last executing test programs: 44.01434391s ago: executing program 0 (id=3060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x75, @rand_addr=0x64010102, 0x4e1c, 0x1, 'lblcr\x00', 0x3, 0xffffffff, 0x35}, 0xfdb0) 43.940090813s ago: executing program 0 (id=3062): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @remote}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x4, @private1}, 0x1c, &(0x7f0000002400)}}], 0x2, 0x4000001) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xfffffffd, 0xffffffffffffffff, 0x5b0f9f04, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000011c0)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4e23, 0x5, 0x4e23, 0x2, 0xa, 0x80, 0x0, 0x3b, 0x0, r4}, {0x0, 0xfffffffffffffff8, 0x326, 0xfcb7, 0x81, 0x8, 0x8, 0x6}, {0x3ff, 0x4db8, 0x0, 0xa}, 0x2, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x4d3, 0x33}, 0x2, @in=@multicast2, 0x3500, 0x4, 0x2, 0x8, 0x100, 0x7fff, 0x2}}, 0xe8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) 43.818534997s ago: executing program 0 (id=3065): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x123, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) close(r0) 43.501641521s ago: executing program 0 (id=3067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8) shutdown(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e23, 0x6, @remote, 0x2}, @in6={0xa, 0x4e23, 0x9, @empty, 0x19078b94}], 0x70) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 43.349670504s ago: executing program 0 (id=3072): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xfd, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0}}], 0x1, 0x4040880) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) r4 = socket$kcm(0x29, 0xa, 0x0) sendmsg$kcm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="18851dad93f1a40df3f1e45848062d26427a6e04ef3409b7cb10c2d580cc44bec5bd000b7787467479d80df2ac4962c73387fc7274c8ca624e181daa084ea400b51e52bb8abbb41100ee4cb565d4d8e49e7f9b162855236b8bf3", 0x5a}, {&(0x7f00000002c0)="7367a3b70887dc95fbaa08f244bfd91c801f377d383550fee9783ca8fdcf4392efc2f8b04414144fecb04b072b1a2b8e4635879d1d663d41cc805e3b59d3c4e280ea4d65671bd98fe1e5004fe0bb6bbb13da91624ba3f363b6843a95b5656a9d07bb1503705d6528742d25274f9582e682533331993a15f8451f5cf32539984f4e37d9c4167ffafbb4b7031cc4146b0e4ca9e3c3068f44d23b8b6342addc899047", 0xa1}, {&(0x7f0000000380)="a6cbc8980d91e8da1f1eabbcdd0380f1bf24af75d1d00cdb38aee492f0e5c9824b6a5ec263c7540271bf75e901b80923af610fc69828681a9b2aa8f4cd3fadb22559f3eea03d513078dc735328d2dbb97bb44964ddd23b3f6d1e872dff8f2ced39f1db46a3c1e1b5b6cc541866f0b9392697924beadcb7a57f7ea53938eede0a39fc145f13abba4015f3f452f5ebe2158c27f9fc1e6f380dfe5137bbea2258130e216fcf77bd9a61bb80964cc7db3723ef7ef3530f7fc9963cd8ee7275c4abfd112abec88ead8b9a8b353a7c869bc94a6ce12a86e1dfeaab16f076b0949fab09c52f986eaf5a10d4ee8b3bd09a2976f2ce", 0xf1}, {&(0x7f0000000480)="70b00c384e093c9f1cb4f110f503d1844f9b7ae1d52b5de4067692bc0bb55f3b976f7db1a4ac26403bd70d03dc74805decee95c36e4b7299e0a619f66207c71ba0afdf0e75db9610a8c267de3fd39ef2ccf4ca0ca03f11587dbb308eea4a6a7da48fa0878fac5a79b082ea60d629483b08eac52d24c5668e5b25d1a65c3de110505a8cf1788c4d205d25b67639310f1a925e5590b3722bef9c00216607ab71dd2a76f9d25dc0fc42f7f5a1006747b2b5b030702759b3b70c94cfc0d7af244ac4f3e2488e2ed6210ab46b9340aacc14eefd17720e5616", 0xd6}, {&(0x7f0000000580)="ad41e3326128a740ca558869cec7293e7f4b0e5e803016362ce716c6417fbde51b3dc86f027065ee0d9669a8b36ebbbae78ede0da7f9c8bc7000edf4bac5507aae173db3e86787098a312f473fc9649f1b7a021970ddd368bd96cc462692a8936e08a63df26cc57d48e2bafd069bc1d1b96a30755d037bd2a4cba423e1e9e3b98b856d6d84a6d97e303677e92acf58875aad", 0x92}], 0x5, &(0x7f00000006c0)=[{0x40, 0x114, 0x10, "74a985859f190b14c6fddb0957567325a71c11ba0045d7a45cfdb1ed754fd9664965d849f7a843fa79f1ba5b66f82e49"}, {0x88, 0x113, 0x0, "aed1142514d2af1db5b1ac9087eb6fdd45e0e1b69bc1bcfac98a6bed86d497fe5b83ef88fa6da4b9d83d17fecab5bdf28cfc502d5d70b77be046c03b53fa0b6b7b5e21bd152194d836587c4f866f39e568fdfd69df3e2f4beaded2e722896f51e93f003596f20b7e5c00fb094885073cc5e3"}, {0xd0, 0x115, 0x8466, "6581bc4fff6965e6e443f6beb35368adbdbdd726483f77ced6d6601b1f8d1dd14638d735ea47ab389a5d33732cdfdc19ad60800698ab9b7a703e08f674f9110ca3460ed5cf1a17b88cb9ee7ae78c3d0e6bcc7ca4108a33511e05e38b08a1d835494da237fc8d1b0924d8d6a1f4b7b2d2d947fe1d1141448839763bc49c0d071a31ccb3e4b45fd89d922a773ea2bb03361f094ac4a8ff338547feecb47a4c1994a2ab6e3cdb6c681938aa9abb4712c6108ba8a44cadb0e3ddeae858aa"}], 0x198}, 0x24044014) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x1, 0x800, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000a00)='syz0\x00', 0x1ff) 29.165545974s ago: executing program 2 (id=3165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x3b, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x24048800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) recvfrom(r3, 0x0, 0x0, 0x40002062, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000280)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) (async) close(r3) (async) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000500)={{0x1d, @rand_addr=0x80, 0x4e21, 0x2, 'lblcr\x00', 0x28, 0x100, 0x5d}, {@remote, 0x4e22, 0x1, 0x48, 0x9, 0x1}}, 0x44) (async) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r0}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async) sendto$inet(r5, &(0x7f00000003c0)="d3", 0x1, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xb, 0xffff}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 29.055896809s ago: executing program 2 (id=3168): r0 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r0, 0x3a, 0x0, 0x0, 0x2000005d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r2, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, r2, 0x710, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1b4}}, 0x80) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f00000004c0)=0x79, 0x4) 28.930005864s ago: executing program 2 (id=3171): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x10, 0x1, 0x2, 0x537, 0x8, 0x0, [{0x1, 0x10001, 0x4, '\x00', 0x8}, {0x8000000000000001, 0x9, 0x2, '\x00', 0x100}, {0x9, 0x1, 0x101, '\x00', 0x180}, {0xd, 0x10, 0xf308, '\x00', 0xc}, {0x9, 0xf8ad, 0xfff, '\x00', 0x485}, {0x6, 0x2, 0x4}, {0x9a8f, 0x8, 0x81, '\x00', 0x805}, {0x4c9b, 0x3, 0x7, '\x00', 0x1}]}) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getsockopt$sock_buf(r1, 0x1, 0x69, &(0x7f0000000240)=""/246, &(0x7f0000000340)=0xf6) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000380)={0x2, 0x6}) getpeername$l2tp6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x20) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000440)=0xfe00, 0x12) r2 = socket(0x26, 0x1, 0xffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000580)={'nat\x00', 0x0, 0x3, 0x6e, [0x9, 0x537d, 0x7, 0x5], 0x4, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000500)=""/110}, &(0x7f0000000600)=0x78) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000640)={0x87, @multicast2, 0x4e23, 0x0, 'lc\x00', 0x8, 0xb2a1, 0x33}, 0x2c) socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$unix(r4, &(0x7f0000000680), &(0x7f0000000700)=0x6e, 0x800) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740)={0x27, 0x0, 0x0, 0x5, 0x0, 0x4, "ca6f6fba9d15ff3de84b4315427b88792d347a0a5ba853168ba2f513b18759792a1ee0717869ffc5d7b4a740525bd346fb9f55700bc4a3ff220b1a5b347003", 0x31}, 0x60) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000980)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/148, 0x94, 0x1, &(0x7f0000000880)=""/234, 0xea}, &(0x7f00000009c0)=0x40) r5 = accept4$rose(r2, &(0x7f0000000a00)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000a40)=0x1c, 0x80000) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000a80)=0x36ee, 0x4) socket$netlink(0x10, 0x3, 0x13) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) socket$netlink(0x10, 0x3, 0x13) r6 = accept4$x25(r2, 0x0, &(0x7f0000000b40), 0x800) sendto$x25(r6, &(0x7f0000000b80)="51ccb3c14bbdfccc837d032571498222974451db8bd16076813f825392712a636046f50fbc954de61e80c63dc15f96044eff0b11a026f545cc295d7982ac089f07badef81b041d2886192a25cff241248e76ef4c99273520aa2cbfba056141828028ca3596be1483a7a4bddcbe77250801af5d204d2227b0b3efac20eae756da7ebdf8d129d95772c29eb8774797f4feb73ba72545ac828f3eedc1889e5701ba390fcf53276eddfbdb554ba959b4390e47197b442a640d9673f731c628c6c3624233bed9edc62145", 0xc8, 0x0, &(0x7f0000000c80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r4) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x120, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000f00)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 28.69784594s ago: executing program 2 (id=3173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x20000000, 0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001080010000000000000000000000008a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103164af1a400001000020000000900010073797a30000000000900030073797a3200000000140000001100017bd817b62f46c5b02841ff81b9066a7abb3a6fe7028ea477ea699ee82fce6b8489fa34047dfdf538e9abab4dcf956926853f111575d4842c493da6ecbad11fa63a8202f5590a590be967503412df0f2a0d7f00cde5c642408ddaf15d7f22453277a7d34160d0082548ed49b6741ee556f192b1f797280ed01fff98dec3c8b9e5c76990446883af4ad2571383af7322e4ebaeaf53756451ba862e7a2a1cb5048320ba62eace640d59a3e2c78d4a744f1612baceb56257a31c054a75280c04489c1c1070dac1d5f1f50af7b4e39a2f2e4c434bdec7a3e5d187"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) 28.513631642s ago: executing program 1 (id=3177): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000240)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaad177c8d2bf1e109c67e10180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c709952d4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbc4c5a5"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @broadcast, @multicast, @multicast1}}}}, &(0x7f0000000200)={0x0, 0x2, [0x14b, 0x78b, 0x5db, 0xfe]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000000300)=@generic, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/206, 0xce}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f00000017c0)=""/14, 0xe}, {&(0x7f0000001800)=""/177, 0xb1}, {&(0x7f00000018c0)=""/61, 0x3d}], 0x9}, 0x2000) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 28.456711485s ago: executing program 2 (id=3178): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)="fe3c1a842c51803538c1f992469ceb92b8680d3b6f5dce316c5d7f6549cc4c6d3795d0915210f307183257629bdd0c272b33a95a", &(0x7f0000000940), 0xfffe, r2}, 0x38) 28.337791856s ago: executing program 1 (id=3180): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x9, 0xc, 0x400}, 0x10) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0xac, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x89, 0x8, "1beed0adab4816678f65e08b748d3eca26ab533d7667269075b7aeac5dfffaec51edb9f09254e5e249ec5f52276a4cbedb7246d4a29c1a1d4c79556d2743497d7ee45e3d0dcfd96332bef6249a871d4de54cf7b541337349337277961fb846216642f5195ce70856d9bf80df7eac4682d53a429944fb3cfcd40d7ca07188983f9be4d0bf02"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)='u', 0x1, 0x24044881, &(0x7f0000000000)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) 28.337524533s ago: executing program 2 (id=3181): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, [@dev]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, 0xfffffffffffffffd) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0103, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r4, 0x4010744d, &(0x7f0000000080)=0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000380)={"140d38b1f9cb95c6fd5fd6270ed7bf24", 0x0, 0x0, {0x9, 0x2eee}, {0x6, 0x40}, 0x0, [0x5, 0x5, 0x0, 0x7, 0x8, 0x5, 0x8, 0xfff, 0x8000000000000000, 0xf, 0x4aec, 0x7, 0x200, 0x6, 0x5, 0x7]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001880)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000880)={{r6}, r7, 0xc, @unused=[0x7, 0x1f90, 0xa4c2, 0x6], @devid=r8}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'hsr0\x00', 0x2000}) 28.334785261s ago: executing program 0 (id=3078): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x5, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x19, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="4002040102cd42281ba6b07ae88058b39a122bfa409a51a1acebacfe5e87a4392a1a3b45c2e2c86525bc"], 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="6220000000f0aa00"], 0x8) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, 0x0, 0x0) shutdown(r1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r10, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}], 0x2}, 0x3}, {{&(0x7f0000000480)=@ll, 0x80, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/89, 0x7f}], 0x1}, 0xa}], 0x3, 0x10, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a0103f453621d000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000640ffffff000c000b400000000000000005140000001100010000000000000000000700000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_open_procfs$namespace(r11, 0x0) 28.228635212s ago: executing program 1 (id=3182): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) 28.109825864s ago: executing program 1 (id=3184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000c1923c3700"/20, @ANYRES32=0x0, @ANYBLOB="0000000080400300240012800b00010067726574617000001400028008000100", @ANYRES32=r2, @ANYBLOB="08000700ac141428"], 0x44}}, 0x0) 28.068377648s ago: executing program 1 (id=3186): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0xa5, @mcast2, 0x4, 0x1}, 0x20) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="bf08000004ff0f00d5f530107badf61f48d98ab8a29200e5f96a1d4a27ae95"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r6 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x2f90, 0x5, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x66, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.853704548s ago: executing program 1 (id=3188): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0xc0000) ppoll(&(0x7f0000000280)=[{r3, 0xa6}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x3]}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r7, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2e3995c5a6c547e5490d5a1fa6186e7e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "737ba583478fba41851372ab128f3f59"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x20010) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000ffdbdf251b00000008000300", @ANYRES32=r13, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000080) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r14, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r12, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 16.998365715s ago: executing program 4 (id=3359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async, rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async, rerun: 32) r2 = accept(r0, 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a8018000180140003000600bebe"], 0x38}}, 0x0) (async, rerun: 32) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x215, 0x30000}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}, 0x1, 0xba01, 0x0, 0x400c014}, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d29473e9b7b0627e7eb", 0x8a}, {&(0x7f0000000200)="72c1807bf3d8d909984e9a4f27515a7e3b6f9e4950227c0cf1c1f247279d7e47a6a51d53cdef6d3c6cddc4e670a2b1235843aa0f2459f4ea61e6f6dcd535bc999c133ac21abd", 0x46}, {&(0x7f00000002c0)="269e7a0e1b98b782853ff19fb64d658d9c850b93a9a55da438e14b5823cbd49eab0058b7b46d8c2e200ffeace4ff033ff36aa0d5056378c7c64326e53c68303c12713c419e30bf84012ba5fc074bb63c305620f1ef371f57f62f25782fd40f558e135c108dc2c6ffc7f415df", 0x6c}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4dc1eaf1444c9", 0x2f}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde01573be51b420", 0xc0}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb1333cda45077f08cfb3ec7320b20f9d099c7378fa19a09ee54c6e3a80fe453a746260ec5bf8c0fd3545b2aec6ebc1087eae2e4be5e1a449d66552c09163dd4eb0790159cacf6c5a511879685100ca1fa2b65a6fd24be7cf3a0e7a095804b0b6beb8f0c58ae49a36d94f4689985be3ab4b46efb8711cd81b875e0f46f395e47e", 0x8c}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a", 0x2f}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c"], 0x118}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="ff3bc1090cb022cb1f5f739fda1c87920cf98b55c62ac8eaaff5bb9d52d146fbccacba6a99ad07a3ca5c2f663be3a44e35edb2188e903341c2b3fdb4d18e3de32ebe92681c8699a32934ab244c7b269cafe223d44c2fd88d89cf6c2a97bf4910853b6314f6b67ed07f080ddb6b956cad30", 0x71}, {&(0x7f0000000a80)="b930449b63feaa3c018431f152a43fd318ad", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000400)="50cb9db66562d49428fea2940a5f7b26b26e19a3f98a2943d0add51c73b4aada384e3dfeac80a013c3c247418e0b6ad48d8e09e30fb0207379094daeda0d4cd9ec27a96e9f5e7ce38d9c5155769213c2daf6d0b77dbff4e5443ed163430130dd8107c763a507a5df9d363444d05bc3a8f4379c3f44", 0x75}, {&(0x7f0000000880)="a18f3f8d2fedfab5b6cc3f7fd09b35fda851e1d3b7147792f356461018fcc3b41408beb2686f29fd070338f01e7601e2aa48ec90288dfe057068d2162e4f12c93d50421d9cd6748bec1d47e9f343853fb5043033eba7a548e708f6d5077fddaee1ed7226ecc07acf3d88d018e5603317849aaa3e5902d3f6de9f6d938580dc117d7baf5b8992a217b5c554d24b5da665350510a3633b91633c55dc9bac5cb12e1c90a80d0dedac5b02335594b27e04faf9721c6d6270ba12f70d0ac0c776c34cd44667b5ff6343c98516b660ede95af42f81280d", 0xd4}, {&(0x7f0000000bc0)="218c68ff6c35a033a2cdaf986688961248fa133fbe7a757b43ea25a36834ec85bc57a65872aeb9cf454531952143e0754ac410ba6969ae48119eebe64425df2b1802c66f9b6827c4d786b9206234bd9ce0723075ee029d52dea997b430e5fc8d29dc94caa8481fe02153c31840674ad0f4844f61949e83ef1319ab7ec341182a", 0x80}, {&(0x7f0000000480)="c0ea6dde8695174ca9029fb7415a229650744da21e9072882310868c7dd5b7c9d156dc2ed0eccce130c4ec862ed745f4178125", 0x33}, {&(0x7f0000000500)="8b61713180a6ae7c72c3c19af546289f36fa73d2c294344099f3b79c2b92886f57106f57a9687210a7b8c35db4fcb163b1e48a113c468c6d4c", 0x39}, {&(0x7f0000001000)="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", 0x1f0}, {0x0}], 0x7}}], 0x3, 0x2010) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="5010e20028382b6b9accd915064df40f1eee1ffd2b7f83df6879997c12f70027a56b753950b9e9d98c3c6c5577fd166062e50d481af55ca2796bd45a47dbfad7318ca16fb0e28cce0a9141c86f71f497951d4faf9b0df7abe470439531e9b85291", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000003c00018038000400200001000a004e200000bd78fe800000000000000000000000000024050000001400020002004e24ac1e01010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) (rerun: 64) 16.944874809s ago: executing program 4 (id=3360): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042dbd7000fbdbcf25050000000c007f00080000005300000086e82cde7a1bc7a79a5c663366050fdb2481534a831c9fcc655318e4f7eee3420216a892528d23787d17b2bc2e4998274595"], 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x16}}}}}, 0x0) (rerun: 32) 16.869825679s ago: executing program 4 (id=3361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16.869133662s ago: executing program 4 (id=3362): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd70800180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="08c200009078000003039600"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000900001c00128009000100626f6e64000000000c00028005001d000000000075030b78503b240704db5f98c107c97fd0b0199e88ba45f6efb0e296ed4f324fc537"], 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010417756897f33f7559e65cbbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES8=r0], 0x50}}, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, [0x4, 0x6, 0x9, 0x4, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0x100000001, 0xfffffffffffffffa, 0x1, 0xde000000000, 0x7, 0x5, 0x8000000000000000]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000440)={r2, 0xfff9, 0x30, 0x100000001, 0x40}, &(0x7f0000000480)=0x18) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0x1, 0xc, 0x5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x700, 0x40, 0xfffffffe, 