last executing test programs: 2m1.919235108s ago: executing program 1 (id=4731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000002e00)=ANY=[], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8, r0, 0xf2}, 0x38) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300000400000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m1.788354676s ago: executing program 1 (id=4734): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) (async) unshare(0x28000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008800000095000000000000009b3528a601657a37c8f415b67cc7a0570cf72fa3426d7a22a7d3d944f7b0c5d74ec66c6176b54c91a45c0335990f2fccb69a49fcc746c3aad73b94b3f03d34b186fb0cfe72f2c33630e9a4d8d30fb1cee18e71a3e4041143222daa535f8debb13845b3a14ade1c251376856fa618dd266f8efb0639f12c6cc47c05efbe85029b636853ad099a0d1cede50e940045"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r1 = socket(0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x480c, @mcast1, 0x3}, 0x1c) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 2m1.513665781s ago: executing program 1 (id=4737): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="8159c218a9eec00f650012800b00010062726964676500001400028008000500010000000001001c000000"], 0x44}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000884}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) r8 = socket(0xa, 0x5, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0xec, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x46}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x39c}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x2}}]}, 0xec}, 0x1, 0x0, 0x0, 0x44180}, 0x440c0) sendmsg$inet_sctp(r8, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x70, 0x24000001}, 0x20008000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000900)=0x4, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000240)={r6, 0xfffffffffffffff8, 0x0, 0x7}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) r11 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7}, @void, @val={0xc, 0x99, {0xfffffffa, 0x29}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x50}}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000200)=r10) r12 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r12, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r13, 0x0, 0x0, 0x40800) 2m1.350430364s ago: executing program 3 (id=4738): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000001, 0x1032, 0xffffffffffffffff, 0x21d67000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000400000000500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2m0.538344945s ago: executing program 1 (id=4743): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x50, r2, 0x1000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close(r1) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @remote, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="589597c1", 0x4}], 0x1}}], 0x2, 0x40088d4) (async) sendmmsg$inet6(r11, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @remote, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="589597c1", 0x4}], 0x1}}], 0x2, 0x40088d4) shutdown(r11, 0x1) (async) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00004678f4a9cf9a243abece"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00004678f4a9cf9a243abece"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2m0.462166948s ago: executing program 3 (id=4745): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x28}}, 0xc010) r1 = socket$inet6(0xa, 0x2, 0x0) connect$can_bcm(r1, &(0x7f0000000100), 0x10) r2 = socket(0x22, 0x80000, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfff}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000085100400402d29f428b262ea2b0000009500330000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004025}, 0x4000001) 2m0.192639489s ago: executing program 3 (id=4749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r2, 0x0, r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a000034000000000011907800000000ffffffff4414090000004e20000c907801000400"], 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x68, r5, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, [""]}, 0x68}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x10000081}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) 1m59.922218009s ago: executing program 1 (id=4752): r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom(r1, 0x0, 0x0, 0x60, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000002e000900a4000b00ead6000facf097d2a86d8653b1b1e2e5364d364c7f94dee0b2796ce7d99e37c446e76d010400000000000035c27a32c84a36cf357eac0b6d806fffffffff6b9e53ed8f6b56884c2fa6480b57f2bcda55050a02ca844277a70664750b4ad7887c70c530bc2cb907b5d68837286d3305b7b29069f588e78ad6bd640179a8d50b5fb0bb676cf7f94b0f0b98001e55208d010f95ba962b1a5a571dda37a2148c2ca1"], 0xb8}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m59.832022247s ago: executing program 1 (id=4753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m51.439528418s ago: executing program 3 (id=4756): r0 = socket(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) unshare(0x600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xa, '\x00', r2, r6, 0x1, 0x2, 0x4}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x6e071, 0xffffffffffffffff, 0x80000000) 1m42.449559819s ago: executing program 32 (id=4753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m41.909621296s ago: executing program 3 (id=4760): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000001bc0)=0x8, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000100)=0xe) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, {0x0, 0x0, 0x800}, 0x200, 0x10000000, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in6=@private0, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 1m38.571400844s ago: executing program 2 (id=4763): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000240)=0x409, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x10, 0x4, 0x786c8824}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={r5, 0xe8, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x100, @mcast2, 0x6}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0xac9, @mcast1, 0x7fffffff}, @in6={0xa, 0x4e22, 0xcd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1d}, @in6={0xa, 0x4e20, 0xf2e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ed1}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x5}, @in6={0xa, 0x4e23, 0x4c, @remote, 0x40000000}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000140)=0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r6, &(0x7f0000000300)=""/74, 0x4a) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000864d00002800038004000100200003800c0001800500020000000000100001800c00020073797a5f747598d9"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m30.76758941s ago: executing program 3 (id=4765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x300, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20008020) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x7a, 0x6, 0x8, 0x8, 0x7, 0xdc2, 0x7, 0x0, 0x2, 0xb9, 0xdac, 0x4, 0xb10, 0x589, 0x3, 0x87, 0x1e, 0x200, 0x100, 0x3, 0x8a, 0x7fffffff, 0x9, 0x4, 0x1, 0x6, 0x2, 0x2, 0x4, 0xfa, 0x10001, 0x5, 0x75, 0x9, 0x8, 0x6, 0x2, 0x40000, 0x2, 0x56, 0x7, 0x4, 0xff, 0xff, 0x8000, 0x6, 0xd6ba, 0x3e, 0x4, 0x1, 0x8, 0x7b, 0x80000001, 0xfffffffe, 0xab, 0x8, 0xc, 0x7, 0x3, 0x2, 0xf79, 0x2, 0x7, 0x89, 0xe0, 0x56, 0x2, 0x5, 0x8, 0x2, 0x7fff, 0xfffffff7, 0x34, 0x60a, 0xfffffffa, 0x7, 0xfffffffa, 0x80, 0x2403, 0xfffff801, 0x9, 0x6, 0x2, 0x7, 0x3d, 0x2, 0xffff91f0, 0x4, 0x3, 0x9, 0x7f, 0x1, 0x3, 0x5, 0x4, 0x3, 0x1, 0x0, 0x3, 0xffff1b80, 0x8, 0x101, 0xf, 0x0, 0x0, 0x8, 0x800, 0xfffffffe, 0x9, 0x0, 0x10001, 0xb, 0x2, 0xf721, 0x0, 0x7, 0x4, 0x1, 0x5, 0x2, 0xb, 0xa, 0x1000, 0x6, 0x8, 0x8, 0x74, 0x3, 0x1, 0x76, 0x10001, 0x928, 0xf, 0x1, 0xffff0001, 0x715, 0x3, 0x2, 0x68, 0x6, 0x4, 0x9, 0x9, 0x1, 0x81, 0xa, 0x6, 0xc7f, 0x6f01, 0x0, 0x7, 0x0, 0x4067, 0x272, 0xfffffffb, 0xf, 0x81, 0x7, 0x5, 0x8001, 0x3ff, 0x7, 0x82fb, 0x409b, 0x2, 0x7, 0x7, 0x1, 0xb9, 0x1, 0x84d8, 0x1, 0x48, 0x5, 0x6, 0x5, 0x1, 0x9, 0x3, 0x6, 0x8001, 0xdf43, 0x4, 0x548, 0xf, 0x1, 0x7fffffff, 0x8, 0x8000, 0x2, 0x7, 0x1, 0x2, 0x3, 0xe, 0x6, 0x3, 0x4, 0xb77, 0x8, 0x5a99, 0x80000000, 0x101, 0x101, 0x7, 0xb2cc, 0x800, 0x7c6, 0xa000, 0x8, 0x9, 0x9, 0x10001, 0x8001, 0x100, 0x52d4, 0xcfeb, 0x7, 0x0, 0x7, 0x11, 0x1ff, 0x7, 0x982, 0x0, 0x1, 0x1, 0x2, 0x5, 0x2, 0x40000000, 0x9, 0x7, 0xfffffffa, 0xffff, 0x5, 0x200, 0x1, 0x2, 0x8, 0x6, 0xc, 0x9, 0x1ff, 0x9, 0x7fff, 0x2, 0xa, 0x8080, 0x1, 0x474e, 0x0, 0x5, 0x172151fb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x3, 0x7, 0x6b, {0x4, 0x2, 0x8, 0x40, 0x4, 0x400}, {0x5, 0x1, 0x67b7, 0x0, 0xffff, 0x4}, 0xfffffff9, 0x2, 0xe314}}, @TCA_POLICE_RATE={0x404, 0x2, [0x45a, 0x9, 0x7, 0x80000000, 0x47, 0x3bf, 0x6, 0x2, 0xf9, 0x10, 0x6, 0xffff5bd2, 0x4, 0x7df, 0x5, 0x4, 0xf, 0x7, 0xdce, 0x1, 0x8, 0xec93, 0xfba, 0x7, 0x6, 0x2, 0x5, 0x98e7, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7, 0x54e6, 0xa, 0x3, 0x7, 0x1, 0x5, 0x3, 0x6, 0x0, 0xfffffff7, 0x8ad, 0x0, 0x8, 0x8, 0xfffffe01, 0x1000, 0xfffffff7, 0xc, 0x2, 0x100, 0x2, 0x3000000, 0x4, 0x0, 0x1, 0x8001, 0x5, 0x5, 0x2, 0x3220550a, 0x4, 0x5ffe, 0x5, 0x6, 0x9, 0x167, 0x3, 0x5, 0x6, 0x0, 0x7d, 0x3000000, 0xffffffff, 0x7, 0x8000, 0x26b, 0x5, 0x8, 0x4, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0xb60, 0x4, 0x1, 0x101, 0x0, 0x4, 0xb, 0x7, 0x786, 0x46f1f65b, 0x1c4, 0x19, 0x800, 0x81, 0x9, 0x401, 0x1ff, 0x8, 0x8, 0xffff6d16, 0xf, 0x7f, 0x2, 0x5, 0x1000, 0x7, 0x4, 0x2, 0xff, 0x8, 0x9, 0x7f70, 0x7, 0x4, 0x81, 0x0, 0x32, 0xb3, 0x1, 0x2, 0x2731, 0x9, 0x9, 0x7, 0x9e, 0x300000, 0xffff, 0xa, 0x4, 0x8, 0x84, 0x0, 0x7fff, 0x5, 0x800, 0x6, 0x3, 0x7, 0x5, 0x905d, 0x10a0, 0xfff, 0x7, 0x8, 0xffffffff, 0xfffffffb, 0x6, 0x6, 0x7f, 0x0, 0xab, 0x9, 0x9, 0x5, 0x7ff, 0x6, 0x6, 0x10, 0x5, 0x8, 0x6, 0x3bd, 0x2, 0x401, 0x1ff, 0x5, 0x373b, 0x800, 0xdee6, 0xe5f7, 0x7, 0x7ff, 0x60000, 0xe, 0x2, 0x4, 0x0, 0x2600, 0x80000001, 0x7, 0x3, 0x2, 0x4, 0xf, 0x6, 0x3, 0x80, 0x100, 0x6, 0x401, 0x1000, 0x6, 0x5, 0xa, 0x5, 0x3, 0x7f, 0x8, 0x0, 0x1, 0x0, 0xfffffffd, 0x8, 0xffffffd6, 0x5, 0x7ff, 0xffffff80, 0x3, 0xc, 0x9, 0x4, 0x3940e8a8, 0x7, 0xe189, 0x7b1ee370, 0x4, 0x0, 0x56, 0x4, 0x5, 0xfffeffff, 0x8, 0x2, 0x6, 0xf0, 0xffffda3a, 0x2, 0x7, 0xc53, 0x1000, 0x5, 0x396, 0x3, 0x1, 0x2, 0x3, 0x7, 0x0, 0x0, 0xc627, 0x0, 0x0, 0x5, 0x8, 0xfff, 0x0, 0x1000]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x20004044) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m23.999470362s ago: executing program 2 (id=4767): syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0700ffffffff08004500001c0000000000019078ac1e0001ac1414aab4a70574e44db900"], 0x0) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00'}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x4, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x24}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r5, 0x10e, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000001401"], 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x804) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x24, r11, 0x601, 0x3fffe, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfe000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xb4, r11, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4abb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x6}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10000000}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r7, 0xcf78f0963a8022e3, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x101}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x44040) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40930, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x3, [@local, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x16}]}, 0x1c) 1m16.831009516s ago: executing program 0 (id=4769): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f454", 0x2e}], 0x1}}], 0x1, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r2, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}], 0x1, 0x20048080) shutdown(r2, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1m13.977977109s ago: executing program 33 (id=4765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x300, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20008020) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x7a, 0x6, 0x8, 0x8, 0x7, 0xdc2, 0x7, 0x0, 0x2, 0xb9, 0xdac, 0x4, 0xb10, 0x589, 0x3, 0x87, 0x1e, 0x200, 0x100, 0x3, 0x8a, 0x7fffffff, 0x9, 0x4, 0x1, 0x6, 0x2, 0x2, 0x4, 0xfa, 0x10001, 0x5, 0x75, 0x9, 0x8, 0x6, 0x2, 0x40000, 0x2, 0x56, 0x7, 0x4, 0xff, 0xff, 0x8000, 0x6, 0xd6ba, 0x3e, 0x4, 0x1, 0x8, 0x7b, 0x80000001, 0xfffffffe, 0xab, 0x8, 0xc, 0x7, 0x3, 0x2, 0xf79, 0x2, 0x7, 0x89, 0xe0, 0x56, 0x2, 0x5, 0x8, 0x2, 0x7fff, 0xfffffff7, 0x34, 0x60a, 0xfffffffa, 0x7, 0xfffffffa, 0x80, 0x2403, 0xfffff801, 0x9, 0x6, 0x2, 0x7, 0x3d, 0x2, 0xffff91f0, 0x4, 0x3, 0x9, 0x7f, 0x1, 0x3, 0x5, 0x4, 0x3, 0x1, 0x0, 0x3, 0xffff1b80, 0x8, 0x101, 0xf, 0x0, 0x0, 0x8, 0x800, 0xfffffffe, 0x9, 0x0, 0x10001, 0xb, 0x2, 0xf721, 0x0, 0x7, 0x4, 0x1, 0x5, 0x2, 0xb, 0xa, 0x1000, 0x6, 0x8, 0x8, 0x74, 0x3, 0x1, 0x76, 0x10001, 0x928, 0xf, 0x1, 0xffff0001, 0x715, 0x3, 0x2, 0x68, 0x6, 0x4, 0x9, 0x9, 0x1, 0x81, 0xa, 0x6, 0xc7f, 0x6f01, 0x0, 0x7, 0x0, 0x4067, 0x272, 0xfffffffb, 0xf, 0x81, 0x7, 0x5, 0x8001, 0x3ff, 0x7, 0x82fb, 0x409b, 0x2, 0x7, 0x7, 0x1, 0xb9, 0x1, 0x84d8, 0x1, 0x48, 0x5, 0x6, 0x5, 0x1, 0x9, 0x3, 0x6, 0x8001, 0xdf43, 0x4, 0x548, 0xf, 0x1, 0x7fffffff, 0x8, 0x8000, 0x2, 0x7, 0x1, 0x2, 0x3, 0xe, 0x6, 0x3, 0x4, 0xb77, 0x8, 0x5a99, 0x80000000, 0x101, 0x101, 0x7, 0xb2cc, 0x800, 0x7c6, 0xa000, 0x8, 0x9, 0x9, 0x10001, 0x8001, 0x100, 0x52d4, 0xcfeb, 0x7, 0x0, 0x7, 0x11, 0x1ff, 0x7, 0x982, 0x0, 0x1, 0x1, 0x2, 0x5, 0x2, 0x40000000, 0x9, 0x7, 0xfffffffa, 0xffff, 0x5, 0x200, 0x1, 0x2, 0x8, 0x6, 0xc, 0x9, 0x1ff, 0x9, 0x7fff, 0x2, 0xa, 0x8080, 0x1, 0x474e, 0x0, 0x5, 0x172151fb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x3, 0x7, 0x6b, {0x4, 0x2, 0x8, 0x40, 0x4, 0x400}, {0x5, 0x1, 0x67b7, 0x0, 0xffff, 0x4}, 0xfffffff9, 0x2, 0xe314}}, @TCA_POLICE_RATE={0x404, 0x2, [0x45a, 0x9, 0x7, 0x80000000, 0x47, 0x3bf, 0x6, 0x2, 0xf9, 0x10, 0x6, 0xffff5bd2, 0x4, 0x7df, 0x5, 0x4, 0xf, 0x7, 0xdce, 0x1, 0x8, 0xec93, 0xfba, 0x7, 0x6, 0x2, 0x5, 0x98e7, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7, 0x54e6, 0xa, 0x3, 0x7, 0x1, 0x5, 0x3, 0x6, 0x0, 0xfffffff7, 0x8ad, 0x0, 0x8, 0x8, 0xfffffe01, 0x1000, 0xfffffff7, 0xc, 0x2, 0x100, 0x2, 0x3000000, 0x4, 0x0, 0x1, 0x8001, 0x5, 0x5, 0x2, 0x3220550a, 0x4, 0x5ffe, 0x5, 0x6, 0x9, 0x167, 0x3, 0x5, 0x6, 0x0, 0x7d, 0x3000000, 0xffffffff, 0x7, 0x8000, 0x26b, 0x5, 0x8, 0x4, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0xb60, 0x4, 0x1, 0x101, 0x0, 0x4, 0xb, 0x7, 0x786, 0x46f1f65b, 0x1c4, 0x19, 0x800, 0x81, 0x9, 0x401, 0x1ff, 0x8, 0x8, 0xffff6d16, 0xf, 0x7f, 0x2, 0x5, 0x1000, 0x7, 0x4, 0x2, 0xff, 0x8, 0x9, 0x7f70, 0x7, 0x4, 0x81, 0x0, 0x32, 0xb3, 0x1, 0x2, 0x2731, 0x9, 0x9, 0x7, 0x9e, 0x300000, 0xffff, 0xa, 0x4, 0x8, 0x84, 0x0, 0x7fff, 0x5, 0x800, 0x6, 0x3, 0x7, 0x5, 0x905d, 0x10a0, 0xfff, 0x7, 0x8, 0xffffffff, 0xfffffffb, 0x6, 0x6, 0x7f, 0x0, 0xab, 0x9, 0x9, 0x5, 0x7ff, 0x6, 0x6, 0x10, 0x5, 0x8, 0x6, 0x3bd, 0x2, 0x401, 0x1ff, 0x5, 0x373b, 0x800, 0xdee6, 0xe5f7, 0x7, 0x7ff, 0x60000, 0xe, 0x2, 0x4, 0x0, 0x2600, 0x80000001, 0x7, 0x3, 0x2, 0x4, 0xf, 0x6, 0x3, 0x80, 0x100, 0x6, 0x401, 0x1000, 0x6, 0x5, 0xa, 0x5, 0x3, 0x7f, 0x8, 0x0, 0x1, 0x0, 0xfffffffd, 0x8, 0xffffffd6, 0x5, 0x7ff, 0xffffff80, 0x3, 0xc, 0x9, 0x4, 0x3940e8a8, 0x7, 0xe189, 0x7b1ee370, 0x4, 0x0, 0x56, 0x4, 0x5, 0xfffeffff, 0x8, 0x2, 0x6, 0xf0, 0xffffda3a, 0x2, 0x7, 0xc53, 0x1000, 0x5, 0x396, 0x3, 0x1, 0x2, 0x3, 0x7, 0x0, 0x0, 0xc627, 0x0, 0x0, 0x5, 0x8, 0xfff, 0x0, 0x1000]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x20004044) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m13.306373691s ago: executing program 2 (id=4771): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000080)=0xfe66) socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r2, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), 0x0}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e24, 0xd, @loopback, 0x9}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x7}, 0x6}]}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="7d1068", 0x3) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="7d1068", 0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_TID={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a300000000009000300"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a300000000009000300"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4800) r7 = accept4(r0, 0x0, 0x0, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0x40840}, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) 1m6.706389705s ago: executing program 2 (id=4773): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x1, 0x7ff, 0x9, 0x80, 0x9}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x6, 0x7, 0x5, 0x2, 0xffffffc7}, &(0x7f0000000240)=0x14) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0)=0x9, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0xfffffffeffe) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfa, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008000) 1m5.109203992s ago: executing program 0 (id=4774): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x600) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x600) 1m1.446559377s ago: executing program 4 (id=4775): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.10575455s ago: executing program 2 (id=4776): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000)=0x1, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24008081}, 0x29a83a76ae447bdd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x4, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) sendmmsg(r7, &(0x7f00000002c0), 