last executing test programs: 2m5.703074853s ago: executing program 2 (id=2728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0}, 0x14) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000440)={0x1, 0x4, 0x5, 0x2, @vifc_lcl_ifindex, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02742e8680d85ff9782762f86dd", 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000080)={0x2b}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r7, 0x54d2b226a8e856d5, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x700, 0x7230, 0xd5, {{0x31, 0x4, 0x0, 0x1, 0xc4, 0x66, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x1b, 0x50, [@loopback, @remote, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0x4c, 0x38, 0x1, 0x3, [{@empty}, {@multicast2, 0x2}, {@empty, 0x7}, {@remote, 0x1ff}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0xcc4}, {@loopback, 0x6}, {@broadcast, 0xffffffff}, {@remote}]}, @cipso={0x86, 0x22, 0x3, [{0x7, 0x10, "4feaaa0c76c17ddc1a268f949b20"}, {0x6, 0xc, "8761847dd037ca32448d"}]}, @lsrr={0x83, 0x1b, 0x8e, [@dev={0xac, 0x14, 0x14, 0x17}, @local, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x0, [{@local, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x1, 0x0, {{0x2e, 0x4, 0x3, 0x24, 0xb8, 0x65, 0x0, 0xfd, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x2c, 0xf5, 0x1, 0x7, [{@local}, {@empty, 0x7}, {@broadcast, 0xe}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x40}]}, @timestamp={0x44, 0x8, 0x27, 0x0, 0x9, [0x8]}, @timestamp={0x44, 0x28, 0x8c, 0x0, 0x8, [0x7, 0x1, 0x3, 0x6, 0x4, 0x4, 0x8, 0xfff, 0x3b7]}, @rr={0x7, 0x23, 0x52, [@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x2, 0x10, "f291c0fd19221554445464f476de"}, {0x5, 0xa, "b7404adb97465aba"}]}]}}}}}) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0x9c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x40c, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x168, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x40000}, 0x404c880) 2m5.126793234s ago: executing program 1 (id=2731): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff00000000000000001838000005000000000000000000000095000000000000000a4a7e148f920e0f637c0dd338c150d48ab459fb1f3e9c"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff00000000000000001838000005000000000000000000000095000000000000000a4a7e148f920e0f637c0dd338c150d48ab459fb1f3e9c"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x0) (async) 2m4.860623475s ago: executing program 1 (id=2733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) (async) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2800000000000000290000000400000032010000000000000106000000000000000100000000000060000000000000002900000037"], 0x88}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x5, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local}}}}}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async, rerun: 64) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x2, {0xa, 0x4e21, 0x2, @loopback, 0x400}}}, 0x32) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x28011, r9, 0x513e9000) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x2000) 2m4.800143415s ago: executing program 2 (id=2734): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="bb160c11bb95d06c5e2d05089d7a3cc1cbc5ba9128131148bc381beb44d37244ae827209169f098a177bf94184d674e52b3cffa6e168d31c3d725770bc7aeb32889c1c7e68d8fd049bc3861f229b29f4043a2146e2d0", 0x56}, {&(0x7f00000000c0)="0ef6e9e0b94d0db93303436bba406acff46689c703e59f8ca4de14dd5618fe5d4439fc8d86d1d25857d5407314d7358f98432a075c4532adfd09de5e913015f47c4287bd894c65302186927cd6dca0944d1677", 0x53}], 0x2, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x44, 0x10, "a88cfefb66168a589a51c16accf3"}, @lsrr={0x83, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @multicast2, @local, @remote]}, @lsrr={0x83, 0x7, 0x7b, [@broadcast]}, @lsrr={0x83, 0x7, 0x4e, [@multicast2]}, @timestamp_prespec={0x44, 0x34, 0xe4, 0x3, 0xc, [{@loopback, 0xff5}, {@rand_addr=0x64010102, 0xfffffffc}, {@private=0xa010102, 0xfffffffe}, {@remote}, {@remote, 0x6}, {@private=0xa010100}]}, @generic={0x89, 0xb, "306a81f37dc8db2301"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0xe8}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc291, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @exit, @generic={0x40, 0x2, 0x9, 0x4, 0x1}, @call={0x85, 0x0, 0x0, 0x47}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x200, 0xf2, &(0x7f0000000500)=""/242, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xc, 0xffffff01, 0x5bf4b6b}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[{0x0, 0x3, 0xd, 0x8}, {0x2, 0x2, 0x7, 0xc}, {0x4, 0x4, 0x9}, {0x4, 0x2, 0x8, 0x5}, {0x0, 0x5, 0x6, 0xb}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000380), &(0x7f00000007c0)=r1}, 0x20) r2 = accept(0xffffffffffffffff, &(0x7f0000000840)=@tipc=@name, &(0x7f00000008c0)=0x80) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000980)=0x6e) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000a00)={r3, r4, 0x9, 0x3a, &(0x7f00000009c0)="a8a9823dd12c290d8f087cbc3a39d6b7da38b85c96946357e2b11c84679e84d901d3986d15c7c47c9030dec6a33a3c9bab7823b10f694f7aef9d", 0x7, 0xe, 0x6, 0x8, 0x5, 0x0, 0xd9, 'syz0\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000ac0)=0x81, 0x1) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x120, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xfa, 0x19, "8b61ee079b06eca05d26b45f18fd8479c8b495a5ef6057565db7b7c02f9518c847d4c9e92e9c3c6c452fc243a38a72588d8de0964e8cdf3467f8d32c7fa196d2a50fe62f8fdacbbbeccb483893c9602766503ab905bbb231f194802b415c3f5a4c0335eaf343ff2ff6ef4caa0fed82d91007994b17a0759f7f4645bc1456af0aac746cd033824266b96d60dba77f3ef02facb0de871c579368bd546b7ebfd682db285fc6118e099dd2c15b38327c9edaa14f83e871ab5266ddadd021b6a99f0510d990130351fb0027c0bafb146b2fbc9dbbe2343fe4dd05825a5aedf3e6aa0d24142f2b8ee236610acfaf0785c1657877a33570da0e"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x120}, 0x1, 0x0, 0x0, 0x30004000}, 0x80880) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000d80)={0x0, @dev}, &(0x7f0000000dc0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'erspan0\x00', r8, 0x8000, 0x731, 0x1, 0x8, {{0x14, 0x4, 0x3, 0x6, 0x50, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0x41, 0x1, 0x8, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x943}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xfffffff8}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x8, 0x56, 0x0, 0xe, [0x3]}]}}}}}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x7, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004050}, 0xda8dabe5c2c76796) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x94, r11, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x858a}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r13 = epoll_create1(0x80000) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000001280)={0x2004}) write(r5, &(0x7f00000012c0)="7694ccec5dc5eaadc683b1797727087112bc1a0374b35174fcb9c21f6e87b665496db4319cda1378dcc44160ff547545c637fff6928b095fbe81859c085943d5f0001f274f50b70d4445d9d58611cd85daacc149cdd39c485f78b969cb7df9a6dd3e7088decbe5e8afbf7e89541dfcead98633a21b946438b14ee310fa2d75a0b12281eb3f2ed6bf9d3759d134574f73e73de32675430369cc9b17efb01ca000d6afcf772d9b", 0xa6) socket$vsock_stream(0x28, 0x1, 0x0) writev(r4, &(0x7f0000001400)=[{&(0x7f0000001380)="4dde72b8c449ab893766032ea0474d1327b5b28aa9a28412438dd86dcb8ce3047e1e9c82c6a07c6adb202c9145e7a1502fe480c4ec0f85a470c9a9f40f7158ae3f04ac8985b67881299856f31d7cc478d8989fe98a71599ee1b7c22884d7", 0x5e}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 2m4.775070071s ago: executing program 1 (id=2735): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000041ffffff0000000408050000000000000000000095efe5ba79592bba21d453d501821c7fc000000000000000d2936c9f9ef368c21c782744f87c559cb57161b2e0ee5b59cb1716046649f1d6f99e5ee7e1dabc8b7f56f672086cc919ea975dea4e45aafe1bd8a968f4dbe4"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000fb9a3cffdd225a36460f12a34b4dac861ac8cb0c0a672df2a33226d7e1ffff0d283736ea67a29893f252bb01329b02b0b9a15d0625bcff11a22f67ff5abaf428abe0936b783d7404517c171b46c9b55652a343331b049650927c0932a832723c674081b1b507eaed8715deb88ed02453fb8ea91ee189fe1338b2402aa52b0056003ef8411f8e38201b8af0591fb"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xca, r0}, 0x38) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b0040000000800000030000000002000008000100020000"], 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0xe5c, &(0x7f0000000100)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x34, 0x26, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x5, 0xd}, {0xfff1, 0xb}, {0x1, 0x8}}, [{0x4}, {0x4}, {0x4}, {0xfffffffffffffd8a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000401c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000c80)="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"}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd27, 0x25dfdbfc, {0x1c, 0x80, 0x30, 0xff, 0xff, 0x4, 0xc8, 0x1, 0x700}}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) socket$inet6(0xa, 0x802, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) 2m4.552939121s ago: executing program 0 (id=2737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)={@val={0x0, 0xf5}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102}}}}}}, 0x2a) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xd, &(0x7f0000000980)=ANY=[@ANYBLOB="18250000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x401, 0x5b, &(0x7f0000000380)=""/91, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40efd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x5555555555550001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 2m4.551223026s ago: executing program 2 (id=2738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x18c, r2, 0x300, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x508}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cb6cbf9de5b89d9b224d91ba201b8314dcbb45cf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0xfec06d6c87ab8cde) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast]}, 0x48) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000200ff"], 0x38}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x1, @local, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @val=0x80}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="c42300001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba000000201006801c1075"], 0x23c4}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x108, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5c6c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x95f9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @empty, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x20, 0x12}}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x0, 'wg2\x00', {0x1}, 0x9}) close(r0) 2m4.196394252s ago: executing program 0 (id=2741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @local, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0xfffffd74) listen(r3, 0x0) recvfrom(r3, 0x0, 0x0, 0x42, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r5, 0x0, 0x970b) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000002000ffdbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x47, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x9, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r8, r8, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) 2m3.571508243s ago: executing program 2 (id=2745): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)='3', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0x9, r2, 0x1, 0x62}, 0x14) r3 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x0, 0x0, 0x40000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xfee8, &(0x7f000000cf3d)=""/195}, 0x48) socket$packet(0x11, 0x3, 0x300) (async) socket(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) (async) sendto$packet(r0, &(0x7f0000000080)='3', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0x9, r2, 0x1, 0x62}, 0x14) (async) socket$inet6(0xa, 0x3, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x0, 0x0, 0x40000}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xfee8, &(0x7f000000cf3d)=""/195}, 0x48) (async) 2m3.365328097s ago: executing program 4 (id=2746): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80, 0x800) sendmsg$rds(r1, &(0x7f00000020c0)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/178, 0xb2}], 0x4, &(0x7f0000001f00)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x92f}, {&(0x7f0000000380)=""/253, 0xfd}, &(0x7f0000000480)=[{&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000000740)=""/85, 0x55}], 0x3, 0x7979a4838c21f55, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {&(0x7f00000005c0)=""/14, 0xe}, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/7, 0x7}, {&(0x7f0000000bc0)=""/137, 0x89}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000c80)=""/116, 0x74}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000940)=""/26, 0x1a}], 0x7, 0x40, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0xffffff7f, 0x1}, &(0x7f0000001d80)=0x8, &(0x7f0000001dc0)=0xb291, 0x0, 0x3, 0x0, 0x9, 0x51, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x8001, 0x9}, &(0x7f0000001e00)=0x2, &(0x7f0000001e40)=0x1, 0x80, 0x1, 0x14e, 0x6, 0x4, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x1}, &(0x7f0000001e80)=0x7fff, &(0x7f0000001ec0)=0x8d1, 0xfffffffffffffff9, 0xffff, 0x0, 0x7ff, 0x10, 0xe8d5}}], 0x198, 0x80}, 0x4008000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@delsa={0x20c, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x8004d4, 0xa, 0x6c}, [@sec_ctx={0xfd, 0x8, {0xf9, 0x8, 0x0, 0x1, 0xf1, "20a56a44f10cfa9eaff0a7549bf06c30bd6a24a76d30cb3d45d0b4a38c13861935ae026da56ef1d0b1b490fa9375a13c81f99a9b6c0533e3a438531a6b4038d60e2b8a188813372f2ca74d4db3ee0884dd8cd0b74dfdc125dac450b65892d2fcbcc5f2e85c34b961970b1a97f687899438987fd3938c98ddf2bbf6e07d034cf7d5ce0d3fc5bb465758c951ac071ddf1512aa63aa278cdf5a83016c5233c52287d0afc61a281ddc4b16cd62f310284ae7cb066cb496dd74902085980a67bdd6e56337896cfc2bceb71316a78b4e35c5bbafa496adb6c1b3a0c5c8b321c71914f7bd0a9bb0352a07d074a8c17e1dd634e867"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @tfcpad={0x8, 0x16, 0xffffff00}, @algo_aead={0xd1, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x428, 0x100, "4cf4859000a6e5416f2f7fb1c0a2f8102c275caba2c8e95b3f376e4f0afea981f6549b7e46efd05c20d9b77284268a5855b01e0510c1bced5631f280f12e41dee26c7c9ff2f72394ad966e559c7b8d3dfb87b906a3af6605842a3c509332d5c5ff784dd801f866908dbe216fe483c676906dad275f9b6e9dfc86dd30ac1376ccfd2b217e0d"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004800}, 0x14) 2m3.178794634s ago: executing program 4 (id=2747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x4, 0x4000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x10, @loopback, 0x7}}, 0x2, 0x4, 0x7faa, 0x40008, 0x40, 0xf, 0x3}, 0x9c) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0x3, 0x8001, 0x4, 0xe, 0xb23}, &(0x7f0000000300)=0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@void, @void}}}, 0xfffffffffffffc4d}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 2m3.173362735s ago: executing program 2 (id=2748): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m2.862541088s ago: executing program 4 (id=2750): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$tipc(0x1e, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000340)=""/248, &(0x7f0000000440)=0xf8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x1e, 0x4) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x7, @empty, 0xfffffac6}, 0x1c, 0x0}}], 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000180)="d0c8c0a78fa911a60c9d8fa5293a1906eceb073946747526aedcd8d6d2c5067a22ba2354dea91dc7c45aeda6ef4529151cc323998762d8dcd5300e975d7e394d04aca8a106a0155275e52428b6bf95f6b000838df87f544aaef3e35662b6db64521e", 0x62, 0x4040, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/129, 0x81, 0x40000041, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m2.697548752s ago: executing program 0 (id=2752): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 2m2.669236914s ago: executing program 0 (id=2753): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000380)=@ethtool_eeprom={0xb, 0x8, 0x5, 0xf3, "a54091b3a7be7e6660246d658261c1ce224675a706f45a9edd9c2e0168c0cc4d4d8772d9c76f0615b9ac8f83310046fd2a26c470b7fc6902ca0438605a2b0f8ba2b22a5aa04fa087f049f5fb2afafd58caff48772cee4452f07c0a4367df8dc645e6ebf9ccf21727440f921609c97de30a15f70077d503d407a4d6d1fe8ebf6fea9930c0732449b5f58b095db21ad2d3de1fd1907b61883c071037cedfecd856862437b56a3d2f8b77af4cf69538a4fffe3ad910ee4873f412a63366e2cc7c35fbdd47e09e7e7db699ccabf0d50079459c26e60c4614a6a2befe6e254924201788583b62e25c264cb402519b5660b54ba5d17f"}}) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x10000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [], {0x14, 0x10}}, 0x28}}, 0x24000840) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2000000000000000000ab158f4c9f43c0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x1d, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100037040000", @ANYRES32=0x0, @ANYBLOB="000002000000000008002c00ff0f0000"], 0x28}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000e, 0x810, 0xffffffffffffffff, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r12}, 0x18) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x0, 0xf}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m2.525240092s ago: executing program 4 (id=2755): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) readv(r1, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x80000000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34020000", @ANYRES16=r5, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES64=r6, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x57}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xb, 0x40000, 0x40000}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0) listen(r7, 0x1000) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 2m2.52460011s ago: executing program 0 (id=2756): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) accept$netrom(r0, 0x0, &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r8 = socket$rds(0x15, 0x5, 0x0) connect$rds(r8, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) r9 = gettid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 2m2.29661139s ago: executing program 4 (id=2758): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r1 = socket(0x2a, 0x2, 0x0) sendto$isdn(r1, 0x0, 0xfffffeb3, 