last executing test programs: 2.558631129s ago: executing program 2 (id=5773): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="70a5562e8a2e", 'ip_vti0\x00'}}, 0x1e) (async) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30c) 2.498455647s ago: executing program 3 (id=5774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x31}, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x34, "02473b8e38972fefabac663269ca389f141fb0c5c2835018cb4f858143445606a1150bc407d8a02742b3dc69064ea261c1870029"}, &(0x7f0000000080)=0x3c) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xfc000000, 0x7f, 0xbb9}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @remote}}, [0x1, 0xff, 0x45, 0x1, 0x2, 0x2, 0x3, 0x8000000000000001, 0x10001, 0xd, 0x3, 0xf, 0x1, 0x0, 0x9]}, &(0x7f0000000200)=0x100) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) r6 = accept4(r5, &(0x7f0000000280)=@nl, &(0x7f0000000300)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000035c0)={0x0, 0xc3da}, &(0x7f0000003600)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000038c0)={r4, 0x9}, &(0x7f0000003900)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000003d80)=[{&(0x7f0000000340)=@in6={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c, &(0x7f0000003540)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="26662978b240b419985dbb9beadab89a16f6118f856bda094791632612a312af36020830f96e13916c61646ec559dea489190d18ee98e6b193828a72d58242f8320d4971efa6a7933b8cf0cbef8b774d5407123f78a28d8d366ddcfb01131875e1b2bdc0129a3bc6caf9ab36c1385005f69a62e65c98495af9c83fb7f444842b1a002a8ee3a10082c540d7ae2c686695c1cf64eec63f3b6e425fbc", 0x9b}, {&(0x7f0000002440)="14ffa19c07d60394359917c04e9f07118753e8808f100b911a15756fc84f0221b3e3849af2f251b619e26b5917f9383224556459619a099532c6c3e2a77647b4ee6e91744635a16bef995f483f5f37bdb99e1c74e3831d", 0x57}, {&(0x7f00000024c0)="2b14b53c09625bc89949a67768c19eb3b76d244fc6b85eec4185e895a54756e165292e768be914ab1955b3c2b62634551bf5e52ff917d487b48f05ea4e6b222ed0fc6c37598f9d0cf07cff521752c281c89e928a2d81315d35", 0x59}, {&(0x7f0000002540)="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", 0x1000}], 0x6, &(0x7f0000003640)=[@init={0x18, 0x84, 0x0, {0x6, 0xa, 0x2, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0xed90, 0x1, 0x8000, 0x7, 0x5, 0x200, 0x2, 0x1, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x206, 0x3, 0xfffffffa, r7}}, @init={0x18, 0x84, 0x0, {0xe, 0x9, 0xfffa, 0x5}}, @init={0x18, 0x84, 0x0, {0x0, 0x4d9, 0x3, 0x9}}], 0x98, 0x4010}, {&(0x7f0000003700)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000003880)=[{&(0x7f0000003740)="25d06a8753ec89000b79746c7d2da9e95f6738b5636776d75f4ea2d934755beee46400efae2d93cf6e6dd2c15dda1ce5c3be685f6d4b0062a8c55ac68e01476173bb6fe438c59495d68e1f5e48d9b8b6b612d7c22f24b7a1751e6a1d734196daae611c66af1cc9bcaea1c5dc2d551565f59f91a9f34b88c15771aeab91ee9b8ffdc1f91a96f4fdd300f64c0b87cb33cc9e77d388a4fa9639ab776a4433745e8d33e3b266906c956d47d4690a7e4187b1859a5880", 0xb4}, {&(0x7f0000003800)="57d3ee8a940cdfcc6703970c52f5e5c3fdd13d83cce0ccb66f0a15d400cbfbf5c4b58e49b040d05d23ddd66c98", 0x2d}, {&(0x7f0000003840)="2159c4ae8e69", 0x6}], 0x3, &(0x7f0000003940)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x0, 0x8202, 0x8, 0x8b, 0x4, 0x10, 0x2, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x2, 0x7, 0x18e, r4}}], 0x50}, {&(0x7f00000039c0)=@in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, &(0x7f0000003bc0)=[{&(0x7f0000003a00)="29bded7beac25fd0f0af0b3b70f09663c18ebdb7ceb3815ec0082b4d4e39c2056db3ec6d78276f2875a2ac0adf14fe313da0603bcb246b7d8a26f523201c5532b6be3dda46fc579b83829b82e1d8b6c9983baa10a2dfa95eb54840c7680a", 0x5e}, {&(0x7f0000003a80)="c97a24d4d46a8917655d48609e531c", 0xf}, {&(0x7f0000003ac0)="629789", 0x3}, {&(0x7f0000003b00)="fe632a9810bdca93f12ee0a31f0cd6f618ce42e6e88fceb3533ca490c2868744d859085e95eb886f88b687c349d87960e0a923cd027e9f94db88eec1b64edc46f227d7bf1996c35aae31b306829880e6de33afc7d45965b76152036a6a55526a0d54bf426a9920b2", 0x68}, {&(0x7f0000003b80)}], 0x5, &(0x7f0000003c40)=[@authinfo={0x18, 0x84, 0x6, {0xe9}}, @init={0x18, 0x84, 0x0, {0x4, 0x2, 0x0, 0x25}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x1, 0x9, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1b}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x1, 0x10001, r2}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x400}}], 0x108}], 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000003fc0)={'syztnl1\x00', &(0x7f0000003f40)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x0, 0x8, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x80, 0x20, 0x2, 0x8}}) sendto(r6, &(0x7f0000003e40)="174a480faff10ae98a53ab6c6d15cb5da0ed99bcaa982eea2267e0b874affed93dfaafdb94dbce52cc8491bf71708e3cf74eee2d082990e04d2516ff38041a359c3eb715bb7e3784c1ee9f377d2afc1eb40899a6e338975dee6d0ddd00605fc6ed11758182d62ef91dbf11843545f6df426960782ebf3ddb4bd6b34fb3966ae9140742defdd749bc770ba4a6e1d0575b1d82f54a13870a37fcd93872cbc7a6ef92e9dd3badd5e23f2174234bd37c2fac2a861f8327b65acbf9441d5e14605325749aa66e444b08d97a", 0xc9, 0x24004081, &(0x7f0000004000)=@ll={0x11, 0xf6, r9, 0x1, 0x2c, 0x6, @random="8538165638a1"}, 0x80) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000040c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000005740)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005700)={&(0x7f0000004100)={0x15f0, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x2f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x194, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':\'{^^!\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-/)}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '=+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.}.{,{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12000000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']_\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{&&}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^{&)\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xfe:@:%{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%\'\x9c\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "6140ec68968f0a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "daba857d6511224eb8e5876a17b9862ce40203814afa9988d8d6e99291872ccb92671562676f6778efc2a288feac"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x12ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x42, 0x5, "8a6237f760733ceb921a3e912b80a61cd75269e4cdcee8cb2f2b60f52e1be3ab368da69228d2f762298364d955e87901376f7395418ec23556e52eb1ecb4"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcc48}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}]}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x770f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '++\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x83dc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1a0, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2836}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',&!\xe0-*)!h\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x944}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '*%./-^,%[^\'))\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x465f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ',,)r.:A\\!\'-\xa9-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe}]}, 0x15f0}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) recvmsg(r0, &(0x7f00000068c0)={&(0x7f0000005780)=@can, 0x80, &(0x7f0000006840)=[{&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/40, 0x28}], 0x2, &(0x7f0000006880)}, 0x40000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000006900)=0xfffffffffffffff9, 0x12) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000006940)={r8, 0x4}, 0x8) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006980), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r11, 0x5201) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000069c0)={0xff, 0x0, 0x27}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x7, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000006b00)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006a80)={0x14, r12, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x80) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000006c00)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000006c40)={0x793e, 0x6578, 0xb4fb, 0x1}, 0x8) 2.393890566s ago: executing program 3 (id=5775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffe88000000000000000000000000000000000024000000000000003a00000000dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000015fe800000000000000000000000000028ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000005c000a002c001300fe80000000000000000000000000002b00000000000000000000000000000000000000000a000000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESDEC], 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000), 0x10) read(r2, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000580)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000d40)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000d80)) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in=@multicast2, @in=@private}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001900)=0xe8) getgid() openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001940)='io.pressure\x00', 0x2, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r5, 0x0, 0x20000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000280)=0xe8) getgid() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x3, 0x101) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.335235343s ago: executing program 2 (id=5776): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-7', @ANYRESDEC=r3], 0x9) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0xc0000) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000000c0)) 2.216442176s ago: executing program 2 (id=5778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r1 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) socket(0x2000000015, 0x80005, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020014000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x2}}, 0xb8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000005d93000000000000b5030200000000008500000088000000ce0000000000000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.524335121s ago: executing program 1 (id=5786): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000020000100a7bd7000000000000a00004000000095a7"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x40084) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x40084) 1.415017836s ago: executing program 1 (id=5788): r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}}, 0x40040) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000042c0)={0x0, 0x989680}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, 0x0, 0x4008800) syz_genetlink_get_family_id$tipc2(&(0x7f0000004480), r2) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x8080) sendmsg$TIPC_NL_LINK_SET(r2, 0x0, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000004b80)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004b40)={&(0x7f0000004ac0)={0x48, 0x140d, 0x4, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}}, 0x48081) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000004cc0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c00)={0x30, 0x140c, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10080010}, 0x80) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000004d00)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000004d40)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000004d80)={@loopback, r6}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000005e80)={'wg2\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000062c0)={{r5, &(0x7f0000005ec0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4801, 0x0, 0x61805ef, &(0x7f0000005f40), &(0x7f0000005f80)=0x80000000}, 0x2, &(0x7f0000006240)=[{0x3, 0x7, &(0x7f0000005fc0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000006000)="477709e09e08c156e4bfc0bcf8b519dcf8a161641c7fc9438ab3bbcbebc75b8c1f55a803d182d463cc77ea3ec4aebec4b1339353efe39863294d284dc96836fd12af487527bc17cd720a855bb4d82c101c0a4fc2322a516fe8d2db4dac072e8ffa37c7c94d8f30ffb89ebbdf6c", 0x6d}, {0x2, 0x4, 0x0, &(0x7f0000006140)="014019ab12fe0aca85a4705849ec1b7fa83e4239861e8c3b2799484b2bf7305947199bf629d051fb44b7d71f36e05c367fded28fb9b27b7d023530d3b6163567f1f695793ece4dc4ce9b8ea185f455217376e49007260a622fb72fb7017b28381156c0b38cf3ce84bad8f004ff0f50d4fb548fed210a862dc0fc9c29804f6a6e748028789bedc0c7a9bdf0a6a4d768a0695784750d2306f276ca641e9e1a24f902df26878739977fdf2d2f266d1706e7482a8db4275838c60dc63c6693a3dd711852573d82f56c6263d926ca2adfb8e78c5af4b50703ce3c2f9148b782bf66c15e4a8225958307ec9f12587da1d509a2baa129aeb5265319f3", 0xf9}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000065c0)={0xe, 0x5, &(0x7f00000063c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffa73, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000006400)='GPL\x00', 0x3ff, 0x9a, &(0x7f0000006440)=""/154, 0x41100, 0x4, '\x00', r6, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000006500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000006540)={0x0, 0xe, 0x7a, 0x49dbc523}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000006580)=[0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000066c0)={0x20, 0xd, &(0x7f0000004dc0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000004e40)='GPL\x00', 0xff, 0x1000, &(0x7f0000004e80)=""/4096, 0x41100, 0x0, '\x00', r7, @fallback=0x33, r8, 0x8, &(0x7f0000006340)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000006380)={0x1, 0x8, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r9, 0x1, 0x0, &(0x7f0000006680)=[{0x2, 0x2, 0xe, 0x5}], 0x10, 0x6}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f0000006780)={0x0, @adiantum, 0x0, @desc1}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f00000067c0)={0x0, 0x50, "6b15d2854b493e157db47872731be1f67ae0e65f592a7c3b2499d5f7a0c8b2123a111ab4538240d59285f944ca859bd9397e679eaca8fbd708d30d7a67c40b7a917448fce0af7cd44c30a951112cb5f1"}, &(0x7f0000006840)=0x58) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000006880)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f00000068c0), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000006a00)={&(0x7f0000006900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000069c0)={&(0x7f0000006980)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.386739347s ago: executing program 1 (id=5789): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb00000000000086dd6d002008004811ff20010000000000000000000000000001ff0200000000000000000000000000014e214e20004890"], 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r9, 0x0, &(0x7f0000000340)=""/124}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.30880554s ago: executing program 2 (id=5790): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000002c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) 1.114017192s ago: executing program 2 (id=5791): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002580)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20000000) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000500), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r11, r10, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "040280", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.112762919s ago: executing program 0 (id=5792): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)="81", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='@'], 0x10}}], 0x2, 0x4008845) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="18500000041000000000000000000000184a00000600000000000000000000002794030000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0xff58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.06274641s ago: executing program 3 (id=5794): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400088006000f00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4f", 0x45}], 0x2}], 0x1, 0x40800) recvmsg$can_raw(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000800)=""/189, 0xbd}], 0x2}, 0x40010123) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20028011}, 0x44) 1.039538915s ago: executing program 4 (id=5795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40044) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r1, 0x20, 0x70bd2c, 0x10, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x15}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000080}, 0x14) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x4}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r4, &(0x7f0000000440)="7fc47d9a55918b2eacd09c43b1b45900d104804b4536ac92113dbaf1545ca81f981cda822a53fab77a012fe9f56bf625adc0d97232380124036ffa9df4e58aaa19bdd874ddd33142af68a8f186bfcf74b78f07c4af3aec8b22a07a3973aa1157a5654c378f0e7ad6b85c2a05a9433dd9b56f381e0a9d7ee124329688e7249a0ec2cb08365a035434c32e8c5d07219d32e500ab513e5c2bbd126d73536b0fbb8becb23562521a8a1b3ea3151ee67e9694155a1abdf2d7f06d7aff855303908eda23497b68f3ffecd1246710fe68c7caeecf6c9befd386a685f8ca406e9c"}, 0x20) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000580)=0x7, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000005c0)=0x10, 0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) write$rfkill(r6, &(0x7f0000000640)={0x97f, 0x0, 0x2, 0x1, 0x1}, 0x8) writev(r4, &(0x7f0000001780)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="5e6c4cd0f37c63edf3ee538cace41b0b946cd1442590367c115cfb5caf0f40cfb576b5637a0af11cc8e7db4fa318d3fcac841d6058e63169185d229b95105a026bf27a74c0c881d7805cec016e664552890614830fefd301b7696776bff1be5759431bab54252e69a425394a91f323f69e8bbf9e5871590554dcd055ca04a4a8711169cfacf508a5671eb9afcdb32b4de7783d0bcb1a032f9f092b7c7f6b2604cc663cbdedaa02f44893f765970e30a4963b1077783836218648ca8557e24c86ea0b8d67518d38fa5ba01e51c02aeda49e220d094345bd566023524d97", 0xdd}], 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000017c0), &(0x7f0000001800)=0x4) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001840)={0x0, 0xfffffffffffffffc}) sendmsg$inet(r0, &(0x7f0000001f00)={&(0x7f0000001880)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001d80)=[{&(0x7f00000018c0)="be49e68a0faedf8bdcc5970878e0c21125f53542656069a4c7b8873922f6640b407a134391502138c51323e43d82e99f65eb15c9acd31ecaa4d58c58b179a049ee4a3ac34e510ff197cab531f5509f48d6baa60226fdcb9b15bf679e3ad0dd78795eec06767f366c70871706d0c90c66ee923a387784c5c710cbfe3cca4586f8a575826d600fe74d15ee403f513130e0d75d45c84793ef3e954a885f9c45b0a03b37722c6cf4fe06f5e248310825f5f7c7d7", 0xb2}, {&(0x7f0000001980)="3c09245637360c79b706b0fb347863cec5d417702e908fe9d1d8230c2ccaf72af4c2514e88fe5829d16738314bd7552e3cffa1827b42501a4e1a1247efbd893e337839d2085599c8e391865773731701b5ff00b708dc18f3cf28776c329f2b7766ea8a67b8f422f4cacc596960e327f13fa96d696ac34ccff91c409735a120331a723ea4418941bd7b759dd9434982167cc69a2e92c97bac3e258464fadfa79493769f2813dc112d5100ae88a6701db88977d58c32874f7a8a73f64b760a7123d7d71d9eda9f74296b5e1dc1f1fe2cb3eb448e48e74b5a29ccb3ed3ef7ff8881e31fd62016a6aaa6c7f1219f2fb688e4f2e7156dfeef", 0xf6}, {&(0x7f0000001a80)="d7a4c331d5fdec0b4c6f60fa3724025eeff99c6f482fbec5e8ff2cfb9f55c62984b9db491cf0a0da91ee1b9fcd99ba6651434910f93133e7e26d5343d0914f8e687668d6e11265a5b438d8a3018a1b9fa6fd5fcddac817a5850571cd63f6b71aa4bc73fc1196240bf844be0e68ff6b4067146352c3eb5951fc87b2a9263618e56ac00e0f11439ca6e6ae778c85decfadbcdc4143af1c207c15b4975d25d4a62d2442c921817e0a4a4266fe5d69281358f1e4cd4b85ef56741e5265c01b54f1ef6226a3bee8d57d212e3f8e146ba946df96b3715fb99cc245109c31c2bedcf6120ac409d6baab", 0xe6}, {&(0x7f0000001b80)="e964d540fdd3c916a23778ba4dda90d5b6a1d5489bfb4510c7dc4531dc86af8dfcd4d59d297e765e5002b0374c7d2378bcf6770107ee0fc5dd8cd6a8bfb3848cf8cb2a386a9a4c222a2f5db67c008827a6dd5cde1fcaeb4729a08fd940c4232677b8dca26cd7002fa4adda024e0663acaa1b20d50aaf10976dd47d22d00421c9dc3da7d9ddaebeca9ff0eb60e05bf92268734e9e51d1436373402e49eedf1ca24b0fb00250077f1d9c0ce665407f9c48682ab9dda02d", 