0x0, 0x40c4) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) listen(r8, 0xe) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x18, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffd, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 55.737573539s ago: executing program 0 (id=4777): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r4}, 0x20) close(0x3) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 53.395142938s ago: executing program 4 (id=4778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.988339125s ago: executing program 2 (id=4779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0000000}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(0x3) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r13, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r14}, 0x10) 44.107776541s ago: executing program 0 (id=4780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, r3, 0x200, 0x3, 0x25dfdbfe, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x58}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000c04b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 42.988810214s ago: executing program 4 (id=4781): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000002c0)='wg1\x00', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb, r6}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 33.345541418s ago: executing program 34 (id=4779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0000000}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(0x3) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r13, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r14}, 0x10) 32.853546395s ago: executing program 0 (id=4783): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_delroute={0x54, 0x19, 0x503, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x10, 0x81, 0xfc, 0x2, 0xfd, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_IIF={0x8, 0x3, r2}, @RTA_OIF={0x8, 0x4, r5}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40841}, 0x4008802) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) 32.85252706s ago: executing program 4 (id=4784): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) (async) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000008f080000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf090000000000005509010000000080950000000000000018f7ff00756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000000500f4fff0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xfffffe87, &(0x7f0000000cc0)=""/4094, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0xe, 0xa, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10, 0x7, 0x8, 0x3, 0x2, 0x6, 0xd, 0xd], 0x1, [0x1, 0x2883, 0x85, 0x1, 0x10, 0x0, 0x9, 0x7, 0x7ff, 0xc, 0x4, 0x6, 0x42d, 0x8, 0x200, 0x4], [0x36e, 0xd, 0xeed, 0x5, 0x200, 0x1, 0x32c4, 0x0, 0x5, 0x0, 0x10, 0x7, 0x200, 0x29, 0xffff, 0x3]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0xac}}, 0x40044) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r9 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r10 = accept4$tipc(r9, &(0x7f00000001c0)=@name, &(0x7f00000004c0)=0x10, 0x80800) getsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) 26.913767693s ago: executing program 4 (id=4785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000002000000fe80000000000000000000000000000c000004d32b00000002000000fe88000000000000000000000000010101350000ee"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 26.414293721s ago: executing program 0 (id=4786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8864}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xf4, 0x0, 0x41, 0x21, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}}}}}}}, 0x26) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r1}, 0x7, &(0x7f0000000040)=[0x1, 0xfffffffffffffff8, 0x723f, 0xe5a, 0x6, 0x1, 0xd], 0x0, 0x1, 0x1}) 17.016055154s ago: executing program 4 (id=4787): r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/162, 0xa2}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/71, 0x47}], 0x5, 0x3, 0x3) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x3, 0x80000001, {{0x2a, 0x4, 0x2, 0x4, 0xa8, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x13, 0xa0, [@loopback, @local, @loopback, @multicast1]}, @ssrr={0x89, 0x1b, 0xdc, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @end, @cipso={0x86, 0x32, 0x3, [{0x5, 0x9, "290928ea69cf13"}, {0x7, 0xe, "fb22f9a3e17ae747ea15a54f"}, {0x5, 0x6, "cb514247"}, {0x7, 0xf, "219ddaa3daf0fe4e8c577a1f04"}]}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x1, [{@local, 0x2}, {@multicast1, 0x7}, {@multicast2, 0x1}, {@broadcast, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$packet(r4, &(0x7f0000000680)={0x11, 0x1, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x20, r2, 0x105, 0x0, 0x8000, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "bb3f27819cc613dcbf91dc167dfa2dee90"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.393114746s ago: executing program 35 (id=4786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8864}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xf4, 0x0, 0x41, 0x21, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}}}}}}}, 0x26) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r1}, 0x7, &(0x7f0000000040)=[0x1, 0xfffffffffffffff8, 0x723f, 0xe5a, 0x6, 0x1, 0xd], 0x0, 0x1, 0x1}) 0s ago: executing program 36 (id=4787): r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/162, 0xa2}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/71, 0x47}], 0x5, 0x3, 0x3) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x3, 0x80000001, {{0x2a, 0x4, 0x2, 0x4, 0xa8, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x13, 0xa0, [@loopback, @local, @loopback, @multicast1]}, @ssrr={0x89, 0x1b, 0xdc, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @end, @cipso={0x86, 0x32, 0x3, [{0x5, 0x9, "290928ea69cf13"}, {0x7, 0xe, "fb22f9a3e17ae747ea15a54f"}, {0x5, 0x6, "cb514247"}, {0x7, 0xf, "219ddaa3daf0fe4e8c577a1f04"}]}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x1, [{@local, 0x2}, {@multicast1, 0x7}, {@multicast2, 0x1}, {@broadcast, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$packet(r4, &(0x7f0000000680)={0x11, 0x1, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x20, r2, 0x105, 0x0, 0x8000, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "bb3f27819cc613dcbf91dc167dfa2dee90"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): 1000 [ 693.188387][T19010] wg1 speed is unknown, defaulting to 1000 [ 693.375269][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3214'. [ 693.385914][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 693.479259][T15027] Bluetooth: hci4: command 0x0405 tx timeout [ 694.219936][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3216'. [ 694.375534][T19045] netlink: 'syz.3.3218': attribute type 21 has an invalid length. [ 694.395818][T19010] chnl_net:caif_netlink_parms(): no params data found [ 694.430363][ T8189] net_ratelimit: 158 callbacks suppressed [ 694.430382][ T8189] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.447743][T19045] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3218'. [ 694.480399][ T8189] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.511827][ T7472] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.534456][ T7472] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 694.654865][T19054] batadv1: entered promiscuous mode [ 694.660358][ T6455] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.671293][T19054] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 694.686661][T19059] batadv2: entered promiscuous mode [ 694.693476][T19059] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 694.711073][T18585] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.759168][T19048] wg1 speed is unknown, defaulting to 1000 [ 694.765303][ T7472] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.799322][T18585] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.818212][T19048] lo speed is unknown, defaulting to 1000 [ 694.823984][T19010] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.824177][ T3515] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.826516][T19010] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.845369][ T3515] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 694.849786][T19010] bridge_slave_0: entered allmulticast mode [ 694.863378][T19010] bridge_slave_0: entered promiscuous mode [ 694.875880][T19063] tipc: Enabling of bearer rejected, already enabled [ 694.886465][T19010] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.893748][T19010] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.903461][T19010] bridge_slave_1: entered allmulticast mode [ 694.914210][T19010] bridge_slave_1: entered promiscuous mode [ 694.920272][ T52] Bluetooth: hci1: command tx timeout [ 694.925615][T19048] lo speed is unknown, defaulting to 1000 [ 695.028156][T19063] tipc: Resetting bearer [ 695.036679][T19048] wg1 speed is unknown, defaulting to 1000 [ 695.136562][T19010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.161139][T19075] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.3224'. [ 695.197758][T19010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.364290][T19010] team0: Port device team_slave_0 added [ 695.376850][T19081] xt_bpf: check failed: parse error [ 695.406652][T19010] team0: Port device team_slave_1 added [ 695.414034][T19078] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3225'. [ 695.625733][T19010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.659759][T19010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.705015][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3229'. [ 695.722645][T19010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.739812][T19010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.746948][T19010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.787123][T19010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.926593][T19010] hsr_slave_0: entered promiscuous mode [ 695.935137][T19010] hsr_slave_1: entered promiscuous mode [ 695.942129][T19010] debugfs: 'hsr0' already exists in 'hsr' [ 695.947994][T19010] Cannot create hsr debugfs directory [ 695.996573][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 696.262216][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3232'. [ 696.436306][T19010] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.543700][T19118] nbd: must specify at least one socket [ 696.552869][T19010] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.751565][T19010] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.856146][T19010] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.999294][ T52] Bluetooth: hci1: command tx timeout [ 697.208694][T19010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 697.241950][T19010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 697.271231][T19010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 697.305366][T19010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 697.322440][T19153] netlink: 'syz.0.3244': attribute type 83 has an invalid length. [ 697.465618][T19010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.516968][T19010] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.550043][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.557260][ T8186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.600729][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.607977][ T8186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.078341][T19188] bond1: option miimon: invalid value (18446744073709551607) [ 698.094193][T19188] bond1: option miimon: allowed values 0 - 2147483647 [ 698.153283][T19188] bond1 (unregistering): Released all slaves [ 698.769919][T19010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.837675][T19205] netlink: 'syz.0.3257': attribute type 1 has an invalid length. [ 698.887748][T19205] syzkaller0: entered promiscuous mode [ 698.903982][T19205] syzkaller0: entered allmulticast mode [ 699.079500][ T52] Bluetooth: hci1: command tx timeout [ 699.119349][T19010] veth0_vlan: entered promiscuous mode [ 699.143948][T19010] veth1_vlan: entered promiscuous mode [ 699.263379][T19010] veth0_macvtap: entered promiscuous mode [ 699.301419][T19010] veth1_macvtap: entered promiscuous mode [ 699.389776][T19010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.435453][T19010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.450325][ T8186] net_ratelimit: 157 callbacks suppressed [ 699.450344][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.499942][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.519360][ T8190] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.548095][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.581768][ T8190] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.594764][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.619131][ T6458] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.650173][ T8188] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.660626][ T8186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.670902][ T1013] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.723923][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.769522][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.832922][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.870429][ T8190] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 699.933773][ T6454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.999023][ T6454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.085609][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.104867][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.431885][T19251] syzkaller0: entered promiscuous mode [ 700.438258][T19251] syzkaller0: entered allmulticast mode [ 700.703902][T19258] __nla_validate_parse: 1 callbacks suppressed [ 700.703932][T19258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3208'. [ 700.795438][T19256] tipc: Enabling of bearer rejected, already enabled [ 701.159751][ T52] Bluetooth: hci1: command tx timeout [ 701.363386][T19284] Bluetooth: MGMT ver 1.23 [ 701.449917][T19287] netlink: 'syz.3.3278': attribute type 4 has an invalid length. [ 701.509696][T19294] netlink: 'syz.3.3278': attribute type 4 has an invalid length. [ 701.573253][T19287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3278'. [ 701.684660][T19296] netlink: 'syz.1.3280': attribute type 13 has an invalid length. [ 702.001815][T19306] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 702.093791][T19296] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.101627][T19296] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.331645][ T5896] IPVS: starting estimator thread 0... [ 702.441851][T19314] IPVS: using max 25 ests per chain, 60000 per kthread [ 702.572204][T19296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.595567][T19296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.887206][T19307] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 702.900612][T19306] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 702.988346][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.070542][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.120045][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.139497][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.399048][T15027] Bluetooth: hci2: command 0x0405 tx timeout [ 703.399090][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 703.875472][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 703.892314][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 704.479122][ T6458] net_ratelimit: 119 callbacks suppressed [ 704.479152][ T6458] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 704.493113][ T6458] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 704.609156][ T8188] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 704.617243][ T8188] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 704.729170][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 704.738718][T19239] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 704.849157][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 704.857251][T19239] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 704.969505][ T6458] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 704.978610][ T6458] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 706.690389][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 706.774731][T19404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'. [ 706.875046][T19413] lo: Caught tx_queue_len zero misconfig [ 706.964218][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'. [ 707.145229][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 707.626526][T19438] team0: Device gtp0 is up. Set it down before adding it as a team port [ 707.718598][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3319'. [ 707.795482][T19452] syzkaller0: entered promiscuous mode [ 707.822654][T19452] syzkaller0: entered allmulticast mode [ 707.978233][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 708.160886][T19477] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3325'. [ 708.217078][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3325'. [ 708.442952][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 708.476440][T19491] wg1 speed is unknown, defaulting to 1000 [ 708.485774][T19491] lo speed is unknown, defaulting to 1000 [ 708.494509][T19491] lo speed is unknown, defaulting to 1000 [ 708.502576][T19491] wg1 speed is unknown, defaulting to 1000 [ 709.032907][T19509] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.3333'. [ 709.118124][T19509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.245297][T19509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.293064][T19517] wg1 speed is unknown, defaulting to 1000 [ 709.303788][T19517] lo speed is unknown, defaulting