0x0, &(0x7f00000003c0)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 2m2.194899619s ago: executing program 2 (id=2760): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) vmsplice(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)="4475dfe379e804ac7fe833bf92aee117fa1c7d6d63adbbf724d9f30797e9eefe267e8576f2a4a71c0756cc05c9ba622ac805a4c60e89310e31bbd01a5b38389437c7d699616bd23137", 0x49}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="efba233897fede57c2ef0d80eab46f6439141d0d80f1827bdd39cf95bc42c14a65a785919ca0df4769cbde46e74dbeeb7e43a5889a19802d0401fd212b4b9fafd254d15651ea162a82a200e290776508fd0113e3cf20aff72b0dfe5371075d81b76ed3a1a646e53bea984da9e302b5710f4f3b06ffad504b5cb611638674aa6247b5ab635997792fcc6dcc829d514158cfb6aeaa6b752539c02dcb3a22fe3c4de93064fd32a1f9ef5a855975e0b7fcf865f9259b9eac29ce28782583e49504d0d39873ed2da492ee5aaa100056bd00d40713f2215f3749fac36d551d92425fe19d27a23a4ec810a446c0396fb44ba56a7fcd", 0xf2}], 0x3, 0x4) unshare(0x66000080) 2m2.148186375s ago: executing program 1 (id=2761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1000) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x0, 0x0, 0x4a, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) 2m2.117846806s ago: executing program 4 (id=2762): unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02dd81", "06c9b3000800"}, 0x38) sendto(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x46000040, 0x4000}, @generic={0x0, 0x2}]}}}}}}, 0x46) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x22, 0x601, 0x0, 0x25dfdbff, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048051}, 0x4c080) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x0) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m2.013337917s ago: executing program 1 (id=2763): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf253100000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local, 0x0}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0xeb, 0x3, "1068e579e15ef90963694eaf028bc67e4c3297536e7b7dc6cfa5fafed3f9413d4bd83a206d63403c65e27b5ea6e010ed4dc229158d3358ac26e96857ca82589e2696c9932218ad9535fb0800b008663f6fdb0375af1aea879532e767d41baa2960782fb3a4bd830a5957c101f734112bb224252423779aba7b3547196df40b053ffd3414851b8047b07be0cac2193e13ee4ccf2ddb502883a516a760053584a382663a48a20b8b4b463f4ac4907c80da6d3544f4b19a2bed6d04dfdf0fd9f573f05aec559485a8156a35f8a621ce2a77e9b07d0aa888e8041b3dfcb725eb95ca61f6c8c2a8d290"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000c0) 2m2.012589452s ago: executing program 0 (id=2764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x22}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 32) sendto$llc(r2, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) openat$cgroup_type(r3, &(0x7f0000000500), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180008000000ffff00000000080000009111c500000000009500000000000000051105277db941cd92ecee66d4450f0e551fad92afa7e3a04490713d0e3f1cf754b59daee5f0eae44d290045347349e1be98b926a95be6"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async, rerun: 32) r10 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 2m0.304595527s ago: executing program 1 (id=2766): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f00000001c0)=0x4, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) unshare(0x22020400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r3, 0x400454cd, 0x305) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1a02, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'macsec0\x00', 0x0}) 1m46.228191538s ago: executing program 32 (id=2760): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) vmsplice(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)="4475dfe379e804ac7fe833bf92aee117fa1c7d6d63adbbf724d9f30797e9eefe267e8576f2a4a71c0756cc05c9ba622ac805a4c60e89310e31bbd01a5b38389437c7d699616bd23137", 0x49}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="efba233897fede57c2ef0d80eab46f6439141d0d80f1827bdd39cf95bc42c14a65a785919ca0df4769cbde46e74dbeeb7e43a5889a19802d0401fd212b4b9fafd254d15651ea162a82a200e290776508fd0113e3cf20aff72b0dfe5371075d81b76ed3a1a646e53bea984da9e302b5710f4f3b06ffad504b5cb611638674aa6247b5ab635997792fcc6dcc829d514158cfb6aeaa6b752539c02dcb3a22fe3c4de93064fd32a1f9ef5a855975e0b7fcf865f9259b9eac29ce28782583e49504d0d39873ed2da492ee5aaa100056bd00d40713f2215f3749fac36d551d92425fe19d27a23a4ec810a446c0396fb44ba56a7fcd", 0xf2}], 0x3, 0x4) unshare(0x66000080) 1m44.609825599s ago: executing program 33 (id=2762): unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02dd81", "06c9b3000800"}, 0x38) sendto(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x46000040, 0x4000}, @generic={0x0, 0x2}]}}}}}}, 0x46) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x22, 0x601, 0x0, 0x25dfdbff, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048051}, 0x4c080) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x0) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m43.143096263s ago: executing program 34 (id=2764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x22}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 32) sendto$llc(r2, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) openat$cgroup_type(r3, &(0x7f0000000500), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180008000000ffff00000000080000009111c500000000009500000000000000051105277db941cd92ecee66d4450f0e551fad92afa7e3a04490713d0e3f1cf754b59daee5f0eae44d290045347349e1be98b926a95be6"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async, rerun: 32) r10 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 1m41.513720152s ago: executing program 35 (id=2766): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f00000001c0)=0x4, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) unshare(0x22020400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r3, 0x400454cd, 0x305) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1a02, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'macsec0\x00', 0x0}) 1m4.312558887s ago: executing program 3 (id=2777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3a, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffdfb, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 50.19670754s ago: executing program 3 (id=2778): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000280)=@can, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/241}, {&(0x7f0000000100)=""/35}, {&(0x7f0000000480)=""/87}, {&(0x7f0000000500)=""/59}, {&(0x7f0000001a00)=""/4096}, {&(0x7f0000000540)=""/248}, {&(0x7f0000000640)=""/249}, {&(0x7f0000000740)=""/123}], 0x0, &(0x7f0000000840)=""/176}, 0x6037}], 0x5, 0x1822b, 0x0) unshare(0x20000400) openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) unshare(0x10060f00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x2e, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) (async, rerun: 64) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) (async, rerun: 64) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) close(0x3) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="bbad8b030a000200bb"], 0x28}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r8, 0xd203e624a373ebbe, 0xfb, 0x9, 0x4, 0x24, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x7f, 0x9}}) 41.946201758s ago: executing program 3 (id=2779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000004080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600ffb05d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.574854626s ago: executing program 3 (id=2780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3}, @IFLA_LINKINFO={0xfffffffffffffed1, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0xffffffffffffffe4}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0xa, [@enum64={0xa, 0x5, 0x0, 0x13, 0x1, 0x1, [{0x10, 0x7fffffff, 0x6}, {0x1, 0xaaa, 0x37dd38b2}, {0xa, 0x80000001, 0x1}, {0x9, 0x800, 0x8000}, {0xf, 0x2, 0xfffffff9}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @enum={0xd, 0x7, 0x0, 0x6, 0x4, [{0x4, 0x3}, {0x4}, {0xe, 0x200}, {0x7, 0x4}, {0x3, 0x1000}, {0x9, 0x9}, {0x2}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e, 0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000300)=""/207, 0xca, 0xcf, 0x0, 0xfff}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x10000, 0x0}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x98, &(0x7f0000000580)=""/152, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x5, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x3, 0x5, 0xb, 0x7}, {0x4, 0x2, 0x6, 0xc}, {0x4, 0x1, 0x9, 0x6}]}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x5, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x3, 0x3, 0x5, 0x3, 0x50, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x9, &(0x7f0000000080)=""/9, 0x41000, 0x2, '\x00', r1, @fallback=0x13, r2, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x40, 0x7fff}, 0x10, r3, r4, 0x4, &(0x7f0000000800)=[r5, 0x1, 0xffffffffffffffff, r6, r9], &(0x7f0000000840)=[{0x5, 0x3, 0x1, 0x1}, {0x5, 0x1, 0x6, 0x9}, {0x2, 0x3, 0x6, 0x889606ab78b4d174}, {0x4, 0x4, 0xa, 0x1}], 0x10, 0xffff}, 0x94) 24.384160473s ago: executing program 3 (id=2781): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x23, 0xa, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0xff, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r0, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r8}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xc, &(0x7f0000000640)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf018}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r6, 0x781, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x200040c0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r10}, 0x38) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r11, &(0x7f0000000a00)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x22, @mcast2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@tclass={{0x14, 0x29, 0x43, 0x2c2}}], 0x18}}], 0x1, 0x0) setsockopt$packet_int(r7, 0x107, 0x0, &(0x7f00000002c0)=0x400, 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000000c0)}], 0x2, &(0x7f00000018c0)=[{0xe8, 0x112, 0x200, "fe23d98a1688f4fc5d4ea961468b577fb590d3c52decdd587684fb1b931694dd296e6ee72d90b9f35f337e16292aab57829becf636781c6803d46a948d3e55f0f8605584ebd58fe0237ff3199c5734c4e9e25e876dbd3a19dd02c24f62edb7dd874079c7500ba3c2dec72b66a88abb822527da67e9b95d52cbd5c3ca373a1fb5f8f72b97945656e6377d2d5fef02ef1cea9556e4f63b1e248e4882a934284fcb71385fdd1c63f6c9c9da82eb208c1c21a8eda43e77ee5117155200805d4181b3336a66194ad173f8ae6214a06b8905626b1981a2"}, {0x60, 0x6, 0x7fffffff, "4d55160aa78101f5e6b950c13723b502c566f07360ff1a4f0701917d6458dff8e43c3a9c2161f9590138638d98b3d84bcd146b8fe0f9985f3742c8d32945afc7b2c07d280217319236af07806d1d27"}, {0xf8, 0x109, 0x1, "6dd0597ccb5e54d54c4e45adef49940fbcc088b133923cd8ae336e1f3698e589252b9f05dbe60bef8ecb29b8209bbcd9efbb1798b427b9c180a26aa6b18c7989d9a722c1cb4fd90ca206d47c9ac464ae8ea8247c23172f8e2fe85d234fd5f67bd9c95b4a46d0937faa9651615fd5a52fa97ccd9df2260c72f1e6e32618dd2906df7a21d2d1ab49073bbe1eb15f51e799613889a1fd24944c7ec4bec5eeaba834ee4ea4f3c245b5944e099fece744920e212c59aa1cf86a04257c9a2a019836d10edf946961893c542e2fa63dbba0c0986bce79959690ad7335587c6d4d4544594dd106bdfb23d8ad"}, {0xa8, 0x104, 0x3ff, "30322cffca953c1af5615dfcbcb015cf17ad74b8f7dfe932ee80a633a366243500c787529941db9ed108905fb23949f71333f6333386722b5c5a9c9bc253f91595781140d50a4e2d2d9250273068d0fa5fa4ecac08efd04c6c22d275f8993c4d9902c73919223662d214108fe4b4d333b22ff9766ef265b37f0bb976dd32030f9b79b2a8f1f9dfbb54cfad4cebb836efcadbbcf131"}, {0xb8, 0x10a, 0x5, "d80fb11cbd5d2c70c4c1b31c8c781658151cd4e326614e3da6e2df304beb32ffda0a0bd3da91ca6081fae869a3640399fd20cb611053f9ff2185833229f86da6958ed3b61298eb2cbb1649c317d94ea24de045f4a76eed3d8fc25e8ff12e1be51ebc41435087e3c84944ca5aac184c067d962619e5508ccd5fcff726c4ed2f1014ea66b4764975434211e764e26d3f88862f59c8bfb627d98e761cd6a5cb4119428f736a38fb06b0"}, {0xc0, 0x110, 0xfff, "c14755776c558229b5b9e874fc90818d5a7d616b9cabc1f81ec33e472c962d1183f9a1d46af40eecbec353d30acc98b81fa10ef841998afa484206ea23aa5752a163089193e20d902eef565ee87c436495985407eefb67607477b61f439c7360aa6581a993dbf0424c74d539a8ea134fbcf0bd988477765edae13d945fb0b03a7c575f6852a7065b5a89472ab2db4ad1418a74ccd1ccce8a6ee8171f05e6756d184a218d29dfab9641db981490f9"}, {0x108, 0x3a, 0x9, "ddfacd07cd624e50657de18de441aece8029b2760815cdf727c5e4f52ee90b4c55f3936dccb5aafe1f45c30adad2be5a9a3beaacd5cb73b31691bce4d5b24ec94f3eb9efe8968186aab96ad02bc532264fbb148087437426795684706dcdb37fe565ceb88ca90439843967935a1c52f49c85e87347f31d7fabc5d540a572856e9ef80d4ae73dc2cbeca6133a559c3626bc9c3b1c7f9cbc9828acb136be263334c096bf50be8d68f06c8569a07411cddc590db403b84663ac7acd9ce47ba7ec7f26004709ecd7e489bdaf5670188f31ed3b0de44d2fd863582c75361abc2155534713c037f48d983b0387ac2059259d3f6c1190"}, {0x60, 0x101, 0x5, "ddfc370e5734ad3065dcafdb3033b9c4df04c3df10faa812d93529e130dd6287cdab513283c3b097d377dd4a21c5067ab21b3544c39a28fb9f6bbd960b717e202495d634e8de388d1bc01b2103ce4b"}, {0x20, 0x110, 0x98b, "8d81b414f51fde3e9bc29217ad"}], 0x5e8}, 0x840) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e210005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d36c0000007f00000100000000000000000000000000000000000000009201000000000000060000000000000000100000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000048abe491dc9843b4999f98c9b7303a3d00000000000000000000000000000000000000000000000008001f0002000000231d8c4150e8eda90bbce03f1ac36ecef1054c3509eca09854e09ae658e7a61ca106d98a94ab4379d351d58490032bcca7970aa289793042f708f8872b05bb3507cafcc9b283439d71a8b338f12dd3578f9a1cc08612b72331d48ca217ae984bee"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 16.448257549s ago: executing program 3 (id=2782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000"], 0x50) unshare(0x22020400) unshare(0x2c060000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, &(0x7f0000000400)) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 36 (id=2782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000"], 0x50) unshare(0x22020400) unshare(0x2c060000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, &(0x7f0000000400)) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): ss `syz.4.1096'. [ 355.505092][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 355.544696][T10747] bond7: (slave veth3): Enslaving as an active interface with a down link [ 355.740264][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 355.818369][T10766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.831483][T10770] bond3: (slave batadv1): Opening slave failed [ 355.880213][T10769] lo speed is unknown, defaulting to 1000 [ 355.945281][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'. [ 355.972835][T10778] sctp: [Deprecated]: syz.2.1103 (pid 10778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.972835][T10778] Use struct sctp_sack_info instead [ 356.112589][T10786] mac80211_hwsim hwsim7 ªªªªª;: renamed from wlan0 [ 356.223625][T10778] lo speed is unknown, defaulting to 1000 [ 356.438350][T10793] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 356.446711][T10793] netlink: 'syz.4.1107': attribute type 2 has an invalid length. [ 356.455516][T10793] netlink: 'syz.4.1107': attribute type 3 has an invalid length. [ 357.186605][T10812] nft_compat: unsupported protocol 0 [ 357.316853][T10820] lo speed is unknown, defaulting to 1000 [ 357.932977][ T30] audit: type=1800 audit(1759452371.775:4): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1121" name="memory.events" dev="tmpfs" ino=1055 res=0 errno=0 [ 358.080181][T10841] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 359.025669][T10874] lo speed is unknown, defaulting to 1000 [ 359.510856][T10890] __nla_validate_parse: 7 callbacks suppressed [ 359.510877][T10890] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1134'. [ 359.552085][T10882] lo speed is unknown, defaulting to 1000 [ 359.840344][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 359.861832][ T5939] IPVS: starting estimator thread 0... [ 359.869564][T10905] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1140'. [ 359.884328][T10907] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1140'. [ 359.929243][T10903] bond1: entered promiscuous mode [ 359.935462][T10903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.997950][T10906] IPVS: using max 25 ests per chain, 60000 per kthread [ 360.168616][T10903] bond1 (unregistering): Released all slaves [ 360.586413][T10919] lo speed is unknown, defaulting to 1000 [ 361.050645][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 361.855840][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1154'. [ 362.033240][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 362.467267][T10989] !: renamed from dummy0 [ 362.582034][T11001] Unsupported ieee802154 address type: 0 [ 362.622015][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 362.712298][T11003] bond1: (slave bridge0): Releasing active interface [ 362.958932][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1170'. [ 362.994087][T11026] bond0: option miimon: invalid value (18446744072937799680) [ 363.012013][T11026] bond0: option miimon: allowed values 0 - 2147483647 [ 363.056153][T11032] team_slave_0: left promiscuous mode [ 363.099244][T11032] team_slave_1: left promiscuous mode [ 363.170391][T11032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 364.007526][T11084] syzkaller1: entered promiscuous mode [ 364.023963][T11084] syzkaller1: entered allmulticast mode [ 364.522227][T11112] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1186'. [ 364.562724][T11121] netlink: 'syz.4.1184': attribute type 16 has an invalid length. [ 364.898115][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 364.927428][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 364.977167][T11139] bridge0: entered promiscuous mode [ 364.993057][T11139] macsec1: entered allmulticast mode [ 365.013020][T11139] bridge0: entered allmulticast mode [ 365.019674][T11139] bridge0: port 3(macsec1) entered blocking state [ 365.033988][T11139] bridge0: port 3(macsec1) entered disabled state [ 365.060876][T11139] bridge0: left allmulticast mode [ 365.066320][T11139] bridge0: left promiscuous mode [ 365.885266][T11183] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 365.910061][T11183] netlink: 'syz.2.1202': attribute type 12 has an invalid length. [ 366.048390][T11199] netlink: 'syz.2.1206': attribute type 21 has an invalid length. [ 366.083810][T11199] netlink: 'syz.2.1206': attribute type 22 has an invalid length. [ 366.096798][T11199] netlink: 'syz.2.1206': attribute