last executing test programs: 2m37.524514409s ago: executing program 1 (id=2930): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x81, 0x3, 0x204, 0xffff, 0x1, 0x1000, 0xfffffff4, 0xfffffffd, r3}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0xffff}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000001680)=""/4096, &(0x7f00000014c0)=0x1000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f00000001c0), &(0x7f0000000280)=r5}, 0x20) r11 = socket$inet6(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x100, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) getsockopt$SO_TIMESTAMP(r11, 0x1, 0x3f, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendto$inet6(r11, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 2m36.745549358s ago: executing program 1 (id=2937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400080000a080001400000000008000340000000000900010073797a30"], 0xc8}}, 0x0) 2m36.525041741s ago: executing program 1 (id=2941): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4001000010000100c36e000800000000000000000000010000000000000000000000fb5c00000000000000200000000000000000fa00"/71, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb00000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0006000000"], 0x140}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r5}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8) unshare(0x6a040000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x12) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) 2m34.04188899s ago: executing program 1 (id=2956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x2, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffc}], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1b90}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$IMGETCOUNT(r4, 0x40106183, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f00000002c0)={0x1, 0x9}) 2m31.920904967s ago: executing program 2 (id=2969): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001e80)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="f247d266bc235a61f04cadbfceca1e07d1886c740d917ed448dc43320177d2e54d57df522179d1fbfefd0044"], 0x310) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000001cc0), 0x8, 0x87, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c8700ab", @ANYRES16=r5, @ANYBLOB="00032cbd7000ffdbdf250300000008000b00", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r4) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x4c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008850}, 0x4005895) r8 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r8, 0x1, 0x4, &(0x7f0000000040)=0xffffffff, 0x4) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000000f14000226bd7000ff0300010000000b004500757665726273000009004500806d616400000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xa) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r11, &(0x7f0000002d00)=[{{&(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000340)="a40c43e534eff505185110073e64e58a7b7627a55ebcaaa2aa6c2b078ef27525ea1f66cd09f498fac4a83bf804b43d726d6bc447352c2a30f05aa467407b9c144aa95e98c8eaebe84bd47e1940a62dc004734404b678e947c15f185a69d2908861f780112b27686a81f7dcc59e901857ba07ee2334297727ae792a2cf5af2059c751358066087bc84581b645b83c4cbdfe41842351adef7e7b", 0x99}, {&(0x7f0000000400)="d4ca33464db36d8ad68029c3391cb833e4546897b6d2b81d618f3b46c4272ee676dbc99b2676af3216bc613258673f58f2b9b43f02ca632a1d69c53182473d8f0fe85db0303f0a9ea672b06d2feaff07dc41104fd5b9ad1ca8a2d848565ff8ac0808d70b00c4a713ab25279213fbdf2fd97df36ec383188ba5a190c648ec7aac817cb45faeb6c7960fd073be1286671c8eec9b6b4a8bf09b1b4ed46f0385071de99bb5a5ac5bd8bdef08", 0xaa}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f00000004c0)="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", 0xf7}, {&(0x7f00000005c0)="aecd6d50ca68ba6cc791d70a7b538d0f37fadf092d7a35cb977c74d4d5ec3e252332e2fbcacffda2a7ed22b1c32f71c7125f7cacd90e746ca208fcd4b990375ec5174a913faa5577494e6bc28e31e87a8879641b9d354e6a98359813522312fa2d4ab603633feda077fab573930ab58dd6dc6fb975e4ca12fd82d2c30e31c9ef97846d36303ef7d5b163ee543b7bb6240edc90db06cc04699db3285f5760f0b74205de802fdd5cf2b82fabd3f2999307171ca27bda3e4c05", 0xb8}], 0x5, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002cc0)}}], 0x3, 0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000100000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) 2m31.721679466s ago: executing program 2 (id=2970): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) r1 = socket$l2tp(0x2, 0x2, 0x73) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x4) listen(r1, 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000002880)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000200100085000000a000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) 2m31.552864433s ago: executing program 2 (id=2972): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r8, 0x7f62c4469923ede5}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}]}, 0x1c}}, 0x14) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r10 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r9, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="3001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e"], 0x14c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@ipv6_delroute={0x134, 0x19, 0x200, 0x70bd29, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0xff, 0x2, 0xfd, 0xf, 0x400}, [@RTA_PRIORITY={0x8, 0x6, 0x8}, @RTA_METRICS={0xd7, 0x8, 0x0, 0x1, "98b63aaaa64f97a9fb9a736104cf0cecf303233fbecee8b9cb7412a79c197a1262adee7ce39c5b6e29fbb266204671bec8311fe3a2a548f2fdebd5e733162bf490605a2c72d2b0a7a44d700e26b20168eab07ff852d38420185fab6eb0b4f87ec89c1c11873e4280455625cf3aa2e54f9a0f22face42797a19703ae4825d367801d505426e8e8c5a9a74a169dd950dd301bd9ca6476725e6bfa3f8e8a100e86e0f10cf3246aeaa21d5f52318a129ee2b8f74c1c5a7735127cf2b21a2f88b8fc8ee46145847d91fc78b101a22627962c1d52c18"}, @RTA_PREF={0x5, 0x14, 0x1b}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x10, 0x16, r5}}, @RTA_OIF={0x8, 0x4, r11}, @RTA_MULTIPATH={0xc, 0x9, {0xef1, 0x24, 0x6}}]}, 0x134}}, 0x20000810) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRES64=r9, @ANYRES32=r11, @ANYRES32=r4], 0x7c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d40)={@fallback, 0xffffffffffffffff, 0x15}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r12, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m31.036582539s ago: executing program 2 (id=2974): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x9, 0x4) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r1, 0x600, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x20000001) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000500)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbb8}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81b7}, @generic={0x51, 0x2, 0x1, 0x5}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x3e, &(0x7f0000000640)=""/62, 0x100, 0x48, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0x6, 0x401}, 0x10, r3, 0x0, 0x4, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x5, 0x1, 0xf, 0x9}, {0x0, 0x5, 0x2, 0xb}, {0x0, 0x3, 0x7, 0x4}, {0x0, 0x4, 0x8, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2181100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x170, 0xa, 0xa, 0xe00, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x120, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3c8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x620}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x44804) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ec0)=0xffffffffffffffff, 0x4) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000f40)=@generic={&(0x7f0000000f00)='./file0\x00'}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000f80)={r5, r6, 0x0, r4}, 0x10) recvmsg$unix(r0, &(0x7f0000004380)={&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000004280)=[{&(0x7f0000001040)=""/216, 0xd8}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/71, 0x47}, {&(0x7f00000021c0)=""/181, 0xb5}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x6, &(0x7f0000004300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x2) unshare(0x0) (async) recvmmsg(r8, &(0x7f0000005b00)=[{{&(0x7f00000043c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004440)=""/19, 0x13}], 0x1, &(0x7f00000044c0)=""/84, 0x54}, 0x4}, {{&(0x7f0000004540)=@can, 0x80, &(0x7f0000004600)=[{&(0x7f00000045c0)=""/44, 0x2c}], 0x1, &(0x7f0000004640)=""/75, 0x4b}, 0xe44f}, {{&(0x7f00000046c0)=@qipcrtr, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004740)=""/156, 0x9c}, {&(0x7f0000004800)=""/75, 0x4b}, {&(0x7f0000004880)=""/196, 0xc4}, {&(0x7f0000004980)=""/16, 0x10}, {&(0x7f00000049c0)=""/224, 0xe0}, {&(0x7f0000004ac0)=""/184, 0xb8}, {&(0x7f0000004b80)=""/148, 0x94}], 0x7}, 0x9}, {{&(0x7f0000004cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004d40)=""/65, 0x41}, {&(0x7f0000004dc0)=""/137, 0x89}, {&(0x7f0000004e80)=""/84, 0x54}, {&(0x7f0000004f00)=""/219, 0xdb}, {&(0x7f0000005000)=""/196, 0xc4}, {&(0x7f0000005100)=""/92, 0x5c}, {&(0x7f0000005180)=""/14, 0xe}, {&(0x7f00000051c0)=""/243, 0xf3}, {&(0x7f00000052c0)=""/65, 0x41}], 0x9, &(0x7f0000005400)=""/179, 0xb3}}, {{&(0x7f00000054c0)=@tipc, 0x80, &(0x7f0000005a00)=[{&(0x7f0000005540)=""/189, 0xbd}, {&(0x7f0000005600)=""/37, 0x25}, {&(0x7f0000005640)=""/146, 0x92}, {&(0x7f0000005700)=""/60, 0x3c}, {&(0x7f0000005740)=""/189, 0xbd}, {&(0x7f0000005800)=""/240, 0xf0}, {&(0x7f0000005900)=""/245, 0xf5}], 0x7, &(0x7f0000005a80)=""/75, 0x4b}, 0xc}], 0x5, 0x40002001, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000005cc0)={'ip6gre0\x00', &(0x7f0000005c40)={'syztnl1\x00', r2, 0x2f, 0x8, 0x2, 0x8000, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x78d9, 0x20, 0xaa, 0x100000}}) sendmsg$nl_route_sched(r11, &(0x7f0000005e00)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)=@gettaction={0x60, 0x32, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a80}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0xc4) r14 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r14, &(0x7f0000005e40)={{0x3, @default}, [@null, @rose, @bcast, @remote, @rose, @bcast, @null, @rose]}, &(0x7f0000005ec0)=0x48) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000005f00)={0x0, r13}, 0x8) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000005f40)={0x0}, &(0x7f0000005f80)=0xc) syz_open_procfs$namespace(r15, &(0x7f0000005fc0)='ns/pid_for_children\x00') (async) r16 = accept$ax25(r8, 0x0, &(0x7f0000006000)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000006040)={{r16}, 0x0, 0x10, @unused=[0xe, 0x1, 0x8, 0x6], @subvolid=0x1}) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000007040)="86d77077e67a1d338f399ea203cf7c95", 0x10) r17 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000007080), r17) setsockopt$MRT_DEL_VIF(r9, 0x0, 0xcb, &(0x7f00000070c0)={0xffffffffffffffff, 0x1, 0x25, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x26}, @multicast1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000007140)={&(0x7f0000007100)='rpcgss_bad_seqno\x00', r6, 0x0, 0xb4}, 0x18) 2m30.744744886s ago: executing program 2 (id=2975): r0 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r6, 0x0, 0xffffffff004) close(0x4) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000006800010003001000fdffff7f00000000000000000c000200010000001500000024000c8008000300ff7fffff08000200d917000006000100050000000800020001040000060003000102"], 0x50}, 0x1, 0x0, 0x0, 0xc018}, 0x4000080) sendto$inet6(r0, 0x0, 0x0, 0x4048885, &(0x7f0000000000)={0xa, 0x4e23, 0x62, @remote, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m30.115213766s ago: executing program 1 (id=2979): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m29.818169499s ago: executing program 1 (id=2981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async) setsockopt(r10, 0x84, 0x7f, 0x0, 0x0) (async, rerun: 64) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000eaffffff00"/24], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0xffff, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m29.720441912s ago: executing program 2 (id=2983): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001000010000004bca5e67c81f417f000a2c000000050a03000000000000000000070000000c000240000000de045c34947d00000000010900010073797a300000000014000000020a0300000000000000000002150003140000001100010000000000000000000000200a"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000573166d60000000000000000"], 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000070a0000b700000000000000950f00000000000078e533f59f20b3db08fa1ee49d33530b0488188a816c45039610df749d64f0187cedbfe6947f621b42775883432f7367f5a71cb0fcf24229879f620ca252fc321918f160bd16"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x400, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x20000809) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x20}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) 2m12.461521354s ago: executing program 32 (id=2981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async) setsockopt(r10, 0x84, 0x7f, 0x0, 0x0) (async, rerun: 64) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000eaffffff00"/24], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0xffff, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m10.861585901s ago: executing program 33 (id=2983): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001000010000004bca5e67c81f417f000a2c000000050a03000000000000000000070000000c000240000000de045c34947d00000000010900010073797a300000000014000000020a0300000000000000000002150003140000001100010000000000000000000000200a"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000573166d60000000000000000"], 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000070a0000b700000000000000950f00000000000078e533f59f20b3db08fa1ee49d33530b0488188a816c45039610df749d64f0187cedbfe6947f621b42775883432f7367f5a71cb0fcf24229879f620ca252fc321918f160bd16"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x400, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x20000809) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x20}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) 1m40.616937797s ago: executing program 3 (id=3001): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) (async) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x5452, &(0x7f0000000100)) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x60, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x805}, 0x8800) (async) r6 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40914) recvmmsg$unix(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}], 0x1}}], 0x1, 0x10101, 0x0) (async) close(r0) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r8, r7}, 0xc) (async) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000002001000000010000000bf2b040000000d0000000000000100000000050010030030"], &(0x7f0000000080)=""/68, 0x2c, 0x44, 0x1, 0x1, 0x10000, @value=r9}, 0x28) 1m34.501449386s ago: executing program 3 (id=3004): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f9c4d6bfa8c2a0c2e1abf3f3ee6a0b3", 0x10}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x2000c085) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000058f3c9b78aeb15a7d9be632eb9cc0000000000001c0012bd5e4b8bfd870001006772650010f214217ea07f7a7173000280040012eee44b8696fff21354b132a6c71785fda48b25ea405bbbadb8ffa19785f8bab3725d8585fa8faf81bd32e0c2bb6d5cf50057361b3ece101fe8c23f3042a2fbf1caa6b6dedea18ed4f2b9e4382465c946c4cbe760791932d691bf869aa88c412b4a9a31dbbe7c88128e2369414a40cc311d4ef9ea01b5650485e6a9135effa9b12a4b29d7aba61b957dd4d572ab4b70ed5f", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x160, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4008}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x37a707ee}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m24.72165054s ago: executing program 3 (id=3007): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70b92e, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc0000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x4014) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 1m18.041623651s ago: executing program 3 (id=3009): socket(0xa, 0x5, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x20, 0x4, 0x25dfdbfe, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f00000007c0), 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket$kcm(0x2, 0x1, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r8}) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 32) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) recvmmsg$unix(r7, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000600)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) (rerun: 64) 1m16.971682211s ago: executing program 0 (id=3010): r0 = socket(0x11, 0x800, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) (async) socket(0x1, 0x80802, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2b, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000180), 0x4) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) write$bt_hci(r2, 0x0, 0xb) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1m9.733413145s ago: executing program 3 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xad34}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x9253696dcbfa8c3c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40005) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x58, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x30, 