last executing test programs: 7m10.516194526s ago: executing program 2 (id=2460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "7a1d79", 0x0, 0x89, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1}}}}}}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @read_stored_link_key={{0xc0d, 0x7}, {@any, 0xe}}}, 0xb) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7m9.800015132s ago: executing program 2 (id=2468): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (rerun: 64) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x1, 0x1, "528035", "b5ea47", 0x1, 0xd, 0x6, @any, 0x0, 0xff, 0x0, 0xf5, 0x8, 0xf9, 0x3}}}, 0x1d) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r1, 0x0, 0x0) (async) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000300) bind$unix(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) unshare(0x22020400) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003eff00000000017c0014040042800c0005800621060090390000100002000000000000f175fa0e0ba2c49f35d95f2a6b41a18a50b0f8c18a010d3fd2cd8cf000aadd763de41e900783119f84f9b3b913d9dfd0d91f12a3e9a10571bb587b85962eb45aa2e17eff89f9aebb701d0d3c710388f27e29aaac"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 7m8.69343782s ago: executing program 3 (id=2473): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 7m8.186582756s ago: executing program 3 (id=2476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) 7m7.720211046s ago: executing program 3 (id=2480): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000001c0)="ba7b3ccd46fc6753e5c26f7a61c05b396621eef8aeaceb84460c1a7dc34eb8", 0x1f}], 0x1}}], 0x1, 0x2004000c) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20000001) r5 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000002700), &(0x7f0000002740)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 7m6.74719284s ago: executing program 3 (id=2483): socket$kcm(0xa, 0x3, 0x87) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) close(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000020c0)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r0, 0xfff) r3 = accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x15a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socket$packet(0x11, 0x2, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfbb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newtaction={0x90, 0x30, 0xffffffffffffffff, 0x70bd29, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x100, 0x82, 0x7, 0x71c}, {0x4, 0xc, 0xa, 0x7}, {0xa, 0xfb, 0x27, 0x101}, {0x7, 0x1, 0xc, 0x1}, {0x5, 0x5, 0x7, 0x3}, {0x1, 0x80, 0x4}]}]}, {0x4}, {0x25}, {0xc}}}]}]}, 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 7m6.046023472s ago: executing program 1 (id=2486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28000000) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="c90100f40000"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28f83314", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 7m4.401866333s ago: executing program 3 (id=2492): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02", 0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r4, &(0x7f00000008c0)=[{0x0}], 0x1, 0x3, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {0xd, 0xfff2}, {0x6, 0x10}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) close(0x3) 7m3.971728716s ago: executing program 1 (id=2494): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000)) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 7m3.859518719s ago: executing program 2 (id=2495): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x5e, @private=0xa010102, 0x1ffe, 0x200000001, 'none\x00', 0x9, 0x821, 0x40000000}, 0x2c) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="97"], 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x8040) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r7, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r9], 0x20, 0x6044}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0) 7m3.685692602s ago: executing program 3 (id=2498): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 7m3.641758205s ago: executing program 1 (id=2499): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=@updpolicy={0xc8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x4}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x6}}]}, 0xc8}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008200c00a50a000008000bf7ff0000000600010005000000"], 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xb, &(0x7f0000000280)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000001c0)=0x4, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x3f6, 0x5, 0x2006}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0x7, 0x7f}, 0x48) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57", 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 7m3.038144034s ago: executing program 4 (id=2502): r0 = socket$netlink(0x10, 0x3, 0x7) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xfffffffe, 0x0, {0x30, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@private2={0xfc, 0x2, '\x00', 0x4}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r4 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) r5 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000180)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x1}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @generic={0x1, "aed85ad5e42edae87bb8ac495c8c"}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='virt_wifi0\x00', 0x800, 0x40, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x29) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500250001000000050029000000000008000a00", @ANYRES32=r2, @ANYBLOB="abc0e04f522d4ab8e19b1ac979b9cca6261cf80ddbdaf0fb2bce4ba3f7f6e72c827d1aa81659d9fbd8f3882ca58e30577a6d0ca77fff6e54ce2f2fc447313b31b9d8669a528c7d03cf3282607533921f88bd6db85d4d1c1666b4a28e67ed9940199610d93159ef11572de08713400b59c267797b15aced17f63d7454a70b5ac2132838d99f704ca29c238ed7ae84b405d695eb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 7m2.871092293s ago: executing program 0 (id=2503): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x5d5d, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x158, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 7m2.599782686s ago: executing program 4 (id=2504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x18) 7m2.534686535s ago: executing program 0 (id=2505): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="150a00000000000061118c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1dc, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5ce}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3800000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffce7b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x158}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8000}, 0x400c014) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0xc000, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7m2.141963571s ago: executing program 2 (id=2506): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) close(r0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000d0000000000000"], 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bc25, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe068, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1ff}]}}}]}, 0x44}, 0x1, 0x2000000000000000, 0x0, 0x20006044}, 0x4080) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) 7m1.963003787s ago: executing program 4 (id=2507): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006002000800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @mcast1, 0x3}}, 0x24) listen(r0, 0xfffffffb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) close(0x3) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/90, 0x5a, 0x20002000, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[], 0x101c}, 0x1, 0x0, 0x0, 0x4004004}, 0x40001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x80001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r5, 0x0, 0x9}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) 7m1.910414435s ago: executing program 0 (id=2508): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @func_proto={0x0, 0x300}]}}, &(0x7f0000001b80)=""/4090, 0x32, 0xffa, 0xa}, 0x28) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002800)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010800000000000000006a0000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a0104000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100", @ANYRES32], 0xd8}}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611865000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x2, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2e}, 0x94) 7m1.817515393s ago: executing program 2 (id=2509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="03032dbd7000000000002a"], 0x14}, 0x1, 0x0, 0x0, 0x6844}, 0x40800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x2000}) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) shutdown(r5, 0x1) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x102}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x40002}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 7m1.597014872s ago: executing program 0 (id=2510): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, r1, 0xffffffffffffffff, 0x7, 0xd, 0xf, "aa783d4dd59702aeeaca567736cd1d33e5f90beaf71acbf5319c98545483a2262c434d39c22c1fc3446be7b40b7d5b1600775571ac6f72d20c7b8948aa1202", 0x2d}, 0x60) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x9, 0x67, {{0x21, 0x4, 0x3, 0x1a, 0x84, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @multicast2, {[@rr={0x7, 0x13, 0x6b, [@empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @loopback]}, @end, @timestamp_addr={0x44, 0x2c, 0x2e, 0x1, 0x0, [{@remote, 0x7595}, {@private=0xa010102, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x40}, {@multicast1, 0x4}]}, @noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd8c}, {@local, 0x9}, {@local, 0x3}, {@loopback}]}, @noop, @rr={0x7, 0x7, 0x4e, [@private=0xa010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000002c0)={0x5e4, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "590cbd5ec8cfeda7a02f3d0fc99d070a8a911a956264c716a48f66246bdec31da472e85b0015e35aa7782cfa20244956be8f0bd5e924be27f1b048ed6b51c27e3aa303f073d8b1deaade1130814c19135f9029c41edf932440824cf995cb32588b49b20e2ab4215d240fe4b0c0197cbaf10fec295e3884a39c624dfb0159ca1920e153c4f39df4a7628e028d44f7aadd71989357cd90f92e1d9b65bbbc2163bcf8b1b5417b822d0b1ba1a888a247604d166f28e67268cefde11226343a74b81b618cea14936ee64a74ee6bd6055da6439d5bb81da523fb0abe79351eb62aa1c2be7f213ba1c9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}]}, {0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, 'blkio.bfq.io_merged\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "60c8b1e18f85bda2488ef01807f2424ed4e1556a19011ab7808f3d6b5bfcd53e809f805a21ffa273fa8cb904b4706a9be108d7cfde98afb34dc58986a5b2fbd25d4dfddb212205b7e5ab4c4f39b95f50a3503816510d426ea2a6114e6b01586421b0b5695e6391244aee415cced082334daadbc6f73e17ac8b281fb914808c77091607f418301a57ce70dbb411d1"}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "7ab26f62cd5c84ebf6850eac4bfd49c18ea79cc9532005d02faafd76109136a6f5fa2369385b20eebe7009f7750abb936cd6b3bb8144fa217a4bb895c08e930fd8440a5b5745c81f918c8a471c791e2e32e7f366652ba4b2a8a17628ab20fd19c0275c6390199c906ebe55979df3b4caa76b618d982c3b793bf056d515289064991477a54af544aa9521a4d11ec17b62bcbf8c106afbfe4eca3e652c17cb8aa856d3f65dd7e17a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "fc226c4111b1e5b7689d34faf67c0a47928f8a58201fbf42c5fb4305f594d5b64a8216fa8f3c9bad708d66de0574b7db40f2ea"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x84, 0x5, "ea1a7792ad97131d9324146130963d979314db9afc525c0de0dbf7f76e14f3688ca5022f6a985ec00d15b3a28e031b9a141f2baf9e365eaf8e17d40afff58811823f757688232dd5185af972298806b9f5ab9bcbab834938fd0da5e017266df900fa94cdacfb7a509cf0dad96d53dd8038a1f706a43b826858c9dd7fc20d2827"}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "107bdcd1ece37e4a4b9f47b1e7ede9eabf1a38d402c0003cc811b3e547e4b1e68d7073db028b11626910bee2213d56c0231bc0c22a53a6785e967d96f7ae60fb3d05534e1105cf58a42a5ba5733da8c93b1740457f1a7fc37fb41f52d583a8914b626e93241b665d060f4b564588ee72f7647a1b4cf1e887dda7e7b168f9f79f048ae19889227332ed6e3437e00119534a0eeff072123c52b8424f79c028e9360bbc5e832c300dbf2236d62e4b147dd69ab6242fc6690bed66acbf5e0d6c0b6c07e0e2dbc2afd0f633"}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "9da3ba4c2171016741b92110c31b777fbd558259d6b8698792d8dc5bce5618b9a28189fce8ed249afcfa7a498bc2fc"}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x24000014}, 0x20040014) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000940), &(0x7f0000000980)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000009c0)={0x0, 0x4}, &(0x7f0000000a00)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x741}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf1b7}]}, 0x68}}, 0x20000880) recvmsg$qrtr(r0, &(0x7f0000000d40)={&(0x7f0000000bc0), 0xc, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/153, 0x99}], 0x1, &(0x7f0000000d00), 0x0, 0x140}, 0x38, 0x10141) r9 = accept$packet(r0, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000dc0)=0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000e00)={0x3, 'veth1_vlan\x00', {}, 0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000e40)={0x7, 'vcan0\x00', {0xce}, 0x4}) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000e80)) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x18, 0x3f9, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x40080) write$nci(0xffffffffffffffff, &(0x7f0000000fc0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x2, 0x1}, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000001000), &(0x7f0000001040)=0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x9c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_MARK_MASK={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x101}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc854}, 0x20000885) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000001200)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000001240)=0x28) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001280)=@assoc_value={r6, 0x8}, 0x8) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000012c0)=0x3, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000013c0)={@llc={0x1a, 0x338, 0xff, 0xd, 0x3, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {&(0x7f0000001300)=""/91, 0x5b}, &(0x7f0000001380), 0x1a}, 0xa0) getpeername$unix(r0, &(0x7f0000001480), &(0x7f0000001500)=0x6e) bind$nfc_llcp(r0, &(0x7f0000001540)={0x27, r1, 0x0, 0x1, 0x7, 0x71, "1850e7976fdfbdcfd082dcf720e3cc6a70cd43182b3708560e20fa38c7aa19e7823b8865c9f0effc0d2effc073b71a9381afe495f00d5d99e4c27520b050a3", 0x3e}, 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000015c0)={'vxcan1\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001640)={'filter\x00', 0x7, 0x4, 0x430, 0x218, 0x0, 0x0, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001600), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @private=0xa010102, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4a3abb11, 0x6, 0xe, 0x1, 0x0, "d375b0a4f2f271401e02e1dbd9b57b54b748fcccb4802d0d8853aac3c8b44bdc8dd98d69ffc97c167763db0d5917da6c1caaed51648feed84c6eaae45edc6b7a"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) 7m1.582824614s ago: executing program 1 (id=2511): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) socket$nl_generic(0x10, 0x3, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0], &(0x7f00000004c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001700)=ANY=[@ANYBLOB="26000000030101009418baf61c7d2f43009c2d73d5d5"], 0x14}, 0x1, 0x0, 0x0, 0x2400c014}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000840)=@newtaction={0x12c, 0x32, 0x12f, 0x0, 0x25dfcbff, {}, [{0x118, 0x1, [@m_police={0x114, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xe6, 0x6, "a9972b1cad205dfdcf3b732a937f35035d8fa3d33dd0010643fa53529e4e1dca24e24bc88770456931161cea72e2e85b6a7767b6a2b183ec8c4241e0891b2a37e78658a272fde5811ae980aeb9e7d7747fcfe95c0485716650f987f7f872c3a555fcc98e5c419013b3f335a535ce2a3185353aa04b90c26416482b4a951ee626c5696b6a657e66eaae953aa25e59f4921abcefcc3660979b88de906d43434516732d6fbcdd8268fc559a2c16d8c4b43d521619496323f1d2250fc501ef3a8799da1c17d06aa8fd4d11d27e4a83bf294a54758222ca0538c7c0146580bf96533b36a7"}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="4c000000000b010400000000000000000700000608744d815800000408000340000000000b000100706f6c6963650000120001002e2f6367726f75702f73797a310000000800034000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2404c0c9}, 0xc0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001500)=[@cswp={0x58, 0x114, 0x7, {{0xd11, 0x3e9f}, &(0x7f0000001380)=0xffffffff00000001, &(0x7f00000013c0), 0x5, 0x11, 0x7, 0x4c7bc785, 0xa, 0x7fffffff}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x7}, {&(0x7f0000000300)=""/78, 0x4e}, &(0x7f0000000280)=[{&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000780)=""/148, 0x94}], 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x500, 0x3}, &(0x7f0000001480)=0x3, &(0x7f00000014c0)=0x3, 0x7ffffffffffffffc, 0x9, 0x8001, 0x7fffffff, 0x2}}], 0xf8, 0x1}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0xffffd000) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x806, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 7m1.394988577s ago: executing program 4 (id=2512): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r3, &(0x7f0000000280)="31bb6f71", 0x4, 0x6040004, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @local}, 0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40810) 7m1.293675456s ago: executing program 0 (id=2513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) (async) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4066, 0xfe2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) (async) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4066, 0xfe2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r8, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "8bd7aabfbca931"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "da3e6f9821e3ce838c406281b7"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) (async) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r8, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "8bd7aabfbca931"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "da3e6f9821e3ce838c406281b7"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="0500000000000000000002000000", @ANYRES32=r9, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="0500000000000000000002000000", @ANYRES32=r9, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86edabf0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509debbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000080)={0x401, 