0xb6}, {&(0x7f0000001c40)="ccfecd", 0x3}, {&(0x7f0000001c80)="b6e8bcedf6eeb737b37cb53d388333094afa6edb755cf83cd05e176d76fd5540fe850b59e20f1fbe48cc8686e6d914278e98a952603aa262202de91280ecb63483b4deba037c586cafe4075359d027c66ce47b2d51ec3cf94e7b9d17204fe15030fec97ee776edfbf4996e4c63e966fd851a2e5b2418b3f16daac70d225b245541179696eb2a734d2c86cf8b035cabf812d5df178461374e", 0x98}, {&(0x7f0000001d40)="2ee6375f1f5f47bd830685e6bc0de6585718bd32ab389476a78a3b53aea4f3d582", 0x21}], 0x7, &(0x7f0000001e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x60, 0x1, 0x2, [{@private=0xa010100, 0x800}, {@local, 0x3d4b8000}, {@empty, 0x3}, {@multicast2, 0x8}, {@private=0xa010101, 0x100}, {@multicast2, 0xab}, {@local}]}, @timestamp_prespec={0x44, 0x4, 0x56, 0x3, 0x4}, @lsrr={0x83, 0x23, 0xe9, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @private=0xa010102, @rand_addr=0x64010102, @multicast2]}, @ssrr={0x89, 0x13, 0xf2, [@private=0xa010101, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}]}, @ssrr={0x89, 0x17, 0xcc, [@loopback, @multicast1, @multicast1, @empty, @rand_addr=0x64010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0xf0}, 0x20000881) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000001f40)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001f80)=0x28) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001fc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000002000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040)) socketpair(0x29, 0xa, 0x80000000, &(0x7f0000002080)={0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000020c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000002100)={0x0, 0x8, 0x2, 0x17a, 0xffffffff, 0x3}, &(0x7f0000002140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000002240)={r10, 0x94, &(0x7f0000002180)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x8000, @mcast1, 0x2}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x3f, @empty, 0xffffff81}, @in6={0xa, 0x4e24, 0x6, @private0, 0x6}]}, &(0x7f0000002280)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002340)={{r8, 0xffffffffffffffff}, &(0x7f00000022c0), &(0x7f0000002300)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0xb, 0x1a, &(0x7f0000002380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3a8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002480)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002540)={0x1, 0x5, 0x2, 0xffffff12}, 0x10, 0x0, r8, 0x2, &(0x7f00000026c0)=[r8, r8, r8, r4], &(0x7f0000002700)=[{0x2, 0x2, 0x0, 0x6}, {0x0, 0x5, 0x0, 0x1}], 0x10, 0xf}, 0x94) 967.537713ms ago: executing program 0 (id=5796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x5c}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80000) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100)=0x8, 0x4) 961.654538ms ago: executing program 4 (id=5797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x1d, 0x1, 0x1, 0x7ffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg$alg(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140020001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000007c000000030a01020000000000000000020000060900010073797a30000000005b000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffdc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839700140000001100010000000000000000000000000a00000000000000000000bb3a5aa1a811e3d8f1ae51801f05769c20cc9f91790c946894f3bac47feb32f5151d347b5d0051bd771e14ff0aee00125718d2317f86102a2d939f815a97f90500dc3e737c62e371b62125ea2bc9153d28fa5aafc146f691299d9f9a775c27d8eaa5523c4f62"], 0xc4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x20008840) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) 908.646085ms ago: executing program 0 (id=5798): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000006000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000155d736ba96c994cdbce8a31f2011cf2b229b3e504a8dcff5055b3f9ad359fb832586fdf043402adf45145b59d276bf4591c48bb7e8bf9fda610686bc34c0dd631555aa16300fda6a3ccd8d98aea4eca92889d534c1dc2ddc8eaa6fd364dd56f5fc52be2e32cd00075a244e821b02da7af0ee4086a7fb6f633502a80135d5533ff9ff6c2acedd772580b8dd8b0d2774cb8b06645a34b05e1c165", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000080), &(0x7f00000000c0)) 907.960429ms ago: executing program 3 (id=5799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000308010200000000000000000000000905000300840000000c0004800800094000004914aeb71bb3c4a6bda39b7f0256332abd122b844e981c766cf48aed1038bfbfbf69de6f9f6ac39582e724194968ede0174a7b5bc31db8446ece656787cfcc4b51fb0e3977127252e9"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r1 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x30cf, @mcast1, 0x2}}, 0x1, 0x4, 0x0, 0x3, 0x8, 0x8, 0x2}, &(0x7f0000000500)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000540)={r3, 0xffff}, &(0x7f0000000580)=0x8) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/42, 0x2a, 0x10140, &(0x7f00000005c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xfffffffb, @mcast2, 0x8}}, 0x80) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000280)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r7, 0x112, 0x13, 0x0, 0x2) getsockopt$inet_tcp_int(r6, 0x6, 0x2e, 0x0, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x4, 0x81, 0x1, 0x54, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x8007, 0x1, 0x1d}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000840)={r10}, 0x8) openat$cgroup_devices(r11, &(0x7f0000000880)='devices.allow\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x44, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2084}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x64, r12, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x4054804}, 0x8000) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000ffdbdf25030000000800020001000000080008000200000014000c00ff02000000000000000000000000000108000100", @ANYRES32=r9, @ANYBLOB="05000d22d4f71a58001100000008000700", @ANYRES32, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24084}, 0x2000c000) 847.158977ms ago: executing program 0 (id=5800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x1e, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c72726c6c72726c0500000000000000010000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2e0000008100000001000000fcdbdf250000000042799a408c165125ee9e8698dbb4a86c8285b23ef5d2ee013cffc6297ef326dfcac04ff6b67f47fc784a3d284122c3a766f764421c278426a5fc662a8acaaa56", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x4c044) 846.361368ms ago: executing program 1 (id=5801): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f00000009c0)="464827d838e85e4c50500c19"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f00000009c0)="464827d838e85e4c50500c19"}, 0x20) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)='\v2', 0x2}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRESOCT=r1, @ANYBLOB="b7d057fcb6a3112be80ae450325710ad05f5f507a917bceafacaf54235774e3cc9fac6c6e1e9ab461fde683ff66077921aad2a5b6486c7c5534b9dfab4b9a1e3c1f749f3fc9ef1ef22", @ANYRESDEC=r2, @ANYRES16, @ANYRES8=r2], 0x0, 0x52}, 0x28) socket$kcm(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x200c0009}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x200c0009}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000020000001af87f1104ed229b95166bb851c7196b63800e4fbbe64560287f4db44654962f6c29940d699e8c9cdc37"], 0x10}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a0000020000001af87f1104ed229b95166bb851c7196b63800e4fbbe64560287f4db44654962f6c29940d699e8c9cdc37"], 0x10}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100100085000000a000000095000800"/32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100100085000000a000000095000800"/32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@o_path={0x0, r9, 0x4000, r9}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@o_path={0x0, r9, 0x4000, r9}, 0x18) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) 843.852366ms ago: executing program 4 (id=5802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000001080)={{0x29, @multicast1, 0x4e24, 0x0, 'nq\x00', 0x0, 0x2, 0x61}, {@private=0xa0100ff, 0x2, 0x2000, 0x7ffffff, 0xfffffffe, 0xa85}}, 0x44) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x4048080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xf, 0x0, &(0x7f00000003c0)="fc65cf09864c123db16e0184d9641f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$sock_ifreq(r1, 0x891b, &(0x7f0000000580)={'bond_slave_0\x00', @ifru_data=&(0x7f0000000540)="59968aff1df840885769be9ba5cf1749e39e4a8a7c85b94eb16b3c03602cb283"}) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xa00) getsockopt$inet_tcp_int(r0, 0x6, 0x13695d0073cf4a6f, 0x0, &(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0) r5 = socket$kcm(0x2, 0xf7f8cbd827d4890, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002800)={&(0x7f00000055c0)=ANY=[@ANYBLOB="84160000", @ANYRES16=r8, @ANYBLOB="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"], 0x1684}, 0x1, 0x0, 0x0, 0x5}, 0x24000810) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 734.613883ms ago: executing program 0 (id=5803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x340}, 0x1, 0x0, 0x0, 0x20040004}, 0x4048010) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8050) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000100068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c000140ffffffffffffffff0c0002400000000000000368140000001000010000000000000000000084000a"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 682.686734ms ago: executing program 4 (id=5804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x9458}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000640)={r3, 0x4}, &(0x7f0000000680)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r7) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r9, 0x729, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4014) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x7, 0x8007, 0x3, 0x1, {{0x27, 0x4, 0x0, 0x7, 0x9c, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xe6, 0x1, 0x9, [{@multicast2, 0x8}, {@multicast2, 0x2000000}]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x5, 0xb, "ee6de3a5346e78f10f"}, {0x1, 0x9, "b0b73eeba58f5b"}, {0x1, 0x6, "0342a86e"}, {0x6, 0x12, "90865ce7e619a71e2c928eda8166da21"}]}, @lsrr={0x83, 0x23, 0x21, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2]}, @lsrr={0x83, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty]}, @ssrr={0x89, 0xf, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r12 = accept4$alg(r11, 0x0, 0x0, 0x0) sendmmsg$sock(r12, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80, 0x80, 0x6, 0x2, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x7, 0x64, [@empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r14, 0x2f, 0x7, 0x3, 0x7, 0x13, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x1, 0x1}}) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x3}, 0xfffffffe}], 0x1, 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 575.644905ms ago: executing program 0 (id=5805): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001090000000000f9b5000403"], 0x14) 350.15841ms ago: executing program 2 (id=5806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100269d7000ffdbdf271500000008000300", @ANYRES32=r5, @ANYBLOB="14002b800800010002"], 0x30}, 0x1, 0x0, 0x0, 0x2c008005}, 0x20040400) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48}, 0x200048d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='GPL\x00'}, 0x90) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffc4c, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000d400", @ANYRES16=r6, @ANYBLOB="0100fdffffffffdbdf251d00000008000300", @ANYRES32=r7, @ANYBLOB="24002f8008000100000000000c0002000202aaaaaaaaaaaa0c0003800600010003000000"], 0x40}, 0x1, 0x0, 0x0, 0xd49920d352510fc2}, 0x4000040) r8 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r10, r11]}}], 0x18, 0xcc040}, 0x64004084) (async) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) getsockname$unix(r9, &(0x7f0000000180), &(0x7f0000000200)=0x6e) (async) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480023fba6e13c752ff3ffff4000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200338b0000200012800b0001006d61637365630000100002800c000400010000010002800008000500", @ANYRES32=r12, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 218.710269ms ago: executing program 3 (id=5807): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000001010200000000000000000e00000a24001880080001400000000708000240000000ff080002401000036308000240000000016903155c055601f52713df4df7ec"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100039042abd700000000000ef6a805f", @ANYRES32=0x0, @ANYBLOB="011a02003537a940280012800b00010065727370616e0000180002800400120005001600020000000500170001000000"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000001010200000000000000000e00000a24001880080001400000000708000240000000ff080002401000036308000240000000016903155c055601f52713df4df7ec"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100039042abd700000000000ef6a805f", @ANYRES32=0x0, @ANYBLOB="011a02003537a940280012800b00010065727370616e0000180002800400120005001600020000000500170001000000"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (async) 199.188751ms ago: executing program 3 (id=5808): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000008", @ANYRES8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 125.921168ms ago: executing program 4 (id=5809): syz_emit_ethernet(0x16, &(0x7f00000003c0)={@random="96ce655f2954", @remote, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @generic="a03aec16"}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3978, 0x4) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x2b62}], 0x1, 0x40012021, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0x6}, {0x10, 0xc}, {0xde209e7192b956db, 0xc}}, ["", "", "", ""]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff7, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r9 = socket(0x10, 0x80002, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x80000) writev(r11, &(0x7f0000000080)=[{&(0x7f00000012c0)="a4eac9", 0x3}], 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) 79.002634ms ago: executing program 1 (id=5810): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xdc}}, 0x5, 0x10, 0x5, 0xfffffffb, 0xc4, 0x1ff, 0x3}, &(0x7f0000000300)=0x9c) listen(r2, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000008908000640000001250500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500"/96], 0x60}}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xc000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffd}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xa}]}}]}, 0x40}}, 0x0) setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000340)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x300, 0x0, 0x10001, 0x5}, &(0x7f0000000780)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5, 0xffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0xb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 13.732827ms ago: executing program 4 (id=5811): r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) readv(r0, &(0x7f0000000280)=[{0xfffffffffffffffc}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/33, 0x21}], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000009d40)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7, 0xa8, @random="006f02"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x2}, 0x9}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000040)={0x0, 0x0}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000040)={0x1, 0x1}) 0s ago: executing program 1 (id=5812): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = socket(0x1a, 0x1, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4040}}}, 0x108) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff5653f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4e1c}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x93}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) kernel console output (not intermixed with test programs): h:syzkaller0> [ 456.972249][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 456.991510][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.999436][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.007860][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.016842][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 457.162759][T23355] openvswitch: netlink: Flow key attr not present in new flow. [ 457.173647][T23355] openvswitch: netlink: Flow key attr not present in new flow. [ 457.179961][T23356] openvswitch: netlink: Invalid VLAN frame [ 457.183177][T23355] openvswitch: netlink: Invalid VLAN frame [ 457.201392][T23355] openvswitch: netlink: Invalid VLAN frame [ 457.209942][T23355] openvswitch: netlink: Invalid VLAN frame [ 457.216793][T23355] openvswitch: netlink: Invalid VLAN frame [ 457.223352][T23355] openvswitch: netlink: Invalid VLAN frame [ 457.434378][T23376] tipc: Resetting bearer [ 457.513955][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 457.730013][ T7836] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.746815][ T7836] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.773905][ T7836] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.784201][ T7836] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.793830][ T7836] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.803427][ T7836] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.813452][ T7836] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.823153][ T7836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.847818][T23343] lo speed is unknown, defaulting to 1000 [ 457.915592][T23389] syz_tun: entered promiscuous mode [ 457.933360][T23389] syz_tun: left promiscuous mode [ 458.100625][T16850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 458.112101][T23399] sock: sock_timestamping_bind_phc: sock not bind to device [ 458.197489][T16850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 458.352831][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880456a5000: rx timeout, send abort [ 458.363146][T16850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 458.482196][T23343] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.489677][T23343] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.497278][T23343] bridge_slave_0: entered allmulticast mode [ 458.505101][T23343] bridge_slave_0: entered promiscuous mode [ 458.526908][T23343] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.537530][T23343] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.545724][T23343] bridge_slave_1: entered allmulticast mode [ 458.553110][T23343] bridge_slave_1: entered promiscuous mode [ 458.581434][T16850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 458.623630][T23343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.637368][T23343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.665157][T23438] netlink: 'syz.0.4584': attribute type 1 has an invalid length. [ 458.692118][T23440] netlink: 'syz.1.4583': attribute type 1 has an invalid length. [ 458.728407][T23440] bond10: entered promiscuous mode [ 458.734319][T23440] 8021q: adding VLAN 0 to HW filter on device bond10 [ 458.798831][T23343] team0: Port device team_slave_0 added [ 458.831431][T23343] team0: Port device team_slave_1 added [ 458.852366][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880456a4000: rx timeout, send abort [ 458.861887][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880456a5000: abort rx timeout. Force session deactivation [ 458.891342][T23438] bond6: (slave gretap3): making interface the new active one [ 458.913632][T23438] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 458.989543][T23450] macvlan3: entered promiscuous mode [ 458.995542][T23450] macvlan3: entered allmulticast mode [ 459.001841][T23450] bond6: entered promiscuous mode [ 459.007501][T23450] gretap3: entered promiscuous mode [ 459.013629][T23450] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 459.025020][T23450] bond6: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 459.041854][T23450] bond6: left promiscuous mode [ 459.047156][T23450] gretap3: left promiscuous mode [ 459.057958][T23343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.065342][T23343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.092027][T23343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.103902][ T5618] Bluetooth: hci1: command tx timeout [ 459.156735][T23448] lo speed is unknown, defaulting to 1000 [ 459.169079][T23343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.178349][T23343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.241270][T23343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.275604][T23462] syzkaller1: entered promiscuous mode [ 459.284523][T23462] syzkaller1: entered allmulticast mode [ 459.297510][T16850] bond5: left allmulticast mode [ 459.308593][T16850] bond5: left promiscuous mode [ 459.318844][T16850] bridge0: port 1(bond5) entered disabled state [ 459.361032][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880456a4000: abort rx timeout. Force session deactivation [ 459.423270][T16850] bond4 (unregistering): (slave gretap1): Releasing active interface [ 459.455636][T16850] bond12 (unregistering): (slave geneve4): Releasing active interface [ 459.512171][T16850] bond10 (unregistering): (slave bridge7): Releasing active interface [ 459.524874][T16850] bond15 (unregistering): (slave bridge8): Releasing backup interface [ 459.541854][T16850] bond0 (unregistering): Released all slaves [ 459.554900][T16850] bond1 (unregistering): (slave veth5): Removing an active aggregator [ 459.563669][T16850] bond1 (unregistering): (slave veth5): Releasing backup interface [ 459.573099][T16850] bond1 (unregistering): Released all slaves [ 459.584327][T16850] bond2 (unregistering): Released all slaves [ 459.594238][T16850] bond3 (unregistering): Released all slaves [ 459.605868][T16850] bond4 (unregistering): Released all slaves [ 459.622848][T16850] bond5 (unregistering): Released all slaves [ 459.634276][T16850] bond6 (unregistering): Released all slaves [ 459.645385][T16850] bond7 (unregistering): Released all slaves [ 459.658093][T16850] bond8 (unregistering): Released all slaves [ 459.676076][T16850] bond9 (unregistering): Released all slaves [ 459.689751][T16850] bond10 (unregistering): Released all slaves [ 459.700999][T16850] bond11 (unregistering): Released all slaves [ 459.721326][T16850] bond12 (unregistering): Released all slaves [ 459.733484][T16850] bond13 (unregistering): Released all slaves [ 459.745618][T16850] bond14 (unregistering): Released all slaves [ 459.757134][T16850] bond15 (unregistering): Released all slaves [ 459.772851][T16850] bond16 (unregistering): Released all slaves [ 459.860137][T23458] lo speed is unknown, defaulting to 1000 [ 459.982833][T16850] : left promiscuous mode [ 460.017170][T23343] hsr_slave_0: entered promiscuous mode [ 460.043190][T23343] hsr_slave_1: entered promiscuous mode [ 460.079452][T16850] tipc: Disabling bearer [ 460.095054][T16850] tipc: Left network mode [ 460.268696][T16850] batman_adv: batadv0: Removing interface: macvtap1 [ 460.435156][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 460.656623][T16850] hsr_slave_0: left promiscuous mode [ 460.663143][T16850] hsr_slave_1: left promiscuous mode [ 461.042052][T23512] openvswitch: netlink: IP tunnel dst address not specified [ 461.052438][T23512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.184469][ T5618] Bluetooth: hci1: command tx timeout [ 461.249641][T23520] __nla_validate_parse: 14 callbacks suppressed [ 461.249669][T23520] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4592'. [ 461.416662][T23343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.483304][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.521240][T23343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.544932][T23540] xt_recent: Unsupported userspace flags (000000b1) [ 461.562122][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.588462][T23343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.611785][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.636872][T23343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.638086][T16850] IPVS: stop unused estimator thread 0... [ 461.662772][T23343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.719986][T23552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4596'. [ 461.765331][T23552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4596'. [ 461.766606][T23343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.824788][T23343] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.846734][T16842] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.853903][T16842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.905098][T16842] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.912325][T16842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.248533][T23569] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 462.316561][T23582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4601'. [ 462.622173][T23343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.631862][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 462.755538][T23343] veth0_vlan: entered promiscuous mode [ 462.809022][T23343] veth1_vlan: entered promiscuous mode [ 462.916666][T23343] veth0_macvtap: entered promiscuous mode [ 462.939531][T23343] veth1_macvtap: entered promiscuous mode [ 462.974416][T23343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.014775][T23343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.068817][T16842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.090711][T16842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.203690][T16842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.223454][T16842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.252105][T23623] netlink: 'syz.2.4607': attribute type 2 has an invalid length. [ 463.263859][ T5633] Bluetooth: hci1: command tx timeout [ 463.326538][T23630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4605'. [ 463.585571][T23636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4610'. [ 463.891237][T23618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4605'. [ 463.913187][T23618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4605'. [ 463.929247][T23636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4610'. [ 463.939681][T23637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4610'. [ 463.977360][T23639] bond6: entered promiscuous mode [ 463.982707][T23639] bond6: entered allmulticast mode [ 463.989428][T23639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.019383][T23645] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 464.035823][T22299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.050185][T22299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.094663][T22299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.103128][T22299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.139086][T23649] x_tables: unsorted entry at hook 2 [ 464.234728][T23664] lo speed is unknown, defaulting to 1000 [ 464.479425][T23677] netlink: 'syz.2.4619': attribute type 4 has an invalid length. [ 464.498179][T23677] netlink: 'syz.2.4619': attribute type 8 has an invalid length. [ 464.901591][T23690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.912550][T23690] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.920256][T23690] tipc: Resetting bearer [ 464.940970][T23690] veth1: left promiscuous mode [ 464.941679][T23696] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 465.005611][T23690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 465.016157][T23690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.030369][T23690] veth1_vlan: left promiscuous mode [ 465.037185][T23690] veth0_vlan: left promiscuous mode [ 465.043116][T23690] veth0_vlan: entered promiscuous mode [ 465.051956][T23690] veth1_vlan: entered promiscuous mode [ 465.060990][T23690] veth1_macvtap: left promiscuous mode [ 465.067529][T23690] veth0_macvtap: left promiscuous mode [ 465.074687][T23690] veth0_macvtap: entered promiscuous mode [ 465.081336][T23690] veth1_macvtap: entered promiscuous mode [ 465.090235][T23690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.098403][T23690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.108538][T23690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.116533][T23690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 465.129921][T23690] veth1: entered promiscuous mode [ 465.135799][T23690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.144707][T23690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.170730][T23690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.220147][T23690] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 465.287047][T23699] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 465.297922][T23699] bond7 (unregistering): Released all slaves [ 465.345344][ T5633] Bluetooth: hci1: command tx timeout [ 465.352320][T22299] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.363490][T22299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.380065][T22299] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.389550][T22299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.404872][T22299] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.410778][T23711] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 465.413983][T22299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.432413][T22299] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.442226][T22299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.468756][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.484692][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.495841][ T2174] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.767456][T23746] geneve4: entered promiscuous mode [ 465.773474][T23746] geneve4: entered allmulticast mode [ 465.817144][ T188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.961521][T23765] netlink: 'syz.4.4647': attribute type 5 has an invalid length. [ 465.964335][T23761] sctp: [Deprecated]: syz.2.4645 (pid 23761) Use of int in max_burst socket option. [ 465.964335][T23761] Use struct sctp_assoc_value instead [ 466.272738][T23784] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.280277][T23784] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.428781][T23784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.440714][T23784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.465292][ T6526] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 466.698324][T23816] ipt_REJECT: TCP_RESET invalid for non-tcp [ 466.904569][ T7831] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.913689][ T7831] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.928532][ T7831] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.945851][ T7831] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.965707][ T7831] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.999565][ T7831] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.018911][ T7831] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 46974 - 0 [ 467.051393][ T7831] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.068192][ T7831] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.078147][ T7831] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 46974 - 0 [ 467.101593][ T7831] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.115752][T23830] netlink: 'syz.0.4664': attribute type 10 has an invalid length. [ 467.129641][ T7831] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.136035][T23831] __nla_validate_parse: 8 callbacks suppressed [ 467.136063][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'. [ 467.139123][T23830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4664'. [ 467.153115][T23831] netlink: 'syz.1.4665': attribute type 3 has an invalid length. [ 467.156428][ T7831] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 46974 - 0 [ 467.191476][ T7831] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.200867][ T7831] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.222524][ T7831] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 46974 - 0 [ 467.272364][T23831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4665'. [ 467.297849][T23834] block nbd9: server does not support multiple connections per device. [ 467.335122][T23834] block nbd9: shutting down sockets [ 467.464224][T23849] pimreg9: entered allmulticast mode [ 467.487670][T23849] lo speed is unknown, defaulting to 1000 [ 467.532456][T23852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4673'. [ 467.590807][T23853] netlink: 'syz.4.4672': attribute type 12 has an invalid length. [ 467.633272][T23850] tipc: Resetting bearer [ 467.648450][T23850] tipc: Resetting bearer [ 467.804906][ T6526] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 467.838633][T23852] pim6reg: entered allmulticast mode [ 467.848627][T23853] tipc: Enabled bearer , priority 0 [ 467.909515][T23853] tipc: Resetting bearer [ 468.174068][ T6526] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 468.198015][T23872] lo speed is unknown, defaulting to 1000 [ 468.218972][T23881] netlink: 'syz.4.4678': attribute type 1 has an invalid length. [ 468.322490][T23881] bond0: entered promiscuous mode [ 468.329729][T23881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.360352][T23884] ipvlan3: entered allmulticast mode [ 468.378935][T23884] bond0: entered allmulticast mode [ 468.445277][T23889] ipvlan4: entered allmulticast mode [ 468.514802][T23881] bond0: (slave bridge12): making interface the new active one [ 468.541764][T23881] bridge12: entered promiscuous mode [ 468.552786][T23881] bridge12: entered allmulticast mode [ 468.560117][T23881] bond0: (slave bridge12): Enslaving as an active interface with an up link [ 468.671236][T23891] syzkaller1: entered promiscuous mode [ 468.682829][T23891] syzkaller1: entered allmulticast mode [ 468.854539][T23897] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4683'. [ 468.927440][ T6526] tipc: Node number set to 4278255617 [ 469.187936][T23909] 8021q: adding VLAN 0 to HW filter on device .` [ 469.196918][T23909] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.297433][T23916] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4687'. [ 469.309881][T23916] netlink: 'syz.2.4687': attribute type 1 has an invalid length. [ 469.346357][T23909] veth1_vlan: left promiscuous mode [ 469.353456][T23909] veth0_vlan: left promiscuous mode [ 469.360559][T23909] veth0_vlan: entered promiscuous mode [ 469.370399][T23909] veth1_vlan: entered promiscuous mode [ 469.382404][T23909] veth1_macvtap: left promiscuous mode [ 469.394581][T23909] veth0_macvtap: left promiscuous mode [ 469.402016][T23909] veth0_macvtap: entered promiscuous mode [ 469.408990][T23909] veth1_macvtap: entered promiscuous mode [ 469.420504][T23909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.429160][T23909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.437479][T23909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.445455][T23909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.459839][T23909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.472015][T23909] ip6gretap0: entered promiscuous mode [ 469.486614][T23909] dummy0: entered allmulticast mode [ 469.494283][T23909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.507030][T23909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.515886][T23909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.527559][T23909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.536708][T23909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.545641][T23909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.621820][T23913] bond7: entered allmulticast mode [ 469.627917][T23913] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.637326][ T158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.654287][ T158] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36897 - 0 [ 469.663340][T23728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.690409][T23728] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36897 - 0 [ 469.737493][T23728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.753907][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 469.775673][T23728] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36897 - 0 [ 469.806027][T23728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.855135][T23728] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36897 - 0 [ 469.870970][T23945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4691'. [ 469.942018][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4695'. [ 469.995203][T23936] bridge5: port 1(erspan0) entered blocking state [ 470.034359][T23936] bridge5: port 1(erspan0) entered disabled state [ 470.055945][T23936] erspan0: entered allmulticast mode [ 470.081863][T23936] erspan0: entered promiscuous mode [ 470.108104][T23936] bridge5: port 1(erspan0) entered blocking state [ 470.114687][T23936] bridge5: port 1(erspan0) entered forwarding state [ 470.235817][T23959] netlink: 'syz.1.4698': attribute type 1 has an invalid length. [ 470.284923][T23959] bond12: entered promiscuous mode [ 470.290835][T23959] 8021q: adding VLAN 0 to HW filter on device bond12 [ 470.301639][T23953] lo speed is unknown, defaulting to 1000 [ 470.411659][T23971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4701'. [ 470.443434][T23959] veth9: entered promiscuous mode [ 470.450284][T23959] bond12: (slave veth9): Enslaving as a backup interface with a down link [ 470.466674][T23969] sctp: [Deprecated]: syz.0.4700 (pid 23969) Use of int in maxseg socket option. [ 470.466674][T23969] Use struct sctp_assoc_value instead [ 470.546412][T23973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4702'. [ 470.598338][T23973] bond7: option fail_over_mac: invalid value (127) [ 470.606587][T23973] bond7 (unregistering): Released all slaves [ 470.672113][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.689695][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.755213][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.771098][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.806045][T23957] dvmrp0: entered allmulticast mode [ 470.921955][T23995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.176687][T24018] ipt_REJECT: TCP_RESET invalid for non-tcp [ 471.191073][T24019] netlink: 'syz.4.4715': attribute type 8 has an invalid length. [ 471.592622][T24040] syzkaller0: entered promiscuous mode [ 471.599047][T24040] syzkaller0: entered allmulticast mode [ 471.675815][T24044] netlink: 'syz.4.4724': attribute type 11 has an invalid length. [ 471.701946][T24044] netlink: 'syz.4.4724': attribute type 4 has an invalid length. [ 471.721737][T24044] netlink: 'syz.4.4724': attribute type 6 has an invalid length. [ 471.751953][T24053] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 471.832620][T24058] netlink: 'syz.0.4728': attribute type 11 has an invalid length. [ 471.859344][T24058] netlink: 'syz.0.4728': attribute type 4 has an invalid length. [ 471.880662][T24058] netlink: 'syz.0.4728': attribute type 6 has an invalid length. [ 471.918179][T24059] ip6erspan1: entered allmulticast mode [ 472.064250][ T1785] block nbd0: Possible stuck request ffff8880273fe000: control (read@0,1024B). Runtime 330 seconds [ 472.078485][T24076] syzkaller1: entered promiscuous mode [ 472.092657][T24076] syzkaller1: entered allmulticast mode [ 472.113875][T24075] netlink: 'syz.2.4729': attribute type 30 has an invalid length. [ 472.221835][T24083] __nla_validate_parse: 12 callbacks suppressed [ 472.221851][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4732'. [ 