416] veth5: left promiscuous mode [ 460.257663][T13428] macsec1: entered promiscuous mode [ 460.271784][T13428] bridge0: entered promiscuous mode [ 460.282794][T13428] bridge0: port 1(macsec1) entered blocking state [ 460.290097][T13428] bridge0: port 1(macsec1) entered disabled state [ 460.296969][T13428] macsec1: entered allmulticast mode [ 460.316799][T13428] bridge0: entered allmulticast mode [ 460.852821][T13428] macsec1: left allmulticast mode [ 460.857944][T13428] bridge0: left allmulticast mode [ 460.923978][T13428] bridge0: left promiscuous mode [ 460.981022][T13401] lo speed is unknown, defaulting to 1000 [ 461.202767][T13446] __nla_validate_parse: 1 callbacks suppressed [ 461.202788][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 461.239821][T13443] bond4: Removing last arp target with arp_interval on [ 461.290244][T13446] netlink: 'syz.3.1866': attribute type 7 has an invalid length. [ 461.331114][ T2990] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.339787][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 461.369568][ T2990] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.398303][T13446] netlink: 'syz.3.1866': attribute type 7 has an invalid length. [ 461.406769][ T2990] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.439545][ T2990] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.658577][T13409] lo speed is unknown, defaulting to 1000 [ 461.728521][T13461] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1870'. [ 461.760035][T13461] netlink: 'syz.0.1870': attribute type 33 has an invalid length. [ 461.781437][T13461] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1870'. [ 461.837776][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 462.431369][T13461] `: renamed from team0 [ 462.514215][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 462.551477][T13469] netlink: 'syz.3.1872': attribute type 10 has an invalid length. [ 462.603402][T13469] bond0: (slave dummy0): Releasing backup interface [ 462.625329][T13469] team0: Port device dummy0 added [ 462.821296][T13475] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.108489][T13493] bond0: left promiscuous mode [ 463.122955][T13493] bond_slave_0: left promiscuous mode [ 463.128848][T13493] bond_slave_1: left promiscuous mode [ 463.171486][T13493] team0: Port device bond0 removed [ 463.181364][T13475] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.248859][T13475] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.779161][T13475] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.658123][ T6080] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.627434][ T6732] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.757082][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.796902][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 498.308460][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.578679][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 498.627822][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.507187][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 499.536963][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 500.017874][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 500.286739][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 500.738136][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 500.977092][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 501.328083][T10189] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.708707][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 501.848838][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 502.458222][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 502.927735][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 504.115955][ T5833] Bluetooth: hci5: command tx timeout [ 504.196837][ T5830] Bluetooth: hci6: command tx timeout [ 504.377583][ T6080] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.788578][ T5833] Bluetooth: hci7: command tx timeout [ 506.208219][ T5833] Bluetooth: hci5: command tx timeout [ 506.266912][ T5833] Bluetooth: hci6: command tx timeout [ 506.357031][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 506.498013][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 506.707884][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 506.968907][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.446951][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.857364][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 507.878507][ T5833] Bluetooth: hci7: command tx timeout [ 508.256392][ T5832] Bluetooth: hci5: command tx timeout [ 508.337376][ T5832] Bluetooth: hci6: command tx timeout [ 509.948081][ T5832] Bluetooth: hci7: command tx timeout [ 510.348477][ T5830] Bluetooth: hci5: command tx timeout [ 510.418287][ T5830] Bluetooth: hci6: command tx timeout [ 510.847029][ T5830] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 511.088448][ T5830] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 511.138420][ T5830] Bluetooth: hci8: command tx timeout [ 511.228532][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 512.057012][ T5830] Bluetooth: hci7: command tx timeout [ 512.267836][ T5830] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 512.677105][ T5830] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 513.224134][ T5832] Bluetooth: hci8: command tx timeout [ 515.297151][ T5830] Bluetooth: hci8: command tx timeout [ 515.778014][ T5830] Bluetooth: hci9: command tx timeout [ 516.629146][T13496] lo speed is unknown, defaulting to 1000 [ 517.407348][ T5830] Bluetooth: hci8: command tx timeout [ 517.858534][ T5830] Bluetooth: hci9: command tx timeout [ 519.947686][ T5830] Bluetooth: hci9: command tx timeout [ 522.016691][ T5830] Bluetooth: hci9: command tx timeout [ 537.159018][T10189] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.407376][T10189] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.696940][T10189] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 541.017726][T10189] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.527874][T10189] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 541.739084][T10189] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 