type 23 has an invalid length. [ 366.105993][T11199] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1206'. [ 366.117305][T11198] netlink: 'syz.2.1206': attribute type 21 has an invalid length. [ 366.126270][T11198] netlink: 'syz.2.1206': attribute type 22 has an invalid length. [ 366.134399][T11198] netlink: 'syz.2.1206': attribute type 23 has an invalid length. [ 366.142307][T11198] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1206'. [ 366.276220][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1208'. [ 366.921049][T11231] netlink: 14679 bytes leftover after parsing attributes in process `syz.1.1214'. [ 367.206814][T11236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1215'. [ 367.264778][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 367.322970][T11238] RDS: rds_bind could not find a transport for 100:806:ffff:ffff:ffff::, load rds_tcp or rds_rdma? [ 367.878345][T11237] veth1_macvtap: left promiscuous mode [ 368.131491][T11253] IPv6: NLM_F_REPLACE set, but no existing node found! [ 368.286256][T11264] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 368.304348][T11264] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1223'. [ 368.429744][T11271] lo speed is unknown, defaulting to 1000 [ 368.457144][T11275] veth1_to_bond: entered allmulticast mode [ 368.476673][T11275] veth1_to_bond: entered promiscuous mode [ 368.538834][T11273] veth1_to_bond: left promiscuous mode [ 368.554725][T11273] veth1_to_bond: left allmulticast mode [ 368.745985][ T8288] lo speed is unknown, defaulting to 1000 [ 368.752044][ T8288] syz0: Port: 1 Link DOWN [ 368.937737][T11278] lo speed is unknown, defaulting to 1000 [ 370.173345][T11316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.180338][T11316] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 370.242192][T11316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.252010][T11316] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 370.326850][T11316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 370.332790][T11316] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 370.373067][T11316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 370.404403][T11316] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 370.671090][T11347] lo speed is unknown, defaulting to 1000 [ 370.792320][T11354] validate_nla: 2 callbacks suppressed [ 370.792338][T11354] netlink: 'syz.3.1248': attribute type 15 has an invalid length. [ 371.248624][T11370] netlink: 'syz.1.1253': attribute type 4 has an invalid length. [ 371.347338][T11375] __nla_validate_parse: 5 callbacks suppressed [ 371.347358][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1255'. [ 371.441571][T11376] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 371.457176][T11376] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 371.521488][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 371.755250][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1258'. [ 371.766250][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 371.775240][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 371.844260][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 371.917522][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 372.053552][ T7889] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.083483][ T7889] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.210798][ T7889] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.257875][ T7889] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.327084][T11417] tipc: Enabling of bearer rejected, failed to enable media [ 372.346866][T11416] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 372.364148][T11406] lo speed is unknown, defaulting to 1000 [ 372.605866][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 372.636351][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 372.689493][T11431] netlink: 'syz.0.1268': attribute type 14 has an invalid length. [ 372.732491][T11431] netlink: 'syz.0.1268': attribute type 11 has an invalid length. [ 372.858424][T11444] tun0: tun_chr_ioctl cmd 1074025675 [ 372.887418][T11444] tun0: persist enabled [ 372.904147][T11444] tun0: tun_chr_ioctl cmd 1074025675 [ 372.907968][T11445] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 372.930935][T11444] tun0: persist enabled [ 372.954808][T11444] tun0: tun_chr_ioctl cmd 1074025675 [ 372.960276][T11444] tun0: persist enabled [ 372.978228][T11445] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 373.026526][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 373.331682][T11434] lo speed is unknown, defaulting to 1000 [ 373.647328][T11470] netlink: 'syz.2.1276': attribute type 12 has an invalid length. [ 373.860348][T11474] veth1_to_team: entered promiscuous mode [ 373.876219][T11474] bond0: entered promiscuous mode [ 373.881289][T11474] bond_slave_0: entered promiscuous mode [ 373.914083][T11474] bond_slave_1: entered promiscuous mode [ 373.921422][T11474] hsr0: entered allmulticast mode [ 373.926794][T11474] veth1_to_team: entered allmulticast mode [ 373.935065][T11474] bond0: entered allmulticast mode [ 373.940387][T11474] bond_slave_0: entered allmulticast mode [ 373.947716][T11474] bond_slave_1: entered allmulticast mode [ 374.364946][T11492] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 374.780190][T11514] pim6reg1: entered promiscuous mode [ 374.801287][T11514] pim6reg1: entered allmulticast mode [ 375.151741][T11522] veth0_virt_wifi: renamed from veth1_vlan [ 375.230482][T11529] lo speed is unknown, defaulting to 1000 [ 375.332593][T11540] netlink: 'syz.0.1297': attribute type 5 has an invalid length. [ 375.492690][T11540] geneve4: entered promiscuous mode [ 375.509556][T11540] geneve4: entered allmulticast mode [ 375.525455][T11535] lo speed is unknown, defaulting to 1000 [ 375.530591][T10346] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 375.540308][T10346] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 375.601201][T10346] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 375.618544][T10346] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 375.997001][T11566] macvlan4: entered promiscuous mode [ 376.033028][T11566] syz_tun: entered promiscuous mode [ 376.051249][T11566] team0: Port device macvlan4 added [ 376.490649][T11590] lo speed is unknown, defaulting to 1000 [ 376.696042][T11610] __nla_validate_parse: 148 callbacks suppressed [ 376.696061][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 377.410350][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.425504][T11615] netlink: 'syz.4.1314': attribute type 10 has an invalid length. [ 377.449845][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.505871][T11615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.577369][T11615] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 377.627147][T11630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1320'. [ 377.707864][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1321'. [ 377.894836][T11644] batadv2: entered promiscuous mode [ 377.958422][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 377.969988][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 378.041976][T11646] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 378.043926][T11645] delete_channel: no stack [ 378.154389][T11656] dvmrp8: entered allmulticast mode [ 378.186835][T11656] lo speed is unknown, defaulting to 1000 [ 378.223609][T11659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1327'. [ 378.274576][T11665] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1329'. [ 379.058270][T11698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.198790][T11681] lo speed is unknown, defaulting to 1000 [ 379.801709][T11711] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 379.809768][T11711] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 380.016425][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'. [ 380.016434][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'. [ 380.784789][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'. [ 382.690878][T11790] __nla_validate_parse: 2 callbacks suppressed [ 382.690898][T11790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 382.751490][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1359'. [ 382.788328][T11798] netlink: 'syz.3.1355': attribute type 13 has an invalid length. [ 382.916837][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.924286][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.148029][T11798] veth1_vlan: left allmulticast mode [ 383.567113][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 383.588737][T11824] netlink: 'syz.0.1365': attribute type 83 has an invalid length. [ 383.693435][T11821] lo speed is unknown, defaulting to 1000 [ 383.869764][T11833] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 383.901551][T11833] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1368'. [ 383.924233][T11831] mac80211_hwsim hwsim4 wlan1 (unregistering): left promiscuous mode [ 383.930963][T11833] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 383.941069][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 384.025189][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1367'. [ 384.084427][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1367'. [ 384.278427][T11850] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.350306][T11856] macvlan2: entered promiscuous mode [ 384.384615][T11856] macvlan2: entered allmulticast mode [ 384.391557][T11856] bond7: entered promiscuous mode [ 384.399443][T11856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.606805][T11877] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1375'. [ 384.712909][T11856] bond7: left promiscuous mode [ 384.725652][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 384.790015][T11863] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 384.840686][T11862] lo speed is unknown, defaulting to 1000 [ 385.005075][T11885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.022654][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 385.585289][T11904] dvmrp1: entered allmulticast mode [ 385.668334][T11911] dvmrp1: left allmulticast mode [ 385.685319][T11911] dvmrp8: left allmulticast mode [ 385.846329][T11906] lo speed is unknown, defaulting to 1000 [ 385.880389][T11908] netlink: 'syz.2.1387': attribute type 16 has an invalid length. [ 385.944334][T11908] netlink: 'syz.2.1387': attribute type 17 has an invalid length. [ 385.992992][T11908] netlink: 'syz.2.1387': attribute type 27 has an invalid length. [ 386.220510][T11924] lo speed is unknown, defaulting to 1000 [ 386.248979][T11910] lo speed is unknown, defaulting to 1000 [ 386.255850][T11910] lo speed is unknown, defaulting to 1000 [ 386.277490][T11910] lo speed is unknown, defaulting to 1000 [ 386.553346][T11945] netlink: 'syz.2.1397': attribute type 32 has an invalid length. [ 386.712070][T11910] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 386.792121][T11910] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 387.113850][T11910] lo speed is unknown, defaulting to 1000 [ 387.180834][T11910] lo speed is unknown, defaulting to 1000 [ 387.243369][T11910] lo speed is unknown, defaulting to 1000 [ 387.290852][T11966] netlink: 'syz.2.1400': attribute type 5 has an invalid length. [ 387.296701][T11910] lo speed is unknown, defaulting to 1000 [ 387.316186][T11910] lo speed is unknown, defaulting to 1000 [ 387.405540][T11910] lo speed is unknown, defaulting to 1000 [ 387.427841][T11910] lo speed is unknown, defaulting to 1000 [ 387.442690][T11971] netlink: 'syz.3.1402': attribute type 58 has an invalid length. [ 387.452059][T11969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.615754][T11976] tipc: Enabled bearer , priority 0 [ 387.653879][T11976] syzkaller0: entered promiscuous mode [ 387.659397][T11976] syzkaller0: entered allmulticast mode [ 387.677985][T11975] tipc: Resetting bearer [ 387.721233][T11975] tipc: Disabling bearer [ 387.728794][T11980] __nla_validate_parse: 6 callbacks suppressed [ 387.728812][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 387.827463][T11978] lo speed is unknown, defaulting to 1000 [ 388.090163][T11989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'. [ 388.099476][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1409'. [ 388.193434][T11987] macvlan0: entered promiscuous mode [ 388.201243][T11987] batadv0: entered promiscuous mode [ 388.207778][T11987] debugfs: 'hsr0' already exists in 'hsr' [ 388.213611][T11987] Cannot create hsr debugfs directory [ 388.219210][T11987] hsr0: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 388.229951][T11987] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 388.240243][T11987] hsr0: entered allmulticast mode [ 388.245419][T11987] batadv0: entered allmulticast mode [ 388.267458][T11987] macvlan0: left promiscuous mode [ 388.277708][T11987] batadv0: left promiscuous mode [ 388.845696][T12000] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 388.860446][T12000] bond4 (unregistering): Released all slaves [ 389.021660][T12005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1413'. [ 389.133046][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1414'. [ 389.671760][T12024] tipc: Enabled bearer , priority 0 [ 389.708926][T12032] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 389.766821][T12032] bond2: entered promiscuous mode [ 389.776190][T12032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.793755][T12026] lo speed is unknown, defaulting to 1000 [ 389.819063][T12039] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 389.866678][T12041] bond2: (slave bridge4): making interface the new active one [ 389.874663][T12041] bridge4: entered promiscuous mode [ 389.881300][T12041] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 389.892031][T12029] tipc: Resetting bearer [ 389.898863][T12036] tipc: Enabling of bearer rejected, already enabled [ 390.038156][T12032] macsec1: entered promiscuous mode [ 390.043563][T12032] team0: entered promiscuous mode [ 390.048977][T12032] macsec1: entered allmulticast mode [ 390.055367][T12032] team0: entered allmulticast mode [ 390.061907][T12032] team0: Device macsec1 is already an upper device of the team interface [ 390.072499][T12032] team0: left allmulticast mode [ 390.077758][T12032] team0: left promiscuous mode [ 390.130669][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'. [ 390.221185][T12052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1426'. [ 390.303134][T12050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1424'. [ 390.359595][T12050] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1424'. [ 390.412479][T12056] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1427'. [ 390.520735][T12056] tipc: Failed to remove unknown binding: 66,1,1/0:3424819625/3424819627 [ 390.551834][T12056] tipc: Failed to remove unknown binding: 66,1,1/0:3424819625/3424819627 [ 390.975693][T12087] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 391.247961][T12098] bond3: entered promiscuous mode [ 391.253598][T12098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.345957][T12101] xt_socket: unknown flags 0x50 [ 391.906492][T12142] openvswitch: netlink: Flow actions attr not present in new flow. [ 391.970820][T12140] lo speed is unknown, defaulting to 1000 [ 392.376104][T12164] tipc: Enabling of bearer rejected, failed to enable media [ 392.401417][T12164] syzkaller1: entered promiscuous mode [ 392.413854][T12164] syzkaller1: entered allmulticast mode [ 393.075470][T12217] __nla_validate_parse: 22 callbacks suppressed [ 393.075488][T12217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1475'. [ 393.102661][T12217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1475'. [ 393.246312][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 393.251993][T12229] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1478'. [ 393.304862][T12231] bond3: option mode: invalid value (192) [ 393.314135][T12231] bond3 (unregistering): Released all slaves [ 393.335051][T12238] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 393.343040][T12238] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1481'. [ 393.354324][T12236] tipc: Enabling of bearer rejected, failed to enable media [ 393.364285][T12236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1480'. [ 393.386216][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 393.465836][T12240] nbd: must specify an index to disconnect [ 393.524753][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1483'. [ 393.525100][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1482'. [ 393.552548][T12245] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1482'. [ 393.566283][ T9079] bond0: (slave wlan1): link status definitely down, disabling slave [ 393.617751][T12243] vlan2: entered promiscuous mode [ 393.622823][T12243] macvtap0: entered promiscuous mode [ 393.642840][T12248] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 393.672566][T12248] team0: Device ipvlan1 failed to enter team mode [ 393.679842][T12248] team0: Device ipvlan1 failed to enter team mode [ 393.688311][T12248] 8021q: VLANs not supported on lo [ 393.940815][T12271] netlink: 'syz.0.1493': attribute type 3 has an invalid length. [ 393.961120][T12272] netlink: 'syz.4.1494': attribute type 21 has an invalid length. [ 393.973049][T12272] netlink: 'syz.4.1494': attribute type 21 has an invalid length. [ 394.145696][T12282] syzkaller0: entered promiscuous mode [ 394.151212][T12282] syzkaller0: entered allmulticast mode [ 394.166692][T12283] bridge0: entered promiscuous mode [ 394.250840][T12283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.709806][T12306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.730440][T12280] bridge0: left promiscuous mode [ 395.837545][T12311] lo speed is unknown, defaulting to 1000 [ 396.161323][T12348] netlink: 'syz.0.1510': attribute type 14 has an invalid length. [ 396.248590][T12348] lo speed is unknown, defaulting to 1000 [ 397.064015][T12386] netlink: 'syz.4.1522': attribute type 5 has an invalid length. [ 397.084723][T12386] netlink: 'syz.4.1522': attribute type 8 has an invalid length. [ 397.120217][T12386] geneve3: entered promiscuous mode [ 397.133919][T12386] geneve3: entered allmulticast mode [ 397.207257][ T7889] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 397.223389][ T7889] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 397.237305][ T7889] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 397.251529][ T7889] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 