472.541642][T24107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4736'. [ 472.571818][T24107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 472.669576][T24116] xt_bpf: check failed: parse error [ 472.836259][T24131] netlink: 'syz.1.4743': attribute type 15 has an invalid length. [ 472.845392][T24134] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 473.218630][T24170] sctp: [Deprecated]: syz.2.4752 (pid 24170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.218630][T24170] Use struct sctp_sack_info instead [ 473.356198][T24181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.371962][T24181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 473.433390][T24181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.458125][T24181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 473.488332][T24189] syzkaller0: entered promiscuous mode [ 473.494240][T24189] syzkaller0: entered allmulticast mode [ 473.504981][T24181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.516297][T24181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 473.571847][T24181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.582525][T24181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 473.649867][T24197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4758'. [ 473.667172][T24197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4758'. [ 473.690034][ T158] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 36897 - 0 [ 473.690458][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4759'. [ 473.713949][ T158] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.733546][ T158] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 36897 - 0 [ 473.744549][ T158] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.764741][ T158] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 36897 - 0 [ 473.775234][ T158] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.798935][T24199] geneve4: entered promiscuous mode [ 473.805909][T24203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4761'. [ 473.866592][ T158] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 36897 - 0 [ 473.891971][ T158] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.902019][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4762'. [ 473.923272][T24213] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 473.968564][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4765'. [ 473.971490][T24213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4763'. [ 474.257514][T24241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 474.421641][T24254] syzkaller0: entered promiscuous mode [ 474.427590][T24254] syzkaller0: entered allmulticast mode [ 474.648991][T24257] x_tables: duplicate underflow at hook 4 [ 474.867564][T24267] xt_bpf: check failed: parse error [ 475.137603][T24297] gre3: entered allmulticast mode [ 475.229110][T24305] gretap0: entered promiscuous mode [ 475.234979][T24305] vlan0: entered promiscuous mode [ 475.295571][T24310] vlan0: entered promiscuous mode [ 476.795800][T24375] xt_hashlimit: size too large, truncated to 1048576 [ 477.388537][T24402] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 477.845499][T24435] validate_nla: 2 callbacks suppressed [ 477.845518][T24435] netlink: 'syz.2.4833': attribute type 22 has an invalid length. [ 477.891331][T24435] __nla_validate_parse: 10 callbacks suppressed [ 477.891349][T24435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'. [ 477.943290][T24435] netlink: 'syz.2.4833': attribute type 22 has an invalid length. [ 477.957314][T24435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'. [ 478.032919][T24435] syzkaller0: entered promiscuous mode [ 478.052029][T24435] syzkaller0: entered allmulticast mode [ 478.086677][T24451] tipc: Enabling of bearer rejected, already enabled [ 478.097958][T24450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4837'. [ 478.136397][T24455] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 478.154736][T24455] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 478.161453][T24455] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 478.168433][T24455] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 478.188876][T24455] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 478.323473][T24474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4845'. [ 478.455043][T24482] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20004 [ 478.464647][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.900791][T24517] syzkaller0: entered promiscuous mode [ 478.906499][T24517] syzkaller0: entered allmulticast mode [ 478.912656][T24519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4858'. [ 478.968814][T24519] 8021q: adding VLAN 0 to HW filter on device bond11 [ 478.981516][T24522] bond11: entered promiscuous mode [ 478.996362][T24522] bond11: entered allmulticast mode [ 479.003186][T24527] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4859'. [ 479.022687][T24522] 8021q: adding VLAN 0 to HW filter on device bond11 [ 479.035393][T24522] team0: Port device bond11 added [ 479.041870][T24530] netlink: 8772 bytes leftover after parsing attributes in process `syz.2.4861'. [ 479.045947][T24527] netlink: 'syz.3.4859': attribute type 1 has an invalid length. [ 479.083996][T24519] team0: Port device bond11 removed [ 479.101166][T24519] bond11 (unregistering): Released all slaves [ 479.135778][T24532] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4862'. [ 479.146984][T24532] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4862'. [ 479.300318][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4865'. [ 479.334740][T24544] netlink: zone id is out of range [ 479.341269][T24544] netlink: zone id is out of range [ 479.348963][T24544] netlink: zone id is out of range [ 479.354600][T24544] netlink: zone id is out of range [ 479.359800][T24544] netlink: zone id is out of range [ 479.365426][T24544] netlink: zone id is out of range [ 479.382152][T24550] netlink: 'syz.1.4867': attribute type 30 has an invalid length. [ 479.407819][T24544] netlink: set zone limit has 4 unknown bytes [ 479.454637][T24551] netlink: 'syz.1.4867': attribute type 30 has an invalid length. [ 479.486893][T24527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.497582][T24527] bond1: (slave bond2): making interface the new active one [ 479.520494][T24527] bond1: (slave bond2): Enslaving as an active interface with an up link [ 479.898109][T24579] netlink: zone id is out of range [ 479.915259][T24579] netlink: zone id is out of range [ 480.080287][T24588] vlan2: entered promiscuous mode [ 480.094025][T24588] team_slave_0: entered promiscuous mode [ 480.195465][T24583] lo speed is unknown, defaulting to 1000 [ 480.320367][T24621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.327653][T24621] IPv6: NLM_F_CREATE should be set when creating new route [ 480.456563][T24628] xt_hashlimit: size too large, truncated to 1048576 [ 480.627590][ T5618] Bluetooth: hci1: command 0x0405 tx timeout [ 480.784646][T24646] netlink: 'syz.4.4891': attribute type 1 has an invalid length. [ 481.049848][T24662] vlan3: entered promiscuous mode [ 481.055951][T24662] gretap0: entered promiscuous mode [ 481.204534][T24671] bond4: entered allmulticast mode [ 481.218441][T24671] ip6gre1: entered allmulticast mode [ 481.237860][T24668] dvmrp8: entered allmulticast mode [ 481.321726][T24683] netlink: 'syz.0.4901': attribute type 10 has an invalid length. [ 481.342085][T24677] bond13: option miimon: invalid value (18446744073709551607) [ 481.350270][T24677] bond13: option miimon: allowed values 0 - 2147483647 [ 481.359676][T24677] bond13 (unregistering): Released all slaves [ 481.379528][T24667] bond4: left allmulticast mode [ 481.385633][T24667] ip6gre1: left allmulticast mode [ 481.651166][T24705] syzkaller0: entered promiscuous mode [ 481.663288][T24705] syzkaller0: entered allmulticast mode [ 481.722057][T24705] syz.1.4908 (24705) used obsolete PPPIOCDETACH ioctl [ 481.807355][T24716] syzkaller1: entered promiscuous mode [ 481.902694][T24718] lo speed is unknown, defaulting to 1000 [ 481.966691][T24724] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 481.986481][T24724] syzkaller1: Refused to change device type [ 482.374663][T24762] netlink: 'syz.0.4925': attribute type 1 has an invalid length. [ 482.408914][T24765] net_ratelimit: 32 callbacks suppressed [ 482.408972][T24765] openvswitch: netlink: Key 32 has unexpected len 1 expected 2 [ 482.448021][T24762] bond8: entered promiscuous mode [ 482.453479][T24762] 8021q: adding VLAN 0 to HW filter on device bond8 [ 482.515594][T24763] bond8: (slave bridge0): making interface the new active one [ 482.542670][T24763] bridge0: entered promiscuous mode [ 482.549649][T24763] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 482.749190][T24785] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 482.763882][T24785] syzkaller1: Refused to change device type [ 482.938620][T24807] __nla_validate_parse: 28 callbacks suppressed [ 482.938640][T24807] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4934'. [ 483.019438][T24807] syzkaller1: entered promiscuous mode [ 483.026004][T24807] syzkaller1: entered allmulticast mode [ 483.059066][T24810] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 483.079678][T24816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4937'. [ 483.236599][T24829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 483.252087][T24829] netlink: 'syz.1.4941': attribute type 5 has an invalid length. [ 483.263049][T24829] netlink: 'syz.1.4941': attribute type 8 has an invalid length. [ 483.272250][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4941'. [ 483.401974][T24842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4947'. [ 483.448676][T24842] syzkaller1: entered promiscuous mode [ 483.467671][T24842] syzkaller1: entered allmulticast mode [ 483.492632][T24837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4945'. [ 483.503938][T24837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.521837][T24837] tipc: Enabling of bearer rejected, already enabled [ 483.531845][T24837] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4945'. [ 483.548617][T24855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4949'. [ 483.604073][ T5351] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 483.640467][T24861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4953'. [ 483.669374][T24861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4953'. [ 483.947771][T24894] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.979175][T24906] netlink: 'syz.4.4961': attribute type 13 has an invalid length. [ 484.114728][T24914] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 484.128144][T24914] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 484.141473][T24894] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.219437][T24894] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.301872][T24894] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.384064][ T5351] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 484.419117][T23727] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.462705][T23727] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.492861][ T137] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 484.510093][T24938] netlink: 'syz.2.4968': attribute type 1 has an invalid length. [ 484.520541][ T137] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.520995][T24938] netlink: 'syz.2.4968': attribute type 3 has an invalid length. [ 484.550051][T23728] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.677401][T24941] netlink: 'syz.4.4974': attribute type 3 has an invalid length. [ 485.723647][ T7831] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 485.744719][ T7831] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 485.759434][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.769498][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.802629][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.838768][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.938587][T24981] tunl0: Caught tx_queue_len zero misconfig [ 486.068794][T24983] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.101935][T24998] vlan1: entered allmulticast mode [ 486.212837][T25010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.421884][T25034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.434478][T25034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.490277][T25034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.501786][T25034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.524802][ T29] audit: type=1804 audit(1782335857.923:10): pid=25038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4997" name="/newroot/452/cgroup.controllers" dev="tmpfs" ino=2327 res=1 errno=0 [ 486.549729][ T29] audit: type=1800 audit(1782335857.923:11): pid=25038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4997" name="cgroup.controllers" dev="tmpfs" ino=2327 res=0 errno=0 [ 486.598640][T25034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.609540][T25034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.688902][T25034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.701968][T25034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.713480][ T5880] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 486.757969][T25043] ip6gretap0: entered allmulticast mode [ 486.787478][ T1160] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.797493][ T1160] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.817980][ T1160] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.827518][ T1160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.846561][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.855004][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.878855][T23727] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.895338][T23727] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.929411][T25047] netlink: 'syz.4.5002': attribute type 16 has an invalid length. [ 489.347089][T25038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.419171][T25058] netlink: 'syz.3.5005': attribute type 23 has an invalid length. [ 489.519785][T25067] __nla_validate_parse: 20 callbacks suppressed [ 489.519804][T25067] netlink: 632 bytes leftover after parsing attributes in process `syz.0.5007'. [ 489.625061][T25082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5013'. [ 489.673211][T25082] tipc: Enabling of bearer rejected, already enabled [ 489.686624][T25086] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 489.711966][T25078] lo speed is unknown, defaulting to 1000 [ 489.824122][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 489.870110][T25089] Cannot find del_set index 3 as target [ 490.076935][ T29] audit: type=1800 audit(1782335861.483:12): pid=25113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5019" name="memory.events" dev="tmpfs" ino=2350 res=0 errno=0 [ 490.407022][T25147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5028'. [ 490.441168][T25147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.483353][T25152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5024'. [ 490.491769][T25147] team0: Device batadv0 is of different type [ 490.742706][T25156] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 490.754955][T25156] bond7 (unregistering): Released all slaves [ 490.795547][T25160] netlink: 'syz.3.5030': attribute type 16 has an invalid length. [ 490.803528][T25160] netlink: 'syz.3.5030': attribute type 17 has an invalid length. [ 491.098582][T25135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.182504][T25165] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5033'. [ 491.219556][T25171] mac80211_hwsim hwsim34 syzkaller0: Caught tx_queue_len zero misconfig [ 491.230980][T25171] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 491.238776][T25171] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 491.257758][T25171] tipc: Resetting bearer [ 491.293383][T25177] bond13: option lacp_rate: invalid value (128) [ 491.301405][T25177] bond13 (unregistering): Released all slaves [ 491.460264][T25187] bond11: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 491.477655][T25187] bond11 (unregistering): Released all slaves [ 491.505538][T25199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5039'. [ 491.564511][T25199] netlink: 'syz.2.5039': attribute type 7 has an invalid length. [ 491.593153][T25199] netlink: 'syz.2.5039': attribute type 8 has an invalid length. [ 491.636245][T25199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5039'. [ 491.676784][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5040'. [ 491.692058][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5040'. [ 491.745026][T25204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.766973][T25213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5044'. [ 491.815463][ T7831] tipc: Resetting bearer [ 491.856508][T25213] bond9: entered promiscuous mode [ 491.862559][T25213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 491.879149][T25217] 8021q: adding VLAN 0 to HW filter on device bond9 [ 491.887148][T25217] bond9: (slave sit2): The slave device specified does not support setting the MAC address [ 491.899090][T25217] bond9: (slave sit2): Error -95 calling set_mac_address [ 491.930248][T25230] Bluetooth: MGMT ver 1.23 [ 491.939215][T25219] netlink: 'syz.4.5047': attribute type 24 has an invalid length. [ 492.069760][T25238] syzkaller0: entered promiscuous mode [ 492.076386][T25238] syzkaller0: entered allmulticast mode [ 492.192991][T25245] gretap0: left promiscuous mode [ 492.217424][T25245] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.256791][T25245] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 492.290925][T25249] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 492.317967][ T6489] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.547296][T25247] ip6gretap0: left promiscuous mode [ 492.588698][ T7831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.602948][T25251] xfrm0: entered allmulticast mode [ 492.611808][T25251] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 492.629142][ T5743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 492.691383][T25280] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚Y‡°”õËí [ 492.691383][T25280] 3ìU' [ 492.730310][T25280] CPU: 0 UID: 0 PID: 25280 Comm: syz.1.5060 Not tainted syzkaller #0 PREEMPT(full) [ 492.730334][T25280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.730344][T25280] Call Trace: [ 492.730350][T25280] [ 492.730357][T25280] dump_stack_lvl+0xe8/0x150 [ 492.730384][T25280] sysfs_warn_dup+0x8e/0xa0 [ 492.730454][T25280] sysfs_do_create_link_sd+0xc0/0x110 [ 492.730472][T25280] device_add_class_symlinks+0x1cf/0x240 [ 492.730597][T25280] device_add+0x467/0xb80 [ 492.730613][T25280] wiphy_register+0x1fc8/0x2ff0 [ 492.730691][T25280] ? __pfx_wiphy_register+0x10/0x10 [ 492.730708][T25280] ? __pfx_netdev_run_todo+0x10/0x10 [ 492.730788][T25280] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 492.730901][T25280] ieee80211_register_hw+0x3d3d/0x4a50 [ 492.730970][T25280] ? ieee80211_register_hw+0x1931/0x4a50 [ 492.731008][T25280] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 492.731029][T25280] ? __asan_memset+0x22/0x50 [ 492.731057][T25280] ? __hrtimer_setup+0x1b7/0x260 [ 492.731081][T25280] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 492.731168][T25280] mac80211_hwsim_new_radio+0x3238/0x5680 [ 492.731199][T25280] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 492.731217][T25280] ? kstrndup+0xbd/0x160 [ 492.731243][T25280] ? kstrndup+0xbd/0x160 [ 492.731256][T25280] hwsim_new_radio_nl+0xd8b/0xf90 [ 492.731278][T25280] genl_family_rcv_msg_doit+0x233/0x340 [ 492.731339][T25280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 492.731360][T25280] ? bpf_lsm_capable+0x9/0x20 [ 