to 1000 [ 709.311939][T19517] lo speed is unknown, defaulting to 1000 [ 709.320288][T19517] wg1 speed is unknown, defaulting to 1000 [ 709.539347][T18585] net_ratelimit: 139 callbacks suppressed [ 709.539371][T18585] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 709.562686][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.572193][T19509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.609773][ T6454] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 709.626792][ T6454] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 709.750706][T19509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.769108][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 709.839990][T18585] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 709.883237][ T6454] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 709.901189][ T6454] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 709.918138][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3339'. [ 710.018665][ T6454] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 710.026657][ T6454] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 710.332347][T19545] lo: entered allmulticast mode [ 710.462892][T19545] lo: left allmulticast mode [ 710.499624][ T754] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.559572][ T6454] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.614545][T19550] netlink: 'syz.0.3343': attribute type 10 has an invalid length. [ 710.632261][ T6452] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.693560][T19550] team0: Port device netdevsim0 added [ 710.750741][ T8189] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.803063][T19548] xt_hashlimit: overflow, try lower: 3/0 [ 711.498915][T19571] tipc: Started in network mode [ 711.504357][T19571] tipc: Node identity da5d19e66872, cluster identity 4711 [ 711.569351][T19571] tipc: Enabled bearer , priority 0 [ 711.629578][ T1013] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.648387][ T1013] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.943159][T19571] tipc: Disabling bearer [ 711.973476][ T1013] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.984434][T19584] __nla_validate_parse: 1 callbacks suppressed [ 711.984452][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.000163][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.011269][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.020521][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.030080][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.040071][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.049690][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.061550][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.071804][ T1013] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.083008][T19587] mac80211_hwsim hwsim34 syzkaller0: Caught tx_queue_len zero misconfig [ 712.146725][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.169771][T19584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3351'. [ 712.369433][T19593] wg1 speed is unknown, defaulting to 1000 [ 712.377386][T19593] lo speed is unknown, defaulting to 1000 [ 712.385122][T19593] lo speed is unknown, defaulting to 1000 [ 712.419957][T19593] wg1 speed is unknown, defaulting to 1000 [ 712.612575][T19601] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 712.642736][T19601] xt_ipcomp: unknown flags 1D [ 712.666083][T19601] macsec1: entered allmulticast mode [ 712.684231][T19601] dummy0: entered allmulticast mode [ 712.700928][T19601] dummy0: left allmulticast mode [ 713.153224][T19627] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 713.376036][T19635] tap0: tun_chr_ioctl cmd 2148553947 [ 713.425876][T19635] tap0: tun_chr_ioctl cmd 2147767521 [ 713.434028][T19635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.443225][T19635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.023556][T19656] x_tables: duplicate underflow at hook 4 [ 714.131372][T19659] wg1 speed is unknown, defaulting to 1000 [ 714.174288][T19659] lo speed is unknown, defaulting to 1000 [ 714.193803][T19659] lo speed is unknown, defaulting to 1000 [ 714.202790][T19659] wg1 speed is unknown, defaulting to 1000 [ 714.561922][ T5968] net_ratelimit: 119 callbacks suppressed [ 714.561941][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.571492][ T1013] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 714.586119][ T1013] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 714.703431][ T1013] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 714.711665][ T1013] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 714.859335][ T1013] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 714.869659][ T1013] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 715.013798][ T8188] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 715.040043][ T8188] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 715.059094][ T8188] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 715.394508][T19692] tipc: Invalid UDP bearer configuration [ 715.394559][T19692] tipc: Enabling of bearer rejected, failed to enable media [ 715.534280][T19699] ip6gre1: entered promiscuous mode [ 715.539746][T19699] ip6gre1: entered allmulticast mode [ 715.615419][ T1013] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.651997][T10288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.660462][ T1013] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.779316][T10288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.810227][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805f412800: rx timeout, send abort [ 715.820864][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f412800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 715.860214][T10288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.118066][T19706] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 716.822181][T19740] netlink: 'syz.4.3394': attribute type 10 has an invalid length. [ 716.881086][T19743] vlan2: entered allmulticast mode [ 717.036535][T19748] gtp0: entered promiscuous mode [ 717.066829][T19748] gtp0: entered allmulticast mode [ 717.108096][T19752] __nla_validate_parse: 132 callbacks suppressed [ 717.108115][T19752] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3398'. [ 717.136259][T19743] bridge2: entered promiscuous mode [ 717.151989][T19743] bridge2: entered allmulticast mode [ 717.528351][T19767] netlink: 'syz.3.3403': attribute type 1 has an invalid length. [ 717.587642][T19771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'. [ 717.621656][T19766] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3402'. [ 717.641617][T19766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'. [ 717.726689][T19767] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 717.782355][T19778] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 717.965292][T19778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 718.090914][T19783] bond1: (slave geneve2): making interface the new active one [ 718.111074][T19783] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 718.224870][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 718.236350][T19800] x_tables: duplicate underflow at hook 2 [ 718.508659][T19814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3415'. [ 718.522155][T19809] wg1 speed is unknown, defaulting to 1000 [ 718.530532][T19814] netlink: 'syz.0.3415': attribute type 1 has an invalid length. [ 718.542923][T19809] lo speed is unknown, defaulting to 1000 [ 718.590468][T19809] lo speed is unknown, defaulting to 1000 [ 718.598803][T19809] wg1 speed is unknown, defaulting to 1000 [ 718.664415][T19814] veth3: entered promiscuous mode [ 718.692348][T19814] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 718.753554][T19817] wg1 speed is unknown, defaulting to 1000 [ 718.845310][T19817] lo speed is unknown, defaulting to 1000 [ 718.861128][T19817] lo speed is unknown, defaulting to 1000 [ 718.876532][T19817] wg1 speed is unknown, defaulting to 1000 [ 719.116260][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3418'. [ 719.282969][T19844] wg1 speed is unknown, defaulting to 1000 [ 719.292969][T19845] can: request_module (can-proto-3) failed. [ 719.336452][T19844] lo speed is unknown, defaulting to 1000 [ 719.357022][T19854] : renamed from bond_slave_0 (while UP) [ 719.483564][T19844] lo speed is unknown, defaulting to 1000 [ 719.493369][T19844] wg1 speed is unknown, defaulting to 1000 [ 719.568968][ C1] net_ratelimit: 1488 callbacks suppressed [ 719.568989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.583758][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.592420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.599669][ T6455] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 719.605345][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.616752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.626334][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.634930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.643097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.653254][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.769608][T19861] netlink: 'syz.2.3425': attribute type 1 has an invalid length. [ 719.815189][T19861] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3425'. [ 719.845397][T19861] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3425'. [ 719.879408][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 719.909046][T19861] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3425'. [ 721.671531][T19886] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 721.683309][T19886] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 721.716140][T19887] macvlan4: entered promiscuous mode [ 721.731400][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.731863][T19887] macvlan4: entered allmulticast mode [ 721.748764][T19887] bond3: (slave macvlan4): Error -98 calling set_mac_address [ 722.138460][T19924] netlink: 'syz.3.3442': attribute type 8 has an invalid length. [ 722.177478][T19924] sch_fq: defrate 0 ignored. [ 722.221655][T19927] __nla_validate_parse: 4 callbacks suppressed [ 722.221676][T19927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3443'. [ 722.269169][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 722.346156][T19936] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3445'. [ 722.354427][T19927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3443'. [ 722.373294][T19927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.437015][T19940] tipc: Enabling of bearer rejected, failed to enable media [ 722.470353][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3448'. [ 722.521184][T19943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3445'. [ 722.741813][T19957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3452'. [ 722.803383][T19957] gtp0: entered promiscuous mode [ 722.818691][T19957] gtp0: entered allmulticast mode [ 722.902966][T19958] wg1 speed is unknown, defaulting to 1000 [ 722.970628][T19958] lo speed is unknown, defaulting to 1000 [ 722.978130][T19958] lo speed is unknown, defaulting to 1000 [ 723.005233][T19958] wg1 speed is unknown, defaulting to 1000 [ 723.118429][T19988] netlink: 'syz.0.3460': attribute type 1 has an invalid length. [ 723.218357][T19995] syzkaller1: entered promiscuous mode [ 723.279149][T19995] syzkaller1: entered allmulticast mode [ 723.645510][T20018] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.3467'. [ 724.124257][T20040] netlink: 'syz.4.3472': attribute type 1 has an invalid length. [ 724.639047][ T754] net_ratelimit: 868 callbacks suppressed [ 724.639066][ T754] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 724.663457][ T754] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 724.693585][T20066] delete_channel: no stack [ 724.779188][ T8189] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 724.786983][ T8189] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 724.848303][T20075] wg1 speed is unknown, defaulting to 1000 [ 724.870198][T20084] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 724.879949][ T8191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.929042][ T1337] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 724.959818][ T8189] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 724.975812][T20084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 725.009687][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 725.032916][ T1337] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 725.046957][T20075] lo speed is unknown, defaulting to 1000 [ 725.059177][ T1337] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 725.076491][T20090] vlan2: entered promiscuous mode [ 725.096907][T20090] bond1: entered promiscuous mode [ 725.104260][T20090] vlan2: entered allmulticast mode [ 725.109986][T20090] bond1: entered allmulticast mode [ 725.122436][T20093] syz_tun: entered allmulticast mode [ 725.127824][T20075] lo speed is unknown, defaulting to 1000 [ 725.139442][T20086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3480'. [ 725.170894][T20090] bond1: (slave gretap1): making interface the new active one [ 725.190067][T20090] gretap1: entered promiscuous mode [ 725.200090][T20090] gretap1: entered allmulticast mode [ 725.211564][T20090] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 725.235879][T20075] wg1 speed is unknown, defaulting to 1000 [ 725.243143][T20094] syz_tun: left allmulticast mode [ 725.971718][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 726.003615][T20126] netlink: 'syz.4.3491': attribute type 9 has an invalid length. [ 726.028785][T20124] bridge0: entered promiscuous mode [ 726.037335][T20124] macsec1: entered promiscuous mode [ 726.066270][T20124] bridge0: port 3(macsec1) entered blocking state [ 726.092567][T20124] bridge0: port 3(macsec1) entered disabled state [ 726.109586][T20124] macsec1: entered allmulticast mode [ 726.136530][T20124] bridge0: entered allmulticast mode [ 726.152142][T20124] macsec1: left allmulticast mode [ 726.177050][T20124] bridge0: left allmulticast mode [ 726.202420][T20124] bridge0: left promiscuous mode [ 726.625799][T20148] xt_TCPMSS: Only works on TCP SYN packets [ 726.639262][T20148] netlink: 'syz.1.3495': attribute type 13 has an invalid length. [ 726.769362][T20150] nbd4: detected capacity change from 0 to 63 [ 726.776104][T20152] block nbd4: NBD_DISCONNECT [ 726.785662][T20152] block nbd4: Disconnected due to user request. [ 726.795492][T20152] block nbd4: shutting down sockets [ 726.985857][T20161] pim6reg1: entered promiscuous mode [ 727.039268][T20161] pim6reg1: entered allmulticast mode [ 727.727795][T20186] __nla_validate_parse: 3 callbacks suppressed [ 727.727816][T20186] netlink: 87 bytes leftover after parsing attributes in process `syz.0.3506'. [ 727.746449][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'. [ 728.057008][T20167] delete_channel: no stack [ 728.161431][T20205] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3512'. [ 728.193779][T20205] tipc: Enabling of bearer rejected, failed to enable media [ 728.255240][T20205] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3512'. [ 728.561541][T20228] netlink: 'syz.3.3520': attribute type 2 has an invalid length. [ 728.759225][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 728.836279][T20237] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3522'. [ 728.866546][T20237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3522'. [ 728.919310][T15027] Bluetooth: hci3: command 0x0405 tx timeout [ 728.927542][T20241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3523'. [ 728.939608][T20241] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3523'. [ 729.065492][T20243] syzkaller0: entered promiscuous mode [ 729.092031][T20243] syzkaller0: entered allmulticast mode [ 729.126831][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3525'. [ 729.244527][T20253] netlink: 'syz.4.3527': attribute type 11 has an invalid length. [ 729.362659][T20260] netlink: 64703 bytes leftover after parsing attributes in process `syz.1.3531'. [ 729.369405][T20245] nbd0: detected capacity change from 0 to 8330032288104575 [ 729.482943][T20266] netlink: 'syz.0.3532': attribute type 1 has an invalid length. [ 729.692089][T20274] IPv6: Can't replace route, no match found [ 729.719630][ T1337] net_ratelimit: 147 callbacks suppressed [ 729.719653][ T1337] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 729.770646][ T8191] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 729.778718][ T8191] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 729.889320][ T8191] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 729.897396][ T8191] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 729.907444][ T52] block nbd0: Receive control failed (result -32) [ 729.982674][T20279] tipc: Enabling of bearer rejected, already enabled [ 730.019509][ T1337] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 730.027374][ T1337] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 730.118053][T20281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.130761][T20281] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 730.150905][ T6458] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 730.180493][ T1337] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 730.262794][T20288] syzkaller0: entered promiscuous mode [ 730.268397][T20288] syzkaller0: entered allmulticast mode [ 730.298891][T20288] netlink: 'syz.4.3539': attribute type 10 has an invalid length. [ 730.317604][T20288] team0: Device ipvlan1 failed to register rx_handler [ 730.431544][T20294] bond2: option lacp_rate: invalid value (255) [ 730.442950][T20294] bond2 (unregistering): Released all slaves [ 730.686902][T20305] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 730.706291][T20308] wg1 speed is unknown, defaulting to 1000 [ 730.714293][T20308] lo