last executing test programs: 58.864755616s ago: executing program 4 (id=8572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket(0xa, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0xd0256000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)='|w=9') ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009005}, 0x4000880) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000200)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000680001002cbd7000fcffffff0a0004000000000008000500", @ANYRES32=0x0, @ANYBLOB="ffff0b00"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 58.612789513s ago: executing program 4 (id=8575): r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000800) r5 = socket(0x2, 0x2, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000000) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000006800090325bd7000000000002e87d0b2f54d684dc6e1e70a00000000000000040004000c00088008000400c6000000"], 0x28}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="bcfb418e72d45c09946570bd9f258027", 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="f8000000160010002db57000fedbdf257f000001000000000000000000000000fc8200000000000000000000000000034e2300004e2200000a00a08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d36c000000ac1e0001000000000000000000000000c0ffffffffffffff03000000000000000b00000000000000ffffffffffffff7f0080000000000000010000000000000094000000000000000100000000000000ff7f000000000000040000000000000009000000000000000a5da14b0000000000020000010400000300000025bd700000000000020000203a000000000000003b01000008000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) r9 = epoll_create1(0x0) r10 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0xa000000d}) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x143100, 0x0) write$tun(r11, &(0x7f0000000380)={@void, @void, @llc={@snap={0x1fe, 0xab, "5588", "42f175", 0x3, "37b27ded01c0c91b1e11ead63bdd14e309443bda9f6c4e2757f05a88624ad5f87cdf425ae4022c6ea87a"}}}, 0x33) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r13}, 0x18) 58.611068433s ago: executing program 3 (id=8576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044811}, 0x14008000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x8, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000001c0)=0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1412, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x24004000) pselect6(0x40, &(0x7f0000000300)={0x10, 0x6, 0xb, 0x4, 0x10001, 0x5, 0x6, 0x100}, &(0x7f0000000340)={0x5, 0x5, 0x1000, 0x6, 0x7, 0x100000000, 0x53, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x6bc1, 0xfff, 0x8, 0x80000001, 0x7}, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={r0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000001b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000540)={0x1578, r7, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_FRAME={0x129c, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3ce8}, @device_b, @from_mac=@broadcast, @random="1b036406a44c", {0xc, 0x4}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x70, "50f7c45b65df9f89c9b0e161fe91a79f147198634f6bcb8596cc0ba30267b1ce778300e9d778d04c1ac34cfdf4e69140bf0ea46231cf9bde6d516caf1db13283c5a11c6ec411e8cd8c806ff143071fc3b794bb157da1703176a5a5f665a1322a10b2b8f89b7f50ffcfd3faddc0f48ea1"}, {@device_a, @device_b, 0xa5, "b9a27db8f6d91720b60f068500703e9230961dfe0298ab46d23b847f22cdd1a5495b557da41abf332cc60109df0f4f4b5d538262d222d7f1df08a63140be7db58b51e58054d0de05ed8cdde9903903ad6717549c412d3ca26bec6c0b3ac402d8ebf7d0d39f21b78b04348338fee2090cbc2dd8b3c8f377d99bdda551dec4291e590eb0a0ec7deab4c2790ae0dad41b0310b720c55a185ee5da05a72c96228a6e284d9d3337"}, {@broadcast, @device_a, 0x7b, "cef232de7cde325e9fea86bef7ebeba1e100ef29cf5b635eafa016ca82f251a318250d07be7a269a92d05613b6b50116978fabb9a620898efb3c379df1f649a3380935291c146f0b6066225bb8c8ff0416b56923b118a03d6681395c5c0d3081b6e1d64c4fa36d7a2538d5d02d5a060c37d60474653df97793e2e9"}, {@device_b, @broadcast, 0x3a, "c82c0c2aec374991c3aaa00bfaa0af97c086aee9a0d7244c950581e20e52f43c5fd0d7c09641944b6ea4b700a476f0782407cad1c2e9553cfc78"}, {@device_b, @device_b, 0x1000, "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"}, {@device_b, @device_b, 0x55, "40ed8ce05e8cc128dfcf172d7d7214dad0f3faadcec1fa9e3493699218e0e2ef8445c809bd1b0bb6420f8de11497c2f4f65ee7864e3348bc67c73762472d6765a4e5a0ddad87e8ab8e7b7c769fed55a46ecf632b27"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x7ffe}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9000}, @NL80211_ATTR_FRAME={0x2a6, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @device_b, @random="37ed25f4d60b", {0x9, 0x8}}, 0xa, @random=0xd, 0x4082, @void, @val={0x1, 0x1, [{0x3, 0x1}]}, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xfb, 0x4, 0x9}}, @val={0x6, 0x2, 0x8}, @val={0x2d, 0x1a, {0x80, 0x0, 0x2, 0x0, {0x7ff, 0x4, 0x0, 0x149, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x2, 0x8}}, @val={0x72, 0x6}, @void, [{0xdd, 0x2d, "3fd9654a7e88eb538cb722ee33ad6192ed3ba03da5a387b0e67a6b0bec98f4764059fe96db4e2290c720a5c3b2"}, {0xdd, 0xdc, "2873dd5b3becb0cf998755aceb5b63e190299a4c6982c20eb17ef233e60e492874b9d5fe7c7982554c7210284a049fb465312fb1a878783c7f226aa3a475803be5407566fcccd68977ee1e0dd3b091dc48073add263ecb4b483d07d3bcdbf895e16c0487c1fa5a33645410edc1b5953620c9797979861fda38df8d33402936649a21d57661bb423df38255744c0794d56c02bee2c9853424d4f9dc3019aadb3d1896cda24ef132ed64c1a793a08f23ffc61cc1ac23a0be17d90179f7a5df6392c0d2e50159706b95a5fada2f7047e1a0a073986200dc3168e1db2494"}, {0xdd, 0xc1, "a313cf9d1f98211939110245de806d02a1807a1cfec966cb6780fea8e87e0173c4693a07cd58d5ed572430b2bea394664381f07c9a7646a2f3de26696a43ad505a3f77afe880b13e29d6e9e03a604d74ed0e14978386652411d1c8e9b016a0a80d83c95c57654bd8d1101a8622eb2ada15f080f7cda06fa2d35d3e7415d6db8b7ea5e60284279d55f342d196abf6c09858a1d7e3f66a07b51ad16962d97d6048e14c52d487ee05be0c002cb598bd2ee4d35d421047f99b18db9e1ebb5b2368fe70"}, {0xdd, 0x76, "8620887b97a7669addfac1f20ba15f616b7a100a410ab2c1cdcecef712a623b4987912ff3eed7e2729a189d759d3cdde8d7ead50398300274f1092547fcc569fcf6bcd64130cf3ebfce767a4a25f9713ae256744d95c77240100842333c59dd83698e3c0c10a347d43a96157ba8bacb8f8d7bdd69353"}]}}]}, 0x1578}, 0x1, 0x0, 0x0, 0x40010}, 0x20000001) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r8, &(0x7f0000001b80)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10) ioctl(r5, 0x8, &(0x7f0000001bc0)="047d0067423d2e6ad0590e3e6ac913d3a80d13d0248fcabc2b8f0bb4454677f9bee5c4ecd4c4d5af3957b9f256d478a6e62366d5446f961aa08382640517db209d2e1f98ed381d7ab26853d8ed717ba8443f49c1ea44bbd8757456a468c0828a3969559ff1380ce82405a7c3a5bd392c39619f5854a89b040bc591") getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000001c40), &(0x7f0000001c80)=0xe) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001cc0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r9, 0x0, 0x4f, 0xfe, &(0x7f0000001d00)="8aa416cd26d75882ea6261dc46ad1ba3f275950a342553d6bbcf80226e4fb80d93deffd0a47481cdffede8f3056952795d441d61c41e2e0dc194fc935727b31d451483f0527065ca2d2df721a9fb5c", &(0x7f0000001d80)=""/254, 0x2, 0x0, 0x97, 0xb5, &(0x7f0000001e80)="776fd369c8d9385258b58dbc83e8535b4a0aa1497cb5a382cd3ed1016a9633ea2d7a7ee6831ae016956b5a2f18514bf8ab5b9c512b1cf016d9f8f31ee3ca45516ab0a88b34dea5ed64d3136f9638ab4bb48cf03dda619d8862773398dc541527a1401059f1d136999ea7c61ec699ce461c9b98b471aa995e5b5cd1d99489352a0d041fc20ed695e718eaadcdacfa66c7e46afe2cbfba7c", &(0x7f0000001f40)="7d2f7fea6f8f22c186d8ff8ad32a4335e930b94fa7db72727feac19363008ef127d7dda51e27feb57d46ff64b37fca8777cfb52d755a2dda662675e32632ee4df381a3f9ae0cf3244ef807e7cb0cd13a357d08d451c8a25585981e2310f57cc7675926ab9057a673e6226adba08a6c9f4bdbb2636d9119d6a779f0a4792a0835ee2666eaebdc29263d5c9abbf1ff35b89e423b27b2db2960e684d02f21524c9ae8146f015e5d6f80bc0c3e891d7df86ba5d13af778", 0x0, 0x0, 0xf207}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000002140)={&(0x7f0000002080), 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x48040) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000002180)={'ip6gre0\x00', @random="b9fa618f6eae"}) syz_genetlink_get_family_id$mptcp(&(0x7f00000021c0), r6) socketpair(0x8, 0x800, 0x8, &(0x7f0000002200)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002280), r10) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000002340)={&(0x7f0000002240), 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, r12, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4081) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000024c0)={&(0x7f00000023c0)={0xf8, 0x1e, 0x400, 0x70bd29, 0x25dfdbfd, {0x11}, [@generic="8a0728e80e4d322ab51cadae8a6287d986012ac1a5297ba16045c9dc74975bd6724b42308c9c73ce0bbf2a33e11660b0c35695436f296bca08ab8ae69fdc69dd3cba75e1f6e7914a3a55ff8d4f794be4494630286122221a53716886c4c8cf432afd8e62b10a211b998dedc85f3b313660a84e0bdc126b6790049933019397c3fe5ab4d461c603318b809d84eba98ef9d1ef805698c79bb9e93227dbd92ed90c16265dd2f59ef2ec8c475d41c725883e66c655c4f7a9c6701ac89afb55d1a9770c589bf5de8571071c40d1abb0b7784459ca99885d3528ed2316d8127a29c55fb87718"]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x801) 58.577032474s ago: executing program 2 (id=8577): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8100000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200a0}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x52}, 0x400c0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 58.302421885s ago: executing program 2 (id=8579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0xda}}}}]}, 0x38}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000000480)) (async) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000090000000000000000002000000000000700630000000000fdffffffffffff7f0000040000000000e80a000000000000000002000a000200700000000000000014000e00fe800000000000000000000044053e538e9ba66d5b2fab43d9de8349000000bb"], 0x104}}, 0x0) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) sendto$inet6(r9, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) (async, rerun: 64) shutdown(r9, 0x1) (async, rerun: 64) recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}, {&(0x7f0000000880)="0292ab634c063db11f114f15a34870adf00f9f327347d68d7c2b68629aa274a3b8c87cfc26fd85a30837ca7a69cc83500c0dde149b025385f35c35ab3bdcd7376ea1c7b3b1b6b8ca30e460f9df1adff9853b03eac9c49cbf7efaf0b3ca60b6f6bfdd6f7eea00e003d10d063ce8f44be6d8c292dfc6a18d1c76b50782002abc6c97dae63aa4cf980c16b27efbd70876dd21b8e388755bf8c9015e62f3efd9035a6beea14189239a4465e4aa8e5f763a60fce17b74365d", 0xb6}, {&(0x7f0000000200)="f68680e04e76e0a46dd24dc768f3936b35014129500a2e9fe0a3327bfa9e8da7a0454af886c5f8adbb1b1223b9f1e3ee6eb132208e1fa1d0652e21cd59d8e338f04f5366ec40c99700ee447bcb722810d33c4d1300dca6b7463154a09d8cdc71be2f2101b85e62d63f09abc6e8d5b234b3164bb0a7e6292d", 0x78}], 0x3}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/670], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) 58.300817041s ago: executing program 3 (id=8580): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e79000200f9ff000c00cf3ad6ded0810379", @ANYRESHEX=r1, @ANYRESHEX=r1], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r6, 0x30b, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xb) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x28}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(r3) unshare(0x64000600) gettid() r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f00000053c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x4b326a73, @empty, 0xfffffff7}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000029000000040000006c0000000000000018000000000000002900000004000000068d"], 0x30}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x3, 0x109, 0x6, {0x0, 0xea60}, {r11, r12/1000+60000}, {0x4, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "4b70b35285355221"}}, 0x48}, 0x1, 0x0, 0x0, 0x40008801}, 0x4008084) socket(0x10, 0x803, 0x0) 58.299983977s ago: executing program 4 (id=8581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0xffffffff, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x25, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xbe) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000300)="f8c392ee", &(0x7f0000000380)=@udp}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) close(0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000880)="c2d3e8ef7a7cf8730b1593634fbcdfba361614f629a4469c841d265fa0d6cdfa02108cfbc1e716985ff5d4e57df6ab82517279a04e5718176c7003a7f9e21cbfa8640d8146491c6e7136b5f425c0fbea2da04592e5fda5b901caf26004763ff21eddca543bfc9bbc29133dd7bd12f148dfa7278550de448341deb6e9836ab5c7b5384af4201a67171cca7d66c49bed5461efb999722ea0796c80c930352dadcaa423aad9b161e1c479c12539b2893edc1a1d1828f14711846b7d3375df36a3f118687319992299714f242b7132b4f933853f0348a50780d6de5cd4d74ee0", 0xde) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40854) recvmsg$can_raw(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/139, 0x8b}, {0x0}], 0x2}, 0x1021) r8 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0x7, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa9a9, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x5, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x1, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x0, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0x80, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x400, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0x9, 0x3, 0x637d, 0x1000, 0x57, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0x5, 0x3, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x7, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x7fc, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x2000487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0x11, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x2000000d, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae6, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x7, 0x10, 0x7, 0xfffffbff, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x5, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x200101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xfffe, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x20006, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0xa, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0xffffffff, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x32, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0x7, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x53, 0x7ff, 0x1ff, 0xe25e, 0x4648002, 0x10000003, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0xfff, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0xff, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x3, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0xfffffff9, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x103, 0x9, 0x9, 0x8, 0x10, 0x2, 0x9, 0x9, 0x8, 0x6, 0x5, 0xf, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0xe, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0x395f, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x81, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x3, 0xfffffe00, 0x9, 0x3, 0x4, 0xd, 0x4, 0x4, 0xf, 0x6, 0x2, 0x3ff, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0xb, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x6, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x9, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x1, 0x2, 0x813, 0x6, 0x3, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x4007, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) sendmmsg$alg(r8, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000104010200001d00000000000a00000208000440001b07ff05000100010000000800034000000006def486d7adf94d332282f4e73c59c85bf3d492043bd9f5ae05898a7ff7b97e35253ace314f2cbc7f2b2edf5343e83ce34489f4b3234bf3caeb6b427333"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8) 58.11670586s ago: executing program 2 (id=8582): syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x2, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x10, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, {[@hopopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}]}}}}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x12, 0x0, 0x0, 0x400}, 0x28) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getpeername$netrom(r3, &(0x7f0000000040)={{0x3, @bcast}, [@bcast, @default, @rose, @bcast, @remote, @rose, @netrom]}, &(0x7f00000000c0)=0x48) unshare(0x22020600) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$pppoe(r3, &(0x7f0000000200)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'erspan0\x00'}}, 0x1e) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x1c}, @broadcast, 0xe, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@gettaction={0xbc, 0x32, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffffffe}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffd38, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf3d}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x883}, 0x2404c084) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=@migrate={0x50, 0x21, 0x1, 0x800002, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={r0, 0x20, &(0x7f0000000bc0)={&(0x7f0000000ac0)=""/74, 0x4a, 0x0, &(0x7f0000000b40)=""/113, 0x71}}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000940)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @exit, @alu={0x4, 0x1, 0x3, 0x5, 0x1, 0x30}, @call={0x85, 0x0, 0x0, 0x3f}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000440)='GPL\x00', 0x3ff, 0x3a, &(0x7f0000000a00)=""/58, 0x100, 0x21, '\x00', r10, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x9, 0xf5c, 0x10000}, 0x10, r11, 0x0, 0x4, &(0x7f0000000c40)=[r3], &(0x7f0000000c80)=[{0x3, 0x1, 0xa, 0x3}, {0x2, 0x2, 0x4}, {0x1, 0x1, 0x4, 0x3}, {0x1, 0x1, 0x7, 0x7}], 0x10, 0xffffffff}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=@delchain={0x90, 0x65, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0x3}, {0x0, 0x2}, {0xfff2, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @TCA_RATE={0x6, 0x5, {0xfa, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r12}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x742b, 0x8, 0x2, 0x7}, {0x3d4d, 0x7, 0x0, 0x40}]}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8885) recvmmsg(r6, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0xfffffffffffffc8e}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 58.092774016s ago: executing program 4 (id=8583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r4, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @any, 0x8}, 0x80, 0x0}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x1c, "28839e3f0d065c97361e42d944b1661f81be1063c82d2dab2db7606161f1ab5e58037806c0ca1099295fcf6a9301135139f80cf8f8d42084a8d4fd41e5a157", 0x1a}, 0x80, &(0x7f0000003980)=[{&(0x7f00000025c0)="554c6bf09a07554ada4d286262ba851be52d6642d7d89f267acdbabf18d6026997f20c7197704e47858f551bea2dadb0c9565e6915f1c1d12a791769182df0d63a5cc3535ebb6307ee1e0485ae016792ddda805858daccffab804bdd0bf1aaa1dcfec143669b59f7054950b69e", 0x6d}], 0x1}}], 0x2, 0x20004084) r5 = socket(0xa, 0x3, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0003800c00028005000100000000002c00018014000300fe80000000000000000000000000002414000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400fc0100000000000000000000000000010c00028005000100000000003c0001800c00028005000100110000002c000180"], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r6, 0x0, 0x1075}, 0x18) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080006"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000880)=ANY=[@ANYBLOB="44010000100013070000006abf38236f630000000000ffffffff000000080000000000000000ff010000000000000000000000000000000000ce8c622368118649dc1c3f75db0b1f0d8c0300000000000000aa4214cbec3a5f66d09f7ef6f570c2dc2ac2605a52696f50b6f0e94368eb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008001600000000004c001400636d6163286165732900"/252], 0x144}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r12, {0xf, 0xc}, {0x5}, {0xd, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0xfffffffffffffd50, 0x2f, 0x3}]}}]}, 0x3c}}, 0x20040054) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000b40)={r14, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) 57.851897672s ago: executing program 2 (id=8585): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611869000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) pipe(0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21b9ae72ded771e1}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x340, 0xd, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x324, 0x3, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "9243188b6fd8bb72ea679772eb"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "051fa797f9f32b7ae2d510ca59f4627efea8aa451da113727e44a3298ff41705f5683dff8d76ad30d8d946013482ae8705f4e5b804234f6a464b9c32bae41a37276d5c078c8764e340a27a5839b778fc6331d42d8ce1c26d56a1fadfa310df829182c1aa734730aae667e92110897104da7ae4ff22ffece274c7196cf53774748a3bc30ba2f3f5a2ef69741e38bc8e11092ee3dda674983c28739dec3da0223a0c363374fbb4be767b12de462a9009ea624a6001ac3fff44046f0a0cfac5b515ba03f44167d8e3c36ed58f3c48a56e41919e7ab848dae774d805d81ecc6d9bd5f7db4cc2a471cfe813a1bc4d8d1e7d7d5518e378ce7399"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5abc9fca197f46bd}]}}}, {0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5599bff6cfa67afd}, @NFTA_SET_ELEM_KEY={0x7c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc6d8e16511cb30b5}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9395}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4041}, 