0x6}, 0x8) close(r11) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 7m1.096303356s ago: executing program 4 (id=2514): r0 = socket$packet(0x11, 0x2, 0x300) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x300, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x22020600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x9f7, 0x4) getsockopt$inet_opts(r3, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000140)=0x50) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="578d2cbd7000fddbdf250200000014000180080003007f0000010600010002"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000200)=0x4004a, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/15, 0xf}, 0x9}], 0x1, 0x10022, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r8) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x71, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600070400028808000a00e4d486c3921c97f605fa7ab530137bfbed07ee8f8d9b151d0245bb56bdd6bb12c106a23b51e59ce044861d7568215b41fc8edb313a979a6b9992bef43d62ea371f2b34deb48391cbe6090229a0e702785f6b5c6668072384c126be0a70f133430860af87fb17a3e689cfb70bd831d68f915f2b7d89b114989624554d29a1c19d306db81d74b32058e061abe70cfc97a566876eb04459a43b6bea161bb3650c0a30abba10", @ANYRES32=r10, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f000077a000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r11, 0x4e676000) 7m0.913807082s ago: executing program 1 (id=2515): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="8b6055a611a329a9314a69f4bb2ee762a69f08c87591bee49c5e04f384bf2f047f85923c712f8f22e367802fd5701e6a36f4b59368d94f08f944e70cfc7c92a783ca6b546b7bb22df6415764ab7398f0777ba489f524871a8768fe314da9adb1aafe7505445d99db767c223905f59f4b400fcb72d88ae8313b8f90ff9e7f12c862ec7af21b4ee2c81f47a5f8af6fa186b850a53c091739466c31e27603ef153cd0d76d9e07699cceff2e2cca7da0100ba35af566f13c634169f7", 0xba}], 0x1}, 0x800) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'pimreg0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9969fc782be8"}]}, 0x34}, 0x1, 0x0, 0x0, 0xc098}, 0x80) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}, 0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e20, 0x6, @local, 0x3}}, 0x200, 0x40}, 0x90) r9 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000000640)=""/108, &(0x7f00000006c0)=0x6c) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000000f00)={0x2f, 0x4, {0x9, @struct={0x3, 0xa345}, r11, 0x3, 0x80, 0x3, 0x7ff, 0xa0, 0xa8, @usage=0x7, 0x7, 0x0, [0x6, 0x10, 0xfff, 0xffffffffffffa06b, 0x2, 0x4]}, {0xffffffff9c10f784, @struct={0x9, 0xffff}, 0x0, 0x4, 0x15, 0x0, 0x1, 0x40, 0x15, @struct={0x2, 0x78a}, 0x3000, 0x5, [0x6, 0xf, 0x7fff, 0xf, 0x1, 0x9]}, {0x7, @usage=0x7, r12, 0x7, 0x101, 0xfffffffffffffff7, 0x2, 0xd7, 0x84, @struct={0x810, 0x8}, 0x6, 0x484, [0xfffffffffffffffd, 0xd9fa, 0x6, 0x5, 0xf8a4, 0xd000000000]}, {0x2, 0x1, 0x85}}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4c001) sendmsg$sock(r2, &(0x7f0000001a80)={&(0x7f0000001400)=@caif=@dgm={0x25, 0xffff, 0x4}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001480)="0c06ae3bacb51cacd285328d7b3a3098846ea11b8e802ec39ba5ea1d3ea2d62aaa888f2335150de2a1c4e19a87736bb532ddf445098322adba801cb7c569bcea08453ed085abac0268043684653432d6eb6cc7730596049493178d6964b777848ad5b0270d1b655d62bfd10bcb16e63f8f35532894e640de948fd3da8dd094a3556c732803ac3f0738133def4d6f5f5c76cb", 0x92}, {&(0x7f0000001540)="ee5c2dd0d421db7e101eb6f72cd5280503a5f1bd0e798957723720f6056bddda8f762518ec89ca4d1ec9d9d80013d59f7e7bef6527780e804672a30a88a222d69a79b2a329ac1f44cf02d1b324c460a9b0755af357af6781fcf9879fd28da3e94e047570b6cf98262181aec44629c2c234b618b7d9ccf21c3d8f67c8f9673896057345a36afb2bb94a5803f8b86318", 0x8f}, {&(0x7f0000001600)="69e9894759050de2cbf0c85a27bada6f7054fb2821a40c1edc6cc3c66c3a53b66ee422af57c56d435e80b6c8fd2ae3d13a0717f31534cc35b444168a784d48171e36c659bd172c33c94d88a6912490fdf7f31dccbe0d9eb47cd377fd757386036939b87894dd8370c4502c6ee5655a2066b7fd52e787b53c5c32f9893b9c0ba55728538f10fbd4f4dbd6097ec9b3379cfffe22a288716c161b7dbc459dd9c243a1951b47f4424ff5db942be0e0cdf1c4bc81f62594d054001e", 0xb9}, {&(0x7f00000016c0)="c2e36ee6db091577b524da0bb43dcb1e048d9180224d0c332b990bfff2915c381a7f911d5fc2ebed0243222cbcd9a46048d44ed48846d8a1c06cf7cdf2c18377d4164b068e785e95c10165", 0x4b}, {&(0x7f0000001740)="3d84fff66de400e726a32e218674e757d764ea5e2a80b9b95136995586fe9e0bf8cc2008f0c4b63869afe68ecd0050652ef174b3478fa3c039a46e4f6465ba23e53118f87b0bb2c420e3985fee57de52dcabdca632739fbbd5b853327954e75ac7bc07f99633bdea55703dfe996e790a8efcf390115c886aed82b81cb98b27c8f96c8ed1a1a0396eb6bdf3c772597eb186318be51894febfd02d6e9f57aba550d1e4da841aa1d73069f6d5c4d6f24a470754e48c0df9fdcfbfe6730430b077e9505ddbb0", 0xc4}, {&(0x7f0000001840)="b02bf0f6c5429102e112f3230732833e30c6968b9ed02bf5f8fd3912a9f5b6354c4bb63b200dfc04bced7a00c74f3e39afbfe72106de9bd77b63a64e6e8ffeaab8247eda910437209a889d2eb06cc7d758968d252a1a0e14b9e47a4e39639ff07089ea5cbad635c2e534ba8e54bf097b90055bcc241d35c84acc678879268d320dbb655eb9a7685e7386fe5c62b2e5f43b0c7ae8a542ba47a6ac0366b716a3c89be3f65d605155c0aa2134f65aaf0518e099ad35ab42", 0xb6}, {&(0x7f0000001900)="d28c27d7624b649f5e03b684516ed03d5371b9d6e8bfd6ffc874d520fb3ca6075817561ce30f881b8b8e3b0d54d47e", 0x2f}, {&(0x7f0000001940)="58618783da90a9fed459359a4377b6edb93fad73b0fa22a76d29408ce370728bf9e75597c40a3f3bebcbba1e670c5fdca65aa3328160d24f07f7b5eba8b13d9b13d5ed964c51", 0x46}], 0x8, &(0x7f0000001a40)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}, 0x4000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x44800) sendmsg$inet6(r7, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001bc0)="97629037d05c1ad17d4be4", 0xb}, {&(0x7f0000001c00)="b976413de71f663e818f803b03ab935d1d21463f6f67050c9e44cc521bea0c91b56f6b6a35e29a83f7e260d4c378d98e82b335be888f82cb5dd4dfc1b5613b2e46d95540ef94456e3001e6fc6ec7aea5d274aa7eca9c36de9e7cdac327b46754dc", 0x61}, {&(0x7f0000001c80)="9a878e067bc733035e2439d0ee3debc2bfeea2f1528e41ee5fa35b3c7996181f2d76c5c7b5476905ce7c60309883825a55eb8adb7f164858e7277ee68d9da2d6c9580b1b32af26a0e5469f9a87dfdb955e436ebedc7a1861f75b20059e", 0x5d}, {&(0x7f0000001d00)="ef968b0ead9299ac3c7beb4ffce14644de1c62f60f3b53cda55fc98a5af210100dd22a6e2a0e7e0f6bfb47b6b638263661911f0c63a80565b77e2ee3f69959d0c62f2740e6052e37221a21d596730596fcf19af644dc5ca4593874dd2a84a9c066fc9913c703a286fa84487f18b4cbce1d1ad7d69071ca06167dbf7f3b8619ecd52b581eae543140120b22e6507bd0b0eff5ac2507dd36923e66b6dd775e9b82e01601d63ca1325f", 0xa8}, {&(0x7f0000001dc0)="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", 0x1000}], 0x5, &(0x7f0000002e40)=[@dstopts_2292={{0x98, 0x29, 0x4, {0x2f, 0xf, '\x00', [@pad1, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0xa}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x3}, @calipso={0x7, 0x58, {0x3, 0x14, 0x80, 0x1ff, [0x526, 0xffffffffffffffac, 0x8000, 0x5, 0xffffffffffff8001, 0x0, 0x5, 0x7, 0x416, 0x0]}}, @jumbo={0xc2, 0x4, 0xf}]}}}], 0x98}, 0x8000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x64, r5, 0x71c, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x385}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000003080)=[@sack_perm, @timestamp, @sack_perm, @mss={0x2, 0x8}, @mss={0x2, 0xd9}, @sack_perm, @mss={0x2, 0x7fffffff}], 0x7) 7m0.268443313s ago: executing program 2 (id=2516): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') unshare(0x6a040000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x8, 0x3, 0x0) r2 = socket(0x8, 0x0, 0x8000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x13, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73b}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x8000, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r2, @ANYBLOB="010028bd7000fcdbdf2502000000080009000200000047dabaab436c44b9f28432c0ecfb335ba89da3454ae8817e826708ea302bb306c6410890995d93fcefc98e9c143d29ae2762"], 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) (async) close(r4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000050000000200000004000006040000000300000003b9b742870f00000001000000000060010b000000080000000000000009000000000000000300000d00000000020000000000000004000000000000000d00000000000000"], &(0x7f0000000700)=""/191, 0x6d, 0xbf, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x10}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 6m53.066688455s ago: executing program 1 (id=2517): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r3, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x40}]}]}, 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000300), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r5 = accept4$ax25(r0, 0x0, 0x0, 0x80000) accept$ax25(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1}, 0x0) 6m50.406885217s ago: executing program 0 (id=2518): socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x6e020000) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$qrtr(r4, 0x0, 0x0, 0x2) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000009280)={0x28, 0x12, 0x503dabdc2aa92767, 0x70bd08, 0x25dfdbff, "", [@typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x10, 0x11a, 0x0, 0x1, [@nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40849c4}, 0x8014) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x200003}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x400002}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x8000042, 0x2000002}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000100)='virt_wifi0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6m50.007825996s ago: executing program 4 (id=2519): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x809, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49811}, [@IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000, 0x6}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f0000ffffffa1000007000000", @ANYRES32=r6, @ANYBLOB='@\x00\''], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 6m47.094701179s ago: executing program 32 (id=2498): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 6m40.719781048s ago: executing program 33 (id=2516): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') unshare(0x6a040000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x8, 0x3, 0x0) r2 = socket(0x8, 0x0, 0x8000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x13, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73b}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x8000, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r2, @ANYBLOB="010028bd7000fcdbdf2502000000080009000200000047dabaab436c44b9f28432c0ecfb335ba89da3454ae8817e826708ea302bb306c6410890995d93fcefc98e9c143d29ae2762"], 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) (async) close(r4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000050000000200000004000006040000000300000003b9b742870f00000001000000000060010b000000080000000000000009000000000000000300000d00000000020000000000000004000000000000000d00000000000000"], &(0x7f0000000700)=""/191, 0x6d, 0xbf, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x10}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 6m35.171900503s ago: executing program 34 (id=2517): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r3, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x40}]}]}, 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000300), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r5 = accept4$ax25(r0, 0x0, 0x0, 0x80000) accept$ax25(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1}, 0x0) 6m32.168678125s ago: executing program 35 (id=2518): socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x6e020000) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$qrtr(r4, 0x0, 0x0, 0x2) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000009280)={0x28, 0x12, 0x503dabdc2aa92767, 0x70bd08, 0x25dfdbff, "", [@typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x10, 0x11a, 0x0, 0x1, [@nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40849c4}, 0x8014) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x200003}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x400002}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x8000042, 0x2000002}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000100)='virt_wifi0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6m29.388814085s ago: executing program 36 (id=2519): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x809, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49811}, [@IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000, 0x6}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f0000ffffffa1000007000000", @ANYRES32=r6, @ANYBLOB='@\x00\''], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 3m37.379513445s ago: executing program 5 (id=2520): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="09024000000000000001010000000400050008000800ac1414bb08000600ffffffff05000300840000001400090000000000000000000000ffffac1414aa08000b00654d189ddff849c7cd28093a39b9e5fd8ec9cbe0f02b9282d6f572ff4873c16b1e6f8ca894", @ANYRES32=0x0, @ANYBLOB="080006006401010214000900fe80000000000000000000000000003904000500"], 0x6c}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f6000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000e0000000300dc27604100006ee70700000018bc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003380)=""/255, 0xff}, {0x0}], 0x2}, 0x1f00) 3m21.212866463s ago: executing program 6 (id=2521): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4, 0xfffffff7, 0x3002, 0xffffffffffffffff, 0x9e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x1000000000003}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500762a3f8cdc0f71cb4c6a000000000000f1005cd9fc0000d007000000c1e493b76e40e41586a507e26af104c473f94507028b6e00000000000001000000000000", @ANYRES32, @ANYRES16=r0, @ANYRESHEX=r3], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xc3, &(0x7f0000000b00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f00000009c0)=ANY=[], 0x114}, {0x0}], 0x2}, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xfc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m23.783504574s ago: executing program 9 (id=2524): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000400)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syzkaller1\x00', 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x30, r2, 0x87d55000) (async) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) (async) accept4$bt_l2cap(r3, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80000) 0s ago: executing program 9 (id=2524): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000400)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syzkaller1\x00', 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x30, r2, 0x87d55000) (async) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) (async) accept4$bt_l2cap(r3, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80000) kernel console output (not intermixed with test programs): gth. [ 233.897336][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 233.903370][ T9285] netlink: 128 bytes leftover after parsing attributes in process `syz.1.840'. [ 233.996133][ T9282] bridge3: port 1(veth7) entered blocking state [ 234.004400][ T9282] bridge3: port 1(veth7) entered disabled state [ 234.016680][ T9282] veth7: entered allmulticast mode [ 234.041791][ T9282] veth7: entered promiscuous mode [ 234.057855][ T9296] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 234.070001][ T9285] netlink: 'syz.1.840': attribute type 5 has an invalid length. [ 234.077940][ T9285] netlink: 'syz.1.840': attribute type 6 has an invalid length. [ 234.089405][ T9285] netlink: 3 bytes leftover after parsing attributes in process `syz.1.840'. [ 234.099731][ T9283] bridge3: port 2(veth0_to_bond) entered blocking state [ 234.106917][ T9283] bridge3: port 2(veth0_to_bond) entered disabled state [ 234.114847][ T9283] veth0_to_bond: entered allmulticast mode [ 234.127497][ T9283] veth0_to_bond: entered promiscuous mode [ 234.255911][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 234.497799][ T9316] netlink: 32 bytes leftover after parsing attributes in process `syz.2.847'. [ 234.566313][ T9310] ip6t_srh: unknown srh match flags 4000 [ 234.590179][ T9309] netlink: 'syz.1.845': attribute type 58 has an invalid length. [ 234.598580][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 234.670049][ T9321] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 235.387720][ T9336] netlink: 'syz.1.854': attribute type 4 has an invalid length. [ 235.403264][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.854'. [ 235.523179][ T9345] xt_connbytes: Forcing CT accounting to be enabled [ 235.600389][ T12] tipc: Subscription rejected, illegal request [ 235.660194][ T9349] team0: No ports can be present during mode change [ 235.809690][ T5950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.066257][ T9356] lo speed is unknown, defaulting to 1000 [ 236.156475][ T9361] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 236.167550][ T5950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.200060][ T9361] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 236.240341][ T9362] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 236.412731][ T9370] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 236.598468][ T6092] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.951261][ T9388] wg1: entered promiscuous mode [ 236.956174][ T9388] wg1: entered allmulticast mode [ 237.641021][ T1153] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.650016][ T1153] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.768984][ T5950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.211051][ T9425] netlink: 'syz.2.878': attribute type 29 has an invalid length. [ 238.277710][ T9431] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 238.411946][ T9434] ip6gretap1: entered promiscuous mode [ 238.417618][ T9434] ip6gretap1: entered allmulticast mode [ 238.427411][ T9434] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 238.446610][ T9434] __nla_validate_parse: 2 callbacks suppressed [ 238.446627][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 238.476379][ T9435] lo speed is unknown, defaulting to 1000 [ 