0x6, "62b094d8eebaf062cf85cbd52862ad480e8539099f7ed5974530e7595723c61c73035cbda344fc70b57d0dee"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x108}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) 1m7.412223028s ago: executing program 0 (id=3013): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@ipv6_newnexthop={0xf8, 0x68, 0x8, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x4, 0x0, 0x9}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2}, @NHA_OIF={0x8}, @NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_OIF={0x8}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x7}, {0x2, 0xda}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0xf8}, {0x5, 0x64}]}, @NHA_GROUP={0x54, 0x2, [{0x1, 0xf7}, {0x2, 0x5}, {}, {0x1, 0x2}, {0x2}, {0x2, 0x9}, {0x2, 0x5a}, {0x0, 0x40}, {}, {0x0, 0x1a}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x2}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x200140d8}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, 0x0, 0x0) close(0xffffffffffffffff) close(r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x25}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xff}]}}}]}, 0x50}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10062dbd7000fbdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100a748396f5505f6c4652b4864b70156ec9fd12743f15669ccc84742ac8e", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4c001}, 0x801) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r18 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r18, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) 1m7.30102534s ago: executing program 4 (id=3014): syz_emit_ethernet(0xfc0, &(0x7f0000000cc0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xf8a, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x8, "7fa117870e3c5193b7c790fbe7846273c2719fd2e9b3f3db613ff25418c7648b0952025b93f2570bdd348feb594ce096988b5a19cc0d46938c89f2c92660e4"}, {0x2, 0x0, 'io'}, {0x22, 0x1e7, "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"}]}}}}}}, 0x0) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000000)=0xffffffff, 0x4) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 1m2.233644827s ago: executing program 3 (id=3015): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000240)) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x90) socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x80047441, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x809, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x40810, 0xa03}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000, 0x6}}]}]}]}, 0x34}}, 0x4000880) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a320000000009000100"], 0xec}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001002cbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000440016804000018014"], 0x84}}, 0x0) 58.930919s ago: executing program 4 (id=3016): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 57.290785558s ago: executing program 0 (id=3017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6352e924f269c3600000000000000000030003040500010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x11, &(0x7f0000000380)="d6b8", 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x54, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @local, @mcast2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2f}, @hao={0xc9, 0x10, @mcast1}]}], "2b58959e"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a010400100000000000000a0000050900d43c73797a3100000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000408000140000000120900020073797a32400000000401000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 45.891154414s ago: executing program 34 (id=3015): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000240)) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x90) socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x80047441, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x809, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x40810, 0xa03}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000, 0x6}}]}]}]}, 0x34}}, 0x4000880) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a320000000009000100"], 0xec}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001002cbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000440016804000018014"], 0x84}}, 0x0) 45.600844962s ago: executing program 4 (id=3019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/110, 0x6e}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = socket$inet6(0xa, 0x3, 0x7b) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r4, 0x34, 0x0, @void}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x4000050) 44.884195667s ago: executing program 0 (id=3020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r2 = accept(r1, &(0x7f0000000000)=@caif=@dgm, &(0x7f0000000100)=0x80) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000200)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x3, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'ip6erspan0\x00', {}, 0x5}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 36.509727637s ago: executing program 4 (id=3021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "183d6479dc7ffbb1", "1d7358383b26444ff53b7a25acf27894", "3ec32cc4", "0bef65dddc738a65"}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trw\nD'], 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e28, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x241, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf419ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f6700"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) 34.642880039s ago: executing program 0 (id=3022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x28, 0x0, 0x9, 0x301, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x28}}, 0x4088) getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 30.205438714s ago: executing program 0 (id=3023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x25, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) shutdown(r3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r7, r5, 0x2, 0x2}, 0x50) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b000a", 0x35}], 0x1}, 0x80) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be"], 0x0) 26.081711031s ago: executing program 4 (id=3024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000eaffffff000000003c0000000058fb2ab606795e7a16ccdf2ff7b108f3f2da8a7a87536d0d0f34058d573b15b538e496f774de5122c66820f500ed9702ba285723182f9ebb93511cf24f3cd3c328cfb1cfbd3a9a9c0f7872a6077aaff8b285393d4539ee9684a6510286b2206f233500c8c300de000631a1b0353eb33ee323c6f64300b7eb427a1469f27ad70d278192834a20e9e47f39b2cadd06d512dbcb49d542144b704d174d5384dcb1f356d58ba871cc285b5f76362b0b7986262f2439402b5eff8ae00037c81b2bdfc64a4f42de1071cfb520e9e50aa1245569a22e6960ab2700"/244, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000004c0), 0x6b, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20) r2 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000020c0), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf25000000000c0003000100000000000000080002000001000008000100f26cf794f23c471f628a4a2c4096b93672dc74d8d444d4e8272f1491ba1c36760d77a27db6a79bd689b38172d8da23ad3c97ba5c62b047e9fdacabfc0949fbf57f4b388ad679cecdd95275982b5221b69481746cdcbb4686bf97f379aab63b49e11b2e5a2c03113be0f461952e536e89db439e7621b6b00a9879af4211092500bda0fe8e3cf3cc3362737a51", @ANYRES32=0x0, @ANYBLOB="0600060002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) 17.153544165s ago: executing program 4 (id=3025): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/114, 0x27, 0x72, 0x0, 0xea}, 0x28) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x8, @val=@target_btf_id=0xffffffffffffffff}, 0x14) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000110001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000080108200000140035"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 13.310875505s ago: executing program 35 (id=3023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x25, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) shutdown(r3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r7, r5, 0x2, 0x2}, 0x50) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b000a", 0x35}], 0x1}, 0x80) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be"], 0x0) 0s ago: executing program 36 (id=3025): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/114, 0x27, 0x72, 0x0, 0xea}, 0x28) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x8, @val=@target_btf_id=0xffffffffffffffff}, 0x14) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000110001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000080108200000140035"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) kernel console output (not intermixed with test programs): [ 235.825597][T10998] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 235.849806][T10995] syzkaller0: entered promiscuous mode [ 235.855325][T10995] syzkaller0: entered allmulticast mode [ 236.161693][T11004] netlink: 'syz.3.1291': attribute type 27 has an invalid length. [ 236.169566][T11003] lo speed is unknown, defaulting to 1000 [ 236.206375][T11004] tipc: Resetting bearer [ 236.223825][T11004] tipc: Resetting bearer [ 236.266263][T11004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.329988][T11010] __nla_validate_parse: 36 callbacks suppressed [ 236.330011][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'. [ 236.388239][T11011] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 236.508013][T11012] bond5 (unregistering): Released all slaves [ 236.675312][T11011] bond5: entered promiscuous mode [ 236.705167][T11011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.735826][T11011] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 236.832443][T11012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.845474][T11012] bond5: (slave bond6): making interface the new active one [ 236.853697][T11012] bond6: entered promiscuous mode [ 236.859746][T11012] bond5: (slave bond6): Enslaving as an active interface with an up link [ 236.889262][T11012] 8021q: adding VLAN 0 to HW filter on device bond7 [ 236.898898][T11012] bond5: (slave bond7): Enslaving as a backup interface with an up link [ 236.936019][T11012] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.944655][T11012] bond5: (slave bond8): Enslaving as a backup interface with an up link [ 236.953342][T11011] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 237.061751][T11043] tipc: Failed to remove unknown binding: 66,1,1/11552:122030088/122030090 [ 237.064766][T11012] 8021q: adding VLAN 0 to HW filter on device bond9 [ 237.078971][T11043] tipc: Failed to remove unknown binding: 66,1,1/11552:122030088/122030090 [ 237.084284][T11012] bond5: (slave bond9): Enslaving as a backup interface with an up link [ 237.102855][T11011] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 237.160605][T11012] 8021q: adding VLAN 0 to HW filter on device bond10 [ 237.169480][T11012] bond5: (slave bond10): Enslaving as a backup interface with an up link [ 237.204934][T11043] bond6: entered promiscuous mode [ 238.021166][T11075] netlink: 'syz.4.1312': attribute type 7 has an invalid length. [ 238.088017][T11075] : entered promiscuous mode [ 238.131617][T11081] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 238.142845][T11082] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 238.162544][T11082] syzkaller0: entered promiscuous mode [ 238.189244][T11082] syzkaller0: entered allmulticast mode [ 238.286892][T11091] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 238.309089][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 238.309098][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 238.343515][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 238.378513][T11091] bond0: (slave bond_slave_1): Releasing backup interface [ 238.386817][T11091] bond_slave_1 (unregistering): left allmulticast mode [ 238.437647][T11095] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1317'. [ 238.651978][T11107] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 238.836932][T11114] netlink: 'syz.0.1323': attribute type 83 has an invalid length. [ 238.852878][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1323'. [ 238.974003][T11118] netlink: 'syz.3.1325': attribute type 10 has an invalid length. [ 238.982002][T11118] team0: Device ipvlan1 failed to enter team mode [ 238.988452][T11118] team0: Device ipvlan1 failed to enter team mode [ 239.183752][T11122] lo speed is unknown, defaulting to 1000 [ 239.250579][T11133] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 239.486415][T11141] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1332'. [ 239.719425][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 239.758057][T11151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1336'. [ 239.768005][T11151] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1336'. [ 239.777242][T11151] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1336'. [ 239.955932][T11154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.388497][T11188] geneve4: entered promiscuous mode [ 240.837158][T11200] geneve2: entered promiscuous mode [ 240.987848][T11212] lo speed is unknown, defaulting to 1000 [ 241.410980][T11226] __nla_validate_parse: 2 callbacks suppressed [ 241.411003][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 241.500385][T11223] nbd: socks must be embedded in a SOCK_ITEM attr [ 241.520748][T11223] block nbd1: shutting down sockets [ 241.769207][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 241.953838][T11252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1358'. [ 242.385026][T11261] IPVS: set_ctl: invalid protocol: 40320 255.255.255.255:20002 [ 242.584736][T11266] netlink: 'syz.1.1366': attribute type 7 has an invalid length. [ 242.606314][T11266] netlink: 'syz.1.1366': attribute type 8 has an invalid length. [ 242.642266][T11266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1366'. [ 242.672049][T11266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1366'. [ 243.237853][T11287] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1371'. [ 243.654175][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 244.000884][T11313] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 244.613267][T11337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.043435][T11355] vlan2: entered promiscuous mode [ 245.048791][T11355] vlan2: entered allmulticast mode [ 245.066174][T11355] hsr_slave_1: entered allmulticast mode [ 245.233148][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 245.867452][T11363] lo speed is unknown, defaulting to 1000 [ 246.371425][T11353] lo speed is unknown, defaulting to 1000 [ 246.671951][T11390] netlink: 'syz.1.1391': attribute type 4 has an invalid length. [ 246.909130][T11385] lo speed is unknown, defaulting to 1000 [ 246.971602][T11396] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1392'. [ 246.995162][T11396] netem: unknown loss type 12 [ 247.003515][T11396] netem: change failed [ 247.245203][T11409] netlink: 'syz.2.1397': attribute type 8 has an invalid length. [ 247.435863][ T7736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.446256][ T7736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.453829][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 247.474621][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 247.620068][T11415] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 247.627361][T11416] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 247.774222][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 248.053712][T11426] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 248.061162][T11426] dvmrp1: linktype set to 768 [ 248.672424][T11436] lo speed is unknown, defaulting to 1000 [ 248.908720][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1408'. [ 248.994355][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1408'. [ 249.125508][T11450] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 249.142736][T11450] netlink: 'syz.3.1408': attribute type 2 has an invalid length. [ 249.238237][T11466] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.1412'. [ 249.280758][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 249.336313][T11472] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1413'. [ 249.536524][T11483] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 249.558014][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 250.147398][T11506] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 250.341679][T11523] sctp: [Deprecated]: syz.3.1423 (pid 11523) Use of int in maxseg socket option. [ 250.341679][T11523] Use struct sctp_assoc_value instead [ 250.471856][T11529] lo speed is unknown, defaulting to 1000 [ 250.749802][T11512] netlink: 'syz.3.1423': attribute type 2 has an invalid length. [ 251.799463][T11556] lo speed is unknown, defaulting to 1000 [ 251.802088][T11576] netlink: 'syz.1.1438': attribute type 83 has an invalid length. [ 252.126459][T11586] tipc: Enabling of bearer rejected, already enabled [ 252.164214][T11586] netlink: 'syz.1.1442': attribute type 9 has an invalid length. [ 252.352019][T11593] __nla_validate_parse: 7 callbacks suppressed [ 252.352041][T11593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1445'. [ 252.367941][T11593] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 252.384387][T11591] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1444'. [ 252.553948][T11597] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.636970][T11605] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1446'. [ 252.714650][T11608] netlink: 'syz.2.1449': attribute