0x4008020) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) unshare(0x22020600) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000700), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r6, 0x0, 0x0, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r7, 0x58, &(0x7f0000000180)}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 57.73506974s ago: executing program 2 (id=8587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000080)={0x1, 0x100, 0x11}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000480)={@random="c5bb36c76521", @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8f, 0x100}}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="89e7ee0c7cdad9b4b47380c988cafbe863ca162afbdb9ceacc04d25983c69f6e0db294b5dacba21c815735", 0x2b}], 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000440)={0xa0000001}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000004", @ANYRESHEX=r0, @ANYBLOB="04000d800800010000"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x20000804}, 0x0) 57.502748687s ago: executing program 1 (id=8589): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x0, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x7f}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0xc0, 0x6c64, [0x70a]}}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x70) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r5, &(0x7f0000000280)=@can={0x1d, r3}, 0x80) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000300)={0x1d, r1}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x235c, 0x8}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={r4, 0xffffffffffffffff, 0x5, 0xff}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x9, 0x18}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x5, 0xfff, 0x2210, 0x1, 0xc, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xd, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x1, 0xc, 0x2, 0x3, 0x8, 0x10}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000400)='syzkaller\x00', 0x370, 0x0, 0x0, 0x40f00, 0x2, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x2, &(0x7f0000000680)=[r9, r10, r11, r12], &(0x7f00000006c0)=[{0x3, 0x5, 0x5, 0x2}, {0x0, 0x1, 0xd, 0xc}], 0x10, 0x90000000}, 0x94) r13 = accept4$alg(r8, 0x0, 0x0, 0x800) write(r13, &(0x7f00000007c0)="06e6592746da9f8add23c4869a04", 0xe) r14 = socket(0xb, 0x80000, 0x6) getsockopt$netlink(r8, 0x10e, 0x6, &(0x7f0000000800)=""/83, &(0x7f0000000880)=0x53) close(r8) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000008c0), 0x4) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000900)={'netpci0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r8, &(0x7f0000001e80)={&(0x7f0000000940)=@nl, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000009c0)=""/192, 0xc0}, {&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/13, 0xd}, {&(0x7f0000001c80)=""/248, 0xf8}, {&(0x7f0000001d80)=""/2, 0x2}], 0x7, &(0x7f0000001e40)=""/43, 0x2b}, 0x10100) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f00), r14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r16, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x60, r17, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xece}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20018852}, 0x40) 57.424358427s ago: executing program 3 (id=8590): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000005fbff0000000000da41005d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100800400009500000000000000d7b0c6ff010000003580f4ff0000004018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x48}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f00000000c0)=0xfff80000, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000200)=""/84, 0x54, 0x12123, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r6, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff0100000000000000000000000000010500090004"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x0, 0x3}, [@IFLA_MTU={0x8, 0x4, 0xfff1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x240048d0}, 0x44046084) 57.244785439s ago: executing program 1 (id=8591): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000108000700263a0909140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x4000}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x2, 0xfff3}}}, 0x24}}, 0x24040084) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)={0x298, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x430}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff72a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "8833d8a6e4476c43509b14cfdfb288d65838f93a0dd744740f421eb6faad2f5833d851d72be789b17a3737d372da9051b67dc5bb8b79864be1feb266192e57c4d057e13127b1182378ceda9c428bc9407a5e38383d9d5d22e492410806f7a24747c0e7d1579dd23776e65b14df49d29287e4bdf2071e577b43f89162a0480a167e3907cefed57c8f5236dcf091677a7ec6f4afbe2a809bfd6e1bdde41d894bfb37a58c2d2c2b0f7c12dfeb7e5e45d3c1"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "97cc53108ff039bd008834f8ea4f9638f48754f6d416280229c7a624f4"}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x800}, 0x6040080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200600009cb7e04f2e0cbc75cbab04a56db4a442fe057af31f7893a5b179597f1481c6cd7f9c4ddd84621aa6a3bac7c642c0333e582c5738b4f0967748380745ad9821bde2f5b057f11ab8740dfd3892608237d373fc288fdc3b711bd1bb7c8a235bf40e7342099da48365cd5adb20d8e59ca6dd263f031107647c6776753465c66836ffad3d420684feb947450449a6f74e619f1e12d531b37aec8bbd49", @ANYRES16=r6, @ANYBLOB="000428bd7000fcdbdf25320000000c0099008c00000012000000"], 0x20}}, 0x8000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) close(0x4) 57.073309252s ago: executing program 3 (id=8592): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x38, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x4ab}, 0x14}}, 0x980) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r2}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x8000, 0x4) 54.700350262s ago: executing program 3 (id=8594): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) sendto$inet6(r2, &(0x7f0000000000)="824d276fce874975bf8adbd36cde384b1a33d6000000000000050000", 0x1c, 0x8000000, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001, 0x0, 0x0, 0x0, 0x9, 0xb75}, &(0x7f0000000040)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) (async) sendto$inet6(r2, &(0x7f0000000000)="824d276fce874975bf8adbd36cde384b1a33d6000000000000050000", 0x1c, 0x8000000, 0x0, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001, 0x0, 0x0, 0x0, 0x9, 0xb75}, &(0x7f0000000040)=0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 54.670438161s ago: executing program 4 (id=8596): socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20, 0x3f}}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000000000008040000", @ANYRES32=0x0, @ANYBLOB="ffffffff640101010000000010000000000000000000000007000000"], 0x30}}], 0x2, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000700)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getstats={0x1c, 0x5e, 0x1, 0x70bd27, 0x21dfdbfd, {0x0, 0x0, 0x0, r3}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2406c831}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c39ef3e6fa0032dd0f956458c6c6b88c3bfd7ebffd093db541750ec53df2c50297a57c5c7ec4667ffb89cb617bcb49197bd7b40b1ddd5c106eec5672c0c1c6559be862109fd1388246724bd62ea61664df9f754df6285db4ed4a8caf11fbc4354ef03c126d5e4729c27165eb4b0a54342d7fac3b8d0e05f21990afe453e1dc2f39425495c9f22d9b7f0fedb364dfea3f2d4cbdfaa0e3e69fa45e0e929f07e1ac196c75", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000140)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000480)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x20, 0x64, 0x0, 0x6, 0x11, 0x0, @private=0xa010101, @empty}, {0x6e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x0, @void}}}}}}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="60000000dba56933ff5383b703678375c170d7f6a41dc9a5ac21a82aac6ce3055e6344cd3c0d7d229850541c640e445ac705577b15956062adb8b8a1b624fd2419e7a097fa2757ba3db92d4b4fb3071338d19cee4f3391e79d9b4b543b22469664f06ac2eb75337a9efe5198a6011c1e57143a5ecfda081b844399de9456fdaac7993264d0df9b14450fe5fdd526c0b3876da95df262ee5013155974ebdb692c7ad834f692c44673a34bc75759ba809f9e07a2518e16ae497f330d23fd86c44685a5922f4c0c1f7173673f97ecb547", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf25240000000a0001007770616e300000000a0001007770616e3100000008000200", @ANYRES32=r11, @ANYBLOB="0a0001007770616e3100000008000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e340000000a0001007770616e30000000"], 0x60}, 0x1, 0x0, 0x0, 0x812}, 0x44800) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="720000000000000000000000ab79779488e2a4d0473c44c7e021e9b5ea9374ed359d0822a6d77ecbdf0eec524f70b00514b10f416314a4f1b50600000000000000c6ceb8c8476affa0a8acc5e452d630637e488926fb5133d277b489b8f6dfe1f426a1ce6930ed68c30611acc47adc602ac2e68b7100213905e41c61815930f2adc845e5267e499ac8ef35168896eb7ddaf45126f1d239fd68d5a9f6993236c748c9cf91075a22c8f93f367266e9851f5f7861d1de483585677e4c775035311ac401511680eecc088e3dbda2535ca4ce03391eac9c5be6c1278e", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000140004800500030002000000050003000700000008000100010000000800020002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r13, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 54.640037062s ago: executing program 2 (id=8597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x1, 0xff09, 0x80000000009ffffc}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000003e6", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1b, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0xb, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x44094) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES32=r10], 0x14}}, 0x0) listen(r8, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 54.355299975s ago: executing program 0 (id=8598): pipe(&(0x7f0000000000)) 54.355004574s ago: executing program 3 (id=8599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30df2500890c2107cd2ec5000000e83b3e", @ANYRES16=r0, @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) getpeername$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbcc7f89f40000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 51.762240004s ago: executing program 1 (id=8600): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000400078011000300686173683a69702c6d61726b0000000008d514c4488434224395871c03a95c4144e2061f3dbbdeba065987f8530af101b36af017f411c024dba80ad02a8eb6b272b04e2a104accd49de59ef634599bcd3dc2fe353649f31b77"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x30004081) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e099547ed387dbe9ab3dd75c28ec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x15}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r6) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 48.686974236s ago: executing program 0 (id=8601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x68) socket(0x11, 0x800, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000080)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xc010) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="10007a81f2bb52d07c859755877bf3800c0003008be29237800000"], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x10) 45.244801383s ago: executing program 4 (id=8602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x400, 0x6, 0x8, 0x10387c1f}}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 42.656053278s ago: executing program 1 (id=8603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r6, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, 0x0, 0xff00) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400000000000000000000000000000002000000000000030000000000000000000000090300000000005100"], 0x0, 0x40, 0x0, 0x1}, 0x28) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 40.035138398s ago: executing program 0 (id=8604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xdd}]}, 0x24}}, 0x870) 37.802628747s ago: executing program 32 (id=8597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x1, 0xff09, 0x80000000009ffffc}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000003e6", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1b, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0xb, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x44094) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES32=r10], 0x14}}, 0x0) listen(r8, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 35.913194733s ago: executing program 33 (id=8599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30df2500890c2107cd2ec5000000e83b3e", @ANYRES16=r0, @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) getpeername$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbcc7f89f40000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 35.460512311s ago: executing program 1 (id=8607): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001900010000000000ffdbdf250a0000000000c8000013000008001e003f0000000c0009"], 0x30}}, 0x40000) r2 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r3 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000062d2000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000760009000000000a00000000100000009ce4b289bdbd84b27b218161dbb33d684ebf49319986fbd8f13545bb06e73daadea361be14bc700ef001f62b484af9039fe0c27638b8546f8d00"/92, @ANYRESHEX=r4, @ANYRESOCT], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8810}, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) (async, rerun: 64) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async, rerun: 64) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (rerun: 64) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="4b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=r7, @ANYBLOB="14000600fe80ffffffdd000000000000000000bb14000700fc020000000000000000000200000000"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4) 34.050073993s ago: executing program 0 (id=8608): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="85faf285f17d5c02299c44e92ddd03e00dc1770335571062fb5a0a0ca438bc73eef4bf067a6aa7326560126a6c50cc196c67cde5d99f21e0f4a1715f0a49c4fb74", 0x41) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffff15, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'gre0\x00', r5, 0x10, 0x20, 0x80000000, 0x1, {{0xb, 0x4, 0x1, 0x23, 0x2c, 0x65, 0x0, 0x5, 0x29, 0x0, @private=0xa010102, @local, {[@ssrr={0x89, 0x17, 0x8f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @private=0xa010102, @local]}]}}}}}) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="eeccb55c3aec2e64421048a946092f6a382bd04cc5700944358b8e54bc59e76b99e0e6be8119805083faa80f25930112a86d28241bf443f095fa3938e46131ec499c9d67b75cfc2b2e8e3e1389c2d7d2bc455eb0c7a1bf29a0c1f3c447150304ec7b", 0x62}], 0x1, &(0x7f00000003c0)=[{0x68, 0x101, 0x1, "32696e40e896846987cf8f39bf9e56a296927f7bedc4891122891fc080eb87f296e977febbefc4187176cd12892da5cb113cb49f21fa8b8f15cf32c9a29dbe045860159320e06f5878ae7d2518760e60e750"}, {0x68, 0x115, 0x8, "0a7c0586a107d21b8347a91bfa0d82441e993930ef3c1d38b7a82c93756a7c080ad6e0fbbd7111b100acf6bb4233dea08bf00b784ac51ed99c3123bf26075f8986f8043963c225940dca142b922f2426d0b845"}], 0xd0}, 0x20004000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000006c0)={{r0}, "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"}) 28.622066801s ago: executing program 34 (id=8602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x400, 0x6, 0x8, 0x10387c1f}}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25.790144919s ago: executing program 0 (id=8610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000780), 0x12) socket$kcm(0x29, 0x4, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x18, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x89, [@broadcast, @multicast1]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@remote}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@multicast2}]}]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x12}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000009000000000000005100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000006000000000000000900000018460000feffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000008ccab94aa7d8d71c5cd43429ef99e759a965440e52669abc0f7b0913797699b3ff2b592a756772cd8e547f1c5441fe3a4e3fcd6282983736fc56f12e223f299ad237346c67f251f35eb5e8a630ac82ccd48ae804acdff04d4605796438e8658a814866b6743b31d77ccab26cfc72dd829456b7616315f5d7bef9184b5b4c508e20475fcd340cfa2fcd09962bf84c2fc6aa22259e836047cadafb863574"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1, r0], &(0x7f00000002c0)=[{0x5, 0x2, 0x0, 0x1}, {0x2, 0x1, 0xe, 0x7}, {0x4, 0x5, 0xc, 0x4}, {0x5, 0x5, 0x8, 0xb}, {0x2, 0x2, 0x1, 0x6}, {0x3, 0x4, 0x5, 0x4}, {0x2, 0x3, 0xb, 0xa624ea11d611a6a1}, {0x1, 0x2, 0x1, 0x5}, {0x2, 0x5, 0xd, 0x2}], 0x10, 0x4}, 0x94) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000440)=0x1) shutdown(r0, 0x1) 24.845131945s ago: executing program 1 (id=8611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r5, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a8", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r7, 0x10f40, 0x2200a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) 16.602498857s ago: executing program 0 (id=8612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @val={0x1, 0x0, 0x6, 0xa, 0x4ab4, 0x7}, @ipv4=@dccp={{0xa, 0x4, 0x3, 0x21, 0x44, 0x68, 0x0, 0x8, 0x21, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp={0x44, 0x14, 0xd7, 0x0, 0x8, [0x3ff, 0x9, 0xa, 0x2]}]}}, {{0x4e24, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, "05f26a", 0x8b, "b3b5ef"}, "c9a76379a4ea4a84f1af8344"}}}, 0x4e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept4(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000140)=0x80, 0x800) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xfffc, 0x30, 0x4, 0x24}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r4, 0x7}, &(0x7f0000000240)=0xc) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x4040}, 0x40) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1406, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000480)={0x7, 'veth0_to_batadv\x00', {0x3}, 0x7}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000006c0)=0x425, &(0x7f0000000700)=0x4) getpeername$unix(r2, &(0x7f0000000740), &(0x7f00000007c0)=0x6e) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r8, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x48005) getpeername(r3, &(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000009c0)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000a00)={r1}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xec, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x1cd9835a8b3fa684) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmmsg(r12, &(0x7f0000000c40), 0x0, 0x44) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000cc0)={'ipvlan1\x00', &(0x7f0000000c80)=@ethtool_sfeatures={0x3b, 0x7, [{0x10000, 0xfffff928}, {0xfffffd05, 0xffffffff}, {0xf, 0x400}, {0x1}, {0x4, 0x7fffffff}, {0xe, 0x1ff}, {0x2, 0x3}]}}) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}}, 0x4000010) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000e40)) 8.080163393s ago: executing program 35 (id=8611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r5, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a8", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r7, 0x10f40, 0x2200a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) 0s ago: executing program 36 (id=8612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @val={0x1, 0x0, 0x6, 0xa, 0x4ab4, 0x7}, @ipv4=@dccp={{0xa, 0x4, 0x3, 0x21, 0x44, 0x68, 0x0, 0x8, 0x21, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp={0x44, 0x14, 0xd7, 0x0, 0x8, [0x3ff, 0x9, 0xa, 0x2]}]}}, {{0x4e24, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, "05f26a", 0x8b, "b3b5ef"}, "c9a76379a4ea4a84f1af8344"}}}, 0x4e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept4(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000140)=0x80, 0x800) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xfffc, 0x30, 0x4, 0x24}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r4, 0x7}, &(0x7f0000000240)=0xc) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x4040}, 0x40) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1406, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000480)={0x7, 'veth0_to_batadv\x00', {0x3}, 0x7}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000006c0)=0x425, &(0x7f0000000700)=0x4) getpeername$unix(r2, &(0x7f0000000740), &(0x7f00000007c0)=0x6e) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r8, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x48005) getpeername(r3, &(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000009c0)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000a00)={r1}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xec, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x1cd9835a8b3fa684) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmmsg(r12, &(0x7f0000000c40), 0x0, 0x44) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000cc0)={'ipvlan1\x00', &(0x7f0000000c80)=@ethtool_sfeatures={0x3b, 0x7, [{0x10000, 0xfffff928}, {0xfffffd05, 0xffffffff}, {0xf, 0x400}, {0x1}, {0x4, 0x7fffffff}, {0xe, 0x1ff}, {0x2, 0x3}]}}) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x2c}}, 