speed is unknown, defaulting to 1000 [ 730.725061][T20308] lo speed is unknown, defaulting to 1000 [ 730.734271][T20308] wg1 speed is unknown, defaulting to 1000 [ 730.792730][T20312] team0: Caught tx_queue_len zero misconfig [ 730.941960][T20323] tipc: Started in network mode [ 730.948118][T20323] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 730.959828][T20323] tipc: Enabling of bearer rejected, failed to enable media [ 731.245893][T20300] delete_channel: no stack [ 731.433982][T20346] mac80211_hwsim hwsim34 syzkaller0: Caught tx_queue_len zero misconfig [ 731.838192][T20366] netlink: 'syz.3.3559': attribute type 3 has an invalid length. [ 731.850723][T20366] netlink: 'syz.3.3559': attribute type 3 has an invalid length. [ 731.915201][T10288] IPVS: starting estimator thread 0... [ 731.951254][T20361] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 731.981101][T20363] bond2: option arp_validate: invalid value (18446744073491447809) [ 732.019166][T20375] IPVS: using max 30 ests per chain, 72000 per kthread [ 732.032799][T20363] bond2 (unregistering): Released all slaves [ 732.172337][T20380] bond4: option lp_interval: invalid value (0) [ 732.178700][T20380] bond4: option lp_interval: allowed values 1 - 2147483647 [ 732.192249][T20380] bond4 (unregistering): Released all slaves [ 732.311392][T20382] bond4: entered promiscuous mode [ 732.316486][T20382] bond4: entered allmulticast mode [ 732.329698][T20382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 732.572517][T20405] syzkaller0: entered promiscuous mode [ 732.579269][T20405] syzkaller0: entered allmulticast mode [ 732.658436][T20415] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 733.040916][T20426] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.175299][T20429] syz_tun: entered promiscuous mode [ 733.193378][T20429] macvtap1: entered promiscuous mode [ 733.220813][T20429] syz_tun: left promiscuous mode [ 733.416521][T20426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.435161][T20440] tipc: Enabled bearer , priority 0 [ 733.492921][T20444] syzkaller0: entered promiscuous mode [ 733.498677][T20444] syzkaller0: entered allmulticast mode [ 733.521496][T20440] sch_tbf: burst 380 is lower than device syzkaller0 mtu (1514) ! [ 733.610223][T20426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.640138][T20444] tipc: Resetting bearer [ 733.669325][T20439] tipc: Resetting bearer [ 733.749648][T20439] tipc: Disabling bearer [ 733.807914][T20426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.065198][T20485] __nla_validate_parse: 6 callbacks suppressed [ 734.065215][T20485] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3588'. [ 734.082709][ T6455] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.091903][T20484] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3588'. [ 734.154680][ T8188] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.196392][ T8188] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.225882][T20493] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 734.235337][T20492] netlink: 'syz.3.3589': attribute type 3 has an invalid length. [ 734.235360][T20492] netlink: 'syz.3.3589': attribute type 1 has an invalid length. [ 734.235376][T20492] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3589'. [ 734.238601][T20492] sctp: [Deprecated]: syz.3.3589 (pid 20492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.238601][T20492] Use struct sctp_sack_info instead [ 734.293349][ T8186] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.365892][T20496] netlink: 'syz.2.3590': attribute type 5 has an invalid length. [ 734.413765][T20499] tap0: tun_chr_ioctl cmd 2148553947 [ 734.465286][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 734.485867][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 734.498501][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3591'. [ 734.508643][T20499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.517363][T20499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.570564][T20499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.578027][T20499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.703702][T20517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3593'. [ 734.762641][T19239] net_ratelimit: 155 callbacks suppressed [ 734.762663][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 734.800645][T19239] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 734.846750][T20522] netem: change failed [ 734.874668][T20523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.884211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.929117][ T36] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 734.941243][ T36] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 735.059318][ T3515] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 735.077605][ T3515] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 735.196036][T20542] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3602'. [ 735.219083][ T8191] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 735.235432][T20540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3601'. [ 735.252980][ T8191] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 735.290622][T20545] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 735.301539][T20545] netlink: 'syz.3.3603': attribute type 6 has an invalid length. [ 735.329429][T20545] netlink: 'syz.3.3603': attribute type 3 has an invalid length. [ 735.526709][T20554] wg1 speed is unknown, defaulting to 1000 [ 735.562281][T20554] lo speed is unknown, defaulting to 1000 [ 735.581396][T20554] lo speed is unknown, defaulting to 1000 [ 735.589529][T20554] wg1 speed is unknown, defaulting to 1000 [ 735.894730][T20581] netlink: 'syz.0.3610': attribute type 1 has an invalid length. [ 735.941279][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 735.977823][T20581] bond5: entered promiscuous mode [ 735.986385][T20581] bond5: entered allmulticast mode [ 736.001675][T20581] 8021q: adding VLAN 0 to HW filter on device bond5 [ 736.329881][T20598] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 736.567878][T20603] wg1 speed is unknown, defaulting to 1000 [ 736.690780][T20603] lo speed is unknown, defaulting to 1000 [ 736.745336][T20603] lo speed is unknown, defaulting to 1000 [ 736.784649][T20603] wg1 speed is unknown, defaulting to 1000 [ 737.033329][T20625] netlink: 'syz.2.3622': attribute type 2 has an invalid length. [ 737.090427][T20625] : entered promiscuous mode [ 737.365778][T20633] blkio.reset_stats is deprecated [ 737.525805][T20635] wg1 speed is unknown, defaulting to 1000 [ 737.547085][T20635] lo speed is unknown, defaulting to 1000 [ 737.568379][T20635] lo speed is unknown, defaulting to 1000 [ 737.594121][T20635] wg1 speed is unknown, defaulting to 1000 [ 737.681912][T20641] syzkaller0: entered promiscuous mode [ 737.688078][T20641] syzkaller0: entered allmulticast mode [ 738.451113][T20676] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 738.469047][T20676] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 738.643721][T20679] wg1 speed is unknown, defaulting to 1000 [ 738.690280][T20685] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 738.691520][T20679] lo speed is unknown, defaulting to 1000 [ 738.760942][T20679] lo speed is unknown, defaulting to 1000 [ 738.768519][T20679] wg1 speed is unknown, defaulting to 1000 [ 738.954216][T20694] tipc: Enabled bearer , priority 0 [ 739.103487][T20700] pim6reg: entered allmulticast mode [ 739.110148][T20694] syzkaller0: entered promiscuous mode [ 739.115724][T20694] syzkaller0: entered allmulticast mode [ 739.240005][T20692] tipc: Resetting bearer [ 739.300555][T20692] tipc: Disabling bearer [ 739.314606][T20700] pim6reg: left allmulticast mode [ 739.661386][T20724] __nla_validate_parse: 8 callbacks suppressed [ 739.661408][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 739.855884][T20728] bond2: option ad_select: invalid value (34) [ 739.869987][T20728] bond2 (unregistering): Released all slaves [ 739.880650][ T6452] net_ratelimit: 118 callbacks suppressed [ 739.880669][ T6452] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 739.897723][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3650'. [ 739.941590][ T6452] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 739.980877][ T6452] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 740.015189][ T6452] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 740.037105][ T6452] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 740.173515][ T8191] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 740.181617][ T8191] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 740.318868][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 740.337873][ T8186] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 740.459237][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 741.365337][T20781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3659'. [ 741.563609][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3662'. [ 742.377952][T20809] wg1 speed is unknown, defaulting to 1000 [ 742.401618][T20809] lo speed is unknown, defaulting to 1000 [ 742.417057][T20794] delete_channel: no stack [ 742.424149][T20809] lo speed is unknown, defaulting to 1000 [ 742.470745][T20809] wg1 speed is unknown, defaulting to 1000 [ 742.550119][T20815] syzkaller1: entered promiscuous mode [ 742.562388][T20815] syzkaller1: entered allmulticast mode [ 742.579942][T20815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3670'. [ 742.599795][T20815] nft_compat: unsupported protocol 0 [ 743.103963][T20834] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 743.134318][T20834] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 743.338225][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3678'. [ 743.535558][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3680'. [ 743.593102][T20856] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3681'. [ 743.615534][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3680'. [ 743.643267][T20856] validate_nla: 1 callbacks suppressed [ 743.643347][T20856] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 743.707100][T20856] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3681'. [ 744.008649][T20874] netlink: 'syz.2.3685': attribute type 1 has an invalid length. [ 744.095430][T20874] bond2: entered promiscuous mode [ 744.135185][T20874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.201518][T20877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.214495][T20877] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 744.253430][T20877] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 744.266281][T20877] bond2: (slave gre1): Opening slave failed [ 744.310532][T20888] syz.4.3686 (20888) used obsolete PPPIOCDETACH ioctl [ 744.959608][ T36] net_ratelimit: 112 callbacks suppressed [ 744.959653][ T36] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 744.993942][T20857] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 745.019091][ T6458] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 745.049586][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 745.299290][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 745.307086][T19239] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 745.419099][ T6010] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 745.438322][ T6010] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 745.541460][T20928] bridge0: entered promiscuous mode [ 745.546772][T20928] macsec1: entered promiscuous mode [ 745.559990][T20928] bridge0: port 2(macsec1) entered blocking state [ 745.566845][T20928] bridge0: port 2(macsec1) entered disabled state [ 745.589527][ T6010] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 745.609595][T20928] macsec1: entered allmulticast mode [ 745.615031][T20928] bridge0: entered allmulticast mode [ 745.620341][ T6010] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 745.642659][T20928] macsec1: left allmulticast mode [ 745.659316][T20928] bridge0: left allmulticast mode [ 745.670338][T20928] bridge0: left promiscuous mode [ 745.774922][T20925] wg1 speed is unknown, defaulting to 1000 [ 745.790889][T20925] lo speed is unknown, defaulting to 1000 [ 745.813347][T20925] lo speed is unknown, defaulting to 1000 [ 745.819791][T20931] veth0_to_hsr: entered promiscuous mode [ 745.840061][T20931] veth0_to_hsr: entered allmulticast mode [ 745.870128][T20925] wg1 speed is unknown, defaulting to 1000 [ 745.950442][T20939] wg1 speed is unknown, defaulting to 1000 [ 745.984766][T20939] lo speed is unknown, defaulting to 1000 [ 746.009335][T20939] lo speed is unknown, defaulting to 1000 [ 746.039375][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 746.073527][T20939] wg1 speed is unknown, defaulting to 1000 [ 746.119040][T20944] wg1 speed is unknown, defaulting to 1000 [ 746.136140][T20947] wg1 speed is unknown, defaulting to 1000 [ 746.136157][T20944] lo speed is unknown, defaulting to 1000 [ 746.174387][T20947] lo speed is unknown, defaulting to 1000 [ 746.187286][T20944] lo speed is unknown, defaulting to 1000 [ 746.201553][T20944] wg1 speed is unknown, defaulting to 1000 [ 746.201571][T20947] lo speed is unknown, defaulting to 1000 [ 746.227162][T20947] wg1 speed is unknown, defaulting to 1000 [ 747.073102][T20982] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 747.186018][T20986] __nla_validate_parse: 3 callbacks suppressed [ 747.186038][T20986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3710'. [ 747.655261][T21003] tipc: Enabling of bearer rejected, already enabled [ 747.684439][T21003] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 747.701455][T21003] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 747.733029][T21003] tipc: Enabling of bearer rejected, already enabled [ 747.834676][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3715'. [ 747.982752][T21012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3716'. [ 748.868531][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 748.882807][T21049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3724'. [ 749.042450][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 749.110766][T21054] vlan2: entered promiscuous mode [ 749.115935][T21054] gretap0: entered promiscuous mode [ 749.386168][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3729'. [ 749.404058][T15027] Bluetooth: hci2: command 0x0405 tx timeout [ 749.532248][T21072] tipc: Cannot configure node identity twice [ 749.576842][T21072] tipc: Cannot configure node identity twice [ 749.663146][T21075] netlink: 'syz.1.3730': attribute type 2 has an invalid length. [ 749.677750][T21075] : entered promiscuous mode [ 749.722342][T21075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3730'. [ 749.840502][T21085] batadv0: entered promiscuous mode [ 749.875363][T21085] macvtap1: entered promiscuous mode [ 749.921453][T21085] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 749.969101][ T8186] net_ratelimit: 102 callbacks suppressed [ 749.969122][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.000044][ T8186] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 750.038005][T21090] xt_CT: No such helper "snmp_trap" [ 750.149159][T21091] netlink: 'syz.0.3734': attribute type 11 has an invalid length. [ 750.159726][T21081] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.219118][ T7472] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.232538][T21092] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 750.238748][T21092] syzkaller1: linktype set to 260 [ 750.250058][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.269177][ T7472] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.289049][ T3570] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.309008][ T8191] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.339849][ T8191] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.371168][ T8191] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 750.591749][T21118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3740'. [ 750.623254][T21118] tipc: Invalid UDP bearer configuration [ 750.623305][T21118] tipc: Enabling of bearer rejected, failed to enable media [ 750.862380][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 750.875282][T21129] syzkaller1: entered promiscuous mode [ 750.884356][T21129] syzkaller1: entered allmulticast mode [ 751.317137][T21142] team0 (unregistering): Port device team_slave_0 removed [ 751.336165][T21142] team0 (unregistering): Port device team_slave_1 removed [ 751.393215][T21129] wg1 speed is unknown, defaulting to 1000 [ 751.404298][T21129] lo speed is unknown, defaulting to 1000 [ 751.414074][T21156] xt_bpf: check failed: parse error [ 751.432400][T21129] lo speed is unknown, defaulting to 1000 [ 751.451422][T21129] wg1 speed is unknown, defaulting to 1000 [ 751.557028][T21162] 8021q: VLANs not supported on sit0 [ 752.072871][T21182] netlink: 'syz.2.3758': attribute type 1 has an invalid length. [ 752.332833][T21194] wg1 speed is unknown, defaulting to 1000 [ 752.340440][T21194] lo speed is unknown, defaulting to 1000 [ 752.347768][T21194] lo speed is unknown, defaulting to 1000 [ 752.356002][T21194] wg1 speed is unknown, defaulting to 1000 [ 752.418003][T21201] xt_hashlimit: max too large, truncated to 1048576 [ 752.812766][T21216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 752.928861][T21220] bond_slave_0: entered promiscuous mode [ 752.934661][T21220] bond_slave_1: entered promiscuous mode [ 752.943495][T21220] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 752.970488][T21220] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 753.004399][T21216] bridge_slave_0: left allmulticast mode [ 753.014313][T21216] bridge_slave_0: left promiscuous mode [ 753.022954][T21216] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.036092][T21216] bridge_slave_1: left allmulticast mode [ 753.043900][T21216] bridge_slave_1: left promiscuous mode [ 753.050220][T21216] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.064282][T21216] bond0: (slave bond_slave_0): Releasing backup interface [ 753.076180][T21216] bond_slave_0: left promiscuous mode [ 753.096179][T21216] bond0: (slave bond_slave_1): Releasing backup interface [ 753.105919][T21216] bond_slave_1: left promiscuous mode [ 753.126404][T21216] team0: Port device team_slave_0 removed [ 753.160147][T21216] team0: Port device team_slave_1 removed [ 753.170325][T21216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.179756][T21216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.188406][T21216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.199276][T21216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.221494][T21219] tipc: Enabled bearer , priority 0 [ 753.232199][T21233] syzkaller0: entered promiscuous mode [ 753.237726][T21233] syzkaller0: entered allmulticast mode [ 753.251140][T21234] __nla_validate_parse: 3 callbacks suppressed [ 753.251158][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3767'. [ 753.297932][T21230] syzkaller1: entered promiscuous mode [ 753.309095][T21230] syzkaller1: entered allmulticast mode [ 753.329309][ T61] bond4: (slave macvlan2): speed changed to 0 on port 1 [ 753.369725][T21238] syzkaller1: left promiscuous mode [ 753.375938][T21238] syzkaller1: left allmulticast mode [ 753.385230][T21239] tipc: Resetting bearer [ 753.402679][T21218] tipc: Resetting bearer [ 753.455774][T21218] tipc: Disabling bearer [ 753.604979][ T3515] bond4: (slave macvlan2): link status definitely down, disabling slave [ 753.827022][T21261] delete_channel: no stack [ 753.934390][T21269] netlink: 'syz.4.3776': attribute type 13 has an invalid length. [ 754.536476][T21289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3784'. [ 754.606977][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3784'. [ 754.808180][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 755.018740][T21312] syzkaller1: entered promiscuous mode [ 755.024420][T21312] syzkaller1: entered allmulticast mode [ 755.079838][ T1337] net_ratelimit: 157 callbacks suppressed [ 755.079859][ T1337] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.119536][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.139087][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.159451][ T61] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.179018][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.199719][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.220380][ T37] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.246162][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.279669][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.299220][T19239] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 755.452231][T21317] wg1 speed is unknown, defaulting to 1000 [ 755.462820][T21317] lo speed is unknown, defaulting to 1000 [ 755.470551][T21317] lo speed is unknown, defaulting to 1000 [ 755.477724][T21317] wg1 speed is unknown, defaulting to 1000 [ 755.972949][T21342] netlink: 'syz.0.3797': attribute type 11 has an invalid length. [ 755.981296][T21342] netlink: 'syz.0.3797': attribute type 11 has an invalid length. [ 756.001319][T21342] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3797'. [ 756.024489][T21346] netlink: 'syz.2.3796': attribute type 3 has an invalid length. [ 756.052606][T21346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3796'. [ 756.138798][T21354] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3800'. [ 756.469984][T21367] wg1 speed is unknown, defaulting to 1000 [ 756.485803][T21367] lo speed is unknown, defaulting to 1000 [ 756.507219][T21367] lo speed is unknown, defaulting to 1000 [ 756.519977][T21367] wg1 speed is unknown, defaulting to 1000 [ 756.697591][T21390] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3811'. [ 756.710756][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 756.719980][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 757.113366][T21407] netlink: 'syz.4.3816': attribute type 29 has an invalid length. [ 757.126005][T21409] netlink: 'syz.3.3817': attribute type 7 has an invalid length. [ 757.383646][T21415] netlink: 'syz.3.3817': attribute type 7 has an invalid length. [ 757.654981][T21433] syzkaller0: entered promiscuous mode [ 757.669415][T21433] syzkaller0: entered allmulticast mode [ 758.252161][T21462] netlink: 'syz.2.3832': attribute type 13 has an invalid length. [ 758.284178][T21462] __nla_validate_parse: 3 callbacks suppressed [ 758.284201][T21462] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3832'. [ 758.323967][T21462] syz_tun: refused to change device tx_queue_len [ 758.373959][T21462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3832'. [ 758.425585][T21474] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3835'. [ 758.667318][T21495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3838'. [ 758.717030][T21497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3840'. [ 758.761568][T21482] syzkaller1: entered promiscuous mode [ 758.767086][T21482] syzkaller1: entered allmulticast mode [ 758.779351][T21499] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 758.826549][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 758.879233][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 758.972489][T21510] netlink: 'syz.2.3842': attribute type 12 has an invalid length. [ 759.601747][T21525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3850'. [ 759.741955][T21526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3850'. [ 759.806185][T21530] netlink: 'syz.1.3853': attribute type 2 has an invalid length. [ 759.821839][T21530] netlink: 'syz.1.3853': attribute type 2 has an invalid length. [ 759.884029][T21534] xt_recent: Unsupported userspace flags (000000b1) [ 760.070505][T21538] wg1 speed is unknown, defaulting to 1000 [ 760.089108][ T6458] net_ratelimit: 123 callbacks suppressed [ 760.089127][ T6458] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.105622][T21538] lo speed is unknown, defaulting to 1000 [ 760.149818][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.171367][ T754] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.181888][T21538] lo speed is unknown, defaulting to 1000 [ 760.193005][T21538] wg1 speed is unknown, defaulting to 1000 [ 760.199493][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.208036][ T8186] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 760.349075][ T8186] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.380710][ T8186] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 760.386444][T21555] netlink: 'syz.0.3859': attribute type 3 has an invalid length. [ 760.409491][T21555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3859'. [ 760.513453][ T754] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.549304][ T6454] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.579055][ T6454] bond7: (slave ip6gretap3): link status up, enabling it in 0 ms [ 761.074981][T21585] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.083546][T21585] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.158417][T21593] tipc: Enabling of bearer rejected, failed to enable media [ 761.383579][T21608] netlink: 'syz.2.3871': attribute type 29 has an invalid length. [ 761.430447][T21603] wg1 speed is unknown, defaulting to 1000 [ 761.430514][T21608] netlink: 'syz.2.3871': attribute type 29 has an invalid length. [ 761.543232][T21603] lo speed is unknown, defaulting to 1000 [ 761.571293][T21603] lo speed is unknown, defaulting to 1000 [ 761.602054][T21603] wg1 speed is unknown, defaulting to 1000 [ 761.716278][T21623] netlink: 'syz.1.3875': attribute type 6 has an invalid length. [ 762.094708][T21630] wg1 speed is unknown, defaulting to 1000 [ 762.171105][T21630] lo speed is unknown, defaulting to 1000 [ 762.244806][T21630] lo speed is unknown, defaulting to 1000 [ 762.258480][T21641] wg1: entered promiscuous mode [ 762.263737][T21641] wg1: entered allmulticast mode [ 762.325986][T21630] wg1 speed is unknown, defaulting to 1000 [ 762.853715][T21655] veth1_macvtap: left promiscuous mode [ 763.133837][ T8186] batman_adv: batadv0: Interface deactivated: gretap2 [ 763.524350][ T8186] bond7 (unregistering): (slave ip6gretap3): Releasing active interface [ 763.728139][ T8186] bond5 (unregistering): (slave gretap1): Releasing active interface [ 763.750347][ T8186] batman_adv: batadv0: Removing interface: gretap2 [ 763.972276][ T8186] `: Port device bridge2 removed [ 764.140393][ T8186] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 764.149186][ T8186] bridge6 (unregistering): left promiscuous mode [ 764.155561][ T8186] bridge6 (unregistering): left allmulticast mode [ 764.506843][ T8186] bond0 (unregistering): Released all slaves [ 764.609458][ T8186] bond1 (unregistering): Released all slaves [ 764.708186][ T8186] bond2 (unregistering): Released all slaves [ 764.802582][ T8186] bond3 (unregistering): Released all slaves [ 764.895583][ T8186] bond4 (unregistering): Released all slaves [ 764.991754][ T8186] bond5 (unregistering): Released all slaves [ 765.007374][ T8186] bond6 (unregistering): Released all slaves [ 765.106149][ T8186] bond7 (unregistering): Released all slaves [ 765.120184][ T8186] bond8 (unregistering): Released all slaves [ 765.133817][ T8186] bond9 (unregistering): Released all slaves [ 765.230973][ T8186] bond10 (unregistering): (slave bond11): Releasing backup interface [ 765.239605][ T8186] bond11 (unregistering): left promiscuous mode [ 765.247177][ T8186] bond10 (unregistering): Released all slaves [ 765.343724][ T8186] bond11 (unregistering): Released all slaves [ 765.436443][ T8186] bond12 (unregistering): Released all slaves [ 765.451237][ T8186] bond13 (unregistering): Released all slaves [ 765.546288][ T8186] bond14 (unregistering): Released all slaves [ 765.651545][ T8186] bond15 (unregistering): Released all slaves [ 765.771674][T21668] wg1 speed is unknown, defaulting to 1000 [ 765.787734][T21668] lo speed is unknown, defaulting to 1000 [ 765.817029][T21668] lo speed is unknown, defaulting to 1000 [ 765.895378][T21668] wg1 speed is unknown, defaulting to 1000 [ 765.898832][ T8186] tipc: Left network mode [ 766.055820][T21678] __nla_validate_parse: 7 callbacks suppressed [ 766.055839][T21678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3888'. [ 766.076201][T21678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3888'. [ 766.152542][T21680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3890'. [ 766.240704][T21685] netlink: 'syz.2.3892': attribute type 5 has an invalid length. [ 766.336132][T21687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 766.406977][T21687] pim6reg: entered allmulticast mode [ 766.435762][T21687] pim6reg: left allmulticast mode [ 766.470553][T21693] net_ratelimit: 71 callbacks suppressed [ 766.470574][T21693] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 766.513644][ T8186] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 766.527790][ T8186] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 766.615840][T21693] sit2: entered promiscuous mode [ 766.709116][ T8186] veth0_to_hsr: left promiscuous mode [ 766.729256][ T8186] batadv_slave_0: left promiscuous mode [ 766.848434][ T8186] hsr_slave_0: left promiscuous mode [ 766.860018][ T8186] hsr_slave_1: left promiscuous mode [ 767.184115][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 767.450240][ T8186] pimreg9 (unregistering): left allmulticast mode [ 768.308094][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 768.338354][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 768.363415][T21731] tipc: Enabling of bearer rejected, failed to enable media [ 768.641965][T21748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3903'. [ 768.694303][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 768.705045][T21748] nbd: must specify at least one socket [ 770.180282][T21764] netlink: 'syz.4.3909': attribute type 39 has an invalid length. [ 771.275945][T21764] hsr_slave_1 (unregistering): left promiscuous mode [ 771.545938][T21774] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 771.560697][T21774] bond5 (unregistering): Released all slaves [ 771.588694][T21772] wg1 speed is unknown, defaulting to 1000 [ 771.606793][T21772] lo speed is unknown, defaulting to 1000 [ 771.615727][T21772] lo speed is unknown, defaulting to 1000 [ 771.632923][ T8186] IPVS: stop unused estimator thread 0... [ 771.912667][T21807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3918'. [ 771.957307][T21807] tc_dump_action: action bad kind [ 772.054968][T21811] wg1 speed is unknown, defaulting to 1000 [ 772.094067][T21818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3921'. [ 772.123698][T21811] lo speed is unknown, defaulting to 1000 [ 772.129597][T21818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3921'. [ 772.129898][T21817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3921'. [ 772.185304][T21811] lo speed is unknown, defaulting to 1000 [ 772.199491][T21817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3921'. [ 772.535716][T21834] vlan3: entered allmulticast mode [ 772.577388][T21834] bridge0: port 3(vlan3) entered blocking state [ 772.585188][T21834] bridge0: port 3(vlan3) entered disabled state [ 772.594147][T21834] vlan3: entered promiscuous mode [ 772.667703][T21842] xt_HMARK: proto mask must be zero with L3 mode [ 772.918046][T21854] netlink: 'syz.1.3930': attribute type 1 has an invalid length. [ 773.011402][T21857] syzkaller0: entered promiscuous mode [ 773.021999][T21857] syzkaller0: entered allmulticast mode [ 773.111634][T21866] rdma_op ffff88807dbe79f0 conn xmit_rdma 0000000000000000 [ 774.208361][T21913] bond6: option arp_validate: invalid value (18446744073491447809) [ 774.219651][T21913] bond6 (unregistering): Released all slaves [ 774.261547][T21919] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.3949'. [ 774.860578][T21944] dvmrp0: entered allmulticast mode [ 775.008965][T21951] netlink: 'syz.0.3961': attribute type 10 has an invalid length. [ 775.019607][T21953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3962'. [ 775.074746][T21951] team0: Device ipvlan1 failed to register rx_handler [ 775.636760][T21981] IPVS: length: 35 != 24 [ 775.796962][T21987] tunl0: Caught tx_queue_len zero misconfig [ 775.889279][T21988] dummy0: Caught tx_queue_len zero misconfig [ 775.951706][T21992] netlink: 'syz.0.3972': attribute type 2 has an invalid length. [ 775.960025][T21992] netlink: 'syz.0.3972': attribute type 5 has an invalid length. [ 775.994910][T21998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3975'. [ 776.003568][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 776.024009][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 776.105723][T21999] wg1 speed is unknown, defaulting to 1000 [ 776.162119][T22005] netlink: 'syz.1.3976': attribute type 1 has an invalid length. [ 776.176210][T21992] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 776.222172][T21999] lo speed is unknown, defaulting to 1000 [ 776.242383][T21999] lo speed is unknown, defaulting to 1000 [ 776.282087][T22015] atomic_op ffff88807bc61198 conn xmit_atomic 0000000000000000 [ 776.457636][T22022] netlink: 'syz.3.3980': attribute type 30 has an invalid length. [ 776.676509][T22028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 776.925195][T22041] netlink: 'syz.4.3984': attribute type 1 has an invalid length. [ 776.937384][T22041] netlink: 'syz.4.3984': attribute type 3 has an invalid length. [ 776.952145][T22041] __nla_validate_parse: 29 callbacks suppressed [ 776.952167][T22041] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3984'. [ 777.040906][T22046] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 777.066575][T22046] bond2 (unregistering): Released all slaves [ 777.257030][T22063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.426417][T22070] wg1 speed is unknown, defaulting to 1000 [ 777.435043][T22070] lo speed is unknown, defaulting to 1000 [ 777.445178][T22070] lo speed is unknown, defaulting to 1000 [ 777.544630][T22073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.577617][T22076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.629108][T22078] netlink: 'syz.4.3995': attribute type 12 has an invalid length. [ 777.702477][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'. [ 777.711643][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3996'. [ 777.837558][T22090] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3997'. [ 777.887248][T22090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3997'. [ 778.316658][T22114] wg1 speed is unknown, defaulting to 1000 [ 778.357446][T22114] lo speed is unknown, defaulting to 1000 [ 778.529696][T22114] lo speed is unknown, defaulting to 1000 [ 778.612061][T22121] syzkaller0: entered promiscuous mode [ 778.617689][T22121] syzkaller0: entered allmulticast mode [ 778.946993][T22141] netlink: 548 bytes leftover after parsing attributes in process `syz.0.4008'. [ 779.323670][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.174905][T22133] netlink: 'syz.0.4008': attribute type 29 has an invalid length. [ 780.502931][T22150] wg1 speed is unknown, defaulting to 1000 [ 780.523770][T22150] lo speed is unknown, defaulting to 1000 [ 780.541064][T22150] lo speed is unknown, defaulting to 1000 [ 780.725423][T22168] netlink: 'syz.2.4016': attribute type 9 has an invalid length. [ 780.912386][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4016'. [ 781.195802][T22185] wg1 speed is unknown, defaulting to 1000 [ 781.223619][T22185] lo speed is unknown, defaulting to 1000 [ 781.232550][T22185] lo speed is unknown, defaulting to 1000 [ 781.386965][T22195] netlink: 'syz.4.4022': attribute type 1 has an invalid length. [ 