type 1 has an invalid length. [ 252.722876][T11605] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1446'. [ 252.732561][T11605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1446'. [ 252.836481][T11597] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.905870][T11609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1446'. [ 252.917052][T11609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1446'. [ 252.935824][T11609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1446'. [ 252.961538][T11610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.031890][T11622] tipc: Enabled bearer , priority 0 [ 253.059824][T11597] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.088366][T11613] syzkaller0: entered promiscuous mode [ 253.098377][T11613] syzkaller0: entered allmulticast mode [ 253.134217][T11617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.243988][T11597] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.335957][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1453'. [ 253.512324][ T7726] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.562698][ T7726] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.602618][ T7727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.654790][ T7736] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.758139][T11641] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 253.766271][T11641] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1455'. [ 253.778228][T11617] tipc: Resetting bearer [ 253.877462][T11645] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 254.030485][T11645] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.039171][T11612] tipc: Resetting bearer [ 254.059574][ T5953] tipc: Node number set to 2722466489 [ 254.137570][T11612] tipc: Disabling bearer [ 254.248952][T11645] bond7: (slave gretap2): making interface the new active one [ 254.297244][T11645] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 255.055365][T11701] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 255.097253][T11705] sctp: [Deprecated]: syz.0.1469 (pid 11705) Use of int in max_burst socket option deprecated. [ 255.097253][T11705] Use struct sctp_assoc_value instead [ 255.136178][T11704] lo speed is unknown, defaulting to 1000 [ 255.142950][T11701] nbd: socks must be embedded in a SOCK_ITEM attr [ 255.163476][T11701] block nbd1: shutting down sockets [ 255.185596][T11709] netlink: 'syz.3.1471': attribute type 21 has an invalid length. [ 255.232638][T11709] netlink: 'syz.3.1471': attribute type 4 has an invalid length. [ 255.500268][T11720] tipc: Failed to remove unknown binding: 66,1,1/3718006009:1207657564/1207657566 [ 255.576879][T11720] tipc: Failed to remove unknown binding: 66,1,1/3718006009:1207657564/1207657566 [ 255.609580][T11720] tipc: Failed to remove unknown binding: 66,1,1/3718006009:1207657564/1207657566 [ 255.944294][T11732] lo: entered allmulticast mode [ 256.019135][T11732] dvmrp8: entered allmulticast mode [ 256.125604][T11732] lo speed is unknown, defaulting to 1000 [ 256.286779][T11741] netlink: 'syz.4.1478': attribute type 2 has an invalid length. [ 256.796568][T11731] lo: left allmulticast mode [ 256.821879][T11731] dvmrp8: left allmulticast mode [ 257.477687][T11778] __nla_validate_parse: 8 callbacks suppressed [ 257.477709][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 257.620541][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 257.940304][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 257.987411][ T30] audit: type=1800 audit(1757357313.242:6): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1488" name="memory.events" dev="tmpfs" ino=1533 res=0 errno=0 [ 258.215803][T11796] lo speed is unknown, defaulting to 1000 [ 258.708290][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1492'. [ 258.756819][T11805] bridge_slave_0: left allmulticast mode [ 258.799443][T11805] bridge_slave_0: left promiscuous mode [ 258.884106][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.953574][T11805] bridge_slave_1: left allmulticast mode [ 258.961749][T11805] bridge_slave_1: left promiscuous mode [ 258.968281][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.997560][T11805] team_slave_0: left promiscuous mode [ 259.016247][T11805] team0: Port device team_slave_0 removed [ 259.023866][T11805] team_slave_1: left promiscuous mode [ 259.031616][T11805] team0: Port device team_slave_1 removed [ 259.037638][T11805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.046171][T11805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.056498][T11805] bond0: (slave gretap1): Releasing active interface [ 259.063543][T11805] gretap1: left promiscuous mode [ 259.076346][T11805] bond3: (slave ip6gretap1): Releasing backup interface [ 259.083678][T11805] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 36:22:3c:66:8a:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 259.110861][T11805] bond3: (slave veth3): Releasing backup interface [ 259.126820][T11805] bond4: (slave gretap3): Releasing active interface [ 259.144058][T11805] bond5: (slave bond6): Releasing backup interface [ 259.151219][T11805] bond5: (slave bond6): the permanent HWaddr of slave - 7e:61:4b:6e:99:83 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 259.176341][T11805] bond6: left promiscuous mode [ 259.182012][T11805] bond5: (slave bond7): making interface the new active one [ 259.189682][T11805] bond7: entered promiscuous mode [ 259.203153][T11805] bond5: (slave bond7): Releasing backup interface [ 259.210189][T11805] bond7: left promiscuous mode [ 259.215286][T11805] bond5: (slave bond8): making interface the new active one [ 259.223360][T11805] bond8: entered promiscuous mode [ 259.234873][T11805] bond5: (slave bond8): Releasing backup interface [ 259.246412][T11805] bond8: left promiscuous mode [ 259.251595][T11805] bond5: (slave bond9): making interface the new active one [ 259.259154][T11805] bond9: entered promiscuous mode [ 259.271324][T11805] bond5: (slave bond9): Releasing backup interface [ 259.278050][T11805] bond9: left promiscuous mode [ 259.283336][T11805] bond5: (slave bond10): making interface the new active one [ 259.290907][T11805] bond10: entered promiscuous mode [ 259.303137][T11805] bond5: (slave bond10): Releasing backup interface [ 259.310106][T11805] bond10: left promiscuous mode [ 259.329075][T11811] team0: Mode changed to "broadcast" [ 259.349233][T11817] vlan0: entered promiscuous mode [ 259.375602][T11821] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1494'. [ 259.456940][T11818] tipc: Enabled bearer , priority 0 [ 259.544140][T11814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1495'. [ 259.603066][T11825] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1495'. [ 259.678542][T11820] lo speed is unknown, defaulting to 1000 [ 259.739999][T11835] 8021q: VLANs not supported on wg0 [ 260.237486][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 260.362245][T11843] lo speed is unknown, defaulting to 1000 [ 260.562300][T11861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1501'. [ 260.625448][T11863] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1504'. [ 260.655739][T11863] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 261.199186][T11844] lo speed is unknown, defaulting to 1000 [ 262.197084][T11894] pim6reg1: entered promiscuous mode [ 262.208534][T11894] pim6reg1: entered allmulticast mode [ 262.331950][T11901] xfrm0: entered promiscuous mode [ 262.342313][T11901] xfrm0: entered allmulticast mode [ 262.415701][T11900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.495018][T11900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.989730][T11925] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 263.023482][T11925] netlink: 'syz.1.1522': attribute type 4 has an invalid length. [ 263.044024][T11925] __nla_validate_parse: 1 callbacks suppressed [ 263.044046][T11925] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1522'. [ 263.063019][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 263.104060][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 263.120463][T11925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.153918][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1521'. [ 263.398206][T11940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1525'. [ 263.425403][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 263.445898][T11946] ip6gre2: entered allmulticast mode [ 263.792598][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 263.809223][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'. [ 264.014434][T11961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1530'. [ 264.256747][T11972] ksmbd: Unknown IPC event: 3, ignore. [ 264.290454][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 265.142728][T12043] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 265.188475][T12043] syzkaller0: entered promiscuous mode [ 265.206858][T12043] syzkaller0: entered allmulticast mode [ 265.297190][T12081] geneve2: left promiscuous mode [ 265.302309][T12081] geneve2: left allmulticast mode [ 265.308157][T12081] bridge1: left allmulticast mode [ 265.313832][T12081] bond1: left promiscuous mode [ 265.321354][T12081] xfrm1: left promiscuous mode [ 265.332816][T12076] tipc: Enabling of bearer rejected, already enabled [ 265.470372][T12076] netem: change failed [ 266.098378][T12156] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 266.395074][T12156] bond11: entered promiscuous mode [ 266.467678][T12156] 8021q: adding VLAN 0 to HW filter on device bond11 [ 266.602067][T12158] 8021q: adding VLAN 0 to HW filter on device bond12 [ 266.617724][T12158] bond11: (slave bond12): making interface the new active one [ 266.625453][T12158] bond12: entered promiscuous mode [ 266.631617][T12158] bond11: (slave bond12): Enslaving as an active interface with an up link [ 266.640563][T12153] lo speed is unknown, defaulting to 1000 [ 266.825620][T12156] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 266.847456][T12156] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 267.132275][T12186] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 267.443652][T12173] lo speed is unknown, defaulting to 1000 [ 267.531320][T12206] netlink: 'syz.1.1570': attribute type 1 has an invalid length. [ 267.553388][T12206] netlink: 'syz.1.1570': attribute type 3 has an invalid length. [ 267.576163][T12206] NCSI netlink: No device for ifindex 246 [ 267.960269][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 268.061235][T12223] __nla_validate_parse: 7 callbacks suppressed [ 268.061255][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 268.194443][T12227] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1574'. [ 268.219201][T12227] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1574'. [ 268.592451][T12235] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 268.692048][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 268.987585][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 268.996903][T12243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1578'. [ 269.026834][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 269.077997][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1578'. [ 269.196060][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 269.372730][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1582'. [ 270.190083][T12283] lo speed is unknown, defaulting to 1000 [ 270.202748][T12289] tipc: Enabling of bearer rejected, already enabled [ 271.443835][T12326] netlink: 'syz.0.1597': attribute type 1 has an invalid length. [ 271.769501][T12344] netlink: 'syz.0.1603': attribute type 32 has an invalid length. [ 271.799893][T12344] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 271.967474][T12349] lo speed is unknown, defaulting to 1000 [ 272.011318][T12355] netlink: 'syz.4.1604': attribute type 4 has an invalid length. [ 272.196031][T12367] batadv_slave_0: mtu less than device minimum [ 272.203812][T12365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.590296][T12383] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 272.925038][T12394] netem: invalid attributes len -16 [ 273.091302][T12404] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 273.109180][T12408] __nla_validate_parse: 14 callbacks suppressed [ 273.109202][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 273.145847][T12415] netlink: 'syz.0.1619': attribute type 4 has an invalid length. [ 273.535912][T12430] tipc: Enabled bearer , priority 0 [ 273.603802][T12430] syzkaller0: entered promiscuous mode [ 273.624009][T12430] syzkaller0: entered allmulticast mode [ 273.850041][T12430] tipc: Resetting bearer [ 273.856081][T12434] lo speed is unknown, defaulting to 1000 [ 273.916658][T12427] tipc: Resetting bearer [ 274.117342][T12427] tipc: Disabling bearer [ 274.295067][T12449] netlink: 'syz.3.1630': attribute type 21 has an invalid length. [ 274.336677][T12449] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1630'. [ 274.352590][T12449] netlink: 'syz.3.1630': attribute type 4 has an invalid length. [ 274.367370][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1630'. [ 274.380467][T12449] netlink: 'syz.3.1630': attribute type 5 has an invalid length. [ 274.419407][T12449] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1630'. [ 274.676135][T12458] syzkaller0: left promiscuous mode [ 274.699854][T12458] syzkaller0: left allmulticast mode [ 274.744279][T12460] pim6reg1: entered promiscuous mode [ 274.750716][T12460] pim6reg1: entered allmulticast mode [ 274.786515][T12464] netlink: 'syz.2.1636': attribute type 10 has an invalid length. [ 274.809395][T12464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1636'. [ 275.307421][T12492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1641'. [ 276.118526][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 276.436505][T12539] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1652'. [ 276.884601][T12545] netlink: zone id is out of range [ 276.898140][T12545] netlink: zone id is out of range [ 276.947866][T12545] netlink: zone id is out of range [ 276.956876][T12545] netlink: zone id is out of range [ 276.990576][T12545] netlink: zone id is out of range [ 276.995752][T12545] netlink: zone id is out of range [ 277.004830][T12545] netlink: zone id is out of range [ 277.013168][T12545] netlink: zone id is out of range [ 277.020654][T12545] netlink: zone id is out of range [ 277.031721][T12545] netlink: zone id is out of range [ 277.105443][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 277.131905][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1656'. [ 277.186094][T12557] 0ªX¹¦À: renamed from caif0 [ 277.259604][T12557] 0ªX¹¦À: entered allmulticast mode [ 277.350803][T12565] lo speed is unknown, defaulting to 1000 [ 277.454058][T12577] tipc: Enabled bearer , priority 0 [ 277.493288][T12577] syzkaller0: entered promiscuous mode [ 277.498810][T12577] syzkaller0: entered allmulticast mode [ 277.573094][T12577] tipc: Resetting bearer [ 277.584254][T12571] tipc: Resetting bearer [ 277.663799][T12571] tipc: Disabling bearer [ 278.121561][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 278.327555][T12616] __nla_validate_parse: 3 callbacks suppressed [ 278.327575][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 278.982000][T12626] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1676'. [ 279.026339][T12637] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 279.111308][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 279.179190][T12644] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1678'. [ 279.432559][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 279.507068][T12652] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1681'. [ 279.520869][T12653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1680'. [ 279.627527][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 279.725883][T12656] netlink: 508 bytes leftover after parsing attributes in process `syz.3.1682'. [ 279.933052][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'. [ 280.376671][T12692] tipc: Enabled bearer , priority 0 [ 280.673731][T12690] tipc: Disabling bearer [ 281.162856][T12728] validate_nla: 1 callbacks suppressed [ 281.162877][T12728] netlink: 'syz.0.1702': attribute type 32 has an invalid length. [ 281.895362][T12757] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 282.152446][T12761] tipc: Enabling of bearer rejected, already enabled [ 282.370797][T12770] lo speed is unknown, defaulting to 1000 [ 282.718995][T12790] net_ratelimit: 330 callbacks suppressed [ 282.719018][T12790] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 283.078691][T12799] lo speed is unknown, defaulting to 1000 [ 284.115923][T12829] __nla_validate_parse: 12 callbacks suppressed [ 284.115947][T12829] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1727'. [ 284.201722][T12829] ..0·: renamed from hsr0 [ 284.294809][T12829] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.329158][T12829] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.371752][T12829] ..0·: entered allmulticast mode [ 284.383522][T12829] hsr_slave_0: entered allmulticast mode [ 284.389213][T12829] hsr_slave_1: entered allmulticast mode [ 284.401848][T12829] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 284.605848][T12819] delete_channel: no stack [ 284.668066][T12843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1732'. [ 284.751703][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 284.946540][T12853] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1734'. [ 