0x4000010) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000e40)) kernel console output (not intermixed with test programs): ticast mode [ 981.291804][ T1619] xt_hashlimit: size too large, truncated to 1048576 [ 981.344591][ T1619] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 981.453492][ T1624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7187'. [ 981.630799][ T1629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7189'. [ 981.641366][ T1629] netlink: 'syz.2.7189': attribute type 1 has an invalid length. [ 981.651023][ T1629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7189'. [ 981.662164][ T1629] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7189'. [ 981.702030][ T1633] netlink: 'syz.1.7188': attribute type 11 has an invalid length. [ 981.712000][ T1633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7188'. [ 981.739471][ T1634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7188'. [ 981.794992][ T1639] netlink: 'syz.4.7193': attribute type 1 has an invalid length. [ 981.840826][ T1636] team_slave_1: Caught tx_queue_len zero misconfig [ 981.941276][ T1639] 8021q: adding VLAN 0 to HW filter on device bond8 [ 981.994913][ T1651] vlan2: entered allmulticast mode [ 982.002810][ T1651] bond8: entered allmulticast mode [ 982.019052][ T1654] batadv0: mtu less than device minimum [ 982.040287][ T1654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 982.051636][ T1654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 982.062563][ T1654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 982.073448][ T1654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 982.085061][ T1654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 982.096023][ T1654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 982.106938][ T1654] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 982.146804][ T1639] bond8: (slave gretap2): making interface the new active one [ 982.156297][ T1639] gretap2: entered allmulticast mode [ 982.165267][ T1639] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 982.184018][ T1655] gretap1: entered promiscuous mode [ 982.190560][ T1655] batman_adv: batadv0: Adding interface: gretap1 [ 982.199743][ T1655] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 982.220173][ T1655] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 982.325731][ T30] audit: type=1800 audit(1765297541.597:16): pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7200" name="memory.events" dev="tmpfs" ino=2545 res=0 errno=0 [ 982.392158][ T30] audit: type=1804 audit(1765297541.597:17): pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7200" name="/newroot/493/memory.events" dev="tmpfs" ino=2545 res=1 errno=0 [ 982.538856][ T1682] IPv6: Can't replace route, no match found [ 982.560436][ T1682] netlink: 'syz.3.7203': attribute type 3 has an invalid length. [ 982.577931][ T1682] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7203'. [ 982.593202][ T1682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7203'. [ 982.723848][ T1695] netlink: 'syz.1.7207': attribute type 11 has an invalid length. [ 982.742148][ T1695] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.7207'. [ 983.482037][ T1751] Cannot find del_set index 4 as target [ 983.707371][ T1758] 8021q: VLANs not supported on lo [ 983.811375][ T1763] ip6tnl0: Caught tx_queue_len zero misconfig [ 983.922554][ T1763] lo speed is unknown, defaulting to 1000 [ 983.948137][ T1763] wg1 speed is unknown, defaulting to 1000 [ 984.010272][ T1780] netlink: 'syz.3.7231': attribute type 5 has an invalid length. [ 984.196041][ T1789] netlink: 'syz.3.7236': attribute type 2 has an invalid length. [ 984.264160][ T1790] net_ratelimit: 12 callbacks suppressed [ 984.264172][ T1790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.334417][ T1794] bond0: option resend_igmp: invalid value (4096) [ 984.341505][ T1794] bond0: option resend_igmp: allowed values 0 - 255 [ 984.544869][ T1806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 985.109502][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 986.011767][ T1842] __nla_validate_parse: 15 callbacks suppressed [ 986.011781][ T1842] netlink: 996 bytes leftover after parsing attributes in process `syz.3.7249'. [ 987.343382][ T1855] bond2: option arp_validate: invalid value (18446744073491447809) [ 987.403872][ T1855] bond2 (unregistering): Released all slaves [ 987.542245][ T1861] lo speed is unknown, defaulting to 1000 [ 987.554717][ T1861] wg1 speed is unknown, defaulting to 1000 [ 987.712984][ T1868] netlink: 820 bytes leftover after parsing attributes in process `syz.1.7258'. [ 987.739090][ T1868] netlink: 820 bytes leftover after parsing attributes in process `syz.1.7258'. [ 987.841330][ T1870] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.7259'. [ 987.858611][ T1870] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 988.294734][ T1884] lo speed is unknown, defaulting to 1000 [ 988.381502][ T1884] wg1 speed is unknown, defaulting to 1000 [ 988.563276][ T1904] netlink: 'syz.2.7268': attribute type 8 has an invalid length. [ 988.592289][ T1904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7268'. [ 988.606259][ T1906] syzkaller0: entered promiscuous mode [ 988.616475][ T1906] syzkaller0: entered allmulticast mode [ 988.780721][ T1904] geneve0: entered promiscuous mode [ 988.806918][ T1904] team_slave_0: entered promiscuous mode [ 988.839880][ T1904] debugfs: 'hsr1' already exists in 'hsr' [ 988.845845][ T1904] Cannot create hsr debugfs directory [ 988.853196][ T1904] hsr1: entered promiscuous mode [ 989.338246][ T1921] lo speed is unknown, defaulting to 1000 [ 989.358851][ T1921] wg1 speed is unknown, defaulting to 1000 [ 989.392378][ T1928] syzkaller0: entered promiscuous mode [ 989.394610][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7275'. [ 989.407669][ T1928] syzkaller0: entered allmulticast mode [ 989.554131][ T1933] netlink: zone id is out of range [ 989.559539][ T1933] netlink: zone id is out of range [ 989.564805][ T1933] netlink: zone id is out of range [ 989.572327][ T1933] netlink: zone id is out of range [ 989.594991][ T1933] netlink: zone id is out of range [ 989.608736][ T1933] netlink: zone id is out of range [ 989.620578][ T1933] netlink: zone id is out of range [ 989.636219][ T1933] netlink: zone id is out of range [ 989.646324][ T1933] netlink: zone id is out of range [ 989.656487][ T1933] netlink: zone id is out of range [ 989.772829][ T1939] netlink: 'syz.4.7277': attribute type 8 has an invalid length. [ 989.800544][ T1939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7277'. [ 989.850487][ T1950] netlink: 'syz.4.7277': attribute type 8 has an invalid length. [ 989.858380][ T1950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7277'. [ 989.918259][ T1950] bond0: entered promiscuous mode [ 989.945873][ T1942] delete_channel: no stack [ 989.993873][ T1950] bond0: left promiscuous mode [ 990.038821][ T1939] bond0: entered promiscuous mode [ 990.045052][ T1939] bond0: left promiscuous mode [ 990.510739][ T1979] netlink: 'syz.3.7286': attribute type 13 has an invalid length. [ 990.511822][ T1981] team0: Caught tx_queue_len zero misconfig [ 990.937162][ T1991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7289'. [ 991.213876][ T1996] bond5: entered allmulticast mode [ 991.219646][ T1996] 8021q: adding VLAN 0 to HW filter on device bond5 [ 991.651021][ T2023] x_tables: duplicate underflow at hook 1 [ 991.674206][ T2027] x_tables: duplicate underflow at hook 1 [ 992.043619][ T2039] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7300'. [ 992.053632][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7301'. [ 992.076058][ T2039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7300'. [ 992.245250][ T2050] netlink: 'syz.2.7303': attribute type 12 has an invalid length. [ 992.267099][ T2050] netlink: 'syz.2.7303': attribute type 12 has an invalid length. [ 992.740280][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 992.766474][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 992.809269][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 992.840633][ T2083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7309'. [ 992.902995][ T708] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.931576][ T708] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.990188][ T708] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.018054][ T708] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.067179][ T2098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7313'. [ 993.091466][ T2103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7315'. [ 993.102062][ T2098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7313'. [ 993.215553][ T2103] bond7: entered promiscuous mode [ 993.224618][ T2103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 993.301353][ T2107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 993.323297][ T2107] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 993.341447][ T2107] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 993.341890][ T2116] netlink: 'syz.2.7316': attribute type 33 has an invalid length. [ 993.387331][ T2103] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 993.400853][ T2103] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 993.458150][ T2122] tipc: Enabled bearer , priority 0 [ 993.506756][ T2115] syzkaller0: entered promiscuous mode [ 993.524908][ T2115] syzkaller0: entered allmulticast mode [ 993.545948][ T2121] lo speed is unknown, defaulting to 1000 [ 993.604789][ T2121] wg1 speed is unknown, defaulting to 1000 [ 993.610042][ T2115] tipc: Resetting bearer [ 993.633648][ T2113] tipc: Resetting bearer [ 993.689846][ T2113] tipc: Disabling bearer [ 993.736695][ T2127] tunl0: Caught tx_queue_len zero misconfig [ 993.993504][ T2137] vlan3: entered promiscuous mode [ 993.998752][ T2137] gretap0: entered promiscuous mode [ 994.107089][ T2136] lo speed is unknown, defaulting to 1000 [ 994.146091][ T2136] wg1 speed is unknown, defaulting to 1000 [ 994.747219][ T2160] netlink: 'syz.2.7328': attribute type 13 has an invalid length. [ 994.858137][ T2160] gretap0: refused to change device tx_queue_len [ 994.872494][ T2160] net_ratelimit: 107 callbacks suppressed [ 994.872514][ T2160] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 995.105465][ T2171] netlink: 'syz.4.7334': attribute type 1 has an invalid length. [ 995.214625][ T2171] 8021q: adding VLAN 0 to HW filter on device bond9 [ 995.304625][ T2170] veth1: entered promiscuous mode [ 995.315387][ T2170] bond9: (slave veth1): Enslaving as an active interface with an up link [ 995.348700][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 995.507908][ T2186] syzkaller0: entered promiscuous mode [ 995.524050][ T2186] syzkaller0: entered allmulticast mode [ 995.668985][ T2186] syzkaller0: mtu less than device minimum [ 995.924035][ T2190] lo speed is unknown, defaulting to 1000 [ 995.956668][ T2202] syzkaller0: entered promiscuous mode [ 995.971116][ T2202] syzkaller0: entered allmulticast mode [ 995.996261][ T2190] wg1 speed is unknown, defaulting to 1000 [ 996.121779][ T2203] tipc: Enabled bearer , priority 0 [ 996.169918][ T2198] syzkaller0: entered promiscuous mode [ 996.175456][ T2198] syzkaller0: entered allmulticast mode [ 996.236403][ T2197] tipc: Resetting bearer [ 996.270942][ T2197] tipc: Disabling bearer [ 997.077220][ T2250] netlink: 'syz.4.7358': attribute type 16 has an invalid length. [ 997.111858][ T2251] tipc: Enabled bearer , priority 0 [ 997.139552][ T2251] syzkaller0: entered promiscuous mode [ 997.155274][ T2251] syzkaller0: entered allmulticast mode [ 997.244876][ T2251] tipc: Resetting bearer [ 997.286468][ T2249] tipc: Resetting bearer [ 997.325629][ T2264] __nla_validate_parse: 6 callbacks suppressed [ 997.325648][ T2264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7363'. [ 997.342738][ T2249] tipc: Disabling bearer [ 997.424891][ T2271] openvswitch: netlink: Actions may not be safe on all matching packets [ 997.555761][ T2278] lo speed is unknown, defaulting to 1000 [ 997.565201][ T2278] wg1 speed is unknown, defaulting to 1000 [ 997.672203][ T2286] tipc: Enabled bearer , priority 0 [ 997.692744][ T2286] syzkaller0: entered promiscuous mode [ 997.720622][ T2286] syzkaller0: entered allmulticast mode [ 997.741276][ T2286] syzkaller1: entered promiscuous mode [ 997.747061][ T2286] syzkaller1: entered allmulticast mode [ 997.954195][ T2281] tipc: Resetting bearer [ 998.008057][ T2297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7370'. [ 998.034145][ T2281] tipc: Disabling bearer [ 998.091624][ T2297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7370'. [ 998.400711][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 998.477357][ T2314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7374'. [ 998.717959][ T2327] netlink: 'syz.3.7378': attribute type 21 has an invalid length. [ 998.741726][ T2327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7378'. [ 998.807651][ T2331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7378'. [ 998.844932][ T2331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7378'. [ 998.889803][ T2331] netlink: 'syz.3.7378': attribute type 20 has an invalid length. [ 998.934667][ T2337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7382'. [ 998.957707][ T7810] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.968209][ T2331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7378'. [ 998.979083][ T2331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7378'. [ 998.989740][ T2331] netlink: 'syz.3.7378': attribute type 20 has an invalid length. [ 999.007095][ T7810] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.026371][ T7810] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.050988][ T7810] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.350006][ T2359] xt_hashlimit: max too large, truncated to 1048576 [ 999.356968][ T2359] xt_bpf: check failed: parse error [ 999.405784][ T2353] syzkaller0: entered promiscuous mode [ 999.434849][ T2353] syzkaller0: entered allmulticast mode [ 999.445134][ T2355] ¾x9ÿ: left allmulticast mode [ 999.458308][ T2355] ¾x9ÿ: left promiscuous mode [ 999.475358][ T2355] bridge0: port 1(1¾x9ÿ) entered disabled state [ 999.545629][ T2355] bond0: (slave bridge0): Releasing backup interface [ 1000.063686][ T2387] syzkaller0: entered promiscuous mode [ 1000.079173][ T2387] syzkaller0: entered allmulticast mode [ 1004.268074][ T2424] __nla_validate_parse: 4 callbacks suppressed [ 1004.268093][ T2424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7400'. [ 1004.290448][ T2424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'. [ 1004.550184][ T2444] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7406'. [ 1004.760162][ T2453] lo speed is unknown, defaulting to 1000 [ 1004.780612][ T2453] wg1 speed is unknown, defaulting to 1000 [ 1004.972131][ T2474] netlink: 'syz.0.7412': attribute type 58 has an invalid length. [ 1005.002702][ T2474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7412'. [ 1005.023329][ T2474] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7412'. [ 1005.125226][ T2486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7416'. [ 1005.343788][ T2498] dvmrp0: left allmulticast mode [ 1005.496158][ T2502] siw: device registration error -23 [ 1005.642400][ T2500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1005.718301][ T2514] lo speed is unknown, defaulting to 1000 [ 1005.730658][ T2514] wg1 speed is unknown, defaulting to 1000 [ 1005.911895][ T2530] netlink: 'syz.0.7423': attribute type 4 has an invalid length. [ 1006.012999][ T2533] netlink: 'syz.0.7423': attribute type 4 has an invalid length. [ 1006.416662][ T2550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7429'. [ 1006.741755][ T2565] netlink: 'syz.1.7432': attribute type 10 has an invalid length. [ 1006.764577][ T2565] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7432'. [ 1006.827706][ T2563] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1007.308151][ T2578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7434'. [ 1007.467349][ T2580] lo speed is unknown, defaulting to 1000 [ 1007.505256][ T2580] wg1 speed is unknown, defaulting to 1000 [ 1007.971673][ T2612] netlink: 'syz.2.7441': attribute type 8 has an invalid length. [ 1008.036716][ T2615] lo speed is unknown, defaulting to 1000 [ 1008.048091][ T2615] wg1 speed is unknown, defaulting to 1000 [ 1008.082811][ T2619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1008.097668][ T2611] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1008.251674][ T2585] lec:lec_atm_close: lec0: Shut down! [ 1008.538020][ T2635] netlink: 'syz.2.7444': attribute type 39 has an invalid length. [ 1008.589203][ T2637] netlink: 'syz.1.7445': attribute type 13 has an invalid length. [ 1009.008277][ T2637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.051594][ T2637] batman_adv: batadv0: Interface deactivated: dummy0 [ 1009.180260][ T2637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.203264][ T2637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.453207][ T7809] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.465938][ T7809] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 42971 - 0 [ 1009.476325][ T7809] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1009.504920][ T7809] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.518065][ T7809] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 42971 - 0 [ 1009.527670][ T7809] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1009.541731][ T7809] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.550775][ T7809] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 42971 - 0 [ 1009.568984][ T7809] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1009.603079][ T2654] lo speed is unknown, defaulting to 1000 [ 1009.646203][ T2665] bond2: option tlb_dynamic_lb: invalid value (5) [ 1009.659864][ T2665] bond2 (unregistering): Released all slaves [ 1009.688057][ T7809] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.697752][ T7809] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 42971 - 0 [ 1009.707997][ T7809] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1009.820333][ T2654] wg1 speed is unknown, defaulting to 1000 [ 1009.925349][ T2677] __nla_validate_parse: 1 callbacks suppressed [ 1009.925370][ T2677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7451'. [ 1009.991205][ T2679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7452'. [ 1010.159906][ T2690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7453'. [ 1010.175168][ T2683] netlink: 'syz.1.7454': attribute type 1 has an invalid length. [ 1010.188152][ T2683] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7454'. [ 1010.235123][ T2690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7453'. [ 1010.341326][ T2690] hsr_slave_0: left promiscuous mode [ 1010.364021][ T2690] hsr_slave_1: left promiscuous mode [ 1010.732020][ T2724] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7460'. [ 1010.868613][ T2728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7461'. [ 1011.029058][ T2739] netlink: 'syz.1.7464': attribute type 2 has an invalid length. [ 1011.040226][ T2739] netlink: 'syz.1.7464': attribute type 2 has an invalid length. [ 1011.041750][ T2730] tipc: Enabled bearer , priority 0 [ 1011.058209][ T2730] syzkaller0: entered promiscuous mode [ 1011.067272][ T2730] syzkaller0: entered allmulticast mode [ 1011.186670][ T2739] lo speed is unknown, defaulting to 1000 [ 1011.195927][ T2730] tipc: Resetting bearer [ 1011.209782][ T2729] tipc: Resetting bearer [ 1011.242682][ T2729] tipc: Disabling bearer [ 1011.268156][ T2739] wg1 speed is unknown, defaulting to 1000 [ 1011.502237][ T2759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1011.878145][ T2764] lo speed is unknown, defaulting to 1000 [ 1011.914441][ T2757] lo speed is unknown, defaulting to 1000 [ 1011.941727][ T2764] wg1 speed is unknown, defaulting to 1000 [ 1012.015671][ T2757] wg1 speed is unknown, defaulting to 1000 [ 1012.287727][ T2796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7476'. [ 1012.322375][ T2799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1012.409815][ T2799] netlink: 'syz.2.7477': attribute type 30 has an invalid length. [ 1012.504776][ T706] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.521105][ T706] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.530528][ T706] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.539713][ T706] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.556776][ T2803] syzkaller0: entered promiscuous mode [ 1012.581524][ T2803] syzkaller0: entered allmulticast mode [ 1012.746086][ T2811] syzkaller0: entered promiscuous mode [ 1012.756036][ T2811] syzkaller0: entered allmulticast mode [ 1012.863217][ T2822] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1013.090323][ T2830] netlink: 'syz.4.7483': attribute type 58 has an invalid length. [ 1013.833595][ T2868] netlink: 'syz.4.7490': attribute type 1 has an invalid length. [ 1014.045720][ T2883] x_tables: duplicate underflow at hook 2 [ 1014.139681][ T2891] delete_channel: no stack [ 1014.147151][ T2891] netlink: 'syz.3.7494': attribute type 11 has an invalid length. [ 1014.362821][ T2900] IPVS: length: 226 != 8 [ 1014.536121][ T2905] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1014.779319][ T2916] tipc: Enabled bearer , priority 0 [ 1014.852512][ T2916] syzkaller0: entered promiscuous mode [ 1014.868911][ T2916] syzkaller0: entered allmulticast mode [ 1014.878180][ T2916] tipc: Resetting bearer [ 1015.026469][ T7812] tipc: Resetting bearer [ 1015.041968][ T2915] tipc: Resetting bearer [ 1015.142440][ T2941] __nla_validate_parse: 8 callbacks suppressed [ 1015.142482][ T2941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7508'. [ 1015.589962][ T2945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1015.661690][ T2946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1015.670912][ T2947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1015.683215][ T2946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1015.686596][ T2947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1016.149637][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 1017.095350][ T2915] tipc: Disabling bearer [ 1017.169759][ T2951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7510'. [ 1017.288000][ T2963] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1017.350422][ T2964] pim6reg1: entered promiscuous mode [ 1017.401431][ T2967] lo speed is unknown, defaulting to 1000 [ 1017.413394][ T2967] wg1 speed is unknown, defaulting to 1000 [ 1017.606869][ T2981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7516'. [ 1017.963862][ T2995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7520'. [ 1018.181017][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7523'. [ 1018.190659][ T3001] netlink: 'syz.3.7523': attribute type 5 has an invalid length. [ 1018.238076][ T3001] geneve2: entered promiscuous mode [ 1018.254577][ T3001] geneve2: entered allmulticast mode [ 1018.265764][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1018.285930][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1018.301174][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1018.337212][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1018.412628][ T3017] netlink: 'syz.1.7527': attribute type 2 has an invalid length. [ 1018.428111][ T3017] !