544.516702][T10189] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.856891][T10189] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 545.096589][T10189] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 547.857806][T10189] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.148915][T10189] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 548.387625][T10189] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 554.667763][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 554.889203][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 555.479196][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 555.817202][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 555.967879][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 558.708442][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 559.046542][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 559.196037][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 559.616774][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 559.958399][ T5836] Bluetooth: hci0: command tx timeout [ 560.156498][T13507] lo speed is unknown, defaulting to 1000 [ 560.217742][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.736729][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 561.078106][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 561.237884][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 561.829127][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.126725][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.148756][ T5836] Bluetooth: hci0: command tx timeout [ 563.788511][ T5830] Bluetooth: hci2: command tx timeout [ 564.178230][ T5830] Bluetooth: hci0: command tx timeout [ 565.856054][ T5832] Bluetooth: hci2: command tx timeout [ 566.106855][ T5832] Bluetooth: hci3: command tx timeout [ 566.259185][ T5832] Bluetooth: hci0: command tx timeout [ 567.937639][ T5832] Bluetooth: hci2: command tx timeout [ 568.212831][ T5832] Bluetooth: hci3: command tx timeout [ 568.367723][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.017175][ T5832] Bluetooth: hci2: command tx timeout [ 570.268709][ T5832] Bluetooth: hci3: command tx timeout [ 571.068802][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.309183][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.488223][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.066580][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.268032][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.357796][ T5830] Bluetooth: hci3: command tx timeout [ 575.568889][ T5832] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 575.755541][ T5832] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 575.868137][ T5832] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 576.346601][ T5832] Bluetooth: hci4: command tx timeout [ 576.376124][ T5832] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 576.798388][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 578.427638][ T5833] Bluetooth: hci4: command tx timeout [ 580.255905][ T5833] Bluetooth: hci10: command tx timeout [ 580.498188][ T5833] Bluetooth: hci4: command tx timeout [ 582.358767][ T5833] Bluetooth: hci10: command tx timeout [ 582.587424][ T5833] Bluetooth: hci4: command tx timeout [ 584.418273][ T5833] Bluetooth: hci10: command tx timeout [ 584.458284][T10189] bridge_slave_1: left allmulticast mode [ 584.619031][T10189] bridge_slave_1: left promiscuous mode [ 584.752855][T10189] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.177485][T10189] bridge_slave_0: left allmulticast mode [ 586.287021][T10189] bridge_slave_0: left promiscuous mode [ 586.508136][ T5833] Bluetooth: hci10: command tx timeout [ 586.616927][T10189] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.327711][T10189] bond1 (unregistering): (slave gretap1): Releasing active interface [ 614.648609][ T5830] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 614.888344][ T5830] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 615.028277][ T5830] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 615.566949][ T5830] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 615.917458][ T5832] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 616.015283][ T5832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 616.197007][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 616.266936][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 616.738238][ T5833] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 617.018110][ T5833] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 619.136947][ T5832] Bluetooth: hci11: command tx timeout [ 619.798118][ T5830] Bluetooth: hci12: command tx timeout [ 620.037859][ T5830] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 620.167697][ T5830] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 620.325993][ T5830] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 620.847753][ T5830] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 621.079178][T10189] bond5 (unregistering): (slave geneve0): Releasing active interface [ 621.117315][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 621.243717][ T5833] Bluetooth: hci11: command tx timeout [ 621.867047][ T5832] Bluetooth: hci12: command tx timeout [ 623.314568][ T5833] Bluetooth: hci11: command tx timeout [ 623.997577][ T5833] Bluetooth: hci12: command tx timeout [ 624.018422][ T5833] Bluetooth: hci13: command tx timeout [ 625.376623][ T52] Bluetooth: hci11: command tx timeout [ 626.108058][T13549] Bluetooth: hci12: command tx timeout [ 626.126868][ T52] Bluetooth: hci13: command tx timeout [ 626.828501][T13549] Bluetooth: hci6: command 0x0406 tx timeout [ 626.857723][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 626.878286][T13549] Bluetooth: hci7: command 0x0406 tx timeout [ 628.276945][ T5836] Bluetooth: hci13: command tx timeout [ 629.688930][ T5836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 629.838248][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.854489][ T5836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 630.038009][ T5836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 630.336684][ T5836] Bluetooth: hci13: command tx timeout [ 630.577128][ T5836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 