285.040065][T12858] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1738'. [ 285.054684][T12861] netlink: 'syz.0.1739': attribute type 9 has an invalid length. [ 285.340583][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1743'. [ 285.388852][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1742'. [ 285.401596][T12874] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1743'. [ 285.430124][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 285.718754][ T7729] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.737674][ T7729] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.779839][ T7729] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.803942][ T7729] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.908774][T12894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1751'. [ 286.120800][T12908] lo speed is unknown, defaulting to 1000 [ 286.185557][T12911] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 286.346863][T12922] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 286.383464][T12923] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 286.451603][T12922] sctp: [Deprecated]: syz.0.1759 (pid 12922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.451603][T12922] Use struct sctp_sack_info instead [ 286.971820][T12945] lo speed is unknown, defaulting to 1000 [ 287.084641][T12954] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 287.098059][T12954] team0: Port device geneve0 added [ 287.120294][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.136618][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.192294][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.215087][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.566620][T12947] lo speed is unknown, defaulting to 1000 [ 288.442065][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.474670][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.093709][T13015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.491150][ T30] audit: type=1800 audit(1757357344.732:7): pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1786" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1870 res=0 errno=0 [ 289.565160][T13041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.815523][T13050] sctp: [Deprecated]: syz.1.1789 (pid 13050) Use of int in max_burst socket option. [ 289.815523][T13050] Use struct sctp_assoc_value instead [ 289.918124][T13052] __nla_validate_parse: 8 callbacks suppressed [ 289.918146][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1790'. [ 289.956994][T13055] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.120185][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 290.164951][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 290.222333][T13062] macvlan0: mtu less than device minimum [ 290.399974][T13071] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1795'. [ 290.664072][T13068] lo speed is unknown, defaulting to 1000 [ 290.789677][T13085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1798'. [ 291.164432][T13097] netlink: 'syz.1.1801': attribute type 3 has an invalid length. [ 291.178833][T13094] netlink: 'syz.0.1800': attribute type 3 has an invalid length. [ 291.201258][T13097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1801'. [ 291.740311][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 291.760480][T13112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1807'. [ 292.413053][T13157] delete_channel: no stack [ 293.120197][T13198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.159738][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 293.783388][T13215] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1837'. [ 293.895915][T13222] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 294.052934][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.067611][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.177130][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 294.264790][T13236] netlink: 'syz.2.1844': attribute type 2 has an invalid length. [ 294.403301][T13248] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 294.449212][T13248] bond7: (slave gretap2): making interface the new active one [ 294.460655][T13248] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 294.500706][T13248] vlan2: entered allmulticast mode [ 294.515271][T13248] bond7: entered allmulticast mode [ 294.526681][T13248] gretap2: entered allmulticast mode [ 294.535190][T13248] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 294.924832][T13261] syzkaller0: entered promiscuous mode [ 294.941759][T13261] syzkaller0: entered allmulticast mode [ 295.015384][T13277] __nla_validate_parse: 1 callbacks suppressed [ 295.015403][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'. [ 295.316422][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 297.265046][T13277] syzkaller0: entered promiscuous mode [ 297.271266][T13277] macsec0: entered promiscuous mode [ 297.277566][T13277] batman_adv: batadv0: Adding interface: macsec0 [ 297.284492][T13277] batman_adv: batadv0: The MTU of interface macsec0 is too small (267) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.310548][T13277] batman_adv: batadv0: Interface activated: macsec0 [ 297.477080][T13291] lo speed is unknown, defaulting to 1000 [ 297.763659][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 297.804811][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'. [ 298.209934][T13331] lo speed is unknown, defaulting to 1000 [ 298.562801][T13353] tipc: Enabling of bearer rejected, already enabled [ 298.593807][T13352] syzkaller0: entered allmulticast mode [ 299.095027][T13346] lo speed is unknown, defaulting to 1000 [ 299.167344][T13371] unsupported nla_type 52263 [ 299.530879][T13367] lo speed is unknown, defaulting to 1000 [ 300.313445][T13387] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 300.680851][T13397] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1883'. [ 301.289425][T13410] @0Ù: renamed from bond_slave_1 [ 301.365795][T13413] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1888'. [ 301.466947][T13412] lo speed is unknown, defaulting to 1000 [ 301.491252][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1890'. [ 301.864706][T13438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1896'. [ 302.126351][ T30] audit: type=1800 audit(1757357357.372:8): pid=13428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1892" name="memory.events" dev="tmpfs" ino=1902 res=0 errno=0 [ 302.490603][T13459] sctp: [Deprecated]: syz.2.1903 (pid 13459) Use of int in max_burst socket option. [ 302.490603][T13459] Use struct sctp_assoc_value instead [ 302.849528][T13476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1909'. [ 302.922505][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 303.003070][T13478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1911'. [ 303.036474][T13476] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 303.046098][T13489] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1913'. [ 303.063996][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 303.067702][T13486] lo speed is unknown, defaulting to 1000 [ 303.073371][T13489] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 303.105220][T13489] IPVS: stopping master sync thread 13493 ... [ 303.116688][T13493] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 303.180799][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1913'. [ 303.313959][T13498] syzkaller1: entered promiscuous mode [ 303.328093][T13498] syzkaller1: entered allmulticast mode [ 303.383423][T13504] netlink: 'syz.0.1917': attribute type 5 has an invalid length. [ 303.443869][T13508] netlink: 'syz.4.1915': attribute type 13 has an invalid length. [ 303.626032][T13498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.636232][T13498] bond_slave_0: left allmulticast mode [ 303.645549][T13498] bond0 (unregistering): Released all slaves [ 304.034623][T13509] lo speed is unknown, defaulting to 1000 [ 304.465139][T13524] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 304.513959][T13525] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 304.566511][T13522] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 305.778186][T13565] __nla_validate_parse: 6 callbacks suppressed [ 305.778206][T13565] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1932'. [ 305.778558][T13564] netlink: 'syz.2.1931': attribute type 4 has an invalid length. [ 306.040188][T13577] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1937'. [ 306.189722][T13589] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1941'. [ 306.389748][T13590] lo speed is unknown, defaulting to 1000 [ 306.466334][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 306.685500][T13623] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1950'. [ 306.770961][T13621] syzkaller0: entered promiscuous mode [ 306.808262][T13621] syzkaller0: entered allmulticast mode [ 306.942417][T13626] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 306.981758][T13593] lo speed is unknown, defaulting to 1000 [ 307.167843][T13645] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 307.284762][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 307.299406][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 307.367401][T13643] netlink: 'syz.3.1956': attribute type 4 has an invalid length. [ 307.505486][T13660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1960'. [ 307.578411][T13646] smc: removing ib device syz0 [ 308.832900][T13685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1967'. [ 308.848255][T13685] nft_compat: unsupported protocol 5 [ 308.877032][T13685] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 308.952939][T13685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.355285][T13700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1969'. [ 309.364216][T13688] bond0: (slave geneve3): making interface the new active one [ 309.394832][T13688] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 310.816968][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 310.860738][T13742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1980'. [ 311.041431][T13750] netlink: 'syz.2.1982': attribute type 15 has an invalid length. [ 312.117652][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 312.205691][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1997'. [ 312.729670][T13830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2001'. [ 312.751223][T13831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2001'. [ 313.018188][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 313.499574][T13870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2012'. [ 313.585471][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'. [ 313.658053][T13878] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 313.681842][T13878] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 313.819557][T13890] netlink: 'syz.2.2018': attribute type 9 has an invalid length. [ 313.845507][T13890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2018'. [ 314.116107][T13905] veth1: entered promiscuous mode [ 314.161649][T13905] netlink: 'syz.4.2022': attribute type 8 has an invalid length. [ 314.199203][T13905] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 314.383713][T13928] netlink: 'syz.4.2027': attribute type 3 has an invalid length. [ 314.486045][T13939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.536338][T13939] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 314.586893][T13939] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.124513][T13965] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 315.166934][T13965] bond9: entered promiscuous mode [ 315.178607][T13965] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.236793][T13962] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 315.274305][T13975] netlink: 'syz.2.2039': attribute type 7 has an invalid length. [ 315.933436][T14011] netlink: 'syz.4.2049': attribute type 6 has an invalid length. [ 315.950372][T14011] __nla_validate_parse: 17 callbacks suppressed [ 315.950394][T14011] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2049'. [ 316.170484][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 316.560287][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2061'. [ 316.641840][ T7727] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 316.827095][T14074] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 316.837600][T14074] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2065'. [ 317.044529][T14082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2066'. [ 317.172884][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'. [ 317.398610][T14102] netlink: 'syz.2.2069': attribute type 1 has an invalid length. [ 317.432097][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2069'. [ 318.095044][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 318.368811][T14136] netlink: 'syz.4.2080': attribute type 1 has an invalid length. [ 318.397559][T14136] netlink: 'syz.4.2080': attribute type 3 has an invalid length. [ 318.402224][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'. [ 318.426935][T14136] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2080'. [ 319.015296][T14162] netlink: 'syz.0.2085': attribute type 10 has an invalid length. [ 319.177588][T14173] netlink: 'syz.2.2088': attribute type 83 has an invalid length. [ 319.518593][T14187] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 319.619416][T14194] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 319.667373][T14194] netlink: 'syz.2.2096': attribute type 64 has an invalid length. [ 319.844856][T14212] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 321.048272][T14273] __nla_validate_parse: 6 callbacks suppressed [ 321.048292][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2118'. [ 321.066182][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2118'. [ 321.108047][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 321.132874][T14281] netlink: 'syz.1.2118': attribute type 13 has an invalid length. [ 321.136343][T14282] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 321.151914][T14281] netlink: 'syz.1.2118': attribute type 17 has an invalid length. [ 321.223727][T14284] ..0·: left allmulticast mode [ 321.236589][T14284] hsr_slave_0: left allmulticast mode [ 321.253439][T14284] hsr_slave_1: left allmulticast mode [ 321.370675][T14284] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 321.435176][ T6628] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.469841][ T7727] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.493945][ T7727] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.527738][ T7727] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.987695][T14306] tap0: tun_chr_ioctl cmd 1074025680 [ 321.996014][T14306] tipc: Enabled bearer , priority 0 [ 322.005211][T14306] D: renamed from syzkaller0 [ 322.020619][T14306] tipc: Disabling bearer [ 322.091598][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 322.501401][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'. [ 322.884605][T14332] 8021q: adding VLAN 0 to HW filter on device bond10 [ 322.895238][T14332] team0: Port device bond10 added [ 322.909695][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 323.114597][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2136'. [ 323.237937][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2138'. [ 323.261675][T14352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2138'. [ 323.301259][T14356] netlink: 'syz.1.2137': attribute type 10 has an invalid length. [ 323.309682][T14356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2137'. [ 323.337482][T14353] bond6: (slave veth3): Releasing backup interface [ 323.349945][T14353] bond7: (slave gretap2): Releasing active interface [ 323.363302][T14353] batman_adv: batadv0: Interface deactivated: macsec0 [ 323.370653][T14353] batman_adv: batadv0: Removing interface: macsec0 [ 323.383884][T14353] team0: Port device bond10 removed [ 323.401506][T14352] geneve4: entered promiscuous mode [ 323.417982][T14356] batman_adv: batadv0: Adding interface: virt_wifi0 [ 323.434594][T14356] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.466678][T14356] batman_adv: batadv0: Interface activated: virt_wifi0 [ 323.770508][T14374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 323.824961][T14379] 8021q: VLANs not supported on sit0 [ 324.744351][T14415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.755035][T14415] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.774430][T14415] 0ªX¹¦À: left allmulticast mode [ 324.786284][T14415] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 325.564394][T14454] netlink: 'syz.4.2164': attribute type 12 has an invalid length. [ 326.340553][T14469] __nla_validate_parse: 23 callbacks suppressed [ 326.340578][T14469] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2169'. [ 326.404915][T14466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2168'. [ 326.794949][T14498] lo speed is unknown, defaulting to 1000 [ 326.815698][T14498] lo speed is unknown, defaulting to 1000 [ 326.836555][T14498] lo speed is unknown, defaulting to 1000 [ 326.911888][T14498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 326.925189][T14496] lo speed is unknown, defaulting to 1000 [ 327.075262][T14498] lo speed is unknown, defaulting to 1000 [ 327.101894][T14498] lo speed is unknown, defaulting to 1000 [ 327.127458][T14498] lo speed is unknown, defaulting to 1000 [ 327.150353][T14503] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 327.176427][T14498] lo