781.455238][T22195] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.4022'. [ 781.648535][T22210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4026'. [ 781.695085][T22216] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4029'. [ 781.933131][T22223] wg1 speed is unknown, defaulting to 1000 [ 781.964488][T22229] __nla_validate_parse: 1 callbacks suppressed [ 781.964504][T22229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'. [ 782.043607][T22223] lo speed is unknown, defaulting to 1000 [ 782.080131][T22223] lo speed is unknown, defaulting to 1000 [ 782.172155][T22237] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 782.594393][T22249] wg1 speed is unknown, defaulting to 1000 [ 782.690653][T22249] lo speed is unknown, defaulting to 1000 [ 782.785602][T22249] lo speed is unknown, defaulting to 1000 [ 782.869012][T22259] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4039'. [ 783.429754][T22293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4047'. [ 783.589682][T22293] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.706418][T22296] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 783.766494][T22296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.818888][T22296] bond5: (slave lo): Enslaving as an active interface with an up link [ 784.015051][T22293] bond5 (unregistering): (slave lo): Releasing backup interface [ 784.026448][T22293] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 784.041869][T22293] bond5 (unregistering): Released all slaves [ 784.082056][T22315] tipc: Enabling not permitted [ 784.088283][T22315] tipc: Enabling of bearer rejected, failed to enable media [ 784.281279][T22340] netlink: 'syz.0.4056': attribute type 21 has an invalid length. [ 784.305508][T22340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4056'. [ 784.447460][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4059'. [ 784.500850][T22354] syzkaller1: entered promiscuous mode [ 784.537924][T22354] syzkaller1: entered allmulticast mode [ 784.549265][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4057'. [ 784.685974][T22349] wg1 speed is unknown, defaulting to 1000 [ 784.735364][T22349] lo speed is unknown, defaulting to 1000 [ 784.772155][T22349] lo speed is unknown, defaulting to 1000 [ 784.882161][T22373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4065'. [ 784.903700][T22373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4065'. [ 784.959834][T22373] geneve3: entered promiscuous mode [ 784.974125][T22373] geneve3: entered allmulticast mode [ 785.041118][T22372] geneve1: entered promiscuous mode [ 785.046387][T22372] geneve1: entered allmulticast mode [ 785.094591][T22377] wg1 speed is unknown, defaulting to 1000 [ 785.121070][T22377] lo speed is unknown, defaulting to 1000 [ 785.171012][T22377] lo speed is unknown, defaulting to 1000 [ 785.305174][T22393] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 785.387770][T22402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4074'. [ 785.697070][T22424] syzkaller0: entered promiscuous mode [ 785.702712][T22424] syzkaller0: entered allmulticast mode [ 785.718424][T22427] tipc: Enabling of bearer rejected, already enabled [ 787.366923][T22450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4086'. [ 787.378514][T22448] Cannot find set identified by id 3 to match [ 787.633297][T22456] netlink: 'syz.2.4089': attribute type 1 has an invalid length. [ 787.651884][T22456] netlink: 'syz.2.4089': attribute type 22 has an invalid length. [ 787.842495][T22465] syzkaller0: entered promiscuous mode [ 787.850515][T22465] syzkaller0: entered allmulticast mode [ 787.867138][T22465] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 788.106683][T22478] wg1 speed is unknown, defaulting to 1000 [ 788.115946][T22478] lo speed is unknown, defaulting to 1000 [ 788.136153][T22478] lo speed is unknown, defaulting to 1000 [ 788.157749][T22479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4095'. [ 788.231300][T22479] tipc: Started in network mode [ 788.237072][T22479] tipc: Node identity baa50c42040e, cluster identity 4711 [ 788.246931][T22479] tipc: Enabled bearer , priority 0 [ 788.255296][T22481] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4096'. [ 788.270919][T22479] syzkaller0: entered promiscuous mode [ 788.276929][T22479] syzkaller0: entered allmulticast mode [ 788.354048][T22477] tipc: Resetting bearer [ 788.394400][T22477] tipc: Disabling bearer [ 788.437461][T22494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4099'. [ 788.456802][T22494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4099'. [ 788.502873][T22494] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 788.548607][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4099'. [ 788.619353][T22494] bond2 (unregistering): Released all slaves [ 788.730151][T22501] netlink: 'syz.3.4100': attribute type 12 has an invalid length. [ 789.026760][T22515] wg1 speed is unknown, defaulting to 1000 [ 789.075833][T22515] lo speed is unknown, defaulting to 1000 [ 789.092737][T22515] lo speed is unknown, defaulting to 1000 [ 789.173103][T22521] netlink: 'syz.2.4107': attribute type 12 has an invalid length. [ 789.252671][T22521] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 789.762025][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'. [ 789.844257][T22540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4112'. [ 789.911470][T22551] syzkaller0: entered promiscuous mode [ 789.937230][T22551] syzkaller0: entered allmulticast mode [ 789.986142][T22555] netlink: 'syz.2.4117': attribute type 9 has an invalid length. [ 790.051419][T22557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'. [ 790.246494][T22562] wg1 speed is unknown, defaulting to 1000 [ 790.288620][T22562] lo speed is unknown, defaulting to 1000 [ 790.309415][T22562] lo speed is unknown, defaulting to 1000 [ 790.339413][T22566] wg1 speed is unknown, defaulting to 1000 [ 790.425875][T22566] lo speed is unknown, defaulting to 1000 [ 790.426154][T22572] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4121'. [ 790.452100][T22570] wg1 speed is unknown, defaulting to 1000 [ 790.500812][T22570] lo speed is unknown, defaulting to 1000 [ 790.524354][T22566] lo speed is unknown, defaulting to 1000 [ 790.567965][T22570] lo speed is unknown, defaulting to 1000 [ 791.334589][T22604] netlink: 'syz.3.4126': attribute type 1 has an invalid length. [ 791.839875][T22613] Bluetooth: MGMT ver 1.23 [ 791.866753][T22611] netlink: 'syz.0.4137': attribute type 322 has an invalid length. [ 792.061119][T22628] erspan0: entered promiscuous mode [ 792.066545][T22628] vlan4: entered promiscuous mode [ 792.506815][T22648] netlink: 'syz.3.4136': attribute type 4 has an invalid length. [ 792.962310][T22679] wg1 speed is unknown, defaulting to 1000 [ 792.980734][T22679] lo speed is unknown, defaulting to 1000 [ 792.988374][T22679] lo speed is unknown, defaulting to 1000 [ 793.945751][T22723] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 793.962549][T22723] vlan4: entered promiscuous mode [ 793.967821][T22723] vlan4: entered allmulticast mode [ 793.973998][T22723] hsr_slave_1: entered allmulticast mode [ 794.060072][T22725] __nla_validate_parse: 3 callbacks suppressed [ 794.060091][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4152'. [ 794.082355][T22723] wg1 speed is unknown, defaulting to 1000 [ 794.102379][T22723] lo speed is unknown, defaulting to 1000 [ 794.275788][T22729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4154'. [ 794.297145][T22723] lo speed is unknown, defaulting to 1000 [ 794.353559][T22729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 794.568612][T22740] netlink: 'syz.1.4158': attribute type 3 has an invalid length. [ 794.659149][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'. [ 794.668260][T22737] wg1 speed is unknown, defaulting to 1000 [ 794.674327][T22743] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4159'. [ 794.686899][T22737] lo speed is unknown, defaulting to 1000 [ 794.704172][T22737] lo speed is unknown, defaulting to 1000 [ 794.713850][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'. [ 794.752814][T22743] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4159'. [ 794.766589][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'. [ 795.116914][T22762] wg1 speed is unknown, defaulting to 1000 [ 795.124111][T22762] lo speed is unknown, defaulting to 1000 [ 795.144739][T22762] lo speed is unknown, defaulting to 1000 [ 796.804593][T22797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4173'. [ 796.816035][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4173'. [ 796.826921][T22799] netlink: 'syz.0.4173': attribute type 1 has an invalid length. [ 796.837735][T22799] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4173'. [ 797.081366][T22810] siw: device registration error -23 [ 797.270212][T22816] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 797.275964][T22816] dvmrp1: linktype set to 270 [ 797.363717][T22820] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 797.870888][T22840] netlink: 'syz.2.4184': attribute type 2 has an invalid length. [ 798.151884][T22847] lo speed is unknown, defaulting to 1000 [ 798.181030][T22847] lo speed is unknown, defaulting to 1000 [ 798.665640][T22863] tipc: Enabled bearer , priority 0 [ 798.686089][T22863] syzkaller0: entered promiscuous mode [ 798.697957][T22863] syzkaller0: entered allmulticast mode [ 798.764834][T22863] tipc: Resetting bearer [ 798.773882][T22862] tipc: Resetting bearer [ 798.803087][T22862] tipc: Disabling bearer [ 798.934045][T22887] lo speed is unknown, defaulting to 1000 [ 798.968291][T22887] lo speed is unknown, defaulting to 1000 [ 799.629921][T22922] netlink: 'syz.2.4205': attribute type 1 has an invalid length. [ 799.737852][T22927] netlink: 'syz.4.4207': attribute type 1 has an invalid length. [ 799.775008][T22927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 799.822748][T22927] bond4: (slave veth7): Enslaving as an active interface with a down link [ 799.848242][T22927] vlan3: entered allmulticast mode [ 799.854302][T22927] veth1: entered allmulticast mode [ 799.860768][T22927] veth1: entered promiscuous mode [ 799.867679][T22927] veth1: left promiscuous mode [ 799.875422][T22927] bond4: (slave vlan3): making interface the new active one [ 799.883922][T22927] veth1: entered promiscuous mode [ 799.890986][T22927] vlan3: entered promiscuous mode [ 799.896995][T22927] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 799.924699][T22934] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 800.211774][T22943] __nla_validate_parse: 3 callbacks suppressed [ 800.211794][T22943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4212'. [ 800.278441][T22953] syzkaller0: entered promiscuous mode [ 800.285361][T22953] syzkaller0: entered allmulticast mode [ 800.309561][T22953] tipc: Enabled bearer , priority 0 [ 800.320306][T22949] tipc: Resetting bearer [ 800.360206][T22949] tipc: Disabling bearer [ 801.046625][T22986] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)% ].>n6# [ 801.269730][T22986] netlink: 'syz.4.4224': attribute type 11 has an invalid length. [ 801.277679][T22986] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4224'. [ 801.365110][T23001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4226'. [ 801.392466][T23005] lo speed is unknown, defaulting to 1000 [ 801.429642][T23005] lo speed is unknown, defaulting to 1000 [ 801.459269][T23011] tc_dump_action: action bad kind [ 801.580866][T23011] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4228'. [ 801.679733][T23021] netlink: 'syz.4.4230': attribute type 1 has an invalid length. [ 801.746490][T23021] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 802.139968][T23043] ipt_ECN: cannot use operation on non-tcp rule [ 802.170181][T23044] syzkaller0: entered promiscuous mode [ 802.176196][T23044] syzkaller0: entered allmulticast mode [ 802.184121][T23043] tipc: Enabled bearer , priority 0 [ 802.286513][T23044] tipc: Resetting bearer [ 802.307188][T23044] tipc: Disabling bearer [ 802.744378][T23067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4241'. [ 803.220733][T23079] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 803.631098][T23095] netlink: 'syz.3.4250': attribute type 10 has an invalid length. [ 803.673366][T23095] hsr0: entered promiscuous mode [ 803.693205][T23095] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 803.720296][T23095] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 803.760208][T23095] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 803.871508][T23100] lo speed is unknown, defaulting to 1000 [ 803.883908][T23100] lo speed is unknown, defaulting to 1000 [ 804.220739][T23104] sctp: [Deprecated]: syz.2.4251 (pid 23104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.220739][T23104] Use struct sctp_sack_info instead [ 804.437898][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4252'. [ 804.465325][T23111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4253'. [ 804.481656][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4254'. [ 804.513134][T23111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.566075][T23119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4255'. [ 804.958167][T23137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.019681][T23138] pim6reg1: entered promiscuous mode [ 805.044672][T23138] pim6reg1: entered allmulticast mode [ 805.494747][T23159] netlink: 'syz.4.4266': attribute type 1 has an invalid length. [ 805.680634][T23171] syzkaller0: entered promiscuous mode [ 805.694422][T23173] netlink: 'syz.3.4272': attribute type 3 has an invalid length. [ 805.703812][T23171] syzkaller0: entered allmulticast mode [ 805.715440][T23173] netlink: 'syz.3.4272': attribute type 3 has an invalid length. [ 805.725411][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 805.739167][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4272'. [ 805.832850][T23180] ip6tnl0: Caught tx_queue_len zero misconfig [ 806.074967][T23184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4278'. [ 806.094339][T23184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4278'. [ 806.314707][T23208] netlink: 'syz.4.4284': attribute type 4 has an invalid length. [ 806.326822][T23209] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4283'. [ 806.347416][T23208] netlink: 'syz.4.4284': attribute type 4 has an invalid length. [ 806.481906][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4283'. [ 806.494579][ T5880] IPVS: starting estimator thread 0... [ 806.594972][T23216] IPVS: using max 34 ests per chain, 81600 per kthread [ 806.665282][T23208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.678324][T23208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.801665][T23222] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 806.843850][T23227] netlink: 'syz.3.4287': attribute type 1 has an invalid length. [ 806.852392][T23227] netlink: 'syz.3.4287': attribute type 2 has an invalid length. [ 806.860641][ T37] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.879942][ T37] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.901323][ T37] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.922817][ T37] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.214713][T23240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4292'. [ 807.229851][T23242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4293'. [ 807.417075][T23253] pimreg1: tun_chr_ioctl cmd 1074025677 [ 807.428680][T23253] pimreg1: linktype set to 804 [ 807.441530][T23253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 807.751240][T23271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4304'. [ 808.085606][T23287] netlink: 'syz.3.4308': attribute type 3 has an invalid length. [ 808.136538][T23291] syzkaller0: entered promiscuous mode [ 808.143429][T23291] syzkaller0: entered allmulticast mode [ 808.264505][T23297] SET target dimension over the limit! [ 808.286855][T23300] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 808.296200][T23299] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 809.476324][T23385] syzkaller0: entered promiscuous mode [ 809.486080][T23385] syzkaller0: entered allmulticast mode [ 809.719563][T23398] xt_limit: Overflow, try lower: 271964/0 [ 809.738777][T23397] xt_limit: Overflow, try lower: 271964/0 [ 809.806644][T23399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 809.919695][T23407] block nbd2: Unsupported socket: should be TCP or UNIX. [ 810.001586][T23412] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 810.201009][T23399] bond5 (unregistering): Released all slaves [ 810.603540][T23422] validate_nla: 6 callbacks suppressed [ 810.603559][T23422] netlink: 'syz.4.4348': attribute type 1 has an invalid length. [ 810.740880][T23422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.828738][T23427] bond5: (slave veth9): Enslaving as an active interface with a down link [ 810.880910][T23430] bond5: entered allmulticast mode [ 810.898468][T23429] __nla_validate_parse: 24 callbacks suppressed [ 810.898488][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4351'. [ 810.923723][T23442] syzkaller0: entered promiscuous mode [ 810.930193][T23442] syzkaller0: entered allmulticast mode [ 811.684133][T23495] netlink: 'syz.1.4365': attribute type 10 has an invalid length. [ 811.759553][T23495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4365'. [ 811.793790][T23504] netlink: 'syz.4.4366': attribute type 4 has an invalid length. [ 811.861482][T23510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4368'. [ 811.880123][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4367'. [ 811.962144][T23510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 812.099444][T23510] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4368'. [ 812.148014][T21081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.167349][T21081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.252956][T23535] syzkaller0: entered promiscuous mode [ 812.258716][T23535] syzkaller0: entered allmulticast mode [ 812.286247][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4375'. [ 812.307121][T23538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4375'. [ 812.369003][T23540] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 812.626081][T23551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4379'. [ 812.865153][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4385'. [ 813.895048][T23612] macsec2: entered allmulticast mode [ 813.906829][T23612] dummy0: entered allmulticast mode [ 813.925898][T23612] dummy0: left allmulticast mode [ 813.972784][T23611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4394'. [ 814.104252][T23625] team_slave_1: Caught tx_queue_len zero misconfig [ 814.442231][T23647] batadv_slave_0: entered promiscuous mode [ 814.498834][T23638] batadv_slave_0: left promiscuous mode [ 814.663487][T23658] netlink: 'syz.0.4407': attribute type 11 has an invalid length. [ 814.790280][T23662] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 815.414080][T23672] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.959101][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 816.049328][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 816.101012][T23672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.794266][T23676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.822355][T21081] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.869602][T21081] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.917724][T21081] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.974216][T21081] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.989065][T21081] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.997455][T21081] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.044547][T21081] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.065052][T23703] __nla_validate_parse: 5 callbacks suppressed [ 817.065068][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 817.084980][T21081] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.189285][T23703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4417'. [ 817.232950][T23703] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4417'. [ 817.258493][T23703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4417'. [ 817.280623][T23717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4420'. [ 817.380663][T23721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4422'. [ 817.439027][T23721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4422'. [ 817.504254][T23735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4425'. [ 817.716527][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 817.728226][T23748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4431'. [ 817.739182][T23748] netlink: 'syz.3.4431': attribute type 5 has an invalid length. [ 817.746940][T23748] netlink: 'syz.3.4431': attribute type 6 has an invalid length. [ 817.780888][T23750] netlink: 'syz.3.4431': attribute type 5 has an invalid length. [ 817.788857][T23750] netlink: 'syz.3.4431': attribute type 6 has an invalid length. [ 818.000410][T23759] xt_connbytes: Forcing CT accounting to be enabled [ 818.144815][T23772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.390113][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.396075][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.441185][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.520149][T23777] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 818.668186][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.693523][T23792] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.740157][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.771474][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.797244][T23792] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.821892][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.832242][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.846718][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.854857][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.864590][T23777] wg1 speed is unknown, defaulting to 1000 [ 818.874487][T23792] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.965193][T23792] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.096955][T23810] bond5: option primary_reselect: invalid value (6) [ 819.105713][T23810] bond5 (unregistering): Released all slaves [ 819.164037][T23812] syzkaller0: entered promiscuous mode [ 819.171016][T23812] syzkaller0: entered allmulticast mode [ 819.209367][T23818] batadv_slave_0: Caught tx_queue_len zero misconfig [ 819.341543][ T1013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.369402][T21522] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.390799][T21522] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.477114][ T8186] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.642523][T23835] netlink: 'syz.0.4454': attribute type 3 has an invalid length. [ 819.874620][T23848] syzkaller0: entered promiscuous mode [ 819.881064][T23848] syzkaller0: entered allmulticast mode [ 819.920130][T23852] sctp: [Deprecated]: syz.3.4461 (pid 23852) Use of int in max_burst socket option. [ 819.920130][T23852] Use struct sctp_assoc_value instead [ 821.579399][T23859] bond0: (slave bond_slave_1): Releasing backup interface [ 821.600564][T23866] syzkaller0: entered promiscuous mode [ 821.606077][T23866] syzkaller0: entered allmulticast mode [ 821.631249][T23884] ip6tnl4: entered promiscuous mode [ 821.759974][T23889] netlink: 'syz.3.4466': attribute type 8 has an invalid length. [ 822.095390][T23907] batadv0: entered promiscuous mode [ 822.119985][T23907] macvtap1: entered promiscuous mode [ 822.126769][T23910] netlink: 'syz.1.4472': attribute type 1 has an invalid length. [ 822.143449][T23907] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 822.216411][T23916] __nla_validate_parse: 5 callbacks suppressed [ 822.216430][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4474'. [ 822.244236][T23910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 822.417592][T23920] lo speed is unknown, defaulting to 1000 [ 822.425871][T23924] syzkaller1: entered promiscuous mode [ 822.440228][T23924] syzkaller1: entered allmulticast mode [ 822.466803][T23920] lo speed is unknown, defaulting to 1000 [ 822.474718][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 822.485138][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4473'. [ 822.614075][T23920] wg1 speed is unknown, defaulting to 1000 [ 822.674481][T23939] lo speed is unknown, defaulting to 1000 [ 822.709502][ T9] IPVS: starting estimator thread 0... [ 822.744949][T23939] lo speed is unknown, defaulting to 1000 [ 822.752680][T23939] wg1 speed is unknown, defaulting to 1000 [ 822.900869][T23944] IPVS: using max 30 ests per chain, 72000 per kthread [ 823.064367][T23948] netlink: 'syz.1.4479': attribute type 4 has an invalid length. [ 823.672947][T23971] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4486'. [ 823.718502][T23974] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 823.750392][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4488'. [ 823.966936][T23990] netlink: 'syz.3.4492': attribute type 10 has an invalid length. [ 824.007003][T23986] pim6reg: entered allmulticast mode [ 824.034111][T23986] pim6reg: left allmulticast mode [ 824.044238][T23990] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4492'. [ 824.066213][T23995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 824.112817][T23990] batadv_slave_1: entered promiscuous mode [ 824.125239][T23990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.133907][T23990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.143174][T23990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.159700][T23990] bridge0: port 2(batadv_slave_1) entered blocking state [ 824.168357][T23990] bridge0: port 2(batadv_slave_1) entered disabled state [ 824.175839][T23990] batadv_slave_1: entered allmulticast mode [ 824.473364][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4498'. [ 824.517417][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4498'. [ 824.566239][T24012] netlink: 'syz.2.4498': attribute type 14 has an invalid length. [ 824.592771][T24012] netlink: 'syz.2.4498': attribute type 11 has an invalid length. [ 824.747245][T24028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4503'. [ 824.810335][T24028] lo speed is unknown, defaulting to 1000 [ 824.830462][T24028] lo speed is unknown, defaulting to 1000 [ 824.866916][T24031] sctp: [Deprecated]: syz.1.4504 (pid 24031) Use of int in max_burst socket option. [ 824.866916][T24031] Use struct sctp_assoc_value instead [ 824.915464][T24031] lo speed is unknown, defaulting to 1000 [ 824.924194][ T30] audit: type=1800 audit(1767627120.294:6): pid=24026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4502" name="memory.events" dev="tmpfs" ino=1785 res=0 errno=0 [ 824.955106][T24028] wg1 speed is unknown, defaulting to 1000 [ 824.974866][T24031] lo speed is unknown, defaulting to 1000 [ 825.117727][T24031] wg1 speed is unknown, defaulting to 1000 [ 825.364472][T24028] netlink: 'syz.2.4503': attribute type 6 has an invalid length. [ 825.797928][T24064] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 825.808485][T24064] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 825.833744][T24064] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 825.901813][T24066] netlink: 'syz.1.4511': attribute type 4 has an invalid length. [ 825.960676][T24071] tipc: Enabling of bearer rejected, already enabled [ 826.185225][T24080] lo speed is unknown, defaulting to 1000 [ 826.203242][T24084] syzkaller0: entered promiscuous mode [ 826.208988][T24084] syzkaller0: entered allmulticast mode [ 826.217586][T24080] lo speed is unknown, defaulting to 1000 [ 826.254834][T24080] wg1 speed is unknown, defaulting to 1000 [ 826.297799][T24088] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 826.322575][T24088] bridge9: entered allmulticast mode [ 826.645672][T24096] lo speed is unknown, defaulting to 1000 [ 826.681591][T24096] lo speed is unknown, defaulting to 1000 [ 826.722520][T24096] wg1 speed is unknown, defaulting to 1000 [ 827.894016][T24175] __nla_validate_parse: 4 callbacks suppressed [ 827.894037][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4533'. [ 828.828334][T24213] vlan0: entered promiscuous mode [ 828.847057][T24213] bond0: entered promiscuous mode [ 828.852783][T24213] bond_slave_0: entered promiscuous mode [ 828.859627][T24213] bond_slave_1: entered promiscuous mode [ 828.965382][T24224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4545'. [ 829.003895][T24227] netlink: 'syz.2.4546': attribute type 12 has an invalid length. [ 829.033964][T24227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4546'. [ 829.121073][T24234] netlink: 'syz.0.4548': attribute type 3 has an invalid length. [ 829.130414][T24234] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4548'. [ 829.171670][T24227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4546'. [ 829.233466][T24239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4550'. [ 829.288641][T24241] netlink: 'syz.4.4551': attribute type 9 has an invalid length. [ 829.634946][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4556'. [ 830.041019][T24279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4560'. [ 830.050651][T24279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4560'. [ 830.450353][T24299] x_tables: duplicate underflow at hook 2 [ 830.468741][T24301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4563'. [ 830.538639][T24305] chnl_net:caif_netlink_parms(): no params data found [ 830.621472][T24311] tipc: Enabling of bearer rejected, already enabled [ 830.955183][T24334] gretap1: entered promiscuous mode [ 831.270800][T24359] netlink: 'syz.4.4577': attribute type 7 has an invalid length. [ 831.278589][T24359] netlink: 'syz.4.4577': attribute type 8 has an invalid length. [ 831.771432][T24395] siw: device registration error -23 [ 831.930503][T24399] ip6gre0: entered promiscuous mode [ 831.949652][T24399] ip6gre0: entered allmulticast mode [ 832.619683][T24431] netlink: 'syz.0.4596': attribute type 11 has an invalid length. [ 832.627567][T24431] netlink: 'syz.0.4596': attribute type 11 has an invalid length. [ 832.739170][T24436] netlink: 'syz.1.4598': attribute type 1 has an invalid length. [ 832.827078][T24442] bond3: (slave geneve2): making interface the new active one [ 832.836905][T24442] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 832.893312][T24439] geneve3: left promiscuous mode [ 832.932894][T24439] geneve3: left allmulticast mode [ 832.977695][T24439] vlan3: left allmulticast mode [ 833.004191][T24439] veth1: left allmulticast mode [ 833.028608][T24439] bond5: left allmulticast mode [ 833.069049][T20857] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 833.115633][T20857] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 833.131030][T24453] netlink: 'syz.1.4601': attribute type 31 has an invalid length. [ 833.188473][T20857] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 833.238514][T20857] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 833.401919][T24459] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 833.578503][T24463] lo speed is unknown, defaulting to 1000 [ 833.598531][T24463] lo speed is unknown, defaulting to 1000 [ 833.606376][T24463] wg1 speed is unknown, defaulting to 1000 [ 833.814994][T24475] __nla_validate_parse: 6 callbacks suppressed [ 833.815026][T24475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4607'. [ 833.869207][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4607'. [ 833.881754][T24475] netlink: 'syz.2.4607': attribute type 19 has an invalid length. [ 833.899446][T24475] netlink: 'syz.2.4607': attribute type 20 has an invalid length. [ 833.966650][T15027] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 833.974875][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 834.088823][T24485] lo speed is unknown, defaulting to 1000 [ 834.097265][T24485] lo speed is unknown, defaulting to 1000 [ 834.117522][T24485] wg1 speed is unknown, defaulting to 1000 [ 834.328322][T24502] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4613'. [ 834.364665][T24502] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4613'. [ 835.147473][T24533] sctp: [Deprecated]: syz.2.4620 (pid 24533) Use of int in maxseg socket option. [ 835.147473][T24533] Use struct sctp_assoc_value instead [ 835.755674][T24553] lo speed is unknown, defaulting to 1000 [ 835.763609][T24553] lo speed is unknown, defaulting to 1000 [ 835.772105][T24553] wg1 speed is unknown, defaulting to 1000 [ 835.860910][T24559] lo speed is unknown, defaulting to 1000 [ 835.886269][T24559] lo speed is unknown, defaulting to 1000 [ 836.003409][T24559] wg1 speed is unknown, defaulting to 1000 [ 836.930400][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4633'. [ 837.053588][T24596] syzkaller0: entered promiscuous mode [ 837.064749][T24596] syzkaller0: entered allmulticast mode [ 837.197805][T24598] sctp: [Deprecated]: syz.3.4635 (pid 24598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 837.197805][T24598] Use struct sctp_sack_info instead [ 840.340930][T24636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4645'. [ 840.488036][T24643] netlink: 'syz.0.4647': attribute type 1 has an invalid length. [ 840.511411][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4651'. [ 840.545376][T24643] IPVS: length: 8 != 132318948952 [ 840.577487][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4649'. [ 840.909722][T24679] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4657'. [ 840.969854][T24679] syzkaller0: entered promiscuous mode [ 840.994885][T24679] syzkaller0: entered allmulticast mode [ 841.074774][T24683] lo speed is unknown, defaulting to 1000 [ 841.158258][T24683] lo speed is unknown, defaulting to 1000 [ 841.271009][T24683] wg1 speed is unknown, defaulting to 1000 [ 842.123980][T24727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.243151][T24736] netlink: 'syz.2.4674': attribute type 1 has an invalid length. [ 842.265786][T24736] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 843.155126][T24777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4680'. [ 843.504341][T24792] lo speed is unknown, defaulting to 1000 [ 843.513298][T24792] lo speed is unknown, defaulting to 1000 [ 843.525123][T24792] wg1 speed is unknown, defaulting to 1000 [ 843.573270][T24793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4686'. [ 844.300930][T24826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4693'. [ 844.572117][T24835] netlink: 'syz.0.4694': attribute type 1 has an invalid length. [ 844.599221][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 844.616543][T24844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.680345][T24830] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 844.711623][T24830] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 844.762812][T24844] bond_slave_0: entered promiscuous mode [ 845.151218][T24869] lo speed is unknown, defaulting to 1000 [ 845.163989][T24869] lo speed is unknown, defaulting to 1000 [ 845.190747][T24869] wg1 speed is unknown, defaulting to 1000 [ 845.355443][T24876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4707'. [ 845.378423][T24874] lo speed is unknown, defaulting to 1000 [ 845.520603][T24874] lo speed is unknown, defaulting to 1000 [ 845.538812][T24874] wg1 speed is unknown, defaulting to 1000 [ 845.940901][T24900] netlink: 'syz.4.4713': attribute type 3 has an invalid length. [ 846.247840][T24910] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 846.266838][T24911] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 