©9: entered promiscuous mode [ 1018.501553][ T3025] netlink: 'syz.1.7527': attribute type 2 has an invalid length. [ 1018.509781][ T3025] !©9: left promiscuous mode [ 1018.636601][ T3027] netlink: 'syz.4.7528': attribute type 8 has an invalid length. [ 1018.935419][ T3047] syzkaller0: entered promiscuous mode [ 1018.941167][ T3047] syzkaller0: entered allmulticast mode [ 1018.963013][ T3049] dummy0: entered promiscuous mode [ 1018.970326][ T3049] dummy0: left promiscuous mode [ 1019.881919][ T3069] x_tables: duplicate entry at hook 1 [ 1021.443821][ T3064] ip6gre1: entered promiscuous mode [ 1021.555503][ T3075] netlink: 'syz.4.7541': attribute type 5 has an invalid length. [ 1021.568215][ T3078] openvswitch: netlink: Unknown nsh attribute 0 [ 1021.575159][ T3078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.590169][ T3080] openvswitch: netlink: Unknown nsh attribute 0 [ 1021.601490][ T3079] netlink: 'syz.4.7541': attribute type 5 has an invalid length. [ 1021.609073][ T3083] netlink: 'syz.1.7545': attribute type 2 has an invalid length. [ 1021.609429][ T3080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.627531][ T3083] netlink: 'syz.1.7545': attribute type 2 has an invalid length. [ 1021.639711][ T3075] __nla_validate_parse: 3 callbacks suppressed [ 1021.639728][ T3075] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7541'. [ 1021.655714][ T3079] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7541'. [ 1021.742463][ T3083] lo speed is unknown, defaulting to 1000 [ 1021.796396][ T3083] wg1 speed is unknown, defaulting to 1000 [ 1022.003573][ T3107] netlink: 'syz.2.7551': attribute type 28 has an invalid length. [ 1022.295729][ T3120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1022.347585][ T3120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1022.361796][ T3120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1022.540398][ T3130] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7556'. [ 1022.768272][ T3142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7561'. [ 1023.014110][ T3159] ip6gre1: entered promiscuous mode [ 1023.312062][ T3172] netlink: 'syz.0.7567': attribute type 2 has an invalid length. [ 1023.354533][ T3172] : entered promiscuous mode [ 1023.455359][ T3142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7561'. [ 1023.476570][ T3142] nbd: must specify at least one socket [ 1023.709757][ T3191] lo speed is unknown, defaulting to 1000 [ 1023.768895][ T3191] wg1 speed is unknown, defaulting to 1000 [ 1023.888107][ T3213] netlink: 'syz.4.7576': attribute type 1 has an invalid length. [ 1024.048703][ T3223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1024.057998][ T3223] netlink: 'syz.4.7578': attribute type 1 has an invalid length. [ 1024.086733][ T3223] ip6gre0: left promiscuous mode [ 1024.111933][ T3223] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1024.119572][ T3212] siw: device registration error -23 [ 1024.140393][ T3223] macsec0: left promiscuous mode [ 1024.152758][ T3223] veth1: left promiscuous mode [ 1024.492011][ T1496] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1024.527754][ T3244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7584'. [ 1024.746748][ T3249] netlink: 'syz.2.7586': attribute type 4 has an invalid length. [ 1024.756662][ T3254] syzkaller1: entered promiscuous mode [ 1024.783933][ T3254] syzkaller1: entered allmulticast mode [ 1024.851646][ T3259] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1025.143586][ T3269] bridge4: entered promiscuous mode [ 1025.151379][ T3269] bridge4: entered allmulticast mode [ 1025.162607][ T3273] netlink: 'syz.0.7592': attribute type 2 has an invalid length. [ 1025.213490][ T3273] team_slave_0: entered promiscuous mode [ 1025.219336][ T3273] team_slave_1: entered promiscuous mode [ 1025.264053][ T3273] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1025.306328][ T3281] bond8: (slave gretap2): Releasing active interface [ 1025.319571][ T3281] gretap2: left allmulticast mode [ 1025.342883][ T3281] bond9: (slave veth1): Releasing backup interface [ 1025.523520][ T3296] tipc: Enabled bearer , priority 0 [ 1025.535502][ T3296] syzkaller0: entered promiscuous mode [ 1025.541417][ T3296] syzkaller0: entered allmulticast mode [ 1025.593723][ T3296] tipc: Resetting bearer [ 1025.661144][ T3298] syzkaller0: entered promiscuous mode [ 1025.666665][ T3298] syzkaller0: entered allmulticast mode [ 1025.732879][ T3295] tipc: Resetting bearer [ 1025.760082][ T3295] tipc: Disabling bearer [ 1026.747397][ T3327] __nla_validate_parse: 6 callbacks suppressed [ 1026.747415][ T3327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1027.781634][ T3313] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1027.788055][ T3314] geneve3: entered promiscuous mode [ 1027.793370][ T3313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1027.822222][ T3327] ip6tnl1: entered allmulticast mode [ 1027.842117][ T7803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1027.861071][ T3313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1027.869996][ T7803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1027.870036][ T7803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1027.870068][ T7803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1027.967389][ T3331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1028.024013][ T3340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7610'. [ 1028.026945][ T3343] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1028.106784][ T3331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1028.117080][ T3352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7614'. [ 1028.224246][ T3331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1028.284746][ T3363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7617'. [ 1028.366833][ T3331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1028.396890][ T3363] veth7: entered allmulticast mode [ 1028.496036][ T3368] netlink: 'syz.1.7618': attribute type 13 has an invalid length. [ 1028.504363][ T756] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1028.537058][ T756] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1028.565697][ T756] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1028.598411][ T1010] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1028.924426][ T3393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1029.307994][ T3427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7631'. [ 1029.467097][ T3431] lo speed is unknown, defaulting to 1000 [ 1029.500579][ T3431] wg1 speed is unknown, defaulting to 1000 [ 1029.558214][ T3441] netlink: 'syz.1.7633': attribute type 1 has an invalid length. [ 1029.702600][ T3441] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1029.836038][ T3452] netlink: 'syz.2.7635': attribute type 1 has an invalid length. [ 1029.962871][ T3458] bridge0: entered promiscuous mode [ 1029.983409][ T3458] bridge0: port 4(macvtap1) entered blocking state [ 1029.999585][ T3458] bridge0: port 4(macvtap1) entered disabled state [ 1030.016782][ T3458] macvtap1: entered allmulticast mode [ 1030.026506][ T3458] bridge0: entered allmulticast mode [ 1030.057023][ T3458] macvtap1: left allmulticast mode [ 1030.068994][ T3458] bridge0: left allmulticast mode [ 1030.090201][ T3458] bridge0: left promiscuous mode [ 1030.238259][ T3470] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.7640'. [ 1030.384653][ T3477] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7643'. [ 1030.467383][ T3486] xt_socket: unknown flags 0x50 [ 1030.586794][ T3488] bridge0: port 4(erspan0) entered blocking state [ 1030.595331][ T3488] bridge0: port 4(erspan0) entered disabled state [ 1030.605413][ T3488] erspan0: entered allmulticast mode [ 1030.627563][ T3492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7647'. [ 1030.659062][ T3488] erspan0: left allmulticast mode [ 1030.689240][ T3492] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 1030.989405][ T1496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1031.040496][ T706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1031.669223][ T1496] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1031.795832][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7658'. [ 1032.069154][T23684] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1032.095609][T23684] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1032.162854][ T3544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1032.184351][ T3545] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1032.222219][ T5842] Bluetooth: hci1: link tx timeout [ 1032.234452][ T5842] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1032.245124][ T5842] Bluetooth: hci1: link tx timeout [ 1032.247406][ T3544] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1032.250753][ T5842] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1032.275888][ T5842] Bluetooth: hci1: link tx timeout [ 1032.281378][ T5842] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1032.289840][ T5842] Bluetooth: hci1: link tx timeout [ 1032.294968][ T5842] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1032.580761][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7669'. [ 1032.590730][T23740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1032.696205][ T3570] tipc: Cannot configure node identity twice [ 1032.706523][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7666'. [ 1032.716257][ T3570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.746091][ T3567] lo speed is unknown, defaulting to 1000 [ 1032.756532][ T3567] wg1 speed is unknown, defaulting to 1000 [ 1032.777209][ T3572] syzkaller1: entered promiscuous mode [ 1032.789600][ T3572] syzkaller1: entered allmulticast mode [ 1032.910041][ T3574] syzkaller1: left promiscuous mode [ 1032.915474][ T3574] syzkaller1: left allmulticast mode [ 1032.962486][ T3578] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7671'. [ 1033.409663][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1033.473562][ T3587] sctp: [Deprecated]: syz.4.7673 (pid 3587) Use of int in max_burst socket option deprecated. [ 1033.473562][ T3587] Use struct sctp_assoc_value instead [ 1033.535763][ T3585] lo speed is unknown, defaulting to 1000 [ 1033.543084][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1033.552627][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1033.555962][ T3585] wg1 speed is unknown, defaulting to 1000 [ 1033.562937][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1033.582295][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1033.594936][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1034.308814][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 1034.359383][ T3611] nbd3: detected capacity change from 0 to 127 [ 1034.369818][ T5842] block nbd3: Receive control failed (result -32) [ 1034.431405][ T3625] geneve4: entered promiscuous mode [ 1034.436649][ T3625] geneve4: entered allmulticast mode [ 1034.484934][ T708] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.504213][ T708] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.609964][ T708] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.621750][ T3623] lo speed is unknown, defaulting to 1000 [ 1034.627744][ T708] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1034.648041][ T3623] wg1 speed is unknown, defaulting to 1000 [ 1035.413322][ T3653] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1035.735816][ T3658] siw: device registration error -23 [ 1035.766428][ T3664] xt_hashlimit: size too large, truncated to 1048576 [ 1035.828696][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1035.843390][ T3664] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1035.915547][T30820] tipc: Subscription rejected, illegal request [ 1036.091549][ T3683] syzkaller1: entered promiscuous mode [ 1036.110168][ T3683] syzkaller1: entered allmulticast mode [ 1036.198373][ T3687] ip6t_srh: unknown srh match flags 4000 [ 1036.390306][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 1036.510162][ T3709] netlink: 'syz.4.7709': attribute type 11 has an invalid length. [ 1036.519209][ T3709] netlink: 'syz.4.7709': attribute type 11 has an invalid length. [ 1036.586916][ T3709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.591329][ T3715] bond2: option mode: unable to set because the bond device is up [ 1036.841108][ T3738] __nla_validate_parse: 66 callbacks suppressed [ 1036.841127][ T3738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7716'. [ 1036.907082][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1037.122753][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7720'. [ 1037.156422][ T3752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7720'. [ 1037.159032][ T3755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1037.194758][ T3759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7723'. [ 1037.204367][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7720'. [ 1037.212481][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7723'. [ 1037.258206][ T3752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7720'. [ 1037.423302][ T3766] netlink: 'syz.4.7725': attribute type 1 has an invalid length. [ 1037.430441][ T3770] sock: sock_timestamping_bind_phc: sock not bind to device [ 1037.769490][ T3785] netlink: 'syz.4.7731': attribute type 1 has an invalid length. [ 1037.777259][ T3785] netlink: 'syz.4.7731': attribute type 1 has an invalid length. [ 1037.910592][ T3793] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1037.919339][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1037.928968][ T5836] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1037.937194][ T3793] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1037.948990][ T3793] syzkaller1: linktype set to 823 [ 1038.330686][ T5836] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1038.763492][ T3816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.829790][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1038.840534][ T3816] bond_slave_0: left promiscuous mode [ 1038.841877][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1038.854917][ T3816] bond0 (unregistering): Released all slaves [ 1038.864014][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1038.874359][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1038.889305][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1039.045564][ T3834] lo speed is unknown, defaulting to 1000 [ 1039.065725][ T3834] wg1 speed is unknown, defaulting to 1000 [ 1039.142187][ T3839] netlink: 'syz.0.7745': attribute type 1 has an invalid length. [ 1040.054371][ T3834] chnl_net:caif_netlink_parms(): no params data found [ 1040.180711][ T3896] netlink: 'syz.2.7761': attribute type 1 has an invalid length. [ 1040.209591][ T3894] netlink: 'syz.1.7758': attribute type 4 has an invalid length. [ 1040.411859][ T3896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1040.533411][ T3898] bond3: (slave geneve5): making interface the new active one [ 1040.563594][ T3898] bond3: (slave geneve5): Enslaving as an active interface with an up link [ 1040.646449][ T3901] bond3: entered promiscuous mode [ 1040.656952][ T3901] geneve5: entered promiscuous mode [ 1040.750277][ T756] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1040.765842][ T756] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1040.798886][ T756] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1040.837394][ T756] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1040.863837][ T7815] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1040.914966][ T3899] lo speed is unknown, defaulting to 1000 [ 1040.950185][ T5840] Bluetooth: hci2: command tx timeout [ 1040.972430][ T3899] wg1 speed is unknown, defaulting to 1000 [ 1041.073627][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.088968][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.096251][ T3834] bridge_slave_0: entered allmulticast mode [ 1041.108395][ T3834] bridge_slave_0: entered promiscuous mode [ 1041.143086][ T7815] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1041.173321][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.182445][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.208869][ T3834] bridge_slave_1: entered allmulticast mode [ 1041.220869][ T3834] bridge_slave_1: entered promiscuous mode [ 1041.254734][ T7815] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1041.355751][ T7815] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1041.450926][ T3834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.493449][ T3834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.640318][ T3834] team0: Port device team_slave_0 added [ 1041.651495][ T3834] team0: Port device team_slave_1 added [ 1041.763534][ T3834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.775282][ T3834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.817678][ T3834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.840604][ T3834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.847650][ T3834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.877269][ T3834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.929834][ T3962] __nla_validate_parse: 17 callbacks suppressed [ 1041.929856][ T3962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7775'. [ 1042.049582][ T3964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.117029][ T3965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.029029][ T5840] Bluetooth: hci2: command tx timeout [ 1043.142717][ T7815] bond0 (unregistering): Released all slaves [ 1043.155606][ T7815] bond1 (unregistering): Released all slaves [ 1043.168026][ T7815] bond2 (unregistering): Released all slaves [ 1043.182280][ T7815] bond3 (unregistering): Released all slaves [ 1043.188699][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1043.369704][ T7815] bond4 (unregistering): Released all slaves [ 1043.382518][ T7815] bond5 (unregistering): Released all slaves [ 1043.394992][ T7815] bond6 (unregistering): Released all slaves [ 1043.581208][ T7815] bond7 (unregistering): Released all slaves [ 1043.760819][ T7815] bond8 (unregistering): Released all slaves [ 1043.915811][ T7815] bond9 (unregistering): Released all slaves [ 1043.963881][ T3834] hsr_slave_0: entered promiscuous mode [ 1043.977346][ T3834] hsr_slave_1: entered promiscuous mode [ 1043.984974][ T3834] debugfs: 'hsr0' already exists in 'hsr' [ 1043.991106][ T3834] Cannot create hsr debugfs directory [ 1044.094324][ T7815] : left promiscuous mode [ 1044.140157][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7781'. [ 1044.163764][ T3983] netlink: 'syz.2.7781': attribute type 30 has an invalid length. [ 1044.217255][ T7815] tipc: Left network mode [ 1044.260410][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7781'. [ 1044.281875][ T7815] IPVS: stopping backup sync thread 29714 ... [ 1044.288168][ T3983] netlink: 'syz.2.7781': attribute type 30 has an invalid length. [ 1044.431969][ T3992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7785'. [ 1044.576368][ T3997] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1044.661574][ T4010] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1044.770209][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7791'. [ 1044.794368][ T4006] syzkaller0: entered promiscuous mode [ 1044.804583][ T4006] syzkaller0: entered allmulticast mode [ 1045.047470][ T4027] netlink: 'syz.0.7795': attribute type 1 has an invalid length. [ 