speed is unknown, defaulting to 1000 [ 327.210742][T14503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2175'. [ 327.287058][T14503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2175'. [ 327.345373][T14498] lo speed is unknown, defaulting to 1000 [ 327.672858][T14519] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 327.729895][T14519] vlan0: entered promiscuous mode [ 327.753389][T14519] bridge0: entered promiscuous mode [ 327.960618][T14533] veth0_to_bond: entered allmulticast mode [ 327.969691][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 328.125962][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'. [ 328.221640][T14538] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2186'. [ 328.677720][T14561] IPv6: sit4: Disabled Multicast RS [ 328.701058][T14559] lo speed is unknown, defaulting to 1000 [ 328.720974][T14561] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 328.751794][T14561] netlink: 'syz.1.2191': attribute type 4 has an invalid length. [ 328.786184][T14568] netlink: 'syz.2.2192': attribute type 2 has an invalid length. [ 329.059988][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'. [ 329.682530][T14604] lo speed is unknown, defaulting to 1000 [ 329.830348][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 330.336575][T14613] syz_tun (unregistering): left allmulticast mode [ 330.373803][T14613] team0: Port device macvlan2 removed [ 330.428923][T14626] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 330.436156][T14627] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2205'. [ 330.457035][T14627] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 330.588163][T14629] smc: net device bond0 applied user defined pnetid SYZ [ 331.145358][T14643] lo speed is unknown, defaulting to 1000 [ 331.284221][T14647] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 331.563307][T14656] macsec0: entered promiscuous mode [ 331.587939][T14660] __nla_validate_parse: 3 callbacks suppressed [ 331.587962][T14660] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2215'. [ 331.590078][T14656] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 331.633182][T14656] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 333.197209][T14686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2221'. [ 335.295925][T14570] Set syz1 is full, maxelem 65536 reached [ 335.401107][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 335.402095][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 336.255962][ T7738] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 336.335204][T14719] erspan0: entered promiscuous mode [ 336.362463][T14713] lo speed is unknown, defaulting to 1000 [ 336.470373][T14721] pim6reg: entered allmulticast mode [ 336.500434][T14720] pim6reg: left allmulticast mode [ 336.977522][T14724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2229'. [ 337.116469][T14747] bridge5: entered allmulticast mode [ 337.132761][T14751] netlink: 'syz.4.2236': attribute type 142 has an invalid length. [ 337.165866][T14749] tipc: Enabling of bearer rejected, already enabled [ 337.197664][T14751] tipc: MTU too low for tipc bearer [ 337.212941][T14749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2235'. [ 337.261197][T14751] netlink: 'syz.4.2236': attribute type 142 has an invalid length. [ 337.357951][T14758] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 337.424138][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'. [ 337.438185][ T5925] IPVS: starting estimator thread 0... [ 337.444196][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2239'. [ 337.524893][T14765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2240'. [ 337.529604][T14762] IPVS: using max 28 ests per chain, 67200 per kthread [ 337.663494][T14778] netlink: 'syz.1.2242': attribute type 64 has an invalid length. [ 337.958826][T14788] IPVS: length: 4096 != 24 [ 338.098802][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 338.138979][T14796] netlink: 'syz.3.2247': attribute type 13 has an invalid length. [ 338.148008][T14796] netlink: 'syz.3.2247': attribute type 17 has an invalid length. [ 338.238056][T14796] tipc: Resetting bearer [ 338.255580][T14796] tipc: Resetting bearer [ 338.268741][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 338.294487][T14796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.316958][ T5932] lo speed is unknown, defaulting to 1000 [ 338.357099][T14793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.455320][T14797] lo speed is unknown, defaulting to 1000 [ 338.481069][T14803] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 338.495028][T14803] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 338.543268][T14796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.624499][T14796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.840965][T14814] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2253'. [ 339.028422][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 339.086041][T14830] IPVS: length: 163 != 8 [ 339.102430][T14828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.178885][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'. [ 339.596152][T14850] syz.1.2264 uses old SIOCAX25GETINFO [ 339.872269][T14854] lo speed is unknown, defaulting to 1000 [ 340.234722][T14872] lo speed is unknown, defaulting to 1000 [ 340.434157][T14888] netlink: 'syz.2.2276': attribute type 1 has an invalid length. [ 340.445776][T14881] lo: Caught tx_queue_len zero misconfig [ 340.476734][T14870] lo speed is unknown, defaulting to 1000 [ 340.526939][T14888] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.601168][T14892] bond8: entered promiscuous mode [ 342.359818][T14943] tunl0: Caught tx_queue_len zero misconfig [ 342.403962][T14940] bond0: (slave gretap0): Opening slave failed [ 342.716859][T14970] netlink: 'syz.0.2290': attribute type 1 has an invalid length. [ 342.733625][T14970] netlink: 'syz.0.2290': attribute type 11 has an invalid length. [ 342.763562][T14970] __nla_validate_parse: 5 callbacks suppressed [ 342.763585][T14970] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2290'. [ 343.192791][T14996] netlink: 'syz.0.2295': attribute type 14 has an invalid length. [ 343.658169][T15019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2302'. [ 343.677142][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2302'. [ 343.714437][T15014] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2300'. [ 343.855326][T15029] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 343.951696][T15042] netlink: 'syz.1.2308': attribute type 13 has an invalid length. [ 343.951729][T15032] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 343.970292][T15024] syzkaller0: entered promiscuous mode [ 343.975788][T15024] syzkaller0: entered allmulticast mode [ 343.983114][T15042] netlink: 'syz.1.2308': attribute type 17 has an invalid length. [ 344.047029][T15046] IPVS: length: 209 != 24 [ 344.066008][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 344.079602][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2309'. [ 344.092097][T15042] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 344.138889][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 344.158694][T15045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2309'. [ 344.307273][T15055] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2311'. [ 344.334540][T15058] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2310'. [ 344.386420][T15057] team0: Port device team_slave_0 removed [ 344.422825][T15062] netlink: 'syz.0.2314': attribute type 1 has an invalid length. [ 344.440982][T15057] team0: Port device team_slave_1 removed [ 344.458007][T15057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.465691][T15057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.490254][T15057] bond1: (slave batadv1): Releasing active interface [ 344.536583][T15057] bond0: (slave geneve3): Releasing active interface [ 344.737384][T15078] netlink: 'syz.0.2318': attribute type 13 has an invalid length. [ 344.748529][T15078] netlink: 'syz.0.2318': attribute type 17 has an invalid length. [ 344.848575][T15078] team0: left promiscuous mode [ 344.854540][T15078] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.862449][T15078] tipc: Resetting bearer [ 344.868412][T15078] tipc: Resetting bearer [ 344.886666][T15078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.947047][T15079] lo speed is unknown, defaulting to 1000 [ 345.025772][T15081] lo speed is unknown, defaulting to 1000 [ 345.502247][T15108] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.587141][ T7724] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.004814][T15080] infiniband !yz!: set down [ 346.034609][T15080] infiniband !yz!: added team_slave_0 [ 346.065716][T15080] !yz!: rxe_create_cq: returned err = -12 [ 346.122879][T15080] infiniband !yz!: Couldn't create ib_mad CQ [ 346.166524][T15080] infiniband !yz!: Couldn't open port 1 [ 346.266452][T15141] tipc: Resetting bearer [ 346.299022][T15080] RDS/IB: !yz!: added [ 346.305056][T15080] smc: adding ib device !yz! with port count 1 [ 346.324385][T15141] syzkaller0: left promiscuous mode [ 346.334458][T15080] smc: ib device !yz! port 1 has no pnetid [ 346.388616][T15150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.024920][T15171] lo speed is unknown, defaulting to 1000 [ 347.344423][T15177] xt_policy: neither incoming nor outgoing policy selected [ 347.670798][T15186] syzkaller1: entered promiscuous mode [ 347.691336][T15186] syzkaller1: entered allmulticast mode [ 347.835268][T15188] netlink: 'syz.1.2344': attribute type 10 has an invalid length. [ 348.176826][T15194] lo speed is unknown, defaulting to 1000 [ 348.321785][T15204] __nla_validate_parse: 13 callbacks suppressed [ 348.321805][T15204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2346'. [ 348.345514][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 348.346574][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 348.387380][T15203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.387565][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2346'. [ 348.469384][T15205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.478485][T15204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2346'. [ 348.489417][T15204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2346'. [ 348.561571][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2348'. [ 348.573780][T15203] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 348.740856][T15208] ip6tnl0: Caught tx_queue_len zero misconfig [ 349.196875][T15220] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 349.226084][T15222] netlink: 'syz.4.2353': attribute type 3 has an invalid length. [ 349.335164][T15222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.559580][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.767243][T15238] vcan0: entered promiscuous mode [ 349.796015][T15238] vcan0: entered allmulticast mode [ 349.809667][T15238] team0: Device vcan0 is up. Set it down before adding it as a team port [ 350.063865][T15246] syzkaller0: entered promiscuous mode [ 350.099529][T15246] syzkaller0: entered allmulticast mode [ 350.110138][T15247] tipc: Enabled bearer , priority 0 [ 350.180663][T15245] tipc: Resetting bearer [ 352.364382][T15245] tipc: Disabling bearer [ 353.036192][T15303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2373'. [ 353.113773][T15307] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2376'. [ 353.125152][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2376'. [ 353.210318][T15314] netlink: 'syz.0.2374': attribute type 29 has an invalid length. [ 353.345519][T15324] tipc: Enabling of bearer rejected, already enabled [ 353.374543][T15316] lo speed is unknown, defaulting to 1000 [ 353.406604][T15324] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 353.438858][T15323] lo speed is unknown, defaulting to 1000 [ 353.447944][T15324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.477209][T15328] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 353.503032][T15328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2377'. [ 353.528438][T15328] batadv0: entered promiscuous mode [ 353.540590][T15328] batadv0: entered allmulticast mode [ 353.549807][T15328] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 353.777780][T15337] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2382'. [ 353.791784][T15337] netlink: 'syz.2.2382': attribute type 1 has an invalid length. [ 353.799842][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 353.987628][T15340] netlink: 'syz.0.2383': attribute type 4 has an invalid length. [ 354.043920][T15340] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2383'. [ 354.076338][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'. [ 354.109449][T15340] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2383'. [ 354.141355][T15340] netlink: 'syz.0.2383': attribute type 3 has an invalid length. [ 354.169608][T15340] netlink: 'syz.0.2383': attribute type 2 has an invalid length. [ 354.177518][T15340] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2383'. [ 354.198336][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 354.494807][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 354.537931][T15355] pim6reg1: entered promiscuous mode [ 354.549370][T15355] pim6reg1: entered allmulticast mode [ 354.649757][T15356] lo speed is unknown, defaulting to 1000 [ 355.540322][T15360] netlink: 'syz.0.2388': attribute type 1 has an invalid length. [ 355.548120][T15360] netlink: 'syz.0.2388': attribute type 4 has an invalid length. [ 355.585392][T15360] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2388'. [ 355.611807][T15382] netlink: 'syz.2.2394': attribute type 9 has an invalid length. [ 355.885121][T15380] lo speed is unknown, defaulting to 1000 [ 356.144110][T15395] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.170760][T15393] tipc: Enabling of bearer rejected, already enabled [ 356.201035][T15393] syzkaller0: entered promiscuous mode [ 357.495261][T15433] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 357.559477][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.773657][T15441] tipc: Enabling of bearer rejected, already enabled [ 358.122496][T15456] tipc: Enabling of bearer rejected, failed to enable media [ 358.134647][T15457] tipc: Enabling of bearer rejected, failed to enable media [ 358.511729][T15473] lo speed is unknown, defaulting to 1000 [ 359.353128][T15489] __nla_validate_parse: 3 callbacks suppressed [ 359.353149][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 359.413409][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 359.454027][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 359.469571][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 359.528000][T15499] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2429'. [ 359.576356][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 359.635651][T15499] team0: Failed to send options change via netlink (err -105) [ 359.646711][T15499] team0: Mode changed to "loadbalance" [ 360.001969][T15517] bridge0: entered allmulticast mode [ 360.019032][T15523] syzkaller0: entered promiscuous mode [ 360.042931][T15523] syzkaller0: entered allmulticast mode [ 360.080678][T15519] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 360.102657][T15528] syzkaller0: entered promiscuous mode [ 360.109017][T15528] syzkaller0: entered allmulticast mode [ 360.252492][T15522] syzkaller0: mtu less than device minimum [ 360.330129][T15529] lo speed is unknown, defaulting to 1000 [ 360.375939][T15516] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 360.403235][T15516] macvtap0: entered allmulticast mode [ 360.429528][T15516] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 360.470543][T15516] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 360.480400][T15516] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 360.729706][T15558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2445'. [ 360.755198][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'. [ 360.911406][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 361.372735][T15559] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 361.380478][T15559] batman_adv: batadv0: Removing interface: virt_wifi0 [ 361.495682][T15561] lo speed is unknown, defaulting to 1000 [ 361.628787][T15571] validate_nla: 5 callbacks suppressed [ 361.628809][T15571] netlink: 'syz.1.2448': attribute type 20 has an invalid length. [ 362.726099][T15589] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 362.784382][T15583] lo speed is unknown, defaulting to 1000 [ 364.012861][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'. [ 364.468684][T15626] syzkaller0: entered promiscuous mode [ 364.474359][T15626] syzkaller0: entered allmulticast mode [ 364.742571][T15635] __nla_validate_parse: 4 callbacks suppressed [ 364.742593][T15635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2465'. [ 365.141056][T15648] lo speed is unknown, defaulting to 1000 [ 365.237897][T15655] nbd: must specify at least one socket [ 365.284800][T15660] tipc: Enabling of bearer rejected, failed to enable media [ 365.347364][T15661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.650202][T15666] lo speed is unknown, defaulting to 1000 [ 365.650846][T15674] netlink: 'syz.4.2476': attribute type 4 has an invalid length. [ 365.717149][T15674] netlink: 'syz.4.2476': attribute type 4 has an invalid length. [ 365.765629][T15674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2476'. [ 