238.774687][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.883'. [ 238.836926][ T9451] netlink: 584 bytes leftover after parsing attributes in process `syz.4.883'. [ 239.136479][ T9244] Set syz1 is full, maxelem 65536 reached [ 239.270074][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.884'. [ 239.539143][ T9462] bond2: option arp_validate: invalid value (18446744073491447809) [ 239.566735][ T9476] netlink: 176 bytes leftover after parsing attributes in process `syz.1.889'. [ 239.584793][ T9462] bond2 (unregistering): Released all slaves [ 239.635393][ T9480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.890'. [ 239.857677][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 240.043011][ T9488] lo speed is unknown, defaulting to 1000 [ 240.724254][ T9535] netlink: 252 bytes leftover after parsing attributes in process `syz.3.904'. [ 240.939156][ T9543] netlink: 256 bytes leftover after parsing attributes in process `syz.3.907'. [ 240.954860][ T9543] 0: reclassify loop, rule prio 0, protocol 800 [ 240.979366][ T9545] No such timeout policy "syz0" [ 241.219472][ T9552] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 241.276195][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 241.290033][ T9552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.310932][ T9558] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 241.457671][ T9552] bond2 (unregistering): Released all slaves [ 241.478212][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 241.494209][ T9569] x_tables: duplicate underflow at hook 3 [ 241.521299][ T9558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.547724][ T9562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.555011][ T9562] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.567056][ T9562] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 241.603078][ T9563] veth7: entered promiscuous mode [ 241.625879][ T9563] bond2: (slave veth7): Enslaving as an active interface with a down link [ 242.055181][ T9593] FAULT_INJECTION: forcing a failure. [ 242.055181][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 242.078310][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.0.919 Not tainted syzkaller #0 PREEMPT(full) [ 242.078340][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.078355][ T9593] Call Trace: [ 242.078369][ T9593] [ 242.078377][ T9593] dump_stack_lvl+0xe8/0x150 [ 242.078415][ T9593] should_fail_ex+0x414/0x560 [ 242.078447][ T9593] _copy_from_user+0x2d/0xb0 [ 242.078472][ T9593] ___sys_sendmsg+0x158/0x2a0 [ 242.078498][ T9593] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.078556][ T9593] ? __fget_files+0x2a/0x420 [ 242.078579][ T9593] ? __fget_files+0x3a0/0x420 [ 242.078613][ T9593] __x64_sys_sendmsg+0x19b/0x260 [ 242.078637][ T9593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.078668][ T9593] ? __pfx_ksys_write+0x10/0x10 [ 242.078697][ T9593] do_syscall_64+0xec/0xf80 [ 242.078715][ T9593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.078731][ T9593] ? trace_irq_disable+0x37/0x100 [ 242.078754][ T9593] ? clear_bhb_loop+0x60/0xb0 [ 242.078777][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.078795][ T9593] RIP: 0033:0x7f88e4f8f749 [ 242.078817][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.078833][ T9593] RSP: 002b:00007f88e5da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.078857][ T9593] RAX: ffffffffffffffda RBX: 00007f88e51e5fa0 RCX: 00007f88e4f8f749 [ 242.078871][ T9593] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 242.078883][ T9593] RBP: 00007f88e5da6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.078894][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.078905][ T9593] R13: 00007f88e51e6038 R14: 00007f88e51e5fa0 R15: 00007ffd46bb89e8 [ 242.078932][ T9593] [ 242.088623][ T9596] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 242.490969][ T9615] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 242.506024][ T9613] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 243.302785][ T9625] vxcan0: entered allmulticast mode [ 243.383202][ T9633] lo speed is unknown, defaulting to 1000 [ 243.486639][ T9651] lo speed is unknown, defaulting to 1000 [ 243.750967][ T9666] __nla_validate_parse: 10 callbacks suppressed [ 243.750985][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 243.793586][ T9666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.937'. [ 243.824569][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 243.861456][ T9666] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 243.898667][ T9672] netlink: 148 bytes leftover after parsing attributes in process `syz.3.939'. [ 243.920387][ T9666] team0: Device veth0_macvtap failed to register rx_handler [ 244.138616][ T9684] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 244.242582][ T9678] tipc: Enabling of bearer rejected, failed to enable media [ 244.547228][ T9703] netlink: 'syz.1.947': attribute type 9 has an invalid length. [ 244.567731][ T9703] netlink: 160444 bytes leftover after parsing attributes in process `syz.1.947'. [ 244.861250][ T9721] x_tables: duplicate underflow at hook 2 [ 244.894525][ T9721] batadv1: entered promiscuous mode [ 244.910499][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 245.175962][ T9740] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 245.454538][ T9760] x_tables: unsorted entry at hook 2 [ 245.584704][ T9763] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.190201][ T9800] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 246.341069][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 246.356807][ T9811] bridge0: port 1(macvtap1) entered blocking state [ 246.374552][ T9811] bridge0: port 1(macvtap1) entered disabled state [ 246.389485][ T9811] macvtap1: entered allmulticast mode [ 246.407715][ T9812] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 246.415065][ T9811] bridge0: entered allmulticast mode [ 246.424604][ T9811] macvtap1: left allmulticast mode [ 246.430260][ T9811] bridge0: left allmulticast mode [ 247.023675][ T9835] openvswitch: netlink: EtherType 50a is less than min 600 [ 247.573520][ T9868] netlink: 808 bytes leftover after parsing attributes in process `syz.4.992'. [ 247.599836][ T9871] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 247.603614][ T9869] No such timeout policy "syz1" [ 247.622954][ T9868] netlink: 'syz.4.992': attribute type 39 has an invalid length. [ 247.689361][ T9871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.751070][ T9868] veth0_macvtap: left promiscuous mode [ 247.871449][ T9875] bond4: (slave veth9): Enslaving as an active interface with a down link [ 247.994967][ T9875] netlink: 104 bytes leftover after parsing attributes in process `syz.0.994'. [ 248.066609][ T9884] lo speed is unknown, defaulting to 1000 [ 248.143727][ T9894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.999'. [ 248.614879][ T9913] lo speed is unknown, defaulting to 1000 [ 248.772726][ T9923] IPv6: Can't replace route, no match found [ 248.820274][ T9929] tipc: Enabling of bearer rejected, failed to enable media [ 249.238155][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.253621][ T9951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1013'. [ 249.335082][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 249.379274][ T9946] bond2: entered promiscuous mode [ 249.384998][ T9946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.511883][ T9965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1015'. [ 249.529670][ T9965] x_tables: duplicate underflow at hook 1 [ 249.530688][ T9966] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1016'. [ 249.695117][ T9970] netlink: 'syz.4.1018': attribute type 5 has an invalid length. [ 249.734915][ T9968] lo speed is unknown, defaulting to 1000 [ 249.892081][ T9976] lo speed is unknown, defaulting to 1000 [ 249.909275][ T9975] lo speed is unknown, defaulting to 1000 [ 250.020175][ T9984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1020'. [ 250.246278][ T9968] IPVS: You probably need to specify IP address on multicast interface. [ 250.267141][ T9968] IPVS: Error connecting to the multicast addr [ 250.340097][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1024'. [ 250.904146][T10009] lo speed is unknown, defaulting to 1000 [ 251.072860][T10014] netlink: 'syz.0.1029': attribute type 13 has an invalid length. [ 251.091416][T10014] netlink: 'syz.0.1029': attribute type 17 has an invalid length. [ 254.253743][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.271015][T10014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.304820][ T5842] lo speed is unknown, defaulting to 1000 [ 254.310916][ T5842] syz1: Port: 1 Link ACTIVE [ 254.389796][T10016] lo speed is unknown, defaulting to 1000 [ 254.464376][T10057] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1042'. [ 254.701805][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1046'. [ 254.734517][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 254.804030][T10078] netlink: 'syz.3.1049': attribute type 29 has an invalid length. [ 254.868362][ T1153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.884543][ T1153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.926874][ T1153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.955578][ T1153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.233959][T10106] lo speed is unknown, defaulting to 1000 [ 255.350111][T10116] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1058'. [ 255.359468][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 255.404885][T10122] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1060'. [ 255.468022][T10120] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 255.507239][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 255.509630][T10120] vlan0: entered allmulticast mode [ 255.555064][T10120] veth1: entered allmulticast mode [ 255.657374][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.929956][T10129] lo speed is unknown, defaulting to 1000 [ 256.232847][T10152] syzkaller0: entered promiscuous mode [ 256.264593][T10152] syzkaller0: entered allmulticast mode [ 256.435966][ T5151] block nbd1: Receive control failed (result -32) [ 256.516357][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 256.584837][T10167] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 256.748292][T10172] gretap1: entered allmulticast mode [ 256.795277][T10172] bond5: (slave gretap1): making interface the new active one [ 256.858866][T10172] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 257.140501][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 257.487176][T10197] lo speed is unknown, defaulting to 1000 [ 257.521811][T10204] lo speed is unknown, defaulting to 1000 [ 258.066971][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 258.326276][T10204] lo speed is unknown, defaulting to 1000 [ 258.424491][T10241] No such timeout policy "syz0" [ 258.843086][T10248] lo speed is unknown, defaulting to 1000 [ 259.415415][T10266] lo speed is unknown, defaulting to 1000 [ 259.695697][T10278] __nla_validate_parse: 1 callbacks suppressed [ 259.695715][T10278] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1103'. [ 259.742427][T10278] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 259.773467][T10278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1103'. [ 259.836419][T10278] lo speed is unknown, defaulting to 1000 [ 259.917234][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 260.107723][T10289] hsr_slave_1 (unregistering): left promiscuous mode [ 260.525983][T10302] lo speed is unknown, defaulting to 1000 [ 260.595387][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 260.804360][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1111'. [ 261.314100][T10329] bridge0: port 3(bond0) entered disabled state [ 261.344445][T10329] wg1: left promiscuous mode [ 261.350399][T10329] geneve2: left promiscuous mode [ 261.359775][T10329] macsec1: left promiscuous mode [ 261.883037][T10370] veth1_macvtap: left promiscuous mode [ 261.896433][T10370] macsec0: entered allmulticast mode [ 261.904602][T10374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1125'. [ 261.921381][T10375] veth1_macvtap: entered promiscuous mode [ 261.936677][T10375] veth1_macvtap: entered allmulticast mode [ 261.947795][T10375] macsec0: left allmulticast mode [ 261.953050][T10375] veth1_macvtap: left allmulticast mode [ 262.035366][T10366] gtp0: entered promiscuous mode [ 262.043092][T10366] gtp0: entered allmulticast mode [ 262.060951][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 262.070692][T10382] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 262.073219][T10383] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 262.118669][T10382] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 262.178599][T10391] sctp: [Deprecated]: syz.2.1129 (pid 10391) Use of int in max_burst socket option deprecated. [ 262.178599][T10391] Use struct sctp_assoc_value instead [ 262.226266][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 262.847507][T10434] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.881603][T10438] tipc: Enabled bearer , priority 0 [ 262.889330][T10439] tipc: Enabling of bearer rejected, already enabled [ 262.906007][T10436] tipc: Disabling bearer [ 262.936910][T10434] netlink: 'syz.2.1140': attribute type 2 has an invalid length. [ 262.974617][T10434] : entered promiscuous mode [ 262.991804][T10444] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.041931][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'. [ 263.064321][T10447] batadv1: entered promiscuous mode [ 263.236973][T10451] lo speed is unknown, defaulting to 1000 [ 263.456345][T10447] lo speed is unknown, defaulting to 1000 [ 263.943210][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 263.998571][T10472] netlink: 'syz.1.1149': attribute type 5 has an invalid length. [ 264.080747][T10472] geneve3: entered promiscuous mode [ 264.102558][T10472] geneve3: entered allmulticast mode [ 264.117600][ T67] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 264.139508][ T67] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 264.172065][T10484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.193143][T10487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.221561][ T67] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 264.254918][ T67] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 264.335758][T10495] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 264.350811][T10493] tipc: Enabling of bearer rejected, failed to enable media [ 264.424045][T10495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.460472][T10495] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 264.481100][T10501] bond6: (slave gretap2): making interface the new active one [ 264.490149][T10501] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 264.598164][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.605978][T10513] netlink: 'syz.2.1157': attribute type 10 has an invalid length. [ 264.635165][T10506] lo speed is unknown, defaulting to 1000 [ 264.657778][T10513] team0: Failed to send options change via netlink (err -105) [ 264.678300][T10513] team0: Port device geneve0 added [ 264.684042][ T1105] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.711980][ T1105] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.752729][ T1105] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.814942][T10514] lo speed is unknown, defaulting to 1000 [ 264.820920][ T1105] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.862400][T10521] __nla_validate_parse: 5 callbacks suppressed [ 264.862418][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1161'. [ 265.024826][T10521] vlan0: entered promiscuous mode [ 265.262708][T10526] lo speed is unknown, defaulting to 1000 [ 265.270101][T10541] netlink: 'syz.1.1164': attribute type 11 has an invalid length. [ 265.281434][T10541] netlink: 'syz.1.1164': attribute type 11 has an invalid length. [ 265.310600][T10541] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1164'. [ 265.654641][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 265.781168][T10551] bond0: entered promiscuous mode [ 265.805790][T10551] batadv0: entered promiscuous mode [ 265.815506][T10557] netlink: 'syz.2.1168': attribute type 3 has an invalid length. [ 265.823555][T10557] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 265.832123][T10557] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1168'. [ 265.850329][T10551] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 265.877073][T10551] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 265.906556][T10558] pimreg: entered allmulticast mode [ 266.027327][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 266.097028][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 266.414284][T10586] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1174'. [ 266.515840][T10589] bridge0: port 1(macvtap0) entered blocking state [ 266.523467][T10589] bridge0: port 1(macvtap0) entered disabled state [ 266.533554][T10589] macvtap0: entered allmulticast mode [ 266.568416][T10589] bridge0: entered allmulticast mode [ 266.583260][T10589] macvtap0: left allmulticast mode [ 266.589104][T10589] bridge0: left allmulticast mode [ 266.644166][T10592] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1176'. [ 266.855240][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 266.892144][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 266.917629][T10608] openvswitch: netlink: IP tunnel dst address not specified [ 267.000944][T10608] bond4: (slave bond_slave_1): Device is not bonding slave [ 267.062179][T10608] bond4: option active_slave: invalid value (bond_slave_1) [ 267.091429][T10608] bond4 (unregistering): Released all slaves [ 267.777212][T10639] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 268.659613][T10672] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 268.713724][T10672] bond5: entered promiscuous mode [ 268.743034][T10672] bond5: entered allmulticast mode [ 268.749648][T10672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.830629][T10680] macvlan2: entered promiscuous mode [ 268.835983][T10680] macvlan2: entered allmulticast mode [ 268.859914][T10680] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.980175][T10683] tipc: Enabled bearer , priority 0 [ 269.022287][T10686] syzkaller0: entered promiscuous mode [ 269.040330][T10686] syzkaller0: entered allmulticast mode [ 269.151533][T10682] tipc: Resetting bearer [ 269.177800][T10681] tipc: Resetting