1045.116483][ T5840] Bluetooth: hci2: command tx timeout [ 1045.763108][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7799'. [ 1047.189447][ T5840] Bluetooth: hci2: command tx timeout [ 1048.881948][ T3834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1048.911589][ T3834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1048.943541][ T3834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1049.003535][ T3834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1049.140539][ T4057] lo speed is unknown, defaulting to 1000 [ 1049.166938][ T4057] wg1 speed is unknown, defaulting to 1000 [ 1049.503186][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7807'. [ 1049.595985][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7807'. [ 1049.665234][ T3834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.756802][ T7815] IPVS: stop unused estimator thread 0... [ 1049.762383][ T3834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.810116][ T7803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.817362][ T7803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.916156][ T4110] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7810'. [ 1049.931641][ T7803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.938862][ T7803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.181420][ T4125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.628327][ T4140] ipvlan0: entered promiscuous mode [ 1050.640704][ T4140] ipvlan0: entered allmulticast mode [ 1050.648760][ T4140] geneve1: entered allmulticast mode [ 1050.745101][ T3834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.417756][ T3834] veth0_vlan: entered promiscuous mode [ 1051.478069][ T3834] veth1_vlan: entered promiscuous mode [ 1051.548295][ T3834] veth0_macvtap: entered promiscuous mode [ 1051.563217][ T3834] veth1_macvtap: entered promiscuous mode [ 1051.625512][ T3834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.654959][ T3834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.699363][ T7803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.779147][ T7803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.823454][ T7803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.843534][ T7803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.863867][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1051.886936][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1051.924905][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1051.958938][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1052.006211][ T4201] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1052.024269][ T4201] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1052.034596][ T4201] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1052.065255][ T7803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.096020][ T7803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.196497][ T4210] syzkaller0: entered promiscuous mode [ 1052.202441][ T4210] syzkaller0: entered allmulticast mode [ 1052.221049][ T7815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.245590][ T7815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.623454][ T4241] xt_TCPMSS: Only works on TCP SYN packets [ 1053.222995][ T4274] sctp: [Deprecated]: syz.4.7855 (pid 4274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1053.222995][ T4274] Use struct sctp_sack_info instead [ 1053.791977][ T4298] vxcan2: entered allmulticast mode [ 1054.252528][ T4323] gretap0: entered promiscuous mode [ 1054.270953][ T4326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.280610][ T4323] gretap0: left promiscuous mode [ 1054.315962][ T4324] gretap0: entered promiscuous mode [ 1054.352287][ T4324] gretap0: left promiscuous mode [ 1054.463079][ T4335] netlink: 'syz.1.7870': attribute type 3 has an invalid length. [ 1054.477106][ T4335] netlink: 'syz.1.7870': attribute type 21 has an invalid length. [ 1054.514898][ T4335] netlink: 'syz.1.7870': attribute type 1 has an invalid length. [ 1054.528779][ T4335] __nla_validate_parse: 16 callbacks suppressed [ 1054.528807][ T4335] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7870'. [ 1054.724591][ T4353] netlink: 'syz.1.7875': attribute type 4 has an invalid length. [ 1054.829015][ T4347] lo speed is unknown, defaulting to 1000 [ 1054.846374][ T30] audit: type=1800 audit(1765297614.087:18): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7871" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1565 res=0 errno=0 [ 1054.872295][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 1054.883321][ T4347] wg1 speed is unknown, defaulting to 1000 [ 1054.893300][ T4361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7877'. [ 1054.904300][ T4361] netlink: 540 bytes leftover after parsing attributes in process `syz.2.7877'. [ 1055.483409][ T4394] syzkaller0: entered promiscuous mode [ 1055.486304][ T4396] netlink: 'syz.1.7890': attribute type 1 has an invalid length. [ 1055.491737][ T4394] syzkaller0: entered allmulticast mode [ 1055.497547][ T4396] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7890'. [ 1056.144330][ T4424] syzkaller0: entered promiscuous mode [ 1056.156143][ T4424] syzkaller0: entered allmulticast mode [ 1056.350533][ T4429] nft_compat: unsupported protocol 8 [ 1056.744021][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7899'. [ 1056.825151][ T4457] openvswitch: netlink: Message has 4 unknown bytes. [ 1057.278805][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1057.859697][ T4489] lo speed is unknown, defaulting to 1000 [ 1057.869988][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1057.892378][ T4489] wg1 speed is unknown, defaulting to 1000 [ 1058.168133][ T4501] tipc: Enabled bearer , priority 0 [ 1058.203286][ T4503] syzkaller0: entered promiscuous mode [ 1058.218833][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7917'. [ 1058.219093][ T4503] syzkaller0: entered allmulticast mode [ 1058.246330][ T4504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7917'. [ 1058.258847][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7917'. [ 1058.401554][ T4496] tipc: Resetting bearer [ 1058.475919][ T4496] tipc: Disabling bearer [ 1058.897186][ T4528] netlink: 'syz.1.7922': attribute type 12 has an invalid length. [ 1058.909707][ T4528] netlink: 'syz.1.7922': attribute type 29 has an invalid length. [ 1059.176054][ T4539] lo speed is unknown, defaulting to 1000 [ 1059.228832][ T4539] wg1 speed is unknown, defaulting to 1000 [ 1060.018061][ T4560] lo speed is unknown, defaulting to 1000 [ 1060.028101][ T4560] wg1 speed is unknown, defaulting to 1000 [ 1060.351961][ T4579] __nla_validate_parse: 7 callbacks suppressed [ 1060.351980][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1060.358805][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1060.376415][ T4579] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1060.376437][ T4579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1060.409004][ T4578] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1060.451153][ T4578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7931'. [ 1060.503943][ T4571] syzkaller0: entered promiscuous mode [ 1060.509798][ T4571] syzkaller0: entered allmulticast mode [ 1060.516547][ T4576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7930'. [ 1060.541895][ T4579] vlan2: entered allmulticast mode [ 1060.555188][ T4579] dummy0: entered allmulticast mode [ 1061.514023][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7939'. [ 1063.657579][ T4592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.866972][ T4592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.980602][ T4648] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1064.014796][ T4650] netlink: 'syz.0.7947': attribute type 10 has an invalid length. [ 1064.064285][ T4650] dummy0: entered promiscuous mode [ 1064.080001][ T4650] team0: Port device dummy0 added [ 1064.087087][ T4650] netlink: 'syz.0.7947': attribute type 10 has an invalid length. [ 1064.102619][ T4640] lo speed is unknown, defaulting to 1000 [ 1064.162481][ T4592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.174404][ T4652] xt_hashlimit: max too large, truncated to 1048576 [ 1064.218363][ T4650] team0: Port device dummy0 removed [ 1064.230334][ T4650] dummy0: left promiscuous mode [ 1064.241088][ T4650] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1064.286459][ T4640] wg1 speed is unknown, defaulting to 1000 [ 1064.307040][ T4592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.410718][ T4645] netlink: 'syz.1.7945': attribute type 5 has an invalid length. [ 1064.546977][ T756] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.593657][ T42] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.638363][ T7810] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.685219][ T7810] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.952984][ T4680] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7956'. [ 1065.010224][ T4673] lo speed is unknown, defaulting to 1000 [ 1065.020882][ T4673] wg1 speed is unknown, defaulting to 1000 [ 1065.084318][ T4686] netlink: 'syz.4.7958': attribute type 3 has an invalid length. [ 1065.520160][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7961'. [ 1065.538931][ T4702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.969260][ T4716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.000917][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'. [ 1066.033911][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'. [ 1066.377452][ T4728] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7971'. [ 1066.473912][ T4730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7972'. [ 1066.511195][ T4733] nbd: couldn't find device at index 2 [ 1066.566240][ T4730] syzkaller0: entered promiscuous mode [ 1066.572916][ T4730] syzkaller0: entered allmulticast mode [ 1066.816733][ T4749] netlink: 'syz.0.7977': attribute type 31 has an invalid length. [ 1066.844952][ T4752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7975'. [ 1066.865199][ T4749] netlink: 'syz.0.7977': attribute type 31 has an invalid length. [ 1066.877027][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7978'. [ 1066.879696][ T4749] netlink: 'syz.0.7977': attribute type 31 has an invalid length. [ 1069.616312][ T4814] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1069.660218][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1069.965828][ T4840] æÿîÿ: entered promiscuous mode [ 1070.199377][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7992'. [ 1070.485151][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7998'. [ 1070.830142][ T4889] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1071.091844][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8007'. [ 1071.256953][ T4905] syzkaller0: entered promiscuous mode [ 1071.263135][ T4905] syzkaller0: entered allmulticast mode [ 1071.357318][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8013'. [ 1073.795782][ T4918] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1073.812119][ T4918] syzkaller1: linktype set to 27 [ 1073.831988][ T4928] kthread_run failed with err -4 [ 1073.844932][ T4931] pim6reg: entered allmulticast mode [ 1073.897251][ T4933] pim6reg: left allmulticast mode [ 1073.955813][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8017'. [ 1073.966201][ T4945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8017'. [ 1074.107791][ T4952] lo speed is unknown, defaulting to 1000 [ 1074.216266][ T4952] wg1 speed is unknown, defaulting to 1000 [ 1074.546241][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1074.694966][ T4986] lec:lec_atm_close: lec0: Shut down! [ 1074.801520][ T4975] lo speed is unknown, defaulting to 1000 [ 1075.079251][ T4975] wg1 speed is unknown, defaulting to 1000 [ 1075.100662][ T4997] netlink: 'syz.3.8028': attribute type 12 has an invalid length. [ 1075.235815][ T5001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8030'. [ 1075.245467][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8030'. [ 1075.265684][ T5001] netlink: 'syz.2.8030': attribute type 1 has an invalid length. [ 1075.426738][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8030'. [ 1076.105289][ T5017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8033'. [ 1076.400635][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8037'. [ 1076.546835][ T5031] lo speed is unknown, defaulting to 1000 [ 1076.592037][ T5031] wg1 speed is unknown, defaulting to 1000 [ 1076.669342][ T5042] netlink: 'syz.3.8042': attribute type 1 has an invalid length. [ 1076.716245][ T5042] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8042'. [ 1076.830423][ T5054] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1077.320420][ T5080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1077.510338][ T5083] Cannot find set identified by id 0 to match [ 1077.960574][ T5099] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8056'. [ 1078.401464][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8057'. [ 1078.445548][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8060'. [ 1078.496380][ T5112] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8060'. [ 1078.692305][ T5120] netlink: 'syz.0.8063': attribute type 2 has an invalid length. [ 1086.068861][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1136.737937][ T5157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8071'. [ 1136.764908][ T5166] tipc: Started in network mode [ 1136.770246][ T5157] netlink: 'syz.0.8071': attribute type 5 has an invalid length. [ 1136.788076][ T5166] tipc: Node identity 4, cluster identity 4711 [ 1136.799244][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8071'. [ 1136.808372][ T5166] tipc: Node number set to 4 [ 1136.861919][ T5157] geneve2: entered promiscuous mode [ 1136.867182][ T5157] geneve2: entered allmulticast mode [ 1136.894003][ T7810] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1136.993673][ T7810] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1137.054216][ T7810] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1137.097604][ T7810] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1137.211713][ T5194] tipc: Enabled bearer , priority 0 [ 1137.299350][ T5192] lo speed is unknown, defaulting to 1000 [ 1137.342721][ T5192] wg1 speed is unknown, defaulting to 1000 [ 1137.388241][ T5193] tipc: Disabling bearer [ 1138.442531][ T5225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1138.523703][ T5226] netlink: 'syz.0.8089': attribute type 3 has an invalid length. [ 1138.600902][ T5232] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8091'. [ 1138.678827][ T5217] lo speed is unknown, defaulting to 1000 [ 1138.696139][ T5217] wg1 speed is unknown, defaulting to 1000 [ 1138.899002][ T5254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.037283][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1139.459637][ T5290] xt_CT: No such helper "netbios-ns" [ 1139.615722][ T5275] lo speed is unknown, defaulting to 1000 [ 1139.782352][ T5275] wg1 speed is unknown, defaulting to 1000 [ 1140.012435][ T5303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 1140.153933][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8111'. [ 1140.282425][ T5319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8113'. [ 1140.681616][ T5329] tap0: tun_chr_ioctl cmd 2147767521 [ 1140.864551][ T5332] bridge0: entered promiscuous mode [ 1140.873192][ T5332] bridge0: port 4(macvtap1) entered blocking state [ 1140.880140][ T5332] bridge0: port 4(macvtap1) entered disabled state [ 1140.891380][ T5332] macvtap1: entered allmulticast mode [ 1140.897991][ T5332] bridge0: entered allmulticast mode [ 1140.906040][ T5332] macvtap1: left allmulticast mode [ 1140.914073][ T5332] bridge0: left allmulticast mode [ 1140.921725][ T5332] bridge0: left promiscuous mode [ 1141.259401][ T5352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8123'. [ 1141.397534][ T5361] wg1: entered promiscuous mode [ 1141.404537][ T5361] wg1: entered allmulticast mode [ 1141.487256][ T5369] sctp: [Deprecated]: syz.3.8127 (pid 5369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1141.487256][ T5369] Use struct sctp_sack_info instead [ 1141.530999][ T5368] sctp: [Deprecated]: syz.3.8127 (pid 5368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1141.530999][ T5368] Use struct sctp_sack_info instead [ 1141.749514][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1141.793122][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8132'. [ 1141.857841][ T5392] netlink: 'syz.2.8135': attribute type 29 has an invalid length. [ 1141.900939][ T5392] netlink: 'syz.2.8135': attribute type 29 has an invalid length. [ 1141.912333][ T5392] netlink: 500 bytes leftover after parsing attributes in process `syz.2.8135'. [ 1141.923999][ T5392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8135'. [ 1141.938042][ T5392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1141.945350][ T5392] IPv6: NLM_F_CREATE should be set when creating new route [ 1141.952655][ T5392] IPv6: NLM_F_CREATE should be set when creating new route [ 1142.191105][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8141'. [ 1142.224961][ T5414] netlink: 'syz.2.8141': attribute type 1 has an invalid length. [ 1142.234591][ T5414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.422267][ T5423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8145'. [ 1142.430078][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8146'. [ 1142.441412][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8145'. [ 1142.452835][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8145'. [ 1142.462811][ T5424] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8142'. [ 1142.472816][ T5424] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8142'. [ 1142.607506][ T5427] lo speed is unknown, defaulting to 1000 [ 1142.617319][ T5427] wg1 speed is unknown, defaulting to 1000 [ 1142.692870][ T5438] bond8 (unregistering): Released all slaves [ 1142.816792][ T5450] bridge0: entered promiscuous mode [ 1142.824891][ T5450] macsec1: entered promiscuous mode [ 1143.048854][ T5459] SET target dimension over the limit! [ 1143.973341][ T5515] macsec2: entered promiscuous mode [ 1144.008368][ T5515] macsec2: entered allmulticast mode [ 1144.439764][ T5528] lo speed is unknown, defaulting to 1000 [ 1144.480659][ T5528] wg1 speed is unknown, defaulting to 1000 [ 1145.293699][ T5567] netlink: 'syz.4.8181': attribute type 15 has an invalid length. [ 1145.369908][ T6029] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1145.370057][ T5567] netlink: 'syz.4.8181': attribute type 15 has an invalid length. [ 1145.400443][ T6029] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1145.415012][ T6029] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1145.431220][ T6029] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1145.462388][ T5583] netlink: 'syz.0.8184': attribute type 4 has an invalid length. [ 1145.474169][ T5583] netlink: 'syz.0.8184': attribute type 4 has an invalid length. [ 1145.634505][ T5594] netlink: 'syz.4.8188': attribute type 10 has an invalid length. [ 1145.706600][ T5594] team0: Cannot enslave team device to itself [ 1145.738873][ T5600] netlink: 'syz.2.8189': attribute type 3 has an invalid length. [ 1145.896754][ T5612] netlink: 'syz.4.8191': attribute type 29 has an invalid length. [ 1145.926252][ T5606] dummy0: entered promiscuous mode [ 1145.933675][ T5606] dummy0: left promiscuous mode [ 1146.050458][ T5619] gretap3: entered allmulticast mode [ 1146.062205][ T5619] bond4: (slave gretap3): making interface the new active one [ 1146.073219][ T5619] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 1146.180004][ T5631] .71·: renamed from .70· (while UP) [ 1146.195508][ T5631] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 1146.796368][ T5659] rdma_rxe: rxe_newlink: failed to add lo [ 1146.868715][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1146.934326][ T5674] __nla_validate_parse: 31 callbacks suppressed [ 1146.934347][ T5674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1146.988022][ T5674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1147.037085][ T5674] gretap0: entered promiscuous mode [ 1147.062521][ T5674] gretap0: left promiscuous mode [ 1147.806066][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8217'. [ 1148.215254][ T5715] x_tables: duplicate underflow at hook 3 [ 1149.003508][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8227'. [ 1149.085799][ T5757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8229'. [ 1149.118686][ T5757] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8229'. [ 1149.283282][ T5767] validate_nla: 2 callbacks suppressed [ 1149.283323][ T5767] netlink: 'syz.2.8231': attribute type 12 has an invalid length. [ 1149.507945][ T5780] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1149.517707][ T5780] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 1149.533971][ T5780] team0: Port device dummy0 removed [ 1149.551391][ T5780] bond0: (slave bond_slave_0): Releasing backup interface [ 1149.564610][ T5780] bond0: (slave bond_slave_1): Releasing backup interface [ 1149.575631][ T5784] netlink: 'syz.4.8237': attribute type 10 has an invalid length. [ 1149.589139][ T5780] team0: Port device team_slave_0 removed [ 1149.597422][ T5780] team0: Port device team_slave_1 removed [ 1149.605020][ T5780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1150.313370][ T5818] syz.1.8244: vmalloc error: size 6279168, failed to allocated page array size 12264, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1150.333591][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz.1.8244 Not tainted syzkaller #0 PREEMPT(full) [ 1150.333618][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1150.333630][ T5818] Call Trace: [ 1150.333638][ T5818] [ 1150.333647][ T5818] dump_stack_lvl+0x189/0x250 [ 1150.333675][ T5818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1150.333694][ T5818] ? __pfx__printk+0x10/0x10 [ 1150.333716][ T5818] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1150.333741][ T5818] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1150.333768][ T5818] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1150.333794][ T5818] warn_alloc+0x214/0x310 [ 1150.333822][ T5818] ? __pfx_warn_alloc+0x10/0x10 [ 1150.333852][ T5818] ? __get_vm_area_node+0x28f/0x300 [ 1150.333872][ T5818] ? bpf_check+0x19b/0x1c300 [ 1150.333889][ T5818] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1150.333927][ T5818] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.333946][ T5818] ? rcu_is_watching+0x15/0xb0 [ 1150.333967][ T5818] ? trace_kmalloc+0x1f/0xb0 [ 1150.333984][ T5818] ? __kvmalloc_node_noprof+0x5e9/0x910 [ 1150.334002][ T5818] ? bpf_check+0x19b/0x1c300 [ 1150.334016][ T5818] vzalloc_noprof+0xb2/0xf0 [ 1150.334034][ T5818] ? bpf_check+0x19b/0x1c300 [ 1150.334052][ T5818] bpf_check+0x19b/0x1c300 [ 1150.334082][ T5818] ? __lock_acquire+0x6b6/0x2cf0 [ 1150.334108][ T5818] ? css_rstat_updated+0x23a/0x4f0 [ 1150.334133][ T5818] ? __pfx_css_rstat_updated+0x10/0x10 [ 1150.334162][ T5818] ? count_memcg_event_mm+0x21/0x260 [ 1150.334187][ T5818] ? __lock_acquire+0x6b6/0x2cf0 [ 1150.334212][ T5818] ? __lock_acquire+0x6b6/0x2cf0 [ 1150.334245][ T5818] ? __pfx_bpf_check+0x10/0x10 [ 1150.334273][ T5818] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1150.334298][ T5818] ? lockdep_hardirqs_on+0x98/0x140 [ 1150.334318][ T5818] ? ktime_get_with_offset+0x93/0x2a0 [ 1150.334339][ T5818] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 1150.334363][ T5818] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1150.334397][ T5818] ? __asan_memset+0x22/0x50 [ 1150.334415][ T5818] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1150.334431][ T5818] ? security_bpf_prog_load+0x125/0x3f0 [ 1150.334458][ T5818] bpf_prog_load+0x13ba/0x1a10 [ 1150.334491][ T5818] ? __pfx_bpf_prog_load+0x10/0x10 [ 1150.334529][ T5818] ? bpf_lsm_bpf+0x9/0x20 [ 1150.334541][ T5818] ? security_bpf+0x7e/0x300 [ 1150.334565][ T5818] __sys_bpf+0x507/0x860 [ 1150.334586][ T5818] ? __pfx___sys_bpf+0x10/0x10 [ 1150.334626][ T5818] ? rcu_is_watching+0x15/0xb0 [ 1150.334652][ T5818] __x64_sys_bpf+0x7c/0x90 [ 1150.334670][ T5818] do_syscall_64+0xfa/0xf80 [ 1150.334690][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.334707][ T5818] ? clear_bhb_loop+0x60/0xb0 [ 1150.334728][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.334744][ T5818] RIP: 0033:0x7fc7c758f749 [ 1150.334761][ T5818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.334776][ T5818] RSP: 002b:00007fc7c57d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.334794][ T5818] RAX: ffffffffffffffda RBX: 00007fc7c77e6090 RCX: 00007fc7c758f749 [ 1150.334807][ T5818] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1150.334819][ T5818] RBP: 00007fc7c7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1150.334830][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.334840][ T5818] R13: 00007fc7c77e6128 R14: 00007fc7c77e6090 R15: 00007ffe23092968 [ 1150.334869][ T5818] [ 1150.334877][ T5818] Mem-Info: [ 1150.684602][ T5818] active_anon:10075 inactive_anon:0 isolated_anon:0 [ 1150.684602][ T5818] active_file:3142 inactive_file:40303 isolated_file:0 [ 1150.684602][ T5818] unevictable:768 dirty:128 writeback:0 [ 1150.684602][ T5818] slab_reclaimable:13981 slab_unreclaimable:282173 [ 1150.684602][ T5818] mapped:33335 shmem:1359 pagetables:1308 [ 1150.684602][ T5818] sec_pagetables:0 bounce:0 [ 1150.684602][ T5818] kernel_misc_reclaimable:0 [ 1150.684602][ T5818] free:1112220 free_pcp:28565 free_cma:0 [ 1150.739438][ T5818] Node 0 active_anon:40300kB inactive_anon:0kB active_file:12568kB inactive_file:161008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133340kB dirty:512kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18616kB pagetables:5100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1150.773893][ T5818] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1150.868146][ T5818] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.906947][ T5818] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1150.936936][ T5818] Node 0 DMA32 free:539048kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40100kB inactive_anon:0kB active_file:12568kB inactive_file:161008kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:98512kB local_pcp:76340kB free_cma:0kB [ 1151.012240][ T5818] lowmem_reserve[]: 0 0 0 0 0 [ 1151.017011][ T5818] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1151.069121][ T5818] lowmem_reserve[]: 0 0 0 0 0 [ 1151.073911][ T5818] Node 1 Normal free:3895368kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17688kB local_pcp:9248kB free_cma:0kB [ 1151.107998][ T5818] lowmem_reserve[]: 0 0 0 0 0 [ 1151.113685][ T5818] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1151.126992][ T5818] Node 0 DMA32: 772*4kB (UME) 964*8kB (UME) 876*16kB (UME) 661*32kB (UME) 104*64kB (UME) 251*128kB (UM) 61*256kB (UME) 196*512kB (UM) 153*1024kB (UME) 7*2048kB (UME) 42*4096kB (UM) = 543760kB [ 1151.161801][ T5818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1151.225502][ T5818] Node 1 Normal: 178*4kB (UE) 68*8kB (UME) 46*16kB (UME) 138*32kB (UME) 33*64kB (UME) 6*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895368kB [ 1151.339305][ T5818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1151.350354][ T5818] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1151.362363][ T5818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1151.377167][ T5818] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1151.387753][ T5818] 45864 total pagecache pages [ 1151.393253][ T5818] 0 pages in swap cache [ 1151.397936][ T5818] Free swap = 124996kB [ 1151.412069][ T5818] Total swap = 124996kB [ 1151.416688][ T5818] 2097051 pages RAM [ 1151.434455][ T5818] 0 pages HighMem/MovableOnly [ 1151.442534][ T5818] 424280 pages reserved [ 1151.449837][ T5818] 0 pages cma reserved [ 1151.470995][ T5869] netlink: 'syz.0.8254': attribute type 39 has an invalid length. [ 1151.482769][ T5871] netlink: 'syz.3.8253': attribute type 2 has an invalid length. [ 1151.531287][ T5872] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8254'. [ 1151.614798][ T5878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8255'. [ 1151.624727][ T5877] syzkaller1: entered promiscuous mode [ 1151.663227][ T5877] syzkaller1: entered allmulticast mode [ 1151.753390][ T5906] netlink: 'syz.2.8256': attribute type 11 has an invalid length. [ 1151.776647][ T5906] netlink: 'syz.2.8256': attribute type 11 has an invalid length. [ 1151.810119][ T5906] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8256'. [ 1152.174330][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8262'. [ 1152.313732][ T5937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1152.511010][ T5885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.725376][ T5972] team0: entered allmulticast mode [ 1152.732950][ T5972] team_slave_0: entered allmulticast mode [ 1152.741892][ T5972] team_slave_1: entered allmulticast mode [ 1152.755359][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.917515][ T5982] x_tables: duplicate underflow at hook 2 [ 1153.021059][ T5984] lo speed is unknown, defaulting to 1000 [ 1153.048237][ T5984] wg1 speed is unknown, defaulting to 1000 [ 1153.114589][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8280'. [ 1153.152408][ T5995] openvswitch: netlink: Invalid VLAN frame [ 1153.244175][ T5988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1153.287374][ T5988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.307540][ T5988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1153.653245][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8282'. [ 1154.324263][ T5988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.334673][ T5988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.346069][ T5988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1154.397546][ T6007] veth9: entered promiscuous mode [ 1154.592751][ T5988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.617417][ T5988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.634209][ T5988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1154.713003][ T6019] batman_adv: batadv0: Removing interface: dummy0 [ 1154.720501][ T6019] bridge_slave_0: left allmulticast mode [ 1154.726378][ T6019] bridge_slave_0: left promiscuous mode [ 1154.736109][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.745409][ T6019] bridge_slave_1: left allmulticast mode [ 1154.751237][ T6019] bridge_slave_1: left promiscuous mode [ 1154.757008][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.766408][ T6019] team_slave_0: left promiscuous mode [ 1154.772101][ T6019] team_slave_0: left allmulticast mode [ 1154.779669][ T6019] team0: Port device team_slave_0 removed [ 1154.786004][ T6019] team_slave_1: left promiscuous mode [ 1154.791777][ T6019] team_slave_1: left allmulticast mode [ 1154.798419][ T6019] team0: Port device team_slave_1 removed [ 1154.804963][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.813086][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.821394][ T6019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1154.946352][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1154.964875][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1155.011755][ T5988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.028146][ T5988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.039177][ T5988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1155.182238][ T6027] netlink: 'syz.3.8288': attribute type 16 has an invalid length. [ 1155.212186][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.224506][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1155.243597][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1155.257150][ T6027] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8288'. [ 1155.280319][ T1010] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.299847][ T6032] netlink: 'syz.4.8290': attribute type 10 has an invalid length. [ 1155.313098][ T1010] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1155.328389][ T6036] netlink: 'syz.4.8290': attribute type 10 has an invalid length. [ 1155.336540][ T1010] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1155.376953][ T6032] team0: Failed to send options change via netlink (err -105) [ 1155.394205][ T6040] netlink: 'syz.4.8290': attribute type 10 has an invalid length. [ 1155.405836][ T6032] team0: Port device dummy0 added [ 1155.412763][ T6036] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1155.451782][ T1010] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.470248][ T1010] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1155.483001][ T1010] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1155.499140][ T6040] team0: Failed to send options change via netlink (err -105) [ 1155.507254][ T6040] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1155.527328][ T6040] team0: Port device dummy0 removed [ 1155.544673][ T6040] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1155.580641][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.603293][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1155.621183][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1155.642624][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8293'. [ 1155.658931][ T6054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1155.700925][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8296'. [ 1155.750064][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8296'. [ 1155.771018][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8298'. [ 1155.793999][ T706] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.805251][ T706] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.869325][ T706] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.016893][ T6069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.067765][ T6069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1156.115906][ T706] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.125606][ T6071] netlink: 'syz.3.8300': attribute type 4 has an invalid length. [ 1156.243031][ T6069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.256425][ T6069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1156.260839][ T6097] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1156.296423][ T6099] netlink: 'syz.0.8309': attribute type 18 has an invalid length. [ 1156.329662][ T6099] netlink: 'syz.0.8309': attribute type 18 has an invalid length. [ 1156.370505][ T6069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.384212][ T6069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1156.497663][ T6069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.508300][ T6069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1156.631558][ T706] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.650489][ T706] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1156.712470][ T706] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.721156][ T706] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1156.743517][ T7810] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.752413][ T7810] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1156.778522][ T7810] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.787167][ T7810] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1156.888887][ T6132] tipc: Enabled bearer , priority 0 [ 1156.925643][ T6132] syzkaller0: entered promiscuous mode [ 1156.935009][ T6132] syzkaller0: entered allmulticast mode [ 1156.980091][ T6139] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 1157.046531][ T6144] netlink: 'syz.3.8323': attribute type 13 has an invalid length. [ 1157.156813][ T7815] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 1157.571541][ T6195] tipc: Enabled bearer , priority 0 [ 1157.605282][ T6195] syzkaller0: entered promiscuous mode [ 1157.611114][ T6195] syzkaller0: entered allmulticast mode [ 1157.617612][ T6201] __nla_validate_parse: 7 callbacks suppressed [ 1157.617631][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8336'. [ 1157.706899][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1157.717396][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1157.746208][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1157.810842][ T6205] lo speed is unknown, defaulting to 1000 [ 1157.835205][ T6205] wg1 speed is unknown, defaulting to 1000 [ 1158.019578][ T4787] tipc: Node number set to 2938384051 [ 1158.026190][ T6217] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8339'. [ 1158.095474][ T6217] lo speed is unknown, defaulting to 1000 [ 1158.149874][ T6217] wg1 speed is unknown, defaulting to 1000 [ 1158.261595][ T6176] tipc: Resetting bearer [ 1158.338224][ T6176] tipc: Disabling bearer [ 1158.595089][ T6239] netlink: 'syz.3.8343': attribute type 12 has an invalid length. [ 1158.726501][ T6247] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1158.784169][ T6255] netlink: 428 bytes leftover after parsing attributes in process `syz.2.8347'. [ 1158.798688][ T6256] netlink: 'syz.3.8348': attribute type 1 has an invalid length. [ 1158.816873][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8348'. [ 1158.835567][ T6251] lo speed is unknown, defaulting to 1000 [ 1158.839005][ T6255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8347'. [ 1158.906887][ T6251] wg1 speed is unknown, defaulting to 1000 [ 1159.135874][ T6263] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1159.149986][ T6263] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 1159.209235][ T6269] nbd5: detected capacity change from 0 to 3 [ 1159.217990][ T5840] block nbd5: Receive control failed (result -32) [ 1159.307795][ T6259] bond1: (slave gretap1): making interface the new active one [ 1159.363884][ T6259] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1159.394530][ T6270] macvlan2: entered promiscuous mode [ 1159.420925][ T6270] macvlan2: entered allmulticast mode [ 1159.427158][ T6270] bond1: entered promiscuous mode [ 1159.444256][ T5922] IPVS: starting estimator thread 0... [ 1159.489417][ T6270] gretap1: entered promiscuous mode [ 1159.495579][ T6270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1159.515174][ T6270] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1159.540209][ T6270] bond1: left promiscuous mode [ 1159.542843][ T6283] IPVS: using max 29 ests per chain, 69600 per kthread [ 1159.551868][ T6270] gretap1: left promiscuous mode [ 1159.774988][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8355'. [ 1159.991608][ T6310] netlink: 'syz.0.8361': attribute type 11 has an invalid length. [ 1160.022980][ T6311] netlink: 'syz.0.8361': attribute type 11 has an invalid length. [ 1160.191870][ T6320] validate_nla: 1 callbacks suppressed [ 1160.191889][ T6320] netlink: 'syz.0.8363': attribute type 1 has an invalid length. [ 1160.255768][ T6325] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1160.441030][ T6327] syzkaller1: entered promiscuous mode [ 1160.446727][ T6327] syzkaller1: entered allmulticast mode [ 1160.552541][ T6337] syzkaller0: left promiscuous mode [ 1160.558158][ T6337] syzkaller0: left allmulticast mode [ 1160.673201][ T6346] tipc: Enabling of bearer rejected, already enabled [ 1160.682331][ T6346] syzkaller0: entered promiscuous mode [ 1160.687944][ T6346] syzkaller0: entered allmulticast mode [ 1160.711888][ T6346] tipc: Resetting bearer [ 1160.997217][ T6357] hsr_slave_1 (unregistering): left promiscuous mode [ 1161.381314][ T6378] lo speed is unknown, defaulting to 1000 [ 1161.492043][ T6379] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1161.505521][ T6379] bond2 (unregistering): Released all slaves [ 1161.559427][ T6380] lo speed is unknown, defaulting to 1000 [ 1161.600961][ T6378] wg1 speed is unknown, defaulting to 1000 [ 1161.609460][ T6380] wg1 speed is unknown, defaulting to 1000 [ 1161.618181][ T6391] syz_tun: entered allmulticast mode [ 1161.637414][ T6389] syzkaller0: entered promiscuous mode [ 1161.643221][ T6389] syzkaller0: entered allmulticast mode [ 1161.673602][ T6391] dvmrp8: entered allmulticast mode [ 1161.718248][ T6390] syz_tun: left allmulticast mode [ 1161.806430][ T6394] tipc: Enabling of bearer rejected, failed to enable media [ 1162.357970][ T6416] tipc: Enabled bearer , priority 0 [ 1162.399949][ T6417] tipc: Enabling of bearer rejected, already enabled [ 1162.438420][ T6407] netlink: 'syz.1.8389': attribute type 33 has an invalid length. [ 1162.463524][ T6416] syzkaller0: entered promiscuous mode [ 1162.469522][ T6416] syzkaller0: entered allmulticast mode [ 1162.521865][ T6407] lo speed is unknown, defaulting to 1000 [ 1162.621899][ T6409] tipc: Resetting bearer [ 1162.679826][ T6409] tipc: Disabling bearer [ 1162.723030][ T6407] wg1 speed is unknown, defaulting to 1000 [ 1162.814061][ T6423] lo speed is unknown, defaulting to 1000 [ 1162.883905][ T6423] wg1 speed is unknown, defaulting to 1000 [ 1162.939025][ T6436] __nla_validate_parse: 8 callbacks suppressed [ 1162.939046][ T6436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8397'. [ 1162.991957][ T6436] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1163.167033][ T6440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1163.426382][ T6456] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 1163.442921][ T6456] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 1163.591059][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8404'. [ 1163.600646][ T6459] netlink: 39 bytes leftover after parsing attributes in process `syz.2.8404'. [ 1164.360171][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8411'. [ 1164.406398][ T6492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8414'. [ 1164.422893][ T6492] netlink: 'syz.2.8414': attribute type 4 has an invalid length. [ 1164.480215][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8416'. [ 1164.508795][ T6497] netlink: 'syz.4.8416': attribute type 1 has an invalid length. [ 1164.558229][ T6497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1164.576518][ T6503] bond2: (slave ip6gretap1): making interface the new active one [ 1164.591197][ T6503] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1164.630099][ T6494] tipc: Enabled bearer , priority 0 [ 1164.637755][ T6494] syzkaller0: entered promiscuous mode [ 1164.680440][ T6494] syzkaller0: entered allmulticast mode [ 1164.743549][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8416'. [ 1164.754586][ T6497] veth3: entered promiscuous mode [ 1164.792493][ T6497] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1164.834743][ T6520] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1164.863388][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1164.925865][ T6504] tipc: Resetting bearer [ 1164.971217][ T6493] tipc: Resetting bearer [ 