397.443440][T12407] netlink: 'syz.1.1526': attribute type 29 has an invalid length. [ 397.467504][T12407] netlink: 'syz.1.1526': attribute type 29 has an invalid length. [ 398.286671][T12472] netlink: 'syz.2.1545': attribute type 3 has an invalid length. [ 398.302250][T12472] __nla_validate_parse: 31 callbacks suppressed [ 398.302684][T12472] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1545'. [ 398.386652][T12479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1547'. [ 398.474488][T12480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1547'. [ 398.818752][T12502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.890135][T12501] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 398.937486][T12501] bond0: (slave gre0): Error -95 calling set_mac_address [ 398.938688][T12503] netlink: 'syz.4.1549': attribute type 39 has an invalid length. [ 399.421896][T12513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1553'. [ 399.431279][T12513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1553'. [ 399.587415][T12520] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1555'. [ 400.019396][T12530] syz_tun: left promiscuous mode [ 400.047404][T12530] bridge0: left promiscuous mode [ 400.072653][T12530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.099060][T12530] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.125662][T12530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.398805][T12543] netlink: 'syz.2.1559': attribute type 16 has an invalid length. [ 400.408303][T12543] netlink: 'syz.2.1559': attribute type 17 has an invalid length. [ 400.574812][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.623065][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.687112][T12543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.779316][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 400.813856][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 400.842321][T12556] ip6tnl3: entered promiscuous mode [ 400.848893][T12556] ip6tnl3: entered allmulticast mode [ 402.196106][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 402.205993][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 402.378847][T12589] syzkaller1: entered promiscuous mode [ 402.395539][T12589] syzkaller1: entered allmulticast mode [ 403.600922][T12635] openvswitch: netlink: Message has 4 unknown bytes. [ 403.626260][T12634] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.648623][T12634] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.663862][T12634] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 403.800062][T12634] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.825064][T12634] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.839289][T12634] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 403.855202][T12642] __nla_validate_parse: 3 callbacks suppressed [ 403.855220][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 403.874830][T12642] netlink: 'syz.3.1584': attribute type 5 has an invalid length. [ 403.886125][T12642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'. [ 403.908530][T12634] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.925190][T12634] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.938295][T12634] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 403.967647][T12642] geneve3: entered promiscuous mode [ 403.979094][T12642] geneve3: entered allmulticast mode [ 404.015986][T12634] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.034436][T12634] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.063844][T12634] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 404.274340][ T7889] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.282561][ T7889] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 404.306683][ T7889] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.350576][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 404.362605][T10346] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.372254][T10346] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 404.380805][T10346] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.389521][T10346] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.397929][T10346] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 404.406135][T10346] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.545581][T10346] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.564004][T10346] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 404.573376][T10346] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 405.092488][T12679] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 405.511690][T12703] bond10: option arp_interval: invalid value (18446744073709551615) [ 405.521676][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1605'. [ 405.534301][T12703] bond10: option arp_interval: allowed values 0 - 2147483647 [ 405.556770][T12703] bond10 (unregistering): Released all slaves [ 405.767048][T12726] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1605'. [ 406.180586][T12741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1609'. [ 406.197117][T12741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1609'. [ 406.201553][T12744] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 406.214605][T12744] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1611'. [ 406.269090][T12744] team0: entered promiscuous mode [ 406.285862][T12744] bridge0: port 1(team0) entered blocking state [ 406.294505][T12744] bridge0: port 1(team0) entered disabled state [ 406.315312][T12744] team0: entered allmulticast mode [ 406.360476][T12750] tipc: Enabling of bearer rejected, already enabled [ 406.531406][T12756] tipc: Enabled bearer , priority 0 [ 406.539444][T12756] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 406.571951][T12756] tipc: Disabling bearer [ 406.591940][T12760] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 406.880886][T12774] Can't find ip_set type bitmap:ip,mac [ 407.231661][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'. [ 407.450762][T12801] netlink: 'syz.1.1624': attribute type 1 has an invalid length. [ 407.756617][T12816] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 407.907589][T12816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.725033][T12859] syzkaller1: entered promiscuous mode [ 408.730667][T12859] syzkaller1: entered allmulticast mode [ 408.742855][T12859] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 408.881911][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 408.955884][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 408.980431][T12859] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 408.991274][T10337] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 409.007913][T12877] netlink: 'syz.3.1638': attribute type 10 has an invalid length. [ 409.014321][T12866] 8021q: adding VLAN 0 to HW filter on device bond9 [ 409.024885][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 409.137044][T12871] bond9 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 409.146733][T12871] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 409.158148][T12871] bond9 (unregistering): Released all slaves [ 409.353589][T12885] tipc: Enabling of bearer rejected, already enabled [ 409.390017][T12885] tipc: Resetting bearer [ 409.412986][T12891] netlink: 'syz.2.1644': attribute type 2 has an invalid length. [ 409.420932][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 409.454997][T12891] netlink: 'syz.2.1644': attribute type 2 has an invalid length. [ 409.466036][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 409.690553][T12905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.864456][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 409.873581][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 409.884421][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 409.893398][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 409.925150][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'. [ 410.376312][T12940] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 411.021742][T12976] bridge0: entered allmulticast mode [ 411.714518][ T5182] Bluetooth: hci0: command tx timeout [ 412.191252][T13034] netlink: 'syz.2.1679': attribute type 12 has an invalid length. [ 412.302557][T13039] netlink: 'syz.2.1681': attribute type 4 has an invalid length. [ 412.610171][T13048] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 412.616716][T13048] syzkaller1: linktype set to 519 [ 413.030301][T13066] netlink: 'syz.4.1689': attribute type 3 has an invalid length. [ 413.040965][T13066] netlink: 'syz.4.1689': attribute type 1 has an invalid length. [ 413.049109][T13066] NCSI netlink: No device for ifindex 0 [ 413.258099][T13078] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 413.326431][T13075] tipc: Enabling of bearer rejected, already enabled [ 413.562790][ T9071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 413.576133][ T9071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 413.703760][ T9079] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 413.711943][ T9079] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 413.867742][T13104] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 413.977551][T13111] __nla_validate_parse: 17 callbacks suppressed [ 413.977573][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 414.497106][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1706'. [ 414.640718][T13135] bond0: entered promiscuous mode [ 414.655555][T13135] bond_slave_0: entered promiscuous mode [ 414.661553][T13135] bond_slave_1: entered promiscuous mode [ 414.676854][T13135] bond0: left promiscuous mode [ 414.681765][T13135] bond_slave_0: left promiscuous mode [ 414.719815][T13135] bond_slave_1: left promiscuous mode [ 414.863618][T13142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1707'. [ 415.025977][T13148] tipc: Enabled bearer , priority 0 [ 415.033956][T13148] syzkaller0: entered promiscuous mode [ 415.039501][T13148] syzkaller0: entered allmulticast mode [ 415.078758][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 415.100797][T13151] netlink: 'syz.0.1708': attribute type 5 has an invalid length. [ 415.118899][T13151] netlink: 'syz.0.1708': attribute type 8 has an invalid length. [ 415.138943][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 415.193279][T13148] tipc: Resetting bearer [ 415.245339][T13148] tipc: Disabling bearer [ 415.309086][T13158] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 415.382354][T13151] geneve5: entered promiscuous mode [ 415.387970][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 415.414143][T13151] geneve5: entered allmulticast mode [ 415.435154][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 415.456432][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 415.485227][T13174] netlink: 'syz.4.1712': attribute type 13 has an invalid length. [ 415.493038][T13164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.516706][T13174] netlink: 'syz.4.1712': attribute type 17 has an invalid length. [ 415.660430][T13179] netlink: 'syz.0.1715': attribute type 10 has an invalid length. [ 415.798964][T13181] netlink: 'syz.0.1715': attribute type 10 has an invalid length. [ 415.860903][T13174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.886107][T13179] team0: Port device 0! added [ 415.911566][T13182] bridge0: entered promiscuous mode [ 415.917184][T13182] vlan2: entered promiscuous mode [ 415.964361][T13181] team0: Port device 0! removed [ 415.973336][T13181] !: entered promiscuous mode [ 415.988980][T13181] !: entered allmulticast mode [ 415.996581][T13181] bond0: (slave 0!): Enslaving as an active interface with an up link [ 416.176219][T13200] bond0: Error: Cannot enslave bond to itself. [ 416.199925][T13196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1720'. [ 416.970961][T13233] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 417.027362][T13230] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1729'. [ 417.074349][T13236] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 417.545650][T13279] syz_tun: entered allmulticast mode [ 417.601676][T13284] dvmrp8: entered allmulticast mode [ 417.684175][T13284] syz_tun: left allmulticast mode [ 417.697743][T13284] dvmrp8: left allmulticast mode [ 417.704902][T13289] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 417.806591][T13289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.889971][T13293] bond4: (slave veth7): Enslaving as an active interface with a down link [ 418.465795][T13330] netlink: 'syz.0.1751': attribute type 282 has an invalid length. [ 418.516482][T13324] netlink: 'syz.1.1750': attribute type 15 has an invalid length. [ 419.079881][T13368] __nla_validate_parse: 4 callbacks suppressed [ 419.079900][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1762'. [ 419.380813][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 419.396907][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 419.408248][T13382] netlink: 'syz.1.1766': attribute type 14 has an invalid length. [ 419.465629][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 419.500977][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 419.693131][T13395] veth7: entered promiscuous mode [ 419.773101][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1772'. [ 419.869668][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'. [ 419.934639][T13406] team0: Port device vlan0 removed [ 420.188640][T13435] sch_tbf: burst 5 is lower than device veth1_macvtap mtu (1514) ! [ 420.252018][T13437] validate_nla: 1 callbacks suppressed [ 420.252037][T13437] netlink: 'syz.2.1777': attribute type 3 has an invalid length. [ 420.265750][T13437] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 420.276092][T13437] netlink: 'syz.2.1777': attribute type 3 has an invalid length. [ 420.291425][T13434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1778'. [ 420.295101][T13437] netlink: 191492 bytes leftover after parsing attributes in process `syz.2.1777'. [ 420.678008][T13458] bond10: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 420.693967][T13458] bond10 (unregistering): Released all slaves [ 420.811247][T13469] netlink: 'syz.3.1785': attribute type 1 has an invalid length. [ 420.833547][T13469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1785'. [ 421.337963][T13480] syzkaller1: entered allmulticast mode [ 421.748998][T13503] vlan0: entered promiscuous mode [ 421.754561][T13503] bond0: entered promiscuous mode [ 421.759712][T13503] bond_slave_0: entered promiscuous mode [ 421.765917][T13503] bond_slave_1: entered promiscuous mode [ 421.772043][T13503] vlan0: entered allmulticast mode [ 421.782719][T13503] bond0: entered allmulticast mode [ 421.787933][T13503] bond_slave_0: entered allmulticast mode [ 421.797025][T13503] bond_slave_1: entered allmulticast mode [ 421.967020][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.978424][T13521] netlink: 'syz.0.1800': attribute type 2 has an invalid length. [ 422.137074][T13531] Bluetooth: MGMT ver 1.23 [ 422.201509][T13525] veth9: entered promiscuous mode [ 422.475143][T13552] macsec1: entered promiscuous mode [ 422.480569][T13552] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 422.491617][T13552] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 422.551328][T13550] macsec1: entered promiscuous mode [ 422.556980][T13550] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 422.577974][T13550] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 423.353974][T13589] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 424.743459][T13625] __nla_validate_parse: 11 callbacks suppressed [ 424.743480][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 425.147973][T13653] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1827'. [ 425.169343][T13651] syzkaller0: entered promiscuous mode [ 425.177914][T13651] syzkaller0: entered allmulticast mode [ 425.208058][T13661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1830'. [ 425.217790][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1830'. [ 425.228187][T13661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1830'. [ 425.490960][T13670] netlink: 'syz.1.1832': attribute type 6 has an invalid length. [ 425.608197][T13670] netlink: 'syz.1.1832': attribute type 12 has an invalid length. [ 425.626332][T13670] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1832'. [ 425.911013][T13690] bond5: entered promiscuous mode [ 425.949374][T13690] bond5: entered allmulticast mode [ 425.964485][T13690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 425.993148][T13697] gre1: entered allmulticast mode [ 426.272210][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1839'. [ 426.375405][T13711] tipc: Enabling of bearer rejected, failed to enable media [ 426.429887][T13704] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1839'. [ 426.492123][T13719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 426.579768][T13704] team0: Mode "broadcas" not found [ 426.601642][T13722] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1843'. [ 426.757414][T13727] tipc: Enabling of bearer rejected, failed to enable media [ 427.150989][T13745] delete_channel: no stack [ 427.166835][T13745] delete_channel: no stack [ 427.268410][T13762] netlink: 'syz.0.1852': attribute type 11 has an invalid length. [ 427.723290][T13777] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 427.819368][T13777] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 427.928055][T13777] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 428.057195][T13777] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 428.292942][T13802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.509905][ T9071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 428.541456][ T9079] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 428.592358][ T9079] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 428.635897][ T9079] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 428.846556][T13832] netlink: 'syz.0.1867': attribute type 13 has an invalid length. [ 428.854956][T13832] netlink: 'syz.0.1867': attribute type 17 has an invalid length. [ 429.025616][T13839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.098639][T13827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.174712][T13846] sctp: [Deprecated]: syz.3.1869 (pid 13846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.174712][T13846] Use struct sctp_sack_info instead [ 429.256455][T13850] IPVS: stopping master sync thread 6743 ... [ 