0x10001, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x66, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x8, 0x87, 0x0, 0x0, [0x0]}]}}}}}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r6, &(0x7f0000000800)="0362ee48599dfb65ce979ede59e793b8491b7d79c44b83ff04b0d96ee0dbc66c900b377532f4693da1fe1a1d54b9473d46a7dc98efacd46b2eb5efea67bf802baa46bd51341b58e8611a0a46596802350f5a82ad4c1ab9f1d823ec796e9460d1a1093940b0ed4aed0be5143070c3ac71949777baa249de1b977997f86de06d686f1fe531de3e712f463cb93881069ed35a0c7c110faab815d7b8bda7b10139ee228285d7a7318017dbd073c6d81347ada47f201f052531f443aeab3e48ba48d9a5c274", &(0x7f0000000900)=@buf="95d8472dc1867abe32283b4518cf83e6daa760a522331c275ad039cfb9071a222fad3ba52ac19b6c1823907f0e", 0x4}, 0x20) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x2b) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r7, 0x2f, 0x0, 0x0, @void, @value=r8}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r10, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r7, r9, 0x2f, 0x2008, 0x4, @value=r11}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000007c0)={&(0x7f0000000500), 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c00007cf51d8a2c3138a8a8008ff512d299d9db6011f4ff9efb63892d9719e44ee485620eeb1c8e9561e2d56fca6115e860537b0606dca1bb31c10bb07f2e2bd85e97767fe757852b31a6f5e46a3ced8b5ed8689f4cbed7086ebbf065d67c266d5426e42a0c04955b36bb92a5cba666ddfa2921e256a309e11c123ddcdce74ca2973b0276269c93131e05d5747341802e8979891aa56e009e0d0f30cdae9f995b41188f113335e15c0af335ddded367228b52e9d29d6809f2bb12c3f7c3f86313fbbbe185bca1c13a74a4e1471724f010ca0c6f7cecdcedc92291f3db91e5692c331d06678d92502eb4993c6fecd9aaad4891e1e87f66a781d1d9a27ffbeeab5b6d", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf250100000008000200060000000800040000080000050005000d0000000800030003000000200001801400040000000000000000000000000000000000050002000900000008000400ffff0000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000003000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058005001e0000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@RTM_GETMDB={0x18, 0x56, 0x300, 0x70bd2a, 0x25dfdbfc, {0x7, r3}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x4008890) 16.80010792s ago: executing program 3 (id=3363): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000081) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) 16.756505954s ago: executing program 4 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000037c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000dbcc09", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x338, 0x4d, 0x0, 0x0, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r0, 0x0, 0xffffffff000) accept4(r1, &(0x7f00000003c0)=@tipc=@name, &(0x7f0000000440)=0x80, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) close(r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) connect$unix(r5, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$alg(r3, &(0x7f0000003600)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000480)="343644f1dcc48dc39d303237891c8000ff3cab598c0467043805cd1d19a0f6ed9ff3adc09ba6dda5a994bc241d43dd33536fa32faf3b89062f12c07e02eb3eeec617f8ba67525bc2a78acdbbcadaaecbfaae8b79c4048ec76f1e833f01130000000000000000366ca33f615c27deea204c6fcdbb00d3671aedc63438810733ea0de53af699c448bae2df82f86896c9d2109568a16e510d32926373d88066fb10c3ab6bb731323e05e59d9100475323ba1e35537d18eef7fb3e94b53380d08386b49a33277cc5eb7f607c2dbf59d0296497c2c1203f98006cd40c68b5321c52848e1db4d93fde5f111d43fe868d51f5c3bf5ae8ed37f4", 0xf6}, {&(0x7f0000000580)="c537cb92b028d556028d69e960d3780d27c29725b07419050adb65105e89825e476ae7a27d6fa8f91e82f72802ca7cceab229b7c8961fadf21e62e3d676635f07baa846686cf6559bb23ce03360d9ac197ec413608a2719d0270e30d2a4e33bfa65499a87f9d36b46bc4f4600c07c41d5f6d63e0a319cf52a78f2a1b93560c2ea00706aee4b4c2f92dffbd0f3916295e13f744c8a17d62fc99d35b6c5ebceedabf912be3a3ea387e3ab755527c21779f389aa660d137a4294fa38d1bf9b43c2387424ab82b64f19691ccdb54189efd2a209d3e3ef6fcb3dc4b5e22f80fb24f954ae8178e171a2bd299a0f038", 0xec}, {&(0x7f00000007c0)="a4d9fe2161bd2881d65086da2ac6f21ab1e9b7c461d65f80270e6ea882dfdb5932e313646e2c237037381096e63b6afbc7323541b72ed57d86fc424bd422567e5049568bd048dab78d759a70174770766b9648d16fc1329dd3fd53406428658a649db7f46359c2fdb30f134841026b44f0b373b1cffaa5d3a4d58b8ce88b298ade18325800adb8a203d18464ea4dacfb72defb1441864cad8c76c4d2084ee7c6b05e504290b414c783782feafbfd002d21197b49a08b14e70637b3e4e2b5666479a87a5c0691", 0xc6}, {&(0x7f0000003840)="09b47b59e044919523789cb978ca371650b8612e5166577c85e36929a34cb161634dcdaebb328cc45e591e4572e00a991742f8e641ca942f184350ad57ea2bc03b3b0f424681802a18b17f875dcdeb2c4207b70d69cbd8b743eaff1785917db67a8b87977ada1aeee8179335f2b3d80b6a5f8d5bd2baca77f5f28e12e0926d40481d82e4d58e2b8ab9fe88a723cc69d5414fd94f77588db9691cd6236485f2f7bbea8a345628524f9b684aa48b2f19ff4079fca9157b786bb24a99614313aadd803b9cea720e87d24900d5d57056b1c086c8ad66b5ca7aa7947a779da2802bcf72a501396e83", 0xe6}, {&(0x7f00000009c0)="e3b7c85f196d82a64632210998c2c50e5ab15143fdb1ea761bc10e31e9250bcd4123dba3c72350aafd148861a562f00386583fd2481cdea57bd3f4855e95f7838b914edd6546de60215c07c5e5919fbba221c0c3d4dda36c73ae", 0x5a}, {&(0x7f0000000740)="a453c04326f3978f686577908d8b63bd21b9c5be1250bf01f63bcfcf22b1c1a6ee5ff98da32a7c77270f8356e09f3577", 0x30}], 0x6, &(0x7f00000026c0)=[@assoc={0x18, 0x117, 0x4, 0x7f}, @iv={0x80, 0x117, 0x2, 0x6a, "8d579c0e2150155f0c80a62c0b6507e03955d1d29b330489da6046d0a4a3b95b1b79a042910a77712e7dac82e5ac0166636c6910af5b366300d777c8fc66510fd65f37141042aba0f401c837c09aa720cc10be41f05ed128d4d11db028e3275bf7e0f4d72b3610ef65e9"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x90, "bb65fb25b8665805a52a9e9968cb1d0dddd45e6e08e70448f072a52922a3c7d8b3ec416a2b12975f710b46ccd8917fc7f49dfc41662fa591b68d597dfbf1e3654da02bd96c359f3571ae3b35ed6be7bfed97ab52d5df69e9121e5943cb2bfe90d7fff6f43f52ca421cee4a0885ae1ca813d8b2e10c364977309644c7a6c957ee816e4db2628fdc182cf5ceed7c3ecb68"}, @iv={0xa0, 0x117, 0x2, 0x8b, "5ccd7c95ef87358c4e897539bf29abf716a1877602044c37bcc73e3e2642d19345cbf4d50fe762345d1740eb17c8de8c80d493a2788321dc4b0ff448c61c4562a4e9be0d4b1d5a08f206ab1a0443acd4aada1557505664bd07a94cce1c49b8627d76711af3ea6ed0f453443161788a1af61847f331fe74171822744263b646762dd88b5c50049cd2c13b63"}, @assoc={0x18, 0x117, 0x4, 0xc}], 0x228}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="e36b1a494d617045033d009c278cedfae7432a9e444df735c92ba107d1b09d3232f1df87379d2f06", 0x28}], 0x1, &(0x7f0000000ac0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, {0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="bcca3ca727aae2bca3bd9bc072c28ad7ced895d831ebf876ff7c08848c8480f2a5da9930b67ea3a7b2875c6dc13a651789adaa560cc95134d4dd882b533079a88dfebcc67c0e465a307a799a7da9e019ea110e975307de874575511fd7dffa1a3b3d93ca676b1042d56b6a68bbd7567214e575963d3432ab97bfe7bc6eedc983e5235330f35814b4a998592a3a74f73272d2c109d6679e016f06313b9992957d4fb4f3e51604f612235993769628e5a464663dbb88916c2fe4a1b516d882e30890616b839beb91ff5894a4f48fd3be74baf3dbfc4ece08c9a75af1d0170dc1a7e403264744", 0xe5}, {&(0x7f0000000d40)="b60fe25601a0d01c2f126fbac0947a29a9e56bc6b7a980015daf91569f81272620915ebaa7e714558f9b1781bc8ada3b77e2d712fc2170992df6fec0c0f17d4f6fe101702a6c1791d80bab4d80d601091d5ff2bd99", 0x55}, {&(0x7f0000001f80)="db3f54758485c30f7ec97c66d41a6a8c160db2533e1f2936006d52ae34189969cae200c52390b772a40edbe7f53a413d7d165e81a391cc4e78f6e22ae2a2d7b815aa5c7c570ce8dcaaeded83bf874e9aab612920969303bb049f6e1216a5244c61cd3cb173762f55b01b8a5f9bbc2f9526951f96", 0x74}], 0x4, &(0x7f0000002040)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x30, 0x4008004}, {0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000008c0)="9421f9eac3fc2fa48d1f1af56400a99f2fe43a6e46450eb791aa4a057af903eae3c430c9257fff3073f1de1c4a1efa8f266b29d262d730f46c5baadff47562d340d6542b469c59e2c1f31dbdb5d41f444122", 0x52}, {&(0x7f0000002100)="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", 0xfa}, {&(0x7f0000002200)="2fe9d03b2c2da135ae1198b123ed4c0bcaecbbcaea919acd9be8f859083d716a90c7325b52fe3892254dce59f66202cf30cc2ac891b1a6ddcb45c09b061cc7", 0x3f}, {&(0x7f0000002240)="7f45e99bf1618ec36ed47163d85b53afcbae2ae6e1591d5f40207b222e6b769853cabed3830704f2c464c7ea015056dec892fde62abc959fba3485ef0ab8be86369aee5b1ec546ea4bbb65c55812eea1872c6e05555f89f15e35882070c3a284a6e82f9d80d35581303b0317cd73e2e8943709cc8d7515d87d9f371d1118951c709795f6a0d41bf9b281", 0x8a}, {&(0x7f0000002300)="224d69ff5603dcc8e8215f2967e04d4094e06fccff1d9bcfe2358f1d8f7437232797a7f93c02a34151c49e184f0fe624be8268ccece99c643d814a4be6caa46f5d29f2e5ffdfb94cbb2a1212425152d287791132c9827b3ce4d216e1fb44eb02a234b646328cc5ef16af706bc8e81dcd2ca192a35bbcfd0d51bdbfba236e46f21b67f327d928aa8f0f1f44978d18b3866b254e814f86509dc62b2f226d8690fce5bb7be9b03234cabd65a32891ed6d70e91058b8cfb8d953bfeada0755d59b7b03da4ac7ea77fa5b461b999f25b986a125068acf4c9e2df5bda0e9ac90e5a32727b24f170d54a5c967ec6cc8453c4b514c49b74c399b", 0xf6}, {&(0x7f00000025c0)="dbd5d9e6e5e05dced2c936b14bce267d6e832059b001b42b57cba3ec12fa9bd84691c3ba21324cb55ee1aa2f3eb4723bb4efefa39099a015d9a4ce23f2bea36f71e77e2a794cd15341963e3b3e230cfcc6e2d97fda31ed3aee6de01ca37b79dfa9e080e952908226c81a93106acf8a36e3cc76f00325e1ea2c91525b5aa2dd455c09751255e3731df7280b530e9472f95c0937cb71d3862205372e5306c9df3d21b8f6ba7b64be5158e1186be0201d39ae23882babf7fa8cacedd73bae6bc6f00a34fc1ef3ef3ca0b53b2049815eb71f05aa750d719cd7288d5a90b186695cea09896e118992e2f4d4d238f9327f", 0xee}], 0x6, &(0x7f0000002580)=ANY=[@ANYRES16=0x0], 0x1048}], 0x4, 0x8010) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000003740)=ANY=[@ANYBLOB="f52790c81d42ee96ab326c67b93075920ae9431ddf5df162d3b8e12635c993b902ac29f997f06855dfa6cc461161e24c91ff030000000200008a37ce29bf9fa4f6d51c23da88e8ae583d0794b5412f6c42a02b65e63d00c7a63c67650f7bc8eba494eb", @ANYRES16=r10, @ANYBLOB="00042bbd7000fcdbdf25090000000500070014000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000884}, 0x10) r11 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000080), 0x9) 16.661920744s ago: executing program 3 (id=3365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000000000000b4, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 16.638069686s ago: executing program 3 (id=3366): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x1c, r3, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x35}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000080)=0xffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x16, 0x0, &(0x7f00000001c0)) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x4) 16.580192862s ago: executing program 3 (id=3367): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) 16.373656563s ago: executing program 4 (id=3368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r10}, @CGW_SRC_IF={0x8, 0x9, r10}]}, 0x24}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r2, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) r14 = socket(0x2, 0x2, 0x1) bind$unix(r14, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$can_bcm(r1, &(0x7f0000000280), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) socket(0x2c, 0x6, 0xdc63) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) 15.559003794s ago: executing program 3 (id=3369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 15.517711047s ago: executing program 3 (id=3370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080)={0x59}, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b0001007470726f787900000c00028008000140000000010900010073797a300000000009000200994f4cfc00000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=ANY=[@ANYBLOB="240000001a000100000000000000000017000000000000000000000005001b0001000000"], 0x24}}, 0x0) 12.501039028s ago: executing program 32 (id=3078): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x5, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x19, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="4002040102cd42281ba6b07ae88058b39a122bfa409a51a1acebacfe5e87a4392a1a3b45c2e2c86525bc"], 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="6220000000f0aa00"], 0x8) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, 0x0, 0x0) shutdown(r1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r10, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}], 0x2}, 0x3}, {{&(0x7f0000000480)=@ll, 0x80, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/89, 0x7f}], 0x1}, 0xa}], 0x3, 0x10, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a0103f453621d000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000640ffffff000c000b400000000000000005140000001100010000000000000000000700000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_open_procfs$namespace(r11, 0x0) 12.457470261s ago: executing program 33 (id=3188): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0xc0000) ppoll(&(0x7f0000000280)=[{r3, 0xa6}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x3]}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r7, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2e3995c5a6c547e5490d5a1fa6186e7e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "737ba583478fba41851372ab128f3f59"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x20010) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000ffdbdf251b00000008000300", @ANYRES32=r13, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000080) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r14, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r12, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 1.020250827s ago: executing program 34 (id=3368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r10}, @CGW_SRC_IF={0x8, 0x9, r10}]}, 0x24}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r2, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) r14 = socket(0x2, 0x2, 0x1) bind$unix(r14, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$can_bcm(r1, &(0x7f0000000280), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) socket(0x2c, 0x6, 0xdc63) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) 0s ago: executing program 35 (id=3370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080)={0x59}, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b0001007470726f787900000c00028008000140000000010900010073797a300000000009000200994f4cfc00000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=ANY=[@ANYBLOB="240000001a000100000000000000000017000000000000000000000005001b0001000000"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): us mode [ 212.378224][T11693] geneve2: entered allmulticast mode [ 212.603824][T11713] ip6t_srh: unknown srh match flags 5F28 [ 212.709563][T11714] tipc: Enabling of bearer rejected, failed to enable media [ 213.431739][T11770] __nla_validate_parse: 8 callbacks suppressed [ 213.431758][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 213.816867][T11791] tipc: Enabled bearer , priority 0 [ 213.825811][T11791] syzkaller0: entered promiscuous mode [ 213.835443][T11791] syzkaller0: entered allmulticast mode [ 213.896764][T11791] tipc: Resetting bearer [ 213.924267][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 213.941069][T11790] tipc: Resetting bearer [ 213.949943][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 213.979091][T11790] tipc: Disabling bearer [ 214.175300][T11806] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1552'. [ 214.190649][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1551'. [ 214.555592][T11824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1555'. [ 214.842965][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 214.870668][T11836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1560'. [ 215.434789][T11865] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 215.456115][T11865] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1569'. [ 216.123381][T11884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.130690][T11884] IPv6: NLM_F_CREATE should be set when creating new route [ 216.137978][T11884] IPv6: NLM_F_CREATE should be set when creating new route [ 216.145205][T11884] IPv6: NLM_F_CREATE should be set when creating new route [ 216.166842][T11884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1573'. [ 216.248421][T11889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.318542][T11888] lo: Caught tx_queue_len zero misconfig [ 216.400644][T11896] netlink: 'syz.3.1576': attribute type 10 has an invalid length. [ 216.415554][T11895] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 216.584322][T11907] netlink: 'syz.0.1578': attribute type 30 has an invalid length. [ 216.682962][T11907] bond3: option arp_missed_max: invalid value (0) [ 216.702442][T11907] bond3: option arp_missed_max: allowed values 1 - 255 [ 216.738675][T11907] bond3 (unregistering): Released all slaves [ 217.178929][T11931] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 217.493087][T11944] tc_dump_action: action bad kind [ 217.564171][T11949] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 217.734073][T11960] netlink: 'syz.0.1596': attribute type 10 has an invalid length. [ 217.776438][T11960] team0: Port device dummy0 added [ 217.957543][T11969] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 217.965862][T11969] netlink: 'syz.3.1598': attribute type 3 has an invalid length. [ 218.172841][T11975] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 218.341064][T11987] netlink: 'syz.0.1602': attribute type 15 has an invalid length. [ 218.490991][T11996] __nla_validate_parse: 9 callbacks suppressed [ 218.491009][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1604'. [ 218.514186][T11996] tipc: Enabling of bearer rejected, failed to enable media [ 218.634431][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 218.725937][T12000] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.859652][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 218.869690][T12004] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 218.886751][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 218.928397][T12011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1610'. [ 218.938458][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1608'. [ 218.959947][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 218.998598][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 219.012496][T12016] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1610'. [ 219.400393][T11742] Set syz1 is full, maxelem 65536 reached [ 219.579987][T12040] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1619'. [ 219.918278][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 219.986884][T12063] xt_hashlimit: invalid rate [ 220.662402][T12098] validate_nla: 6 callbacks suppressed [ 220.662420][T12098] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 220.721372][T12110] nbd: must specify at least one socket [ 220.954829][T12126] netlink: 'syz.4.1646': attribute type 9 has an invalid length. [ 221.461656][T12158] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 2, id = 0 [ 221.739669][T12169] netlink: 'syz.3.1656': attribute type 6 has an invalid length. [ 221.773386][T12176] netlink: 'syz.2.1659': attribute type 13 has an invalid length. [ 221.791935][T12169] dummy0: left allmulticast mode [ 221.800791][T12169] bridge0: port 3(dummy0) entered disabled state [ 221.814565][T12169] bridge_slave_0: left allmulticast mode [ 221.823325][T12169] bridge_slave_0: left promiscuous mode [ 221.830109][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.862132][T12169] bridge_slave_1: left allmulticast mode [ 221.872958][T12169] bridge_slave_1: left promiscuous mode [ 221.880460][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.927190][T12169] team0: Port device team_slave_0 removed [ 221.950062][T12169] team0: Port device team_slave_1 removed [ 221.959206][T12169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.972945][T12169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.985245][T12169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.993972][T12169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.003865][T12169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.034544][T12176] erspan0: refused to change device tx_queue_len [ 222.043823][T12176] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 222.446559][T12209] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 222.571521][T12209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.645331][T12231] tipc: Enabled bearer , priority 0 [ 222.678588][T12218] syzkaller0: entered promiscuous mode [ 222.688284][T12218] syzkaller0: entered allmulticast mode [ 222.784773][T12218] tipc: Resetting bearer [ 222.809081][T12215] tipc: Resetting bearer [ 222.856020][T12215] tipc: Disabling bearer [ 222.930946][T12247] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 223.034144][T12249] xt_TCPMSS: Only works on TCP SYN packets [ 223.571703][T12283] team0: Device vti0 is up. Set it down before adding it as a team port [ 223.692432][T12293] netlink: 'syz.1.1683': attribute type 10 has an invalid length. [ 223.730667][T12293] veth1_macvtap: left promiscuous mode [ 223.739206][T12293] team0: Device veth1_macvtap failed to register rx_handler [ 223.762254][T12286] tipc: Enabled bearer , priority 0 [ 223.793743][T12297] IPv6: Can't replace route, no match found [ 223.806168][T12282] tipc: Resetting bearer [ 225.143907][T12282] tipc: Disabling bearer [ 225.158907][T12297] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 225.365924][T12327] __nla_validate_parse: 19 callbacks suppressed [ 225.365942][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 225.366177][T12324] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1690'. [ 225.603863][T12332] IPv6: sit2: Disabled Multicast RS [ 225.610862][T12332] sit2: entered allmulticast mode [ 225.848017][T12354] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1699'. [ 225.952763][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 225.967941][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 226.002932][T12362] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 226.278975][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1708'. [ 226.313113][T12382] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 226.519335][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1711'. [ 226.550179][T12397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.613014][T12402] bond4: option all_slaves_active: invalid value (222) [ 226.623800][T12402] bond4 (unregistering): Released all slaves [ 226.785151][T12412] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.951439][T12412] lo: entered promiscuous mode [ 226.964550][T12412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.049861][T12417] gtp0: entered promiscuous mode [ 227.086324][T12417] gtp0: entered allmulticast mode [ 227.152449][T12429] tipc: Enabled bearer , priority 0 [ 227.163210][T12429] syzkaller0: entered promiscuous mode [ 227.169548][T12429] syzkaller0: entered allmulticast mode [ 227.228973][T12426] tipc: Resetting bearer [ 227.255322][T12426] tipc: Disabling bearer [ 227.345896][T12439] bond6: option min_links: invalid value (18446744073709551614) [ 227.358382][T12439] bond6: option min_links: allowed values 0 - 2147483647 [ 227.393583][T12439] bond6 (unregistering): Released all slaves [ 227.424787][T12450] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1725'. [ 227.573858][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 228.078783][ T5835] Bluetooth: hci0: command tx timeout [ 228.113647][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1735'. [ 228.693913][T12523] ksmbd: Unknown IPC event: 3, ignore. [ 228.913143][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.930204][T12535] bond_slave_0: left promiscuous mode [ 228.936090][T12535] bond_slave_1: left promiscuous mode [ 229.078141][T12535] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 229.137019][T12550] netlink: 'syz.4.1748': attribute type 11 has an invalid length. [ 229.231182][T12561] netlink: 'syz.2.1750': attribute type 4 has an invalid length. [ 229.399392][T12565] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 229.408980][T12574] xt_l2tp: invalid flags combination: 8 [ 229.422108][ T5903] IPVS: starting estimator thread 0... [ 229.461373][T12565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.527876][T12580] IPVS: using max 27 ests per chain, 64800 per kthread [ 229.681826][T12592] openvswitch: netlink: IP tunnel dst address not specified [ 229.865351][T12611] netlink: 'syz.1.1765': attribute type 21 has an invalid length. [ 230.342720][T12643] netlink: 'syz.4.1775': attribute type 30 has an invalid length. [ 230.409961][T12643] bond6: option arp_missed_max: invalid value (0) [ 230.421576][T12643] bond6: option arp_missed_max: allowed values 1 - 255 [ 230.433049][T12654] __nla_validate_parse: 7 callbacks suppressed [ 230.433065][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 230.459373][T12652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1778'. [ 230.461863][T12643] bond6 (unregistering): Released all slaves [ 230.941192][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 231.165003][T12703] sctp: [Deprecated]: syz.1.1793 (pid 12703) Use of int in maxseg socket option. [ 231.165003][T12703] Use struct sctp_assoc_value instead [ 231.264568][T12709] netlink: 'syz.0.1798': attribute type 3 has an invalid length. [ 231.303536][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 231.528600][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 231.625643][T12727] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 231.671819][T12727] bond4 (unregistering): Released all slaves [ 232.236913][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 232.318200][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 232.327201][T12779] netlink: 'syz.1.1818': attribute type 20 has an invalid length. [ 232.357004][T12781] netlink: 'syz.1.1818': attribute type 20 has an invalid length. [ 232.398180][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.398346][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 232.420568][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.443954][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 232.450005][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.482777][T12794] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 232.491271][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.497771][T12779] netlink: 'syz.1.1818': attribute type 20 has an invalid length. [ 232.933480][T12821] tipc: Enabled bearer , priority 0 [ 232.941031][T12824] syzkaller0: entered promiscuous mode [ 232.947675][T12824] syzkaller0: entered allmulticast mode [ 232.954642][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 232.967374][T12821] tipc: Resetting bearer [ 232.976013][T12820] tipc: Resetting bearer [ 233.041009][T12820] tipc: Disabling bearer [ 233.165235][T12842] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.302493][T12842] veth3: entered promiscuous mode [ 233.315385][T12842] bond6: (slave veth3): Enslaving as an active interface with an up link [ 233.532497][T12871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.560726][T12872] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 233.611630][T12874] tipc: Enabled bearer , priority 0 [ 233.621056][T12874] syzkaller0: entered promiscuous mode [ 233.626573][T12874] syzkaller0: entered allmulticast mode [ 233.652410][T12873] tipc: Resetting bearer [ 233.701015][T12873] tipc: Disabling bearer [ 233.974065][T12904] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.995628][T12906] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29184 [ 234.284155][T12926] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 234.302204][T12921] v: renamed from vlan0 [ 234.306533][T12926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.339238][T12928] syzkaller0: entered promiscuous mode [ 234.347044][T12928] syzkaller0: entered allmulticast mode [ 234.445119][T12936] validate_nla: 4 callbacks suppressed [ 234.445136][T12936] netlink: 'syz.2.1861': attribute type 21 has an invalid length. [ 234.459373][T12936] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.760805][T12958] vxlan0: entered promiscuous mode [ 234.780400][T12958] vxlan0: entered allmulticast mode [ 235.110943][T12990] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 235.168311][T12990] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.534648][T13011] batadv_slave_0: entered promiscuous mode [ 235.747824][T13004] batadv_slave_0: left promiscuous mode [ 235.764405][T13025] __nla_validate_parse: 10 callbacks suppressed [ 235.764424][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 235.802804][T13025] netlink: 'syz.0.1879': attribute type 9 has an invalid length. [ 235.813101][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 235.863759][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 235.897356][T13025] netlink: 'syz.0.1879': attribute type 9 has an invalid length. [ 235.917678][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 235.925220][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 236.072483][T13037] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 236.127193][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1884'. [ 236.140950][T13042] atomic_op ffff888026edb198 conn xmit_atomic 0000000000000000 [ 236.171597][T13037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.202846][T13046] xt_policy: too many policy elements [ 236.356048][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1887'. [ 236.508489][T13071] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1891'. [ 236.689734][T13080] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 236.700067][T13084] siw: device registration error -23 [ 236.779027][T13090] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1896'. [ 236.986069][T13097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1899'. [ 237.012088][T13099] tipc: Enabled bearer , priority 0 [ 237.046026][T13097] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1899'. [ 237.057781][T13099] syzkaller0: entered promiscuous mode [ 237.072994][T13099] syzkaller0: entered allmulticast mode [ 237.096366][T13097] netlink: 'syz.3.1899': attribute type 5 has an invalid length. [ 237.113551][T13099] tipc: Resetting bearer [ 237.280655][T13098] tipc: Resetting bearer [ 237.326034][T13098] tipc: Disabling bearer [ 237.574749][T13125] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 237.595076][T13125] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 237.619467][T13125] gretap3: entered promiscuous mode [ 237.624726][T13125] gretap3: entered allmulticast mode [ 237.719026][T13132] netlink: 'syz.0.1908': attribute type 83 has an invalid length. [ 237.765617][T13136] netlink: 'syz.2.1911': attribute type 2 has an invalid length. [ 237.789203][T13134] netlink: 'syz.3.1910': attribute type 10 has an invalid length. [ 238.034675][T13148] netlink: 'syz.2.1914': attribute type 29 has an invalid length. [ 238.062803][T13161] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 238.079653][T13161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.499381][T13165] syzkaller1: entered promiscuous mode [ 238.504904][T13165] syzkaller1: entered allmulticast mode [ 238.535323][T13187] syzkaller1: entered allmulticast mode [ 238.984591][T13204] bond0: (slave bond_slave_1): Releasing backup interface [ 239.060644][T13214] C: renamed from lo (while UP) [ 239.470896][T13248] IPVS: Error connecting to the multicast addr [ 239.580824][T13267] bond0: entered allmulticast mode [ 239.586017][T13267] bond_slave_0: entered allmulticast mode [ 239.623846][T13269] validate_nla: 2 callbacks suppressed [ 239.623865][T13269] netlink: 'syz.3.1946': attribute type 2 has an invalid length. [ 239.634933][T13267] bond_slave_1: entered allmulticast mode [ 239.641269][T13269] netlink: 'syz.3.1946': attribute type 8 has an invalid length. [ 239.669841][T13267] bridge0: entered allmulticast mode [ 239.900563][T13287] netlink: 'syz.0.1952': attribute type 5 has an invalid length. [ 240.073996][T13280] veth0_to_bond: entered allmulticast mode [ 240.625720][T13332] bond0: (slave bridge0): Releasing backup interface [ 240.685454][T13332] team0: Port device dummy0 removed [ 240.694122][T13332] bridge_slave_0: left allmulticast mode [ 240.700374][T13332] bridge_slave_0: left promiscuous mode [ 240.706343][T13332] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.719285][T13332] bond0: (slave bridge_slave_1): Releasing backup interface [ 240.738556][T13332] bond0: (slave bond_slave_0): Releasing backup interface [ 240.751558][T13332] bond0: (slave bond_slave_1): Releasing backup interface [ 240.763756][T13332] team0: Port device team_slave_0 removed [ 240.772441][T13332] team0: Port device team_slave_1 removed [ 240.779557][T13332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.802071][T13343] __nla_validate_parse: 24 callbacks suppressed [ 240.802088][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 240.830590][T13339] tipc: Enabled bearer , priority 0 [ 240.854470][T13339] syzkaller0: entered promiscuous mode [ 240.867499][T13339] syzkaller0: entered allmulticast mode [ 240.918560][T13339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 240.995759][T13339] tipc: Resetting bearer [ 241.010716][T13333] tipc: Resetting bearer [ 241.045168][T13333] tipc: Disabling bearer [ 241.498590][T13383] syzkaller0: entered promiscuous mode [ 241.504978][T13383] syzkaller0: entered allmulticast mode [ 241.512313][T13387] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.543079][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 241.553557][T13389] netlink: 'syz.4.1982': attribute type 5 has an invalid length. [ 241.561841][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1982'. [ 241.896082][T13399] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 242.811249][T13415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'. [ 243.112206][T13434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.137326][T13439] netlink: 'syz.3.1996': attribute type 16 has an invalid length. [ 243.145793][T13439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1996'. [ 243.160751][T13441] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20004 [ 243.163792][T13439] tipc: Failed to remove unknown binding: 66,1,1/10005162:2654514381/2654514383 [ 243.179054][T13440] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20004 [ 243.275858][T13447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.283968][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 243.343041][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 243.380437][T13452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2000'. [ 243.408407][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 243.424263][T13452] netlink: 'syz.0.2000': attribute type 5 has an invalid length. [ 243.433851][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2000'. [ 243.466363][T13452] geneve2: entered promiscuous mode [ 243.472111][T13452] geneve2: entered allmulticast mode [ 243.490020][ T771] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 243.499171][ T771] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 243.517505][ T771] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 243.534055][ T771] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 243.738407][T13474] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 243.765084][ T771] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.807661][ T771] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.826804][ T771] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.849667][ T771] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.878280][T13484] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 244.796126][T13522] x_tables: duplicate underflow at hook 1 [ 244.801363][T13519] netlink: 'syz.1.2021': attribute type 1 has an invalid length. [ 244.974310][T13531] netlink: 'syz.2.2026': attribute type 2 has an invalid length. [ 244.990537][T13531] 9: entered promiscuous mode [ 245.055631][T13536] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 245.276571][T13564] openvswitch: netlink: EtherType 50a is less than min 600 [ 245.827905][T13600] __nla_validate_parse: 12 callbacks suppressed [ 245.827927][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 246.763645][T13625] tipc: Enabled bearer , priority 0 [ 246.818475][T13625] syzkaller0: entered promiscuous mode [ 246.847588][T13625] syzkaller0: entered allmulticast mode [ 246.914314][T13637] tipc: Resetting bearer [ 246.942826][T13641] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 246.989251][T13641] netlink: 'syz.2.2053': attribute type 11 has an invalid length. [ 247.008018][T13641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2053'. [ 247.037674][T13645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2054'. [ 247.131172][ T6811] IPVS: starting estimator thread 0... [ 247.227717][T13653] IPVS: using max 34 ests per chain, 81600 per kthread [ 247.513541][T13618] tipc: Resetting bearer [ 247.555748][T13618] tipc: Disabling bearer [ 247.589750][T13684] syzkaller0: entered promiscuous mode [ 247.599277][T13684] syzkaller0: entered allmulticast mode [ 247.599650][T13688] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 247.621600][T13689] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2068'. [ 247.641718][T13689] nbd: couldn't find a device at index 0 [ 247.660568][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2070'. [ 247.725836][ T7305] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 247.756195][T13693] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.782116][T13690] x_tables: duplicate underflow at hook 1 [ 247.817040][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2072'. [ 247.915670][T13711] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 247.964253][T13713] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2076'. [ 248.293261][T13733] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2082'. [ 248.426138][T13738] xt_l2tp: unknown flags: 10 [ 248.433015][T13739] xt_l2tp: unknown flags: 10 [ 248.609516][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 248.692775][T13755] xt_HMARK: proto mask must be zero with L3 mode [ 248.911698][T13769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 249.129984][T13780] tunl0: entered promiscuous mode [ 249.157719][T13780] netlink: 'syz.1.2094': attribute type 3 has an invalid length. [ 249.246454][T13789] lo: entered promiscuous mode [ 249.273043][T13789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.741969][T13823] netlink: 'syz.3.2109': attribute type 1 has an invalid length. [ 249.858887][T13823] bond4: entered promiscuous mode [ 249.864096][T13823] bond4: entered allmulticast mode [ 249.870719][T13823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.892621][T13837] sctp: [Deprecated]: syz.2.2114 (pid 13837) Use of int in max_burst socket option. [ 249.892621][T13837] Use struct sctp_assoc_value instead [ 249.939000][T13840] syzkaller1: entered promiscuous mode [ 249.953598][T13840] syzkaller1: entered allmulticast mode [ 251.129850][T13927] syzkaller0: entered promiscuous mode [ 251.144409][T13927] syzkaller0: entered allmulticast mode [ 251.226779][T13933] __nla_validate_parse: 9 callbacks suppressed [ 251.226796][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 251.309768][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2140'. [ 251.393491][T13944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'. [ 251.469394][T13940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.492474][T13949] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2143'. [ 251.673031][T13957] openvswitch: netlink: IP tunnel dst address not specified [ 251.835293][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 251.898113][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 251.915753][T13975] erspan0: entered promiscuous mode [ 251.924489][T13975] erspan0: entered allmulticast mode [ 251.966416][T13980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2150'. [ 251.976012][T13980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2150'. [ 252.007690][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 252.016749][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 252.028510][T13978] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 252.041280][T13978] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 255.760115][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.766412][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.997506][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.113546][T14069] netlink: 'syz.2.2176': attribute type 1 has an invalid length. [ 275.369235][T14074] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 275.380842][T14074] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 275.392312][T14094] __nla_validate_parse: 1 callbacks suppressed [ 275.392328][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2182'. [ 275.412617][T14092] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2181'. [ 275.440982][T14092] geneve3: entered promiscuous mode [ 275.447180][T14092] geneve3: entered allmulticast mode [ 275.530751][ T13] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 19999 - 0 [ 275.670250][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2185'. [ 275.677944][T14110] netlink: 'syz.2.2184': attribute type 10 has an invalid length. [ 275.691764][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 275.708658][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 275.733357][T14111] netlink: 'syz.3.2185': attribute type 21 has an invalid length. [ 275.761528][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 275.876141][T14117] Cannot find add_set index 2 as target [ 276.024281][T14133] netlink: 'syz.4.2194': attribute type 13 has an invalid length. [ 276.157020][T14133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.368744][T14160] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2199'. [ 276.410085][T14161] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2199'. [ 276.587613][T14174] netlink: 'syz.3.2202': attribute type 16 has an invalid length. [ 276.600659][T14165] tipc: Resetting bearer [ 276.606130][T14174] netlink: 'syz.3.2202': attribute type 17 has an invalid length. [ 276.614807][T14165] tipc: Resetting bearer [ 276.622197][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'. [ 276.645779][ T3510] tipc: Resetting bearer [ 276.664675][T14174] lo: left promiscuous mode [ 276.707944][T14174] dummy0: left promiscuous mode [ 276.725354][T14174] veth0_to_bond: left allmulticast mode [ 276.756311][T14174] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 277.010253][T14199] netlink: 'syz.3.2214': attribute type 30 has an invalid length. [ 277.180809][T14213] IPVS: ip_vs_add_dest(): server weight less than zero [ 277.241339][T14216] netlink: 'syz.1.2218': attribute type 1 has an invalid length. [ 277.298942][T14216] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.348772][T14226] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.355949][T14226] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 277.373723][T14226] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 277.398943][T14232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2220'. [ 277.556073][T14216] veth5: entered promiscuous mode [ 277.566215][T14216] bond10: (slave veth5): Enslaving as an active interface with a down link [ 277.584602][T14233] vlan2: entered allmulticast mode [ 277.590115][T14233] bond10: entered allmulticast mode [ 277.803679][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 278.370837][T14283] openvswitch: netlink: Duplicate key (type 1). [ 278.483555][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'. [ 278.535462][T14289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2234'. [ 278.567670][T14289] openvswitch: netlink: Flow key attr not present in new flow. [ 278.793723][T14312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.805626][T14312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 278.920293][T14312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.931651][T14312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 279.116616][T14312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.133533][T14312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 279.260763][T14312] bond0: (slave netdevsim0): Releasing backup interface [ 279.291229][T14312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.325874][T14312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 279.420420][ T7305] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.431661][ T7305] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 279.452406][ T7305] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.474653][ T7305] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 279.510045][ T3510] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.532400][ T3510] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 279.596586][ T3510] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.621268][ T3510] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 279.652294][T14359] netlink: 'syz.4.2252': attribute type 19 has an invalid length. [ 279.656762][T14363] tipc: Enabled bearer , priority 0 [ 279.672568][T14370] syzkaller0: entered promiscuous mode [ 279.691824][T14370] syzkaller0: entered allmulticast mode [ 279.720265][T14363] tipc: Resetting bearer [ 279.788541][T14360] tipc: Resetting bearer [ 279.828241][T14360] tipc: Disabling bearer [ 280.110545][ T8026] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 280.138690][ T8026] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.166099][ T8026] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.204805][ T8026] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.314467][T14405] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 280.370274][T14405] bond7 (unregistering): Released all slaves [ 280.421730][T14416] sctp: [Deprecated]: syz.2.2267 (pid 14416) Use of int in max_burst socket option deprecated. [ 280.421730][T14416] Use struct sctp_assoc_value instead [ 280.478523][T14418] __nla_validate_parse: 8 callbacks suppressed [ 280.478542][T14418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2271'. [ 280.580484][T14423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'. [ 280.614399][T14416] ip6tnl4: entered promiscuous mode [ 280.651483][T14416] ip6tnl4: entered allmulticast mode [ 280.757743][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'. [ 281.027763][T14440] netlink: 'syz.1.2278': attribute type 30 has an invalid length. [ 281.053913][T14438] bond11: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 281.067788][T14438] bond11: entered promiscuous mode [ 281.072948][T14438] bond11: entered allmulticast mode [ 281.078680][T14438] 8021q: adding VLAN 0 to HW filter on device bond11 [ 281.167386][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 281.226910][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 281.383723][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 281.556597][T14476] openvswitch: netlink: Missing key (keys=40, expected=80) [ 281.763744][T14482] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 281.779812][T14482] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2288'. [ 281.812279][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 281.827818][T14485] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 281.835939][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 281.927123][T14490] netlink: 'syz.3.2294': attribute type 16 has an invalid length. [ 281.951213][T14490] netlink: 'syz.3.2294': attribute type 17 has an invalid length. [ 282.065392][T14490] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.339285][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'. [ 282.524705][T14532] netlink: 'syz.3.2303': attribute type 15 has an invalid length. [ 282.555529][ T7305] netdevsim netdevsim3 : set [0, 1] type 1 family 0 port 2816 - 0 [ 282.560508][T14532] netlink: 'syz.3.2303': attribute type 15 has an invalid length. [ 282.572110][ T7305] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 282.611778][ T7305] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 282.660005][ T7305] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 283.681427][T14595] can: request_module (can-proto-0) failed. [ 284.082337][T14607] netlink: 'syz.0.2320': attribute type 2 has an invalid length. [ 284.246181][T14620] netlink: 'syz.2.2325': attribute type 35 has an invalid length. [ 284.735698][T14649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 284.941536][T14668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.280205][T14691] veth0_to_bridge: entered promiscuous mode [ 285.495723][T14688] veth0_to_bridge: left promiscuous mode [ 285.649433][T14720] validate_nla: 1 callbacks suppressed [ 285.649450][T14720] netlink: 'syz.1.2355': attribute type 2 has an invalid length. [ 285.682006][T14724] __nla_validate_parse: 13 callbacks suppressed [ 285.682025][T14724] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2356'. [ 285.704089][T14724] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2356'. [ 285.736651][T14720] : entered promiscuous mode [ 285.766052][T14724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.827037][T14728] netlink: 'syz.0.2353': attribute type 23 has an invalid length. [ 285.959032][T14738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2359'. [ 286.358713][T14769] vlan1: entered allmulticast mode [ 286.406484][T14773] 8021q: VLANs not supported on pim6reg0 [ 286.698264][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 286.837924][T14804] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2379'. [ 286.852005][T14804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'. [ 287.022137][T14811] team0: Device vti0 is up. Set it down before adding it as a team port [ 287.379656][T14824] netlink: 'syz.4.2383': attribute type 11 has an invalid length. [ 287.456822][T14824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2383'. [ 287.522724][T14830] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 287.710531][T14841] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2388'. [ 287.717811][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2387'. [ 287.738430][T14839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2388'. [ 287.749721][T14838] netlink: 'syz.3.2387': attribute type 5 has an invalid length. [ 287.839075][T14850] netlink: 'syz.1.2389': attribute type 3 has an invalid length. [ 287.849038][T14850] x_tables: duplicate underflow at hook 3 [ 287.932565][T14858] tls_set_device_offload_rx: netdev not found [ 288.272534][T14874] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 288.410889][T14885] GUP no longer grows the stack in syz.0.2402 (14885): 200000003000-20000000a000 (200000001000) [ 288.441257][T14885] CPU: 0 UID: 0 PID: 14885 Comm: syz.0.2402 Not tainted syzkaller #0 PREEMPT(full) [ 288.441284][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.441304][T14885] Call Trace: [ 288.441312][T14885] [ 288.441320][T14885] dump_stack_lvl+0x189/0x250 [ 288.441352][T14885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.441373][T14885] ? __pfx__printk+0x10/0x10 [ 288.441389][T14885] ? find_vma+0xe7/0x160 [ 288.441425][T14885] __get_user_pages+0x2470/0x2a00 [ 288.441448][T14885] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 288.441491][T14885] ? rcu_is_watching+0x15/0xb0 [ 288.441515][T14885] __gup_longterm_locked+0xde4/0x1660 [ 288.441543][T14885] ? try_grab_folio_fast+0x1bf/0x6a0 [ 288.441576][T14885] ? gup_fast_fallback+0x1b86/0x22d0 [ 288.441601][T14885] gup_fast_fallback+0x1d65/0x22d0 [ 288.441684][T14885] ? __pfx_gup_fast_fallback+0x10/0x10 [ 288.441705][T14885] ? __mutex_lock+0x335/0x1350 [ 288.441740][T14885] ? is_valid_gup_args+0x11f/0x200 [ 288.441765][T14885] ? get_user_pages_fast+0x4d/0xb0 [ 288.441788][T14885] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 288.441818][T14885] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 288.441836][T14885] ? wait_for_space+0x248/0x2d0 [ 288.441855][T14885] iov_iter_get_pages2+0x5e/0xa0 [ 288.441879][T14885] __se_sys_vmsplice+0x548/0x10d0 [ 288.441912][T14885] ? futex_private_hash_put+0x4b/0x280 [ 288.441943][T14885] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 288.441963][T14885] ? __pfx_futex_wake+0x10/0x10 [ 288.442039][T14885] ? do_syscall_64+0xbe/0xfa0 [ 288.442066][T14885] do_syscall_64+0xfa/0xfa0 [ 288.442085][T14885] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.442107][T14885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.442124][T14885] ? clear_bhb_loop+0x60/0xb0 [ 288.442144][T14885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.442159][T14885] RIP: 0033:0x7fb47ef8f6c9 [ 288.442186][T14885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.442201][T14885] RSP: 002b:00007fb47ff08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 288.442226][T14885] RAX: ffffffffffffffda RBX: 00007fb47f1e5fa0 RCX: 00007fb47ef8f6c9 [ 288.442238][T14885] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 288.442249][T14885] RBP: 00007fb47f011f91 R08: 0000000000000000 R09: 0000000000000000 [ 288.442259][T14885] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 288.442270][T14885] R13: 00007fb47f1e6038 R14: 00007fb47f1e5fa0 R15: 00007ffe04b5b7c8 [ 288.442298][T14885] [ 289.087858][T14923] netlink: 'syz.4.2408': attribute type 13 has an invalid length. [ 289.096208][T14923] netlink: 'syz.4.2408': attribute type 17 has an invalid length. [ 290.223236][T14914] kthread_run failed with err -4 [ 290.243994][T14923] erspan0: left promiscuous mode [ 290.251813][T14923] erspan0: left allmulticast mode [ 290.259487][T14923] ip6_vti0: left allmulticast mode [ 290.309383][T14923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.378200][T14926] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.697049][T14961] __nla_validate_parse: 5 callbacks suppressed [ 290.697065][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 290.719177][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2418'. [ 290.892241][T14971] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 290.995369][T14978] syzkaller0: entered promiscuous mode [ 291.005650][T14978] syzkaller0: entered allmulticast mode [ 291.015055][T14978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.039223][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 291.053781][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 291.091002][T14994] netlink: 'syz.4.2428': attribute type 10 has an invalid length. [ 291.122839][T14993] syzkaller0: entered promiscuous mode [ 291.132278][T14993] syzkaller0: entered allmulticast mode [ 291.151877][T14994] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 291.340882][T15007] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2434'. [ 291.367868][T15004] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2432'. [ 291.575397][T15024] netlink: 'syz.4.2437': attribute type 21 has an invalid length. [ 291.583517][T15024] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.591523][T15024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.598800][T15024] IPv6: NLM_F_CREATE should be set when creating new route [ 291.606127][T15024] IPv6: NLM_F_CREATE should be set when creating new route [ 291.613525][T15024] IPv6: NLM_F_CREATE should be set when creating new route [ 291.653570][T15024] bond6: option all_slaves_active: invalid value (222) [ 291.667509][T15024] bond6 (unregistering): Released all slaves [ 291.740574][T15034] netlink: 'syz.1.2440': attribute type 29 has an invalid length. [ 291.757752][T15034] netlink: 'syz.1.2440': attribute type 29 has an invalid length. [ 291.765232][T15036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2441'. [ 291.957057][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2446'. [ 291.977207][T15045] tipc: Enabled bearer , priority 0 [ 291.989602][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'. [ 292.035924][T15045] syzkaller0: entered promiscuous mode [ 292.048206][T15045] syzkaller0: entered allmulticast mode [ 292.086951][T15045] tipc: Enabling of bearer rejected, already enabled [ 292.097046][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 292.127933][T15044] tipc: Resetting bearer [ 292.178217][T15044] tipc: Disabling bearer [ 292.345095][T15075] gtp0: entered promiscuous mode [ 292.384579][T15075] gtp0: entered allmulticast mode [ 293.696903][T15144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.854074][T15156] netlink: 'syz.3.2471': attribute type 27 has an invalid length. [ 294.034775][T15167] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 294.669092][T15205] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 294.688923][T15205] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 294.778837][T15224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.136897][T15247] sctp: [Deprecated]: syz.0.2497 (pid 15247) Use of int in max_burst socket option. [ 295.136897][T15247] Use struct sctp_assoc_value instead [ 295.880282][T15302] __nla_validate_parse: 13 callbacks suppressed [ 295.880302][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 296.091276][T15307] vlan0: entered promiscuous mode [ 296.150707][T15313] netlink: 'syz.0.2520': attribute type 8 has an invalid length. [ 296.198578][T15319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2522'. [ 296.400522][T15332] netlink: 'syz.1.2525': attribute type 6 has an invalid length. [ 296.424930][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 296.435260][T15335] netlink: 'syz.2.2524': attribute type 1 has an invalid length. [ 296.450652][T15335] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 296.569942][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 296.588394][T15347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2529'. [ 296.632604][T15347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2529'. [ 296.925993][T15366] tipc: Resetting bearer [ 296.947076][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 296.957891][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 296.968385][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 297.010153][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 297.046718][T15378] openvswitch: netlink: Unknown nsh attribute 0 [ 297.063441][T15378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.174995][T15366] vlan0 (unregistering): left allmulticast mode [ 297.183562][T15366] vlan0 (unregistering): left promiscuous mode [ 297.252326][T15366] tipc: Disabling bearer [ 297.280718][T15366] vlan1 (unregistering): left allmulticast mode [ 297.289415][T15366] veth0_vlan (unregistering): left allmulticast mode [ 297.488040][T15407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.841732][T15430] syzkaller0: entered promiscuous mode [ 297.850336][T15430] syzkaller0: entered allmulticast mode [ 297.874382][T15430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 298.297160][T15472] sctp: [Deprecated]: syz.2.2560 (pid 15472) Use of int in max_burst socket option. [ 298.297160][T15472] Use struct sctp_assoc_value instead [ 298.612161][T15485] erspan0: entered promiscuous mode [ 298.628780][T15485] erspan0: entered allmulticast mode [ 298.848434][T15502] bridge_slave_0: default FDB implementation only supports local addresses [ 298.875966][T15502] bridge_slave_0: default FDB implementation only supports local addresses [ 299.115322][T15513] netlink: 'syz.1.2571': attribute type 10 has an invalid length. [ 299.726958][T15553] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 299.780902][T15558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.345264][T15604] netlink: 'syz.2.2598': attribute type 8 has an invalid length. [ 300.347121][T15605] netlink: 