366.068266][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'. [ 367.161389][T15716] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2487'. [ 367.170818][T15716] netem: invalid attributes len -16 [ 367.176078][T15716] netem: change failed [ 367.255984][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2489'. [ 367.379033][T15721] netlink: 'syz.0.2490': attribute type 1 has an invalid length. [ 367.433070][T15721] 8021q: adding VLAN 0 to HW filter on device bond14 [ 367.649317][T15726] veth5: entered promiscuous mode [ 367.655454][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2492'. [ 367.683175][T15726] bond14: (slave veth5): Enslaving as an active interface with an up link [ 367.816228][T15735] _ÐZ`Ô€@: entered promiscuous mode [ 368.009034][T15742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.085262][T15745] netlink: 'syz.0.2497': attribute type 30 has an invalid length. [ 368.110531][T15746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2496'. [ 368.645263][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 368.911762][T15782] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2504'. [ 369.703039][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2509'. [ 369.915206][T15813] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.2510'. [ 370.250161][T15827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 370.300017][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 370.555833][T15844] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2522'. [ 370.811870][T15859] netlink: 'syz.1.2526': attribute type 1 has an invalid length. [ 370.843092][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 370.976979][T15866] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20003 [ 371.013196][T15870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2531'. [ 371.272894][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2535'. [ 371.355623][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2536'. [ 371.372376][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 371.479718][T15885] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 371.487836][T15885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2535'. [ 371.498958][T15885] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 371.508695][T15885] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 371.527087][T15885] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 371.554222][T15885] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 371.575440][T15885] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 371.590308][T15885] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 372.188094][T15930] tc_dump_action: action bad kind [ 372.203933][T15925] lo speed is unknown, defaulting to 1000 [ 372.217656][T15933] tc_dump_action: action bad kind [ 372.241855][T15929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.995437][T15965] bridge0: Device is already in use. [ 373.020737][T15966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.020748][T15965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.028528][T15970] geneve1: Caught tx_queue_len zero misconfig [ 373.147280][T15980] validate_nla: 93 callbacks suppressed [ 373.147299][T15980] netlink: 'syz.4.2564': attribute type 9 has an invalid length. [ 373.166115][T15980] netlink: 'syz.4.2564': attribute type 11 has an invalid length. [ 373.333331][T15990] netlink: 'syz.4.2564': attribute type 11 has an invalid length. [ 373.342634][T15985] netlink: 'syz.4.2564': attribute type 11 has an invalid length. [ 373.570333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.581727][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.862735][T16011] netlink: 'syz.3.2574': attribute type 2 has an invalid length. [ 373.881418][T16012] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 373.898208][T16012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.057373][T16011] : entered promiscuous mode [ 374.794719][ T30] audit: type=1800 audit(1757357430.052:9): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2587" name="memory.events" dev="tmpfs" ino=2763 res=0 errno=0 [ 374.851739][T16051] delete_channel: no stack [ 375.071407][T16071] __nla_validate_parse: 114 callbacks suppressed [ 375.071429][T16071] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2593'. [ 375.199727][T16075] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 375.265133][T16075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.266240][T16082] netlink: 'syz.0.2597': attribute type 10 has an invalid length. [ 375.280956][T16082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2597'. [ 375.301686][T16082] team0: Port device geneve0 added [ 375.308105][ T7728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.322138][ T7728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.332598][ T7728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.379052][ T7728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.472566][T16075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.489080][T16075] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 375.503916][T16075] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 375.555687][T16087] syzkaller0: left promiscuous mode [ 375.564004][T16087] syzkaller0: left allmulticast mode [ 375.586526][T16095] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 375.648465][T16089] bond6: (slave bridge7): Enslaving as an active interface with a down link [ 375.654010][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2601'. [ 375.701818][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.961186][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.971386][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'. [ 376.039453][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 376.274932][T16131] netlink: 'syz.4.2607': attribute type 1 has an invalid length. [ 376.508801][T16130] bond7: (slave gretap1): making interface the new active one [ 376.529098][T16130] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 376.549092][T16140] tipc: Enabling of bearer rejected, already enabled [ 376.561239][T16137] sctp: [Deprecated]: syz.1.2609 (pid 16137) Use of int in maxseg socket option. [ 376.561239][T16137] Use struct sctp_assoc_value instead [ 376.605099][T16140] bridge_slave_0: entered promiscuous mode [ 376.658415][T16140] bridge_slave_0: entered allmulticast mode [ 376.713637][T16128] lo speed is unknown, defaulting to 1000 [ 376.718760][T16135] netlink: 'syz.0.2608': attribute type 1 has an invalid length. [ 376.942825][T16135] 8021q: adding VLAN 0 to HW filter on device bond15 [ 377.007684][T16143] lo speed is unknown, defaulting to 1000 [ 377.195355][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 377.244964][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 377.523671][T16175] syzkaller0: Caught tx_queue_len zero misconfig [ 377.705546][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2617'. [ 377.735326][T16181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2617'. [ 377.797060][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'. [ 377.929413][ T3012] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.938140][ T3012] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.985470][ T3012] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.031980][ T3012] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.389116][T16209] netlink: 'syz.2.2622': attribute type 2 has an invalid length. [ 378.534071][T16216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.884898][T16227] batadv_slave_1: entered promiscuous mode [ 378.896971][T16226] batadv_slave_1: left promiscuous mode [ 378.905946][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2625'. [ 379.450626][T16244] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 379.485383][T16239] lo speed is unknown, defaulting to 1000 [ 379.506133][T16242] nbd: socks must be embedded in a SOCK_ITEM attr [ 379.814083][T16253] IPVS: Scheduler module ip_vs_ not found [ 380.031450][T16271] openvswitch: netlink: Message has 5 unknown bytes. [ 380.056778][T16264] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 380.079431][T16264] netlink: 'syz.4.2637': attribute type 2 has an invalid length. [ 380.211991][T16281] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 380.229551][T16281] __nla_validate_parse: 5 callbacks suppressed [ 380.229582][T16281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2641'. [ 380.407284][T16296] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2644'. [ 380.662651][T16300] lo: entered allmulticast mode [ 380.671982][T16299] lo: left allmulticast mode [ 380.795712][T16304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2647'. [ 380.824124][T16306] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2647'. [ 380.848131][T16304] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2647'. [ 381.053116][T16319] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2652'. [ 381.136448][T16322] sctp: [Deprecated]: syz.3.2653 (pid 16322) Use of int in max_burst socket option. [ 381.136448][T16322] Use struct sctp_assoc_value instead [ 381.343559][T16338] netlink: 'syz.0.2657': attribute type 3 has an invalid length. [ 381.648600][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2659'. [ 381.892291][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 382.014134][T16345] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.045636][T16345] bond9: (slave bond10): Enslaving as an active interface with an up link [ 382.108710][T16351] bond9 (unregistering): (slave bond10): Releasing backup interface [ 382.132242][T16351] bond9 (unregistering): Released all slaves [ 382.166990][T16368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2664'. [ 382.466758][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 382.697074][T16375] lo speed is unknown, defaulting to 1000 [ 382.988978][T16395] lo speed is unknown, defaulting to 1000 [ 385.172296][T16409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.381592][T16409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.556370][T16409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.752186][T16409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.063620][T16429] netlink: 'syz.4.2681': attribute type 21 has an invalid length. [ 386.072995][T16429] __nla_validate_parse: 3 callbacks suppressed [ 386.073012][T16429] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2681'. [ 386.114082][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.130816][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.266591][ T7728] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.295251][ T7728] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.667520][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 386.685484][T16447] netlink: 'syz.2.2687': attribute type 30 has an invalid length. [ 386.755274][ T7725] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.755367][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 386.768962][ T7725] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.784806][T16447] netlink: 'syz.2.2687': attribute type 30 has an invalid length. [ 386.798451][T16455] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.817367][ T7725] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.825876][ T7725] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.877452][T16456] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 386.887710][T16456] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 386.898684][T16456] team0: Failed to send options change via netlink (err -105) [ 386.917322][T16456] team0: Port device batadv1 added [ 386.963823][T16455] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.082326][T16455] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.198408][T16455] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.305166][ T5867] Bluetooth: hci4: link tx timeout [ 387.310607][ T5867] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 387.318370][ T5875] Bluetooth: hci4: link tx timeout [ 387.324328][ T5875] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 387.353385][T16477] netlink: 'syz.4.2693': attribute type 1 has an invalid length. [ 387.369773][T16469] can: request_module (can-proto-0) failed. [ 387.384260][T16477] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 387.488370][T16490] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 387.771708][T16503] netlink: 'syz.4.2699': attribute type 3 has an invalid length. [ 387.787648][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2699'. [ 387.815772][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2700'. [ 387.994586][T16509] netlink: 'syz.4.2701': attribute type 13 has an invalid length. [ 388.005460][T16509] netlink: 'syz.4.2701': attribute type 17 has an invalid length. [ 388.118593][T16509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.165456][T16522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.834100][T16556] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2715'. [ 388.855394][T16560] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2716'. [ 388.950731][T16557] lo speed is unknown, defaulting to 1000 [ 389.195677][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 389.400702][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 389.413042][T16577] netlink: 'syz.2.2721': attribute type 1 has an invalid length. [ 389.507415][T16577] 8021q: adding VLAN 0 to HW filter on device bond9 [ 389.799535][T16597] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 390.278285][T16608] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 390.287781][T16608] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2730'. [ 390.334870][T16612] tipc: Enabling of bearer rejected, already enabled [ 390.356709][T16611] tipc: Enabling of bearer rejected, already enabled [ 390.383412][T16612] syzkaller0: entered promiscuous mode [ 390.389064][T16612] syzkaller0: entered allmulticast mode [ 390.470789][T16624] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2735'. [ 390.600782][T16628] pim6reg: entered allmulticast mode [ 390.720883][T16631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.946908][T16637] lo speed is unknown, defaulting to 1000 [ 391.049034][ T7728] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.140615][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.237794][ T7728] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.317847][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.600338][T16660] lo speed is unknown, defaulting to 1000 [ 391.614878][T16673] __nla_validate_parse: 2 callbacks suppressed [ 391.614898][T16673] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2746'. [ 391.709854][T16671] nbd1: detected capacity change from 0 to 127 [ 391.846200][T16670] nbd2: detected capacity change from 0 to 127 [ 391.867827][ T5875] block nbd2: Receive control failed (result -32) [ 391.867880][ T5867] block nbd1: Receive control failed (result -32) [ 392.471687][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 392.521000][T16698] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 392.742873][T16710] openvswitch: netlink: Message has 24 unknown bytes. [ 392.778056][T16710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.818672][T16705] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.859701][T16705] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 392.885611][T16705] bond0: (slave ipvlan4): Error -95 calling set_mac_address [ 393.130873][T16714] veth1_to_bond: entered allmulticast mode [ 393.161393][T16713] veth1_to_bond: left allmulticast mode [ 393.682702][T16734] validate_nla: 3 callbacks suppressed [ 393.682722][T16734] netlink: 'syz.0.2765': attribute type 1 has an invalid length. [ 394.233140][T16758] netlink: 'syz.2.2770': attribute type 1 has an invalid length. [ 394.254179][T16758] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2770'. [ 394.291851][T16758] NCSI netlink: No device for ifindex 813332851 [ 394.567475][T16774] lo speed is unknown, defaulting to 1000 [ 394.633352][T16787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2773'. [ 394.751592][T16779] lo speed is unknown, defaulting to 1000 [ 394.892621][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2777'. [ 395.086196][T16797] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 395.314017][T16800] lo speed is unknown, defaulting to 1000 [ 395.470841][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2784'. [ 395.480606][T16815] netlink: 'syz.3.2784': attribute type 7 has an invalid length. [ 395.488453][T16815] netlink: 'syz.3.2784': attribute type 8 has an invalid length. [ 395.499661][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'. [ 395.628458][T16815] lo speed is unknown, defaulting to 1000 [ 396.455831][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'. [ 396.706718][T16828] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2786'. [ 397.237656][T16839] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2789'. [ 397.621181][T16854] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 397.663841][T16854] Bluetooth: MGMT ver 1.23 [ 397.694561][T16854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2793'. [ 397.714694][T16854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2793'. [ 397.861750][T16860] netlink: 'syz.2.2794': attribute type 13 has an invalid length. [ 397.882150][T16860] netlink: 'syz.2.2794': attribute type 17 has an invalid length. [ 397.922964][T16864] xfrm0: entered promiscuous mode [ 397.941632][T16864] xfrm0: entered allmulticast mode [ 398.063860][T16869] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 