bearer [ 269.218744][T10681] tipc: Disabling bearer [ 269.591477][T10712] hsr_slave_0: left promiscuous mode [ 269.619038][T10712] hsr_slave_1: left promiscuous mode [ 269.754989][T10717] lo speed is unknown, defaulting to 1000 [ 269.922621][T10727] netlink: zone id is out of range [ 269.945137][T10727] netlink: zone id is out of range [ 269.968171][T10727] netlink: zone id is out of range [ 269.973326][T10727] netlink: zone id is out of range [ 270.015628][T10727] netlink: zone id is out of range [ 270.025786][T10727] netlink: zone id is out of range [ 270.046099][T10727] netlink: zone id is out of range [ 270.057857][T10727] netlink: zone id is out of range [ 270.089026][T10727] netlink: zone id is out of range [ 270.098710][T10734] __nla_validate_parse: 13 callbacks suppressed [ 270.098727][T10734] netlink: 4748 bytes leftover after parsing attributes in process `syz.3.1216'. [ 270.157911][T10739] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.1217'. [ 270.240551][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 270.702780][T10761] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 270.715364][T10761] bond6 (unregistering): Released all slaves [ 270.754781][T10764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.920095][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 271.028258][T10781] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 271.038524][T10776] Can't find ip_set type hash:n [ 271.088985][T10781] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 271.123263][T10781] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1231'. [ 271.333756][T10793] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 271.419488][T10793] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.506103][T10800] bond6: (slave geneve0): making interface the new active one [ 271.540731][T10800] bond6: (slave geneve0): Enslaving as an active interface with an up link [ 271.551810][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 271.597624][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 271.624050][T10814] netlink: 'syz.3.1239': attribute type 12 has an invalid length. [ 271.679213][T10793] bond6: entered promiscuous mode [ 271.698145][T10793] geneve0: entered promiscuous mode [ 271.986513][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 272.025118][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1244'. [ 272.054617][T10838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1245'. [ 272.448126][T10857] net_ratelimit: 35 callbacks suppressed [ 272.448143][T10857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.493905][T10857] vlan0: entered promiscuous mode [ 272.613406][T10863] netlink: 'syz.2.1253': attribute type 28 has an invalid length. [ 272.629019][T10863] netlink: 'syz.2.1253': attribute type 3 has an invalid length. [ 272.941617][T10879] vlan3: entered promiscuous mode [ 272.967712][T10879] vlan3: entered allmulticast mode [ 272.982443][T10879] vlan0: entered allmulticast mode [ 272.991096][T10885] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 272.999372][T10879] veth0_vlan: entered allmulticast mode [ 273.091098][T10880] lo speed is unknown, defaulting to 1000 [ 273.123269][T10888] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.136699][T10888] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 273.166403][T10885] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.174578][T10892] batman_adv: batadv0: Adding interface: dummy0 [ 273.184700][T10892] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.213698][T10892] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 273.232973][T10895] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 273.274551][T10885] bond7: (slave bridge3): Enslaving as an active interface with a down link [ 273.312229][T10895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.350579][T10895] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 273.380793][T10888] macvlan2: entered promiscuous mode [ 273.386562][T10888] macvlan2: entered allmulticast mode [ 274.004770][T10911] lo speed is unknown, defaulting to 1000 [ 274.052578][T10938] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 274.071951][T10934] bond4: entered promiscuous mode [ 274.077031][T10934] bridge5: entered promiscuous mode [ 274.091839][T10934] bond4: entered allmulticast mode [ 274.097728][T10934] bridge5: entered allmulticast mode [ 274.186170][T10924] lo speed is unknown, defaulting to 1000 [ 274.559924][T10968] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 274.614376][T10968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.717164][T10968] bond5: (slave ip6gretap1): making interface the new active one [ 274.767831][T10968] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 274.822907][T10974] veth7: entered promiscuous mode [ 274.866223][T10974] bond5: (slave veth7): Enslaving as an active interface with a down link [ 274.909948][T10978] erspan0: entered allmulticast mode [ 274.954508][T10978] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 274.982942][T10968] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 275.280907][T10998] __nla_validate_parse: 9 callbacks suppressed [ 275.280927][T10998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1283'. [ 275.348630][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 275.429278][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 275.458784][T11008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1285'. [ 275.882766][T11004] syzkaller0: entered promiscuous mode [ 275.908460][T11004] syzkaller0: entered allmulticast mode [ 276.173188][T11037] batadv1: entered promiscuous mode [ 276.234669][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 277.140453][T11055] Bluetooth: MGMT ver 1.23 [ 278.136882][T11067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.174113][T11071] bridge0: port 1(macvtap0) entered blocking state [ 278.181359][T11071] bridge0: port 1(macvtap0) entered disabled state [ 278.188280][T11071] macvtap0: entered allmulticast mode [ 278.193803][T11071] bridge0: entered allmulticast mode [ 278.201491][T11071] macvtap0: left allmulticast mode [ 278.206635][T11071] bridge0: left allmulticast mode [ 278.279154][T11083] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.1302'. [ 278.324527][T11069] bridge4: entered allmulticast mode [ 278.384952][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1297'. [ 278.488292][T11093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 278.524387][T11099] IPv6: Can't replace route, no match found [ 279.081398][T11112] netlink: 'syz.0.1309': attribute type 9 has an invalid length. [ 279.151833][T11112] netlink: 'syz.0.1309': attribute type 7 has an invalid length. [ 279.188859][T11112] netlink: 'syz.0.1309': attribute type 8 has an invalid length. [ 279.218892][T11118] netlink: 'syz.0.1309': attribute type 6 has an invalid length. [ 279.273512][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 279.311618][T11123] lo speed is unknown, defaulting to 1000 [ 279.390997][T11134] netlink: 'syz.1.1315': attribute type 7 has an invalid length. [ 279.401051][T11134] netlink: 'syz.1.1315': attribute type 8 has an invalid length. [ 279.584427][T11142] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 280.541437][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 280.626061][T11195] lo speed is unknown, defaulting to 1000 [ 280.787831][T11204] lo speed is unknown, defaulting to 1000 [ 280.920503][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 280.979692][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1332'. [ 281.005800][T11211] lo speed is unknown, defaulting to 1000 [ 281.018023][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 281.060225][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 282.085250][T11255] netlink: 'syz.3.1340': attribute type 61 has an invalid length. [ 282.159084][T11266] dvmrp0: entered allmulticast mode [ 282.194512][T11267] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 3, id = 0 [ 282.392093][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 282.401487][T11276] bond0: left allmulticast mode [ 282.406378][T11276] bond_slave_0: left allmulticast mode [ 282.415589][T11276] bond_slave_1: left allmulticast mode [ 282.424823][T11276] dummy0: left allmulticast mode [ 282.442122][T11274] block nbd2: server does not support multiple connections per device. [ 282.442790][T11276] ip6gretap1: left allmulticast mode [ 282.463102][T11274] block nbd2: shutting down sockets [ 282.469691][T11276] bridge0: port 3(bond0) entered disabled state [ 282.492890][T11276] bridge_slave_1: left allmulticast mode [ 282.499085][T11276] bridge_slave_1: left promiscuous mode [ 282.505024][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.521607][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 282.541440][T11276] bridge_slave_0: left allmulticast mode [ 282.555204][T11276] bridge_slave_0: left promiscuous mode [ 282.575542][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.589655][T11273] block nbd2: server does not support multiple connections per device. [ 282.606781][T11273] block nbd2: shutting down sockets [ 282.674714][T11287] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.1350'. [ 282.974092][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 283.155463][T11295] lo speed is unknown, defaulting to 1000 [ 283.611103][T11317] tipc: Enabling of bearer rejected, failed to enable media [ 283.828380][T11327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1359'. [ 284.145140][T11353] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20002 [ 284.347317][T11363] openvswitch: netlink: IP tunnel dst address not specified [ 284.397340][T11363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.082448][T11418] tipc: Started in network mode [ 285.091016][T11418] tipc: Node identity 46e8297456c5, cluster identity 4711 [ 285.106334][T11418] tipc: Enabled bearer , priority 0 [ 285.118488][T11418] syzkaller0: entered promiscuous mode [ 285.127457][T11418] syzkaller0: entered allmulticast mode [ 285.155525][T11427] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 285.179750][T11418] tipc: Resetting bearer [ 285.203783][T11417] tipc: Resetting bearer [ 285.240108][T11417] tipc: Disabling bearer [ 285.276534][T11432] tipc: Enabled bearer , priority 0 [ 285.286302][T11429] syzkaller0: entered promiscuous mode [ 285.306743][T11429] syzkaller0: entered allmulticast mode [ 285.422968][T11428] tipc: Resetting bearer [ 285.441228][T11428] tipc: Disabling bearer [ 285.947910][T11463] netlink: 'syz.4.1394': attribute type 13 has an invalid length. [ 285.958870][T11463] netlink: 'syz.4.1394': attribute type 17 has an invalid length. [ 286.071956][T11463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.188760][T11481] __nla_validate_parse: 4 callbacks suppressed [ 286.188780][T11481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1399'. [ 286.229261][T11481] unsupported nlmsg_type 40 [ 286.391688][T11488] bond8: option all_slaves_active: invalid value (13) [ 286.431385][T11488] bond8 (unregistering): Released all slaves [ 286.470795][T11499] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1403'. [ 286.962959][T11526] rdma_rxe: rxe_newlink: failed to add bond0 [ 287.315862][T11550] IPVS: length: 54 != 8 [ 287.794462][T11568] syzkaller0: entered promiscuous mode [ 287.817016][T11568] syzkaller0: entered allmulticast mode [ 288.053437][T11574] lo speed is unknown, defaulting to 1000 [ 288.355372][T11584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.089306][T11613] lo speed is unknown, defaulting to 1000 [ 289.783284][T11638] netlink: 'syz.1.1437': attribute type 13 has an invalid length. [ 289.805769][T11642] vlan0: entered allmulticast mode [ 289.817928][T11642] bridge_slave_0: entered allmulticast mode [ 289.819453][T11638] netlink: 'syz.1.1437': attribute type 17 has an invalid length. [ 289.877527][T11638] tunl0: left promiscuous mode [ 290.109679][T11638] batman_adv: batadv0: Interface activated: dummy0 [ 290.124238][T11654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1440'. [ 290.138234][T11638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.160970][T11654] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1440'. [ 290.201097][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 290.210827][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 290.352549][T11659] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 290.427000][T11665] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1444'. [ 290.459312][T11667] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 290.853376][T11691] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 290.954982][T11693] netlink: 1327 bytes leftover after parsing attributes in process `syz.0.1452'. [ 291.129677][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1453'. [ 291.217062][T11702] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1454'. [ 291.372633][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 291.399135][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 291.782569][T11706] xt_hashlimit: size too large, truncated to 1048576 [ 291.799302][T11706] xt_hashlimit: max too large, truncated to 1048576 [ 291.850952][T11715] xt_TCPMSS: Only works on TCP SYN packets [ 291.869300][T11706] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 293.024058][T11755] tipc: Enabling of bearer rejected, failed to enable media [ 293.391253][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 293.408144][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.436347][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 293.449982][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 293.478652][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 293.521902][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 293.751562][T11796] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.781059][T11792] lo speed is unknown, defaulting to 1000 [ 293.810765][T11797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 293.882986][T11796] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.087089][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 294.399568][T11796] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.496450][T11796] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.681480][ T3723] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.697828][ T3723] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.724136][ T3723] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.745074][ T3723] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.869070][T11841] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 294.988518][T11841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.022780][T11854] netlink: 'syz.3.1490': attribute type 21 has an invalid length. [ 295.036007][T11856] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 295.047749][T11854] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1490'. [ 295.065849][T11849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.073099][T11849] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 295.084717][T11849] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 295.103578][T11862] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 295.139023][T11866] netlink: Conntrack attr has 4 unknown bytes [ 295.149162][T11852] veth13: entered promiscuous mode [ 295.169837][T11852] bond7: (slave veth13): Enslaving as an active interface with a down link [ 295.224548][T11856] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.250599][T11856] bond0: (slave team0): Enslaving as an active interface with an up link [ 295.278666][T11854] netlink: 'syz.3.1490': attribute type 5 has an invalid length. [ 295.287795][T11854] netlink: 'syz.3.1490': attribute type 6 has an invalid length. [ 295.354626][T11857] syzkaller0: entered promiscuous mode [ 295.365732][T11857] syzkaller0: entered allmulticast mode [ 295.471129][T11879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.950046][T11904] netlink: 'syz.4.1501': attribute type 3 has an invalid length. [ 296.987000][T11908] siw: device registration error -23 [ 297.005001][T11904] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 297.260261][T11924] IPv6: addrconf: prefix option has invalid lifetime [ 297.597377][T11946] bond5 (unregistering): Released all slaves [ 297.631758][T11955] netlink: 'syz.4.1516': attribute type 39 has an invalid length. [ 297.700402][T11958] xt_connbytes: Forcing CT accounting to be enabled [ 297.777218][T11955] veth1_to_hsr (unregistering): left allmulticast mode [ 298.113729][ T50] tipc: Subscription rejected, illegal request [ 298.168945][T11981] netlink: 'syz.4.1523': attribute type 2 has an invalid length. [ 298.227837][T11981] __nla_validate_parse: 4 callbacks suppressed [ 298.227855][T11981] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1523'. [ 298.271984][T11981] netlink: 'syz.4.1523': attribute type 9 has an invalid length. [ 298.292162][T11981] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1523'. [ 298.358263][T11981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1523'. [ 298.426626][T11981] bond8: entered promiscuous mode [ 298.448768][T11981] bond8: entered allmulticast mode [ 298.454446][T11981] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.552208][T11994] lo speed is unknown, defaulting to 1000 [ 298.573701][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.628836][T11992] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 298.977688][T12011] lo speed is unknown, defaulting to 1000 [ 299.043266][T12008] lo speed is unknown, defaulting to 1000 [ 299.189093][T12016] lo speed is unknown, defaulting to 1000 [ 299.242804][ T30] audit: type=1800 audit(1767310095.995:3): pid=12019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1532" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1517 res=0 errno=0 [ 299.377378][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1536'. [ 299.391152][T12030] netem: change failed [ 299.608422][ T1134] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 299.964641][T12016] lo speed is unknown, defaulting to 1000 [ 300.050526][T12067] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 300.588449][T12094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1550'. [ 301.008904][T12112] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1553'. [ 301.216698][T12123] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1557'. [ 301.236438][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 