631.197492][ T5830] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 631.597385][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 631.909006][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 631.976393][ T5836] Bluetooth: hci8: command 0x0406 tx timeout [ 632.187682][ T5832] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 632.798733][ T5832] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 633.017159][ T5832] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 634.817417][ T5833] Bluetooth: hci14: command tx timeout [ 636.037336][ T5833] Bluetooth: hci15: command tx timeout [ 636.898429][ T5833] Bluetooth: hci14: command tx timeout [ 636.996780][ T5833] Bluetooth: hci9: command 0x0406 tx timeout [ 638.107872][ T5830] Bluetooth: hci15: command tx timeout [ 638.987422][ T5830] Bluetooth: hci14: command tx timeout [ 640.186382][ T5830] Bluetooth: hci15: command tx timeout [ 641.067569][ T5830] Bluetooth: hci14: command tx timeout [ 642.277350][ T5830] Bluetooth: hci15: command tx timeout [ 644.889163][T10189] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 657.628832][T10189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.727059][T10189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.847004][T10189] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 660.314380][T10189] bond0 (unregistering): Released all slaves [ 661.368544][T10189] bond1 (unregistering): Released all slaves [ 661.868881][T10189] bond2 (unregistering): Released all slaves [ 673.308578][T10189] bond3 (unregistering): (slave macvlan3): Releasing active interface [ 674.286923][ T5833] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 674.368638][T10189] bond3 (unregistering): Released all slaves [ 674.457050][ T5833] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 674.766540][ T5833] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 675.007706][ T5833] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 675.267943][ T5833] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 677.807884][ T31] INFO: task syz-executor:13514 blocked for more than 143 seconds. [ 678.086386][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 678.188888][ T5833] Bluetooth: hci16: command tx timeout [ 678.267367][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 678.596278][ T31] task:syz-executor state:D stack:23072 pid:13514 tgid:13514 ppid:1 task_flags:0x400140 flags:0x00080002 [ 678.849112][ T31] Call Trace: [ 678.936590][ T31] [ 679.008872][ T31] __schedule+0x149b/0x4fd0 [ 679.187866][ T31] ? __pfx___schedule+0x10/0x10 [ 679.327907][ T31] ? schedule+0x91/0x360 [ 679.477890][ T31] schedule+0x165/0x360 [ 679.596164][ T31] schedule_preempt_disabled+0x13/0x30 [ 679.737770][ T31] __mutex_lock+0x7e6/0x1350 [ 679.817659][ T31] ? __mutex_lock+0x5bb/0x1350 [ 680.126654][ T31] ? add_one_compat_dev+0xf0/0x650 [ 680.197629][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 680.268151][ T5833] Bluetooth: hci16: command tx timeout [ 680.357120][ T31] ? rdma_dev_init_net+0x22d/0x2f0 [ 680.476319][ T31] add_one_compat_dev+0xf0/0x650 [ 680.607870][ T31] ? down_read+0x274/0x2e0 [ 680.846103][ T31] rdma_dev_init_net+0x238/0x2f0 [ 680.936220][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 681.225966][ T31] ? trace_kmalloc+0x1f/0xb0 [ 681.326578][ T31] ? __kmalloc_noprof+0x43e/0x800 [ 681.476423][ T31] ops_init+0x35c/0x5c0 [ 681.567964][ T31] setup_net+0x110/0x330 [ 681.656741][ T31] ? __pfx_setup_net+0x10/0x10 [ 681.748289][ T31] ? preinit_net+0x47d/0x780 [ 681.846111][ T31] copy_net_ns+0x3e3/0x570 [ 682.027973][ T31] create_new_namespaces+0x3e7/0x6a0 [ 682.197864][ T31] ? security_capable+0x7e/0x2e0 [ 682.337007][ T5832] Bluetooth: hci16: command tx timeout [ 682.378006][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 682.427088][ T5832] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 682.578079][ T31] ksys_unshare+0x4c8/0x8c0 [ 682.728765][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 682.797310][ T5832] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 682.885962][ T31] __x64_sys_unshare+0x38/0x50 [ 683.018136][ T31] do_syscall_64+0xec/0xf80 [ 683.088570][ T5836] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 683.126680][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 683.298029][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.537684][ T31] ? trace_irq_disable+0x37/0x100 [ 683.624731][ T31] ? clear_bhb_loop+0x60/0xb0 [ 683.648174][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.697972][ T5836] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 683.746798][ T5836] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 683.747845][ T31] RIP: 0033:0x7f7d2c990f47 [ 683.818153][ T31] RSP: 002b:00007ffcc8411fb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 683.886006][ T5836] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 684.018198][ T31] RAX: ffffffffffffffda RBX: 00007f7d2cbe5f40 RCX: 00007f7d2c990f47 [ 684.137026][T13550] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 684.318142][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 684.387429][T13550] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 684.416902][T13550] Bluetooth: hci16: command tx timeout [ 684.517337][ T31] RBP: 00007f7d2cbe67b8 R08: 0000000000000000 R09: 0000000000000000 [ 684.676184][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 684.908387][ T31] R13: 0000000000000003 R14: 00007ffcc8412288 R15: 0000000000000000 [ 685.058377][ T5830] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 685.247726][ T31] [ 685.348459][ T31] INFO: task syz-executor:13517 blocked for more than 150 seconds. [ 685.558986][ T5830] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 685.925887][ T31] Not tainted syzkaller #0 [ 686.168850][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 686.508145][ T31] task:syz-executor state:D stack:23640 pid:13517 tgid:13517 ppid:1 task_flags:0x400140 flags:0x00080002 [ 686.888634][ T31] Call Trace: [ 687.108112][ T31] [ 687.338738][ T31] __schedule+0x149b/0x4fd0 [ 687.408653][ T31] ? __pfx___schedule+0x10/0x10 [ 687.537948][ T31] ? schedule+0x91/0x360 [ 687.618074][ T31] schedule+0x165/0x360 [ 687.687293][ T31] schedule_preempt_disabled+0x13/0x30