398.155469][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 398.285131][T16875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.318605][T16860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.338700][T16860] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.358287][T16860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.408982][T16860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.417302][T16869] 8021q: adding VLAN 0 to HW filter on device bond18 [ 398.512129][T16864] lo speed is unknown, defaulting to 1000 [ 398.525460][T16867] lo speed is unknown, defaulting to 1000 [ 398.646134][T16880] nbd: nbd1 already in use [ 398.651467][T16880] block nbd1: NBD_DISCONNECT [ 398.657173][T16880] block nbd1: Send disconnect failed -32 [ 398.663933][T16880] block nbd1: shutting down sockets [ 398.740950][T16882] nbd: device at index 1 is going down [ 398.784151][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2800'. [ 399.127173][T16894] netlink: 'syz.1.2802': attribute type 21 has an invalid length. [ 399.724609][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 399.739359][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 400.069591][T16904] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2806'. [ 400.255747][T16911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2807'. [ 400.410169][T16907] lo speed is unknown, defaulting to 1000 [ 401.126747][T16925] lo speed is unknown, defaulting to 1000 [ 401.294405][T16943] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2814'. [ 401.385992][T16941] lo speed is unknown, defaulting to 1000 [ 401.460561][T16946] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2815'. [ 401.907183][T16946] batadv0: entered promiscuous mode [ 401.913045][T16946] batadv0: entered allmulticast mode [ 401.996165][T16955] ip6gretap0: entered promiscuous mode [ 402.009527][T16955] macsec2: entered allmulticast mode [ 402.018945][T16955] ip6gretap0: entered allmulticast mode [ 402.035767][T16955] ip6gretap0: left allmulticast mode [ 402.049793][T16955] ip6gretap0: left promiscuous mode [ 403.207827][T16971] openvswitch: netlink: IP tunnel dst address not specified [ 403.271487][T16969] can: request_module (can-proto-0) failed. [ 403.649746][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 403.663463][T16980] lo speed is unknown, defaulting to 1000 [ 404.507718][T17016] lo speed is unknown, defaulting to 1000 [ 404.662452][T17025] erspan0: entered promiscuous mode [ 404.667810][T17025] macsec0: entered promiscuous mode [ 404.758252][T17025] erspan0: left promiscuous mode [ 404.950951][T17032] __nla_validate_parse: 1 callbacks suppressed [ 404.950972][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 405.009465][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 405.263495][T17039] netlink: 'syz.2.2841': attribute type 10 has an invalid length. [ 405.355210][T17039] netlink: 'syz.2.2841': attribute type 10 has an invalid length. [ 405.386947][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.397603][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.410485][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.419521][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.433795][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.694492][T17043] 8021q: adding VLAN 0 to HW filter on device bond11 [ 406.106528][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 406.168166][T17060] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2844'. [ 406.195399][T17040] lo speed is unknown, defaulting to 1000 [ 406.223391][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 406.387246][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2846'. [ 406.643253][T17077] tipc: Enabling of bearer rejected, already enabled [ 406.660572][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'. [ 407.201041][T17090] lo speed is unknown, defaulting to 1000 [ 407.481221][ T5867] Bluetooth: hci5: command tx timeout [ 407.731855][T17040] chnl_net:caif_netlink_parms(): no params data found [ 407.909865][T17089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.245726][T17040] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.285062][T17040] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.305427][T17040] bridge_slave_0: entered allmulticast mode [ 408.327734][T17040] bridge_slave_0: entered promiscuous mode [ 408.356743][T17128] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 408.398504][T17129] syzkaller0: entered promiscuous mode [ 408.411800][T17129] syzkaller0: entered allmulticast mode [ 408.448200][T17040] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.456372][T17040] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.474076][T17040] bridge_slave_1: entered allmulticast mode [ 408.495240][T17040] bridge_slave_1: entered promiscuous mode [ 408.728912][T17040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.833624][T17148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2867'. [ 408.872968][T17040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.236258][T17165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.243356][T17040] team0: Port device team_slave_0 added [ 409.301259][T17040] team0: Port device team_slave_1 added [ 409.560476][ T5867] Bluetooth: hci5: command tx timeout [ 409.594457][T17040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.617645][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.653347][T17040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.676089][T17175] netlink: 'syz.3.2875': attribute type 10 has an invalid length. [ 409.686002][T17175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2875'. [ 409.705640][T17173] 8021q: adding VLAN 0 to HW filter on device bond19 [ 409.721399][T17040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.728717][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.762072][T17040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.783276][T17177] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 409.792927][T17177] bond19: (slave macvlan5): Enslaving as a backup interface with a down link [ 409.811846][T17175] team0: Port device geneve0 added [ 409.818013][T17178] debugfs: 'netdev:nicvf0' already exists in 'phy7' [ 409.857222][T17173] team0: Port device geneve0 removed [ 409.868980][T17173] bond11: (slave bond12): Releasing backup interface [ 409.877896][T17173] bond12: left promiscuous mode [ 409.910748][T17173] bond14: (slave veth5): Releasing backup interface [ 409.917691][T17180] netlink: 'syz.3.2876': attribute type 1 has an invalid length. [ 409.948522][T17173] bond19: (slave macvlan5): Releasing backup interface [ 409.984419][ T3012] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.001924][ T3012] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.036415][ T7732] tipc: Resetting bearer [ 410.148245][T17183] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 410.161010][T17183] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 410.214751][ T3012] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.236403][T17187] macvlan3: entered promiscuous mode [ 410.242084][T17187] macvlan3: entered allmulticast mode [ 410.248439][T17187] bond8: entered promiscuous mode [ 410.260223][T17187] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 410.286813][T17187] bond8: left promiscuous mode [ 410.347396][ T3012] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.375551][T17040] hsr_slave_0: entered promiscuous mode [ 410.393311][T17040] hsr_slave_1: entered promiscuous mode [ 410.706635][T17207] tipc: Enabled bearer , priority 0 [ 410.740839][T17207] tipc: Resetting bearer [ 410.768549][T17040] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.823366][T17212] syzkaller0: entered allmulticast mode [ 410.842961][T17040] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.882783][T17212] syzkaller0 (unregistering): left allmulticast mode [ 410.971604][T17040] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.048222][T17040] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.156478][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 411.184467][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2886'. [ 411.259881][T17040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.268304][T17214] IPVS: length: 24 != 55320 [ 411.278575][T17216] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2887'. [ 411.280577][T17040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.346666][T17040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.413163][T17200] tipc: Disabling bearer [ 411.436110][T17040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.640890][ T5867] Bluetooth: hci5: command tx timeout [ 411.754104][T17040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.777737][T17040] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.796318][T17233] netlink: 'syz.2.2891': attribute type 74 has an invalid length. [ 411.907607][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.914863][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.988108][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 412.002008][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.009304][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.418167][ T30] audit: type=1107 audit(1757357467.672:10): pid=17247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ⵎú•Ñ%–.l`*AÉ<­¢Þ=|¹hnš.g—lèm¶2ðÓ@²dŠír]/™r6i.l¶.!Õá(Š£™c;Z?G)`¼#¿¦n ' [ 412.599124][T17040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.635950][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 412.659442][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2896'. [ 412.724510][T17040] veth0_vlan: entered promiscuous mode [ 412.748653][T17040] veth1_vlan: entered promiscuous mode [ 412.847296][T17040] veth0_macvtap: entered promiscuous mode [ 412.857641][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 412.889372][T17040] veth1_macvtap: entered promiscuous mode [ 412.925052][T17040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.971729][T17040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.010434][ T7732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.035846][ T7732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.054773][ T7732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.088715][ T7732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.180515][T17265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2898'. [ 413.199465][T17267] pim6reg: entered allmulticast mode [ 413.348252][ T7724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.366801][ T7724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.455129][ T7732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.489582][ T7732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.663999][T17279] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4. [ 413.683468][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2834'. [ 413.684859][T17279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2902'. [ 413.720659][ T5867] Bluetooth: hci5: command tx timeout [ 414.380232][ T7732] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.399352][ T7729] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.408127][ T7729] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.549935][ T7729] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.751869][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.764703][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.773125][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.784723][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.798363][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.905931][T17304] lo speed is unknown, defaulting to 1000 [ 415.525525][T17328] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 415.549880][T17328] macvtap1: entered allmulticast mode [ 415.559527][T17328] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 416.256466][T17348] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 416.285021][T17349] pimreg3: entered allmulticast mode [ 416.295987][T17345] syzkaller0: entered promiscuous mode [ 416.320686][T17345] syzkaller0: entered allmulticast mode [ 416.357452][T17304] chnl_net:caif_netlink_parms(): no params data found [ 416.452201][T17345] __nla_validate_parse: 7 callbacks suppressed [ 416.452297][T17345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2919'. [ 416.843656][T17304] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.881086][T17304] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.900454][T17304] bridge_slave_0: entered allmulticast mode [ 416.911486][T17304] bridge_slave_0: entered promiscuous mode [ 416.926245][ T5875] Bluetooth: hci1: command tx timeout [ 416.951296][T17304] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.958578][T17304] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.978722][T17304] bridge_slave_1: entered allmulticast mode [ 416.987639][T17304] bridge_slave_1: entered promiscuous mode [ 417.124221][T17304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.146517][T17304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.205113][T17368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2925'. [ 417.301340][T17369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2925'. [ 417.353303][T17304] team0: Port device team_slave_0 added [ 417.383283][T17304] team0: Port device team_slave_1 added [ 417.775857][T17304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.783278][T17304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.816413][T17304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.895220][T17304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.906211][T17304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.993243][T17304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.150112][T17386] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 418.168200][T17386] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2929'. [ 418.427513][T17304] hsr_slave_0: entered promiscuous mode [ 418.464407][T17304] hsr_slave_1: entered promiscuous mode [ 418.464951][T17391] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2930'. [ 418.487556][T17304] debugfs: 'hsr0' already exists in 'hsr' [ 418.499976][T17304] Cannot create hsr debugfs directory [ 418.620197][T17398] netlink: 'syz.2.2933': attribute type 39 has an invalid length. [ 418.649075][T17396] team0: Port device geneve0 removed [ 418.667687][T17396] bond4: (slave macvlan2): Releasing backup interface [ 418.684832][T17396] bond5: (slave veth5): Releasing active interface [ 418.698943][T17396] bond7: (slave gretap2): Releasing active interface [ 418.706002][T17396] gretap2: left allmulticast mode [ 418.738571][T17396] team0: Port device batadv1 removed [ 418.797532][ T3012] tipc: Resetting bearer [ 419.000446][ T5875] Bluetooth: hci1: command tx timeout [ 419.220920][T17409] 8021q: VLANs not supported on syzkaller1 [ 419.350272][T17304] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.367916][T17304] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.382621][T17420] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2941'. [ 419.466581][T17304] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.477567][T17304] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.519075][T17417] lo speed is unknown, defaulting to 1000 [ 419.605224][T17304] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.623013][T17304] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.726800][T17304] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.748979][T17304] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.138162][T17436] tipc: Resetting bearer [ 420.260748][T17436] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 420.278169][T17304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.341003][T17304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.366576][T17304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.521141][T17442] hsr0: entered promiscuous mode [ 420.543301][T17442] macsec0: entered promiscuous mode [ 420.554577][T17442] macsec0: entered allmulticast mode [ 420.560177][T17442] hsr0: entered allmulticast mode [ 420.565241][T17442] hsr_slave_0: entered allmulticast mode [ 420.571522][T17442] hsr_slave_1: entered allmulticast mode [ 420.581606][T17442] hsr0: left allmulticast mode [ 420.586425][T17442] hsr_slave_0: left allmulticast mode [ 420.592715][T17442] hsr_slave_1: left allmulticast mode [ 420.620501][T17304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.802899][T17446] lo speed is unknown, defaulting to 1000 [ 420.818289][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2950'. [ 420.842903][T17459] openvswitch: netlink: Flow actions attr not present in new flow. [ 421.079779][ T5875] Bluetooth: hci1: command tx timeout [ 421.215387][T17304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.258704][T17304] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.287859][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.295087][ T7724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.344411][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.351728][ T7724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.976732][T17486] syzkaller0: entered promiscuous mode [ 421.986793][T17488] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 422.028353][T17486] syzkaller0: entered allmulticast mode [ 422.099884][T17484] tipc: Enabled bearer , priority 0 [ 422.207779][T17481] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 422.341120][T17486] tipc: Resetting bearer [ 422.486920][T17472] tipc: Resetting bearer [ 