301.269485][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 301.366411][T12128] tipc: New replicast peer: 255.255.255.255 [ 301.385967][T12128] tipc: Enabled bearer , priority 10 [ 301.582704][T12142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1562'. [ 302.453765][T12200] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 302.510375][ T5950] tipc: Node number set to 1861145492 [ 302.860145][T12234] lo speed is unknown, defaulting to 1000 [ 303.605200][T12244] __nla_validate_parse: 17 callbacks suppressed [ 303.605221][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 303.621589][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 303.669211][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 303.689819][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 303.909138][T12259] syzkaller0: entered promiscuous mode [ 303.920181][T12259] syzkaller0: entered allmulticast mode [ 304.451714][T12267] wg1: left promiscuous mode [ 304.456548][T12267] wg1: left allmulticast mode [ 304.766946][T12267] geneve2: left promiscuous mode [ 304.816874][T12267] veth5: left promiscuous mode [ 304.863469][T12267] veth7: left promiscuous mode [ 304.899473][T12267] gretap1: left allmulticast mode [ 305.014070][T12267] veth13: left promiscuous mode [ 305.021547][T12267] syzkaller0: left promiscuous mode [ 305.026924][T12267] syzkaller0: left allmulticast mode [ 305.034624][ T792] lo speed is unknown, defaulting to 1000 [ 305.040822][ T792] syz1: Port: 1 Link DOWN [ 305.073822][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.084513][ T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.095687][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.104346][ T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.116627][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 305.153626][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.188165][ T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.233982][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.248206][ T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.452313][T12326] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 305.480899][T12326] netlink: 'syz.3.1607': attribute type 11 has an invalid length. [ 305.508074][T12326] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1607'. [ 305.529114][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1607'. [ 305.681328][T12347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1612'. [ 305.696690][T12347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1612'. [ 305.754749][T12349] NFSD: Failed to start, no listeners configured. [ 306.422176][T12395] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 306.440313][T12395] bridge6: entered allmulticast mode [ 306.506299][T12395] IPv6: Can't replace route, no match found [ 306.538211][T12399] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.1624'. [ 306.711062][T12395] syzkaller0: entered promiscuous mode [ 306.716735][T12395] syzkaller0: entered allmulticast mode [ 308.256943][T12437] bond8: entered promiscuous mode [ 308.266823][T12437] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.335725][T12446] tipc: Enabled bearer , priority 0 [ 308.433378][T12447] bond6: entered promiscuous mode [ 308.447566][T12456] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 308.458248][T12447] bond6: entered allmulticast mode [ 308.463974][T12447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.471748][T12444] syzkaller0: entered promiscuous mode [ 308.479723][T12444] syzkaller0: entered allmulticast mode [ 308.538117][T12444] tipc: Resetting bearer [ 308.612303][T12444] tipc: Disabling bearer [ 308.871137][T12476] __nla_validate_parse: 4 callbacks suppressed [ 308.871156][T12476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1643'. [ 308.884775][T12482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1644'. [ 308.898916][T12482] x_tables: duplicate entry at hook 2 [ 308.923062][ T5151] Bluetooth: hci4: link tx timeout [ 308.923884][T12478] macvlan2: entered promiscuous mode [ 308.929777][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.951469][ T5151] Bluetooth: hci4: link tx timeout [ 308.956660][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.965972][ T5151] Bluetooth: hci4: link tx timeout [ 308.971373][ T5151] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.981236][T12478] bond0: entered promiscuous mode [ 308.988244][T12478] macvlan2: entered allmulticast mode [ 308.993638][T12478] bond0: entered allmulticast mode [ 309.001015][T12478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.021065][T12478] bond0: left allmulticast mode [ 309.030434][T12478] bond0: left promiscuous mode [ 309.227315][T12496] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1649'. [ 309.258662][T12498] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1650'. [ 309.274357][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 309.411655][T12503] lo speed is unknown, defaulting to 1000 [ 309.516763][T12512] syzkaller0: entered promiscuous mode [ 309.529770][T12512] syzkaller0: entered allmulticast mode [ 309.588371][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 309.787142][T12521] netlink: 'syz.3.1656': attribute type 11 has an invalid length. [ 309.824767][T12527] IPVS: length: 65 != 8 [ 309.846811][T12526] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1657'. [ 309.873406][ T5970] IPVS: starting estimator thread 0... [ 309.891346][T12526] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1657'. [ 309.956862][T12527] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.970985][T12529] IPVS: using max 29 ests per chain, 69600 per kthread [ 310.087805][T12544] sch_tbf: burst 4398 is lower than device lo mtu (61420) ! [ 310.231636][T12550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1665'. [ 310.370848][T12544] batman_adv: batadv0: Interface deactivated: dummy0 [ 310.701820][ T1153] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.728234][ T1153] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.747384][ T1153] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 310.828169][ T1153] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.837106][ T1153] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.869344][ T1153] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 310.912201][ T1153] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.928192][ T1153] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.968642][ T1153] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 310.994946][ T1153] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.007869][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 311.016857][ T1153] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.029743][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 311.093990][ T1153] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 311.601118][T12615] syzkaller0: entered promiscuous mode [ 311.633958][T12615] syzkaller0: entered allmulticast mode [ 311.641588][ T3648] syzkaller0: tun_net_xmit 48 [ 311.659222][T12629] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 311.676585][T12615] syzkaller0: tun_net_xmit 1280 [ 311.720511][T12627] bond9: option arp_validate: invalid value (18446744073491447809) [ 311.730950][T12627] bond9 (unregistering): Released all slaves [ 311.756678][T12631] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 312.256924][T12661] netlink: 'syz.1.1686': attribute type 8 has an invalid length. [ 313.361800][T12669] netlink: 'syz.0.1690': attribute type 15 has an invalid length. [ 314.111441][T12726] __nla_validate_parse: 5 callbacks suppressed [ 314.111458][T12726] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1708'. [ 314.134504][T12726] block nbd0: NBD_DISCONNECT [ 314.139957][T12726] block nbd0: Send disconnect failed -110 [ 314.147305][T12726] block nbd0: shutting down sockets [ 314.428950][T12748] sch_tbf: peakrate 65535 is lower than or equals to rate 15348107221646557341 ! [ 314.450244][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 314.460549][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 314.483083][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 314.498235][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 314.509054][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 314.527818][T12745] lo speed is unknown, defaulting to 1000 [ 314.527930][T12748] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.543813][T12748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'. [ 314.755464][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 314.961655][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1723'. [ 315.035696][T12779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.056442][T12790] macsec0: entered allmulticast mode [ 315.086171][T12792] veth1_macvtap: entered allmulticast mode [ 315.105963][T12792] macsec0: left allmulticast mode [ 315.111654][T12792] veth1_macvtap: left allmulticast mode [ 315.201971][T12788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.222256][T12790] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 315.231884][T12805] macsec0: entered allmulticast mode [ 315.369501][T12814] tipc: Enabling of bearer rejected, failed to enable media [ 315.389526][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 315.507565][T12820] syzkaller0: entered promiscuous mode [ 315.517853][T12820] syzkaller0: entered allmulticast mode [ 315.771023][T12832] lo speed is unknown, defaulting to 1000 [ 316.285495][T12849] netlink: 'syz.3.1740': attribute type 9 has an invalid length. [ 316.344613][T12849] netlink: 'syz.3.1740': attribute type 6 has an invalid length. [ 317.049020][T12874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.083959][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.193130][T12886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.245367][T12889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.389886][T12893] netlink: 'syz.4.1751': attribute type 9 has an invalid length. [ 317.397669][T12893] netlink: 'syz.4.1751': attribute type 6 has an invalid length. [ 317.579471][T12910] sock: sock_set_timeout: `syz.0.1755' (pid 12910) tries to set negative timeout [ 318.371032][T12958] netlink: 'syz.2.1769': attribute type 10 has an invalid length. [ 318.403304][T12958] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.413907][T12958] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.433638][T12960] IPv6: sit3: Disabled Multicast RS [ 318.447901][T12960] sit3: entered promiscuous mode [ 318.456650][T12960] sit3: entered allmulticast mode [ 318.470991][T12958] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 318.471290][T12967] ip6gretap0: entered allmulticast mode [ 319.345162][T13008] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 319.384315][T13014] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 319.420535][T13008] __nla_validate_parse: 5 callbacks suppressed [ 319.420554][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1782'. [ 319.460884][T13019] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1785'. [ 319.504348][T13017] bond5: (slave geneve4): making interface the new active one [ 319.535350][T13017] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 319.557286][T13015] bond7: (slave geneve3): making interface the new active one [ 319.566611][T13015] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 319.588887][T13008] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.596057][ T1134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 319.641050][ T1134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 319.655089][T13022] Unsupported ieee802154 address type: 0 [ 319.698501][ T1134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 319.724512][ T1134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 319.746796][ T1134] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.753813][T13017] syz.1.1781 (13017) used greatest stack depth: 18144 bytes left [ 319.781106][ T1134] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.800680][ T3861] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.819015][ T3861] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 320.501360][T13057] netlink: 'syz.2.1794': attribute type 11 has an invalid length. [ 320.518328][T13057] netlink: 'syz.2.1794': attribute type 11 has an invalid length. [ 320.531224][T13057] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1794'. [ 320.614853][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1798'. [ 320.624520][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1798'. [ 320.687088][T13065] tipc: Enabled bearer , priority 0 [ 320.710265][T13065] syzkaller0: entered promiscuous mode [ 320.738284][T13065] syzkaller0: entered allmulticast mode [ 320.783241][T13064] tipc: Resetting bearer [ 320.794941][T13075] netlink: 'syz.4.1803': attribute type 10 has an invalid length. [ 320.818419][T13064] tipc: Disabling bearer [ 320.836140][T13077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1802'. [ 320.863308][T13077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1802'. [ 320.919527][T13077] syz_tun: entered promiscuous mode [ 320.951516][T13077] syz_tun: left promiscuous mode [ 320.980351][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'. [ 320.996909][T13086] netlink: 'syz.4.1806': attribute type 8 has an invalid length. [ 321.028621][T13088] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 321.259768][T13101] lo speed is unknown, defaulting to 1000 [ 321.583991][T13098] raw_sendmsg: syz.2.1808 forgot to set AF_INET. Fix it! [ 321.924445][T13148] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 321.939809][T13148] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1820'. [ 321.977609][T13139] syzkaller0: entered promiscuous mode [ 322.035177][T13139] syzkaller0: entered allmulticast mode [ 322.135116][T13152] bond8: entered promiscuous mode [ 322.144596][T13152] bond8: entered allmulticast mode [ 322.160162][T13152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 322.208699][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1823'. [ 322.795568][T13175] lo speed is unknown, defaulting to 1000 [ 323.649345][T13197] lo: Caught tx_queue_len zero misconfig [ 324.162832][T13231] sit0: entered promiscuous mode [ 324.459875][T13243] pimreg3: entered allmulticast mode [ 324.536485][T13247] syzkaller0: entered allmulticast mode [ 324.759417][T13263] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 324.842689][T13269] __nla_validate_parse: 4 callbacks suppressed [ 324.842705][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'. [ 324.876317][T13267] lo speed is unknown, defaulting to 1000 [ 324.898407][T13269] dummy0: Device is already in use. [ 324.898430][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 324.958164][T13265] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 325.343133][T13295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1856'. [ 325.453053][T13295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1856'. [ 325.574690][T13306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1859'. [ 325.601637][T13306] xt_hashlimit: invalid rate [ 325.865497][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 325.918145][T13328] netlink: 'syz.4.1866': attribute type 4 has an invalid length. [ 326.331490][T13353] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 326.351245][T13353] bond9 (unregistering): Released all slaves [ 326.662220][T13392] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 326.685870][T13392] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1882'. [ 326.691624][T13387] xt_CT: No such helper "snmp_trap" [ 326.720696][T13380] xt_CT: No such helper "snmp_trap" [ 326.803477][T13399] lo speed is unknown, defaulting to 1000 [ 326.985070][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 327.250967][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 327.522043][T13444] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 327.531109][T13446] x_tables: duplicate underflow at hook 3 [ 327.664628][T13452] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 328.083450][T13473] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 328.087848][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 328.115544][T13464] lo speed is unknown, defaulting to 1000 [ 328.824643][T13501] pim6reg1: entered promiscuous mode [ 328.850746][T13501] pim6reg1: entered allmulticast mode [ 328.902359][T13506] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 328.990663][T13506] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.089140][T13515] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 329.145065][T13510] lo speed is unknown, defaulting to 1000 [ 330.043534][T13563] netlink: 'syz.3.1922': attribute type 11 has an invalid length. [ 330.056645][T13563] netlink: 'syz.3.1922': attribute type 11 has an invalid length. [ 330.064855][T13563] __nla_validate_parse: 2 callbacks suppressed [ 330.064871][T13563] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1922'. [ 330.087248][T13562] netlink: zone id is out of range [ 330.093662][T13562] netlink: zone id is out of range [ 330.106367][T13562] netlink: zone id is out of range [ 330.157579][T13562] netlink: zone id is out of range [ 330.208582][T13562] netlink: zone id is out of range [ 330.234267][T13562] netlink: zone id is out of range [ 330.258187][T13562] netlink: zone id is out of range [ 330.274471][T13562] netlink: zone id is out of range [ 330.297660][T13562] netlink: zone id is out of range [ 330.553196][T13593] gtp0: entered promiscuous mode [ 330.564023][T13593] gtp0: entered allmulticast mode [ 330.926909][T13624] lo speed is unknown, defaulting to 1000 [ 330.968670][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1941'. [ 330.986329][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 331.000061][T13634] netlink: 'syz.3.1940': attribute type 12 has an invalid length. [ 331.001579][T13635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1941'. [ 331.059116][T13628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1943'. [ 331.164097][T13629] netlink: 'syz.3.1940': attribute type 4 has an invalid length. [ 331.277023][T13639] pim6reg1: entered promiscuous mode [ 331.294098][T13639] pim6reg1: entered allmulticast mode [ 331.451079][T13650] tipc: Enabled bearer , priority 0 [ 331.538738][T13645] syzkaller0: entered promiscuous mode [ 331.544906][T13645] syzkaller0: entered allmulticast mode [ 331.595642][T13645] tipc: Resetting bearer [ 331.606182][T13643] lo speed is unknown, defaulting to 