492.731383][T25280] ? security_capable+0x7e/0x2c0 [ 492.731490][T25280] genl_rcv_msg+0x614/0x7a0 [ 492.731508][T25280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.731523][T25280] ? ref_tracker_free+0x689/0x830 [ 492.731579][T25280] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 492.731597][T25280] ? __pfx_ref_tracker_free+0x10/0x10 [ 492.731617][T25280] netlink_rcv_skb+0x226/0x4a0 [ 492.731663][T25280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.731680][T25280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.731704][T25280] ? down_read+0x2be/0x330 [ 492.731776][T25280] genl_rcv+0x28/0x40 [ 492.731791][T25280] netlink_unicast+0x7bb/0x940 [ 492.731813][T25280] netlink_sendmsg+0x813/0xb40 [ 492.731836][T25280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.731857][T25280] ? futex_unqueue+0x22/0x240 [ 492.731871][T25280] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.731927][T25280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.731945][T25280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.731966][T25280] ____sys_sendmsg+0x9b9/0xa20 [ 492.732054][T25280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.732074][T25280] ? lock_release+0x4b/0x3c0 [ 492.732108][T25280] ? import_iovec+0x73/0xa0 [ 492.732128][T25280] ___sys_sendmsg+0x2a5/0x360 [ 492.732150][T25280] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.732170][T25280] ? futex_wait+0x2a2/0x390 [ 492.732200][T25280] ? __fget_files+0x2a/0x420 [ 492.732218][T25280] ? __fget_files+0x3a2/0x420 [ 492.732238][T25280] __x64_sys_sendmsg+0x1b1/0x290 [ 492.732258][T25280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.732283][T25280] ? rcu_is_watching+0x15/0xb0 [ 492.732299][T25280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.732316][T25280] do_syscall_64+0x174/0x580 [ 492.732335][T25280] ? trace_irq_disable+0x3b/0x140 [ 492.732355][T25280] ? clear_bhb_loop+0x40/0x90 [ 492.732371][T25280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.732387][T25280] RIP: 0033:0x7f829159ce59 [ 492.732403][T25280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.732416][T25280] RSP: 002b:00007f8292539028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.732433][T25280] RAX: ffffffffffffffda RBX: 00007f8291815fa0 RCX: 00007f829159ce59 [ 492.732445][T25280] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 492.732454][T25280] RBP: 00007f8291632e6f R08: 0000000000000000 R09: 0000000000000000 [ 492.732464][T25280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.732473][T25280] R13: 00007f8291816038 R14: 00007f8291815fa0 R15: 00007ffeee8a3a68 [ 492.732491][T25280] [ 493.288548][T25297] netlink: 'syz.0.5065': attribute type 1 has an invalid length. [ 493.319507][T25297] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 493.452183][T25303] syzkaller0: entered promiscuous mode [ 493.496619][T25303] syzkaller0: entered allmulticast mode [ 493.515484][T25312] tipc: Enabling of bearer rejected, already enabled [ 493.560995][T25310] team0: No ports can be present during mode change [ 493.665584][T23728] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 493.673984][T23728] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 494.083944][T25359] openvswitch: netlink: IP tunnel attribute has 61 unknown bytes. [ 494.217605][T25364] SET target dimension over the limit! [ 494.385702][ T5743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 495.105702][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 495.146524][T25441] __nla_validate_parse: 64 callbacks suppressed [ 495.146542][T25441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 495.161805][T25443] batadv_slave_0: entered promiscuous mode [ 495.170836][T25440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 495.173666][T25443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5104'. [ 495.191714][T25441] ip6erspan2: entered allmulticast mode [ 495.393133][T25461] IPVS: Unknown mcast interface: bridge_slave_0 [ 495.538239][T25471] lo speed is unknown, defaulting to 1000 [ 495.677367][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5114'. [ 495.686480][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5114'. [ 495.939583][T25488] syzkaller0: entered promiscuous mode [ 495.945941][T25488] syzkaller0: entered allmulticast mode [ 495.953043][T25490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5117'. [ 495.971404][T25494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5118'. [ 495.995182][T25494] block nbd9: Unsupported socket: should be TCP or UNIX. [ 496.299505][T25525] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5127'. [ 496.441698][T25527] openvswitch: netlink: Key 32 has unexpected len 16 expected 2 [ 496.457936][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5130'. [ 496.474499][T25527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5128'. [ 496.590159][T25535] bond11: option lacp_active: invalid value (8) [ 496.637494][T25535] bond11 (unregistering): Released all slaves [ 496.797236][T25548] netlink: 'syz.1.5135': attribute type 9 has an invalid length. [ 496.827524][T25548] gretap0: entered promiscuous mode [ 496.838750][T25548] macvlan3: entered promiscuous mode [ 496.848791][T25548] macvlan3: entered allmulticast mode [ 496.854695][T25548] gretap0: entered allmulticast mode [ 496.930011][T25556] bond10: option downdelay: invalid value (18446744073709551487) [ 496.952534][T25556] bond10: option downdelay: allowed values 0 - 2147483647 [ 496.963883][T25556] bond10 (unregistering): Released all slaves [ 497.013599][T25569] bridge0: port 1(vlan0) entered blocking state [ 497.021523][T25569] bridge0: port 1(vlan0) entered disabled state [ 497.042531][T25569] vlan0: entered allmulticast mode [ 497.059189][T25569] geneve0: entered allmulticast mode [ 497.663975][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 497.744030][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 498.041207][ T5743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 498.051216][T25645] veth1_vlan: left promiscuous mode [ 498.101338][T25645] veth0_vlan: left promiscuous mode [ 498.108258][T25645] veth0_vlan: entered promiscuous mode [ 498.116754][T25645] veth1_vlan: entered promiscuous mode [ 498.137449][T25645] veth1_macvtap: left promiscuous mode [ 498.166252][T25645] veth0_macvtap: left promiscuous mode [ 498.185392][T25645] veth0_macvtap: entered promiscuous mode [ 498.218065][T25645] veth1_macvtap: entered promiscuous mode [ 498.230272][T25645] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 498.238118][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.248184][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.257487][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.265114][T25663] netlink: 'syz.2.5165': attribute type 11 has an invalid length. [ 498.275194][T25645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.287933][T25645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.298128][T25645] geneve2: left promiscuous mode [ 498.306742][T25645] bond2: left promiscuous mode [ 498.312226][T25645] bridge2: left promiscuous mode [ 498.318234][T25645] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.326818][T25645] bond2: entered allmulticast mode [ 498.332109][T25645] bridge2: entered allmulticast mode [ 498.338680][T25645] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 498.347544][T25645] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 498.356615][T25645] bridge2: entered promiscuous mode [ 498.362237][T25645] geneve3: left promiscuous mode [ 498.370039][T25645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.378886][T25645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.391854][T25645] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.418771][T25645] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 498.461149][T23728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.473380][T23728] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 34109 - 0 [ 498.483461][T23728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.492785][T23728] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 34109 - 0 [ 498.508376][T23728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.517704][T23728] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 34109 - 0 [ 498.604438][T25683] netlink: 'syz.4.5168': attribute type 30 has an invalid length. [ 498.644386][T25683] bond11: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 498.666218][T25683] bond11 (unregistering): Released all slaves [ 498.683932][ T6489] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 498.709444][T23728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.718749][T23728] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 34109 - 0 [ 498.968745][T25711] vlan2: entered allmulticast mode [ 499.090442][T25717] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 499.130232][T25717] netlink: 'syz.0.5177': attribute type 31 has an invalid length. [ 499.144308][T25717] vlan3: entered promiscuous mode [ 499.193481][T25724] IPVS: Unknown mcast interface: vcan0 [ 499.421015][T25734] bond0: Error: Cannot enslave bond to itself. [ 499.629107][T25753] netlink: 'syz.2.5189': attribute type 4 has an invalid length. [ 499.740656][T25761] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 499.751661][T25761] IPVS: set_ctl: invalid protocol: 135 172.30.0.3:20002 [ 499.982142][T25781] veth0: entered promiscuous mode [ 500.050100][T25782] veth0: left promiscuous mode [ 500.069975][T25788] netlink: 'syz.3.5196': attribute type 4 has an invalid length. [ 500.266010][T25812] __nla_validate_parse: 24 callbacks suppressed [ 500.266041][T25812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5206'. [ 500.341954][T25811] netlink: 'syz.3.5196': attribute type 4 has an invalid length. [ 500.385647][T25788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5196'. [ 500.404455][T25821] netlink: 'syz.2.5208': attribute type 62 has an invalid length. [ 500.416221][T25820] netlink: 'syz.0.5207': attribute type 1 has an invalid length. [ 500.456762][T25820] 8021q: adding VLAN 0 to HW filter on device bond10 [ 500.529590][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5209'. [ 500.539333][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5209'. [ 500.550672][T25788] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5196'. [ 500.642815][T25827] lo speed is unknown, defaulting to 1000 [ 500.752103][T25849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5216'. [ 500.782367][T25852] netlink: 'syz.0.5217': attribute type 1 has an invalid length. [ 500.840553][T25857] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5217'. [ 501.061959][T25860] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5218'. [ 501.081431][T25859] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5218'. [ 501.107474][T25859] syzkaller1: entered promiscuous mode [ 501.127549][T25859] syzkaller1: entered allmulticast mode [ 501.169495][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5221'. [ 501.904487][ T12] wlan1: Trigger new scan to find an IBSS to join [ 501.999088][T25868] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 502.034384][T25867] veth1_to_team: entered promiscuous mode [ 502.070093][T25867] veth1_to_team: left promiscuous mode [ 502.089334][T25870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.111066][T25871] tipc: Enabled bearer , priority 10 [ 502.147835][ T1785] block nbd0: Possible stuck request ffff8880273fe000: control (read@0,1024B). Runtime 360 seconds [ 502.305218][T25886] bond13: Removing last arp target with arp_interval on [ 502.825541][T25925] validate_nla: 3 callbacks suppressed [ 502.825565][T25925] netlink: 'syz.4.5236': attribute type 1 has an invalid length. [ 502.828486][T25927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.001927][T25938] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 503.020667][T25938] netlink: 'syz.2.5240': attribute type 2 has an invalid length. [ 503.067140][T25945] batadv_slave_1: entered promiscuous mode [ 503.225533][ T5743] tipc: Node number set to 769 [ 503.440136][T25960] bond12: (slave tunl0): Device is not bonding slave [ 503.466918][T25960] bond12: option active_slave: invalid value (tunl0) [ 503.491268][T25960] bond12 (unregistering): Released all slaves [ 503.654809][T25977] syzkaller1: entered promiscuous mode [ 503.660408][T25977] syzkaller1: entered allmulticast mode [ 503.942831][T26004] Cannot find del_set index 3 as target [ 503.991767][T25936] batadv_slave_1: left promiscuous mode [ 504.093881][T26001] syzkaller0: create flow: hash 884813283 index 1 [ 504.104940][ T6511] syzkaller0: tun_net_xmit 76 [ 504.113597][T26000] syzkaller0: delete flow: hash 884813283 index 1 [ 504.213563][T26021] vlan2: entered promiscuous mode [ 504.219583][T26021] bridge0: entered promiscuous mode [ 504.256486][T26026] veth1_to_bond: entered promiscuous mode [ 504.262796][T26023] veth1_to_bond: entered allmulticast mode [ 504.270170][T26022] veth1_to_bond: left allmulticast mode [ 504.276691][T26022] veth1_to_bond: left promiscuous mode [ 504.315610][T26030] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 504.505552][T26051] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 504.649746][T26066] netlink: 'syz.0.5271': attribute type 1 has an invalid length. [ 504.757888][T26073] bond12: (slave geneve4): making interface the new active one [ 504.766573][T26073] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 504.780328][T16848] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 504.800425][T26066] 8021q: adding VLAN 0 to HW filter on device bond12 [ 504.808275][T16848] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 504.823061][T16848] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 504.842080][T16848] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 504.945145][T16848] wlan1: Trigger new scan to find an IBSS to join [ 504.956852][T26081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.991553][T26095] netlink: 'syz.4.5278': attribute type 2 has an invalid length. [ 505.078814][ T24] IPVS: starting estimator thread 0... [ 505.086138][T26087] IPVS: ip_vs_edit_dest(): server weight less than zero [ 505.175686][T26110] lo speed is unknown, defaulting to 1000 [ 505.176604][T26104] IPVS: using max 62 ests per chain, 148800 per kthread [ 505.592835][T26140] netlink: 'syz.3.5286': attribute type 1 has an invalid length. [ 505.677635][T26146] __nla_validate_parse: 21 callbacks suppressed [ 505.677653][T26146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5288'. [ 505.752145][T26140] bond3: entered promiscuous mode [ 505.758305][T26140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.778350][T26144] bond3: (slave bridge1): making interface the new active one [ 505.793000][T26144] bridge1: entered promiscuous mode [ 505.799777][T26144] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 505.820666][T26145] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 505.870298][T23728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.884198][T23728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.922805][T26156] gretap1: entered promiscuous mode [ 505.984047][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.010388][T26154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5291'. [ 506.096279][T26167] netlink: 'syz.1.5295': attribute type 1 has an invalid length. [ 506.120682][T26167] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5295'. [ 506.131122][T26167] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5295'. [ 506.150633][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5298'. [ 506.163318][T26178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5298'. [ 506.168610][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5300'. [ 506.176136][T26182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.182079][T26183] netlink: 'syz.4.5300': attribute type 3 has an invalid length. [ 506.218787][T26183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5300'. [ 506.441323][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.449585][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.458753][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.467707][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.476162][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.480623][T26200] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 506.510978][T26200] bond7 (unregistering): Released all slaves [ 506.583279][T26208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5307'. [ 506.599751][T26208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5307'. [ 506.798513][T26213] syzkaller0: entered promiscuous mode [ 506.806191][T26213] syzkaller0: entered allmulticast mode [ 507.049845][T26197] lo speed is unknown, defaulting to 1000 [ 507.200682][T26249] vlan0 (unregistering): left allmulticast mode [ 507.210477][T26249] geneve0: left allmulticast mode [ 507.224403][T26249] bridge0: port 1(vlan0) entered disabled state [ 507.271613][T26255] macsec0: entered promiscuous mode [ 507.283328][T26253] macsec0: left promiscuous mode [ 507.688852][T26276] tipc: Resetting bearer [ 507.723002][T26276] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 507.746236][ T6511] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 507.793203][T26278] bond13: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 507.818415][T26278] bond13 (unregistering): Released all slaves [ 507.904959][ T1160] wlan1: Trigger new scan to find an IBSS to join [ 507.974738][T26197] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.982357][T26197] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.990804][T26197] bridge_slave_0: entered allmulticast mode [ 507.998987][T26197] bridge_slave_0: entered promiscuous mode [ 508.008534][T26197] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.017891][T26197] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.026529][T26197] bridge_slave_1: entered allmulticast mode [ 508.034946][T26197] bridge_slave_1: entered promiscuous mode [ 508.089279][T26197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.106551][T26292] netlink: 'syz.1.5324': attribute type 1 has an invalid length. [ 508.108963][T26197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.163228][T26292] bond14: entered promiscuous mode [ 508.163353][T26298] netlink: 'syz.2.5328': attribute type 11 has an invalid length. [ 508.168907][T26292] 8021q: adding VLAN 0 to HW filter on device bond14 [ 508.198913][T26292] bond14: (slave bridge15): making interface the new active one [ 508.208745][T26292] bridge15: entered promiscuous mode [ 508.218392][T26292] bond14: (slave bridge15): Enslaving as an active interface with an up link [ 508.237331][T26294] bridge7: entered promiscuous mode [ 508.243511][T26294] bridge7: entered allmulticast mode [ 508.259534][T26197] team0: Port device team_slave_0 added [ 508.310202][T26312] sctp: [Deprecated]: syz.3.5330 (pid 26312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.310202][T26312] Use struct sctp_sack_info instead [ 508.355408][T26197] team0: Port device team_slave_1 added [ 508.419484][T26316] netlink: 'syz.2.5332': attribute type 13 has an invalid length. [ 508.450194][T26320] "syz.2.5332" (26320) uses obsolete ecb(arc4) skcipher [ 508.467988][T26197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.478460][T26197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.505172][T26197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.519018][T26197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.526789][T26197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.544064][ T5618] Bluetooth: hci0: command tx timeout [ 508.566089][T26197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.630892][T26333] erspan0: entered promiscuous mode [ 508.726187][ T6489] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.806755][T26197] hsr_slave_0: entered promiscuous mode [ 508.824775][T26197] hsr_slave_1: entered promiscuous mode [ 508.832626][T26197] debugfs: 'hsr0' already exists in 'hsr' [ 508.844342][T26197] Cannot create hsr debugfs directory [ 508.889557][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.944421][ T137] wlan1: Trigger new scan to find an IBSS to join [ 509.285990][T26370] netlink: 'syz.1.5343': attribute type 12 has an invalid length. [ 509.322145][T26372] netlink: 'syz.2.5345': attribute type 9 has an invalid length. [ 509.335557][T26370] netlink: 'syz.1.5343': attribute type 1 has an invalid length. [ 509.399075][T26197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.426262][T26197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.434360][T26197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.465496][T26197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.491643][T26197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.509312][T26197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.537089][T26197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.547228][T26376] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 509.560135][T26197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.693642][T26197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.712740][T26197] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.752233][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.759828][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.774884][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.782534][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.821876][T26197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.929298][T26402] netlink: 'syz.1.5350': attribute type 1 has an invalid length. [ 510.260238][T26197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.328560][T26428] netlink: 'syz.1.5356': attribute type 1 has an invalid length. [ 510.353529][T26428] 8021q: adding VLAN 0 to HW filter on device bond15 [ 510.429931][T26428] bond15: (slave veth1): Enslaving as an active interface with a down link [ 510.520532][T26431] syzkaller0: entered promiscuous mode [ 510.544544][T26431] syzkaller0: entered allmulticast mode [ 510.625577][ T5618] Bluetooth: hci0: command tx timeout [ 510.697690][T26197] veth0_vlan: entered promiscuous mode [ 510.712373][T26197] veth1_vlan: entered promiscuous mode [ 510.739670][T26197] veth0_macvtap: entered promiscuous mode [ 510.749670][T26197] veth1_macvtap: entered promiscuous mode [ 510.787949][T26197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.810533][T26197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.826104][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.843935][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.862509][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.873062][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.023110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.063116][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.161591][T16848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.177922][T16848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.286537][T26471] __nla_validate_parse: 29 callbacks suppressed [ 511.286555][T26471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5361'. [ 511.372127][T26469] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 511.681989][T26469] bond7 (unregistering): Released all slaves [ 511.922333][T26488] Bluetooth: MGMT ver 1.23 [ 512.064893][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.092175][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.102355][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.114383][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.125225][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.356883][ T158] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.380331][ T158] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.429365][T26509] syzkaller1: entered promiscuous mode [ 512.436472][T26509] syzkaller1: entered allmulticast mode [ 512.454293][ T158] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.478621][ T158] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.543332][T26513] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 512.566389][T26513] tipc: Enabled bearer , priority 10 [ 512.584889][ T158] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.604467][T26513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5369'. [ 512.617032][ T158] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.677800][ T158] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.706861][ T5633] Bluetooth: hci0: command tx timeout [ 512.709661][ T158] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.745872][T26524] IPVS: set_ctl: invalid protocol: 245 172.20.20.187:20003 [ 512.782306][T26497] lo speed is unknown, defaulting to 1000 [ 512.807237][T26528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5373'. [ 512.855799][T26532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.967640][T26535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5377'. [ 513.166818][ T158] team0: Port device xfrm0 removed [ 513.253640][ T158] bond3 (unregistering): (slave geneve3): Releasing active interface [ 513.272642][ T158] bond2 (unregistering): (slave geneve2): Releasing active interface [ 513.343207][ T158] bond0 (unregistering): Released all slaves [ 513.373626][ T158] bond1 (unregistering): Released all slaves [ 513.388272][ T158] bond2 (unregistering): Released all slaves [ 513.403269][ T158] bond3 (unregistering): Released all slaves [ 513.432863][ T158] bond4 (unregistering): Released all slaves [ 513.471732][ T158] bond5 (unregistering): Released all slaves [ 513.526264][ T158] bond6 (unregistering): Released all slaves [ 513.553675][T26558] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 4, id = 0 [ 513.664150][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 513.732214][ T158] tipc: Disabling bearer [ 513.752190][ T158] tipc: Disabling bearer [ 513.780502][ T158] tipc: Left network mode [ 513.782853][T26561] batadv_slave_0: entered promiscuous mode [ 513.841742][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 513.901225][T26555] batadv_slave_0: left promiscuous mode [ 513.910259][ T158] IPVS: stopping master sync thread 25086 ... [ 513.916865][T16848] wlan1: Trigger new scan to find an IBSS to join [ 514.144069][ T5633] Bluetooth: hci4: command tx timeout [ 514.361138][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 514.610613][T26497] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.635533][T26497] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.643538][T26497] bridge_slave_0: entered allmulticast mode [ 514.653921][T26497] bridge_slave_0: entered promiscuous mode [ 514.675672][T26497] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.696900][T26497] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.746285][T26497] bridge_slave_1: entered allmulticast mode [ 514.779717][T26497] bridge_slave_1: entered promiscuous mode [ 514.794029][ T5633] Bluetooth: hci0: command tx timeout [ 514.811478][T23727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.015211][T26497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.065258][T26497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.148917][T26627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'. [ 515.185013][T26497] team0: Port device team_slave_0 added [ 515.206118][T26497] team0: Port device team_slave_1 added [ 515.253521][T26627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36897 - 0 [ 515.282212][T26627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.308067][T26627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 515.397931][T26497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.412538][T26497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.439673][T26497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.455571][T26627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36897 - 0 [ 515.493791][T26627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.514202][T26627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 515.541230][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 515.561363][T26497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.575925][T26497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.605380][T26497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.643422][T26627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36897 - 0 [ 515.653521][T26627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.666545][T26627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 515.746729][T26497] hsr_slave_0: entered promiscuous mode [ 515.755872][T26497] hsr_slave_1: entered promiscuous mode [ 515.763600][T26497] debugfs: 'hsr0' already exists in 'hsr' [ 515.769934][T26497] Cannot create hsr debugfs directory [ 515.896083][ T2174] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.233954][ T5633] Bluetooth: hci4: command tx timeout [ 516.250655][T26627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36897 - 0 [ 516.262315][T26627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.274740][T26627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 516.336037][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.442941][T16848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 516.453173][T16848] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 36897 - 0 [ 516.471462][T16848] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 516.510033][T16848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 516.518774][T16848] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 36897 - 0 [ 516.529329][T16848] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 516.638613][T26658] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5393'. [ 516.666384][T16848] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 516.676904][T16848] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 36897 - 0 [ 516.688578][T16848] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 516.697093][T16848] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 516.705926][T16848] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 36897 - 0 [ 516.715738][T16848] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 516.925436][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5395'. [ 516.955495][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5395'. [ 516.974094][T26675] netlink: 'syz.0.5395': attribute type 7 has an invalid length. [ 516.985102][T26679] xt_bpf: check failed: parse error [ 517.057152][ T158] hsr_slave_0: left promiscuous mode [ 517.064705][ T158] hsr_slave_1: left promiscuous mode [ 517.072441][ T158] veth1: left promiscuous mode [ 517.077767][T26683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5397'. [ 517.077971][ T158] veth1_macvtap: left promiscuous mode [ 517.092860][ T158] veth0_macvtap: left promiscuous mode [ 517.093004][T26683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5397'. [ 517.099260][ T158] veth1_vlan: left promiscuous mode [ 517.113254][ T158] veth0_vlan: left promiscuous mode [ 517.217636][T26357] Set syz1 is full, maxelem 65536 reached [ 517.487855][T26697] xt_CONNSECMARK: invalid mode: 0 [ 517.609638][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5399'. [ 517.719542][ T158] IPVS: stop unused estimator thread 0... [ 517.732740][T26497] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.746728][T26497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.758670][T26497] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.773068][T26497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.784535][T26497] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.796157][T26497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.818702][T26497] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.844760][T26497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.945829][T26726] lo speed is unknown, defaulting to 1000 [ 518.016077][T26497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.041597][T26497] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.062057][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.069791][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.106673][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.114220][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.192826][T26739] syzkaller0: entered promiscuous mode [ 518.203486][T26739] syzkaller0: entered allmulticast mode [ 518.228186][T26497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.304100][ T5633] Bluetooth: hci4: command tx timeout [ 518.354677][T26742] IPv6: sit1: Disabled Multicast RS [ 518.486653][T26758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5407'. [ 518.501585][T26758] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5407'. [ 518.865127][T26497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.876704][T26777] netlink: 'syz.1.5409': attribute type 1 has an invalid length. [ 518.903630][T26777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.918272][T26497] veth0_vlan: entered promiscuous mode [ 518.934407][T26497] veth1_vlan: entered promiscuous mode [ 518.976419][T26497] veth0_macvtap: entered promiscuous mode [ 518.987922][T26497] veth1_macvtap: entered promiscuous mode [ 519.005988][T26497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.025440][T26497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.158307][ T137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.201043][ T137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.212025][ T137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.221901][ T137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.311372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.320012][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.371558][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.401359][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.547476][T26801] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5413'. [ 519.704624][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5416'. [ 519.887678][T26837] syzkaller0: entered promiscuous mode [ 519.905224][T26837] syzkaller0: entered allmulticast mode [ 519.945850][T26837] syzkaller1: entered promiscuous mode [ 519.953913][T26837] syzkaller1: entered allmulticast mode [ 520.087163][T26854] lo speed is unknown, defaulting to 1000 [ 520.356331][ T7831] tipc: Subscription rejected, illegal request [ 520.385808][ T5633] Bluetooth: hci4: command tx timeout [ 522.233300][T26925] __nla_validate_parse: 4 callbacks suppressed [ 522.233337][T26925] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5433'. [ 522.319572][T26922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5434'. [ 522.335223][T26922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5434'. [ 522.347417][T26922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5434'. [ 522.377665][T26922] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5434'. [ 522.474850][T26921] erspan1: entered allmulticast mode [ 522.498047][T26931] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 522.504233][T26931] syzkaller1: linktype set to 778 [ 522.624568][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 522.756242][T26949] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5443'. [ 522.771632][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 522.789442][T26949] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5443'. [ 522.810355][T26949] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5443'. [ 522.845965][T26949] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5443'. [ 522.880276][T26964] netlink: 'syz.4.5446': attribute type 1 has an invalid length. [ 525.791372][T26959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.263465][T27063] xt_hashlimit: size too large, truncated to 1048576 [ 526.369774][T27071] netlink: 'syz.4.5475': attribute type 1 has an invalid length. [ 527.443383][T27113] netlink: 'syz.3.5488': attribute type 1 has an invalid length. [ 527.475152][T27113] bond4: entered promiscuous mode [ 527.509693][T27115] __nla_validate_parse: 13 callbacks suppressed [ 527.509720][T27115] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5488'. [ 527.529989][T27113] bond4: entered allmulticast mode [ 527.537839][T27113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.561469][T27119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.598753][T27113] macvlan2: entered promiscuous mode [ 527.605965][T27113] macvlan2: entered allmulticast mode [ 527.614939][T27113] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 527.751953][T27131] lo speed is unknown, defaulting to 1000 [ 527.934336][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5498'. [ 527.954922][T27151] pim6reg1: entered promiscuous mode [ 527.963442][T27151] pim6reg1: entered allmulticast mode [ 528.103649][T27160] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 528.137729][T27162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5502'. [ 528.182953][T27163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5502'. [ 528.207650][T27165] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5503'. [ 528.255671][T27165] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 528.352245][T27180] xt_hashlimit: size too large, truncated to 1048576 [ 528.364501][T27162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.465524][T27162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.515610][T27189] netlink: 'syz.0.5507': attribute type 1 has an invalid length. [ 528.596690][T27191] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5510'. [ 528.638433][T27180] 8021q: adding VLAN 0 to HW filter on device bond14 [ 528.647030][T27180] bond13: (slave bond14): making interface the new active one [ 528.655221][T27180] bond13: (slave bond14): Enslaving as an active interface with an up link [ 528.680097][T27194] lo speed is unknown, defaulting to 1000 [ 528.687604][T27180] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 528.780192][T27205] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.5512'. [ 529.256224][T27222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5516'. [ 529.380165][T27227] lo speed is unknown, defaulting to 1000 [ 529.441682][T27230] netlink: 'syz.2.5519': attribute type 1 has an invalid length. [ 529.472737][T27232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5520'. [ 529.517433][T27238] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 529.602897][T27246] SET target dimension over the limit! [ 529.637580][T27246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5522'. [ 530.124741][T27277] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.140471][T27277] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.296619][T27278] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.303816][T27278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.318118][T27278] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.325481][T27278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.411908][T27283] syzkaller1: entered promiscuous mode [ 530.426311][T27283] syzkaller1: entered allmulticast mode [ 530.488076][T27287] netlink: 'syz.0.5533': attribute type 1 has an invalid length. [ 530.660243][T27292] lo speed is unknown, defaulting to 1000 [ 530.809051][ T5633] block nbd0: Receive control failed (result -107) [ 530.809049][T27307] block nbd0: reconnected socket [ 530.809083][T27307] nbd: socks must be embedded in a SOCK_ITEM attr [ 530.993446][T27319] netlink: 'syz.1.5543': attribute type 3 has an invalid length. [ 531.003296][T27319] netlink: 'syz.1.5543': attribute type 1 has an invalid length. [ 531.197508][T27340] netlink: 'syz.2.5546': attribute type 8 has an invalid length. [ 531.692142][ T137] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 531.743165][T27365] SET target dimension over the limit! [ 531.967638][T27389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.004766][T27384] netlink: 