'syz.0.2599': attribute type 3 has an invalid length. [ 300.450969][T15611] xt_ecn: cannot match TCP bits for non-tcp packets [ 300.583676][T15627] tipc: Enabled bearer , priority 0 [ 300.593741][T15629] syzkaller0: entered promiscuous mode [ 300.600136][T15629] syzkaller0: entered allmulticast mode [ 300.636049][T15629] tipc: Resetting bearer [ 300.687717][T15629] tipc: Disabling bearer [ 300.970148][T15653] __nla_validate_parse: 45 callbacks suppressed [ 300.970164][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 301.004721][T15655] bridge8: entered promiscuous mode [ 301.010010][T15653] netlink: 'syz.0.2614': attribute type 8 has an invalid length. [ 301.018387][T15655] bridge8: entered allmulticast mode [ 301.036615][T15655] bridge9: entered promiscuous mode [ 301.071791][T15655] bridge9: entered allmulticast mode [ 301.143809][T15655] bridge10: entered promiscuous mode [ 301.172119][T15655] bridge10: entered allmulticast mode [ 301.205922][T15655] bridge11: entered promiscuous mode [ 301.227092][T15655] bridge11: entered allmulticast mode [ 301.235454][T15666] 8021q: VLANs not supported on ip_vti0 [ 301.240245][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 301.266892][T15655] bridge12: entered promiscuous mode [ 301.273794][T15655] bridge12: entered allmulticast mode [ 301.291058][T15655] bridge13: entered promiscuous mode [ 301.296458][T15655] bridge13: entered allmulticast mode [ 301.373437][T15672] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 301.414291][T15655] bridge14: entered promiscuous mode [ 301.420216][T15655] bridge14: entered allmulticast mode [ 301.494100][T15655] bridge15: entered promiscuous mode [ 301.508063][T15655] bridge15: entered allmulticast mode [ 301.598925][T15655] bridge16: entered promiscuous mode [ 301.617837][T15655] bridge16: entered allmulticast mode [ 301.653413][T15655] bridge17: entered promiscuous mode [ 301.663971][T15655] bridge17: entered allmulticast mode [ 301.681371][T15655] bridge18: entered promiscuous mode [ 301.686781][T15655] bridge18: entered allmulticast mode [ 301.702875][T15655] bridge19: entered promiscuous mode [ 301.708745][T15655] bridge19: entered allmulticast mode [ 301.715285][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'. [ 301.724937][T15655] bridge20: entered promiscuous mode [ 301.724958][T15655] bridge20: entered allmulticast mode [ 301.735171][T15655] bridge21: entered promiscuous mode [ 301.741619][T15655] bridge21: entered allmulticast mode [ 301.758622][T15655] bridge22: entered promiscuous mode [ 301.764046][T15655] bridge22: entered allmulticast mode [ 301.780947][T15655] bridge23: entered promiscuous mode [ 301.786336][T15655] bridge23: entered allmulticast mode [ 301.805712][T15655] bridge24: entered promiscuous mode [ 301.811362][T15655] bridge24: entered allmulticast mode [ 301.826064][T15682] team_slave_0: entered promiscuous mode [ 301.831862][T15682] team_slave_1: entered promiscuous mode [ 301.840823][T15682] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 302.087757][T15703] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2627'. [ 302.267500][T15724] veth0: Caught tx_queue_len zero misconfig [ 302.273458][T15724] netlink: 'syz.2.2633': attribute type 3 has an invalid length. [ 302.587421][T15745] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2643'. [ 302.818920][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 302.818920][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 302.838657][T15757] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2647'. [ 302.885941][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2645'. [ 303.022701][T15763] openvswitch: netlink: Unknown key attributes 2 [ 303.110088][T15768] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 303.176091][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.194808][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.203784][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.214071][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.223629][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.257780][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.268292][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.293461][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.349718][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 303.383181][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.431237][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.489916][T15783] netlink: 'syz.2.2653': attribute type 12 has an invalid length. [ 304.237146][T15812] openvswitch: netlink: Missing key (keys=40, expected=100) [ 304.242560][T15815] netlink: 'syz.0.2661': attribute type 21 has an invalid length. [ 304.678716][T15840] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 304.712825][T15840] bond8 (unregistering): Released all slaves [ 304.767405][T15849] tipc: Invalid UDP bearer configuration [ 304.767459][T15849] tipc: Enabling of bearer rejected, failed to enable media [ 304.785416][T15771] chnl_net:caif_netlink_parms(): no params data found [ 305.071554][T15771] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.087872][T15771] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.101072][T15771] bridge_slave_0: entered allmulticast mode [ 305.118008][T15771] bridge_slave_0: entered promiscuous mode [ 305.166395][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.180098][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 305.192355][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.203116][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 305.225226][T15872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.247839][T15771] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.308197][T15771] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.315493][T15771] bridge_slave_1: entered allmulticast mode [ 305.343454][T15771] bridge_slave_1: entered promiscuous mode [ 305.437034][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.459585][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 305.487578][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.511364][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 305.522904][ T5837] Bluetooth: hci2: command tx timeout [ 305.573906][T15771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.608431][T15771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.652715][T15897] sctp: [Deprecated]: syz.4.2683 (pid 15897) Use of int in max_burst socket option deprecated. [ 305.652715][T15897] Use struct sctp_assoc_value instead [ 305.671584][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.700446][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 305.711914][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.724342][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 305.769123][T15892] syzkaller0: entered promiscuous mode [ 305.774634][T15892] syzkaller0: entered allmulticast mode [ 305.865375][T15771] team0: Port device team_slave_0 added [ 305.887937][T15771] team0: Port device team_slave_1 added [ 305.993840][T15917] __nla_validate_parse: 6 callbacks suppressed [ 305.993859][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 306.026502][ T62] netdevsim netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.036680][ T62] netdevsim netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 306.047005][ T62] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.058516][ T62] netdevsim netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 306.074743][T15771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.081928][T15771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.109579][T15771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.130595][T15771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.137765][T15771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.177011][T15771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.225651][T15925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2688'. [ 306.255336][T15771] hsr_slave_0: entered promiscuous mode [ 306.262095][T15771] hsr_slave_1: entered promiscuous mode [ 306.268331][T15771] debugfs: 'hsr0' already exists in 'hsr' [ 306.274075][T15771] Cannot create hsr debugfs directory [ 307.182125][ T62] bond0 (unregistering): (slave bond3): Releasing active interface [ 307.193816][ T62] bond0 (unregistering): Released all slaves [ 307.207172][ T62] bond1 (unregistering): Released all slaves [ 307.221131][ T62] bond2 (unregistering): Released all slaves [ 307.316161][ T62] bond3 (unregistering): Released all slaves [ 307.404569][ T62] bond4 (unregistering): Released all slaves [ 307.418313][ T62] bond5 (unregistering): Released all slaves [ 307.600612][ T5835] Bluetooth: hci2: command tx timeout [ 307.622231][ T62] : left promiscuous mode [ 307.731127][ T62] tipc: Left network mode [ 307.857171][ T62] IPVS: stopping backup sync thread 13484 ... [ 308.035478][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 308.722393][T15771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.818560][T15771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.846486][T15771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.873086][ T62] hsr_slave_0: left promiscuous mode [ 308.892259][ T62] hsr_slave_1: left promiscuous mode [ 308.901220][T16011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.587534][T15771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 309.662151][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 309.676664][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 309.696220][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 309.705023][T16019] netlink: 'syz.0.2709': attribute type 5 has an invalid length. [ 309.783094][T16027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2710'. [ 309.793147][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 309.816934][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 310.112756][T15771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.181660][T16050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2714'. [ 310.191912][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2713'. [ 310.199634][T15771] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.253918][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.261246][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.280593][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.287832][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.436665][T16061] IPv6: NLM_F_CREATE should be specified when creating new route [ 310.536825][ T62] IPVS: stop unused estimator thread 0... [ 310.580611][T16072] netlink: 'syz.1.2720': attribute type 21 has an invalid length. [ 310.670854][T16072] bond14: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 310.686135][T16072] bond14 (unregistering): Released all slaves [ 311.154901][T15771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.211101][T16113] openvswitch: netlink: Unknown key attributes 2 [ 311.285642][T15771] veth0_vlan: entered promiscuous mode [ 311.313212][T15771] veth1_vlan: entered promiscuous mode [ 311.356141][T16120] bond0: (slave bridge0): Releasing backup interface [ 311.368876][T16120] bridge0: left allmulticast mode [ 311.375589][T16120] bridge_slave_0: left allmulticast mode [ 311.381388][T16120] bridge_slave_0: left promiscuous mode [ 311.387311][T16120] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.400223][T16120] bridge_slave_1: left promiscuous mode [ 311.405973][T16120] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.416834][T16120] bond4: (slave veth0_to_bond): Releasing active interface [ 311.430690][T16120] bond0: (slave bond_slave_0): Releasing backup interface [ 311.438658][T16120] bond_slave_0: left allmulticast mode [ 311.448848][T16120] bond0: (slave bond_slave_1): Releasing backup interface [ 311.458768][T16120] bond_slave_1: left allmulticast mode [ 311.459061][T16126] __nla_validate_parse: 4 callbacks suppressed [ 311.459076][T16126] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2733'. [ 311.473378][T16120] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 311.517279][T15771] veth0_macvtap: entered promiscuous mode [ 311.554141][T15771] veth1_macvtap: entered promiscuous mode [ 311.589587][T15771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.620067][T15771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.658783][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.669158][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.688726][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.706192][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.759869][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 311.816221][T16143] netlink: 'syz.0.2739': attribute type 5 has an invalid length. [ 311.833983][T16143] : renamed from ipvlan0 [ 311.855066][T16140] syzkaller1: entered promiscuous mode [ 311.896337][T16145] netlink: 588 bytes leftover after parsing attributes in process `syz.4.2738'. [ 311.899998][T16140] syzkaller1: entered allmulticast mode [ 312.066221][ T8026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.092148][ T8026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.125550][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.145813][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.521517][T16184] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2751'. [ 312.664913][T16204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2758'. [ 312.674369][T16203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2758'. [ 312.998242][T16211] syz.4.2761: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.072190][T16211] CPU: 0 UID: 0 PID: 16211 Comm: syz.4.2761 Not tainted syzkaller #0 PREEMPT(full) [ 313.072216][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.072240][T16211] Call Trace: [ 313.072248][T16211] [ 313.072256][T16211] dump_stack_lvl+0x189/0x250 [ 313.072288][T16211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.072310][T16211] ? __pfx__printk+0x10/0x10 [ 313.072327][T16211] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 313.072350][T16211] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 313.072375][T16211] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 313.072398][T16211] warn_alloc+0x214/0x310 [ 313.072426][T16211] ? __pfx_warn_alloc+0x10/0x10 [ 313.072457][T16211] ? __get_vm_area_node+0x28f/0x300 [ 313.072488][T16211] ? nf_tables_newset+0x1330/0x2540 [ 313.072511][T16211] __vmalloc_node_range_noprof+0x690/0x12d0 [ 313.072566][T16211] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.072589][T16211] ? nf_tables_newset+0x1330/0x2540 [ 313.072612][T16211] ? rcu_is_watching+0x15/0xb0 [ 313.072633][T16211] ? nf_tables_newset+0x1330/0x2540 [ 313.072653][T16211] __kvmalloc_node_noprof+0x674/0x910 [ 313.072678][T16211] ? nf_tables_newset+0x1330/0x2540 [ 313.072700][T16211] ? nft_set_lookup+0x128/0x150 [ 313.072720][T16211] ? nft_hash_privsize+0x9f/0xf0 [ 313.072740][T16211] nf_tables_newset+0x1330/0x2540 [ 313.072773][T16211] ? __pfx_nf_tables_newset+0x10/0x10 [ 313.072814][T16211] ? __nla_parse+0x40/0x60 [ 313.072839][T16211] nfnetlink_rcv+0x11d9/0x2590 [ 313.072899][T16211] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 313.072940][T16211] ? ref_tracker_free+0x63a/0x7d0 [ 313.072987][T16211] ? __netlink_deliver_tap+0x807/0x850 [ 313.073004][T16211] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.073040][T16211] netlink_unicast+0x82f/0x9e0 [ 313.073073][T16211] ? __pfx_netlink_unicast+0x10/0x10 [ 313.073097][T16211] ? netlink_sendmsg+0x642/0xb30 [ 313.073112][T16211] ? skb_put+0x11b/0x210 [ 313.073134][T16211] netlink_sendmsg+0x805/0xb30 [ 313.073161][T16211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.073182][T16211] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.073207][T16211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.073224][T16211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.073242][T16211] __sock_sendmsg+0x21c/0x270 [ 313.073268][T16211] ____sys_sendmsg+0x505/0x830 [ 313.073294][T16211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.073322][T16211] ? import_iovec+0x74/0xa0 [ 313.073347][T16211] ___sys_sendmsg+0x21f/0x2a0 [ 313.073369][T16211] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.073425][T16211] ? __fget_files+0x2a/0x420 [ 313.073441][T16211] ? __fget_files+0x3a0/0x420 [ 313.073468][T16211] __x64_sys_sendmsg+0x19b/0x260 [ 313.073495][T16211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.073532][T16211] ? do_syscall_64+0xbe/0xfa0 [ 313.073559][T16211] do_syscall_64+0xfa/0xfa0 [ 313.073580][T16211] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.073602][T16211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.073619][T16211] ? clear_bhb_loop+0x60/0xb0 [ 313.073640][T16211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.073657][T16211] RIP: 0033:0x7fb493d8f6c9 [ 313.073673][T16211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.073688][T16211] RSP: 002b:00007fb491ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.073708][T16211] RAX: ffffffffffffffda RBX: 00007fb493fe5fa0 RCX: 00007fb493d8f6c9 [ 313.073721][T16211] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 313.073731][T16211] RBP: 00007fb493e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 313.073742][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.073753][T16211] R13: 00007fb493fe6038 R14: 00007fb493fe5fa0 R15: 00007ffcb01309c8 [ 313.073785][T16211] [ 313.073800][T16211] Mem-Info: [ 313.452710][T16211] active_anon:7980 inactive_anon:0 isolated_anon:0 [ 313.452710][T16211] active_file:2890 inactive_file:39963 isolated_file:0 [ 313.452710][T16211] unevictable:768 dirty:58 writeback:0 [ 313.452710][T16211] slab_reclaimable:11776 slab_unreclaimable:110383 [ 313.452710][T16211] mapped:31913 shmem:3391 pagetables:1278 [ 313.452710][T16211] sec_pagetables:0 bounce:0 [ 313.452710][T16211] kernel_misc_reclaimable:0 [ 313.452710][T16211] free:1314383 free_pcp:13278 free_cma:0 [ 313.527980][T16211] Node 0 active_anon:32920kB inactive_anon:0kB active_file:11560kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126152kB dirty:232kB writeback:0kB shmem:13228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13480kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 313.564169][T16211] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 313.596913][T16211] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.650246][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 313.661747][T16211] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 313.667986][T16211] Node 0 DMA32 free:1341224kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35020kB inactive_anon:0kB active_file:11560kB inactive_file:159652kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:35720kB local_pcp:19072kB free_cma:0kB [ 313.708442][T16211] lowmem_reserve[]: 0 0 0 0 0 [ 313.728801][T16211] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.784437][T16211] lowmem_reserve[]: 0 0 0 0 0 [ 313.794611][T16211] Node 1 Normal free:3898148kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17872kB local_pcp:5900kB free_cma:0kB [ 313.829279][T16253] syzkaller1: entered promiscuous mode [ 313.847923][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 313.876793][T16253] syzkaller1: entered allmulticast mode [ 313.892867][T16211] lowmem_reserve[]: 0 0 0 0 0 [ 313.903013][T16211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 313.945519][T16211] Node 0 DMA32: 2*4kB (UM) 48*8kB (ME) 221*16kB (UME) 245*32kB (UME) 102*64kB (UME) 77*128kB (UM) 50*256kB (UME) 26*512kB (UM) 18*1024kB (UM) 1*2048kB (M) 309*4096kB (UM) = 1340408kB [ 313.965064][T16211] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 313.979207][T16211] Node 1 Normal: 197*4kB (UE) 50*8kB (UME) 54*16kB (UME) 99*32kB (UME) 27*64kB (UME) 6*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3898148kB [ 