429.430624][T13832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.494784][T13831] infiniband syz0: set down [ 429.502781][T13831] infiniband syz0: added veth1_to_hsr [ 429.673086][T13831] RDS/IB: syz0: added [ 429.821301][T13869] __nla_validate_parse: 8 callbacks suppressed [ 429.821319][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1874'. [ 429.942750][T13870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1874'. [ 431.234907][T13921] 8021q: adding VLAN 0 to HW filter on device bond10 [ 431.270353][T13925] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 431.287688][T13925] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1888'. [ 431.381246][T13930] syzkaller0: entered promiscuous mode [ 431.387016][T13930] syzkaller0: entered allmulticast mode [ 432.237711][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 432.312105][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 432.397980][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 432.604431][T13947] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 432.687913][T13948] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 432.730668][T13951] syzkaller0: entered promiscuous mode [ 432.747399][T13951] syzkaller0: entered allmulticast mode [ 432.797791][T13957] netlink: 'syz.2.1898': attribute type 4 has an invalid length. [ 432.810441][T13957] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1898'. [ 432.847523][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 433.299388][T13864] infiniband syz2: set active [ 433.308650][ T1808] vxcan1 speed is unknown, defaulting to 1000 [ 433.327859][T13864] infiniband syz2: added vxcan1 [ 433.334512][T13864] syz2: rxe_create_cq: returned err = -12 [ 433.353948][T13864] infiniband syz2: Couldn't create ib_mad CQ [ 433.360120][T13864] infiniband syz2: Couldn't open port 1 [ 433.434852][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 433.446979][T13964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.447614][T13968] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 433.469711][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.486285][T13864] RDS/IB: syz2: added [ 433.491797][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 433.517349][T13968] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.547534][T13968] team0: entered promiscuous mode [ 433.552641][T13968] team_slave_0: entered promiscuous mode [ 433.566476][T13968] team_slave_1: entered promiscuous mode [ 433.572511][T13968] team0: entered allmulticast mode [ 433.579690][T13968] team_slave_0: entered allmulticast mode [ 433.586268][T13968] team_slave_1: entered allmulticast mode [ 433.594191][T13968] bond0: (slave team0): Enslaving as an active interface with an up link [ 433.789864][T13972] veth7: entered promiscuous mode [ 433.842401][T13974] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 433.884233][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 433.889821][T13980] netlink: 'syz.3.1904': attribute type 49 has an invalid length. [ 433.909127][T13980] netlink: 'syz.3.1904': attribute type 49 has an invalid length. [ 434.038274][T13985] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1906'. [ 434.097252][T13985] erspan0: entered promiscuous mode [ 434.320675][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 434.515756][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 434.726298][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 434.948878][T13864] vxcan1 speed is unknown, defaulting to 1000 [ 434.970428][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 435.114921][T14014] nbd: must specify at least one socket [ 435.175550][T14028] netlink: 'syz.4.1916': attribute type 10 has an invalid length. [ 435.194823][T14027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.270887][T14031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1920'. [ 435.285881][T14037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1919'. [ 435.290271][T14038] netlink: 'syz.1.1918': attribute type 4 has an invalid length. [ 435.296306][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'. [ 435.315348][T14031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1920'. [ 435.345164][T14035] raw_sendmsg: syz.0.1917 forgot to set AF_INET. Fix it! [ 435.391382][ T30] audit: type=1800 audit(1759452449.235:5): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1919" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2070 res=0 errno=0 [ 435.416411][T14046] netlink: 'syz.1.1921': attribute type 1 has an invalid length. [ 435.458326][T14046] bond9 (unregistering): Released all slaves [ 435.620976][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1923'. [ 435.700370][T14060] netlink: 'syz.3.1925': attribute type 1 has an invalid length. [ 435.718706][T14060] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1925'. [ 435.719858][T14062] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 435.737369][T14062] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.747063][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 435.924571][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'. [ 436.992026][T14100] team0 (unregistering): Port device team_slave_0 removed [ 437.004228][T14100] team0 (unregistering): Port device team_slave_1 removed [ 437.016145][T14100] team0 (unregistering): Port device macvlan4 removed [ 437.058060][T14101] validate_nla: 2 callbacks suppressed [ 437.058078][T14101] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 437.072517][T14101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.089134][T14099] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 437.097688][T14099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.272037][T14121] netlink: 'syz.1.1944': attribute type 3 has an invalid length. [ 437.923390][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1953'. [ 437.994258][T14159] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 438.129333][T14161] erspan0: entered promiscuous mode [ 438.137415][T14161] erspan0: left promiscuous mode [ 438.364786][T14147] vxcan1 speed is unknown, defaulting to 1000 [ 439.364557][T14148] vxcan1 speed is unknown, defaulting to 1000 [ 440.879221][T14274] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 440.887447][T14274] __nla_validate_parse: 7 callbacks suppressed [ 440.887464][T14274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1982'. [ 441.097148][T14278] netlink: 'syz.4.1984': attribute type 10 has an invalid length. [ 441.137194][T14278] team0: Port device 0! added [ 441.145628][T14278] netlink: 'syz.4.1984': attribute type 10 has an invalid length. [ 441.154889][T14278] team0: Failed to send port change of device 0! via netlink (err -105) [ 441.176021][T14278] team0: Failed to send options change via netlink (err -105) [ 441.184936][T14278] team0: Failed to send port change of device 0! via netlink (err -105) [ 441.204292][T14278] team0: Port device 0! removed [ 441.226735][T14278] bond0: (slave 0!): Enslaving as an active interface with an up link [ 441.343233][T14247] vxcan1 speed is unknown, defaulting to 1000 [ 441.351341][T14295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1989'. [ 441.364907][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1989'. [ 441.377772][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1989'. [ 441.387560][T14297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1989'. [ 442.252615][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 442.483194][T14291] vxcan1 speed is unknown, defaulting to 1000 [ 442.540542][T14327] bond5: option mode: unable to set because the bond device has slaves [ 442.726069][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 442.818061][T14333] bridge8: entered promiscuous mode [ 442.835834][T14333] bridge8: entered allmulticast mode [ 442.844664][T14329] block nbd2: shutting down sockets [ 442.870864][T14329] IPVS: length: 24 != 119185342488 [ 442.882002][T14329] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1998'. [ 442.908496][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 442.947956][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 443.027258][ T5862] vxcan1 speed is unknown, defaulting to 1000 [ 443.033378][ T5862] syz2: Port: 1 Link DOWN [ 443.049429][ T1808] IPVS: starting estimator thread 0... [ 443.143751][T14343] IPVS: using max 24 ests per chain, 57600 per kthread [ 443.714216][T14321] vxcan1 speed is unknown, defaulting to 1000 [ 444.854066][T14368] netlink: 'syz.2.2006': attribute type 11 has an invalid length. [ 444.946179][T14368] netlink: 'syz.2.2006': attribute type 11 has an invalid length. [ 444.954289][T10345] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.964775][T10339] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.973103][T10339] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.992661][T10339] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.735017][T14353] Set syz1 is full, maxelem 65536 reached [ 446.887293][T14381] tipc: Enabling of bearer rejected, already enabled [ 446.898128][T14381] __nla_validate_parse: 3 callbacks suppressed [ 446.898148][T14381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2009'. [ 446.913523][T14381] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2009'. [ 446.927097][T14381] veth1_to_bond: entered allmulticast mode [ 446.934382][T14381] veth1_to_bond: entered promiscuous mode [ 446.942720][T14380] veth1_to_bond: left promiscuous mode [ 446.948599][T14380] veth1_to_bond: left allmulticast mode [ 447.267089][T14395] netlink: 'syz.1.2012': attribute type 30 has an invalid length. [ 447.594234][T14411] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 447.803985][T14427] netlink: 'syz.1.2020': attribute type 33 has an invalid length. [ 447.861470][T14427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2020'. [ 448.416795][ T30] audit: type=1800 audit(1759452462.265:6): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2025" name="memory.events" dev="tmpfs" ino=2222 res=0 errno=0 [ 448.438133][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 448.449929][T14453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2025'. [ 448.476532][T14453] gretap1: entered promiscuous mode [ 448.742467][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 448.952084][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2031'. [ 449.009938][T14476] IPVS: Scheduler module ip_vs_sip not found [ 449.070220][T14476] IPVS: length: 141 != 8 [ 449.077450][T14485] veth0_to_bridge: entered promiscuous mode [ 450.154287][T14508] veth0_to_bridge: left promiscuous mode [ 450.188569][T14508] vlan0: left promiscuous mode [ 450.203453][T14508] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 450.233755][T14508] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 450.242112][T14508] sit1: left promiscuous mode [ 450.247373][T14508] veth5: left promiscuous mode [ 450.254263][T14508] geneve2: left promiscuous mode [ 450.259608][T14508] macvlan4: left promiscuous mode [ 450.266747][T14508] geneve3: left promiscuous mode [ 450.272214][T14508] geneve3: left allmulticast mode [ 450.310927][T14508] gre1: left allmulticast mode [ 450.357185][T14520] netlink: 'syz.2.2037': attribute type 6 has an invalid length. [ 450.357237][T14529] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 450.404102][ T7889] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 450.412414][ T7889] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 450.454134][ T7889] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 450.488792][ T7889] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 450.721420][T14557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2051'. [ 450.757222][T14557] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 450.820031][T14562] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2052'. [ 450.830343][T14562] 0ªX¹¦À: renamed from caif0 [ 450.839592][T14562] 0ªX¹¦À: entered allmulticast mode [ 450.845320][T14562] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 450.881325][T14562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2052'. [ 451.376415][T14601] netlink: 'syz.3.2063': attribute type 10 has an invalid length. [ 451.461811][T14605] netlink: 'syz.3.2063': attribute type 10 has an invalid length. [ 451.597095][T14617] netlink: 'syz.2.2064': attribute type 3 has an invalid length. [ 451.927988][T14632] netlink: 'syz.2.2068': attribute type 1 has an invalid length. [ 452.004978][T14636] __nla_validate_parse: 5 callbacks suppressed [ 452.004997][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 452.044365][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 452.212286][T14649] netlink: 'syz.2.2073': attribute type 6 has an invalid length. [ 452.259091][T14649] netlink: 'syz.2.2073': attribute type 12 has an invalid length. [ 452.267169][T14649] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2073'. [ 453.240888][T14701] netlink: 480 bytes leftover after parsing attributes in process `syz.4.2083'. [ 453.268283][T14701] netlink: del zone limit has 4 unknown bytes [ 454.000482][T14712] team_slave_0 (unregistering): left promiscuous mode [ 454.030173][T14712] team_slave_0 (unregistering): left allmulticast mode [ 454.151170][T14712] team0: Port device team_slave_0 removed [ 454.850618][T14723] 8021q: VLANs not supported on caif0 [ 455.774892][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2096'. [ 455.942322][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 455.971607][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 456.121355][T14748] tipc: Enabled bearer , priority 26 [ 456.219994][T14761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2100'. [ 456.352524][T14771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2102'. [ 456.362069][T14770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2102'. [ 456.371949][T14761] veth1_to_bond: entered allmulticast mode [ 456.484566][T14773] veth1_to_bond: left allmulticast mode [ 457.108024][T14805] __nla_validate_parse: 2 callbacks suppressed [ 457.108045][T14805] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2112'. [ 457.233814][ T8290] tipc: Node number set to 4198692956 [ 457.614547][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 458.329417][T14864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2129'. [ 458.635265][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 458.938837][T14890] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2135'. [ 459.106639][T14890] bridge_slave_1: left promiscuous mode [ 459.134102][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.155919][T14890] bridge_slave_0: left allmulticast mode [ 459.174973][T14890] bridge_slave_0: left promiscuous mode [ 459.180833][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.246691][T14901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2138'. [ 459.349797][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2138'. [ 459.409726][T14898] syzkaller1: entered promiscuous mode [ 459.423266][T14898] syzkaller1: entered allmulticast mode [ 460.152902][T14927] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2143'. [ 460.179175][T14927] netlink: zone id is out of range [ 460.187015][T14927] netlink: zone id is out of range [ 460.192152][T14927] netlink: get zone limit has 8 unknown bytes [ 460.210922][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2143'. [ 460.483969][T14935] ªªªªªª: renamed from wg2 (while UP) [ 460.910476][T14954] IPVS: length: 135 != 24 [ 461.221730][T14963] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 461.374491][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 461.739278][T14992] bridge9: port 1(veth5) entered blocking state [ 461.746140][T14992] bridge9: port 1(veth5) entered disabled state [ 461.755969][T14992] veth5: entered allmulticast mode [ 461.764128][T14992] veth5: entered promiscuous mode [ 461.790802][T14991] bridge9: port 2(veth7) entered blocking state [ 461.797869][T14991] bridge9: port 2(veth7) entered disabled state [ 461.805069][T14991] veth7: entered allmulticast mode [ 461.822836][T14991] veth7: entered promiscuous mode [ 461.850818][T14992] veth0_to_bond: left allmulticast mode [ 461.870157][T14992] bridge9: port 3(veth0_to_bond) entered blocking state [ 461.896131][T14992] bridge9: port 3(veth0_to_bond) entered disabled state [ 461.914344][T14992] veth0_to_bond: entered allmulticast mode [ 461.922583][T14992] veth0_to_bond: entered promiscuous mode [ 461.938704][T15004] gretap2: entered promiscuous mode [ 462.296121][T15024] __nla_validate_parse: 2 callbacks suppressed [ 462.296140][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 462.301121][T15028] netlink: 'syz.0.2167': attribute type 1 has an invalid length. [ 462.378260][T15028] 8021q: adding VLAN 0 to HW filter on device bond11 [ 462.402462][T15032] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2166'. [ 462.462205][T15036] sctp: [Deprecated]: syz.3.2168 (pid 15036) Use of int in max_burst socket option. [ 462.462205][T15036] Use struct sctp_assoc_value instead [ 462.506599][T15031] veth7: entered promiscuous mode [ 462.533295][T15031] bond11: (slave veth7): Enslaving as an active interface with an up link [ 462.992132][T15057] Unsupported ieee802154 address type: 0 [ 463.188389][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2174'. [ 463.244937][T15073] netlink: 'syz.3.2174': attribute type 11 has an invalid length. [ 463.261248][T15053] erspan0: entered promiscuous mode [ 463.763118][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2183'. [ 463.922949][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 464.279846][T15114] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2189'. [ 464.338682][T15114] tipc: Enabled bearer , priority 0 [ 464.376265][T15112] tipc: Resetting bearer [ 464.405377][T15111] tipc: Disabling bearer [ 464.478494][T15117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.535145][T15117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 464.619217][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2191'. [ 464.735831][T15117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.746663][T15117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 464.927033][T15117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.954320][T15117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.135601][T15117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.146380][T15117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.642133][T15132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2196'. [ 465.706445][ T9071] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 465.723875][ T9071] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 465.774614][ T7768] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 465.786595][ T7768] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 465.883942][ T9071] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 465.892063][ T9071] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 465.954329][ T7768] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 465.962454][ T7768] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.221641][T15152] bridge5: entered promiscuous mode [ 466.266924][T15152] bridge5: entered allmulticast mode [ 466.361525][T15156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 467.411276][T15196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2209'. [ 467.428720][T15196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.567919][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2209'. [ 468.276465][T15214] netlink: 'syz.1.2213': attribute type 12 has an invalid length. [ 468.456430][T15217] syzkaller0: entered promiscuous mode [ 468.475511][T15217] syzkaller0: entered allmulticast mode [ 468.643441][T15221] netlink: 'syz.4.2215': attribute type 16 has an invalid length. [ 468.658332][T15221] netlink: 'syz.4.2215': attribute type 17 has an invalid length. [ 468.692206][T15217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'. [ 468.825727][T15221] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.833549][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.925411][T15232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2217'. [ 468.945974][T15221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.972976][T10345] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 469.185534][T15231] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 469.198994][T15231] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2216'. [ 469.215633][T15244] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 469.235352][T10339] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.256310][T10339] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 469.269350][T10339] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.398229][T10339] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.407776][T10339] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 469.416284][T10339] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.429535][T10339] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.438279][T10339] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 469.456088][T10339] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.480637][T15249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2221'. [ 469.504258][T15255] netlink: 'syz.3.2222': attribute type 4 has an invalid length. [ 469.512024][T15255] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2222'. [ 469.684810][T10339] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.693455][T10339] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 469.709988][T10339] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 469.729483][T15249] bridge0: port 3(batadv0) entered disabled state [ 469.746481][T15249] bridge_slave_1: left allmulticast mode [ 469.752288][T15249] bridge_slave_1: left promiscuous mode [ 469.764498][T15249] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.786923][T15249] bridge_slave_0: left allmulticast mode [ 469.792739][T15249] bridge_slave_0: left promiscuous mode [ 469.806365][T15249] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.982924][T15277] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 470.544744][T15300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2232'. [ 470.714289][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 470.741825][T15308] netlink: 2628 bytes leftover after parsing attributes in process `syz.1.2234'. [ 470.814373][T15308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.822210][T15308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.830641][T15308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.840441][T15308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.519555][T15335] IPVS: length: 243 != 8 [ 472.868643][T15373] __nla_validate_parse: 8 callbacks suppressed [ 472.868662][T15373] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2251'. [ 473.063168][T15378] tipc: Enabling of bearer rejected, already enabled [ 473.368748][T15385] netlink: 'syz.4.2249': attribute type 16 has an invalid length. [ 473.877154][T15384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2254'. [ 474.477775][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 474.695215][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'. [ 474.744315][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'. [ 474.944356][T15448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2267'. [ 474.968969][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 475.083887][T15454] bond5: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 475.107272][T15454] bond5 (unregistering): Released all slaves [ 475.209387][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 475.681739][T15475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.889192][T15485] tipc: Enabled bearer , priority 0 [ 475.899276][T15485] syzkaller0: entered promiscuous mode [ 475.905019][T15485] syzkaller0: entered allmulticast mode [ 478.817391][T15489] tipc: Resetting bearer [ 478.838884][T15484] tipc: Resetting bearer [ 478.944583][T15484] tipc: Disabling bearer [ 478.950849][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 478.980674][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 479.012228][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 479.056132][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 479.240939][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 479.482743][T15543] siw: device registration error -23 [ 479.588448][T15550] netlink: 'syz.4.2293': attribute type 13 has an invalid length. [ 479.600225][T15552] lo speed is unknown, defaulting to 1000 [ 479.610116][T15550] netlink: 'syz.4.2293': attribute type 17 has an invalid length. [ 479.718513][T15550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.734419][T15550] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.750400][T15550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.788157][T15552] lo speed is unknown, defaulting to 1000 [ 479.802620][T15567] syzkaller1: entered promiscuous mode [ 479.810913][T15567] syzkaller1: entered allmulticast mode [ 479.835561][T15552] lo speed is unknown, defaulting to 1000 [ 479.860888][T15552] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 479.869391][ T7889] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 479.872038][T15558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.885177][ T7889] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 479.897553][ T7889] bond0: (slave batadv_slave_0): link status definitely down, disabling slave [ 479.959510][T15552] lo speed is unknown, defaulting to 1000 [ 479.969625][T15552] lo speed is unknown, defaulting to 1000 [ 479.985157][T15552] lo speed is unknown, defaulting to 1000 [ 480.001172][T15576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.018094][T15552] lo speed is unknown, defaulting to 1000 [ 480.104041][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 480.144408][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 480.194916][T15552] lo speed is unknown, defaulting to 1000 [ 480.202481][T15552] lo speed is unknown, defaulting to 1000 [ 480.610625][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 481.725465][T15643] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2312'. [ 481.822175][T15648] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 481.900862][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 481.963126][T15615] lo speed is unknown, defaulting to 1000 [ 482.456982][T15656] tipc: Enabling of bearer rejected, already enabled [ 482.770006][T15668] tipc: Enabling of bearer rejected, already enabled [ 482.854175][T15636] lo speed is unknown, defaulting to 1000 [ 482.871321][T15673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.872044][T15639] lo speed is unknown, defaulting to 1000 [ 483.329755][T15689] netlink: 'syz.0.2324': attribute type 29 has an invalid length. [ 483.361375][T15689] netlink: 'syz.0.2324': attribute type 29 has an invalid length. [ 483.873819][ T5182] Bluetooth: hci0: command tx timeout [ 484.070296][T15710] syz.1.2329: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 484.089004][T15710] CPU: 0 UID: 0 PID: 15710 Comm: syz.1.2329 Not tainted syzkaller #0 PREEMPT(full) [ 484.089036][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.089056][T15710] Call Trace: [ 484.089067][T15710] [ 484.089076][T15710] dump_stack_lvl+0x189/0x250 [ 484.089109][T15710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.089132][T15710] ? __pfx__printk+0x10/0x10 [ 484.089158][T15710] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.089181][T15710] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.089205][T15710] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 484.089230][T15710] warn_alloc+0x214/0x310 [ 484.089266][T15710] ? __pfx_warn_alloc+0x10/0x10 [ 484.089304][T15710] ? __get_vm_area_node+0x28f/0x300 [ 484.089331][T15710] ? xskq_create+0xbf/0x170 [ 484.089355][T15710] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 484.089416][T15710] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 484.089451][T15710] ? __kasan_kmalloc+0x93/0xb0 [ 484.089479][T15710] vmalloc_user_noprof+0xad/0xf0 [ 484.089507][T15710] ? xskq_create+0xbf/0x170 [ 484.089527][T15710] xskq_create+0xbf/0x170 [ 484.089551][T15710] xsk_init_queue+0xb0/0x110 [ 484.089574][T15710] xsk_setsockopt+0x57b/0x8d0 [ 484.089607][T15710] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.089638][T15710] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.089670][T15710] ? __fget_files+0x2a/0x420 [ 484.089696][T15710] ? aa_sock_opt_perm+0xff/0x1b0 [ 484.089718][T15710] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 484.089737][T15710] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.089769][T15710] do_sock_setsockopt+0x17c/0x1b0 [ 484.089797][T15710] __x64_sys_setsockopt+0x13f/0x1b0 [ 484.089827][T15710] do_syscall_64+0xfa/0x3b0 [ 484.089848][T15710] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.089869][T15710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.089888][T15710] ? clear_bhb_loop+0x60/0xb0 [ 484.089912][T15710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.089931][T15710] RIP: 0033:0x7f95c9d8eec9 [ 484.089955][T15710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.089973][T15710] RSP: 002b:00007f95cac0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 484.089993][T15710] RAX: ffffffffffffffda RBX: 00007f95c9fe6090 RCX: 00007f95c9d8eec9 [ 484.090008][T15710] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 484.090020][T15710] RBP: 00007f95c9e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 484.090044][T15710] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 484.090058][T15710] R13: 00007f95c9fe6128 R14: 00007f95c9fe6090 R15: 00007ffc89aeae98 [ 484.090091][T15710] [ 484.090103][T15710] Mem-Info: [ 484.357616][T15692] lo speed is unknown, defaulting to 1000 [ 484.359621][T15710] active_anon:4694 inactive_anon:0 isolated_anon:0 [ 484.359621][T15710] active_file:3215 inactive_file:40015 isolated_file:0 [ 484.359621][T15710] unevictable:768 dirty:177 writeback:0 [ 484.359621][T15710] slab_reclaimable:12381 slab_unreclaimable:144398 [ 484.359621][T15710] mapped:29391 shmem:1360 pagetables:1088 [ 484.359621][T15710] sec_pagetables:0 bounce:0 [ 484.359621][T15710] kernel_misc_reclaimable:0 [ 484.359621][T15710] free:1270135 free_pcp:19246 free_cma:0 [ 484.425950][T15710] Node 0 active_anon:18776kB inactive_anon:0kB active_file:12860kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117564kB dirty:708kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14588kB pagetables:4196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.464151][T15710] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.494857][T15710] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.525576][T15710] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 484.531378][T15710] Node 0 DMA32 free:1171036kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18732kB inactive_anon:0kB active_file:12860kB inactive_file:158040kB unevictable:1536kB writepending:708kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:60168kB local_pcp:20116kB free_cma:0kB [ 484.564987][T15710] lowmem_reserve[]: 0 0 1 1 1 [ 484.569736][T15710] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 484.599617][T15710] lowmem_reserve[]: 0 0 0 0 0 [ 484.605301][T15710] Node 1 Normal free:3894220kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16536kB local_pcp:5184kB free_cma:0kB [ 484.688158][T15710] lowmem_reserve[]: 0 0 0 0 0 [ 484.702544][T15710] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 484.738896][T15710] Node 0 DMA32: 1880*4kB (UM) 343*8kB (UM) 124*16kB (M) 1185*32kB (UME) 544*64kB (UME) 161*128kB (UM) 46*256kB (UM) 18*512kB (UME) 14*1024kB (UM) 1*2048kB (M) 251*4096kB (M) = 1171064kB [ 484.762684][T15710] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 484.784403][T15710] Node 1 Normal: 113*4kB (UME) 51*8kB (UME) 27*16kB (UME) 128*32kB (UME) 37*64kB (UME) 11*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (ME) = 3894220kB [ 484.803539][T15710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.813499][T15710] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.823972][T15710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.833543][T15710] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.844424][T15710] 44588 total pagecache pages [ 484.849131][T15710] 0 pages in swap cache [ 484.853397][T15710] Free swap = 124996kB [ 484.857995][T15710] Total swap = 124996kB [ 484.862432][T15710] 2097051 pages RAM [ 484.866520][T15710] 0 pages HighMem/MovableOnly [ 484.871398][T15710] 424998 pages reserved [ 484.871527][T15717] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 484.875675][T15710] 0 pages cma reserved [ 484.998425][T15696] lo speed is unknown, defaulting to 1000 [ 485.001680][T15727] 8021q: adding VLAN 0 to HW filter on device bond6 [ 485.014226][T15723] __nla_validate_parse: 7 callbacks suppressed [ 485.014245][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'. [ 485.808272][T15736] lo speed is unknown, defaulting to 1000 [ 486.035694][T15768] nbd: nbd1 already in use [ 486.041115][T15768] block nbd1: NBD_DISCONNECT [ 486.042429][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2344'. [ 486.046199][T15768] block nbd1: Send disconnect failed -32 [ 486.046285][T15768] block nbd1: shutting down sockets [ 486.200987][T15774] TCP: TCP_TX_DELAY enabled [ 486.580360][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2353'. [ 486.602823][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2353'. [ 486.969340][T15814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2357'. [ 486.984223][T15814] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 487.007649][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2357'. [ 487.038947][ T7889] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.065714][ T7889] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.086636][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 487.095684][ T7889] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.095733][ T7889] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.345154][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 487.353557][T15807] lo speed is unknown, defaulting to 1000 [ 487.566910][T15840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2366'. [ 488.077981][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'. [ 488.170161][T15870] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 488.264283][T15876] block nbd1: server does not support multiple connections per device. [ 488.286196][T15876] block nbd1: shutting down sockets [ 489.229470][T15944] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 489.240680][T15902] lo speed is unknown, defaulting to 1000 [ 489.318180][T15944] 8021q: adding VLAN 0 to HW filter on device bond7 [ 489.332965][T15942] tipc: Enabled bearer , priority 0 [ 489.358634][T15942] syzkaller0: entered promiscuous mode [ 489.371829][T15942] syzkaller0: entered allmulticast mode [ 489.467538][T15942] tipc: Resetting bearer [ 489.481741][T15940] tipc: Resetting bearer [ 489.505573][T15940] tipc: Disabling bearer [ 490.081744][T15984] __nla_validate_parse: 11 callbacks suppressed [ 490.081764][T15984] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2404'. [ 490.234516][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'. [ 490.274883][T15991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2405'. [ 490.476348][T15998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2407'. [ 490.585280][T16002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2407'. [ 490.604850][T16007] veth0_vlan: entered allmulticast mode [ 490.689660][T16002] nbd: socks must be embedded in a SOCK_ITEM attr [ 490.815911][T15998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2407'. [ 490.855343][T15998] nbd: device at index 64 is going down [ 490.872630][T16016] IPv6: sit2: Disabled Multicast RS [ 490.954604][T16019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2413'. [ 491.121117][T16026] netlink: 'syz.0.2416': attribute type 13 has an invalid length. [ 491.362454][T16040] netlink: 'syz.4.2419': attribute type 21 has an invalid length. [ 491.384098][T16040] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2419'. [ 491.396422][T16040] netlink: 'syz.4.2419': attribute type 21 has an invalid length. [ 491.415842][T16040] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2419'. [ 491.820271][T16032] lo speed is unknown, defaulting to 1000 [ 492.264347][ T9079] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 492.316097][T16089] netlink: 'syz.4.2432': attribute type 2 has an invalid length. [ 492.372800][T16097] netlink: 'syz.2.2433': attribute type 6 has an invalid length. [ 492.379955][T16089] : entered promiscuous mode [ 492.406095][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 493.071934][T16128] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 493.150826][T16128] bond10: entered promiscuous mode [ 493.158677][T16128] 8021q: adding VLAN 0 to HW filter on device bond10 [ 493.229784][T16130] 8021q: adding VLAN 0 to HW filter on device bond10 [ 