'syz.4.5560': attribute type 1 has an invalid length. [ 532.248274][ T1785] block nbd0: Possible stuck request ffff8880273fe000: control (read@0,1024B). Runtime 390 seconds [ 532.260726][ T1785] block nbd0: Dead connection, failed to find a fallback [ 532.268597][ T1785] block nbd0: shutting down sockets [ 532.274621][ T1785] blk_print_req_error: 138 callbacks suppressed [ 532.274649][ T1785] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.291100][ T1785] buffer_io_error: 138 callbacks suppressed [ 532.291200][ T1785] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.306277][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.317226][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.326034][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.335792][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.344950][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.356414][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.364973][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.374738][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.383945][ T7182] ldm_validate_partition_table(): Disk read failed. [ 532.400224][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.416753][T27420] 8021q: VLANs not supported on sit0 [ 532.418825][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.430800][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.440552][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.449966][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.461804][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.470345][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.480168][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.488825][ T7182] Dev nbd0: unable to read RDB block 0 [ 532.495579][ T7182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.522854][ T7182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 532.532514][ T7182] nbd0: unable to read partition table [ 532.539966][T27426] __nla_validate_parse: 15 callbacks suppressed [ 532.539980][T27426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5572'. [ 532.540240][ T7182] nbd0: partition table beyond EOD, truncated [ 532.578887][ T7182] ldm_validate_partition_table(): Disk read failed. [ 532.587815][ T7182] Dev nbd0: unable to read RDB block 0 [ 532.594252][ T7182] nbd0: unable to read partition table [ 532.600347][ T7182] nbd0: partition table beyond EOD, truncated [ 532.617215][ T7182] block nbd0: NBD_DISCONNECT [ 532.622845][ T7182] block nbd0: Send disconnect failed -32 [ 532.688457][T27430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5573'. [ 532.698420][T27430] openvswitch: netlink: Flow key attr not present in new flow. [ 532.742616][T27431] bond17: entered promiscuous mode [ 532.757398][T27431] 8021q: adding VLAN 0 to HW filter on device bond17 [ 532.775890][T27436] veth0_to_team: entered promiscuous mode [ 532.782775][T27436] veth0_to_team: left promiscuous mode [ 532.839623][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5577'. [ 532.855289][T27442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5577'. [ 532.959103][T27447] lo speed is unknown, defaulting to 1000 [ 533.421527][T27448] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5579'. [ 533.466599][T27468] netlink: 'syz.1.5585': attribute type 3 has an invalid length. [ 533.492212][T27470] geneve1: entered promiscuous mode [ 533.643147][T27478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5587'. [ 533.656922][T27478] veth1_to_batadv: entered allmulticast mode [ 533.946402][T27495] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5591'. [ 533.956215][T27495] 0ªX¹¦À: renamed from batadv0 (while UP) [ 533.964898][T27495] 0ªX¹¦À: entered allmulticast mode [ 533.971130][T27495] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 534.015212][T27495] netlink: 'syz.2.5591': attribute type 322 has an invalid length. [ 534.048727][T27495] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5591'. [ 534.073071][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5593'. [ 534.119020][T27500] bond15: entered promiscuous mode [ 534.125940][T27500] 8021q: adding VLAN 0 to HW filter on device bond15 [ 534.239774][T27505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.257572][T27505] netlink: 'syz.2.5594': attribute type 3 has an invalid length. [ 534.266195][T27505] netlink: 'syz.2.5594': attribute type 1 has an invalid length. [ 534.274538][T27505] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5594'. [ 534.285684][T27505] NCSI netlink: No device for ifindex 0 [ 534.532754][T27511] netlink: 'syz.0.5596': attribute type 1 has an invalid length. [ 534.571761][T27511] 8021q: adding VLAN 0 to HW filter on device bond16 [ 534.631694][T27511] bond16: (slave macvlan0): making interface the new active one [ 534.676129][T27511] bond16: (slave macvlan0): Enslaving as an active interface with an up link [ 535.120086][T27531] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 535.303992][T27540] netlink: 'syz.0.5605': attribute type 1 has an invalid length. [ 535.677670][T27556] lo speed is unknown, defaulting to 1000 [ 535.717121][T23727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.725975][T23727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.930814][T27554] lo speed is unknown, defaulting to 1000 [ 535.983870][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 536.199474][T27580] syzkaller0: entered promiscuous mode [ 536.205471][T27580] syzkaller0: entered allmulticast mode [ 536.400496][T27597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.413528][T27596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.620319][T27611] syz_tun: entered allmulticast mode [ 536.646618][T27611] dvmrp6: entered allmulticast mode [ 536.669891][T27611] openvswitch: netlink: Multiple metadata blocks provided [ 536.689286][T27610] syz_tun: left allmulticast mode [ 537.130828][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.138259][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.145828][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.153539][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.163534][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 537.481918][T27642] lo speed is unknown, defaulting to 1000 [ 537.565872][T27668] netlink: 'syz.4.5638': attribute type 10 has an invalid length. [ 537.585144][T27668] bond0: (slave bridge1): Enslaving as an active interface with a down link [ 537.719287][T27633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.747592][T27642] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.787721][T27642] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.799951][T27642] bridge_slave_0: entered allmulticast mode [ 537.812601][T27642] bridge_slave_0: entered promiscuous mode [ 537.827236][T27681] __nla_validate_parse: 5 callbacks suppressed [ 537.827253][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5639'. [ 537.843640][T27642] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.851236][T27642] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.864097][T27642] bridge_slave_1: entered allmulticast mode [ 537.877364][T27642] bridge_slave_1: entered promiscuous mode [ 537.905215][ T1160] wlan1: Trigger new scan to find an IBSS to join [ 537.972913][T27642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.005280][T27642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.049768][T27642] team0: Port device team_slave_0 added [ 538.058704][T27642] team0: Port device team_slave_1 added [ 538.100395][T27642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.108757][T27642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.136307][T27642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.170902][T27693] syzkaller0: entered promiscuous mode [ 538.176657][T27693] syzkaller0: entered allmulticast mode [ 538.184382][T27642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.192442][T27642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.236992][T27642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.333875][T27696] lo speed is unknown, defaulting to 1000 [ 538.345321][T27642] hsr_slave_0: entered promiscuous mode [ 538.351763][T27642] hsr_slave_1: entered promiscuous mode [ 538.359359][T27642] debugfs: 'hsr0' already exists in 'hsr' [ 538.365980][T27642] Cannot create hsr debugfs directory [ 538.511739][T27704] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 538.520313][T27704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.611779][T27714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5647'. [ 538.761074][T27642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.772933][T27642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.785163][T27642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34109 - 0 [ 538.871601][T27642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.884348][T27642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.895391][T27642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34109 - 0 [ 539.037945][T27642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.104130][T27642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.124050][T27642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34109 - 0 [ 539.176062][T27739] bond0: (slave veth1_to_bond): Device is not bonding slave [ 539.183936][ T5633] Bluetooth: hci5: command tx timeout [ 539.189782][T27739] bond0: option active_slave: invalid value (veth1_to_bond) [ 539.213286][T27642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.219737][T27743] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5657'. [ 539.223799][T27642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.223826][T27642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34109 - 0 [ 539.258274][T27743] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5657'. [ 539.380870][T27752] netlink: 'syz.3.5660': attribute type 10 has an invalid length. [ 539.391349][T27752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5660'. [ 539.392628][T27642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.412098][T27642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.422162][T27642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.433337][T27642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.441487][T27754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5661'. [ 539.449318][T27752] ipvlan2: entered promiscuous mode [ 539.457905][T27752] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 539.475460][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5660'. [ 539.487069][T27642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.499393][T27642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.511940][T27642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.526043][T27642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.543017][T27755] hsr_slave_1 (unregistering): left promiscuous mode [ 539.612230][T27642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.631893][T27642] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.643705][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.651289][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.676321][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.683845][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.696958][T27770] netlink: 'syz.3.5664': attribute type 1 has an invalid length. [ 539.790856][T27621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.302501][T27816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5671'. [ 540.326215][T27642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.501751][T27827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5674'. [ 540.511718][T27825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5674'. [ 540.571497][T27642] veth0_vlan: entered promiscuous mode [ 540.591047][T27642] veth1_vlan: entered promiscuous mode [ 540.645384][T27642] veth0_macvtap: entered promiscuous mode [ 540.670173][T27642] veth1_macvtap: entered promiscuous mode [ 540.712650][T27841] netlink: 'syz.2.5678': attribute type 10 has an invalid length. [ 540.716245][T27642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.852001][T27642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.869595][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.888913][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.909760][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.928950][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.946331][ T12] wlan1: Trigger new scan to find an IBSS to join [ 541.099363][T27877] bridge0: port 3(vlan2) entered blocking state [ 541.120783][T27877] bridge0: port 3(vlan2) entered disabled state [ 541.130361][T27877] vlan2: entered allmulticast mode [ 541.153152][T27877] bridge0: entered allmulticast mode [ 541.185115][ T7831] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 541.200270][T27877] vlan2: left allmulticast mode [ 541.211432][T27877] bridge0: left allmulticast mode [ 541.263935][ T5633] Bluetooth: hci5: command tx timeout [ 541.292639][ T7831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.328489][ T7831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.410460][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.432117][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.628039][T27904] sit0: entered promiscuous mode [ 541.641481][T27904] netlink: 'syz.4.5694': attribute type 1 has an invalid length. [ 541.663226][T23727] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.681395][T23727] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.695760][T23727] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.706587][T27912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.717847][T23727] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.737810][T27912] geneve2: entered promiscuous mode [ 541.819635][T27907] lo speed is unknown, defaulting to 1000 [ 541.868197][T27925] netlink: 'syz.4.5699': attribute type 11 has an invalid length. [ 542.043656][T27931] bond1: option resend_igmp: invalid value (1023) [ 542.050642][T27931] bond1: option resend_igmp: allowed values 0 - 255 [ 542.059624][T27931] bond1 (unregistering): Released all slaves [ 542.277566][T27940] IPVS: length: 4096 != 24 [ 542.286192][T27940] 8021q: VLANs not supported on xfrm0 [ 542.481473][T27955] žÿ: renamed from team_slave_1 (while UP) [ 542.562065][T27958] bond5: entered promiscuous mode [ 542.568601][T27958] bond5: entered allmulticast mode [ 542.574772][T27958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.651765][T27966] bond6: entered promiscuous mode [ 542.659153][T27966] bond6: entered allmulticast mode [ 542.665838][T27966] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.799124][T27981] netlink: 'syz.2.5714': attribute type 1 has an invalid length. [ 542.946898][T27981] bond1: entered promiscuous mode [ 542.952553][T27981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.989607][T27987] bond1: (slave veth3): making interface the new active one [ 543.001441][T27987] veth3: entered promiscuous mode [ 543.008085][T27987] bond1: (slave veth3): Enslaving as an active interface with an up link [ 543.066269][T27993] netlink: 'syz.3.5718': attribute type 2 has an invalid length. [ 543.076126][T27993] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 543.092144][T27993] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 543.122334][T27993] __nla_validate_parse: 16 callbacks suppressed [ 543.122364][T27993] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5718'. [ 543.139835][T28004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5723'. [ 543.144296][T27993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5718'. [ 543.246320][T28011] pim6reg: entered allmulticast mode [ 543.344217][ T5633] Bluetooth: hci5: command tx timeout [ 543.571396][T28026] syzkaller0: entered promiscuous mode [ 543.585948][T28026] syzkaller0: entered allmulticast mode [ 543.595231][T28024] lo speed is unknown, defaulting to 1000 [ 543.667084][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.674498][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.682031][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.690316][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.699091][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.904758][ T1160] wlan1: Trigger new scan to find an IBSS to join [ 544.190811][T28055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5732'. [ 544.200063][T28055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5732'. [ 544.232294][T28041] syzkaller0: entered promiscuous mode [ 544.238813][T28041] syzkaller0: entered allmulticast mode [ 544.349854][T28033] lo speed is unknown, defaulting to 1000 [ 544.705369][T28069] tipc: Started in network mode [ 544.710716][T28069] tipc: Node identity 8ebe07b762ea, cluster identity 4711 [ 544.719165][T28069] tipc: Enabled bearer , priority 0 [ 544.748894][T28067] tipc: Disabling bearer [ 544.815237][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.019044][T28033] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.048234][T28033] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.064079][T28033] bridge_slave_0: entered allmulticast mode [ 545.082175][T28033] bridge_slave_0: entered promiscuous mode [ 545.091746][T28033] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.099930][T28033] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.110728][T28033] bridge_slave_1: entered allmulticast mode [ 545.118756][T28033] bridge_slave_1: entered promiscuous mode [ 545.132532][T28097] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 545.154669][T28033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.161656][T28097] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 545.168162][T28033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.212741][T28033] team0: Port device team_slave_0 added [ 545.234359][T28033] team0: Port device team_slave_1 added [ 545.280724][T28033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.288787][T28033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.290122][T28105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5742'. [ 545.316422][T28033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.356747][T28033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.363901][T28033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.390044][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888085d58000: rx timeout, send abort [ 545.390199][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880525dc800: rx timeout, send abort [ 545.398850][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888085d58000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 545.399041][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880525dc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 545.424358][ T5633] Bluetooth: hci5: command tx timeout [ 545.447234][T23727] tipc: Subscription rejected, illegal request [ 545.472584][T28033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.502409][T28111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5745'. [ 545.601757][T28118] netlink: 'syz.2.5746': attribute type 13 has an invalid length. [ 545.620635][T28118] netlink: 'syz.2.5746': attribute type 12 has an invalid length. [ 545.636638][T28033] hsr_slave_0: entered promiscuous mode [ 545.645143][T28033] hsr_slave_1: entered promiscuous mode [ 545.652166][T28033] debugfs: 'hsr0' already exists in 'hsr' [ 545.658459][T28033] Cannot create hsr debugfs directory [ 545.753330][ T5633] Bluetooth: hci2: command tx timeout [ 545.872154][T28132] tipc: Started in network mode [ 545.884724][T28132] tipc: Node identity , cluster identity 4711 [ 545.901423][T28132] tipc: Failed to obtain node identity [ 545.918134][T28132] tipc: Enabling of bearer rejected, failed to enable media [ 545.988353][T28033] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 546.000000][T28033] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 