313.998476][T16211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.008156][T16211] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.017684][T16211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.027395][T16211] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.036845][T16211] 45016 total pagecache pages [ 314.043879][T16211] 0 pages in swap cache [ 314.050426][T16211] Free swap = 124996kB [ 314.058395][T16211] Total swap = 124996kB [ 314.062789][T16258] netlink: 'syz.2.2770': attribute type 1 has an invalid length. [ 314.071961][T16211] 2097051 pages RAM [ 314.075885][T16258] netlink: 'syz.2.2770': attribute type 2 has an invalid length. [ 314.094848][T16211] 0 pages HighMem/MovableOnly [ 314.103122][T16211] 424119 pages reserved [ 314.139958][T16211] 0 pages cma reserved [ 314.212475][T16265] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2772'. [ 314.235278][T16265] only policy match revision 0 supported [ 314.235296][T16265] unable to load match [ 314.249627][T16264] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.646129][T16285] veth0_to_team: entered promiscuous mode [ 314.656108][T16290] netlink: 'syz.2.2778': attribute type 2 has an invalid length. [ 314.676933][T16290] netlink: 'syz.2.2778': attribute type 2 has an invalid length. [ 314.683589][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 314.686073][T16298] netlink: 'syz.2.2778': attribute type 2 has an invalid length. [ 314.702005][T16298] netlink: 'syz.2.2778': attribute type 2 has an invalid length. [ 314.711873][T16290] macsec0: entered promiscuous mode [ 314.717481][T16290] macsec0: entered allmulticast mode [ 314.760633][T16297] bridge1: entered promiscuous mode [ 314.776644][T16297] bridge1: entered allmulticast mode [ 314.799501][T16290] veth1_macvtap: entered allmulticast mode [ 314.806925][T16290] macsec0: left promiscuous mode [ 314.812240][T16290] macsec0: left allmulticast mode [ 314.817485][T16290] veth1_macvtap: left allmulticast mode [ 314.833249][T16295] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 314.848628][T16295] batadv_slave_0: entered promiscuous mode [ 314.855786][T16295] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 314.902498][T16295] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.965987][T16295] hsr1: entered allmulticast mode [ 314.985345][T16295] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 315.000926][T16295] batadv_slave_0: entered allmulticast mode [ 315.253778][T16353] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.2787'. [ 315.288848][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'. [ 315.483022][T16372] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 315.489872][T16372] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 315.701693][T16389] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 315.737389][T16389] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 315.749727][T16389] netlink: 'syz.1.2799': attribute type 2 has an invalid length. [ 315.917962][ T5837] Bluetooth: hci2: command 0x040f tx timeout [ 315.994771][T16408] bridge0: port 1(vlan0) entered blocking state [ 316.020476][T16408] bridge0: port 1(vlan0) entered disabled state [ 316.035075][T16408] vlan0: entered allmulticast mode [ 316.050808][T16408] bridge0: entered allmulticast mode [ 316.066980][T16408] vlan0: left allmulticast mode [ 316.075530][T16408] bridge0: left allmulticast mode [ 316.117241][T16424] veth0: entered promiscuous mode [ 316.136452][T16424] veth0: left promiscuous mode [ 316.433850][T16454] netlink: 'syz.3.2817': attribute type 6 has an invalid length. [ 316.459240][T16454] netlink: 'syz.3.2817': attribute type 5 has an invalid length. [ 316.473167][T16454] __nla_validate_parse: 15 callbacks suppressed [ 316.473184][T16454] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2817'. [ 316.481048][T16446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.503395][T16454] netlink: 'syz.3.2817': attribute type 5 has an invalid length. [ 316.514821][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2820'. [ 316.594961][T16467] netlink: 'syz.0.2819': attribute type 10 has an invalid length. [ 316.605455][T16436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.624012][T16469] netlink: 'syz.2.2823': attribute type 1 has an invalid length. [ 316.629978][T16467] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 316.892638][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'. [ 316.915676][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 316.948690][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2830'. [ 316.996673][T16496] batadv_slave_0: Caught tx_queue_len zero misconfig [ 317.008394][T16482] xt_cgroup: xt_cgroup: no path or classid specified [ 317.143656][T16499] netlink: 'syz.2.2829': attribute type 4 has an invalid length. [ 317.202921][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.218501][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.445003][T16524] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2835'. [ 317.468691][T16531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.597110][T16539] tipc: Enabling of bearer rejected, failed to enable media [ 317.808135][T16554] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2844'. [ 317.817689][T16554] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2844'. [ 317.827227][T16554] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 318.084366][T16570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2849'. [ 318.154738][T16576] tipc: Trying to set illegal importance in message [ 318.162918][T16576] netlink: 'syz.1.2851': attribute type 32 has an invalid length. [ 318.189574][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'. [ 318.232686][T16576] bond14: option coupled_control: invalid value (252) [ 318.260379][T16576] bond14 (unregistering): Released all slaves [ 318.405215][T16591] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 318.425388][T16591] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 318.672782][T16611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.937547][T16630] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 318.991656][T16630] team0: Mode changed to "loadbalance" [ 319.041514][T16630] bridge3: entered promiscuous mode [ 319.048062][T16630] bridge3: entered allmulticast mode [ 319.821583][ T5869] IPVS: starting estimator thread 0... [ 319.830682][T16694] IPVS: sh: FWM 3 0x00000003 - no destination available [ 319.847085][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 319.920641][T16696] IPVS: using max 31 ests per chain, 74400 per kthread [ 320.001766][T16708] syzkaller1: entered promiscuous mode [ 320.016604][T16708] syzkaller1: entered allmulticast mode [ 320.055541][T16712] dvmrp6: entered allmulticast mode [ 320.277173][T16721] geneve2: entered promiscuous mode [ 320.452196][T16734] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.785714][T16758] Unsupported ieee802154 address type: 0 [ 320.913809][T16761] sctp: [Deprecated]: syz.1.2906 (pid 16761) Use of int in maxseg socket option. [ 320.913809][T16761] Use struct sctp_assoc_value instead [ 320.945944][T16761] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.073486][T16772] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 321.089942][T16772] batadv_slave_0: entered promiscuous mode [ 321.097845][T16772] debugfs: 'hsr1' already exists in 'hsr' [ 321.103709][T16772] Cannot create hsr debugfs directory [ 321.110973][T16772] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 321.122672][T16772] hsr1: entered allmulticast mode [ 321.133787][T16772] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 321.149879][T16772] batadv_slave_0: entered allmulticast mode [ 321.546741][T16811] bond_slave_0: entered promiscuous mode [ 321.554340][T16811] bond_slave_0: entered allmulticast mode [ 321.607991][T16812] validate_nla: 5 callbacks suppressed [ 321.608009][T16812] netlink: 'syz.1.2920': attribute type 27 has an invalid length. [ 321.681746][T16815] netlink: 'syz.2.2921': attribute type 28 has an invalid length. [ 321.689848][T16815] netlink: 'syz.2.2921': attribute type 3 has an invalid length. [ 321.699686][T16815] __nla_validate_parse: 13 callbacks suppressed [ 321.699707][T16815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2921'. [ 321.833745][T16823] ipt_REJECT: TCP_RESET invalid for non-tcp [ 322.182222][T16847] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 322.907114][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.919889][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.921494][T16893] macvtap1: entered promiscuous mode [ 322.934860][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.944910][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.946252][T16893] macvtap1: entered allmulticast mode [ 322.962250][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.037426][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 323.056530][T16894] macvtap1: entered promiscuous mode [ 323.062768][T16894] macvtap1: entered allmulticast mode [ 323.095748][T16899] netem: change failed [ 323.097913][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 323.109071][T16906] netlink: 'syz.4.2947': attribute type 5 has an invalid length. [ 323.117177][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2947'. [ 323.169438][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 323.193291][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.204794][T16901] netlink: 'syz.0.2946': attribute type 5 has an invalid length. [ 323.215023][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 323.218657][T16901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2946'. [ 323.253159][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 323.327117][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.346035][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 323.502252][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.538395][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 323.644608][T16934] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 323.671416][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.694227][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 323.713823][T16939] netlink: 'syz.3.2958': attribute type 7 has an invalid length. [ 323.727014][T16937] x_tables: unsorted underflow at hook 3 [ 323.791864][T16944] veth23: entered allmulticast mode [ 324.106200][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2964'. [ 324.155878][T16971] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2963'. [ 324.164924][T16961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2964'. [ 324.476799][ T13] dvmrp0 (unregistering): left allmulticast mode [ 324.732017][ T13] bond1 (unregistering): Released all slaves [ 324.825821][ T13] bond2 (unregistering): Released all slaves [ 324.839090][ T13] bond3 (unregistering): Released all slaves [ 324.863194][ T13] bond0 (unregistering): Released all slaves [ 324.883244][ T13] bond4 (unregistering): Released all slaves [ 324.987108][ T13] bond5 (unregistering): Released all slaves [ 325.052317][ T5837] Bluetooth: hci5: command tx timeout [ 325.090865][ T13] bond6 (unregistering): (slave veth3): Releasing backup interface [ 325.100673][ T13] bond6 (unregistering): Released all slaves [ 325.114123][ T13] bond7 (unregistering): Released all slaves [ 325.204505][ T13] bond8 (unregistering): Released all slaves [ 325.218081][ T13] bond9 (unregistering): Released all slaves [ 325.310453][ T13] bond10 (unregistering): (slave veth5): Releasing active interface [ 325.320700][ T13] bond10 (unregistering): Released all slaves [ 325.410273][ T13] bond11 (unregistering): Released all slaves [ 325.423389][ T13] bond12 (unregistering): Released all slaves [ 325.435907][ T13] bond13 (unregistering): Released all slaves [ 325.539010][ T13] : left promiscuous mode [ 325.667056][ T13] tipc: Left network mode [ 325.697790][T16991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2973'. [ 325.750053][ T13] IPVS: stopping backup sync thread 12158 ... [ 326.065214][T17023] SET target dimension over the limit! [ 326.115756][T16892] chnl_net:caif_netlink_parms(): no params data found [ 326.125295][T17014] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 326.315209][ T13] mac80211_hwsim hwsim4 wlan0 (unregistering): left promiscuous mode [ 326.335501][T17034] can: request_module (can-proto-0) failed. [ 326.672212][T17041] syzkaller0: entered promiscuous mode [ 326.683922][T17041] syzkaller0: entered allmulticast mode [ 326.746446][T17046] tipc: Started in network mode [ 326.752877][T17046] tipc: Node identity 4a47ca72cc57, cluster identity 4711 [ 326.781401][T17046] tipc: Enabled bearer , priority 0 [ 326.842485][T17037] tipc: Resetting bearer [ 326.901278][T17037] tipc: Disabling bearer [ 327.016458][T17080] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 327.078839][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 327.095357][ T13] batadv_slave_0: left promiscuous mode [ 327.114881][ T13] hsr_slave_0: left promiscuous mode [ 327.121900][T17089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2993'. [ 327.127914][ T5837] Bluetooth: hci5: command tx timeout [ 327.132027][T17089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2993'. [ 327.149949][T17090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2990'. [ 327.159194][ T13] hsr_slave_1: left promiscuous mode [ 327.437528][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.958687][T17080] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 327.960613][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.976268][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.983959][T16892] bridge_slave_0: entered allmulticast mode [ 327.993773][T16892] bridge_slave_0: entered promiscuous mode [ 328.027608][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.034776][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.098343][T16892] bridge_slave_1: entered allmulticast mode [ 328.106175][T16892] bridge_slave_1: entered promiscuous mode [ 328.283698][T17114] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 328.392874][T17122] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 328.405137][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.455179][T17127] netlink: 'syz.3.3001': attribute type 3 has an invalid length. [ 328.474786][T17114] bond5: entered promiscuous mode [ 328.481384][T17114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.517519][T17117] bond5: (slave bridge11): making interface the new active one [ 328.547383][T17117] bridge11: entered promiscuous mode [ 328.560262][T17117] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 328.639719][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.850324][T16892] team0: Port device team_slave_0 added [ 328.863979][T16892] team0: Port device team_slave_1 added [ 328.903781][T17150] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 328.926843][T17150] netlink: 'syz.4.3005': attribute type 4 has an invalid length. [ 328.937059][T17150] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3005'. [ 329.015282][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.037940][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.069503][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.105616][ T13] IPVS: stop unused estimator thread 0... [ 329.110197][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.118792][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.154176][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.176433][T17164] vlan1: entered promiscuous mode [ 329.182471][T17164] geneve1: entered promiscuous mode [ 329.188851][T17164] vlan1: entered allmulticast mode [ 329.194140][T17164] geneve1: entered allmulticast mode [ 329.200025][ T5837] Bluetooth: hci5: command tx timeout [ 329.305944][T16892] hsr_slave_0: entered promiscuous mode [ 329.321793][T16892] hsr_slave_1: entered promiscuous mode [ 329.618775][T17182] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20004 [ 329.743772][T17185] tipc: Enabling of bearer rejected, already enabled [ 329.878540][T17194] netlink: 18168 bytes leftover after parsing attributes in process `syz.3.3015'. [ 330.159301][T17210] pim6reg: entered allmulticast mode [ 330.411471][T17231] raw_sendmsg: syz.0.3024 forgot to set AF_INET. Fix it! [ 330.621931][T17239] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3023'. [ 331.032727][T17236] netlink: 'syz.2.3023': attribute type 29 has an invalid length. [ 331.052095][T17239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3023'. [ 331.070137][T17238] netlink: 'syz.2.3023': attribute type 29 has an invalid length. [ 331.080560][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'. [ 331.287511][ T5837] Bluetooth: hci5: command tx timeout [ 331.508117][T16892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.585278][T16892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.610112][T16892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.612515][T17265] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 331.649493][T17268] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3031'. [ 331.651813][T16892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.785565][T17268] syzkaller0: entered promiscuous mode [ 331.791224][T17268] syzkaller0: entered allmulticast mode [ 333.422378][T17309] x_tables: duplicate underflow at hook 1 [ 333.530622][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.558343][T17318] netlink: 'syz.4.3037': attribute type 21 has an invalid length. [ 333.604177][T17318] __nla_validate_parse: 1 callbacks suppressed [ 333.604196][T17318] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3037'. [ 333.664035][T16892] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.693928][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.701187][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.742389][T17318] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3037'. [ 333.829491][T17325] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 333.862400][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.869585][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.946782][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 333.956262][T17327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3040'. [ 333.977001][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 333.996088][T17327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3040'. [ 334.134931][T17343] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3042'. [ 334.172101][T17344] netlink: 'syz.2.3043': attribute type 8 has an invalid length. [ 334.180844][T17343] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3042'. [ 334.225988][T17343] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3042'. [ 334.298815][T17344] netlink: 'syz.2.3043': attribute type 8 has an invalid length. [ 334.344141][T17351] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.365925][T17351] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 334.500855][T17344] netlink: 'syz.2.3043': attribute type 8 has an invalid length. [ 334.511144][T17351] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.524894][T17351] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 334.548642][T17358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3046'. [ 334.569380][T17344] netlink: 'syz.2.3043': attribute type 8 has an invalid length. [ 334.665067][T17351] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.677059][T17351] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 334.715161][T17344] netlink: 'syz.2.3043': attribute type 8 has an invalid length. [ 336.088388][T16892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.109255][T17351] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.133654][T17351] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 336.261844][T16892] veth0_vlan: entered promiscuous mode [ 336.279494][T16892] veth1_vlan: entered promiscuous mode [ 336.299947][ T62] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 336.344966][ T62] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.370814][ T62] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 336.433862][ T1148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.443245][ T1148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 336.460683][T16892] veth0_macvtap: entered promiscuous mode [ 336.532832][T17388] mac80211_hwsim hwsim8 wlan0 (unregistering): left promiscuous mode [ 336.554161][ T1148] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.563803][ T1148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 336.573130][T16892] veth1_macvtap: entered promiscuous mode [ 336.645335][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.654792][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 336.666396][T17400] syzkaller0: entered promiscuous mode [ 336.678937][T17400] syzkaller0: entered allmulticast mode [ 336.730169][T16892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.743405][T16892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.832614][T17411] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 336.861726][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.909504][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.969112][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.996158][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.318514][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.332282][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.415395][ T8026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.444115][ T8026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.618288][T17449] syzkaller0: entered promiscuous mode [ 337.624312][T17449] syzkaller0: entered allmulticast mode [ 339.046486][T17453] __nla_validate_parse: 5 callbacks suppressed [ 339.046499][T17453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3075'. [ 339.085032][T17469] tipc: Enabled bearer , priority 0 [ 339.106530][T17472] tipc: Disabling bearer [ 339.483205][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3081'. [ 339.495202][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3080'. [ 339.541733][T17493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.541733][T17490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.974916][T17528] openvswitch: netlink: IP tunnel dst address not specified [ 340.090604][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.102777][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.114412][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.125354][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 340.145479][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.174708][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.183489][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.274113][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.317749][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 340.385910][T17535] tipc: Enabled bearer , priority 0 [ 340.425402][T17539] ipvlan2: entered promiscuous mode [ 340.433454][T17535] syzkaller0: entered promiscuous mode [ 340.441048][T17535] syzkaller0: entered allmulticast mode [ 340.452809][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.464366][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 340.497016][T17539] batadv_slave_1: entered promiscuous mode [ 340.504801][T17537] syzkaller0: entered promiscuous mode [ 340.521413][T17537] syzkaller0: entered allmulticast mode [ 340.538566][T17538] batadv_slave_1: left promiscuous mode [ 340.604833][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.626565][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 340.656518][T17540] tipc: Resetting bearer [ 340.668682][T17537] tipc: Enabled bearer , priority 0 [ 340.679860][T17534] tipc: Resetting bearer [ 340.729267][T17534] tipc: Disabling bearer [ 340.744569][T17544] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3093'. [ 340.753816][T17546] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3094'. [ 340.764688][T17536] tipc: Resetting bearer [ 340.800393][T17536] tipc: Disabling bearer [ 340.823712][T17546] netlink: 720 bytes leftover after parsing attributes in process `syz.1.3094'. [ 341.003820][T17555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3096'. [ 341.148540][T17562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.248631][ T5837] Bluetooth: hci0: command tx timeout [ 342.491539][ T12] bond2 (unregistering): (slave gretap2): Releasing active interface [ 342.588497][ T12] team0: Port device geneve0 removed [ 343.146589][ T12] bond5 (unregistering): (slave bridge11): Releasing backup interface [ 343.154926][ T12] bridge11 (unregistering): left promiscuous mode [ 343.271174][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 343.282212][ T12] bond0 (unregistering): Released all slaves [ 343.294856][ T12] bond1 (unregistering): Released all slaves [ 343.308417][ T12] bond2 (unregistering): Released all slaves [ 343.398181][ T12] bond3 (unregistering): Released all slaves [ 343.491237][ T12] bond4 (unregistering): Released all slaves [ 343.580828][ T12] bond5 (unregistering): Released all slaves [ 343.746549][T17530] chnl_net:caif_netlink_parms(): no params data found [ 343.931854][T17610] bond8: option lp_interval: invalid value (0) [ 343.940965][T17610] bond8: option lp_interval: allowed values 1 - 2147483647 [ 343.954259][T17610] bond8 (unregistering): Released all slaves [ 344.086129][T17624] syzkaller0: entered promiscuous mode [ 344.110435][T17624] syzkaller0: entered allmulticast mode [ 344.120397][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.128180][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.135527][T17530] bridge_slave_0: entered allmulticast mode [ 344.144343][T17530] bridge_slave_0: entered promiscuous mode [ 344.163422][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.171526][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.179253][T17530] bridge_slave_1: entered allmulticast mode [ 344.188946][T17530] bridge_slave_1: entered promiscuous mode [ 344.241656][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.255726][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.304038][T17530] team0: Port device team_slave_0 added [ 344.313891][T17530] team0: Port device team_slave_1 added [ 344.319802][ T5837] Bluetooth: hci0: command tx timeout [ 344.365837][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.373527][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.400247][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.413865][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.421037][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.448012][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.523016][T17530] hsr_slave_0: entered promiscuous mode [ 344.530402][T17530] hsr_slave_1: entered promiscuous mode [ 344.537101][T17530] debugfs: 'hsr0' already exists in 'hsr' [ 344.543619][T17530] Cannot create hsr debugfs directory [ 344.846459][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3113'. [ 344.870093][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 344.884540][T17648] No such timeout policy "syz0" [ 344.887497][T17644] netlink: 'syz.4.3111': attribute type 9 has an invalid length. [ 344.962902][T17654] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3113'. [ 345.061319][T17658] ip6t_REJECT: ECHOREPLY is not supported [ 345.079341][T17658] ip6t_REJECT: ECHOREPLY is not supported [ 345.092762][T17645] netlink: 'syz.1.3113': attribute type 4 has an invalid length. [ 345.303581][T17673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3119'. [ 345.449801][ T12] tipc: Disabling bearer [ 345.461775][ T12] tipc: Left network mode [ 345.482093][T17682] netlink: zone id is out of range [ 345.509178][T17682] netlink: zone id is out of range [ 345.514349][T17682] netlink: zone id is out of range [ 345.529843][T17682] netlink: zone id is out of range [ 345.536967][T17679] syzkaller0: entered promiscuous mode [ 345.542784][T17682] netlink: zone id is out of range [ 345.558054][T17679] syzkaller0: entered allmulticast mode [ 345.562787][T17682] netlink: zone id is out of range [ 345.584224][T17682] netlink: zone id is out of range [ 345.600039][T17682] netlink: zone id is out of range [ 345.613199][T17682] netlink: zone id is out of range [ 345.649793][T17682] netlink: zone id is out of range [ 345.741832][T17692] tipc: Enabled bearer , priority 0 [ 345.813425][T17678] tipc: Resetting bearer [ 345.873650][T17678] tipc: Disabling bearer [ 346.124417][T17530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.203925][T17530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.242367][T17530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.369122][T17530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.397706][ T5837] Bluetooth: hci0: command tx timeout [ 346.599830][ T12] hsr_slave_0: left promiscuous mode [ 346.633272][ T12] hsr_slave_1: left promiscuous mode [ 346.656043][ T12] vlan0: left allmulticast mode [ 346.675128][ T12] vlan0: left promiscuous mode [ 346.716867][ T12] pim6reg (unregistering): left allmulticast mode [ 346.954494][ T7305] smc: removing ib device syz1 [ 347.946015][T17767] syzkaller0: entered promiscuous mode [ 347.951971][T17767] syzkaller0: entered allmulticast mode [ 348.095351][T17530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.286873][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.330326][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.337626][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.425764][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.432987][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.487971][ T5840] Bluetooth: hci0: command tx timeout [ 348.774689][T17828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3153'. [ 349.072982][T17832] macsec2: entered promiscuous mode [ 349.087146][T17832] macsec2: entered allmulticast mode [ 349.105283][T17832] bond1: (slave macsec2): Error -34 calling dev_set_mtu [ 349.192954][T17844] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 349.246682][T17844] team0: Device macvtap0 is already an upper device of the team interface [ 349.401072][T17845] tipc: Enabled bearer , priority 0 [ 349.477135][T17834] syzkaller0: entered promiscuous mode [ 349.486250][T17834] syzkaller0: entered allmulticast mode [ 349.497659][T17834] tipc: Resetting bearer [ 349.544706][T17825] tipc: Resetting bearer [ 350.417436][T16340] tipc: Node number set to 2226861009 [ 351.235456][T17825] tipc: Disabling bearer [ 351.263485][T17862] sit1: entered promiscuous mode [ 351.268633][T17862] sit1: entered allmulticast mode [ 351.289934][T17874] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3158'. [ 351.324009][T17872] syzkaller0: entered promiscuous mode [ 351.336894][T17872] syzkaller0: entered allmulticast mode [ 351.405206][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.455428][ T12] IPVS: stop unused estimator thread 0... [ 351.664454][T17530] veth0_vlan: entered promiscuous mode [ 351.741163][T17530] veth1_vlan: entered promiscuous mode [ 351.790549][T17916] syzkaller0: entered promiscuous mode [ 351.796711][T17916] syzkaller0: entered allmulticast mode [ 351.806497][T17918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3168'. [ 351.809407][T17530] veth0_macvtap: entered promiscuous mode [ 351.884886][T17530] veth1_macvtap: entered promiscuous mode [ 351.964726][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.997116][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.030840][T17932] net_ratelimit: 6 callbacks suppressed [ 352.030875][T17932] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 352.045592][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.073521][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.117724][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.160278][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.242046][ T7305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.259276][ T7305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.335812][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.352674][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.512215][T17960] syz.2.3181 uses old SIOCAX25GETINFO [ 352.693649][T17922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.018302][T17983] bond0: entered promiscuous mode [ 353.023396][T17983] bond_slave_0: entered promiscuous mode [ 353.050741][T17983] bond_slave_1: entered promiscuous mode [ 353.062689][T17983] batadv0: entered promiscuous mode [ 353.088641][T17983] batadv0: left promiscuous mode [ 353.097697][T17983] bond0: left promiscuous mode [ 353.107563][T17983] bond_slave_0: left promiscuous mode [ 353.120571][T17983] bond_slave_1: left promiscuous mode [ 353.203318][T17988] Cannot find add_set index 1 as target [ 353.425328][T17998] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.437154][T18001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3193'. [ 353.448683][T18001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3193'. [ 353.458405][T18002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3193'. [ 353.693610][T18016] bridge0: port 3(batadv1) entered blocking state [ 353.700533][T18016] bridge0: port 3(batadv1) entered disabled state [ 353.707096][T18016] batadv1: entered allmulticast mode [ 353.714470][T18016] batadv1: entered promiscuous mode [ 353.782253][T17984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 353.790711][T17984] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 353.858671][T17984] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 353.873441][T17984] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 353.904766][T18023] netlink: 'syz.3.3200': attribute type 10 has an invalid length. [ 353.912922][T17984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.925047][T17984] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 353.939176][T18023] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 353.948587][T18023] team0: Failed to send options change via netlink (err -105) [ 353.956116][T18023] team0: Port device dummy0 added [ 353.963453][T18023] netlink: 'syz.3.3200': attribute type 10 has an invalid length. [ 353.980323][T18023] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 353.996195][T18023] team0: Failed to send options change via netlink (err -105) [ 354.004619][T18023] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 354.013964][T18023] team0: Port device dummy0 removed [ 354.022698][T18023] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 354.074365][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 354.198034][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 354.208023][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 354.245457][T18031] bond2: option all_slaves_active: invalid value (222) [ 354.253923][T18031] bond2 (unregistering): Released all slaves [ 354.586157][T18050] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3207'. [ 354.653169][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3206'. [ 354.832658][T18062] syzkaller1: entered promiscuous mode [ 354.838433][T18064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3210'. [ 354.838438][T18062] syzkaller1: entered allmulticast mode [ 354.963759][T18069] netlink: 'syz.3.3211': attribute type 10 has an invalid length. [ 355.006267][T17986] udevd[17986]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.010003][T18069] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 355.020752][T17986] udevd[17986]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.026111][T18069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3211'. [ 355.238846][T18081] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.246703][T18083] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.274150][T18084] netlink: 'syz.3.3216': attribute type 83 has an invalid length. [ 355.280244][T18081] bridge10: entered promiscuous mode [ 355.287713][T18081] bridge10: entered allmulticast mode [ 355.393627][T18086] syzkaller0: entered promiscuous mode [ 355.399994][T18086] syzkaller0: entered allmulticast mode [ 355.410447][T18086] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 355.792853][T18106] bond0: (slave dummy0): Releasing backup interface [ 355.808948][T18106] bridge_slave_0: left allmulticast mode [ 355.814646][T18106] bridge_slave_0: left promiscuous mode [ 355.821846][T18106] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.832223][T18106] bridge_slave_1: left allmulticast mode [ 355.840638][T18106] bridge_slave_1: left promiscuous mode [ 355.846420][T18106] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.857687][T18106] bond0: (slave bond_slave_0): Releasing backup interface [ 355.869713][T18106] bond0: (slave bond_slave_1): Releasing backup interface [ 355.889965][T18106] team0: Port device team_slave_0 removed [ 355.901979][T18106] team0: Port device team_slave_1 removed [ 355.911758][T18106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.919895][T18106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.928461][T18106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.935936][T18106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.945172][T18106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.355421][T18143] __nla_validate_parse: 10 callbacks suppressed [ 356.355433][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3236'. [ 356.741047][T18162] bond6: entered promiscuous mode [ 356.746106][T18162] bond6: entered allmulticast mode [ 356.752749][T18162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.239915][T18187] bridge0: port 1(batadv2) entered blocking state [ 357.246664][T18187] bridge0: port 1(batadv2) entered disabled state [ 357.255166][T18187] batadv2: entered allmulticast mode [ 357.263282][T18187] batadv2: entered promiscuous mode [ 357.382879][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3252'. [ 357.458482][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'. [ 357.470989][T18200] bridge_slave_1: left allmulticast mode [ 357.476711][T18200] bridge_slave_1: left promiscuous mode [ 357.482624][T18200] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.493258][T18200] bridge_slave_0: left allmulticast mode [ 357.499666][T18200] bridge_slave_0: left promiscuous mode [ 357.505527][T18200] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.582576][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 357.592380][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 357.601410][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'. [ 357.679880][T18212] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 357.742124][ T3510] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 357.751678][ T3510] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 357.772070][T18216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3260'. [ 358.215530][T18243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3267'. [ 358.226026][T18246] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 358.771323][T18284] tipc: Enabled bearer , priority 0 [ 358.783840][T18284] syzkaller0: entered promiscuous mode [ 358.789761][T18284] syzkaller0: entered allmulticast mode [ 358.805190][T18281] tipc: Resetting bearer [ 358.827681][T18281] tipc: Disabling bearer [ 358.978993][T18294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3282'. [ 359.047962][T18295] block nbd2: Unsupported socket: should be TCP or UNIX. [ 359.724936][T18298] unsupported nla_type 52263 [ 359.803902][T18302] netlink: 'syz.4.3285': attribute type 10 has an invalid length. [ 359.930420][T18311] bond2: option mode: invalid value (133) [ 359.941069][T18311] bond2 (unregistering): Released all slaves [ 360.114297][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 360.132726][T18319] syzkaller1: entered promiscuous mode [ 360.138520][T18319] syzkaller1: entered allmulticast mode [ 360.138918][ T30] audit: type=1107 audit(1762864296.128:2): pid=18320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='FŒe7aq.