1000 [ 331.628683][T13644] tipc: Resetting bearer [ 331.729519][T13644] tipc: Disabling bearer [ 331.994523][T13658] vlan4: entered promiscuous mode [ 331.999777][T13658] ip6gretap0: entered promiscuous mode [ 332.010893][T13647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1945'. [ 332.181979][T13654] lo speed is unknown, defaulting to 1000 [ 332.433894][T13689] tipc: Enabling of bearer rejected, failed to enable media [ 332.582195][T13703] SET target dimension over the limit! [ 332.586402][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 332.785395][T13715] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 332.861247][T13715] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.918389][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 333.001098][T13726] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1963'. [ 333.017046][T13728] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 333.145566][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 333.200126][T13742] bond3: option ad_actor_sys_prio: invalid value (0) [ 333.213822][T13742] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 333.240956][T13742] bond3 (unregistering): Released all slaves [ 333.339199][T13747] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1969'. [ 333.416122][T13753] ip6gre2: entered promiscuous mode [ 333.422497][T13753] ip6gre2: entered allmulticast mode [ 333.480028][T13754] lo speed is unknown, defaulting to 1000 [ 333.917697][T13767] geneve4: entered promiscuous mode [ 333.938077][T13767] geneve4: entered allmulticast mode [ 334.028396][T13765] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 334.087177][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.1.1975 Not tainted syzkaller #0 PREEMPT(full) [ 334.087205][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.087219][T13765] Call Trace: [ 334.087227][T13765] [ 334.087236][T13765] dump_stack_lvl+0xe8/0x150 [ 334.087268][T13765] sysfs_warn_dup+0x8e/0xa0 [ 334.087290][T13765] sysfs_do_create_link_sd+0xc0/0x110 [ 334.087315][T13765] device_add_class_symlinks+0x1cf/0x240 [ 334.087340][T13765] device_add+0x475/0xb80 [ 334.087363][T13765] wiphy_register+0x1d2e/0x2d20 [ 334.087411][T13765] ? __pfx_wiphy_register+0x10/0x10 [ 334.087439][T13765] ? __pfx_netdev_run_todo+0x10/0x10 [ 334.087466][T13765] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 334.087497][T13765] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 334.087524][T13765] ieee80211_register_hw+0x34a7/0x4110 [ 334.087565][T13765] ? ieee80211_register_hw+0x1411/0x4110 [ 334.087598][T13765] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 334.087640][T13765] ? __hrtimer_setup+0x181/0x200 [ 334.087664][T13765] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 334.087692][T13765] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 334.087745][T13765] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 334.087763][T13765] ? kstrndup+0xbf/0x160 [ 334.087795][T13765] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 334.087821][T13765] ? __pfx___nla_validate_parse+0x10/0x10 [ 334.087857][T13765] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 334.087885][T13765] ? rcu_is_watching+0x15/0xb0 [ 334.087913][T13765] ? __nla_parse+0x40/0x60 [ 334.087939][T13765] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 334.087968][T13765] genl_family_rcv_msg_doit+0x215/0x300 [ 334.087994][T13765] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 334.088028][T13765] ? bpf_lsm_capable+0x9/0x20 [ 334.088050][T13765] ? security_capable+0x7e/0x2e0 [ 334.088081][T13765] genl_rcv_msg+0x60e/0x790 [ 334.088114][T13765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.088132][T13765] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 334.088168][T13765] netlink_rcv_skb+0x208/0x470 [ 334.088194][T13765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.088215][T13765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.088238][T13765] ? genl_rcv+0x19/0x40 [ 334.088286][T13765] ? down_read+0x274/0x2e0 [ 334.088307][T13765] ? genl_rcv+0xd/0x40 [ 334.088338][T13765] genl_rcv+0x28/0x40 [ 334.088365][T13765] netlink_unicast+0x82f/0x9e0 [ 334.088397][T13765] ? __pfx_netlink_unicast+0x10/0x10 [ 334.088419][T13765] ? __alloc_skb+0x198/0x3a0 [ 334.088440][T13765] ? netlink_sendmsg+0x642/0xb30 [ 334.088462][T13765] ? skb_put+0x11b/0x210 [ 334.088488][T13765] netlink_sendmsg+0x805/0xb30 [ 334.088524][T13765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.088553][T13765] ? aa_sock_msg_perm+0xf1/0x1b0 [ 334.088580][T13765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.088598][T13765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.088625][T13765] __sock_sendmsg+0x21c/0x270 [ 334.088657][T13765] ____sys_sendmsg+0x505/0x820 [ 334.088687][T13765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.088721][T13765] ? import_iovec+0x74/0xa0 [ 334.088750][T13765] ___sys_sendmsg+0x21f/0x2a0 [ 334.088776][T13765] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.088808][T13765] ? futex_wait+0x285/0x360 [ 334.088862][T13765] ? __fget_files+0x2a/0x420 [ 334.088886][T13765] ? __fget_files+0x3a0/0x420 [ 334.088919][T13765] __x64_sys_sendmsg+0x19b/0x260 [ 334.088947][T13765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.088981][T13765] ? rcu_is_watching+0x15/0xb0 [ 334.089019][T13765] do_syscall_64+0xec/0xf80 [ 334.089039][T13765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.089058][T13765] ? trace_irq_disable+0x37/0x100 [ 334.089083][T13765] ? clear_bhb_loop+0x60/0xb0 [ 334.089113][T13765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.089133][T13765] RIP: 0033:0x7f2d7b78f749 [ 334.089151][T13765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.089170][T13765] RSP: 002b:00007f2d7c65f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.089192][T13765] RAX: ffffffffffffffda RBX: 00007f2d7b9e5fa0 RCX: 00007f2d7b78f749 [ 334.089207][T13765] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 334.089221][T13765] RBP: 00007f2d7b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.089234][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.089246][T13765] R13: 00007f2d7b9e6038 R14: 00007f2d7b9e5fa0 R15: 00007ffc8a7e4728 [ 334.089281][T13765] [ 334.887311][T13783] netlink: 'syz.2.1977': attribute type 9 has an invalid length. [ 335.360446][T13793] __nla_validate_parse: 4 callbacks suppressed [ 335.360464][T13793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1980'. [ 335.365945][T13794] lo speed is unknown, defaulting to 1000 [ 335.483462][T13802] siw: device registration error -23 [ 335.532509][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 335.623779][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 335.790647][T13815] tipc: Enabled bearer , priority 0 [ 335.816323][T13815] syzkaller0: entered promiscuous mode [ 335.822000][T13815] syzkaller0: entered allmulticast mode [ 335.836251][T13815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1985'. [ 335.904391][T13814] tipc: Resetting bearer [ 335.928379][T13814] tipc: Disabling bearer [ 335.981014][T13828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1988'. [ 336.316600][T13841] 8021q: VLANs not supported on lo [ 336.348280][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 336.501873][T13841] bond7: (slave veth1): Enslaving as an active interface with an up link [ 336.538169][T13852] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1994'. [ 336.668804][T13855] syzkaller1: entered promiscuous mode [ 336.674323][T13855] syzkaller1: entered allmulticast mode [ 336.773274][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.792042][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.817114][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.841620][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.981019][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1998'. [ 336.991414][T13870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1999'. [ 337.137581][T13876] netlink: 'syz.3.2000': attribute type 28 has an invalid length. [ 337.206784][T13880] netem: invalid attributes len -1 [ 337.218714][T13880] netem: change failed [ 337.230479][T13882] netlink: 'syz.3.2000': attribute type 28 has an invalid length. [ 337.474231][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2003'. [ 337.536261][T13895] ip6gre1: entered promiscuous mode [ 337.545230][T13895] ip6gre1: entered allmulticast mode [ 337.779525][T13908] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 337.792444][T13908] bond9 (unregistering): Released all slaves [ 337.837903][T13912] syzkaller0: entered promiscuous mode [ 337.845372][T13912] syzkaller0: entered allmulticast mode [ 337.960336][T13919] netlink: 'syz.4.2012': attribute type 10 has an invalid length. [ 338.015856][T13917] tipc: Enabled bearer , priority 0 [ 338.028964][T13917] syzkaller0: entered promiscuous mode [ 338.035091][T13917] syzkaller0: entered allmulticast mode [ 338.076226][T13924] macvlan0: entered promiscuous mode [ 338.081730][T13924] macvlan0: entered allmulticast mode [ 338.087128][T13924] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 338.099425][T13921] tipc: Resetting bearer [ 338.159871][T13921] tipc: Disabling bearer [ 338.321057][T13935] lo speed is unknown, defaulting to 1000 [ 338.400514][T13936] lo speed is unknown, defaulting to 1000 [ 338.424481][T13939] netlink: 'syz.0.2018': attribute type 9 has an invalid length. [ 338.725757][T13942] lo speed is unknown, defaulting to 1000 [ 340.099594][T13994] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.713193][T14020] netlink: 'syz.3.2042': attribute type 4 has an invalid length. [ 340.778066][T14020] __nla_validate_parse: 14 callbacks suppressed [ 340.778087][T14020] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2042'. [ 340.879372][T14022] tipc: Enabled bearer , priority 0 [ 340.911546][T14022] syzkaller0: entered promiscuous mode [ 340.917239][T14022] syzkaller0: entered allmulticast mode [ 340.962965][T13982] lo speed is unknown, defaulting to 1000 [ 340.971161][T14022] tipc: Resetting bearer [ 341.023995][T14021] tipc: Resetting bearer [ 341.050924][T14021] tipc: Disabling bearer [ 341.208820][T14039] netlink: 1311 bytes leftover after parsing attributes in process `syz.2.2048'. [ 341.232630][T14052] netlink: 'syz.0.2050': attribute type 1 has an invalid length. [ 341.284039][T14053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2050'. [ 341.294013][T14054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2050'. [ 341.392423][T14061] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 341.510663][T14068] netlink: 'syz.4.2053': attribute type 6 has an invalid length. [ 341.518519][T14068] netlink: 'syz.4.2053': attribute type 7 has an invalid length. [ 341.526251][T14068] netlink: 'syz.4.2053': attribute type 8 has an invalid length. [ 341.549466][T14070] x_tables: ip_tables: osf match: only valid for protocol 6 [ 341.601514][T14072] netlink: 'syz.0.2055': attribute type 5 has an invalid length. [ 341.650822][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 342.075629][T14080] batadv1: entered allmulticast mode [ 342.099578][T14080] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 342.467320][T14086] lo speed is unknown, defaulting to 1000 [ 342.774730][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 342.815201][T14096] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 342.882308][T14086] netlink: 'syz.2.2060': attribute type 2 has an invalid length. [ 343.207811][T14115] net_ratelimit: 58 callbacks suppressed [ 343.207829][T14115] netlink: zone id is out of range [ 343.249076][T14115] netlink: zone id is out of range [ 343.260732][T14115] netlink: zone id is out of range [ 343.266205][T14115] netlink: zone id is out of range [ 343.278581][T14115] netlink: zone id is out of range [ 343.307392][T14115] netlink: zone id is out of range [ 343.330148][T14115] netlink: zone id is out of range [ 343.354766][T14115] netlink: zone id is out of range [ 343.375340][T14115] netlink: zone id is out of range [ 343.381261][T14115] netlink: zone id is out of range [ 343.884975][T14159] netlink: 'syz.4.2083': attribute type 33 has an invalid length. [ 343.900527][T14159] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2083'. [ 344.597271][T14185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2085'. [ 344.628975][T14185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2085'. [ 344.651553][T14190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2085'. [ 345.242494][T14225] lo speed is unknown, defaulting to 1000 [ 345.873191][T14267] __nla_validate_parse: 4 callbacks suppressed [ 345.873211][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 345.923158][T14274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2107'. [ 345.947934][T14273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2108'. [ 346.020750][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 346.209814][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 346.225952][T14297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2115'. [ 346.311656][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 346.556889][T14302] lo: entered allmulticast mode [ 346.562856][T14302] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 346.573219][T14301] lo: left allmulticast mode [ 346.788909][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 348.579893][T14345] syzkaller1: entered promiscuous mode [ 348.585405][T14345] syzkaller1: entered allmulticast mode [ 348.946961][T14371] lo speed is unknown, defaulting to 1000 [ 349.012583][T14388] syzkaller0: entered promiscuous mode [ 349.018647][T14388] syzkaller0: entered allmulticast mode [ 349.089176][T14391] tipc: Enabling of bearer rejected, failed to enable media [ 349.196368][T14399] netlink: 'syz.2.2139': attribute type 4 has an invalid length. [ 349.245425][T14393] netlink: 'syz.2.2139': attribute type 4 has an invalid length. [ 349.507418][T14407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2141'. [ 349.744707][T14425] tunl0: Caught tx_queue_len zero misconfig [ 349.771413][T14425] netlink: 'syz.4.2147': attribute type 9 has an invalid length. [ 349.787245][T14427] netlink: 'syz.3.2148': attribute type 13 has an invalid length. [ 349.881003][T14408] lo speed is unknown, defaulting to 1000 [ 349.896955][T14425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2147'. [ 350.131078][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.163401][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.494134][T12556] syz0: Port: 1 Link DOWN [ 350.739926][T14467] vlan4: entered promiscuous mode [ 350.745005][T14467] geneve1: entered promiscuous mode [ 350.778424][T14467] vlan4: entered allmulticast mode [ 350.783586][T14467] geneve1: entered allmulticast mode [ 350.886119][T14477] __nla_validate_parse: 116 callbacks suppressed [ 350.886138][T14477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2158'. [ 350.911448][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2157'. [ 350.959399][T14484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.997040][T14484] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 351.011720][T14484] bond0: (slave sit0): Error -95 calling set_mac_address [ 351.021817][T14491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2162'. [ 351.115695][T14496] lo speed is unknown, defaulting to 1000 [ 351.126301][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 351.408284][T14515] net_ratelimit: 45 callbacks suppressed [ 351.408302][T14515] openvswitch: netlink: Duplicate or invalid key (type 0). [ 351.430941][T14515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.712399][T14537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.401451][T14559] lo speed is unknown, defaulting to 1000 [ 352.422227][T14558] lo speed is unknown, defaulting to 1000 [ 352.534558][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 352.668614][T14572] lo speed is unknown, defaulting to 1000 [ 352.873244][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2184'. [ 352.918243][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.976993][T14585] bridge8: port 1(veth0_to_bond) entered blocking state [ 352.986756][T14585] bridge8: port 1(veth0_to_bond) entered disabled state [ 352.998884][T14585] veth0_to_bond: entered allmulticast mode [ 353.007390][T14585] veth0_to_bond: entered promiscuous mode [ 353.028711][T14587] veth1_to_bond: entered promiscuous mode [ 353.061115][T14597] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 353.125950][T14597] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 353.142084][T14585] lo speed is unknown, defaulting to 1000 [ 353.159801][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 353.183219][T14592] lo speed is unknown, defaulting to 1000 [ 353.215816][T14598] syzkaller1: entered promiscuous mode [ 353.226295][T14598] syzkaller1: entered allmulticast mode [ 353.532842][T14610] netlink: 'syz.3.2190': attribute type 33 has an invalid length. [ 353.540992][T14610] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2190'. [ 353.565368][T14610] `: renamed from team0 [ 353.575660][T14586] veth1_to_bond: left promiscuous mode [ 353.782317][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2193'. [ 353.831154][T14618] veth9: entered promiscuous mode [ 354.110022][T14635] netlink: 'syz.3.2196': attribute type 4 has an invalid length. [ 354.316493][T14647] lo speed is unknown, defaulting to 1000 [ 354.424327][T14651] syzkaller1: entered promiscuous mode [ 354.431524][T14651] syzkaller1: entered allmulticast mode [ 354.621825][T14659] lo speed is unknown, defaulting to 1000 [ 354.667285][T14665] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2206'. [ 355.103319][T14683] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2210'. [ 355.259987][T14689] macvtap1: entered promiscuous mode [ 355.265481][T14689] syz_tun: entered promiscuous mode [ 355.296593][T14689] macvtap1: entered allmulticast mode [ 355.310698][T14689] syz_tun: entered allmulticast mode [ 355.327759][T14689] syz_tun: left allmulticast mode [ 355.342295][T14689] syz_tun: left promiscuous mode [ 355.702720][T14708] bond0: (slave dummy0): Releasing backup interface [ 355.729126][T14708] dummy0: left promiscuous mode [ 355.740437][T14708] batman_adv: batadv0: Adding interface: dummy0 [ 355.756061][T14708] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.803390][T14708] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 355.887772][T14718] NFSD: Failed to start, no listeners configured. [ 356.129331][T14713] lo