493.240720][T16130] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 493.255296][T16130] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 493.282239][T16130] bond10: (slave wireguard1): making interface the new active one [ 493.295421][T16130] wireguard1: entered promiscuous mode [ 493.321071][T16130] bond10: (slave wireguard1): Enslaving as an active interface with an up link [ 493.351890][T16128] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address [ 493.392053][T16128] bond10: (slave wireguard2): Enslaving as a backup interface with an up link [ 493.770339][T16153] lo speed is unknown, defaulting to 1000 [ 494.081590][T16158] lo speed is unknown, defaulting to 1000 [ 494.590224][T16191] netlink: 'syz.0.2454': attribute type 26 has an invalid length. [ 494.626412][T16155] lo speed is unknown, defaulting to 1000 [ 495.108605][T16213] __nla_validate_parse: 4 callbacks suppressed [ 495.108624][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2460'. [ 495.342844][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'. [ 495.675536][T16215] bond9 (unregistering): Released all slaves [ 495.800486][T16236] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 495.866611][T16237] netlink: 'syz.0.2465': attribute type 12 has an invalid length. [ 495.904354][T16237] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2465'. [ 496.277572][T16262] netlink: 'syz.0.2471': attribute type 1 has an invalid length. [ 496.319011][T16262] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 496.504918][T16233] lo speed is unknown, defaulting to 1000 [ 496.541024][T16271] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2472'. [ 496.587173][T16271] netlink: 'syz.0.2472': attribute type 3 has an invalid length. [ 496.650702][T16272] syz_tun: entered allmulticast mode [ 496.849984][T16271] 0ªX¹¦À: left allmulticast mode [ 496.857189][T16271] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 496.885383][T16265] lo speed is unknown, defaulting to 1000 [ 496.974490][T16278] syzkaller1: entered promiscuous mode [ 496.980106][T16278] syzkaller1: entered allmulticast mode [ 497.042976][T16270] syz_tun: left allmulticast mode [ 497.399483][T16289] vxcan5: entered allmulticast mode [ 497.954873][T16317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2484'. [ 497.972064][T16319] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 498.164504][T16325] syzkaller0: entered promiscuous mode [ 498.175855][T16325] syzkaller0: entered allmulticast mode [ 498.210179][T16329] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 498.222840][T16329] bond5 (unregistering): Released all slaves [ 498.277461][T16337] netlink: 'syz.1.2490': attribute type 11 has an invalid length. [ 498.335212][T16337] netlink: 'syz.1.2490': attribute type 4 has an invalid length. [ 498.342974][T16337] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2490'. [ 498.725668][T16354] tun0: tun_chr_ioctl cmd 1074025673 [ 498.781738][T16356] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20000 [ 498.853905][T16336] lo speed is unknown, defaulting to 1000 [ 499.193437][T16377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2499'. [ 499.376130][T10337] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 499.437525][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2504'. [ 499.518139][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 499.696610][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 500.489867][T16446] syzkaller0: Caught tx_queue_len zero misconfig [ 500.573190][T16450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.585208][T16454] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2519'. [ 500.698825][T16461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2523'. [ 501.142584][T16491] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2527'. [ 501.179943][T16470] lo speed is unknown, defaulting to 1000 [ 501.193588][T16480] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'. [ 501.377138][T16502] netlink: 'syz.1.2529': attribute type 12 has an invalid length. [ 501.395510][T16502] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2529'. [ 501.515465][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2529'. [ 501.672078][T16514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2533'. [ 501.784215][T16516] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2534'. [ 502.052532][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 502.237359][T16487] lo speed is unknown, defaulting to 1000 [ 502.407426][T16492] lo speed is unknown, defaulting to 1000 [ 503.022199][T16557] bond5: option mode: unable to set because the bond device has slaves [ 503.157199][T16557] macvtap2: entered promiscuous mode [ 503.162590][T16557] macvtap2: entered allmulticast mode [ 503.441236][T16562] lo speed is unknown, defaulting to 1000 [ 503.766159][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2552'. [ 503.800037][T16577] lo: Caught tx_queue_len zero misconfig [ 503.935013][T16584] netlink: zone id is out of range [ 503.940194][T16584] netlink: zone id is out of range [ 503.948295][T16584] netlink: zone id is out of range [ 503.953445][T16584] netlink: get zone limit has 8 unknown bytes [ 504.174676][T16600] netlink: 'syz.1.2558': attribute type 5 has an invalid length. [ 504.232105][T16604] netlink: 'syz.3.2559': attribute type 13 has an invalid length. [ 504.251890][T16604] netlink: 'syz.3.2559': attribute type 17 has an invalid length. [ 504.367129][T16604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.441091][T16604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.490046][ T5862] lo speed is unknown, defaulting to 1000 [ 504.496435][T16607] xfrm0: entered promiscuous mode [ 504.501493][T16607] xfrm0: entered allmulticast mode [ 504.524485][ T5862] syz2: Port: 1 Link ACTIVE [ 504.546594][T16588] lo speed is unknown, defaulting to 1000 [ 507.297013][T16609] lo speed is unknown, defaulting to 1000 [ 508.661009][T16672] IPv6: NLM_F_REPLACE set, but no existing node found! [ 508.827075][T16674] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 508.966076][T16686] gretap1: entered allmulticast mode [ 508.996548][T16686] bond1: (slave gretap1): making interface the new active one [ 509.006795][T16686] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 509.025970][T16689] IPVS: set_ctl: invalid protocol: 108 172.30.1.4:20000 [ 509.207860][T16704] __nla_validate_parse: 2 callbacks suppressed [ 509.207881][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 509.260987][T16677] lo speed is unknown, defaulting to 1000 [ 509.321493][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 509.372635][T16710] netlink: 'syz.1.2593': attribute type 10 has an invalid length. [ 509.871692][T16735] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 509.892531][T16737] netlink: 'syz.0.2600': attribute type 12 has an invalid length. [ 509.978140][T16692] lo speed is unknown, defaulting to 1000 [ 510.082680][T16746] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 510.341350][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 510.997127][T16791] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2610'. [ 510.998586][T16787] bond0: Caught tx_queue_len zero misconfig [ 511.024780][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'. [ 511.075218][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'. [ 511.264184][T16803] pim6reg1: entered promiscuous mode [ 511.269517][T16803] pim6reg1: entered allmulticast mode [ 511.438311][T16805] netlink: 'syz.1.2615': attribute type 11 has an invalid length. [ 511.638119][T16798] lo speed is unknown, defaulting to 1000 [ 511.857601][T16833] veth13: entered promiscuous mode [ 511.896092][T16832] veth15: entered promiscuous mode [ 511.901583][T16813] lo speed is unknown, defaulting to 1000 [ 512.138504][T16838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2621'. [ 512.150117][T16838] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2621'. [ 512.166714][T16838] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2621'. [ 512.189386][T16842] veth0_to_bridge: entered promiscuous mode [ 512.426327][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2624'. [ 512.568452][T16858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 512.617053][T16866] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 512.647103][T16866] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 512.755937][T16819] lo speed is unknown, defaulting to 1000 [ 512.765920][T16858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.890798][T16822] lo speed is unknown, defaulting to 1000 [ 513.127420][T16881] netlink: 'syz.0.2631': attribute type 2 has an invalid length. [ 513.165772][T16881] netlink: 'syz.0.2631': attribute type 2 has an invalid length. [ 513.678554][T16865] lo speed is unknown, defaulting to 1000 [ 514.265418][T16925] FAULT_INJECTION: forcing a failure. [ 514.265418][T16925] name failslab, interval 1, probability 0, space 0, times 1 [ 514.279387][T16925] CPU: 0 UID: 0 PID: 16925 Comm: syz.3.2641 Not tainted syzkaller #0 PREEMPT(full) [ 514.279416][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.279429][T16925] Call Trace: [ 514.279437][T16925] [ 514.279445][T16925] dump_stack_lvl+0x189/0x250 [ 514.279473][T16925] ? __pfx____ratelimit+0x10/0x10 [ 514.279494][T16925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.279514][T16925] ? __pfx__printk+0x10/0x10 [ 514.279540][T16925] ? __pfx___might_resched+0x10/0x10 [ 514.279569][T16925] ? fs_reclaim_acquire+0x7d/0x100 [ 514.279603][T16925] should_fail_ex+0x414/0x560 [ 514.279636][T16925] should_failslab+0xa8/0x100 [ 514.279664][T16925] __kmalloc_noprof+0xcb/0x4f0 [ 514.279689][T16925] ? tomoyo_encode+0x28b/0x550 [ 514.279713][T16925] tomoyo_encode+0x28b/0x550 [ 514.279738][T16925] tomoyo_realpath_from_path+0x58d/0x5d0 [ 514.279761][T16925] ? tomoyo_domain+0xd9/0x130 [ 514.279787][T16925] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 514.279814][T16925] tomoyo_path_number_perm+0x1e8/0x5a0 [ 514.279842][T16925] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.279884][T16925] ? __lock_acquire+0xab9/0xd20 [ 514.279930][T16925] ? __fget_files+0x2a/0x420 [ 514.279960][T16925] ? __fget_files+0x2a/0x420 [ 514.279984][T16925] ? __fget_files+0x3a0/0x420 [ 514.280008][T16925] ? __fget_files+0x2a/0x420 [ 514.280040][T16925] security_file_ioctl+0xcb/0x2d0 [ 514.280065][T16925] __se_sys_ioctl+0x47/0x170 [ 514.280090][T16925] do_syscall_64+0xfa/0x3b0 [ 514.280111][T16925] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.280131][T16925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.280149][T16925] ? clear_bhb_loop+0x60/0xb0 [ 514.280171][T16925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.280189][T16925] RIP: 0033:0x7f9e20f8eec9 [ 514.280205][T16925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.280221][T16925] RSP: 002b:00007f9e21d50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.280240][T16925] RAX: ffffffffffffffda RBX: 00007f9e211e5fa0 RCX: 00007f9e20f8eec9 [ 514.280262][T16925] RDX: 0000200000001b80 RSI: 0000000000008946 RDI: 0000000000000003 [ 514.280274][T16925] RBP: 00007f9e21d50090 R08: 0000000000000000 R09: 0000000000000000 [ 514.280285][T16925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.280295][T16925] R13: 00007f9e211e6038 R14: 00007f9e211e5fa0 R15: 00007ffde57d3648 [ 514.280325][T16925] [ 514.280345][T16925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 514.923269][T16939] tipc: Enabled bearer , priority 0 [ 514.961293][T16947] __nla_validate_parse: 8 callbacks suppressed [ 514.961313][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2646'. [ 514.981931][T16947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2646'. [ 514.992178][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 515.008801][T16939] tipc: Disabling bearer [ 515.015260][T16940] sctp: [Deprecated]: syz.3.2644 (pid 16940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.015260][T16940] Use struct sctp_sack_info instead [ 515.172494][T16961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2648'. [ 515.798266][T16990] netlink: 'syz.2.2653': attribute type 13 has an invalid length. [ 515.811436][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 515.892673][T16992] netlink: 'syz.0.2656': attribute type 10 has an invalid length. [ 515.940153][T16991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2655'. [ 516.080534][T16977] lo speed is unknown, defaulting to 1000 [ 516.298066][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 516.310866][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2658'. [ 516.344568][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 516.367099][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2658'. [ 516.414331][T16980] lo speed is unknown, defaulting to 1000 [ 516.811557][T16991] lo speed is unknown, defaulting to 1000 [ 516.935617][T17022] tipc: Enabling of bearer rejected, already enabled [ 516.996373][T17025] netlink: 'syz.3.2665': attribute type 13 has an invalid length. [ 517.141482][T17025] bond6: option fail_over_mac: invalid value (6) [ 517.168328][T17025] bond6 (unregistering): Released all slaves [ 518.151353][T17038] lo speed is unknown, defaulting to 1000 [ 518.499100][T17085] ip6gre0: entered allmulticast mode [ 518.555464][T17087] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 519.616635][T17139] netlink: 'syz.2.2688': attribute type 1 has an invalid length. [ 519.655128][T17139] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 520.120695][T17172] __nla_validate_parse: 8 callbacks suppressed [ 520.120714][T17172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2696'. [ 520.137276][T17173] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 520.162829][T17173] CPU: 1 UID: 0 PID: 17173 Comm: syz.4.2697 Not tainted syzkaller #0 PREEMPT(full) [ 520.162859][T17173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.162871][T17173] Call Trace: [ 520.162880][T17173] [ 520.162888][T17173] dump_stack_lvl+0x189/0x250 [ 520.162918][T17173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.162941][T17173] ? __pfx__printk+0x10/0x10 [ 520.162974][T17173] ? kernfs_path_from_node+0x2f/0x290 [ 520.162995][T17173] ? kernfs_path_from_node+0x250/0x290 [ 520.163014][T17173] ? kernfs_path_from_node+0x2f/0x290 [ 520.163039][T17173] sysfs_warn_dup+0x8e/0xa0 [ 520.163059][T17173] sysfs_do_create_link_sd+0xc0/0x110 [ 520.163082][T17173] device_add_class_symlinks+0x1cf/0x240 [ 520.163110][T17173] device_add+0x475/0xb50 [ 520.163138][T17173] wiphy_register+0x1c81/0x2aa0 [ 520.163184][T17173] ? __pfx_wiphy_register+0x10/0x10 [ 520.163208][T17173] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 520.163248][T17173] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 520.163284][T17173] ieee80211_register_hw+0x3473/0x40d0 [ 520.163321][T17173] ? ieee80211_register_hw+0x1431/0x40d0 [ 520.163353][T17173] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 520.163371][T17173] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 520.163397][T17173] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 520.163417][T17173] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 520.163446][T17173] ? __hrtimer_setup+0x187/0x210 [ 520.163474][T17173] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 520.163509][T17173] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 520.163573][T17173] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 520.163599][T17173] ? trace_kmalloc+0x1f/0xd0 [ 520.163621][T17173] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 520.163648][T17173] ? kstrndup+0xbf/0x160 [ 520.163675][T17173] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 520.163707][T17173] ? __pfx___nla_validate_parse+0x10/0x10 [ 520.163749][T17173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.163794][T17173] ? __nla_parse+0x40/0x60 [ 520.163818][T17173] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 520.163867][T17173] genl_family_rcv_msg_doit+0x212/0x300 [ 520.163904][T17173] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.163950][T17173] ? bpf_lsm_capable+0x9/0x20 [ 520.163973][T17173] ? security_capable+0x7e/0x2e0 [ 520.164007][T17173] genl_rcv_msg+0x60e/0x790 [ 520.164039][T17173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.164066][T17173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.164110][T17173] netlink_rcv_skb+0x208/0x470 [ 520.164130][T17173] ? __lock_acquire+0xab9/0xd20 [ 520.164156][T17173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.164186][T17173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.164232][T17173] ? down_read+0x1ad/0x2e0 [ 520.164260][T17173] genl_rcv+0x28/0x40 [ 520.164285][T17173] netlink_unicast+0x82c/0x9e0 [ 520.164316][T17173] ? __pfx_netlink_unicast+0x10/0x10 [ 520.164339][T17173] ? netlink_sendmsg+0x642/0xb30 [ 520.164359][T17173] ? skb_put+0x11b/0x210 [ 520.164388][T17173] netlink_sendmsg+0x805/0xb30 [ 520.164423][T17173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.164450][T17173] ? aa_sock_msg_perm+0xf1/0x1d0 [ 520.164482][T17173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.164502][T17173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.164527][T17173] __sock_sendmsg+0x219/0x270 [ 520.164562][T17173] ____sys_sendmsg+0x505/0x830 [ 520.164594][T17173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.164632][T17173] ? import_iovec+0x74/0xa0 [ 520.164661][T17173] ___sys_sendmsg+0x21f/0x2a0 [ 520.164690][T17173] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.164760][T17173] ? __fget_files+0x2a/0x420 [ 520.164787][T17173] ? __fget_files+0x3a0/0x420 [ 520.164834][T17173] __x64_sys_sendmsg+0x19b/0x260 [ 520.164862][T17173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.164896][T17173] ? rcu_is_watching+0x15/0xb0 [ 520.164920][T17173] ? do_syscall_64+0xbe/0x3b0 [ 520.164946][T17173] do_syscall_64+0xfa/0x3b0 [ 520.164966][T17173] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.164987][T17173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.165006][T17173] ? clear_bhb_loop+0x60/0xb0 [ 520.165030][T17173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.165049][T17173] RIP: 0033:0x7f32a9b8eec9 [ 520.165066][T17173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.165081][T17173] RSP: 002b:00007f32aaa0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.165101][T17173] RAX: ffffffffffffffda RBX: 00007f32a9de5fa0 RCX: 00007f32a9b8eec9 [ 520.165115][T17173] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 520.165127][T17173] RBP: 