422.616422][T17472] tipc: Disabling bearer [ 422.813972][T17304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.845228][T17483] lo speed is unknown, defaulting to 1000 [ 423.159527][ T5875] Bluetooth: hci1: command tx timeout [ 423.285364][T17519] netlink: 'syz.2.2963': attribute type 13 has an invalid length. [ 423.749538][T17304] veth0_vlan: entered promiscuous mode [ 423.812176][T17304] veth1_vlan: entered promiscuous mode [ 423.931739][T17543] dvmrp8: entered allmulticast mode [ 423.946024][T17540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2969'. [ 423.956989][T17304] veth0_macvtap: entered promiscuous mode [ 424.074364][T17304] veth1_macvtap: entered promiscuous mode [ 424.253697][T17304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.270978][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2972'. [ 424.286265][T17304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.304972][T17551] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2972'. [ 424.341287][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.381558][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.417948][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2972'. [ 424.469869][T17539] dvmrp8: left allmulticast mode [ 424.558276][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 424.628613][ T7733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.687937][ T7733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.939124][T17565] openvswitch: netlink: Missing key (keys=40, expected=80) [ 425.280793][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 425.388741][ T7724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.419671][ T7724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.566689][ T5875] block nbd3: Receive control failed (result -107) [ 425.602985][T17577] nbd3: detected capacity change from 0 to 32 [ 425.615208][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.651301][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.317849][T17594] lo speed is unknown, defaulting to 1000 [ 436.046670][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 439.576874][T17606] lo speed is unknown, defaulting to 1000 [ 443.536185][T17616] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2987'. [ 463.858768][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.168165][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.267758][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.737814][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.257178][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 466.146906][ T5872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 466.267257][ T5872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 466.528754][ T5872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 467.036272][ T5872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 467.247204][ T5872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 468.146811][ T5872] Bluetooth: hci3: command tx timeout [ 469.976460][ T5872] Bluetooth: hci6: command tx timeout [ 470.206651][ T5872] Bluetooth: hci3: command tx timeout [ 470.846506][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 472.078368][ T5867] Bluetooth: hci6: command tx timeout [ 472.287048][ T5867] Bluetooth: hci3: command tx timeout [ 474.135411][ T5867] Bluetooth: hci6: command tx timeout [ 474.376663][ T5867] Bluetooth: hci3: command tx timeout [ 476.207186][ T5867] Bluetooth: hci6: command tx timeout [ 478.348969][T17646] lo speed is unknown, defaulting to 1000 [ 479.167508][T17648] lo speed is unknown, defaulting to 1000 [ 492.928060][T17687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.147854][ T5872] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 527.555795][T17735] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 527.797708][T17735] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 528.437614][T17735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 528.717590][ T5875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 529.577192][ T5875] Bluetooth: hci5: command 0x0406 tx timeout [ 531.147966][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.305678][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.517791][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.987429][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 532.047853][ T5867] Bluetooth: hci7: command tx timeout [ 532.277338][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.117768][T17722] lo speed is unknown, defaulting to 1000 [ 534.125434][ T5867] Bluetooth: hci7: command tx timeout [ 535.007348][ T5867] Bluetooth: hci3: command tx timeout [ 536.208120][ T5867] Bluetooth: hci7: command tx timeout [ 537.086958][ T5867] Bluetooth: hci3: command tx timeout [ 538.287037][ T5872] Bluetooth: hci7: command tx timeout [ 539.177029][ T5872] Bluetooth: hci3: command tx timeout [ 539.496818][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 539.977797][ T7732] tipc: Resetting bearer [ 541.246134][ T5867] Bluetooth: hci3: command tx timeout [ 549.116462][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 549.317156][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 549.825432][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.297800][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.486152][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 553.413956][ T5872] Bluetooth: hci5: command tx timeout [ 555.496135][ T5872] Bluetooth: hci5: command tx timeout [ 556.328733][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'. [ 557.578966][ T5872] Bluetooth: hci5: command tx timeout [ 559.659051][ T5872] Bluetooth: hci5: command tx timeout [ 580.289095][ T5867] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 580.477823][ T5867] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 580.587199][ T5867] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 581.117479][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 581.636893][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 584.615843][ T5875] Bluetooth: hci8: command tx timeout [ 586.368173][ T5867] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 586.398863][ T5867] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 586.517841][ T5867] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 586.579012][ T5867] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 586.676508][ T5867] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 586.698321][ T5867] Bluetooth: hci8: command tx timeout [ 586.887319][T17735] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 587.356534][T17778] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 587.567315][T17778] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 587.716560][T17778] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 588.236285][ T5875] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 588.767599][ T5872] Bluetooth: hci8: command tx timeout [ 590.529043][T17735] Bluetooth: hci9: command tx timeout [ 590.686460][T17735] Bluetooth: hci6: command 0x0406 tx timeout [ 590.718410][T17778] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 590.847252][T17778] Bluetooth: hci8: command tx timeout [ 590.936087][T17778] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 591.155671][T17778] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 591.258147][T17735] Bluetooth: hci10: command tx timeout [ 591.739045][T17735] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 591.918341][ T7732] tipc: Disabling bearer [ 592.237612][ T5875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 592.628638][ T5872] Bluetooth: hci9: command tx timeout [ 593.328927][ T5875] Bluetooth: hci10: command tx timeout [ 594.738249][ T5875] Bluetooth: hci9: command tx timeout [ 595.018144][ T5875] Bluetooth: hci11: command tx timeout [ 595.417223][ T5875] Bluetooth: hci10: command tx timeout [ 596.776485][ T5875] Bluetooth: hci9: command tx timeout [ 597.098515][ T5875] Bluetooth: hci11: command tx timeout [ 597.495227][ T5875] Bluetooth: hci10: command tx timeout [ 599.176382][ T5875] Bluetooth: hci11: command tx timeout [ 601.266258][ T5875] Bluetooth: hci11: command tx timeout [ 603.969089][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.477594][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 604.577915][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 604.678660][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 605.186200][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 605.438445][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 607.886689][ T5872] Bluetooth: hci1: command tx timeout [ 609.975733][ T5872] Bluetooth: hci1: command tx timeout [ 611.448694][ T7732] bond0 (unregistering): Released all slaves [ 612.047845][ T5872] Bluetooth: hci1: command tx timeout [ 614.128836][ T5872] Bluetooth: hci1: command tx timeout [ 618.717497][ T7732] bond1 (unregistering): Released all slaves [ 625.987826][ T7732] bond2 (unregistering): Released all slaves [ 627.427283][ T7732] bond3 (unregistering): Released all slaves [ 636.177580][ T7732] bond4 (unregistering): Released all slaves [ 637.077155][ T7732] bond5 (unregistering): Released all slaves [ 638.166305][ T5875] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 638.349048][ T5875] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 638.426664][ T5875] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 638.658051][ T5875] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 638.868250][ T5875] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 641.579015][ T5875] Bluetooth: hci12: command tx timeout [ 642.747775][ T5872] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 642.888930][ T5872] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 642.966683][ T5872] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 643.386243][ T5872] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 643.546405][ T5872] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 643.647293][ T5872] Bluetooth: hci12: command tx timeout [ 644.925234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.725984][ T5872] Bluetooth: hci12: command tx timeout [ 646.376430][ T5872] Bluetooth: hci13: command tx timeout [ 647.128708][ T7732] bond6 (unregistering): Released all slaves [ 647.817514][ T5872] Bluetooth: hci12: command tx timeout [ 648.473496][ T5872] Bluetooth: hci13: command tx timeout [ 649.795360][ T5875] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 650.037896][ T5875] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 650.237607][ T5875] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 650.557314][ T5875] Bluetooth: hci13: command tx timeout [ 650.858465][ T5875] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 651.205613][ T5875] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 652.137302][ T5875] Bluetooth: hci7: command 0x0406 tx timeout [ 652.627893][ T5875] Bluetooth: hci13: command tx timeout [ 653.806780][T17735] Bluetooth: hci14: command tx timeout [ 655.896987][T17735] Bluetooth: hci14: command tx timeout [ 656.747004][ T5872] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 656.758454][ T7732] bond7 (unregistering): Released all slaves [ 656.887240][ T5872] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 656.947487][ T5872] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 657.256246][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 657.328280][ T5872] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 657.578413][ T5872] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 657.981368][T17735] Bluetooth: hci14: command tx timeout [ 660.048542][ T5875] Bluetooth: hci14: command tx timeout [ 660.219047][ T5875] Bluetooth: hci15: command tx timeout [ 662.288189][ T5875] Bluetooth: hci15: command tx timeout [ 664.386835][ T5875] Bluetooth: hci15: command tx timeout [ 665.197313][ T7732] bond8 (unregistering): Released all slaves [ 666.447098][ T5875] Bluetooth: hci15: command tx timeout [ 671.956931][ T7732] bond9 (unregistering): Released all slaves [ 672.666425][T17778] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 672.828289][T17778] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 672.918591][T17778] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 673.478667][T17778] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 673.786182][T17778] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 675.038191][ T31] INFO: task syz-executor:17733 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 675.256586][ T31] Not tainted syzkaller #0 [ 675.356090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.497041][ T31] task:syz-executor state:D stack:26496 pid:17733 tgid:17733 ppid:1 task_flags:0x400140 flags:0x00004004 [ 675.727175][ T31] Call Trace: [ 675.888838][ T31] [ 675.988026][ T31] __schedule+0x1798/0x4cc0 [ 676.155937][ T31] ? __lock_acquire+0xab9/0xd20 [ 676.256734][ T31] ? __lock_acquire+0xab9/0xd20 [ 676.326513][ T31] ? __pfx___schedule+0x10/0x10 [ 676.386038][ T31] ? schedule+0x91/0x360 [ 676.497154][ T31] schedule+0x165/0x360 [ 676.556940][ T5875] Bluetooth: hci16: command tx timeout [ 676.646651][ T31] schedule_preempt_disabled+0x13/0x30 [ 676.776943][ T31] __mutex_lock+0x7e6/0x1350 [ 676.925273][ T31] ? __mutex_lock+0x5bb/0x1350 [ 676.996769][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 677.057100][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 677.108802][ T31] ? __nla_parse+0x40/0x60 [ 677.238681][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 677.367571][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 677.445686][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 677.518966][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 677.626391][ T31] ? __lock_acquire+0xab9/0xd20 [ 677.686273][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 677.736754][ T5875] Bluetooth: hci5: command 0x0406 tx timeout [ 677.807463][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 677.918189][ T31] netlink_rcv_skb+0x208/0x470 [ 677.976783][ T31] ? __lock_acquire+0xab9/0xd20 [ 678.046396][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 678.255973][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.346751][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.417304][ T31] netlink_unicast+0x82f/0x9e0 [ 678.495565][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 678.547672][ T31] ? netlink_sendmsg+0x642/0xb30 [ 678.617084][ T5875] Bluetooth: hci16: command tx timeout [ 678.658689][ T31] ? skb_put+0x11b/0x210 [ 678.736923][ T31] netlink_sendmsg+0x805/0xb30 [ 678.788292][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.866523][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 678.917541][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.987049][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.105277][ T31] __sock_sendmsg+0x21c/0x270 [ 679.237002][ T31] __sys_sendto+0x3bd/0x520 [ 679.325880][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 679.438867][ T31] ? count_memcg_event_mm+0x21/0x260 [ 679.615825][ T31] ? exc_page_fault+0x76/0xf0 [ 679.667135][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 679.758256][ T31] __x64_sys_sendto+0xde/0x100 [ 679.878510][ T31] do_syscall_64+0xfa/0x3b0 [ 679.976192][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.086076][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.287739][ T31] ? clear_bhb_loop+0x60/0xb0 [ 680.377127][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.517763][ T31] RIP: 0033:0x7fd316790a7c [ 680.686058][ T5875] Bluetooth: hci16: command tx timeout [ 680.755345][ T31] RSP: 002b:00007ffd117100a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 680.997605][ T31] RAX: ffffffffffffffda RBX: 00007fd3174f4620 RCX: 00007fd316790a7c [ 681.167024][ T31] RDX: 0000000000000028 RSI: 00007fd3174f4670 RDI: 0000000000000003 [ 681.248217][ T31] RBP: 0000000000000000 R08: 00007ffd117100f4 R09: 000000000000000c [ 681.427280][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 681.529069][ T31] R13: 0000000000000000 R14: 00007fd3174f4670 R15: 0000000000000000 [ 681.858275][ T31] [ 682.008213][ T31] [ 682.008213][ T31] Showing all locks held in the system: [ 682.266517][ T31] 3 locks held by kworker/u8:0/12: [ 682.437932][ T31] 3 locks held by kworker/1:0/24: [ 682.767483][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 682.863345][ T5875] Bluetooth: hci16: command tx timeout [ 682.966354][ T31] #1: ffffc900001e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 682.982591][ T31] #2: ffffffff8f5392c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 683.008769][ T31] 1 lock held by khungtaskd/31: [ 683.034148][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 683.106370][ T31] 4 locks held by kworker/u8:8/1160: [ 683.207763][ T31] 3 locks held by kworker/u8:9/3012: [ 683.486748][ T31] #0: ffff88802fc73148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 683.677042][ T31] #1: ffffc9000b20fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 683.865620][ T31] #2: ffffffff8f5392c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 683.947556][ T31] 2 locks held by getty/5623: [ 684.166950][ T31] #0: ffff8880345ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 684.306725][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 684.435465][ T31] 3 locks held by kworker/u8:14/7725: [ 684.546318][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 684.728958][ T31] #1: ffffc90003977bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 684.908610][ T31] #2: ffffffff8f5392c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60