speed is unknown, defaulting to 1000 [ 356.732842][T14749] tipc: Enabled bearer , priority 0 [ 356.824044][T14749] syzkaller0: entered promiscuous mode [ 356.848341][T14749] syzkaller0: entered allmulticast mode [ 356.855838][T14755] __nla_validate_parse: 2 callbacks suppressed [ 356.855857][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 357.091746][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2227'. [ 357.486696][T14747] tipc: Resetting bearer [ 357.544116][T14792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2234'. [ 357.554121][T14786] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2232'. [ 359.127027][T14747] tipc: Disabling bearer [ 359.136558][T14782] syzkaller1: entered promiscuous mode [ 359.142291][T14782] syzkaller1: entered allmulticast mode [ 359.150620][T14444] tipc: Node number set to 271395188 [ 359.253995][T14809] netlink: 'syz.3.2237': attribute type 10 has an invalid length. [ 359.277462][T14809] veth0_macvtap: left promiscuous mode [ 359.287770][T14809] `: Port device veth0_macvtap added [ 359.337224][T14812] lo speed is unknown, defaulting to 1000 [ 359.921625][T14834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2244'. [ 360.062393][T14837] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 360.090267][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2244'. [ 360.144157][T14840] syzkaller0: entered promiscuous mode [ 360.152476][T14840] syzkaller0: entered allmulticast mode [ 360.485990][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2250'. [ 360.529561][T14854] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 360.551221][T14854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2251'. [ 360.764002][T14858] lo speed is unknown, defaulting to 1000 [ 360.935053][T14873] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2257'. [ 360.955918][T14875] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 361.012953][T14875] netlink: 'syz.2.2258': attribute type 3 has an invalid length. [ 361.020920][T14875] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 361.028758][T14875] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2258'. [ 361.372471][T14892] syzkaller0: entered promiscuous mode [ 361.378617][T14892] syzkaller0: entered allmulticast mode [ 361.384437][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.401458][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.439626][T14892] macsec1: entered promiscuous mode [ 361.445677][T14892] macsec1: entered allmulticast mode [ 361.714855][T14911] lo speed is unknown, defaulting to 1000 [ 362.198164][T14923] __nla_validate_parse: 2 callbacks suppressed [ 362.198183][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'. [ 362.234447][T14933] syzkaller0: entered promiscuous mode [ 362.240080][T14933] syzkaller0: entered allmulticast mode [ 362.260407][T14933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2269'. [ 362.271423][T14933] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.2269'. [ 362.286403][ T30] audit: type=1800 audit(1767310159.035:4): pid=14941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2272" name="memory.events" dev="tmpfs" ino=2439 res=0 errno=0 [ 362.317769][ T30] audit: type=1804 audit(1767310159.035:5): pid=14941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2272" name="/newroot/473/memory.events" dev="tmpfs" ino=2439 res=1 errno=0 [ 362.348672][ T30] audit: type=1804 audit(1767310159.045:6): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2272" name="/newroot/473/memory.events" dev="tmpfs" ino=2439 res=1 errno=0 [ 362.434316][ T30] audit: type=1800 audit(1767310159.045:7): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2272" name="memory.events" dev="tmpfs" ino=2439 res=0 errno=0 [ 362.510905][ T30] audit: type=1804 audit(1767310159.045:8): pid=14943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2272" name="/newroot/473/memory.events" dev="tmpfs" ino=2439 res=1 errno=0 [ 362.911501][T14955] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 363.266999][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'. [ 363.286617][T14966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.300828][T14950] xt_CT: No such helper "netbios-ns" [ 363.891629][T15008] netlink: 'syz.0.2290': attribute type 31 has an invalid length. [ 363.962604][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 363.979069][T15012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2292'. [ 363.990867][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 364.037888][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 364.055019][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 364.074020][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 364.130209][T15013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.151345][T15013] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.164423][T15013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.386879][T15038] syzkaller0: entered promiscuous mode [ 364.393897][T15038] syzkaller0: entered allmulticast mode [ 364.418713][T15038] tipc: Enabled bearer , priority 0 [ 364.450004][T15042] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 364.450455][T15038] tipc: Resetting bearer [ 364.488394][T15036] tipc: Resetting bearer [ 364.528375][T15036] tipc: Disabling bearer [ 364.646375][T15059] lo: entered promiscuous mode [ 364.682787][T15059] tunl0: entered promiscuous mode [ 364.710802][T15059] gre0: entered promiscuous mode [ 364.723066][T15059] gretap0: entered promiscuous mode [ 364.732411][T15059] erspan0: entered promiscuous mode [ 364.740288][T15059] ip_vti0: entered promiscuous mode [ 364.747392][T15059] ip6_vti0: entered promiscuous mode [ 364.761353][T15059] sit0: entered promiscuous mode [ 364.774331][T15059] ip6tnl0: entered promiscuous mode [ 364.784434][T15059] ip6gre0: entered promiscuous mode [ 364.792585][T15059] syz_tun: entered promiscuous mode [ 364.800872][T15059] ip6gretap0: entered promiscuous mode [ 364.809297][T15059] bridge0: entered promiscuous mode [ 364.816107][T15059] vcan0: entered promiscuous mode [ 364.823975][T15059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.832163][T15059] team0: entered promiscuous mode [ 364.840280][T15059] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.849059][T15059] dummy0: entered promiscuous mode [ 364.856440][T15059] nlmon0: entered promiscuous mode [ 364.869893][T15059] caif0: entered promiscuous mode [ 364.875371][T15059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.893011][ T39] lo speed is unknown, defaulting to 1000 [ 364.899374][ T39] syz1: Port: 1 Link ACTIVE [ 366.193911][T15107] lo speed is unknown, defaulting to 1000 [ 366.357871][T15116] netlink: 'syz.2.2324': attribute type 9 has an invalid length. [ 366.438968][T15116] netlink: 'syz.2.2324': attribute type 11 has an invalid length. [ 366.475052][T15116] netlink: 'syz.2.2324': attribute type 12 has an invalid length. [ 366.548809][T15124] syzkaller0: entered promiscuous mode [ 366.570790][T15124] syzkaller0: entered allmulticast mode [ 366.638968][T15126] siw: device registration error -23 [ 367.287851][T15149] __nla_validate_parse: 22 callbacks suppressed [ 367.287871][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 367.389595][T15149] tunl0: Caught tx_queue_len zero misconfig [ 367.486649][T15155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2331'. [ 367.581761][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 367.619496][T15159] batadv_slave_1: entered promiscuous mode [ 367.698268][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'. [ 367.757939][T15161] batadv_slave_1 (unregistering): left promiscuous mode [ 368.608605][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2341'. [ 369.131086][T15179] geneve5: entered promiscuous mode [ 369.161425][T15179] geneve5: entered allmulticast mode [ 370.121802][T15216] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2350'. [ 370.829510][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 370.909541][T15242] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2356'. [ 370.956799][T15243] netlink: 'syz.2.2356': attribute type 12 has an invalid length. [ 371.045469][ T6092] bond5: (slave erspan0): link status definitely down, disabling slave [ 371.081164][ T6092] ip6gretap1: entered promiscuous mode [ 371.509538][T15263] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2361'. [ 372.479026][T15285] lo speed is unknown, defaulting to 1000 [ 373.617219][T15313] netlink: zone id is out of range [ 373.625050][T15313] netlink: zone id is out of range [ 373.631283][T15313] netlink: zone id is out of range [ 373.637821][T15313] netlink: zone id is out of range [ 373.654450][T15313] netlink: zone id is out of range [ 373.681893][T15313] netlink: zone id is out of range [ 373.730044][T15313] netlink: zone id is out of range [ 373.770566][T15313] netlink: zone id is out of range [ 374.357842][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2372'. [ 374.950246][T15338] @˙: renamed from veth0_vlan [ 374.976797][T15326] lo speed is unknown, defaulting to 1000 [ 375.029074][T15331] lo speed is unknown, defaulting to 1000 [ 375.728237][T15359] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20002 [ 375.837019][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2387'. [ 376.456441][T15354] syz.1.2384 (15354) used greatest stack depth: 17688 bytes left [ 376.717729][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 376.832787][T15398] lo speed is unknown, defaulting to 1000 [ 376.940183][T15400] lo speed is unknown, defaulting to 1000 [ 377.678760][T15419] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2404'. [ 377.756760][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'. [ 377.870710][T15419] netlink: 'syz.2.2404': attribute type 13 has an invalid length. [ 377.902235][T15419] netlink: 'syz.2.2404': attribute type 17 has an invalid length. [ 378.435083][T15427] lo speed is unknown, defaulting to 1000 [ 378.525714][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.742655][T15436] lo speed is unknown, defaulting to 1000 [ 379.193660][T15449] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 379.218181][T15449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 379.842239][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2413'. [ 380.268800][T15468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2417'. [ 380.757647][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2421'. [ 380.799649][T15485] lo speed is unknown, defaulting to 1000 [ 380.809130][T15490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2421'. [ 380.851579][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 380.941877][T15491] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 380.983335][T15493] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2422'. [ 381.039789][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 381.171212][T15496] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2423'. [ 381.730812][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2428'. [ 381.950069][T15517] xt_TCPMSS: Only works on TCP SYN packets [ 382.908840][T15499] ip6gretap0: left allmulticast mode [ 382.988189][T15523] IPv4: Oversized IP packet from 127.202.26.0 [ 382.999116][T15523] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.2430'. [ 383.671009][T15499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.681811][T15499] 8021q: adding VLAN 0 to HW filter on device ` [ 383.689908][T15499] batman_adv: batadv0: Interface activated: dummy0 [ 383.696774][T15499] batadv0: mtu less than device minimum [ 383.704099][T15499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.716295][T15499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.728076][T15499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.739809][T15499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.751988][T15499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.763725][T15499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.900079][ T36] ip6gretap1: left promiscuous mode [ 383.955245][T15517] lo speed is unknown, defaulting to 1000 [ 384.320031][T15540] netlink: 'syz.1.2438': attribute type 9 has an invalid length. [ 384.734457][T15551] bond4: option packets_per_slave: invalid value (1048582) [ 384.780386][T15551] bond4: option packets_per_slave: allowed values 0 - 65535 [ 384.911758][T15551] bond4 (unregistering): Released all slaves [ 384.999889][T15552] bond4: option packets_per_slave: invalid value (1048582) [ 385.009245][T15552] bond4: option packets_per_slave: allowed values 0 - 65535 [ 385.049766][T15552] bond4 (unregistering): Released all slaves [ 385.146257][T15566] veth0: entered promiscuous mode [ 385.184196][T15562] veth0: left promiscuous mode [ 385.596931][T15581] tipc: Enabled bearer , priority 0 [ 385.865553][T15574] tipc: Disabling bearer [ 386.057932][T15594] lo speed is unknown, defaulting to 1000 [ 387.053657][T15623] __nla_validate_parse: 2 callbacks suppressed [ 387.053675][T15623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2454'. [ 387.366412][T15640] netlink: 'syz.0.2456': attribute type 13 has an invalid length. [ 387.396656][T15627] bond9: option arp_validate: invalid value (18446744073491447809) [ 387.429021][T15627] bond9 (unregistering): Released all slaves [ 387.473776][T15630] syzkaller0: entered promiscuous mode [ 387.480299][T15630] syzkaller0: entered allmulticast mode [ 387.948857][ T39] lo speed is unknown, defaulting to 1000 [ 387.974753][ T39] syz1: Port: 1 Link DOWN [ 388.001617][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 388.566995][T15659] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2461'. [ 388.613598][T15659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2461'. [ 388.752617][T15664] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 388.806740][T15669] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 388.852453][T15664] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 389.437857][T15687] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 389.493857][T15687] net_ratelimit: 15 callbacks suppressed [ 389.493879][T15687] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 389.540677][T15673] syzkaller1: entered promiscuous mode [ 389.585103][T15673] syzkaller1: entered allmulticast mode [ 390.106614][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 390.167834][T15704] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 390.450410][T15720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2475'. [ 391.175398][T15738] netlink: 'syz.3.2480': attribute type 10 has an invalid length. [ 391.906523][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 392.277280][T15755] syzkaller0: entered promiscuous mode [ 392.299047][T15755] syzkaller0: entered allmulticast mode [ 392.357851][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2483'. [ 392.396410][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2483'. [ 393.284114][T15775] netlink: 'syz.0.2489': attribute type 2 has an invalid length. [ 393.412013][T15775] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 394.430923][T15787] veth1_to_bond: entered allmulticast mode [ 394.507153][T15787] veth1_to_bond: left allmulticast mode [ 394.620933][T15789] lo: Caught tx_queue_len zero misconfig [ 394.997217][T15794] bond8: entered promiscuous mode [ 395.004556][T15794] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.206755][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2499'. [ 395.669674][T12286] IPVS: starting estimator thread 0... [ 395.680004][T15822] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:8190 [ 395.811084][T15823] IPVS: using max 26 ests per chain, 62400 per kthread [ 396.297916][T15836] nbd: socks must be embedded in a SOCK_ITEM attr [ 396.922631][T15849] bond0: (slave rose0): Enslaving as an active interface with an up link [ 397.088946][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 397.333765][T15863] tc_dump_action: action bad kind [ 397.389628][T15863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2511'. [ 397.573957][T15870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2513'. [ 397.598847][T15869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2513'. [ 397.634742][T15872] netlink: 'syz.0.2513': attribute type 29 has an invalid length. [ 405.938024][ C1] sched: DL replenish lagged too much [ 406.171741][T11267] IPVS: ip_vs_send_async error -101 [ 423.454970][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 425.426280][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 426.628811][T15900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.383993][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.213887][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.486380][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.633503][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.607546][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 438.500074][T15886] lo speed is unknown, defaulting to 1000 [ 439.449407][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.314345][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.206378][ T52] Bluetooth: hci5: command tx timeout [ 443.485332][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 444.210065][ T5151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 444.467408][ T5151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 444.905651][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.056838][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.257831][ T5832] Bluetooth: hci5: command tx timeout [ 445.345834][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 447.097225][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.134214][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.232577][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.326310][ T52] Bluetooth: hci5: command tx timeout [ 447.483078][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.987608][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 448.034013][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 448.076916][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 448.307491][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 448.682754][ T5151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 449.631137][ T5151] Bluetooth: hci5: command tx timeout [ 449.636627][ T5151] Bluetooth: hci6: command tx timeout [ 451.296019][ T5839] Bluetooth: hci7: command tx timeout [ 451.807873][ T5839] Bluetooth: hci6: command tx timeout [ 451.856791][ T5832] Bluetooth: hci2: command tx timeout [ 452.956033][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.331054][ T5837] Bluetooth: hci7: command tx timeout [ 453.780807][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.937892][ T5837] Bluetooth: hci6: command tx timeout [ 453.962831][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.978924][ T5837] Bluetooth: hci2: command tx timeout [ 455.176613][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.413344][ T5837] Bluetooth: hci7: command tx timeout [ 455.974812][ T5832] Bluetooth: hci6: command tx timeout [ 455.985668][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.047739][ T5837] Bluetooth: hci2: command tx timeout [ 457.871296][ T5832] Bluetooth: hci7: command tx timeout [ 458.284367][ T5832] Bluetooth: hci2: command tx timeout [ 458.365418][ T5832] Bluetooth: hci4: command tx timeout [ 460.445481][ T5832] Bluetooth: hci4: command tx timeout [ 462.535799][ T5832] Bluetooth: hci4: command tx timeout [ 464.661467][ T5832] Bluetooth: hci4: command tx timeout [ 468.298540][T11267] IPVS: ip_vs_send_async error -101 [ 470.680355][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 487.365264][ T6082] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.697508][ T6082] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 501.889735][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.824705][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.230086][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.265598][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.967262][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.501839][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.575511][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.081234][ T5151] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 513.783323][ T5151] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 513.801071][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.835258][T15931] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 514.197245][T15931] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 514.244340][T15931] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 514.325949][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 514.344183][T15931] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 514.466549][T15931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.492252][T15931] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 514.601719][T15931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.782013][T15931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.983676][T15934] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 515.530037][T15931] Bluetooth: hci1: command tx timeout [ 515.561742][ T5151] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 516.216674][ T5151] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 516.279475][ T5151] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 516.360349][ T5151] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 516.808510][ T5151] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 516.909756][ T5151] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 517.513553][ T52] Bluetooth: hci3: command tx timeout [ 517.529490][ T52] Bluetooth: hci9: command tx timeout [ 517.567645][ T52] Bluetooth: hci1: command tx timeout [ 519.566269][T15931] Bluetooth: hci3: command tx timeout [ 519.670270][ T52] Bluetooth: hci9: command tx timeout [ 519.744185][ T52] Bluetooth: hci1: command tx timeout [ 520.528265][T15931] Bluetooth: hci8: command tx timeout [ 520.535061][ T52] Bluetooth: hci10: command tx timeout [ 521.655687][ T52] Bluetooth: hci3: command tx timeout [ 521.728633][T15931] Bluetooth: hci9: command tx timeout [ 521.921819][ T52] Bluetooth: hci1: command tx timeout [ 522.710130][T15931] Bluetooth: hci8: command tx timeout [ 522.726196][ T52] Bluetooth: hci10: command tx timeout [ 523.814469][T15931] Bluetooth: hci9: command tx timeout [ 524.027271][T15931] Bluetooth: hci3: command tx timeout [ 524.770588][ T52] Bluetooth: hci8: command tx timeout [ 524.775799][T15931] Bluetooth: hci10: command tx timeout [ 526.845471][ T52] Bluetooth: hci10: command tx timeout [ 527.004576][ T52] Bluetooth: hci8: command tx timeout [ 529.615161][T11267] IPVS: ip_vs_send_async error -101 [ 540.643796][ T6082] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.037622][ T6082] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 563.348091][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.732604][ T6082] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.057910][ T6082] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 588.245792][T15931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.496498][T15931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.581321][T15931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.923731][T15931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.112023][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.147496][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.255199][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.278899][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.381357][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.594501][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.944809][T11267] IPVS: ip_vs_send_async error -101 [ 591.194992][T15931] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 592.406982][T15931] Bluetooth: hci2: command tx timeout [ 593.124546][T15931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.923768][T15931] Bluetooth: hci2: command tx timeout [ 594.945762][ T52] Bluetooth: hci1: command tx timeout [ 595.088399][T15948] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 595.401726][ T6082] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.645014][ T6082] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 596.597194][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 596.887730][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 596.923849][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.011224][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.027582][T15931] Bluetooth: hci2: command tx timeout [ 597.059179][ T52] Bluetooth: hci1: command tx timeout [ 599.193086][ T5151] Bluetooth: hci3: Opcode 0x0c38 failed: -110 [ 599.544848][ T5151] Bluetooth: hci1: command tx timeout [ 599.560003][ T5151] Bluetooth: hci2: command tx timeout [ 599.602668][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.801469][ T5151] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 600.090525][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.942954][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.205648][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.239714][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.400141][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.598353][T15951] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 601.680129][ T52] Bluetooth: hci1: command tx timeout [ 602.031694][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.142227][T15945] lo speed is unknown, defaulting to 1000 [ 604.987784][ T5151] Bluetooth: hci5: command tx timeout [ 607.088326][ T5151] Bluetooth: hci5: command tx timeout [ 609.174455][ T5151] Bluetooth: hci5: command tx timeout [ 611.398194][ T5151] Bluetooth: hci5: command tx timeout [ 621.173480][T15946] lo speed is unknown, defaulting to 1000 [ 624.393136][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.307600][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 635.544613][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 635.711837][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 635.970857][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 636.257335][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.476793][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.831369][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.883922][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.969669][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 638.082992][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 639.251296][ T5151] Bluetooth: hci0: command tx timeout [ 640.407124][ T5151] Bluetooth: hci3: command tx timeout [ 641.329254][ T5151] Bluetooth: hci0: command tx timeout [ 642.481218][ T52] Bluetooth: hci3: command tx timeout [ 643.406224][ T52] Bluetooth: hci0: command tx timeout [ 643.433057][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.612916][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.665734][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.799559][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.843729][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 644.719990][ T5151] Bluetooth: hci3: command tx timeout [ 645.527175][ T52] Bluetooth: hci0: command tx timeout [ 646.767193][ T5151] Bluetooth: hci3: command tx timeout [ 647.379196][ T5151] Bluetooth: hci4: command tx timeout [ 648.254797][T15931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 648.698318][T15931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 648.953594][T15931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 649.083243][T15931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 649.626399][T15931] Bluetooth: hci4: command tx timeout [ 649.682119][T15931] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 651.740957][T15931] Bluetooth: hci4: command tx timeout [ 652.249482][T15931] Bluetooth: hci6: command tx timeout [ 653.807336][T15931] Bluetooth: hci4: command tx timeout [ 654.452495][T15931] Bluetooth: hci6: command tx timeout [ 656.559171][T15931] Bluetooth: hci6: command tx timeout [ 658.864485][T15931] Bluetooth: hci6: command tx timeout [ 674.050975][T15931] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 685.958828][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.199191][ T6082] veth0_to_bond: left allmulticast mode [ 696.466889][ T6082] veth0_to_bond: left promiscuous mode [ 697.304982][ T6082] bridge8: port 1(veth0_to_bond) entered disabled state [ 709.095945][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 709.217665][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 709.388575][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 709.674196][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 709.893284][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 711.319954][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 712.569023][ T5151] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 712.754485][ T5151] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 712.789407][ T5151] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 713.087847][ T5151] Bluetooth: hci7: command tx timeout [ 713.158827][ T5151] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 713.476394][ T5151] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 713.560351][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 715.166670][T15931] Bluetooth: hci7: command tx timeout [ 716.211867][T15931] Bluetooth: hci8: command tx timeout [ 717.408395][T15931] Bluetooth: hci7: command tx timeout [ 718.288137][T15931] Bluetooth: hci8: command tx timeout [ 718.773124][T15931] Bluetooth: hci1: command 0x0406 tx timeout [ 719.503300][T15931] Bluetooth: hci7: command tx timeout [ 720.372256][ T5837] Bluetooth: hci8: command tx timeout [ 721.030999][ T5151] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 721.147370][ T5151] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 721.186929][ T5151] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 721.270255][ T5151] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 721.420028][ T5151] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 722.677597][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 722.714752][T15931] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 722.726336][ T5151] Bluetooth: hci8: command tx timeout [ 722.964463][T15931] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 723.081766][T15931] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 723.235484][T15931] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 723.736634][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 723.817529][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 723.854157][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 723.884025][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 724.111372][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 724.524357][ T5151] Bluetooth: hci9: command tx timeout [ 724.715345][ T5151] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 724.789033][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 726.533697][T15931] Bluetooth: hci10: command tx timeout [ 726.611713][T15931] Bluetooth: hci9: command tx timeout [ 727.589872][ T5151] Bluetooth: hci11: command tx timeout [ 728.613317][ T52] Bluetooth: hci10: command tx timeout [ 728.691052][ T52] Bluetooth: hci9: command tx timeout [ 729.242610][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 729.676062][T15931] Bluetooth: hci11: command tx timeout [ 730.695194][T15931] Bluetooth: hci10: command tx timeout [ 730.822983][T15931] Bluetooth: hci9: command tx timeout [ 731.737483][T15931] Bluetooth: hci11: command tx timeout [ 732.767750][T15931] Bluetooth: hci10: command tx timeout [ 733.802967][T15931] Bluetooth: hci11: command tx timeout [ 747.264829][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.517867][T15931] Bluetooth: hci0: command 0x0406 tx timeout [ 765.088440][T15931] Bluetooth: hci3: command 0x0406 tx timeout [ 769.866535][T15931] Bluetooth: hci4: command 0x0406 tx timeout [ 775.026883][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 806.043418][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 806.145084][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 806.179155][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 806.251413][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 806.863996][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 808.981261][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.505401][T15931] Bluetooth: hci12: command tx timeout [ 811.593689][T15931] Bluetooth: hci12: command tx timeout [ 813.651795][ T52] Bluetooth: hci12: command tx timeout [ 813.816946][T15931] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 814.325454][T15931] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 814.361329][T15931] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 815.728367][T15931] Bluetooth: hci12: command tx timeout [ 815.897107][T16003] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 817.055469][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 817.257002][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 818.636156][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 819.139987][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 820.171284][ T5151] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 820.629089][ T5837] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 821.012439][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 821.046273][ T5832] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 821.214292][ T5837] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 821.517179][ T5837] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 821.812707][ T5837] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 821.921359][T15931] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 822.162539][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 822.216527][ T5837] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 822.244386][T15931] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 824.076925][ T52] Bluetooth: hci14: command tx timeout [ 824.732148][ T52] Bluetooth: hci13: command tx timeout [ 826.133424][T15931] Bluetooth: hci15: command tx timeout [ 826.148973][T15931] Bluetooth: hci14: command tx timeout [ 827.120044][T15931] Bluetooth: hci13: command tx timeout [ 828.206988][ T52] Bluetooth: hci15: command tx timeout [ 828.337346][T15931] Bluetooth: hci14: command tx timeout [ 829.177728][T15931] Bluetooth: hci13: command tx timeout [ 830.310575][T15931] Bluetooth: hci15: command tx timeout [ 830.358272][T15931] Bluetooth: hci14: command tx timeout [ 831.408537][T15931] Bluetooth: hci13: command tx timeout [ 832.477687][T15931] Bluetooth: hci15: command tx timeout [ 836.688287][T15931] Bluetooth: hci8: command 0x0406 tx timeout [ 836.765905][T15931] Bluetooth: hci7: command 0x0406 tx timeout [ 846.930307][ T5151] Bluetooth: hci9: command 0x0406 tx timeout [ 848.932439][ T31] INFO: task kworker/0:6:5952 blocked for more than 143 seconds. [ 848.948743][ T31] Not tainted syzkaller #0 [ 848.953716][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 850.164974][ T31] task:kworker/0:6 state:D stack:22944 pid:5952 tgid:5952 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 850.912739][ T31] Workqueue: events switchdev_deferred_process_work [ 851.207764][ T31] Call Trace: [ 851.220138][ T31] [ 851.223512][ T31] __schedule+0x149b/0x4fd0 [ 851.962347][T15931] Bluetooth: hci11: command 0x0406 tx timeout [ 852.052993][T15931] Bluetooth: hci10: command 0x0406 tx timeout [ 852.147055][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 852.161121][ T31] ? __pfx___schedule+0x10/0x10 [ 852.166028][ T31] ? schedule+0x91/0x360 [ 852.493065][ T31] schedule+0x165/0x360 [ 852.497371][ T31] schedule_preempt_disabled+0x13/0x30 [ 853.783491][ T31] __mutex_lock+0x7e6/0x1350 [ 854.302276][ T31] ? __mutex_lock+0x5bb/0x1350 [ 854.307131][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 855.318759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 855.323871][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 855.629184][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 855.634978][ T31] switchdev_deferred_process_work+0xe/0x20 [ 856.517827][ T31] process_scheduled_works+0xad1/0x1770 [ 856.532326][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.780547][ T31] ? do_raw_spin_lock+0x121/0x290 [ 856.785654][ T31] worker_thread+0x8a0/0xda0 [ 857.161144][ T31] kthread+0x711/0x8a0 [ 857.165277][ T31] ? __pfx_worker_thread+0x10/0x10 [ 857.186502][ T31] ? __pfx_kthread+0x10/0x10 [ 857.513684][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 857.528200][ T31] ? __pfx_kthread+0x10/0x10 [ 857.533030][ T31] ret_from_fork+0x510/0xa50 [ 857.537683][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 858.542687][ T31] ? __switch_to+0xc9e/0x1480 [ 858.547481][ T31] ? __pfx_kthread+0x10/0x10