546.013300][T28033] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 546.036870][T28150] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5755'. [ 546.047880][T28150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5755'. [ 546.049806][T28143] syzkaller0: entered promiscuous mode [ 546.057380][T28150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5755'. [ 546.063092][T28143] syzkaller0: entered allmulticast mode [ 546.090099][T28033] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 546.102249][T28033] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 546.112669][T28033] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 546.128148][T28154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.137243][T28154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.137477][T28150] 8021q: VLANs not supported on gre0 [ 546.178890][T28033] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 546.189048][T28033] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 546.200748][T28033] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 546.237278][T28160] netlink: 'syz.3.5756': attribute type 1 has an invalid length. [ 546.293028][T28163] bond1: option ad_select: invalid value (34) [ 546.304060][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 546.318454][T28163] bond1 (unregistering): Released all slaves [ 546.345363][T28033] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 546.355577][T28033] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 36897 - 0 [ 546.368544][T28033] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 546.509073][T28033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.526307][T28185] netlink: 'syz.2.5764': attribute type 3 has an invalid length. [ 546.545895][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.553603][T28033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.579647][T28185] netlink: 'syz.2.5764': attribute type 3 has an invalid length. [ 546.592380][T28185] netlink: 'syz.2.5764': attribute type 3 has an invalid length. [ 546.603078][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.618104][T28185] netlink: 'syz.2.5764': attribute type 3 has an invalid length. [ 546.629588][T28033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.675009][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.677760][T28199] netlink: 'syz.2.5765': attribute type 1 has an invalid length. [ 546.718660][T28033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 546.741096][T28033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.788420][T28201] bond2: (slave bridge3): making interface the new active one [ 546.798097][T28201] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 546.922782][T28033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.949124][T28033] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.964910][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.972065][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.105406][T28033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 547.116544][T28033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.181488][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.189102][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.693378][T28033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.755249][T28033] veth0_vlan: entered promiscuous mode [ 547.766424][T28033] veth1_vlan: entered promiscuous mode [ 547.824152][ T5633] Bluetooth: hci2: command tx timeout [ 547.832271][T28033] veth0_macvtap: entered promiscuous mode [ 547.842893][T28033] veth1_macvtap: entered promiscuous mode [ 547.869553][T28033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.925966][T28033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.969915][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.991976][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.021757][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.036897][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.193425][T28259] syzkaller0: entered promiscuous mode [ 548.199126][T28259] syzkaller0: entered allmulticast mode [ 548.232223][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.249142][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.335371][T28267] netlink: 'syz.4.5779': attribute type 22 has an invalid length. [ 548.343395][T28267] __nla_validate_parse: 5 callbacks suppressed [ 548.343419][T28267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5779'. [ 548.386988][T28267] netlink: 'syz.4.5779': attribute type 22 has an invalid length. [ 548.387638][T16848] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.397487][T28267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5779'. [ 548.424358][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.433969][T16848] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.442971][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.451118][T16848] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.474667][T16848] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.587360][T28278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5780'. [ 548.838077][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5786'. [ 549.118604][T28306] gretap1: entered allmulticast mode [ 549.126819][T28306] bond3: (slave gretap1): making interface the new active one [ 549.140270][T28306] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 549.183845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.193729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.243392][T28315] openvswitch: netlink: Multiple metadata blocks provided [ 549.300222][T28321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5792'. [ 549.315054][T28321] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5792'. [ 549.570936][T28338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5802'. [ 549.588575][T28338] block nbd0: Unsupported socket: should be TCP or UNIX. [ 549.913838][ T5633] Bluetooth: hci2: command tx timeout [ 550.091990][T28364] erspan1: entered allmulticast mode [ 550.267772][T28371] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5810'. [ 550.422535][T28380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5811'. [ 552.014085][ T5633] Bluetooth: hci2: command tx timeout [ 553.430055][T28348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.266493][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.671288][ C0] sched: DL replenish lagged too much [ 614.150742][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 619.268635][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 635.425927][ T5618] Bluetooth: hci1: command 0x0405 tx timeout [ 637.336351][ T6301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 657.991382][T28385] Bluetooth: hci4: command tx timeout [ 662.583649][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 662.590711][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28348/1:b..l [ 662.598715][ C0] rcu: (detected by 0, t=10503 jiffies, g=105421, q=3544 ncpus=2) [ 662.606621][ C0] task:syz.0.5805 state:R running task stack:26552 pid:28348 tgid:28346 ppid:28033 task_flags:0x400140 flags:0x00080003 [ 662.620294][ C0] Call Trace: [ 662.623594][ C0] [ 662.626540][ C0] __schedule+0x17d9/0x56c0 [ 662.631084][ C0] ? __pfx___schedule+0x10/0x10 [ 662.635955][ C0] ? __pfx___schedule+0x10/0x10 [ 662.640815][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 662.645889][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 662.651298][ C0] preempt_schedule_common+0x82/0xd0 [ 662.656593][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 662.662218][ C0] preempt_schedule_thunk+0x16/0x40 [ 662.667447][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 662.672801][ C0] __local_bh_enable_ip+0xe1/0x130 [ 662.677931][ C0] nl80211_netlink_notify+0x46b/0x840 [ 662.683336][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 662.688811][ C0] notifier_call_chain+0x1a5/0x3d0 [ 662.693977][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 662.699715][ C0] netlink_release+0x11f8/0x1aa0 [ 662.704675][ C0] ? netlink_release+0x106/0x1aa0 [ 662.709716][ C0] ? __pfx_netlink_release+0x10/0x10 [ 662.715012][ C0] ? down_write+0x16d/0x200 [ 662.719554][ C0] ? __pfx_down_write+0x10/0x10 [ 662.724421][ C0] sock_close+0xad/0x220 [ 662.728855][ C0] ? __pfx_sock_close+0x10/0x10 [ 662.733725][ C0] __fput+0x418/0xa50 [ 662.737771][ C0] task_work_run+0x1d9/0x270 [ 662.742366][ C0] ? __pfx_task_work_run+0x10/0x10 [ 662.747488][ C0] ? kick_process+0xeb/0x160 [ 662.752086][ C0] get_signal+0x1181/0x12c0 [ 662.756609][ C0] ? __fput_deferred+0x216/0x380 [ 662.761553][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 662.767149][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 662.773310][ C0] ? __x64_sys_sendmsg+0x25d/0x290 [ 662.778438][ C0] ? rcu_is_watching+0x15/0xb0 [ 662.783227][ C0] exit_to_user_mode_loop+0x104/0x730 [ 662.788618][ C0] ? rcu_is_watching+0x15/0xb0 [ 662.793390][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.799485][ C0] do_syscall_64+0x353/0x580 [ 662.804096][ C0] ? trace_irq_disable+0x3b/0x140 [ 662.809153][ C0] ? clear_bhb_loop+0x40/0x90 [ 662.813835][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.819730][ C0] RIP: 0033:0x7f80ee99ce59 [ 662.824150][ C0] RSP: 002b:00007f80ef7d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.832567][ C0] RAX: 000000000000001c RBX: 00007f80eec15fa0 RCX: 00007f80ee99ce59 [ 662.840538][ C0] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 662.848522][ C0] RBP: 00007f80eea32e6f R08: 0000000000000000 R09: 0000000000000000 [ 662.856496][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.864470][ C0] R13: 00007f80eec16038 R14: 00007f80eec15fa0 R15: 00007ffe8a19ced8 [ 662.872456][ C0] [ 662.875503][ C0] rcu: rcu_preempt kthread starved for 1519 jiffies! g105421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 662.886699][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 662.896668][ C0] rcu: RCU grace-period kthread stack dump: [ 662.902555][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 662.916045][ C0] Call Trace: [ 662.919352][ C0] [ 662.922287][ C0] __schedule+0x17d9/0x56c0 [ 662.926803][ C0] ? rcu_is_watching+0x15/0xb0 [ 662.931752][ C0] ? rcu_is_watching+0x15/0xb0 [ 662.936520][ C0] ? __pfx___schedule+0x10/0x10 [ 662.941471][ C0] ? schedule+0x90/0x360 [ 662.945722][ C0] ? rcu_is_watching+0x15/0xb0 [ 662.950490][ C0] ? lock_release+0x4b/0x3c0 [ 662.955186][ C0] schedule+0x164/0x360 [ 662.959443][ C0] schedule_timeout+0x152/0x2c0 [ 662.964309][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 662.969686][ C0] ? __pfx_process_timeout+0x10/0x10 [ 662.975099][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 662.980983][ C0] ? prepare_to_swait_event+0x322/0x350 [ 662.986551][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 662.991421][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 662.997254][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 663.003416][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 663.008718][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 663.013929][ C0] ? trace_irq_enable+0x3b/0x140 [ 663.018889][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 663.023496][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 663.028713][ C0] ? __kthread_parkme+0x71/0x1f0 [ 663.033666][ C0] ? __kthread_parkme+0x196/0x1f0 [ 663.038721][ C0] kthread+0x388/0x470 [ 663.042796][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 663.048003][ C0] ? __pfx_kthread+0x10/0x10 [ 663.052596][ C0] ret_from_fork+0x514/0xb70 [ 663.057188][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 663.062303][ C0] ? __switch_to+0xc89/0x1420 [ 663.067031][ C0] ? __pfx_kthread+0x10/0x10 [ 663.071623][ C0] ret_from_fork_asm+0x1a/0x30 [ 663.076488][ C0] [ 663.079685][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 663.086534][ C0] Sending NMI from CPU 0 to CPUs 1: [ 663.091757][ C1] NMI backtrace for cpu 1 [ 663.091774][ C1] CPU: 1 UID: 0 PID: 28385 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 663.091792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.091802][ C1] Workqueue: hci5 hci_cmd_sync_work [ 663.091947][ C1] RIP: 0010:__dev_queue_xmit+0x6bb/0x37f0 [ 663.091996][ C1] Code: 84 c0 48 8b 5c 24 18 0f 84 85 19 00 00 e8 2d 41 4b f8 eb 0a e8 26 41 4b f8 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 ab 95 b6 f8 48 83 3b 00 74 78 4c 8b 6c 24 28 43 [ 663.092015][ C1] RSP: 0018:ffffc90000a07f20 EFLAGS: 00000246 [ 663.092028][ C1] RAX: 1ffff1100b451f00 RBX: ffff88805a28f800 RCX: ffff88802eb2dd00 [ 663.092039][ C1] RDX: 0000000000000100 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 663.092050][ C1] RBP: ffffc90000a081d0 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 663.092061][ C1] R10: dffffc0000000000 R11: fffffbfff20622df R12: dffffc0000000000 [ 663.092073][ C1] R13: ffff888056770800 R14: 0000000000000001 R15: ffff8881be407d50 [ 663.092084][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 663.092096][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.092106][ C1] CR2: 0000560c04ff0f08 CR3: 000000000e746000 CR4: 00000000003526f0 [ 663.092120][ C1] Call Trace: [ 663.092126][ C1] [ 663.092131][ C1] ? lock_release+0x4b/0x3c0 [ 663.092157][ C1] ? synproxy_pernet+0x23/0x240 [ 663.092217][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 663.092230][ C1] ? ipv4_synproxy_hook+0x246/0xd10 [ 663.092248][ C1] ? nf_confirm+0x95d/0xe10 [ 663.092290][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 663.092304][ C1] ? __pfx_nf_confirm+0x10/0x10 [ 663.092321][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.092341][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.092355][ C1] ? ip_output+0x29f/0x450 [ 663.092429][ C1] ? ip_finish_output2+0x972/0x10b0 [ 663.092451][ C1] ip_finish_output2+0xbda/0x10b0 [ 663.092470][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 663.092493][ C1] ip_output+0x29f/0x450 [ 663.092510][ C1] ? ip_output+0x5a/0x450 [ 663.092527][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 663.092549][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 663.092566][ C1] ? synproxy_pernet+0x45/0x270 [ 663.092632][ C1] nft_synproxy_eval_v4+0x37b/0x530 [ 663.092652][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 663.092670][ C1] ? nf_ip_checksum+0x13c/0x510 [ 663.092734][ C1] nft_synproxy_do_eval+0x335/0x550 [ 663.092752][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 663.092769][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.092784][ C1] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 663.092810][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.092827][ C1] nft_do_chain+0x48d/0x1b10 [ 663.092846][ C1] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 663.092867][ C1] ? ktime_expiry_to_cycles+0x176/0x1e0 [ 663.092889][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 663.092906][ C1] ? clockevents_program_event+0x1a6/0x630 [ 663.092931][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 663.092998][ C1] nft_do_chain_inet+0x360/0x4b0 [ 663.093040][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.093057][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 663.093080][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 663.093168][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.093186][ C1] nf_hook_slow+0xc5/0x220 [ 663.093203][ C1] NF_HOOK+0x21f/0x3c0 [ 663.093217][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 663.093236][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.093251][ C1] ? NF_HOOK+0x9e/0x3c0 [ 663.093264][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 663.093277][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.093294][ C1] ? ip_local_deliver+0x113/0x190 [ 663.093308][ C1] NF_HOOK+0x336/0x3c0 [ 663.093319][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 663.093330][ C1] ? NF_HOOK+0x9e/0x3c0 [ 663.093341][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 663.093355][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 663.093368][ C1] ? ip_rcv_core+0x88d/0xd50 [ 663.093383][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 663.093396][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 663.093410][ C1] process_backlog+0xa34/0x1860 [ 663.093431][ C1] ? process_backlog+0x3c3/0x1860 [ 663.093454][ C1] __napi_poll+0xaa/0x330 [ 663.093471][ C1] net_rx_action+0x61d/0xf50 [ 663.093494][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 663.093510][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 663.093566][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.093585][ C1] ? net_tx_action+0xbff/0xc30 [ 663.093604][ C1] handle_softirqs+0x225/0x840 [ 663.093625][ C1] ? __irq_exit_rcu+0xca/0x220 [ 663.093646][ C1] __irq_exit_rcu+0xca/0x220 [ 663.093665][ C1] irq_exit_rcu+0x9/0x30 [ 663.093682][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 663.093703][ C1] [ 663.093708][ C1] [ 663.093714][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.093730][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 663.093749][ C1] Code: f7 e8 9d ea f7 f5 f7 c3 00 02 00 00 74 05 e8 10 a7 23 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 01 e9 f5 65 8b 05 2d c4 8f 07 85 c0 74 18 5b 41 5e e9 91 48 [ 663.093763][ C1] RSP: 0018:ffffc9000d2e75e8 EFLAGS: 00000206 [ 663.093776][ C1] RAX: 0000000000000046 RBX: 0000000000000246 RCX: 0000000080000002 [ 663.093787][ C1] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: 0000000000000001 [ 663.093797][ C1] RBP: ffffc9000d2e7688 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 663.093815][ C1] R10: dffffc0000000000 R11: fffffbfff20622df R12: ffff88801d2d7b40 [ 663.093826][ C1] R13: 0000000000000000 R14: ffff88801d2d7b40 R15: 0000000000000000 [ 663.093845][ C1] __slab_free+0x222/0x2c0 [ 663.093877][ C1] qlist_free_all+0x99/0x100 [ 663.093903][ C1] kasan_quarantine_reduce+0x148/0x160 [ 663.093923][ C1] __kasan_slab_alloc+0x22/0x80 [ 663.093944][ C1] kmem_cache_alloc_node_noprof+0x380/0x680 [ 663.093965][ C1] ? __alloc_skb+0x276/0x7a0 [ 663.094008][ C1] ? kmem_cache_alloc_node_noprof+0x23a/0x680 [ 663.094029][ C1] __alloc_skb+0x276/0x7a0 [ 663.094050][ C1] mgmt_send_event+0x46/0x190 [ 663.094066][ C1] ? mgmt_connect_failed+0x157/0x4c0 [ 663.094111][ C1] mgmt_connect_failed+0x322/0x4c0 [ 663.094129][ C1] ? hci_abort_conn_sync+0xa6f/0x1190 [ 663.094176][ C1] ? __pfx_mgmt_connect_failed+0x10/0x10 [ 663.094194][ C1] ? hci_abort_conn_sync+0xa7b/0x1190 [ 663.094209][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.094225][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.094242][ C1] hci_conn_failed+0xda/0x320 [ 663.094297][ C1] ? hci_abort_conn_sync+0xa7b/0x1190 [ 663.094313][ C1] hci_abort_conn_sync+0xdd0/0x1190 [ 663.094331][ C1] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 663.094347][ C1] ? rcu_is_watching+0x15/0xb0 [ 663.094362][ C1] ? abort_conn_sync+0x26/0x210 [ 663.094403][ C1] ? lock_release+0x4b/0x3c0 [ 663.094428][ C1] ? abort_conn_sync+0x26/0x210 [ 663.094445][ C1] ? abort_conn_sync+0x19c/0x210 [ 663.094462][ C1] ? __pfx_abort_conn_sync+0x10/0x10 [ 663.094482][ C1] hci_cmd_sync_work+0x20b/0x3f0 [ 663.094504][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 663.094524][ C1] process_scheduled_works+0xa8e/0x14e0 [ 663.094553][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 663.094571][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 663.094591][ C1] ? assign_work+0x3cf/0x5d0 [ 663.094611][ C1] worker_thread+0xa47/0xfb0 [ 663.094635][ C1] ? __kthread_parkme+0x71/0x1f0 [ 663.094659][ C1] kthread+0x388/0x470 [ 663.094672][ C1] ? __pfx_worker_thread+0x10/0x10 [ 663.094690][ C1] ? __pfx_kthread+0x10/0x10 [ 663.094704][ C1] ret_from_fork+0x514/0xb70 [ 663.094720][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 663.094734][ C1] ? __switch_to+0xc89/0x1420 [ 663.094757][ C1] ? __pfx_kthread+0x10/0x10 [ 663.094771][ C1] ret_from_fork_asm+0x1a/0x30 [ 663.094795][ C1]