1165.043621][ T6493] tipc: Disabling bearer [ 1165.059771][ T6531] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1165.202120][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1165.224761][ T6527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1167.780627][ T6535] syzkaller1: entered promiscuous mode [ 1167.786140][ T6535] syzkaller1: entered allmulticast mode [ 1167.840768][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8430'. [ 1167.867900][ T6524] lo speed is unknown, defaulting to 1000 [ 1167.890638][ T6524] wg1 speed is unknown, defaulting to 1000 [ 1167.964726][ T6555] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8431'. [ 1168.676983][ T6589] SET target dimension over the limit! [ 1168.769984][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1168.805828][ T6591] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1168.828729][ T6594] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1169.008080][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1169.009959][ T6600] lo speed is unknown, defaulting to 1000 [ 1169.024797][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8446'. [ 1169.086403][ T6605] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1169.097820][ T6605] bond6 (unregistering): Released all slaves [ 1169.131613][ T6600] wg1 speed is unknown, defaulting to 1000 [ 1169.251935][ T6609] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8447'. [ 1169.284336][ T6609] netlink: 'syz.1.8447': attribute type 9 has an invalid length. [ 1169.307673][ T6609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8447'. [ 1169.337067][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8447'. [ 1169.520999][ T6617] lo speed is unknown, defaulting to 1000 [ 1169.575021][ T6617] wg1 speed is unknown, defaulting to 1000 [ 1169.623931][ T6629] netlink: 'syz.0.8453': attribute type 3 has an invalid length. [ 1169.682560][ T6632] mac80211_hwsim hwsim80 ªªªªª;: renamed from wlan0 [ 1169.716976][ T6632] netlink: 'syz.0.8453': attribute type 3 has an invalid length. [ 1169.769822][ T6630] lo speed is unknown, defaulting to 1000 [ 1169.776099][ T6633] syzkaller1: entered promiscuous mode [ 1169.783118][ T6633] syzkaller1: entered allmulticast mode [ 1169.930415][ T6630] wg1 speed is unknown, defaulting to 1000 [ 1170.321502][ T6648] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8457'. [ 1170.375848][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8457'. [ 1170.546240][ T6652] tipc: Enabled bearer , priority 0 [ 1170.559720][ T6651] syzkaller0: entered promiscuous mode [ 1170.565229][ T6651] syzkaller0: entered allmulticast mode [ 1170.702491][ T6652] tipc: Resetting bearer [ 1170.728282][ T6650] tipc: Resetting bearer [ 1170.770032][ T6650] tipc: Disabling bearer [ 1171.066300][ T6658] syzkaller1: entered promiscuous mode [ 1171.088812][ T6658] syzkaller1: entered allmulticast mode [ 1171.704470][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8469'. [ 1172.383786][ T6716] lo speed is unknown, defaulting to 1000 [ 1172.405549][ T6716] wg1 speed is unknown, defaulting to 1000 [ 1172.495408][ T6724] vlan0: entered promiscuous mode [ 1172.502264][ T6724] geneve1: entered promiscuous mode [ 1172.508025][ T6724] vlan0: entered allmulticast mode [ 1172.514735][ T6724] geneve1: entered allmulticast mode [ 1172.801985][ T6739] ip6t_srh: unknown srh match flags 4000 [ 1172.818654][ T6738] ip6t_srh: unknown srh match flags 4000 [ 1172.986066][ T6752] bridge_slave_1: left allmulticast mode [ 1173.010639][ T6752] bridge_slave_1: left promiscuous mode [ 1173.075202][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.235760][ T6752] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1173.366505][ T6772] xt_TCPMSS: Only works on TCP SYN packets [ 1173.506034][ T6778] batadv0: entered promiscuous mode [ 1173.524555][ T6778] macvtap1: entered promiscuous mode [ 1173.533304][ T6778] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1173.657311][ T6781] lo speed is unknown, defaulting to 1000 [ 1173.747585][ T6781] wg1 speed is unknown, defaulting to 1000 [ 1173.827199][ T6794] netlink: 'syz.2.8494': attribute type 1 has an invalid length. [ 1173.851367][ T6792] bond0: (slave dummy0): Releasing backup interface [ 1173.895267][ T6792] bridge_slave_0: left allmulticast mode [ 1173.910388][ T6792] bridge_slave_0: left promiscuous mode [ 1173.916325][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.935295][ T6799] __nla_validate_parse: 9 callbacks suppressed [ 1173.935315][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8494'. [ 1173.936797][ T6800] netlink: 'syz.4.8493': attribute type 10 has an invalid length. [ 1173.979458][ T6792] bridge_slave_1: left allmulticast mode [ 1173.985217][ T6792] bridge_slave_1: left promiscuous mode [ 1174.000372][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.028628][ T6792] bond0: (slave bond_slave_0): Releasing backup interface [ 1174.057586][ T6792] bond0: (slave bond_slave_1): Releasing backup interface [ 1174.084085][ T6792] team0: Port device team_slave_0 removed [ 1174.115086][ T6792] team0: Port device team_slave_1 removed [ 1174.130871][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.143811][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.164890][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.172647][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.181774][ T6792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1174.258244][ T6798] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1174.270750][ T6798] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 1174.295363][ T6799] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1174.350836][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.373640][ T6800] bond0: (slave wlan1): Opening slave failed [ 1174.444791][ T6804] bond6: (slave bridge3): Enslaving as an active interface with a down link [ 1174.684846][ T6814] veth8: entered allmulticast mode [ 1175.044808][ T6840] netlink: 'syz.1.8506': attribute type 83 has an invalid length. [ 1175.294632][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8510'. [ 1175.320187][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8510'. [ 1175.624621][ T6879] tipc: Enabled bearer , priority 0 [ 1175.647947][ T6879] syzkaller0: entered promiscuous mode [ 1175.659367][ T6879] syzkaller0: entered allmulticast mode [ 1175.853941][ T6888] tipc: Resetting bearer [ 1175.885405][ T6878] tipc: Resetting bearer [ 1175.936066][ T6878] tipc: Disabling bearer [ 1176.272916][ T6901] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1176.343490][ T6905] netlink: 197008 bytes leftover after parsing attributes in process `syz.1.8522'. [ 1176.380474][ T6909] netlink: 'syz.4.8523': attribute type 1 has an invalid length. [ 1176.515102][ T6908] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1176.638376][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8529'. [ 1176.740664][ T6926] netlink: 63 bytes leftover after parsing attributes in process `syz.0.8524'. [ 1176.816154][ T6931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.880680][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8530'. [ 1177.053842][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8534'. [ 1177.086750][ T6952] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8534'. [ 1177.114389][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8533'. [ 1177.886113][ T7000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1177.893447][ T7000] IPv6: NLM_F_CREATE should be set when creating new route [ 1177.900898][ T7000] IPv6: NLM_F_CREATE should be set when creating new route [ 1177.935842][ T7000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1177.992998][ T7009] bridge3: entered allmulticast mode [ 1178.142890][ T7021] netlink: 'syz.1.8553': attribute type 10 has an invalid length. [ 1178.180151][ T7024] vlan3: entered promiscuous mode [ 1178.185225][ T7024] bond0: entered promiscuous mode [ 1178.201597][ T7021] veth0_vlan: left promiscuous mode [ 1178.208001][ T7021] veth0_vlan: entered promiscuous mode [ 1178.215553][ T7021] team0: Device veth0_vlan failed to register rx_handler [ 1178.221717][ T7028] xt_TCPMSS: Only works on TCP SYN packets [ 1178.362015][ T7018] bond0: (slave dummy0): Releasing backup interface [ 1178.427994][ T7039] netlink: 'syz.4.8559': attribute type 1 has an invalid length. [ 1178.692061][ T7049] tipc: Enabled bearer , priority 0 [ 1178.731325][ T7049] syzkaller0: entered promiscuous mode [ 1178.737830][ T7049] syzkaller0: entered allmulticast mode [ 1178.773116][ T7049] tipc: Resetting bearer [ 1178.830360][ T7045] tipc: Resetting bearer [ 1178.879451][ T7045] tipc: Disabling bearer [ 1178.935127][ T7060] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1179.009819][ T7066] bond5 (unregistering): (slave ip6gretap2): Releasing backup interface [ 1179.048947][ T7066] bond5 (unregistering): Released all slaves [ 1179.089564][ T7064] veth0_to_bond: entered promiscuous mode [ 1179.342285][ T7089] netlink: 'syz.4.8572': attribute type 1 has an invalid length. [ 1179.357763][ T7089] __nla_validate_parse: 8 callbacks suppressed [ 1179.357782][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8572'. [ 1179.377605][ T7087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8573'. [ 1179.567837][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8575'. [ 1179.695925][ T7112] netlink: 'syz.2.8577': attribute type 4 has an invalid length. [ 1179.888026][ T7126] syzkaller1: entered promiscuous mode [ 1179.894754][ T7126] syzkaller1: entered allmulticast mode [ 1180.084572][ T7135] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1180.105924][ T7137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8583'. [ 1180.147527][ T7124] lo speed is unknown, defaulting to 1000 [ 1180.161409][ T7137] pim6reg: entered allmulticast mode [ 1180.167973][ T7137] pim6reg: left allmulticast mode [ 1180.214236][ T7124] wg1 speed is unknown, defaulting to 1000 [ 1180.222208][ T7141] netlink: 'syz.4.8583': attribute type 6 has an invalid length. [ 1180.243361][ T7141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8583'. [ 1180.272195][ T7137] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8583'. [ 1180.358957][ T7145] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8586'. [ 1180.461965][ T7147] tipc: Enabled bearer , priority 0 [ 1180.535505][ T7147] syzkaller0: entered promiscuous mode [ 1180.541420][ T7147] syzkaller0: entered allmulticast mode [ 1180.547890][ T7147] tipc: Resetting bearer [ 1180.643730][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8587'. [ 1180.924653][T23681] tipc: Resetting bearer [ 1181.018364][ T7146] tipc: Resetting bearer [ 1183.328276][ T7146] tipc: Disabling bearer [ 1185.216710][ T7183] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8596'. [ 1187.144931][ T7185] lo speed is unknown, defaulting to 1000 [ 1193.577832][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.845075][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.138164][ T7192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1200.922354][ T7204] syzkaller0: entered promiscuous mode [ 1200.928138][ T7204] syzkaller0: entered allmulticast mode [ 1201.086197][ T7185] wg1 speed is unknown, defaulting to 1000 [ 1215.676323][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1215.714620][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1215.787925][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1216.057848][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1216.186030][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1219.286081][ T5842] Bluetooth: hci4: command tx timeout [ 1220.965240][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1221.117902][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1221.186625][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1221.386080][ T5840] Bluetooth: hci4: command tx timeout [ 1221.597985][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1221.875720][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1222.985325][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1223.127697][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1223.265726][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1223.454703][ T2889] Bluetooth: hci4: command tx timeout [ 1224.237738][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1224.417983][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1224.805180][ T5842] Bluetooth: hci5: command tx timeout [ 1225.517025][ T5840] Bluetooth: hci4: command tx timeout [ 1226.876708][ T5840] Bluetooth: hci5: command tx timeout [ 1226.957442][ T5840] Bluetooth: hci6: command tx timeout [ 1228.957382][ T5840] Bluetooth: hci5: command tx timeout [ 1229.033921][ T5840] Bluetooth: hci6: command tx timeout [ 1231.036586][ T5840] Bluetooth: hci5: command tx timeout [ 1231.115632][ T5840] Bluetooth: hci6: command tx timeout [ 1233.215114][ T5840] Bluetooth: hci6: command tx timeout [ 1235.675033][ T7234] lo speed is unknown, defaulting to 1000 [ 1239.528429][ T7242] lo speed is unknown, defaulting to 1000 [ 1239.676586][ T7234] wg1 speed is unknown, defaulting to 1000 [ 1240.408314][ T7240] lo speed is unknown, defaulting to 1000 [ 1240.446680][ T7242] wg1 speed is unknown, defaulting to 1000 [ 1241.206154][ T7240] wg1 speed is unknown, defaulting to 1000 [ 1243.967629][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1244.097277][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1244.185793][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1244.385163][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1244.716540][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1247.276961][ T5842] Bluetooth: hci2: command tx timeout [ 1247.418095][ T7249] lo speed is unknown, defaulting to 1000 [ 1248.396282][ T7249] wg1 speed is unknown, defaulting to 1000 [ 1249.365497][ T5842] Bluetooth: hci2: command tx timeout [ 1251.447015][ T5842] Bluetooth: hci2: command tx timeout [ 1253.308280][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1253.515169][ T5840] Bluetooth: hci2: command tx timeout [ 1253.656525][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1253.855811][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1254.406585][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1254.546688][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1256.586964][ T7810] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.868401][ T7810] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1257.116559][ T7810] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1257.594745][ T5840] Bluetooth: hci0: command tx timeout [ 1259.691790][ T5840] Bluetooth: hci0: command tx timeout [ 1261.764751][ T5840] Bluetooth: hci0: command tx timeout [ 1261.927821][ T7810] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1262.285558][ T7810] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1262.445813][ T7810] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1263.836473][ T5840] Bluetooth: hci0: command tx timeout [ 1265.394633][ T7251] lo speed is unknown, defaulting to 1000 [ 1267.465232][ T7810] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.875550][ T7810] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1268.167671][ T7810] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1269.755254][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1270.404963][ T7251] wg1 speed is unknown, defaulting to 1000 [ 1271.237142][ T7810] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.507668][ T7810] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1271.875184][ T7810] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1277.754723][ T2889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1277.836931][ T2889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1278.048097][ T2889] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1278.255121][ T7264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1278.366911][ T7264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1278.456313][ T7264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1278.646526][ T7264] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1278.685823][ T7264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1279.514678][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1279.877878][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1281.605532][ T5840] Bluetooth: hci3: command tx timeout [ 1282.243959][ T5840] Bluetooth: hci7: command tx timeout [ 1283.687637][ T5840] Bluetooth: hci3: command tx timeout [ 1284.345930][ T5840] Bluetooth: hci7: command tx timeout [ 1285.754984][ T5840] Bluetooth: hci3: command tx timeout [ 1286.386533][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1286.406806][ T7264] Bluetooth: hci7: command tx timeout [ 1286.586929][ T7264] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1286.636687][ T7264] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1286.874903][ T7264] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1287.057270][ T7264] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1287.835763][ T5840] Bluetooth: hci3: command tx timeout [ 1288.542065][ T7264] Bluetooth: hci7: command tx timeout [ 1289.995394][ T7264] Bluetooth: hci8: command tx timeout [ 1292.094410][ T7264] Bluetooth: hci8: command tx timeout [ 1292.268026][ T7810] bond5: left allmulticast mode [ 1292.368239][ T7810] bond5: left promiscuous mode [ 1292.546468][ T7810] bridge0: port 3(bond5) entered disabled state [ 1293.784976][ T7810] bridge_slave_0: left allmulticast mode [ 1293.957943][ T7810] bridge_slave_0: left promiscuous mode [ 1294.134709][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.167397][ T7264] Bluetooth: hci8: command tx timeout [ 1296.245895][ T7264] Bluetooth: hci8: command tx timeout [ 1305.336134][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1305.438336][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1305.486915][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1306.077810][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1306.297579][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1308.874802][ T5840] Bluetooth: hci1: command tx timeout [ 1310.966318][ T5840] Bluetooth: hci1: command tx timeout [ 1312.286275][ T7264] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1312.485546][ T7264] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1312.576077][ T7264] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1312.757956][ T7264] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1312.977399][ T7264] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1313.057474][ T7264] Bluetooth: hci1: command tx timeout [ 1315.117300][ T5840] Bluetooth: hci1: command tx timeout [ 1315.355788][ T5840] Bluetooth: hci9: command tx timeout [ 1317.447530][ T5840] Bluetooth: hci9: command tx timeout [ 1319.515712][ T5840] Bluetooth: hci9: command tx timeout [ 1321.596899][ T5840] Bluetooth: hci9: command tx timeout [ 1340.505681][ T7264] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1340.596618][ T7264] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1340.655445][ T7264] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1340.954144][ T7264] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1341.108336][ T7264] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1341.765362][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1341.947787][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1341.985047][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1342.587371][ T3620] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1342.725485][ T3620] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1343.517400][ T3620] Bluetooth: hci4: command 0x0406 tx timeout [ 1343.835542][ T3620] Bluetooth: hci10: command tx timeout [ 1345.235980][ T7810] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1345.923412][ T7264] Bluetooth: hci10: command tx timeout [ 1345.936017][ T7264] Bluetooth: hci11: command tx timeout [ 1346.848147][ T7810] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1347.426640][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1347.495021][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1347.664436][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1347.996212][ T5842] Bluetooth: hci10: command tx timeout [ 1348.014968][ T5842] Bluetooth: hci11: command tx timeout [ 1348.048101][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1348.327795][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1348.645947][ T3620] Bluetooth: hci5: command 0x0406 tx timeout [ 1348.667632][ T7286] Bluetooth: hci6: command 0x0406 tx timeout [ 1350.104296][ T5840] Bluetooth: hci11: command tx timeout [ 1350.117439][ T7264] Bluetooth: hci10: command tx timeout [ 1351.356821][ T5840] Bluetooth: hci12: command tx timeout [ 1352.155150][ T5840] Bluetooth: hci11: command tx timeout [ 1353.446989][ T5840] Bluetooth: hci12: command tx timeout [ 1355.543005][ T5840] Bluetooth: hci12: command tx timeout [ 1357.686228][ T5840] Bluetooth: hci12: command tx timeout [ 1365.877542][ T7264] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1366.105596][ T7264] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1366.246705][ T7264] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1366.455748][ T7264] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1366.628200][ T7264] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1367.288330][ T7810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.795422][ T7810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.126858][ T7286] Bluetooth: hci13: command tx timeout [ 1369.126909][ T7264] Bluetooth: hci2: command 0x0406 tx timeout [ 1370.097827][ T7810] bond0 (unregistering): Released all slaves [ 1371.195087][ T5840] Bluetooth: hci13: command tx timeout [ 1373.277989][ T5840] Bluetooth: hci13: command tx timeout [ 1375.357551][ T5840] Bluetooth: hci13: command tx timeout [ 1376.535965][ T7264] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1376.844681][ T7264] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1376.934020][ T7264] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1377.337312][ T7286] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1377.605112][ T7286] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1379.356891][ T7286] Bluetooth: hci0: command 0x0406 tx timeout [ 1379.737763][ T7810] bond1 (unregistering): Released all slaves [ 1380.211439][ T7264] Bluetooth: hci14: command tx timeout [ 1382.236117][ T7264] Bluetooth: hci14: command tx timeout [ 1384.317433][ T7264] Bluetooth: hci14: command tx timeout [ 1386.395961][ T7264] Bluetooth: hci14: command tx timeout [ 1388.436841][ T7810] bond2 (unregistering): Released all slaves [ 1397.707493][ T7810] bond3 (unregistering): Released all slaves [ 1398.887861][ T7810] bond4 (unregistering): Released all slaves [ 1400.906465][ T7286] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1401.076111][ T7286] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1401.156950][ T7286] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1401.496918][ T7286] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1401.747230][ T7286] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1402.584135][ T7264] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1402.676967][ T7264] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1402.787868][ T7264] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1403.105825][ T2889] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1403.454689][ T2889] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1404.415665][ T7286] Bluetooth: hci15: command tx timeout [ 1404.956029][ T2889] Bluetooth: hci7: command 0x0406 tx timeout [ 1404.975035][ T2889] Bluetooth: hci3: command 0x0406 tx timeout [ 1406.165592][ T7264] Bluetooth: hci16: command tx timeout [ 1406.477076][ T7264] Bluetooth: hci15: command tx timeout [ 1407.992854][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1408.247104][ T5840] Bluetooth: hci16: command tx timeout [ 1408.584882][ T5840] Bluetooth: hci15: command tx timeout [ 1409.117791][ T7810] bond5 (unregistering): Released all slaves [ 1410.085375][ T5840] Bluetooth: hci8: command 0x0406 tx timeout [ 1410.315079][ T5840] Bluetooth: hci16: command tx timeout [ 1410.636270][ T7264] Bluetooth: hci15: command tx timeout [ 1412.195176][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1412.346945][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1412.407487][ T5840] Bluetooth: hci16: command tx timeout [ 1412.437187][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1412.797203][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1413.035063][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1413.112138][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1415.445524][ T7264] Bluetooth: hci17: command tx timeout [ 1416.456757][ T7810] bond6 (unregistering): Released all slaves [ 1417.515908][ T7264] Bluetooth: hci17: command tx timeout [ 1419.595200][ T7264] Bluetooth: hci17: command tx timeout [ 1421.675968][ T7264] Bluetooth: hci17: command tx timeout [ 1423.477646][ T7810] bond7 (unregistering): Released all slaves [ 1428.576779][ T2889] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1428.665835][ T2889] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1428.877817][ T2889] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1429.229842][ T2889] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1429.260512][ T2889] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1429.282149][ T7810] [†’Ì: left promiscuous mode [ 1429.620106][ T7810] : left promiscuous mode [ 1430.079406][ T7810] tipc: Left network mode [ 1430.279931][ T7264] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1430.293073][ T7264] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1430.318708][ T7264] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1430.326912][ T7264] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1430.334861][ T7264] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1430.388872][ T31] INFO: task syz-executor:7234 blocked for more than 143 seconds. [ 1430.396767][ T31] Not tainted syzkaller #0 [ 1430.403350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1430.412227][ T31] task:syz-executor state:D stack:22656 pid:7234 tgid:7234 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1430.424242][ T31] Call Trace: [ 1430.427545][ T31] [ 1430.431098][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1430.435654][ T31] ? __pfx___schedule+0x10/0x10 [ 1430.441295][ T31] ? schedule+0x91/0x360 [ 1430.446171][ T31] schedule+0x165/0x360 [ 1430.450572][ T31] schedule_preempt_disabled+0x13/0x30 [ 1430.459265][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 1430.465157][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 1430.471288][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1430.477483][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 1430.482875][ T31] down_write+0x1ab/0x1f0 [ 1430.487328][ T31] ? __pfx_down_write+0x10/0x10 [ 1430.492941][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1430.498253][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1430.503578][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 1430.508935][ T31] rdma_dev_exit_net+0x8c/0x340 [ 1430.513810][ T31] ? __pfx___might_resched+0x10/0x10 [ 1430.519663][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1430.525138][ T31] ? net_generic+0x1e/0x240 [ 1430.538554][ T31] ? mutex_is_locked+0x17/0x50 [ 1430.543373][ T31] ? rtnl_is_locked+0x15/0x20 [ 1430.548064][ T31] ops_undo_list+0x49a/0x990 [ 1430.549291][ T2889] Bluetooth: hci1: command 0x0406 tx timeout [ 1430.568661][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1430.573826][ T31] ? ops_init+0x469/0x5c0 [ 1430.578179][ T31] setup_net+0x2e8/0x330 [ 1430.598583][ T31] ? __pfx_setup_net+0x10/0x10 [ 1430.603433][ T31] ? preinit_net+0x47d/0x780 [ 1430.608045][ T31] copy_net_ns+0x3e3/0x570 [ 1430.628634][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1430.633987][ T31] ? security_capable+0x7e/0x2e0 [ 1430.648648][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1430.654446][ T31] ksys_unshare+0x4c8/0x8c0 [ 1430.698962][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1430.704085][ T31] ? fput_close_sync+0x113/0x220 [ 1430.718810][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1430.724150][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1430.739880][ T31] __x64_sys_unshare+0x38/0x50 [ 1430.744706][ T31] do_syscall_64+0xfa/0xf80 [ 1430.750186][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.759581][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1430.763636][ T7302] lo speed is unknown, defaulting to 1000 [ 1430.775568][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.782005][ T31] RIP: 0033:0x7f03bdb90f47 [ 1430.786443][ T31] RSP: 002b:00007ffc5aeefcd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1430.795022][ T31] RAX: ffffffffffffffda RBX: 00007f03bdde5f40 RCX: 00007f03bdb90f47 [ 1430.803265][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1430.811376][ T31] RBP: 00007f03bdde67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1430.819940][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1430.828712][ T31] R13: 0000000000000003 R14: 00007ffc5aeeffa8 R15: 0000000000000000 [ 1430.836782][ T31] [ 1430.848730][ T31] [ 1430.848730][ T31] Showing all locks held in the system: [ 1430.856670][ T31] 1 lock held by khungtaskd/31: [ 1430.862580][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1430.878801][ T31] 2 locks held by getty/5592: [ 1430.884736][ T31] #0: [ 1430.884749][ T7300] lo speed is unknown, defaulting to 1000 [ 1430.884753][ T31] ffff8880337bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1430.904170][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1430.905876][ T7261] lo speed is unknown, defaulting to 1000 [ 1430.914482][ T31] 5 locks held by kworker/u9:3/5840: [ 1430.925734][ T31] #0: ffff88807c6e0948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1430.936840][ T31] #1: ffffc9000417fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1430.950244][ T31] #2: ffff8880295a4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1430.961424][ T31] #3: ffff8880295a40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1430.972223][ T31] #4: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1430.982118][ T31] 4 locks held by kworker/u8:26/7810: [ 1430.987497][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1430.999678][ T7308] lo speed is unknown, defaulting to 1000 [ 1431.008999][ T31] #1: ffffc90003027b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1431.009460][ T7314] lo speed is unknown, defaulting to 1000 [ 1431.019733][ T31] #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1431.037150][ T31] #3: ffffffff8df477f8 [ 1431.037947][ T7260] lo speed is unknown, defaulting to 1000 [ 1431.049506][ T31] (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1431.058956][ T31] 2 locks held by syz-executor/7234: [ 1431.064276][ T31] 1 lock held by syz-executor/7240: [ 1431.070036][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.079698][ T31] 2 locks held by syz-executor/7242: [ 1431.084971][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.094463][ T31] #1: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 [ 1431.104321][ T31] 1 lock held by syz-executor/7249: [ 1431.109942][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.119555][ T31] 1 lock held by syz-executor/7251: [ 1431.124741][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.134191][ T31] 3 locks held by syz-executor/7260: [ 1431.139656][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.149240][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.159411][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.169279][ T31] 3 locks held by syz-executor/7261: [ 1431.174637][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.184147][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.194004][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.203996][ T31] 4 locks held by kworker/u9:2/7264: [ 1431.209319][ T31] #0: ffff888043553148 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1431.220508][ T31] #1: ffffc90003007b80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1431.232903][ T31] #2: ffff888057c040c0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8f0 [ 1431.243008][ T31] #3: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x51c/0x8f0 [ 1431.253569][ T31] 5 locks held by syz-executor/7265: [ 1431.259017][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.268409][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.278289][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.288401][ T31] #3: ffff8880789fcf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1431.299404][ T31] #4: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1431.308820][ T31] 5 locks held by syz-executor/7271: [ 1431.314105][ T31] #0: ffff88802ed7cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1431.324154][ T31] #1: ffff88802ed7c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 1431.333775][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1431.343886][ T31] #3: ffff888054c78b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1431.356927][ T31] #4: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1431.368008][ T2889] Bluetooth: hci18: command tx timeout [ 1431.374750][ T31] 3 locks held by syz-executor/7280: [ 1431.380079][ T31] #0: ffff88805908cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1431.390136][ T31] #1: ffff88805908c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 1431.399778][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1431.409883][ T31] 3 locks held by syz-executor/7282: [ 1431.415184][ T31] #0: ffff888046bd4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1431.425178][ T31] #1: ffff888046bd40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 1431.435022][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1431.445285][ T31] 3 locks held by syz-executor/7284: [ 1431.450664][ T31] #0: ffff888046becec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1431.460624][ T31] #1: ffff888046bec0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 1431.470348][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1431.480518][ T31] 3 locks held by syz-executor/7289: [ 1431.485787][ T31] #0: ffff888091a6cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1431.495786][ T31] #1: ffff888091a6c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 1431.505440][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1431.515609][ T31] 3 locks held by syz-executor/7291: [ 1431.520968][ T31] #0: ffff888091a84ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1431.531051][ T31] #1: ffff888091a840c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 1431.540678][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1431.550767][ T31] 3 locks held by syz-executor/7300: [ 1431.556032][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.565486][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.575608][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.585548][ T31] 3 locks held by syz-executor/7302: [ 1431.591427][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.600965][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.610712][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.620618][ T31] 4 locks held by syz-executor/7304: [ 1431.625882][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.635356][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.645127][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.655116][ T31] #3: ffff8880789fcf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1431.665977][ T31] 3 locks held by syz-executor/7308: [ 1431.671591][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.681105][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.690943][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.700918][ T31] 3 locks held by syz-executor/7314: [ 1431.706196][ T31] #0: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1431.715822][ T31] #1: ffffffff8f05dff0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1431.725570][ T31] #2: ffffffff8f05e1b0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1431.735567][ T31] [ 1431.738100][ T31] ============================================= [ 1431.738100][ T31] [ 1431.758246][ T31] NMI backtrace for cpu 0 [ 1431.758270][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1431.758313][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1431.758333][ T31] Call Trace: [ 1431.758349][ T31] [ 1431.758365][ T31] dump_stack_lvl+0x189/0x250 [ 1431.758412][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1431.758443][ T31] ? __pfx__printk+0x10/0x10 [ 1431.758478][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1431.758497][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1431.758516][ T31] ? __pfx__printk+0x10/0x10 [ 1431.758550][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1431.758576][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1431.758596][ T31] watchdog+0xf3c/0xf80 [ 1431.758622][ T31] ? watchdog+0x1e2/0xf80 [ 1431.758648][ T31] kthread+0x711/0x8a0 [ 1431.758671][ T31] ? __pfx_watchdog+0x10/0x10 [ 1431.758691][ T31] ? __pfx_kthread+0x10/0x10 [ 1431.758712][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1431.758731][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1431.758750][ T31] ? __pfx_kthread+0x10/0x10 [ 1431.758770][ T31] ret_from_fork+0x599/0xb30 [ 1431.758795][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1431.758829][ T31] ? __switch_to_asm+0x39/0x70 [ 1431.758847][ T31] ? __switch_to_asm+0x33/0x70 [ 1431.758865][ T31] ? __pfx_kthread+0x10/0x10 [ 1431.758885][ T31] ret_from_fork_asm+0x1a/0x30 [ 1431.758921][ T31] [ 1431.898879][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1431.904407][ C1] NMI backtrace for cpu 1 [ 1431.904426][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1431.904445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1431.904456][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1431.904483][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1431.904498][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1431.904514][ C1] RAX: 6b78074d618fd600 RBX: ffffffff8197438a RCX: 6b78074d618fd600 [ 1431.904527][ C1] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 1431.904539][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 1431.904552][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 1431.904564][ C1] R13: 1ffff11003951b70 R14: 0000000000000001 R15: 0000000000000001 [ 1431.904575][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 1431.904589][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1431.904601][ C1] CR2: 0000560b11059000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1431.904616][ C1] Call Trace: [ 1431.904623][ C1] [ 1431.904629][ C1] default_idle+0x13/0x20 [ 1431.904652][ C1] default_idle_call+0x73/0xb0 [ 1431.904676][ C1] do_idle+0x1ea/0x520 [ 1431.904699][ C1] ? irqentry_exit+0x5ba/0x660 [ 1431.904721][ C1] ? __pfx_do_idle+0x10/0x10 [ 1431.904746][ C1] cpu_startup_entry+0x44/0x60 [ 1431.904763][ C1] start_secondary+0x101/0x110 [ 1431.904785][ C1] common_startup_64+0x13e/0x147 [ 1431.904812][ C1] [ 1432.072068][ T7265] lo speed is unknown, defaulting to 1000 [ 1432.282297][ T7304] lo speed is unknown, defaulting to 1000 [ 1432.310979][ T7314] wg1 speed is unknown, defaulting to 1000 [ 1432.321584][ T7308] wg1 speed is unknown, defaulting to 1000 [ 1432.332578][ T7302] wg1 speed is unknown, defaulting to 1000 [ 1432.348148][ T7300] wg1 speed is unknown, defaulting to 1000 [ 1432.374333][ T7260] wg1 speed is unknown, defaulting to 1000 [ 1432.390658][ T7261] wg1 speed is unknown, defaulting to 1000 [ 1432.398325][ T7265] wg1 speed is unknown, defaulting to 1000 [ 1432.886017][ T7304] wg1 speed is unknown, defaulting to 1000 [ 1433.429137][ T5840] Bluetooth: hci18: command tx timeout [ 1434.148830][ T5840] Bluetooth: hci19: command tx timeout [ 1435.522628][ T5840] Bluetooth: hci18: command tx timeout [ 1435.775549][ T7810] hsr_slave_0: left promiscuous mode [ 1435.784033][ T7810] hsr_slave_1: left promiscuous mode [ 1435.791053][ T7810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.799785][ T7810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.828403][ T7810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.838595][ T7810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.846606][ T7810] batman_adv: batadv0: Removing interface: vlan2 [ 1435.871366][ T7810] team_slave_0: left promiscuous mode [ 1435.876980][ T7810] team_slave_1: left promiscuous mode [ 1435.909580][ T7810] veth1_macvtap: left promiscuous mode [ 1435.919675][ T7810] veth0_macvtap: left promiscuous mode [ 1435.925320][ T7810] veth1_vlan: left promiscuous mode [ 1435.930939][ T7810] veth0_vlan: left promiscuous mode [ 1436.240123][ T5840] Bluetooth: hci19: command tx timeout [ 1436.493217][ T7810] team0 (unregistering): Port device team_slave_1 removed [ 1436.541029][ T7810] team0 (unregistering): Port device team_slave_0 removed [ 1436.565449][T23678] smc: removing ib device !yz! [ 1437.588751][ T5840] Bluetooth: hci18: command tx timeout [ 1438.309717][ T5840] Bluetooth: hci19: command tx timeout [ 1439.561012][ T7810] IPVS: stop unused estimator thread 0... [ 1439.643787][ T7810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.657750][ T7810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 40797 - 0 [ 1439.668686][ T7810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1439.681300][ T7810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1439.761446][ T7810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.771977][ T7810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 40797 - 0 [ 1439.784042][ T7810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1439.796565][ T7810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1439.858850][ T7810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.869774][ T7810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 40797 - 0 [ 1439.880284][ T7810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1439.892128][ T7810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1440.006095][ T7810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.016627][ T7810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 40797 - 0 [ 1440.027300][ T7810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1440.038566][ T7810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1440.319603][ T7810] bond4 (unregistering): (slave gretap3): Releasing active interface [ 1440.370782][ T7810] bond3 (unregistering): (slave geneve5): Releasing active interface [ 1440.379235][ T7810] geneve5 (unregistering): left promiscuous mode