846.297757][T24911] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 846.318553][T24911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4716'. [ 846.346338][T24911] tipc: Enabling of bearer rejected, already enabled [ 846.469208][T24918] tipc: Enabling of bearer rejected, already enabled [ 846.478206][T24918] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 846.485935][T24918] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 846.615434][T24920] lo speed is unknown, defaulting to 1000 [ 846.629463][T24920] lo speed is unknown, defaulting to 1000 [ 846.636625][T24920] wg1 speed is unknown, defaulting to 1000 [ 846.860527][T24928] netlink: 'syz.4.4722': attribute type 1 has an invalid length. [ 846.866355][T24925] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.875815][T24925] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.883514][T24928] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4722'. [ 846.986633][T24925] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 847.012395][T24925] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 847.231962][T22301] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.272717][T22301] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.283577][T22301] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.293127][T22301] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.544969][T24955] sit0: Caught tx_queue_len zero misconfig [ 847.552609][T24955] netlink: 'syz.1.4728': attribute type 21 has an invalid length. [ 847.561359][T24940] tipc: Enabling of bearer rejected, media not registered [ 847.573023][T24955] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4728'. [ 847.645219][T24940] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.760070][T24961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4732'. [ 847.780240][T24961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4732'. [ 847.793586][T24961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4732'. [ 847.826476][T24940] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.899685][T24966] 8021q: VLANs not supported on ip_vti0 [ 847.973742][T24940] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.026942][T24963] lo speed is unknown, defaulting to 1000 [ 848.071162][T24963] lo speed is unknown, defaulting to 1000 [ 848.138677][T24940] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.165104][T24984] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4736'. [ 848.216832][T24986] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4737'. [ 848.227810][T24963] wg1 speed is unknown, defaulting to 1000 [ 848.376760][T24992] netlink: 'syz.0.4739': attribute type 10 has an invalid length. [ 848.411156][T24992] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4739'. [ 848.456562][T24992] batadv_slave_1: entered promiscuous mode [ 848.464372][T24992] bridge0: port 3(batadv_slave_1) entered blocking state [ 848.472233][T24992] bridge0: port 3(batadv_slave_1) entered disabled state [ 848.479970][T24992] batadv_slave_1: entered allmulticast mode [ 848.503495][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.522511][T24995] bridge_slave_0: left promiscuous mode [ 848.530571][T24995] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.548605][T24995] bridge_slave_1: left allmulticast mode [ 848.565813][T24995] bridge_slave_1: left promiscuous mode [ 848.572950][T24995] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.624794][T24995] bond0: (slave bond_slave_0): Releasing backup interface [ 848.653308][T24995] bond0: (slave bond_slave_1): Releasing backup interface [ 848.691993][T24995] team0: Port device team_slave_0 removed [ 848.709869][T24995] team0: Port device team_slave_1 removed [ 848.717121][T24995] batadv_slave_1: left allmulticast mode [ 848.724065][T24995] bridge0: port 3(batadv_slave_1) entered disabled state [ 848.733908][T24995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 848.763225][T24994] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 848.797401][T24993] lo speed is unknown, defaulting to 1000 [ 848.845161][T21522] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.872394][T24993] lo speed is unknown, defaulting to 1000 [ 848.903743][T21522] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.914528][T24993] wg1 speed is unknown, defaulting to 1000 [ 848.954411][T22301] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.073469][T25007] netlink: 'syz.2.4742': attribute type 9 has an invalid length. [ 849.373731][T25028] macvtap1: entered promiscuous mode [ 849.379659][T25028] syz_tun: entered promiscuous mode [ 849.413864][T25028] syz_tun: left promiscuous mode [ 849.485672][T25023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 849.512460][T25027] macvlan3: entered promiscuous mode [ 849.518166][T25027] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 849.550788][T25027] macvlan3: entered allmulticast mode [ 849.558740][T25027] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 849.696949][T25039] lo speed is unknown, defaulting to 1000 [ 849.725033][T25039] lo speed is unknown, defaulting to 1000 [ 849.735985][T25039] wg1 speed is unknown, defaulting to 1000 [ 860.728156][T25048] lo speed is unknown, defaulting to 1000 [ 862.078216][T25048] lo speed is unknown, defaulting to 1000 [ 862.538250][T25048] wg1 speed is unknown, defaulting to 1000 [ 877.128445][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 877.807015][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 878.018752][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 878.556333][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 878.828765][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.446887][ T52] Bluetooth: hci0: command tx timeout [ 884.537627][ T52] Bluetooth: hci0: command tx timeout [ 886.613143][ T52] Bluetooth: hci0: command tx timeout [ 888.197634][ T61] bond7: left allmulticast mode [ 888.448704][ T61] bond7: left promiscuous mode [ 888.696698][ T52] Bluetooth: hci0: command tx timeout [ 888.983205][ T61] bridge0: port 1(bond7) entered disabled state [ 906.278456][T15027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 906.396692][T15027] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 906.717240][T15027] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 907.457982][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 907.976294][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 911.818779][ T52] Bluetooth: hci6: command tx timeout [ 913.887175][ T52] Bluetooth: hci6: command tx timeout [ 915.977599][ T52] Bluetooth: hci6: command tx timeout [ 918.048633][ T52] Bluetooth: hci6: command tx timeout [ 942.316651][T15027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 942.435803][T15027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 942.636551][T15027] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 943.028241][T15027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 943.242798][T15027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 945.077774][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 945.146161][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 945.483265][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 945.965950][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 946.056392][ T52] Bluetooth: hci1: command tx timeout [ 946.146946][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 948.128100][ T52] Bluetooth: hci1: command tx timeout [ 949.086374][ T52] Bluetooth: hci5: command tx timeout [ 950.217937][ T52] Bluetooth: hci1: command tx timeout [ 951.173412][ T52] Bluetooth: hci5: command tx timeout [ 952.296914][ T52] Bluetooth: hci1: command tx timeout [ 953.037452][ T61] bond4 (unregistering): (slave gretap1): Releasing active interface [ 953.273717][ T52] Bluetooth: hci5: command tx timeout [ 955.328035][ T52] Bluetooth: hci5: command tx timeout [ 966.878060][T15027] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 967.006915][T15027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 967.148142][T15027] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 967.447553][T15027] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 967.665462][T15027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 970.364304][T15027] Bluetooth: hci7: command tx timeout [ 970.927228][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 971.106774][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 971.195553][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 971.686098][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 971.957009][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 972.466328][ T5829] Bluetooth: hci7: command tx timeout [ 972.602296][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 974.563576][ T5829] Bluetooth: hci7: command tx timeout [ 974.947729][ T5829] Bluetooth: hci8: command tx timeout [ 976.598334][T15027] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 976.698214][ T52] Bluetooth: hci7: command tx timeout [ 976.956587][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 977.017770][ T52] Bluetooth: hci8: command tx timeout [ 977.217991][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 977.847552][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 978.028784][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 979.117219][ T52] Bluetooth: hci8: command tx timeout [ 980.687163][ T52] Bluetooth: hci9: command tx timeout [ 981.166035][ T52] Bluetooth: hci8: command tx timeout [ 982.767388][ T52] Bluetooth: hci9: command tx timeout [ 984.857238][ T52] Bluetooth: hci9: command tx timeout [ 986.927462][ T52] Bluetooth: hci9: command tx timeout [ 998.597141][ T61] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 1000.176839][ T61] .` (unregistering): Released all slaves [ 1001.706611][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1001.847511][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1002.036515][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1002.666744][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1003.057394][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1005.427203][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 1005.726451][ T5829] Bluetooth: hci3: command tx timeout [ 1006.605853][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.736989][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1006.878558][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1007.406231][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1007.555872][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1007.815599][ T52] Bluetooth: hci3: command tx timeout [ 1009.898122][ T52] Bluetooth: hci3: command tx timeout [ 1010.296441][ T52] Bluetooth: hci4: command tx timeout [ 1011.968305][ T52] Bluetooth: hci3: command tx timeout [ 1012.137432][ T61] bond1 (unregistering): Released all slaves [ 1012.387046][ T52] Bluetooth: hci4: command tx timeout [ 1014.467300][ T52] Bluetooth: hci4: command tx timeout [ 1016.546023][ T52] Bluetooth: hci4: command tx timeout [ 1022.978217][ T61] bond2 (unregistering): Released all slaves [ 1025.197334][ T61] bond3 (unregistering): Released all slaves [ 1026.817882][ T61] bond4 (unregistering): Released all slaves [ 1027.498497][ T61] bond5 (unregistering): Released all slaves [ 1027.708746][ T5829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1027.965719][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1028.048448][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1028.476510][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1028.858034][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1030.586120][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1030.777653][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1030.908785][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1031.126964][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1031.468793][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1031.736362][ T52] Bluetooth: hci10: command tx timeout [ 1033.807774][T15027] Bluetooth: hci10: command tx timeout [ 1034.208200][T25201] Bluetooth: hci11: command tx timeout [ 1035.887797][T25201] Bluetooth: hci10: command tx timeout [ 1036.137476][T25201] Bluetooth: hci6: command 0x0406 tx timeout [ 1036.303868][T25201] Bluetooth: hci11: command tx timeout [ 1037.967930][T15027] Bluetooth: hci10: command tx timeout [ 1038.077660][ T61] bond6 (unregistering): Released all slaves [ 1038.387074][T15027] Bluetooth: hci11: command tx timeout [ 1039.237494][T25201] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1039.427079][T25201] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1039.736868][T25201] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1040.008694][T25201] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1040.197635][T25201] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1040.446195][T25201] Bluetooth: hci11: command tx timeout [ 1042.866897][T25201] Bluetooth: hci12: command tx timeout [ 1044.936821][T25201] Bluetooth: hci12: command tx timeout [ 1046.327582][ T61] bond7 (unregistering): Released all slaves [ 1046.358188][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 1046.564691][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1046.587576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1046.687749][ T31] task:kworker/0:0 state:D stack:23744 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1046.928321][ T31] Workqueue: events switchdev_deferred_process_work [ 1047.007313][T25201] Bluetooth: hci12: command tx timeout [ 1047.196178][ T31] Call Trace: [ 1047.246083][ T31] [ 1047.326263][ T31] __schedule+0x149b/0x4fd0 [ 1047.388242][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1047.495570][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1047.625840][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1047.696279][ T31] ? __pfx___schedule+0x10/0x10 [ 1047.858599][ T31] ? schedule+0x91/0x360 [ 1048.017347][ T31] schedule+0x165/0x360 [ 1048.197572][ T31] schedule_preempt_disabled+0x13/0x30 [ 1048.288702][ T31] __mutex_lock+0x7e6/0x1350 [ 1048.355798][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1048.487377][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1048.615964][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1048.698197][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1048.768033][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1048.876545][ T31] switchdev_deferred_process_work+0xe/0x20 [ 1049.016998][ T31] process_scheduled_works+0xad1/0x1770 [ 1049.086926][T25201] Bluetooth: hci12: command tx timeout [ 1049.236561][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1049.346523][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1049.448248][ T31] worker_thread+0x8a0/0xda0 [ 1049.557399][ T31] kthread+0x711/0x8a0 [ 1049.607035][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1049.697649][ T31] ? __pfx_kthread+0x10/0x10 [ 1049.837866][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1049.985677][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.097654][ T31] ret_from_fork+0x510/0xa50 [ 1050.176862][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1050.448494][ T31] ? __switch_to+0xc9e/0x1480 [ 1050.556273][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.627181][ T31] ret_from_fork_asm+0x1a/0x30 [ 1050.787777][ T31] [ 1050.896090][ T31] INFO: task syz-executor:25085 blocked for more than 147 seconds. [ 1051.145484][ T31] Not tainted syzkaller #0 [ 1051.287683][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1051.416554][ T31] task:syz-executor state:D stack:22624 pid:25085 tgid:25085 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1051.606595][ T31] Call Trace: [ 1051.695707][ T31] [ 1051.698701][ T31] __schedule+0x149b/0x4fd0 [ 1051.807259][ T31] ? stack_trace_save+0x9c/0xe0 [ 1051.885167][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1051.987209][ T31] ? __pfx___schedule+0x10/0x10 [ 1052.157160][ T31] ? schedule+0x91/0x360 [ 1052.336753][ T31] schedule+0x165/0x360 [ 1052.417111][ T31] schedule_preempt_disabled+0x13/0x30 [ 1052.535413][ T31] __mutex_lock+0x7e6/0x1350 [ 1052.615859][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1052.836404][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1052.976566][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1053.077833][ T31] ? net_generic+0x1e/0x240 [ 1053.175799][ T31] ? net_generic+0x1e/0x240 [ 1053.328312][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 1053.396800][ T31] ops_init+0x35c/0x5c0 [ 1053.726644][ T31] setup_net+0x110/0x330 [ 1053.896321][ T31] ? __pfx_setup_net+0x10/0x10 [ 1054.026988][ T31] ? preinit_net+0x47d/0x780 [ 1054.185985][ T31] copy_net_ns+0x3e3/0x570 [ 1054.276320][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1054.416448][ T31] ? security_capable+0x7e/0x2e0 [ 1054.586265][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1054.696609][ T31] ksys_unshare+0x4c8/0x8c0 [ 1054.875854][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1054.956788][ T31] __x64_sys_unshare+0x38/0x50 [ 1055.025197][ T31] do_syscall_64+0xec/0xf80 [ 1055.115885][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.177030][ T31] ? trace_irq_disable+0x37/0x100 [ 1055.296013][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1055.356129][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.477596][ T31] RIP: 0033:0x7fb5bc390f47 [ 1055.537043][ T31] RSP: 002b:00007fff19878828 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1055.637639][ T31] RAX: ffffffffffffffda RBX: 00007fb5bc5e5f40 RCX: 00007fb5bc390f47 [ 1055.756529][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1055.876276][ T31] RBP: 00007fb5bc5e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1056.065031][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1056.198152][ T31] R13: 0000000000000003 R14: 00007fff19878af8 R15: 0000000000000000