\QCn%/Od<s!|`ɯkUng!37rLq*7wy' [ 360.435343][T18343] IPVS: set_ctl: invalid protocol: 135 172.30.0.4:20000 [ 360.491390][T18349] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 360.519542][T18349] team1: entered promiscuous mode [ 360.524684][T18349] team1: entered allmulticast mode [ 360.535146][T18349] 8021q: VLANs not supported on ipvlan1 [ 360.544647][T18348] 8021q: VLANs not supported on ipvlan1 [ 360.551328][T18352] syzkaller0: entered promiscuous mode [ 360.556942][T18352] syzkaller0: entered allmulticast mode [ 360.580000][T18352] tipc: Enabled bearer , priority 0 [ 360.589286][T18351] tipc: Resetting bearer [ 360.610009][T18351] tipc: Disabling bearer [ 360.929543][T18377] netlink: 'syz.3.3306': attribute type 1 has an invalid length. [ 360.963872][T18377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.995467][T18377] bond2: (slave veth5): Enslaving as an active interface with a down link [ 361.031077][T18377] bond2: (slave veth7): Enslaving as an active interface with a down link [ 361.539510][T18416] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 361.714525][T18418] ip6t_srh: unknown srh invflags 4000 [ 361.940325][T18429] __nla_validate_parse: 7 callbacks suppressed [ 361.940346][T18429] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3321'. [ 361.959271][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3321'. [ 362.091050][T18435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3324'. [ 362.105946][T18435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3324'. [ 362.121939][T18437] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3325'. [ 362.139725][T18437] gretap0: entered promiscuous mode [ 362.270905][T18446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3328'. [ 362.343485][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3330'. [ 362.348118][T18455] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3330'. [ 362.362249][T18455] 8021q: VLANs not supported on ip_vti0 [ 362.415098][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 362.893434][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 363.074331][T18507] netlink: 'syz.3.3345': attribute type 24 has an invalid length. [ 363.929951][T18567] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 363.941377][T18567] bond7 (unregistering): Released all slaves [ 364.500173][T18583] xt_TCPMSS: Only works on TCP SYN packets [ 365.196139][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.213990][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.224038][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.233539][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.385377][T18601] tipc: Enabling of bearer rejected, failed to enable media [ 378.640661][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.646993][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.081106][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.087628][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.197808][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 497.038178][ T31] INFO: task syz-executor:5833 blocked for more than 143 seconds. [ 497.046036][ T31] Not tainted syzkaller #0 [ 497.051094][ T31] Blocked by coredump. [ 497.055664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.064482][ T31] task:syz-executor state:D stack:21736 pid:5833 tgid:5833 ppid:1 task_flags:0x40054c flags:0x00080003 [ 497.076781][ T31] Call Trace: [ 497.080197][ T31] [ 497.083131][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 497.087723][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.092706][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.100592][ T31] ? __pfx___schedule+0x10/0x10 [ 497.105614][ T31] ? schedule+0x91/0x360 [ 497.117416][ T31] schedule+0x165/0x360 [ 497.121635][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.127121][ T31] __mutex_lock+0x7e6/0x1350 [ 497.177747][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.182595][ T31] ? rfkill_unregister+0xc8/0x220 [ 497.187980][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.193006][ T31] ? __pfx_device_del+0x10/0x10 [ 497.197958][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 497.203172][ T31] rfkill_unregister+0xc8/0x220 [ 497.208083][ T31] hci_unregister_dev+0x374/0x510 [ 497.213145][ T31] vhci_release+0x152/0x1a0 [ 497.218156][ T31] ? __pfx_vhci_release+0x10/0x10 [ 497.223220][ T31] __fput+0x44c/0xa70 [ 497.227212][ T31] task_work_run+0x1d4/0x260 [ 497.231875][ T31] ? __pfx_task_work_run+0x10/0x10 [ 497.236974][ T31] ? do_exit+0x6b0/0x2300 [ 497.241365][ T31] ? kmem_cache_free+0x19b/0x690 [ 497.246330][ T31] do_exit+0x6b5/0x2300 [ 497.250782][ T31] ? do_raw_spin_lock+0x121/0x290 [ 497.255808][ T31] ? __pfx_do_exit+0x10/0x10 [ 497.260445][ T31] do_group_exit+0x21c/0x2d0 [ 497.265028][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.270242][ T31] get_signal+0x1285/0x1340 [ 497.274740][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 497.281299][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 497.287552][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 497.293024][ T31] exit_to_user_mode_loop+0x72/0x130 [ 497.298359][ T31] do_syscall_64+0x2bd/0xfa0 [ 497.302938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.308444][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.314521][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.319229][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.325203][ T31] RIP: 0033:0x7f5f9478e0dc [ 497.329773][ T31] RSP: 002b:00007ffc26114850 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.338664][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f5f9478e0dc [ 497.346632][ T31] RDX: 0000000000000030 RSI: 00007ffc26114910 RDI: 00000000000000f9 [ 497.354618][ T31] RBP: 00007ffc261148bc R08: 0000000000000000 R09: 0079746972756365 [ 497.362678][ T31] R10: 00007ffc26114210 R11: 0000000000000246 R12: 0000000000000292 [ 497.371207][ T31] R13: 00000000000927c0 R14: 0000000000056164 R15: 00007ffc26114910 [ 497.379261][ T31] [ 497.382347][ T31] INFO: task kworker/1:24:16331 blocked for more than 143 seconds. [ 497.390419][ T31] Not tainted syzkaller #0 [ 497.395341][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.404266][ T31] task:kworker/1:24 state:D stack:24872 pid:16331 tgid:16331 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 497.416293][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 497.423035][ T31] Call Trace: [ 497.426326][ T31] [ 497.429517][ T31] __schedule+0x1798/0x4cc0 [ 497.434018][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 497.439490][ T31] ? __pfx___schedule+0x10/0x10 [ 497.444342][ T31] ? schedule+0x91/0x360 [ 497.448652][ T31] schedule+0x165/0x360 [ 497.452829][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.458569][ T31] __mutex_lock+0x7e6/0x1350 [ 497.463160][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.467965][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 497.474192][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.479248][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 497.484959][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 497.490952][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 497.497010][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 497.502928][ T31] process_scheduled_works+0xae1/0x17b0 [ 497.508686][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.514704][ T31] worker_thread+0x8a0/0xda0 [ 497.519973][ T31] kthread+0x711/0x8a0 [ 497.524055][ T31] ? __pfx_worker_thread+0x10/0x10 [ 497.529260][ T31] ? __pfx_kthread+0x10/0x10 [ 497.533855][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.539214][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.544417][ T31] ? __pfx_kthread+0x10/0x10 [ 497.549149][ T31] ret_from_fork+0x4bc/0x870 [ 497.553746][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 497.558886][ T31] ? __switch_to_asm+0x39/0x70 [ 497.563630][ T31] ? __switch_to_asm+0x33/0x70 [ 497.568440][ T31] ? __pfx_kthread+0x10/0x10 [ 497.573034][ T31] ret_from_fork_asm+0x1a/0x30 [ 497.578084][ T31] [ 497.581129][ T31] INFO: task syz.0.3078:17956 blocked for more than 143 seconds. [ 497.589294][ T31] Not tainted syzkaller #0 [ 497.594244][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.603011][ T31] task:syz.0.3078 state:D stack:25960 pid:17956 tgid:17956 ppid:17530 task_flags:0x400040 flags:0x00080002 [ 497.615300][ T31] Call Trace: [ 497.618653][ T31] [ 497.621576][ T31] __schedule+0x1798/0x4cc0 [ 497.626079][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.631018][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.635867][ T31] ? __pfx___schedule+0x10/0x10 [ 497.641041][ T31] ? schedule+0x91/0x360 [ 497.645275][ T31] schedule+0x165/0x360 [ 497.649592][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.655065][ T31] __mutex_lock+0x7e6/0x1350 [ 497.659727][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.664486][ T31] ? rfkill_unregister+0xc8/0x220 [ 497.669779][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.674820][ T31] ? __pfx_device_del+0x10/0x10 [ 497.679799][ T31] rfkill_unregister+0xc8/0x220 [ 497.684663][ T31] nfc_unregister_device+0x96/0x2a0 [ 497.689889][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 497.695605][ T31] virtual_ncidev_close+0x56/0x90 [ 497.700904][ T31] __fput+0x44c/0xa70 [ 497.704895][ T31] task_work_run+0x1d4/0x260 [ 497.709506][ T31] ? __pfx_task_work_run+0x10/0x10 [ 497.714613][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 497.720120][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 497.725390][ T31] do_syscall_64+0x2bd/0xfa0 [ 497.730363][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.736414][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.742603][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.747318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.753207][ T31] RIP: 0033:0x7f825f18f6c9 [ 497.758153][ T31] RSP: 002b:00007ffce9527858 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 497.766576][ T31] RAX: 0000000000000000 RBX: 00007f825f3e7da0 RCX: 00007f825f18f6c9 [ 497.774587][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 497.782621][ T31] RBP: 00007f825f3e7da0 R08: 0000000000000254 R09: 0000001ee9527b4f [ 497.790865][ T31] R10: 00007f825f3e7cb0 R11: 0000000000000246 R12: 00000000000563ff [ 497.798867][ T31] R13: 00007f825f3e6090 R14: ffffffffffffffff R15: 00007ffce9527970 [ 497.806835][ T31] [ 497.809889][ T31] INFO: task syz-executor:17989 blocked for more than 144 seconds. [ 497.821827][ T31] Not tainted syzkaller #0 [ 497.826765][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.835448][ T31] task:syz-executor state:D stack:28008 pid:17989 tgid:17989 ppid:1 task_flags:0x400040 flags:0x00080000 [ 497.847752][ T31] Call Trace: [ 497.851022][ T31] [ 497.853937][ T31] __schedule+0x1798/0x4cc0 [ 497.858469][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.863308][ T31] ? __lock_acquire+0xab9/0xd20 [ 497.868172][ T31] ? __pfx___schedule+0x10/0x10 [ 497.873015][ T31] ? schedule+0x91/0x360 [ 497.877740][ T31] schedule+0x165/0x360 [ 497.881914][ T31] schedule_preempt_disabled+0x13/0x30 [ 497.887416][ T31] __mutex_lock+0x7e6/0x1350 [ 497.891993][ T31] ? __mutex_lock+0x5bb/0x1350 [ 497.896739][ T31] ? rfkill_register+0x37/0x8e0 [ 497.901604][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 497.906618][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 497.912176][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 497.917750][ T31] ? device_initialize+0x24b/0x440 [ 497.922881][ T31] rfkill_register+0x37/0x8e0 [ 497.927602][ T31] hci_register_dev+0x3f5/0x890 [ 497.932458][ T31] vhci_create_device+0x39c/0x650 [ 497.938030][ T31] vhci_write+0x3ce/0x4a0 [ 497.942381][ T31] vfs_write+0x5c9/0xb30 [ 497.946636][ T31] ? __pfx_vhci_write+0x10/0x10 [ 497.951530][ T31] ? __pfx_vfs_write+0x10/0x10 [ 497.956286][ T31] ? count_memcg_event_mm+0x21/0x260 [ 497.961718][ T31] ksys_write+0x145/0x250 [ 497.966039][ T31] ? __pfx_ksys_write+0x10/0x10 [ 497.971167][ T31] ? do_syscall_64+0xbe/0xfa0 [ 497.975837][ T31] do_syscall_64+0xfa/0xfa0 [ 497.980359][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.985542][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.991622][ T31] ? clear_bhb_loop+0x60/0xb0 [ 497.996285][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.002469][ T31] RIP: 0033:0x7f343298e140 [ 498.006879][ T31] RSP: 002b:00007ffcd6b43358 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 498.015329][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f343298e140 [ 498.023334][ T31] RDX: 0000000000000002 RSI: 00007ffcd6b4336a RDI: 00000000000000ca [ 498.031567][ T31] RBP: 00007f3432be67b8 R08: 0000000000000000 R09: 00007f343371d6c0 [ 498.039564][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 498.047568][ T31] R13: 0000000000000003 R14: 00007ffcd6b436b8 R15: 0000000000000000 [ 498.055536][ T31] [ 498.058930][ T31] [ 498.058930][ T31] Showing all locks held in the system: [ 498.066646][ T31] 1 lock held by khungtaskd/31: [ 498.071634][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 498.081554][ T31] 1 lock held by kworker/u8:2/36: [ 498.086577][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 498.096803][ T31] 2 locks held by getty/5585: [ 498.101495][ T31] #0: ffff88814d97b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 498.111268][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 498.121635][ T31] 1 lock held by syz-executor/5833: [ 498.126814][ T31] #0: ffffffff8f5ab3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 498.137063][ T31] 3 locks held by kworker/1:24/16331: [ 498.142438][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 498.153649][ T31] #1: ffffc90003887ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 498.167327][ T31] #2: ffffffff8f5ab3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 498.179085][ T31] 2 locks held by syz.0.3078/17956: [ 498.184272][ T31] #0: ffff88802c918100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 498.194132][ T31] #1: ffffffff8f5ab3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 498.204377][ T31] 2 locks held by syz.1.3188/17984: [ 498.209916][ T31] #0: ffffffff8f5ab3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 498.220049][ T31] #1: ffff88802c918100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 498.229737][ T31] 2 locks held by syz-executor/17989: [ 498.235090][ T31] #0: ffff888030043118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 498.245403][ T31] #1: ffffffff8f5ab3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 498.255378][ T31] 3 locks held by syz.4.3368/18583: [ 498.260584][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.269293][ T31] #1: ffff888066931100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 498.278889][ T31] #2: ffffffff8f5ab3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 498.288976][ T31] 1 lock held by syz.4.3368/18588: [ 498.294074][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.302892][ T31] 1 lock held by syz.3.3370/18599: [ 498.308066][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.316522][ T31] 1 lock held by syz.3.3370/18600: [ 498.322064][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.331296][ T31] 1 lock held by syz.3.3370/18601: [ 498.336419][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.345023][ T31] 1 lock held by syz-executor/18610: [ 498.350320][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.359032][ T31] 1 lock held by syz-executor/18611: [ 498.364299][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.372777][ T31] 1 lock held by syz-executor/18613: [ 498.378066][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.386486][ T31] 1 lock held by syz-executor/18615: [ 498.392116][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.400754][ T31] 1 lock held by syz-executor/18617: [ 498.406033][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.414541][ T31] 1 lock held by syz-executor/18621: [ 498.420115][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.428587][ T31] 1 lock held by syz-executor/18622: [ 498.433851][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.442333][ T31] 1 lock held by syz-executor/18627: [ 498.448128][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.456568][ T31] 1 lock held by syz-executor/18629: [ 498.461880][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.470384][ T31] 1 lock held by syz-executor/18631: [ 498.475655][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.484455][ T31] 1 lock held by syz-executor/18634: [ 498.489770][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.498248][ T31] 1 lock held by syz-executor/18635: [ 498.503513][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 498.512339][ T31] [ 498.514663][ T31] ============================================= [ 498.514663][ T31] [ 498.523152][ T31] NMI backtrace for cpu 0 [ 498.523167][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 498.523178][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.523184][ T31] Call Trace: [ 498.523188][ T31] [ 498.523194][ T31] dump_stack_lvl+0x189/0x250 [ 498.523212][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.523224][ T31] ? __pfx__printk+0x10/0x10 [ 498.523240][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 498.523253][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 498.523265][ T31] ? __pfx__printk+0x10/0x10 [ 498.523276][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.523292][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 498.523304][ T31] watchdog+0xf60/0xfa0 [ 498.523316][ T31] ? watchdog+0x1e2/0xfa0 [ 498.523329][ T31] kthread+0x711/0x8a0 [ 498.523343][ T31] ? __pfx_watchdog+0x10/0x10 [ 498.523351][ T31] ? __pfx_kthread+0x10/0x10 [ 498.523364][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.523377][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.523389][ T31] ? __pfx_kthread+0x10/0x10 [ 498.523400][ T31] ret_from_fork+0x4bc/0x870 [ 498.523412][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 498.523425][ T31] ? __switch_to_asm+0x39/0x70 [ 498.523432][ T31] ? __switch_to_asm+0x33/0x70 [ 498.523439][ T31] ? __pfx_kthread+0x10/0x10 [ 498.523451][ T31] ret_from_fork_asm+0x1a/0x30 [ 498.523467][ T31] [ 498.523471][ T31] Sending NMI from CPU 0 to CPUs 1: [ 498.669389][ C1] NMI backtrace for cpu 1 [ 498.669405][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 498.669422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.669432][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 498.669456][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 498.669470][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 498.669484][ C1] RAX: e3536bf9e9a0d000 RBX: ffffffff81967bf7 RCX: e3536bf9e9a0d000 [ 498.669496][ C1] RDX: 0000000000000001 RSI: ffffffff8d70db4f RDI: ffffffff8bbf0760 [ 498.669506][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 498.669518][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce270 [ 498.669530][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 498.669539][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 498.669552][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.669562][ C1] CR2: 00005592d26be168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 498.669576][ C1] Call Trace: [ 498.669584][ C1] [ 498.669590][ C1] default_idle+0x13/0x20 [ 498.669605][ C1] default_idle_call+0x73/0xb0 [ 498.669620][ C1] do_idle+0x1e7/0x510 [ 498.669641][ C1] ? __pfx_do_idle+0x10/0x10 [ 498.669666][ C1] cpu_startup_entry+0x44/0x60 [ 498.669681][ C1] start_secondary+0x101/0x110 [ 498.669702][ C1] common_startup_64+0x13e/0x147 [ 498.669731][ C1] [ 501.520193][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.526493][ T1302] ieee802154 phy1 wpan1: encryption failed: -22