00007f32a9c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.165139][T17173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.165150][T17173] R13: 00007f32a9de6038 R14: 00007f32a9de5fa0 R15: 00007ffed6290668 [ 520.165182][T17173] [ 520.651243][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 521.106703][T17179] lo speed is unknown, defaulting to 1000 [ 521.229783][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2709'. [ 521.392105][T17219] vlan3: entered allmulticast mode [ 521.397591][T17219] bond9: entered allmulticast mode [ 521.463094][T17200] lo speed is unknown, defaulting to 1000 [ 521.469954][T17212] siw: device registration error -23 [ 521.737991][T17228] netlink: 'syz.3.2712': attribute type 11 has an invalid length. [ 522.702376][T17261] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 522.744760][T17261] netlink: 'syz.4.2721': attribute type 4 has an invalid length. [ 522.761058][T17265] netlink: 'syz.0.2722': attribute type 13 has an invalid length. [ 522.776093][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 522.785492][T17265] netlink: 'syz.0.2722': attribute type 17 has an invalid length. [ 522.812348][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 522.904057][T17265] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 523.183922][T17284] netlink: 'syz.1.2725': attribute type 10 has an invalid length. [ 523.192373][T17284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2725'. [ 523.437308][T17289] netlink: 'syz.1.2725': attribute type 12 has an invalid length. [ 523.450980][T17284] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 523.546158][T17267] lo speed is unknown, defaulting to 1000 [ 524.307296][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 524.512191][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'. [ 524.821823][T17326] pim6reg1: entered promiscuous mode [ 524.837512][T17326] pim6reg1: entered allmulticast mode [ 524.881392][T17324] netlink: 4928 bytes leftover after parsing attributes in process `syz.2.2738'. [ 524.975503][T17324] 8021q: VLANs not supported on wg2 [ 525.052649][T17332] netlink: 'syz.0.2741': attribute type 13 has an invalid length. [ 525.060953][T17332] netlink: 'syz.0.2741': attribute type 17 has an invalid length. [ 525.144534][T17332] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 525.437550][T17314] lo speed is unknown, defaulting to 1000 [ 525.592150][T17338] netlink: 'syz.4.2744': attribute type 29 has an invalid length. [ 526.012483][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'. [ 526.040527][T17351] xfrm1: entered promiscuous mode [ 526.056599][T17351] xfrm1: entered allmulticast mode [ 526.062089][T17334] lo speed is unknown, defaulting to 1000 [ 526.062211][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'. [ 526.656936][T17380] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2755'. [ 526.727969][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 549.662342][T17435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2772'. [ 550.322413][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2772'. [ 550.931614][T17435] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 551.861642][T17397] lo speed is unknown, defaulting to 1000 [ 563.061570][T17448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.223053][T17448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.412407][T17448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.711389][T17448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.921270][T17448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.910675][T17448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.359601][T17448] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.643024][T17452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.980711][T17452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.432859][T17452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.132814][T17452] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 567.291342][T17452] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 567.421082][ T5865] Bluetooth: hci3: command tx timeout [ 567.523231][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 567.973533][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 568.151451][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 569.559088][ T5182] Bluetooth: hci5: command tx timeout [ 569.572197][ T5865] Bluetooth: hci3: command tx timeout [ 571.011549][ T5865] Bluetooth: hci6: command tx timeout [ 571.660697][ T5865] Bluetooth: hci5: command tx timeout [ 571.671233][ T5182] Bluetooth: hci3: command tx timeout [ 571.941939][ T5865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 572.023004][ T5865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 572.231086][ T5865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 572.592153][ T5865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 572.793340][ T5865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 573.090148][ T5182] Bluetooth: hci6: command tx timeout [ 573.743464][ T5865] Bluetooth: hci5: command tx timeout [ 573.752385][ T5182] Bluetooth: hci3: command tx timeout [ 575.171195][ T5182] Bluetooth: hci6: command tx timeout [ 575.337857][ T5182] Bluetooth: hci7: command tx timeout [ 575.808058][ T5182] Bluetooth: hci5: command tx timeout [ 577.247597][ T5182] Bluetooth: hci6: command tx timeout [ 577.400724][ T5182] Bluetooth: hci7: command tx timeout [ 579.481765][ T5182] Bluetooth: hci7: command tx timeout [ 580.333501][ T9079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.510540][ T9079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.601259][ T5182] Bluetooth: hci7: command tx timeout [ 584.552493][ T9079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.750342][ T9079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.082697][T17402] lo speed is unknown, defaulting to 1000 [ 589.422581][ T9079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.591551][ T9079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.053624][T17467] ûý: entered promiscuous mode [ 597.430331][ T9079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.771206][ T9079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.141825][T17471] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 626.641370][ T5865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 626.833209][ T5865] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 626.962238][ T5865] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 627.429438][T17448] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 627.632950][T17448] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 627.831198][T17448] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 627.922457][T17448] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 628.150986][T17448] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 628.431986][T17448] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 629.122369][T17493] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 629.633147][ T5865] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 629.702334][ T5865] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 630.191835][T17448] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 630.612636][T17448] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 630.697697][T17448] Bluetooth: hci8: command tx timeout [ 630.890151][T17448] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 632.051225][T17448] Bluetooth: hci9: command tx timeout [ 632.781802][T17448] Bluetooth: hci8: command tx timeout [ 633.062679][ T9079] ip6gre0 (unregistering): left allmulticast mode [ 633.581352][T17448] Bluetooth: hci10: command tx timeout [ 634.122221][T17448] Bluetooth: hci9: command tx timeout [ 634.562909][T17493] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 634.660330][T17493] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 634.851650][T17493] Bluetooth: hci8: command tx timeout [ 635.003346][T17493] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 635.433209][T17493] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 635.642168][T17493] Bluetooth: hci10: command tx timeout [ 635.713354][T17493] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 636.211816][T17448] Bluetooth: hci9: command tx timeout [ 636.967469][T17493] Bluetooth: hci8: command tx timeout [ 637.731272][T17493] Bluetooth: hci10: command tx timeout [ 638.291567][T17493] Bluetooth: hci9: command tx timeout [ 638.602645][T17493] Bluetooth: hci11: command tx timeout [ 639.812039][T17493] Bluetooth: hci10: command tx timeout [ 640.680901][T17493] Bluetooth: hci11: command tx timeout [ 642.762973][T17493] Bluetooth: hci11: command tx timeout [ 644.841270][T17493] Bluetooth: hci11: command tx timeout [ 649.193055][ T9079] bond1 (unregistering): (slave gretap1): Releasing active interface [ 664.722717][T17448] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 664.800815][T17448] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 664.932023][T17448] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 665.431244][T17448] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 665.601610][T17448] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 668.291089][T17493] Bluetooth: hci12: command tx timeout [ 670.360668][T17493] Bluetooth: hci12: command tx timeout [ 672.461409][T17493] Bluetooth: hci12: command tx timeout [ 673.040691][ T9079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.723617][ T9079] bond_slave_0: left promiscuous mode [ 674.261927][ T9079] bond_slave_0: left allmulticast mode [ 674.532180][T17493] Bluetooth: hci12: command tx timeout [ 675.133282][ T9079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.552917][ T9079] bond_slave_1: left promiscuous mode [ 675.681296][ T9079] bond_slave_1: left allmulticast mode [ 675.921733][ T9079] bond0 (unregistering): Released all slaves [ 677.217852][ T9079] bond1 (unregistering): Released all slaves [ 682.611827][T17448] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 682.830929][ T5865] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 682.940960][ T5865] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 683.041326][ T5865] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 683.132080][ T5865] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 683.262155][ T5865] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 683.482774][ T5865] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 683.680969][ T5865] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 683.901446][ T5182] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 684.083468][ T5182] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 686.253125][T17448] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 686.522491][T17448] Bluetooth: hci14: command tx timeout [ 686.630065][ T5865] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 686.843047][ T5865] Bluetooth: hci13: command tx timeout [ 686.960990][ T5865] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 687.072594][ T5865] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 687.282526][ T5865] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 687.440453][ T5865] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 687.502007][ T5865] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 688.022400][T17521] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 688.150741][T17521] Bluetooth: hci3: command 0x0406 tx timeout [ 688.270613][ T9079] bond2 (unregistering): Released all slaves [ 688.353564][T17521] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 688.392841][T17521] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 688.602254][T17521] Bluetooth: hci14: command tx timeout [ 688.806437][ T9079] bond3 (unregistering): Released all slaves [ 688.921197][T17448] Bluetooth: hci13: command tx timeout [ 690.121941][ T9079] bond4 (unregistering): Released all slaves [ 690.701646][ T5182] Bluetooth: hci14: command tx timeout [ 691.000832][ T5182] Bluetooth: hci13: command tx timeout [ 691.352858][T17521] Bluetooth: hci16: command tx timeout [ 691.512719][T17521] Bluetooth: hci15: command tx timeout [ 692.783150][T17521] Bluetooth: hci14: command tx timeout [ 693.093496][T17521] Bluetooth: hci13: command tx timeout [ 693.270724][T17521] Bluetooth: hci6: command 0x0406 tx timeout [ 693.272731][T17493] Bluetooth: hci5: command 0x0406 tx timeout [ 693.412909][T17493] Bluetooth: hci16: command tx timeout [ 693.581783][T17493] Bluetooth: hci15: command tx timeout [ 695.490663][T17452] Bluetooth: hci16: command tx timeout [ 695.650880][T17452] Bluetooth: hci15: command tx timeout [ 697.571402][T17452] Bluetooth: hci16: command tx timeout [ 697.731914][T17452] Bluetooth: hci15: command tx timeout [ 698.009357][ T9079] bond5 (unregistering): Released all slaves [ 698.380210][T17452] Bluetooth: hci7: command 0x0406 tx timeout [ 698.793511][ T9079] bond6 (unregistering): Released all slaves [ 708.573550][ T9079] bond7 (unregistering): Released all slaves [ 709.363255][ T9079] bond8 (unregistering): Released all slaves [ 709.943539][ T9079] bond9 (unregistering): Released all slaves [ 718.952490][ T9079] bond10 (unregistering): (slave wireguard1): Releasing backup interface [ 719.023357][ T9079] wireguard1: left promiscuous mode [ 720.062002][ T9079] bond10 (unregistering): (slave wireguard2): Releasing backup interface [ 721.032253][ T9079] bond10 (unregistering): Released all slaves [ 722.023471][T17410] lo speed is unknown, defaulting to 1000 [ 730.001284][ T9079] tipc: Disabling bearer [ 730.302396][ T9079] tipc: Left network mode [ 730.451174][T17452] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 730.772381][T17452] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 731.002294][T17452] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 731.572109][T17452] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 732.082375][T17452] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 735.321936][T17452] Bluetooth: hci17: command tx timeout [ 737.413519][T17452] Bluetooth: hci17: command tx timeout [ 739.481611][T17452] Bluetooth: hci17: command tx timeout [ 741.572854][T17452] Bluetooth: hci17: command tx timeout [ 755.611082][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 755.933394][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 756.041604][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 756.492951][ T31] INFO: task syz.4.2762:17402 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 756.823073][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 757.020693][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 757.270078][ T31] Not tainted syzkaller #0 [ 757.511692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.592008][ T31] task:syz.4.2762 state:D stack:23680 pid:17402 tgid:17401 ppid:5859 task_flags:0x400140 flags:0x00004006 [ 757.617648][ T31] Call Trace: [ 757.620961][ T31] [ 757.710899][ T31] __schedule+0x1798/0x4cc0 [ 757.902493][ T31] ? irqentry_exit+0x74/0x90 [ 757.943598][ T31] ? __lock_acquire+0xab9/0xd20 [ 757.952225][ T31] ? __lock_acquire+0xab9/0xd20 [ 757.960519][ T31] ? __pfx___schedule+0x10/0x10 [ 758.081273][ T31] ? schedule+0x91/0x360 [ 758.222389][ T31] schedule+0x165/0x360 [ 758.501857][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.701499][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 758.851527][T17452] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 758.991489][T17452] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 759.152456][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 759.190946][T17452] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 759.381119][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 759.612513][T17452] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 759.802309][ T31] ? __lock_acquire+0xab9/0xd20 [ 759.882496][T17452] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 759.911837][T17452] Bluetooth: hci2: command tx timeout [ 760.122065][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 760.242731][ T31] down_write+0x1ab/0x1f0 [ 760.422443][ T31] ? __pfx_down_write+0x10/0x10 [ 760.683031][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 760.789952][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 760.982960][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 761.261755][ T31] rdma_dev_exit_net+0x8c/0x340 [ 761.422455][ T31] ? __pfx___might_resched+0x10/0x10 [ 761.530505][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 761.661347][ T31] ? net_generic+0x1e/0x240 [ 761.670067][ T31] ? mutex_is_locked+0x17/0x50 [ 761.678489][ T31] ? rtnl_is_locked+0x15/0x20 [ 761.683493][ T31] ops_undo_list+0x49a/0x990 [ 761.693387][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 761.932046][ T31] ? ops_init+0x469/0x5c0 [ 761.971386][T17452] Bluetooth: hci2: command tx timeout [ 762.063053][ T31] setup_net+0x2d3/0x320 [ 762.098386][ T31] ? __pfx_setup_net+0x10/0x10 [ 762.130795][ T31] ? copy_net_ns+0x304/0x4d0 [ 762.362103][ T31] ? down_read_killable+0x1d1/0x350 [ 762.531013][T17452] Bluetooth: hci8: command tx timeout [ 762.621477][ T31] copy_net_ns+0x31b/0x4d0 [ 762.792214][ T31] create_new_namespaces+0x3f3/0x720 [ 762.843409][ T31] ? security_capable+0x7e/0x2e0 [ 763.081660][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 763.201873][ T31] ksys_unshare+0x4c8/0x8c0 [ 763.401670][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 763.563609][ T31] __x64_sys_unshare+0x38/0x50 [ 763.682954][ T31] do_syscall_64+0xfa/0x3b0 [ 763.782019][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.940036][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.041714][T17452] Bluetooth: hci2: command tx timeout [ 764.332046][ T31] ? clear_bhb_loop+0x60/0xb0 [ 764.601647][T17452] Bluetooth: hci8: command tx timeout [ 764.803095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.931634][ T31] RIP: 0033:0x7f32a9b8eec9 [ 765.041842][ T31] RSP: 002b:00007f32aaa0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 765.211491][ T31] RAX: ffffffffffffffda RBX: 00007f32a9de5fa0 RCX: 00007f32a9b8eec9 [ 765.330492][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 765.461911][ T31] RBP: 00007f32a9c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 765.621505][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.762545][ T31] R13: 00007f32a9de6038 R14: 00007f32a9de5fa0 R15: 00007ffed6290668 [ 765.921628][ T31] [ 766.090924][ T31] [ 766.090924][ T31] Showing all locks held in the system: [ 766.141932][T17452] Bluetooth: hci2: command tx timeout [ 766.391450][ T31] 1 lock held by khungtaskd/31: