last executing test programs: 3m2.578811077s ago: executing program 0 (id=21203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)="25d7", 0x2, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000500)="07ce3ffb503dc584971fbfb2290b853bc7b0673fe11410d07bdbd650199cdd7be1e0002ca2e8bdbe3e3353212a043b7f0d2a056cc451bdb4e05cd9cf6674633138cf1036b4b2da2f11ac766392ca988c2a143198fbe06788597ee92a480a59bede26a8c381e46286c9b40d0b", 0x6c, 0x40490d4, 0x0, 0x0) 3m2.455986816s ago: executing program 0 (id=21206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x104}], 0x1, 0x10102, 0x0) 3m1.967832081s ago: executing program 0 (id=21212): r0 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m1.262680507s ago: executing program 0 (id=21216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3m1.121200727s ago: executing program 0 (id=21219): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) 3m0.92507112s ago: executing program 0 (id=21223): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700003e02000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m45.464389741s ago: executing program 32 (id=21223): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700003e02000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m30.418766705s ago: executing program 5 (id=21291): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m15.245585339s ago: executing program 33 (id=21291): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m15.233975808s ago: executing program 1 (id=21475): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 2m13.749756s ago: executing program 1 (id=21474): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2m13.067835522s ago: executing program 1 (id=21479): shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 2m12.478806497s ago: executing program 1 (id=21484): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@mcast2, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874f72cf86d73d32f462e5947e4ad380feb56a29357215d78fc44", 0x33}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 2m12.300018212s ago: executing program 1 (id=21485): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044000}}], 0x1, 0x8004) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 2m11.347974048s ago: executing program 1 (id=21491): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m56.127541463s ago: executing program 34 (id=21491): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.400234658s ago: executing program 2 (id=22195): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffd2b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xa) 6.911917929s ago: executing program 2 (id=22202): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28d}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 6.202591672s ago: executing program 7 (id=22205): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$packet(r4, 0x0, 0x0, 0x40, 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x41) syz_80211_inject_frame(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="94000f0008021100000008021100000101601622361f1ef1d2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf7d49d6ce6f5404f6f10ed55359ff61e4b65434541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4ad82f2eed1d432144dc91875e18b84ab08cd4de6f1ec94c06c6bc093d2a410fb77086a5c77b7ce81e3e05111a93d29661858746dd931dec371d50ae2dbbfc8536f02f49808ff0269a0c0cae3f0006ec29a49b55c173eaf8207"], 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x100, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)=ANY=[]) 5.609391894s ago: executing program 4 (id=22208): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffffff000) 5.47430265s ago: executing program 2 (id=22209): syz_emit_ethernet(0x349, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x313, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {}, {0x0, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x7ffffffffffffc}, {}, 0x0, 0x6e6bb4, 0x0, 0x0, 0x1}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000340)=@id, &(0x7f0000000400)=0x10, 0x800) accept4$tipc(r1, &(0x7f0000000440)=@name, &(0x7f0000000480)=0x10, 0x80000) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$kcm(0x2, 0x3, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300"], 0x7c}}, 0x4c850) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x0) 5.072224819s ago: executing program 7 (id=22210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x80000001, 0x7f, 0xe, 0x80, 0xf, 0x3800000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000ff0000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000210a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 4.542965005s ago: executing program 4 (id=22212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f00000002c0)="570f68ea6860448eb085bb88f1211e72c74fcbdb5f07050943b9b46ff8f360453afb0817496e4e74565c1237", &(0x7f0000001740)=""/190}, 0x20) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="8ec6b1ee58ca706c1650eb9a56cb55897a498e6841bedf1145bb9b3a049dc5f35a05b9fc944a17802af0a89c28db4d911720f368d3ed2d2ed06396b7d4db9619ee1eac8fedc33624e74db8132c9ee4b5604686bd73df8ade2e4b", &(0x7f0000000740)=""/4096}, 0x20) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r5 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x11d, 0x20, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f00000000c0)) 4.541944993s ago: executing program 7 (id=22213): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="15abdf9ce90d70f5c9da80cc813ca02004a40c2a02d3d60d7e18377b8372b3c57f", 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x1d8, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a5920b9b604a315f65f63d88a1166fece939cd3fdbbabe9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c9f3742ee8a6ad4d63ed2f369d9a3e9e81ef5871088eafd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ba808baba74dc5f5def77f2f81d27c62948b7c1bf2c6194b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea478da876730ba9936ff5b0901b40d53dea2c26721e11fa"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "81b3d4a803074632d5b7291e91294eb9b76292467d738689"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d73214edb6ed65683f93ba5bc0696b8ac290fef255c75251"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "101dc76fc95a172b077c6dcd8ba0b8c2091047a6db6d84d2"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.507420825s ago: executing program 2 (id=22214): setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x38f, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c020000090a010400000000000000000a0000040900010073797a31000000000800054000000004090002"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'tunl0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x6a040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0), 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0xff, 0x12}, 0x2c) 4.277737021s ago: executing program 3 (id=22215): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='z', 0x1}], 0x1}}], 0x1, 0x4004004) 4.21500384s ago: executing program 7 (id=22216): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x997}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 4.070934372s ago: executing program 3 (id=22217): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r4, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) listen(r1, 0x39e) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4048805}, 0x4000055) 3.994027284s ago: executing program 4 (id=22218): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.932814596s ago: executing program 6 (id=22219): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000001000030429bd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="06000e000300ee00060003001000854be9a707d4010440f112be348f", @ANYBLOB], 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01052cd27000fedbdf251d00000008001d000400000008001e00300b000008040100", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r2) socket$inet_udplite(0x2, 0x2, 0x88) 3.803001729s ago: executing program 4 (id=22220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r3, 0x3f38e000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000680)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x6b8}, 0x18) write(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$can_raw(r1, 0x0, 0x20) shutdown(r4, 0x1) 3.636094497s ago: executing program 6 (id=22221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x3) close(0x3) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x6, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000740)="6210b5fbfbbba9ebb9ff5a355aa1979d0f65e56ba05990845631fef252d7816c981f6a21940c5e") sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x105) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x3, 0x2, 0x42, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x1, 0xd, 0x4}}) sendmmsg$inet6(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @loopback, 0x4}, 0x1c, &(0x7f0000000080), 0x0, &(0x7f0000003d00)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}}}], 0x20}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0xa, @mcast2, 0x2}, 0x1c, &(0x7f0000004e40)=[{&(0x7f0000002780)="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", 0xfc0}, {&(0x7f0000000240)="04e17385", 0x4}, {0x0}, {&(0x7f0000000380)="88382b4231e010dc7d8f64f718995b7056343158a8d704f4c69cd756a41c26bbb1651b10e689f9702af8e8628bc36e9208ce841609f4852a7fa9eb29937387d538307258efb8aa84d419ace4ff", 0x4d}, {&(0x7f0000000400)="fe3ce7dd3cba4cf0ccf816be0aa11ee650f5921e9d0071671ba66a250f3cb57447246b0b4727900b9f9772cf729eaf8b476587ded25c2a07ce7f30a55cffe66ecc4bb77d3fe3e8925ab089346cf71af2a5b6fd7718c0c593c4a2ebae3e9977b8c6c5cd914f5e49b3b97160fa9fee09f6c9f41f", 0x73}], 0x5, &(0x7f0000003c00)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x6c, 0x5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x8, 0x8, [0x100, 0x3ff]}}, @pad1]}}}], 0x48}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x46, @loopback, 0x3}, 0x1c, &(0x7f0000000640), 0x0, &(0x7f0000003780)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r5}}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003800)="036cc6077af88c69c9797c122c70b59a325c1f8d367f914923a697d1b60df87a2f3919fc79c6f257db2191e7f4feccb4c4cfd60895a52d4e29588c192a710a353702ff7d212963d66cfacebf1766779530d9fd02ba6e3f42ee6927a2007f94fccce0a4f29c64c50f8ac11a52ab6b7bc74fe7", 0x72}, {&(0x7f0000003880)="18dae973595561af9652b3e7682a661d0ee350bd7285469b34b591eb69ad97f7f8f55f8c7f948123f12c591c6ee56c8e35e51e2de535eb54798ae9f250474c4408311364a4590470736808d1025da05525c261673ba1b67f3141289fee6a9714386c9488decfad38e2aa4b417e8084bc0e1eb5f454b87f4efd6b6939ff524d6df3cb7f5647fd9a84f519ae86d27064515b1c56923a31e386310c35abf03ae86fe16e386ee73e6c45b97d8a2b7e653e4661fc", 0xb2}, {&(0x7f0000003940)="89b7547ca555a377cf0bfe3340eddbe1eed1f38ecbe6cf011cd71011064902401a04a0a5a4e8ada5a523548018339434a5bad6ddd9282df843c4fc988c4bc2d4ab58b39e176cdba741bccbaea4a7d6229e8c5e7436088a72017dbeed928506ebf4d7ea047123f5ad8e86bf04eaa93919b4e8a245a8b8d4d854104f92c758562f755f7e4bc8869d6a1735f573966528cba725e25c89ca68382b56690cb1946d444a84cf12c9", 0xa5}], 0x3, &(0x7f0000003a80)}}], 0x5, 0x0) 3.492368226s ago: executing program 2 (id=22222): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x21, 0xa, 0x10000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) syz_genetlink_get_family_id$team(0x0, r0) recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000040008500000011e8ffff17110000e4ad6db9f73241a3cca984b725c0a9fd8d4a", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x48000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x10, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 3.387129435s ago: executing program 3 (id=22223): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) close(0x3) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) listen(0xffffffffffffffff, 0x80) 3.247087987s ago: executing program 7 (id=22224): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 3.144415645s ago: executing program 6 (id=22225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) unshare(0x6020480) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000084) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r8, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ca9e00001000417aaa1e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b800800", @ANYRES32=r9, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 2.894236103s ago: executing program 4 (id=22226): pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 2.511440542s ago: executing program 4 (id=22227): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000002800)=[{&(0x7f0000002440)='\n', 0x1}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0xfffffffffffffffd, 0x40000402dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x9}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x23c}}, 0x8000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2.20289281s ago: executing program 3 (id=22228): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = syz_genetlink_get_family_id$tipc2(0x0, r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x108, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x33) socket(0x2, 0x80805, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000a40), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r5, r3, 0x0, 0x10000) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4) 1.079445137s ago: executing program 6 (id=22229): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xb) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) 1.05721656s ago: executing program 3 (id=22230): socket$igmp(0x2, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 944.850374ms ago: executing program 2 (id=22231): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000400)=0xfffffffffffffff7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[], 0x30}}, 0x0) 381.744107ms ago: executing program 6 (id=22232): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000464df27e18b6b24d0741965ac2fd18cfc37779dbf8edcb34671eae41d942539b3ce2da67fbcfe020000000000000096f71cc91f817cba7aec942eb59ac52a33d84f265e9042db1f984150939a82b4586dfff64fafc6d286e5ea168fc47b08c0e75f407ae40829d40ef6574c031c"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x300}], 0x1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xdfc, 0x84, 0x9}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 303.538579ms ago: executing program 7 (id=22233): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x108, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x33) socket(0x2, 0x80805, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000a40), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r5, r3, 0x0, 0x10000) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4) 136.631187ms ago: executing program 6 (id=22234): socket$inet6(0xa, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@gettaction={0x68, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc9e}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x68}}, 0x10040010) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_emit_ethernet(0xf96, &(0x7f0000004bc0)={@multicast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0xb, 0x6, "54bbad", 0xf58, 0x6, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x87}], {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x80, 0x426, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "7fa7d400000000000000000600"}, @timestamp={0x8, 0xa, 0x41a7, 0x9b}]}}, {"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"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x8}}}, 0x24}}, 0x800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r3, 0x1, 0x22, &(0x7f0000000040)=""/232, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) shutdown(r5, 0x1) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x14}}, 0x40090) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYBLOB="000826bd7000fbdbdf251d000000080003", @ANYRES32=r6], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4010, r5, 0x0) 0s ago: executing program 3 (id=22235): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000), 0x0) recvmmsg(r3, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000580)={@remote, @initdev}, &(0x7f00000005c0)=0xffffffffffffff1c) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x4004) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r5, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): p0 xmit: Local address not yet configured! [ 1128.531207][ T5883] Bluetooth: hci6: command tx timeout [ 1128.613380][T22235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.621338][T22235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.629653][T22235] bridge_slave_0: entered allmulticast mode [ 1128.639510][T22235] bridge_slave_0: entered promiscuous mode [ 1128.652127][T22235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.661057][T22235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.669038][T22235] bridge_slave_1: entered allmulticast mode [ 1128.677727][T22235] bridge_slave_1: entered promiscuous mode [ 1128.833943][T22235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.897627][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1128.912270][T22235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.996520][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21487'. [ 1129.058893][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21487'. [ 1129.069856][T22235] team0: Port device team_slave_0 added [ 1129.071798][T22288] netlink: 'syz.4.21487': attribute type 1 has an invalid length. [ 1129.094686][T22235] team0: Port device team_slave_1 added [ 1129.105024][T22288] netlink: 10 bytes leftover after parsing attributes in process `syz.4.21487'. [ 1129.152760][T22288] nbd: socks must be embedded in a SOCK_ITEM attr [ 1129.159484][T22288] block nbd4: shutting down sockets [ 1129.166939][T22235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.190995][T22235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.217416][T22235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.325647][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1129.338532][T22235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.360718][T22235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.417238][T22235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.534393][T22309] netlink: 'syz.1.21491': attribute type 4 has an invalid length. [ 1129.656917][T22235] hsr_slave_0: entered promiscuous mode [ 1129.675294][T22235] hsr_slave_1: entered promiscuous mode [ 1129.691259][T22235] debugfs: 'hsr0' already exists in 'hsr' [ 1129.700160][T22235] Cannot create hsr debugfs directory [ 1129.715668][T22307] wg1 speed is unknown, defaulting to 1000 [ 1129.753654][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1129.769593][T22307] syzkaller0 speed is unknown, defaulting to 1000 [ 1129.977837][T22314] tipc: Resetting bearer [ 1130.348360][T22319] syzkaller0: entered promiscuous mode [ 1130.354004][T22319] syzkaller0: entered allmulticast mode [ 1130.635589][ T5883] Bluetooth: hci6: command tx timeout [ 1132.294854][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1132.688931][T22326] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 1132.699764][T22326] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 1132.701383][ T5883] Bluetooth: hci6: command tx timeout [ 1132.809546][T22235] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1132.837646][T22235] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1132.883403][T22235] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1132.912895][T22235] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1133.202107][T22235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.252512][T22235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.276897][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.284161][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.334798][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.342116][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.890404][T22235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.079587][T22368] wg1 speed is unknown, defaulting to 1000 [ 1134.089251][T22368] syzkaller0 speed is unknown, defaulting to 1000 [ 1134.646198][T22235] veth0_vlan: entered promiscuous mode [ 1134.737555][T22235] veth1_vlan: entered promiscuous mode [ 1134.771457][ T5883] Bluetooth: hci6: command tx timeout [ 1134.884720][T22235] veth0_macvtap: entered promiscuous mode [ 1134.955666][T22235] veth1_macvtap: entered promiscuous mode [ 1135.072972][T22235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.146886][T22235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.233097][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.246511][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.267228][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.281726][T17629] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.314936][T22381] netlink: 'syz.4.21509': attribute type 1 has an invalid length. [ 1135.349419][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21509'. [ 1135.523132][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.550304][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.619945][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.638645][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.812278][T22401] wg1 speed is unknown, defaulting to 1000 [ 1135.836407][T22401] syzkaller0 speed is unknown, defaulting to 1000 [ 1136.023324][T22404] wg1 speed is unknown, defaulting to 1000 [ 1136.107446][T22404] syzkaller0 speed is unknown, defaulting to 1000 [ 1136.179237][T22409] netlink: 'syz.3.21518': attribute type 1 has an invalid length. [ 1136.284371][T22409] bond20: entered promiscuous mode [ 1136.298223][T22409] bond20: entered allmulticast mode [ 1136.305255][T22409] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1136.371701][T22413] bridge17: entered promiscuous mode [ 1136.377415][T22413] bridge17: entered allmulticast mode [ 1136.383702][T22413] bond20: (slave bridge17): Enslaving as a backup interface with an up link [ 1136.413590][ T49] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1136.602249][T22418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21519'. [ 1136.678930][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21519'. [ 1136.902905][T22424] wg1 speed is unknown, defaulting to 1000 [ 1136.913866][T22424] syzkaller0 speed is unknown, defaulting to 1000 [ 1137.217606][T22437] netlink: 'syz.4.21525': attribute type 13 has an invalid length. [ 1137.228963][T22437] netlink: 'syz.4.21525': attribute type 17 has an invalid length. [ 1137.353063][T22437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.509928][T22437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.523867][T22437] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1138.719589][T22461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21532'. [ 1138.732825][T11317] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 1138.740755][T11317] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 1138.812066][T11317] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe [ 1138.862299][T11317] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1139.209990][T22475] netlink: 92 bytes leftover after parsing attributes in process `syz.4.21538'. [ 1139.224831][T22475] bond0: Device is already in use. [ 1139.718270][T22487] netlink: 'syz.2.21542': attribute type 10 has an invalid length. [ 1139.817784][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21542'. [ 1139.840607][T22488] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21542'. [ 1139.864668][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21542'. [ 1139.874910][T22488] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21542'. [ 1140.458516][T22501] netlink: 'syz.3.21546': attribute type 1 has an invalid length. [ 1140.520253][T22501] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1140.572869][T22501] ipvlan0: entered allmulticast mode [ 1140.578489][T22501] bond21: entered allmulticast mode [ 1140.690280][T22510] netlink: 'syz.3.21548': attribute type 13 has an invalid length. [ 1141.175708][T22516] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.350166][T22516] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.397823][T22526] batadv1: entered promiscuous mode [ 1141.479734][T22530] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1141.503403][T22516] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.574584][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1141.665697][T22516] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.731043][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1141.962289][ T3596] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.048129][ T3596] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.071118][ T3596] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.140524][ T3596] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.308031][T22538] geneve0: entered promiscuous mode [ 1142.349998][T22542] wg1 speed is unknown, defaulting to 1000 [ 1142.407345][T22542] syzkaller0 speed is unknown, defaulting to 1000 [ 1142.415950][T22548] wg1 speed is unknown, defaulting to 1000 [ 1142.513990][T22548] syzkaller0 speed is unknown, defaulting to 1000 [ 1142.771567][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1143.657132][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21566'. [ 1143.681435][T22570] netlink: 'syz.3.21566': attribute type 1 has an invalid length. [ 1143.783743][T22571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21566'. [ 1143.820875][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1143.845369][T22571] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1144.625555][T22577] netlink: 'syz.3.21568': attribute type 12 has an invalid length. [ 1144.851309][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1145.452744][T21658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1145.463759][T21658] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1145.474596][T21658] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1145.484872][T21658] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1145.494575][T21658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1145.668869][T22589] syzkaller0: entered promiscuous mode [ 1145.709502][T22589] syzkaller0: entered allmulticast mode [ 1145.891033][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1146.941495][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1147.663415][T21658] Bluetooth: hci7: command tx timeout [ 1147.976462][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1149.010561][T22590] wg1 speed is unknown, defaulting to 1000 [ 1149.021294][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1149.058882][T22590] syzkaller0 speed is unknown, defaulting to 1000 [ 1149.296528][T22625] wg1 speed is unknown, defaulting to 1000 [ 1149.317541][T22625] syzkaller0 speed is unknown, defaulting to 1000 [ 1149.405276][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21580'. [ 1149.435768][T22636] netlink: 'syz.4.21582': attribute type 1 has an invalid length. [ 1149.454961][T22632] netlink: 'syz.6.21581': attribute type 12 has an invalid length. [ 1149.507754][T22630] bond8: (slave vxcan1): Releasing backup interface [ 1149.557570][T22630] bond8: Destroying bond [ 1149.728505][T22630] bond8 (unregistering): Released all slaves [ 1149.741398][T21658] Bluetooth: hci7: command tx timeout [ 1149.860008][T22638] bond14: (slave gretap3): making interface the new active one [ 1149.868810][T22638] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 1149.913395][T22640] vlan7: entered allmulticast mode [ 1149.925093][T22640] bond14: entered allmulticast mode [ 1149.951046][T22640] gretap3: entered allmulticast mode [ 1149.963822][T22640] bond14: (slave vlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1150.061031][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1150.091504][T22642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1150.134927][T22644] bond_slave_0: entered promiscuous mode [ 1150.141300][T22644] bond_slave_1: entered promiscuous mode [ 1150.158678][T22644] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1150.171774][T22644] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1150.203419][T22645] bridge_slave_0: left allmulticast mode [ 1150.222854][T22645] bridge_slave_0: left promiscuous mode [ 1150.228891][T22645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.242900][T22645] bridge_slave_1: left allmulticast mode [ 1150.249155][T22645] bridge_slave_1: left promiscuous mode [ 1150.255167][T22645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.298097][T22645] bond0: (slave bond_slave_0): Releasing backup interface [ 1150.306905][T22645] bond_slave_0: left promiscuous mode [ 1150.343989][T22645] bond0: (slave bond_slave_1): Releasing backup interface [ 1150.357832][T22645] bond_slave_1: left promiscuous mode [ 1150.397297][T22645] team0: Port device team_slave_0 removed [ 1150.421930][T22645] team0: Port device team_slave_1 removed [ 1150.447991][T22645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.459175][T22645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.468861][T22645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.477388][T22645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.487813][T22645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1150.518020][T22659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1150.548993][T17629] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 1150.587811][T22590] chnl_net:caif_netlink_parms(): no params data found [ 1150.775571][T17632] bond1: (slave macvlan2): link status definitely down, disabling slave [ 1150.888416][T22590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.895931][T22590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.903585][T22590] bridge_slave_0: entered allmulticast mode [ 1150.910726][T22590] bridge_slave_0: entered promiscuous mode [ 1150.919457][T22590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.926808][T22590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.934374][T22590] bridge_slave_1: entered allmulticast mode [ 1150.942497][T22590] bridge_slave_1: entered promiscuous mode [ 1151.002748][T22590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.025060][T22590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.091327][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1151.108360][T22590] team0: Port device team_slave_0 added [ 1151.118378][T22590] team0: Port device team_slave_1 added [ 1151.186927][T22590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.194315][T22590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.231136][T22590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.263875][T22590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.273522][T22590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.327741][T22590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.398039][T22687] netlink: 'syz.4.21595': attribute type 28 has an invalid length. [ 1151.457643][T22590] hsr_slave_0: entered promiscuous mode [ 1151.473161][T22590] hsr_slave_1: entered promiscuous mode [ 1151.490199][T22590] debugfs: 'hsr0' already exists in 'hsr' [ 1151.499350][T22590] Cannot create hsr debugfs directory [ 1151.581660][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21597'. [ 1151.603561][T22690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21597'. [ 1151.821587][T21658] Bluetooth: hci7: command tx timeout [ 1152.130936][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1152.457013][T22713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21602'. [ 1152.464131][T22709] wg1 speed is unknown, defaulting to 1000 [ 1152.476095][T22590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1152.500168][T22709] syzkaller0 speed is unknown, defaulting to 1000 [ 1152.507844][T22590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1152.522519][T22714] netlink: 'syz.2.21602': attribute type 1 has an invalid length. [ 1152.592737][T22714] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1152.632816][T22590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1152.720184][T22713] bond13: (slave gretap1): making interface the new active one [ 1152.736110][T22713] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 1152.745912][T22590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1152.975984][T22728] wg1 speed is unknown, defaulting to 1000 [ 1153.029735][T22728] syzkaller0 speed is unknown, defaulting to 1000 [ 1153.171334][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1153.275239][T22743] ipvlan0: entered promiscuous mode [ 1153.901431][T21658] Bluetooth: hci7: command tx timeout [ 1154.018587][T22750] wg1 speed is unknown, defaulting to 1000 [ 1154.074371][T22590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.099282][T22750] syzkaller0 speed is unknown, defaulting to 1000 [ 1154.188722][T22590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.221026][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1154.316545][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.324009][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.349463][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.356762][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.628371][T22761] netlink: 'syz.4.21613': attribute type 10 has an invalid length. [ 1155.251505][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1155.494156][T22775] syzkaller0: entered promiscuous mode [ 1155.518221][T22775] syzkaller0: entered allmulticast mode [ 1155.860356][T22590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.291196][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1157.331204][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1158.377466][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1159.421256][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1159.574981][T22804] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1159.605686][T22804] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 1159.637102][T22804] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 1159.660118][T22798] wg1 speed is unknown, defaulting to 1000 [ 1159.672347][T22806] mac80211_hwsim hwsim28 syzkaller0: Caught tx_queue_len zero misconfig [ 1159.719568][T22798] syzkaller0 speed is unknown, defaulting to 1000 [ 1159.894439][T22813] netlink: 'syz.4.21625': attribute type 1 has an invalid length. [ 1159.919433][T22813] netlink: 208 bytes leftover after parsing attributes in process `syz.4.21625'. [ 1160.020672][T22590] veth0_vlan: entered promiscuous mode [ 1160.066546][T22819] wg1 speed is unknown, defaulting to 1000 [ 1160.085065][T22820] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 1160.109276][T22820] CPU: 1 UID: 0 PID: 22820 Comm: syz.2.21626 Not tainted syzkaller #0 PREEMPT(full) [ 1160.109302][T22820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1160.109313][T22820] Call Trace: [ 1160.109319][T22820] [ 1160.109328][T22820] dump_stack_lvl+0x189/0x250 [ 1160.109359][T22820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1160.109381][T22820] ? __pfx__printk+0x10/0x10 [ 1160.109412][T22820] ? kernfs_path_from_node+0x2f/0x290 [ 1160.109432][T22820] ? kernfs_path_from_node+0x250/0x290 [ 1160.109449][T22820] ? kernfs_path_from_node+0x2f/0x290 [ 1160.109475][T22820] sysfs_warn_dup+0x8e/0xa0 [ 1160.109496][T22820] sysfs_do_create_link_sd+0xc0/0x110 [ 1160.109520][T22820] device_add_class_symlinks+0x1cf/0x240 [ 1160.109549][T22820] device_add+0x475/0xb50 [ 1160.109578][T22820] wiphy_register+0x1c81/0x2aa0 [ 1160.109624][T22820] ? __pfx_wiphy_register+0x10/0x10 [ 1160.109648][T22820] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1160.109687][T22820] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1160.109719][T22820] ieee80211_register_hw+0x3442/0x40a0 [ 1160.109765][T22820] ? ieee80211_register_hw+0x13c1/0x40a0 [ 1160.109806][T22820] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1160.109839][T22820] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1160.109869][T22820] ? __hrtimer_setup+0x187/0x210 [ 1160.109887][T22820] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1160.109913][T22820] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1160.109979][T22820] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1160.110015][T22820] ? trace_kmalloc+0x1f/0xd0 [ 1160.110038][T22820] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1160.110065][T22820] ? kstrndup+0xbf/0x160 [ 1160.110099][T22820] hwsim_new_radio_nl+0xea4/0x1b10 [ 1160.110132][T22820] ? __pfx___nla_validate_parse+0x10/0x10 [ 1160.110173][T22820] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1160.110219][T22820] ? __nla_parse+0x40/0x60 [ 1160.110246][T22820] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1160.110289][T22820] genl_family_rcv_msg_doit+0x212/0x300 [ 1160.110327][T22820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1160.110374][T22820] ? bpf_lsm_capable+0x9/0x20 [ 1160.110400][T22820] ? security_capable+0x7e/0x2e0 [ 1160.110440][T22820] genl_rcv_msg+0x60e/0x790 [ 1160.110475][T22820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1160.110500][T22820] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1160.110545][T22820] netlink_rcv_skb+0x208/0x470 [ 1160.110567][T22820] ? __lock_acquire+0xab9/0xd20 [ 1160.110598][T22820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1160.110630][T22820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1160.110679][T22820] ? down_read+0x1ad/0x2e0 [ 1160.110709][T22820] genl_rcv+0x28/0x40 [ 1160.110737][T22820] netlink_unicast+0x82c/0x9e0 [ 1160.110770][T22820] ? __pfx_netlink_unicast+0x10/0x10 [ 1160.110796][T22820] ? netlink_sendmsg+0x642/0xb30 [ 1160.110815][T22820] ? skb_put+0x11b/0x210 [ 1160.110843][T22820] netlink_sendmsg+0x805/0xb30 [ 1160.110876][T22820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.110903][T22820] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1160.110925][T22820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1160.110947][T22820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.110971][T22820] __sock_sendmsg+0x219/0x270 [ 1160.110994][T22820] ____sys_sendmsg+0x505/0x830 [ 1160.111038][T22820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1160.111077][T22820] ? import_iovec+0x74/0xa0 [ 1160.111107][T22820] ___sys_sendmsg+0x21f/0x2a0 [ 1160.111137][T22820] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.111210][T22820] ? __fget_files+0x2a/0x420 [ 1160.111226][T22820] ? __fget_files+0x3a0/0x420 [ 1160.111257][T22820] __x64_sys_sendmsg+0x19b/0x260 [ 1160.111288][T22820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1160.111329][T22820] ? rcu_is_watching+0x15/0xb0 [ 1160.111356][T22820] ? do_syscall_64+0xbe/0x3b0 [ 1160.111384][T22820] do_syscall_64+0xfa/0x3b0 [ 1160.111405][T22820] ? lockdep_hardirqs_on+0x9c/0x150 [ 1160.111428][T22820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.111447][T22820] ? clear_bhb_loop+0x60/0xb0 [ 1160.111472][T22820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.111491][T22820] RIP: 0033:0x7f4a1678eba9 [ 1160.111510][T22820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.111528][T22820] RSP: 002b:00007f4a1765c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.111549][T22820] RAX: ffffffffffffffda RBX: 00007f4a169d6090 RCX: 00007f4a1678eba9 [ 1160.111563][T22820] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1160.111576][T22820] RBP: 00007f4a16811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1160.111587][T22820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.111600][T22820] R13: 00007f4a169d6128 R14: 00007f4a169d6090 R15: 00007fff48bbce68 [ 1160.111635][T22820] [ 1160.131320][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1160.182777][T22816] wg1 speed is unknown, defaulting to 1000 [ 1160.199052][T22590] veth1_vlan: entered promiscuous mode [ 1160.461005][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1160.633120][T22819] syzkaller0 speed is unknown, defaulting to 1000 [ 1160.657902][T22825] wg1 speed is unknown, defaulting to 1000 [ 1160.666050][T22826] tipc: Enabled bearer , priority 0 [ 1160.674342][T22826] syzkaller0: entered promiscuous mode [ 1160.680053][T22826] syzkaller0: entered allmulticast mode [ 1160.713270][T22816] syzkaller0 speed is unknown, defaulting to 1000 [ 1160.768941][T22826] tipc: Resetting bearer [ 1160.825000][T22825] syzkaller0 speed is unknown, defaulting to 1000 [ 1160.836681][T22824] tipc: Resetting bearer [ 1160.872519][T22824] tipc: Disabling bearer [ 1160.914773][T22590] veth0_macvtap: entered promiscuous mode [ 1161.014859][T22832] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1161.081167][T22590] veth1_macvtap: entered promiscuous mode [ 1161.088934][T22828] wg1 speed is unknown, defaulting to 1000 [ 1161.176594][T22828] syzkaller0 speed is unknown, defaulting to 1000 [ 1161.350152][T22590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.500857][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1161.606522][T22590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.700092][ T3596] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.729442][ T3596] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.761021][ T3596] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.779032][ T3596] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.917763][T22845] tipc: Started in network mode [ 1161.933681][T22845] tipc: Node identity ce56871eeac, cluster identity 4711 [ 1161.952214][T22845] tipc: Enabled bearer , priority 0 [ 1162.090651][T22848] syzkaller0: entered promiscuous mode [ 1162.098468][T22848] syzkaller0: entered allmulticast mode [ 1162.138243][T22845] tipc: Resetting bearer [ 1162.202520][T22844] tipc: Resetting bearer [ 1162.307938][T22844] tipc: Disabling bearer [ 1162.428146][T17629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.439549][T22855] wg1 speed is unknown, defaulting to 1000 [ 1162.446026][T17629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.516024][T22855] syzkaller0 speed is unknown, defaulting to 1000 [ 1162.531066][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1162.608568][T22865] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.730366][T17629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.738401][T17629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.792184][T22865] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.955680][T22865] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.339314][T22865] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.572635][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1163.748898][T22890] netlink: 'syz.4.21645': attribute type 21 has an invalid length. [ 1163.764733][T22890] netlink: 156 bytes leftover after parsing attributes in process `syz.4.21645'. [ 1163.798848][ T49] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.982598][ T1148] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.027351][ T1148] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.046120][ T1148] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.129486][T22897] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1164.142243][T22897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1164.351414][T22907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21651'. [ 1164.368093][T22910] netlink: 'syz.3.21653': attribute type 1 has an invalid length. [ 1164.437614][T22910] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1164.462494][T22907] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1164.469195][T22907] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 1164.495548][T22907] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1164.538333][T22910] vlan1: entered promiscuous mode [ 1164.543845][T22910] bond8: entered promiscuous mode [ 1164.549483][T22910] vlan1: entered allmulticast mode [ 1164.554929][T22910] bond8: entered allmulticast mode [ 1164.572955][T22911] wg1 speed is unknown, defaulting to 1000 [ 1164.608366][T22911] syzkaller0 speed is unknown, defaulting to 1000 [ 1164.621382][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1165.082177][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21658'. [ 1165.263838][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21660'. [ 1165.650871][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1165.677428][T22942] wg1 speed is unknown, defaulting to 1000 [ 1165.697541][T22942] syzkaller0 speed is unknown, defaulting to 1000 [ 1165.982178][T22944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21663'. [ 1166.070468][T22946] syzkaller1: entered promiscuous mode [ 1166.093756][T22946] syzkaller1: entered allmulticast mode [ 1166.190416][T22959] wg1 speed is unknown, defaulting to 1000 [ 1166.315027][T22963] tipc: Started in network mode [ 1166.349000][T22963] tipc: Node identity b239f0ae9a95, cluster identity 4711 [ 1166.373843][T22963] tipc: Enabled bearer , priority 0 [ 1166.541828][ T5883] Bluetooth: hci7: command 0x0405 tx timeout [ 1166.700933][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1166.761473][T22965] vlan7: entered promiscuous mode [ 1166.766913][T22965] vlan7: entered allmulticast mode [ 1166.824958][T22966] syzkaller0: entered promiscuous mode [ 1166.830470][T22966] syzkaller0: entered allmulticast mode [ 1166.851703][T22963] tipc: Resetting bearer [ 1166.869520][T22959] syzkaller0 speed is unknown, defaulting to 1000 [ 1166.879974][T22962] tipc: Resetting bearer [ 1166.972787][T22962] tipc: Disabling bearer [ 1167.730955][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1167.748316][T22986] netlink: 'syz.4.21672': attribute type 13 has an invalid length. [ 1167.756604][T22986] netlink: 'syz.4.21672': attribute type 17 has an invalid length. [ 1167.802500][T22986] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1167.870212][T22989] tipc: Enabled bearer , priority 0 [ 1167.894412][T22989] syzkaller0: entered promiscuous mode [ 1167.908246][T22989] syzkaller0: entered allmulticast mode [ 1167.966142][T22989] tipc: Resetting bearer [ 1168.021460][T22988] tipc: Resetting bearer [ 1168.065202][T22988] tipc: Disabling bearer [ 1168.398203][T22993] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1168.771018][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1169.284641][T23010] netlink: 'syz.7.21681': attribute type 1 has an invalid length. [ 1169.495718][T23013] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21681'. [ 1169.810864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1169.941738][T23012] veth3: entered promiscuous mode [ 1170.016738][T23017] tipc: Enabled bearer , priority 0 [ 1170.026393][T23015] syzkaller0: entered promiscuous mode [ 1170.035300][T23015] syzkaller0: entered allmulticast mode [ 1170.173864][T23016] tipc: Resetting bearer [ 1170.221548][T23014] tipc: Resetting bearer [ 1170.302036][T23014] tipc: Disabling bearer [ 1170.850877][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1170.994861][T23032] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1171.202604][T23035] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1171.891547][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1171.940684][T23042] wg1 speed is unknown, defaulting to 1000 [ 1172.002524][T23042] syzkaller0 speed is unknown, defaulting to 1000 [ 1172.343784][T23050] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1172.620284][T23057] netlink: 'syz.4.21693': attribute type 39 has an invalid length. [ 1172.931221][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1173.096768][T23060] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21695'. [ 1173.178285][T23066] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1173.368828][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21697'. [ 1173.370171][T23069] wg1 speed is unknown, defaulting to 1000 [ 1173.492212][T23072] netlink: 830 bytes leftover after parsing attributes in process `syz.4.21698'. [ 1173.515685][T23069] syzkaller0 speed is unknown, defaulting to 1000 [ 1173.700686][T23075] tipc: Enabled bearer , priority 0 [ 1173.718269][T23077] vlan2: entered promiscuous mode [ 1173.723761][T23077] vlan2: entered allmulticast mode [ 1173.728941][T23077] hsr_slave_1: entered allmulticast mode [ 1173.775668][T23083] tipc: Enabled bearer , priority 0 [ 1173.786548][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21700'. [ 1173.809138][T23075] syzkaller0: entered promiscuous mode [ 1173.815081][T23075] syzkaller0: entered allmulticast mode [ 1173.823703][T23083] syzkaller0: entered promiscuous mode [ 1173.829199][T23083] syzkaller0: entered allmulticast mode [ 1173.971295][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1174.361954][T23089] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 1174.404514][T23091] tipc: Resetting bearer [ 1174.421353][T23096] syzkaller0: entered promiscuous mode [ 1174.431901][T23096] syzkaller0: entered allmulticast mode [ 1174.461318][T23094] tipc: Resetting bearer [ 1174.479063][T23095] tipc: Enabled bearer , priority 0 [ 1174.501122][T23082] tipc: Resetting bearer [ 1174.558397][T23082] tipc: Disabling bearer [ 1174.578093][T23074] tipc: Resetting bearer [ 1174.599664][T23074] tipc: Disabling bearer [ 1174.646845][T23096] tipc: Resetting bearer [ 1174.711392][T23088] tipc: Resetting bearer [ 1174.715817][T23108] netlink: 'syz.3.21705': attribute type 1 has an invalid length. [ 1174.777791][T23088] tipc: Disabling bearer [ 1174.814906][T23105] tipc: Enabled bearer , priority 0 [ 1174.847292][T23106] syzkaller0: entered promiscuous mode [ 1174.861131][T23106] syzkaller0: entered allmulticast mode [ 1174.952626][T23110] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1175.010888][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1175.021125][T23110] bond22: (slave vxcan1): Error -95 calling set_mac_address [ 1175.140315][T23115] gretap6: entered promiscuous mode [ 1175.182500][T23115] bond22: (slave gretap6): making interface the new active one [ 1175.201795][T23115] bond22: (slave gretap6): Enslaving as an active interface with an up link [ 1175.231506][T23106] tipc: Resetting bearer [ 1175.259484][T23108] macvlan0: entered promiscuous mode [ 1175.268585][T23108] macvlan0: entered allmulticast mode [ 1175.287939][T23108] bond22: entered promiscuous mode [ 1175.299140][T23108] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1175.328349][T23108] bond22: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap6 [ 1175.345483][T23108] bond22: left promiscuous mode [ 1175.415104][T23104] tipc: Resetting bearer [ 1175.482161][T23104] tipc: Disabling bearer [ 1175.529978][T23120] tipc: Enabled bearer , priority 0 [ 1175.537647][T23116] wg1 speed is unknown, defaulting to 1000 [ 1175.540430][T23121] syzkaller0: entered promiscuous mode [ 1175.553954][T23121] syzkaller0: entered allmulticast mode [ 1175.575347][T23125] tipc: Resetting bearer [ 1175.602197][T23116] syzkaller0 speed is unknown, defaulting to 1000 [ 1175.616302][T23117] tipc: Resetting bearer [ 1175.719803][T23117] tipc: Disabling bearer [ 1175.767679][T23131] netlink: 'syz.3.21709': attribute type 10 has an invalid length. [ 1175.794556][T23132] IPVS: persistence engine module ip_vs_pe_ not found [ 1175.949765][T23137] tipc: Enabled bearer , priority 0 [ 1175.988957][T23143] netlink: 'syz.3.21715': attribute type 1 has an invalid length. [ 1176.020127][T23137] syzkaller0: entered promiscuous mode [ 1176.027239][T23137] syzkaller0: entered allmulticast mode [ 1176.051311][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1176.100099][T23148] bond23: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1176.124333][T23142] wg1 speed is unknown, defaulting to 1000 [ 1176.156791][ T2962] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1176.156991][T23143] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1176.202085][T23137] tipc: Resetting bearer [ 1176.220447][T23141] wg1 speed is unknown, defaulting to 1000 [ 1176.227257][T23142] syzkaller0 speed is unknown, defaulting to 1000 [ 1176.273527][T23136] tipc: Resetting bearer [ 1176.281788][ T2962] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1176.311871][T23150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21716'. [ 1176.322716][T23136] tipc: Disabling bearer [ 1176.342479][T23141] syzkaller0 speed is unknown, defaulting to 1000 [ 1176.722928][T23159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.21719'. [ 1176.783488][T23156] tipc: Enabled bearer , priority 0 [ 1176.817773][T23156] syzkaller0: entered promiscuous mode [ 1176.880054][T23156] syzkaller0: entered allmulticast mode [ 1177.059423][T23168] tipc: Resetting bearer [ 1177.091300][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1177.136042][T23155] tipc: Resetting bearer [ 1177.259511][T23155] tipc: Disabling bearer [ 1177.420072][T23179] netlink: 'syz.3.21724': attribute type 1 has an invalid length. [ 1177.514139][ T30] audit: type=1800 audit(1757679989.209:22): pid=23166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21720" name="memory.events" dev="tmpfs" ino=21942 res=0 errno=0 [ 1177.545763][T23179] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1177.661291][T23190] netlink: 68 bytes leftover after parsing attributes in process `syz.6.21726'. [ 1177.876697][T23193] tipc: Enabled bearer , priority 0 [ 1177.909568][T23193] syzkaller0: entered promiscuous mode [ 1177.927930][T23193] syzkaller0: entered allmulticast mode [ 1178.013058][T23193] tipc: Resetting bearer [ 1178.041319][T23192] tipc: Resetting bearer [ 1178.107703][T23192] tipc: Disabling bearer [ 1178.130854][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1178.290557][T23198] netlink: 72 bytes leftover after parsing attributes in process `syz.4.21731'. [ 1178.427996][T23200] tipc: Enabled bearer , priority 0 [ 1178.461896][T23200] syzkaller0: entered promiscuous mode [ 1178.467419][T23200] syzkaller0: entered allmulticast mode [ 1178.542052][T23204] tipc: Enabled bearer , priority 0 [ 1178.549446][T23200] tipc: Resetting bearer [ 1178.578665][T23202] tipc: Enabled bearer , priority 0 [ 1178.599339][T23202] syzkaller0: entered promiscuous mode [ 1178.607102][T23202] syzkaller0: entered allmulticast mode [ 1178.622657][T23204] syzkaller0: entered promiscuous mode [ 1178.628309][T23204] syzkaller0: entered allmulticast mode [ 1178.640388][T23199] tipc: Resetting bearer [ 1178.701470][T23199] tipc: Disabling bearer [ 1178.851938][T23212] tipc: Resetting bearer [ 1178.871850][T23213] tipc: Resetting bearer [ 1178.900382][T23201] tipc: Resetting bearer [ 1178.958302][T23201] tipc: Disabling bearer [ 1179.014827][T23196] tipc: Resetting bearer [ 1179.066278][T23196] tipc: Disabling bearer [ 1179.088715][T23218] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1179.120472][T23217] netem: change failed [ 1179.170861][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1179.204594][T23229] tipc: Enabled bearer , priority 0 [ 1179.241573][T23229] syzkaller0: entered promiscuous mode [ 1179.258489][T23229] syzkaller0: entered allmulticast mode [ 1179.273587][T23231] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1179.314386][T23233] netlink: 'syz.3.21739': attribute type 1 has an invalid length. [ 1179.651847][T23237] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1179.687174][T23240] tipc: Resetting bearer [ 1179.998971][T23239] bond25 (unregistering): Released all slaves [ 1180.044653][T23228] tipc: Resetting bearer [ 1180.076966][T23228] tipc: Disabling bearer [ 1180.153008][T23245] wg1 speed is unknown, defaulting to 1000 [ 1180.162968][T23245] syzkaller0 speed is unknown, defaulting to 1000 [ 1180.197325][T23250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21742'. [ 1180.210877][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1180.354328][T23253] tipc: Enabled bearer , priority 0 [ 1180.433094][T23259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21744'. [ 1180.578872][T23253] syzkaller0: entered promiscuous mode [ 1180.597159][T23253] syzkaller0: entered allmulticast mode [ 1180.640251][T23259] bond9: left promiscuous mode [ 1180.647231][T23259] bridge0: port 2(bond9) entered disabled state [ 1180.857865][T23269] tipc: Resetting bearer [ 1180.866237][T23271] tipc: Enabled bearer , priority 0 [ 1180.963702][T23274] syzkaller0: entered promiscuous mode [ 1180.972783][T23274] syzkaller0: entered allmulticast mode [ 1181.000012][T23252] tipc: Resetting bearer [ 1181.072354][T23252] tipc: Disabling bearer [ 1181.146934][T23271] tipc: Resetting bearer [ 1181.167003][T23284] tipc: Enabled bearer , priority 0 [ 1181.190636][T23283] netlink: 'syz.4.21750': attribute type 12 has an invalid length. [ 1181.191495][T23280] syzkaller0: entered promiscuous mode [ 1181.210625][T23280] syzkaller0: entered allmulticast mode [ 1181.221920][T23267] tipc: Resetting bearer [ 1181.243565][T23267] tipc: Disabling bearer [ 1181.251250][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1181.344840][T23280] tipc: Resetting bearer [ 1181.400480][T23287] syzkaller0: entered promiscuous mode [ 1181.421368][T23287] syzkaller0: entered allmulticast mode [ 1181.436226][T23279] tipc: Resetting bearer [ 1181.521665][T23279] tipc: Disabling bearer [ 1182.123644][T23312] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1182.210717][T23317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21759'. [ 1182.291028][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1182.314884][T23319] tipc: Enabled bearer , priority 0 [ 1182.372611][T23316] syzkaller0: entered promiscuous mode [ 1182.378118][T23316] syzkaller0: entered allmulticast mode [ 1182.435733][T23316] tipc: Resetting bearer [ 1182.476401][T23314] tipc: Resetting bearer [ 1182.498172][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21762'. [ 1182.517773][T23314] tipc: Disabling bearer [ 1182.563129][T23324] dummy0: entered promiscuous mode [ 1182.596496][T23324] dummy0: left promiscuous mode [ 1182.668530][T23322] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1182.779969][T23328] tipc: Enabled bearer , priority 0 [ 1182.805866][T23328] syzkaller0: entered promiscuous mode [ 1182.817083][T23328] syzkaller0: entered allmulticast mode [ 1182.838644][T23330] tipc: Enabled bearer , priority 0 [ 1182.857084][T23330] syzkaller0: entered promiscuous mode [ 1182.874987][T23330] syzkaller0: entered allmulticast mode [ 1182.894938][T23328] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 1182.928694][T23328] tipc: Resetting bearer [ 1182.939558][T23330] tipc: Resetting bearer [ 1182.947022][T23327] tipc: Resetting bearer [ 1182.980199][T23327] tipc: Disabling bearer [ 1183.007498][T23329] tipc: Resetting bearer [ 1183.014289][T23337] can: request_module (can-proto-0) failed. [ 1183.037279][T23329] tipc: Disabling bearer [ 1183.150195][T23341] tipc: Enabled bearer , priority 0 [ 1183.188865][T23341] syzkaller0: entered promiscuous mode [ 1183.194824][T23341] syzkaller0: entered allmulticast mode [ 1183.211674][T23342] tipc: Enabled bearer , priority 0 [ 1183.230676][T23342] syzkaller0: entered promiscuous mode [ 1183.238264][T23342] syzkaller0: entered allmulticast mode [ 1183.246911][T23344] tipc: Enabled bearer , priority 0 [ 1183.255382][T23344] syzkaller0: entered promiscuous mode [ 1183.260992][T23344] syzkaller0: entered allmulticast mode [ 1183.272272][T23341] tipc: Resetting bearer [ 1183.305845][T23339] tipc: Resetting bearer [ 1183.327072][T23339] tipc: Disabling bearer [ 1183.340878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1183.350094][T23344] tipc: Resetting bearer [ 1183.360426][T23342] tipc: Resetting bearer [ 1183.367621][T23343] tipc: Resetting bearer [ 1183.389347][T23343] tipc: Disabling bearer [ 1183.400690][T23340] tipc: Resetting bearer [ 1183.424836][T23340] tipc: Disabling bearer [ 1183.612877][T23351] netlink: 'syz.3.21772': attribute type 39 has an invalid length. [ 1183.653987][T23354] tipc: Enabled bearer , priority 0 [ 1183.675401][T23354] syzkaller0: entered promiscuous mode [ 1183.710892][T23354] syzkaller0: entered allmulticast mode [ 1183.765681][T23358] openvswitch: netlink: Message has 4 unknown bytes. [ 1183.874566][T23356] tipc: Resetting bearer [ 1183.907180][T23353] tipc: Resetting bearer [ 1183.983729][T23353] tipc: Disabling bearer [ 1184.032118][T23369] tipc: Enabled bearer , priority 0 [ 1184.061401][T23373] syzkaller0: entered promiscuous mode [ 1184.079107][T23373] syzkaller0: entered allmulticast mode [ 1184.149675][T23377] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1184.261740][T23381] tipc: Enabled bearer , priority 0 [ 1184.282889][T23381] syzkaller0: entered promiscuous mode [ 1184.299972][T23381] syzkaller0: entered allmulticast mode [ 1184.330243][T23360] tipc: Resetting bearer [ 1184.338043][T23384] netlink: 'syz.3.21782': attribute type 1 has an invalid length. [ 1184.359622][T23359] tipc: Resetting bearer [ 1184.370878][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1184.392357][T23359] tipc: Disabling bearer [ 1184.523660][T23384] bond25: (slave vcan1): The slave device specified does not support setting the MAC address [ 1184.535860][T23384] bond25: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1184.549929][T23384] bond25: (slave vcan1): making interface the new active one [ 1184.558894][T23384] bond25: (slave vcan1): Enslaving as an active interface with an up link [ 1184.586220][T23389] bond25: (slave vcan2): The slave device specified does not support setting the MAC address [ 1184.605402][T23389] bond25: (slave vcan2): Enslaving as a backup interface with an up link [ 1184.624529][T23391] syzkaller0: entered promiscuous mode [ 1184.630134][T23391] syzkaller0: entered allmulticast mode [ 1184.649614][T23393] tipc: Resetting bearer [ 1184.658344][T23396] tipc: Enabled bearer , priority 0 [ 1184.669018][T23384] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1184.678080][T23379] tipc: Resetting bearer [ 1184.712574][T23379] tipc: Disabling bearer [ 1184.727521][T23395] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1184.791687][T23404] tipc: Enabled bearer , priority 0 [ 1184.804265][T23391] tipc: Resetting bearer [ 1184.811709][T23404] syzkaller0: entered promiscuous mode [ 1184.817349][T23404] syzkaller0: entered allmulticast mode [ 1184.838232][T23390] tipc: Resetting bearer [ 1184.894992][T23390] tipc: Disabling bearer [ 1184.931633][T21658] Bluetooth: hci7: command 0x0405 tx timeout [ 1184.933230][T23406] tipc: Enabled bearer , priority 0 [ 1184.946802][T23409] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1184.965061][T23404] tipc: Resetting bearer [ 1184.971929][T23406] syzkaller0: entered promiscuous mode [ 1184.977431][T23406] syzkaller0: entered allmulticast mode [ 1184.990711][T23403] tipc: Resetting bearer [ 1185.036952][T23403] tipc: Disabling bearer [ 1185.074146][T23411] tipc: Enabled bearer , priority 0 [ 1185.086144][T23406] tipc: Resetting bearer [ 1185.101335][T23411] syzkaller0: entered promiscuous mode [ 1185.106843][T23411] syzkaller0: entered allmulticast mode [ 1185.156325][T23405] tipc: Resetting bearer [ 1185.183955][T23405] tipc: Disabling bearer [ 1185.237851][T23411] tipc: Resetting bearer [ 1185.264835][T23410] tipc: Resetting bearer [ 1185.298408][T23410] tipc: Disabling bearer [ 1185.410958][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1185.614902][T23423] tipc: Enabled bearer , priority 0 [ 1185.631584][T23423] syzkaller0: entered promiscuous mode [ 1185.637246][T23423] syzkaller0: entered allmulticast mode [ 1185.656733][T23430] vlan1: entered promiscuous mode [ 1185.662116][T23430] team0: entered promiscuous mode [ 1185.667444][T23430] geneve0: entered promiscuous mode [ 1185.673770][T23430] batadv3: entered promiscuous mode [ 1185.713715][T23433] netlink: 'syz.7.21798': attribute type 39 has an invalid length. [ 1185.768385][T23435] netlink: 72 bytes leftover after parsing attributes in process `syz.7.21798'. [ 1185.790026][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21798'. [ 1185.791343][T23423] tipc: Resetting bearer [ 1185.886003][T23422] tipc: Resetting bearer [ 1185.944561][T23422] tipc: Disabling bearer [ 1185.984276][T23437] tipc: Enabled bearer , priority 0 [ 1186.025436][T23437] syzkaller0: entered promiscuous mode [ 1186.038768][T23437] syzkaller0: entered allmulticast mode [ 1186.136208][T23446] wg1 speed is unknown, defaulting to 1000 [ 1186.161509][T23437] tipc: Resetting bearer [ 1186.183979][T23436] tipc: Resetting bearer [ 1186.297500][T23436] tipc: Disabling bearer [ 1186.369220][T23446] syzkaller0 speed is unknown, defaulting to 1000 [ 1186.450865][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1186.608509][T23454] wg1 speed is unknown, defaulting to 1000 [ 1186.639488][T23454] syzkaller0 speed is unknown, defaulting to 1000 [ 1186.742618][T23462] tipc: Enabled bearer , priority 0 [ 1186.761484][T23465] syzkaller0: entered promiscuous mode [ 1186.766992][T23465] syzkaller0: entered allmulticast mode [ 1186.929554][T23460] wg1 speed is unknown, defaulting to 1000 [ 1186.942352][T23462] tipc: Resetting bearer [ 1187.137933][T23461] tipc: Resetting bearer [ 1187.168229][T23461] tipc: Disabling bearer [ 1187.214431][T23460] syzkaller0 speed is unknown, defaulting to 1000 [ 1187.239674][T23472] tipc: Enabled bearer , priority 0 [ 1187.482875][T23472] syzkaller0: entered promiscuous mode [ 1187.488446][T23472] syzkaller0: entered allmulticast mode [ 1187.494104][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1187.620707][T23481] tipc: Resetting bearer [ 1187.630069][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21811'. [ 1187.699907][T23471] tipc: Resetting bearer [ 1188.535212][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1189.575624][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1190.277428][T23471] tipc: Disabling bearer [ 1190.413644][T23499] wg1 speed is unknown, defaulting to 1000 [ 1190.449458][T23499] syzkaller0 speed is unknown, defaulting to 1000 [ 1190.463065][T23504] tipc: Enabled bearer , priority 0 [ 1190.472726][T23504] syzkaller0: entered promiscuous mode [ 1190.478359][T23504] syzkaller0: entered allmulticast mode [ 1190.515987][T23504] netlink: 2 bytes leftover after parsing attributes in process `syz.3.21814'. [ 1190.592072][T23504] tipc: Resetting bearer [ 1190.607087][T23503] tipc: Resetting bearer [ 1190.612942][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1190.676211][T23503] tipc: Disabling bearer [ 1191.016111][T23516] tipc: Enabled bearer , priority 0 [ 1191.036310][T23516] syzkaller0: entered promiscuous mode [ 1191.050063][T23516] syzkaller0: entered allmulticast mode [ 1191.162116][T23524] tipc: Resetting bearer [ 1191.181014][T23523] wg1 speed is unknown, defaulting to 1000 [ 1191.201487][T23515] tipc: Resetting bearer [ 1191.283716][T23515] tipc: Disabling bearer [ 1191.362603][T23534] tipc: Enabled bearer , priority 0 [ 1191.375877][T23526] syzkaller0: entered promiscuous mode [ 1191.377513][T23535] netlink: 'syz.7.21824': attribute type 10 has an invalid length. [ 1191.405645][T23526] syzkaller0: entered allmulticast mode [ 1191.445320][T23532] can: request_module (can-proto-0) failed. [ 1191.455591][T23532] netlink: 'syz.7.21824': attribute type 10 has an invalid length. [ 1191.550677][T23523] syzkaller0 speed is unknown, defaulting to 1000 [ 1191.564047][T23526] tipc: Resetting bearer [ 1191.601994][T23530] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1191.650890][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1191.661515][T23535] team0: Port device dummy0 added [ 1191.685660][T23532] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1191.729860][T23532] team0: Failed to send options change via netlink (err -105) [ 1191.755997][T23532] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1191.780731][T23532] team0: Port device dummy0 removed [ 1191.799721][T23532] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1191.828556][T23525] tipc: Resetting bearer [ 1191.890100][T23525] tipc: Disabling bearer [ 1191.988351][T23542] wg1 speed is unknown, defaulting to 1000 [ 1192.042840][T23544] netlink: 68 bytes leftover after parsing attributes in process `syz.7.21826'. [ 1192.084139][T23542] syzkaller0 speed is unknown, defaulting to 1000 [ 1192.279361][T23550] tipc: Enabled bearer , priority 0 [ 1192.288490][T23553] syzkaller0: entered promiscuous mode [ 1192.321733][T23553] syzkaller0: entered allmulticast mode [ 1192.691020][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1192.787919][T23557] tipc: Resetting bearer [ 1192.862765][T23549] tipc: Resetting bearer [ 1192.893276][T23549] tipc: Disabling bearer [ 1193.012677][T23566] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1193.392436][T23578] wg1 speed is unknown, defaulting to 1000 [ 1193.410299][T23583] netlink: 240 bytes leftover after parsing attributes in process `syz.2.21833'. [ 1193.427380][T23578] syzkaller0 speed is unknown, defaulting to 1000 [ 1193.731249][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1193.816740][T23586] tipc: Enabled bearer , priority 0 [ 1193.832454][T23587] tipc: Enabled bearer , priority 0 [ 1193.846940][T23586] syzkaller0: entered promiscuous mode [ 1193.854465][T23586] syzkaller0: entered allmulticast mode [ 1193.879754][T23587] syzkaller0: entered promiscuous mode [ 1193.905049][T23587] syzkaller0: entered allmulticast mode [ 1193.979779][T23587] tipc: Resetting bearer [ 1193.994111][T23586] tipc: Resetting bearer [ 1194.001653][T23585] tipc: Resetting bearer [ 1194.041334][T23585] tipc: Disabling bearer [ 1194.060001][T23584] tipc: Resetting bearer [ 1194.217151][T23584] tipc: Disabling bearer [ 1194.273075][T23598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21839'. [ 1194.420758][T23603] tipc: Enabled bearer , priority 0 [ 1194.441947][T23599] syzkaller0: entered promiscuous mode [ 1194.447715][T23599] syzkaller0: entered allmulticast mode [ 1194.619669][T23599] tipc: Resetting bearer [ 1194.648983][T23597] tipc: Resetting bearer [ 1194.682071][T23610] netlink: 'syz.6.21844': attribute type 10 has an invalid length. [ 1194.700690][T23609] xt_policy: neither incoming nor outgoing policy selected [ 1194.727486][ T30] audit: type=1800 audit(1757680006.429:23): pid=23600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21840" name="memory.events" dev="tmpfs" ino=22044 res=0 errno=0 [ 1194.780909][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1194.824415][T23597] tipc: Disabling bearer [ 1194.980287][T23610] bridge0: entered promiscuous mode [ 1195.010268][T23610] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1195.076840][T23617] tipc: Enabled bearer , priority 0 [ 1195.084783][T23617] syzkaller0: entered promiscuous mode [ 1195.090461][T23617] syzkaller0: entered allmulticast mode [ 1195.101268][T23617] tipc: Resetting bearer [ 1195.101994][ T2992] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.173360][T23616] tipc: Resetting bearer [ 1195.194998][ T3596] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.208369][T23620] netlink: 68 bytes leftover after parsing attributes in process `syz.3.21847'. [ 1195.230527][ T2962] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.270291][ T49] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.330670][T23616] tipc: Disabling bearer [ 1195.333026][ T49] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.381068][ T49] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.401147][ T3596] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.422720][ T3596] bond1: (slave macvlan2): link status up again after 0 ms [ 1195.588274][T23627] tipc: Enabled bearer , priority 0 [ 1195.596184][T23629] syzkaller0: entered promiscuous mode [ 1195.601816][T23629] syzkaller0: entered allmulticast mode [ 1195.623293][T23638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21851'. [ 1195.661256][T23622] tipc: Resetting bearer [ 1195.670636][T23621] tipc: Resetting bearer [ 1195.683091][T23640] netlink: 'syz.2.21852': attribute type 39 has an invalid length. [ 1195.785195][T23621] tipc: Disabling bearer [ 1195.797705][T23645] netlink: 72 bytes leftover after parsing attributes in process `syz.2.21852'. [ 1196.107087][T23650] netlink: 'syz.7.21854': attribute type 39 has an invalid length. [ 1196.141606][T23650] netlink: 72 bytes leftover after parsing attributes in process `syz.7.21854'. [ 1196.181920][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21854'. [ 1196.406681][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21857'. [ 1196.422671][T23658] netlink: 84 bytes leftover after parsing attributes in process `syz.7.21857'. [ 1196.471736][T23658] dvmrp8: entered allmulticast mode [ 1196.557600][T23660] tipc: Enabled bearer , priority 0 [ 1196.576410][T23658] wg1 speed is unknown, defaulting to 1000 [ 1196.583935][T23660] syzkaller0: entered promiscuous mode [ 1196.601975][T23660] syzkaller0: entered allmulticast mode [ 1196.616568][T23658] syzkaller0 speed is unknown, defaulting to 1000 [ 1196.645216][T23660] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1196.780529][T23660] tipc: Resetting bearer [ 1196.797987][T23665] tc_dump_action: action bad kind [ 1196.837734][T23659] tipc: Resetting bearer [ 1196.870399][T23659] tipc: Disabling bearer [ 1197.071294][T23674] netlink: 'syz.3.21862': attribute type 101 has an invalid length. [ 1197.079411][T23674] netlink: 'syz.3.21862': attribute type 7 has an invalid length. [ 1197.235344][T23680] netlink: 'syz.2.21864': attribute type 39 has an invalid length. [ 1197.267263][T23657] dvmrp8: left allmulticast mode [ 1197.330086][T23677] tipc: Enabled bearer , priority 0 [ 1197.349720][T23681] syzkaller0: entered promiscuous mode [ 1197.358125][T23682] netlink: 72 bytes leftover after parsing attributes in process `syz.2.21864'. [ 1197.386491][T23681] syzkaller0: entered allmulticast mode [ 1197.458097][T23685] : entered promiscuous mode [ 1197.482542][T23676] tipc: Resetting bearer [ 1197.514979][T23673] tipc: Resetting bearer [ 1197.561327][T23673] tipc: Disabling bearer [ 1197.585063][T23691] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1197.706434][T23694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21866'. [ 1197.784717][T23699] tipc: Enabled bearer , priority 0 [ 1197.907774][T23699] tipc: Resetting bearer [ 1197.931773][T23712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21870'. [ 1198.045836][T23714] tipc: Enabled bearer , priority 0 [ 1198.064051][T23703] syzkaller0: entered promiscuous mode [ 1198.071745][T23703] syzkaller0: entered allmulticast mode [ 1198.086213][T23718] netlink: 277 bytes leftover after parsing attributes in process `syz.6.21880'. [ 1198.108576][T23695] tipc: Resetting bearer [ 1198.147057][T23695] tipc: Disabling bearer [ 1198.222772][T23714] syzkaller0: entered promiscuous mode [ 1198.228968][T23714] syzkaller0: entered allmulticast mode [ 1198.243763][T23721] tipc: Enabled bearer , priority 0 [ 1198.254544][T23722] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1198.287711][T23716] syzkaller0: entered promiscuous mode [ 1198.297994][T23716] syzkaller0: entered allmulticast mode [ 1198.316513][T23725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21873'. [ 1198.333353][T23724] bond0: (slave bridge0): Releasing backup interface [ 1198.354590][T23724] bridge0: left promiscuous mode [ 1198.398372][T23720] tipc: Resetting bearer [ 1198.448500][T23725] team0: Failed to send options change via netlink (err -105) [ 1198.467529][T23725] team0: Mode changed to "loadbalance" [ 1198.532641][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1198.561786][T23719] tipc: Resetting bearer [ 1198.609003][T23713] tipc: Resetting bearer [ 1198.661613][T23713] tipc: Disabling bearer [ 1198.673359][T23715] tipc: Resetting bearer [ 1198.693819][T23715] tipc: Disabling bearer [ 1198.731317][ T2992] bond1: (slave macvlan2): link status definitely down, disabling slave [ 1198.899262][T23738] netlink: 'syz.2.21878': attribute type 39 has an invalid length. [ 1198.947759][ C1] net_ratelimit: 18 callbacks suppressed [ 1198.947783][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1198.950590][T23738] netlink: 72 bytes leftover after parsing attributes in process `syz.2.21878'. [ 1199.084127][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21879'. [ 1199.230610][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1199.237169][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.245134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.253345][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.261303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.269146][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.277108][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.285145][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.293178][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.301118][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.309041][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.316917][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.324864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.332829][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.340954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.348782][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.356830][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.364696][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.372746][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.380665][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.388636][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.396500][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.404539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.412399][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.420357][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.428222][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.436290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.444154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.452112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.459954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.468158][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.476021][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.484210][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.492236][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.500358][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.508316][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.516477][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.524338][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.532443][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.540595][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.548553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.556500][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.564454][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.572315][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.580369][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.588279][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.596236][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.604104][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.612099][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.619925][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.627882][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.635742][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.643705][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.651649][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.659575][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.667441][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.675412][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.683368][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.691417][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.699336][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.710226][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.718193][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.726245][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.734099][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.742100][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1199.749963][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1199.970860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1200.820467][T23765] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 1200.848664][T23765] CPU: 0 UID: 0 PID: 23765 Comm: syz.7.21888 Not tainted syzkaller #0 PREEMPT(full) [ 1200.848706][T23765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1200.848721][T23765] Call Trace: [ 1200.848730][T23765] [ 1200.848741][T23765] dump_stack_lvl+0x189/0x250 [ 1200.848777][T23765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.848804][T23765] ? __pfx__printk+0x10/0x10 [ 1200.848840][T23765] ? kernfs_path_from_node+0x2f/0x290 [ 1200.848864][T23765] ? kernfs_path_from_node+0x250/0x290 [ 1200.848886][T23765] ? kernfs_path_from_node+0x2f/0x290 [ 1200.848915][T23765] sysfs_warn_dup+0x8e/0xa0 [ 1200.848938][T23765] sysfs_do_create_link_sd+0xc0/0x110 [ 1200.848964][T23765] device_add_class_symlinks+0x1cf/0x240 [ 1200.849005][T23765] device_add+0x475/0xb50 [ 1200.849036][T23765] wiphy_register+0x1c81/0x2aa0 [ 1200.849084][T23765] ? __pfx_wiphy_register+0x10/0x10 [ 1200.849108][T23765] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1200.849148][T23765] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1200.849183][T23765] ieee80211_register_hw+0x3442/0x40a0 [ 1200.849230][T23765] ? ieee80211_register_hw+0x13c1/0x40a0 [ 1200.849272][T23765] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1200.849320][T23765] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1200.849353][T23765] ? __hrtimer_setup+0x187/0x210 [ 1200.849373][T23765] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1200.849400][T23765] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1200.849470][T23765] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1200.849500][T23765] ? trace_kmalloc+0x1f/0xd0 [ 1200.849525][T23765] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1200.849554][T23765] ? kstrndup+0xbf/0x160 [ 1200.849589][T23765] hwsim_new_radio_nl+0xea4/0x1b10 [ 1200.849624][T23765] ? __pfx___nla_validate_parse+0x10/0x10 [ 1200.849666][T23765] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1200.849713][T23765] ? __nla_parse+0x40/0x60 [ 1200.849740][T23765] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1200.849784][T23765] genl_family_rcv_msg_doit+0x212/0x300 [ 1200.849824][T23765] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1200.849881][T23765] ? bpf_lsm_capable+0x9/0x20 [ 1200.849909][T23765] ? security_capable+0x7e/0x2e0 [ 1200.849951][T23765] genl_rcv_msg+0x60e/0x790 [ 1200.849997][T23765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1200.850026][T23765] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1200.850077][T23765] netlink_rcv_skb+0x208/0x470 [ 1200.850100][T23765] ? __lock_acquire+0xab9/0xd20 [ 1200.850130][T23765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1200.850160][T23765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1200.850209][T23765] ? down_read+0x1ad/0x2e0 [ 1200.850239][T23765] genl_rcv+0x28/0x40 [ 1200.850381][T23765] netlink_unicast+0x82c/0x9e0 [ 1200.850426][T23765] ? __pfx_netlink_unicast+0x10/0x10 [ 1200.850452][T23765] ? netlink_sendmsg+0x642/0xb30 [ 1200.850476][T23765] ? skb_put+0x11b/0x210 [ 1200.850507][T23765] netlink_sendmsg+0x805/0xb30 [ 1200.850548][T23765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.850579][T23765] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1200.850605][T23765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1200.850629][T23765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.850665][T23765] __sock_sendmsg+0x219/0x270 [ 1200.850695][T23765] ____sys_sendmsg+0x505/0x830 [ 1200.850733][T23765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.850775][T23765] ? import_iovec+0x74/0xa0 [ 1200.850803][T23765] ___sys_sendmsg+0x21f/0x2a0 [ 1200.850904][T23765] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.850974][T23765] ? __fget_files+0x2a/0x420 [ 1200.850992][T23765] ? __fget_files+0x3a0/0x420 [ 1200.851022][T23765] __x64_sys_sendmsg+0x19b/0x260 [ 1200.851051][T23765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1200.851170][T23765] ? rcu_is_watching+0x15/0xb0 [ 1200.851213][T23765] ? do_syscall_64+0xbe/0x3b0 [ 1200.851242][T23765] do_syscall_64+0xfa/0x3b0 [ 1200.851264][T23765] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.851286][T23765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.851306][T23765] ? clear_bhb_loop+0x60/0xb0 [ 1200.851332][T23765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.851350][T23765] RIP: 0033:0x7f693b58eba9 [ 1200.851370][T23765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.851389][T23765] RSP: 002b:00007f693c372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.851411][T23765] RAX: ffffffffffffffda RBX: 00007f693b7d5fa0 RCX: 00007f693b58eba9 [ 1200.851426][T23765] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1200.851438][T23765] RBP: 00007f693b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1200.851451][T23765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.851463][T23765] R13: 00007f693b7d6038 R14: 00007f693b7d5fa0 R15: 00007ffebaee8f08 [ 1200.851498][T23765] [ 1201.010945][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1201.084804][T23778] syzkaller0: entered promiscuous mode [ 1201.339395][T23778] syzkaller0: entered allmulticast mode [ 1201.708556][T23799] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1201.801853][T23795] syzkaller0: entered promiscuous mode [ 1201.816404][T23795] syzkaller0: entered allmulticast mode [ 1202.050943][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1202.116616][T23809] tipc: Enabled bearer , priority 0 [ 1202.127029][T23809] syzkaller0: entered promiscuous mode [ 1202.152151][T23809] syzkaller0: entered allmulticast mode [ 1202.205634][T23809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21895'. [ 1203.100874][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1203.514952][T23832] netlink: zone id is out of range [ 1203.551573][T23832] netlink: set zone limit has 4 unknown bytes [ 1203.582272][T23833] netlink: del zone limit has 4 unknown bytes [ 1204.146355][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1205.180882][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1205.362083][T23809] tipc: Resetting bearer [ 1205.369437][T23808] tipc: Resetting bearer [ 1205.421652][T23808] tipc: Disabling bearer [ 1205.472889][T23817] wg1 speed is unknown, defaulting to 1000 [ 1205.496718][T23817] syzkaller0 speed is unknown, defaulting to 1000 [ 1205.583558][T23839] netlink: 'syz.6.21904': attribute type 39 has an invalid length. [ 1205.678996][T23837] wg1 speed is unknown, defaulting to 1000 [ 1205.689002][T23837] syzkaller0 speed is unknown, defaulting to 1000 [ 1205.756374][T23852] netlink: 'syz.3.21907': attribute type 1 has an invalid length. [ 1205.846768][T23852] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1205.967501][T23854] bond26: (slave veth21): Enslaving as an active interface with a down link [ 1205.996871][T23856] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1206.024761][T23859] macvlan0: entered promiscuous mode [ 1206.030214][T23859] macvlan0: entered allmulticast mode [ 1206.037018][T23859] bond26: entered promiscuous mode [ 1206.044722][T23859] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1206.052869][T23859] bond26: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1206.069977][T23859] bond26: left promiscuous mode [ 1206.103202][T23860] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1206.114055][T23860] bond15: (slave macvlan5): Enslaving as a backup interface with an up link [ 1206.192894][T23856] bond0: (slave team0): Releasing backup interface [ 1206.211084][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1206.218220][ T3596] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1206.221144][T23856] team0: left allmulticast mode [ 1206.245917][T23856] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1206.341343][ T12] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1206.431357][ T2962] bond15: (slave macvlan5): link status up again after 0 ms [ 1206.452276][T17629] bond15: (slave macvlan5): link status up again after 0 ms [ 1206.471010][ T2962] bond15: (slave macvlan5): link status up again after 0 ms [ 1206.502618][ T2962] bond15: (slave macvlan5): link status up again after 0 ms [ 1206.520606][T23866] tipc: Enabled bearer , priority 0 [ 1206.538820][T23876] netlink: 'syz.4.21912': attribute type 11 has an invalid length. [ 1206.549692][T23878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21914'. [ 1206.647895][T23869] syzkaller0: entered promiscuous mode [ 1206.653849][T23869] syzkaller0: entered allmulticast mode [ 1206.929370][T23866] tipc: Resetting bearer [ 1206.948420][T23865] tipc: Resetting bearer [ 1206.992441][T23865] tipc: Disabling bearer [ 1207.014204][T23884] tipc: Enabled bearer , priority 0 [ 1207.028148][T23888] syzkaller0: entered promiscuous mode [ 1207.040650][T23888] syzkaller0: entered allmulticast mode [ 1207.051545][T23883] syzkaller0: entered promiscuous mode [ 1207.058046][T23883] syzkaller0: entered allmulticast mode [ 1207.194191][T23881] tipc: Resetting bearer [ 1207.263332][T23893] netlink: 'syz.3.21919': attribute type 39 has an invalid length. [ 1207.274530][T23881] tipc: Disabling bearer [ 1207.320042][T23893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21919'. [ 1207.434910][T23895] wg1 speed is unknown, defaulting to 1000 [ 1207.486919][T23902] wg1 speed is unknown, defaulting to 1000 [ 1207.510006][T23902] syzkaller0 speed is unknown, defaulting to 1000 [ 1207.615907][T23895] syzkaller0 speed is unknown, defaulting to 1000 [ 1207.626694][T23904] tipc: Enabled bearer , priority 0 [ 1207.631202][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21923'. [ 1207.745348][T23904] syzkaller0: entered promiscuous mode [ 1207.765623][T23904] syzkaller0: entered allmulticast mode [ 1207.878867][T23904] tipc: Resetting bearer [ 1207.926130][T23900] tipc: Resetting bearer [ 1208.011300][T23900] tipc: Disabling bearer [ 1208.129427][T23929] can: request_module (can-proto-0) failed. [ 1208.239697][T23935] tipc: Enabled bearer , priority 0 [ 1208.248509][T23935] syzkaller0: entered promiscuous mode [ 1208.254241][T23935] syzkaller0: entered allmulticast mode [ 1208.330262][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21928'. [ 1208.380103][T23936] netlink: 84 bytes leftover after parsing attributes in process `syz.3.21928'. [ 1208.413086][T23935] tipc: Resetting bearer [ 1208.471734][T23933] tipc: Resetting bearer [ 1208.671654][T23933] tipc: Disabling bearer [ 1209.046509][T23951] netlink: 'syz.4.21931': attribute type 29 has an invalid length. [ 1209.231524][T23942] wg1 speed is unknown, defaulting to 1000 [ 1209.239046][ T2992] net_ratelimit: 11 callbacks suppressed [ 1209.239064][ T2992] bond15: (slave macvlan5): failed to get link speed/duplex [ 1209.276750][T23942] syzkaller0 speed is unknown, defaulting to 1000 [ 1209.330862][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1209.443832][T23954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.451718][T23954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.769176][T23954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.817158][T23954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.111004][ T12] bond15: (slave macvlan5): failed to get link speed/duplex [ 1210.143157][T23955] geneve2: entered promiscuous mode [ 1210.167520][T23955] geneve2: entered allmulticast mode [ 1210.203678][T23961] tipc: Enabled bearer , priority 0 [ 1210.211713][T23962] syzkaller0: entered promiscuous mode [ 1210.217861][T23962] syzkaller0: entered allmulticast mode [ 1210.227715][ T2992] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.237748][ T2992] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1210.257842][ T2992] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.275954][ T2992] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1210.331533][T23957] tipc: Resetting bearer [ 1210.371175][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1210.392043][T23957] tipc: Disabling bearer [ 1210.415457][ T2992] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.438354][ T2992] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1210.554533][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21936'. [ 1210.597344][ T2992] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.631250][ T2992] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1210.698278][T23981] netlink: 'syz.7.21937': attribute type 1 has an invalid length. [ 1210.857394][T23981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1210.928242][T23985] bond1: (slave geneve3): making interface the new active one [ 1210.939776][T23985] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1210.951166][ T2992] bond15: (slave macvlan5): failed to get link speed/duplex [ 1211.028340][T23988] bond1: entered promiscuous mode [ 1211.045189][T23988] geneve3: entered promiscuous mode [ 1211.106364][T17629] bond15: (slave macvlan5): failed to get link speed/duplex [ 1211.127545][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.136660][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.169639][T23992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1211.214515][T23993] netlink: zone id is out of range [ 1211.240087][T23993] netlink: zone id is out of range [ 1211.257835][T23993] netlink: zone id is out of range [ 1211.279253][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.301850][T23996] netlink: del zone limit has 4 unknown bytes [ 1211.311218][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.525558][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21942'. [ 1211.885630][T24000] bridge_slave_1: left allmulticast mode [ 1211.902176][T24000] bridge_slave_1: left promiscuous mode [ 1211.925949][T24000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.013980][T24000] bridge_slave_0: left allmulticast mode [ 1212.019669][T24000] bridge_slave_0: left promiscuous mode [ 1212.025662][T24000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.512454][T24009] netlink: 'syz.4.21945': attribute type 39 has an invalid length. [ 1212.564470][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21945'. [ 1212.711312][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21946'. [ 1212.757134][T24018] wg1 speed is unknown, defaulting to 1000 [ 1212.776575][T24018] syzkaller0 speed is unknown, defaulting to 1000 [ 1213.529336][T24039] wg1 speed is unknown, defaulting to 1000 [ 1213.593585][T24039] syzkaller0 speed is unknown, defaulting to 1000 [ 1213.845067][T24049] tipc: Enabled bearer , priority 0 [ 1213.882312][T24051] syzkaller0: entered promiscuous mode [ 1213.887828][T24051] syzkaller0: entered allmulticast mode [ 1214.064958][T24049] tipc: Resetting bearer [ 1214.091434][T24048] tipc: Resetting bearer [ 1214.125451][T24048] tipc: Disabling bearer [ 1214.191351][T24056] tipc: Enabling of bearer rejected, already enabled [ 1214.531062][ C1] net_ratelimit: 4 callbacks suppressed [ 1214.531083][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1215.390270][T23944] Set syz1 is full, maxelem 65536 reached [ 1215.571026][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1216.611429][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1216.800616][T24102] netlink: 120 bytes leftover after parsing attributes in process `syz.2.21974'. [ 1216.911493][T24104] netlink: 36 bytes leftover after parsing attributes in process `syz.6.21975'. [ 1216.942884][T24107] netlink: 92 bytes leftover after parsing attributes in process `syz.4.21976'. [ 1216.961430][T24104] 8021q: VLANs not supported on ipvlan1 [ 1216.969444][T24107] netlink: 92 bytes leftover after parsing attributes in process `syz.4.21976'. [ 1217.018368][T24108] macsec1: entered promiscuous mode [ 1217.043327][T24108] macsec1: entered allmulticast mode [ 1217.457646][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21979'. [ 1217.496614][T24113] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21978'. [ 1217.647143][T24117] bond0: (slave wlan1): Releasing backup interface [ 1217.653948][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1217.708033][T24115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21978'. [ 1217.773816][T24125] netlink: 'syz.2.21981': attribute type 12 has an invalid length. [ 1218.021906][T24135] netlink: 'syz.3.21984': attribute type 39 has an invalid length. [ 1218.115463][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21982'. [ 1218.164034][T24135] netlink: 72 bytes leftover after parsing attributes in process `syz.3.21984'. [ 1218.267108][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21984'. [ 1218.394699][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21985'. [ 1218.700998][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1219.024906][T24152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21988'. [ 1219.065963][T24152] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1219.217735][T24156] siw: device registration error -23 [ 1219.258922][T24150] wg1 speed is unknown, defaulting to 1000 [ 1219.289466][T24150] syzkaller0 speed is unknown, defaulting to 1000 [ 1219.393716][T24156] netlink: 'syz.3.21990': attribute type 4 has an invalid length. [ 1219.730879][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1220.415406][T24183] wg1 speed is unknown, defaulting to 1000 [ 1220.564751][T24183] syzkaller0 speed is unknown, defaulting to 1000 [ 1220.770866][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1221.303041][T24196] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1221.439760][T24196] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1221.484243][T24196] bond14: (slave macvlan0): Enslaving as a backup interface with a down link [ 1221.615022][T24196] bridge0: port 1(dummy0) entered disabled state [ 1221.675303][T24203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22000'. [ 1221.806621][T24212] netlink: 'syz.3.22000': attribute type 4 has an invalid length. [ 1221.815294][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1221.853982][T24196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1222.663350][T24213] syz_tun: entered allmulticast mode [ 1222.689540][T24215] tipc: Enabled bearer , priority 0 [ 1222.703754][T24220] vxcan0: left allmulticast mode [ 1222.708871][T24220] vxcan1: left allmulticast mode [ 1222.718631][T24220] veth0: left allmulticast mode [ 1222.728296][T24220] veth1: left allmulticast mode [ 1222.733676][T24220] wg1: left allmulticast mode [ 1222.738665][T24220] wg2: left allmulticast mode [ 1222.771812][T24220] veth0_to_bridge: left allmulticast mode [ 1222.777759][T24220] ¾x9ÿ: left allmulticast mode [ 1222.814687][T24220] veth1_to_bridge: left allmulticast mode [ 1222.821702][T24220] bridge_slave_1: left allmulticast mode [ 1222.842233][T24220] veth0_to_bond: left allmulticast mode [ 1222.851482][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1222.861774][T24220] bond_slave_0: left allmulticast mode [ 1222.867433][T24220] veth1_to_bond: left allmulticast mode [ 1222.885105][T24243] netlink: 'syz.3.22006': attribute type 13 has an invalid length. [ 1222.895853][T24220] bond_slave_1: left allmulticast mode [ 1222.915384][T24220] veth0_to_team: left allmulticast mode [ 1222.922312][T24220] C: left allmulticast mode [ 1222.927121][T24220] veth1_to_team: left allmulticast mode [ 1222.934132][T24243] netlink: 'syz.3.22006': attribute type 17 has an invalid length. [ 1222.944768][T24220] veth0_to_batadv: left allmulticast mode [ 1222.951701][T24220] batadv_slave_0: left allmulticast mode [ 1222.957659][T24220] xfrm0: left allmulticast mode [ 1222.963573][T24220] veth0_to_hsr: left allmulticast mode [ 1222.969519][T24220] veth1_to_hsr: left allmulticast mode [ 1222.979809][T24220] 0·: left allmulticast mode [ 1222.984901][T24220] hsr_slave_0: left allmulticast mode [ 1222.991779][T24220] veth1_virt_wifi: left allmulticast mode [ 1222.997825][T24220] veth0_virt_wifi: left allmulticast mode [ 1223.005848][T24220] net veth1_virt_wifi ªªªªª: left allmulticast mode [ 1223.015238][T24220] veth1_macvtap: left allmulticast mode [ 1223.022379][T24220] veth0_macvtap: left allmulticast mode [ 1223.028255][T24220] macsec0: left allmulticast mode [ 1223.034169][T24220] geneve0: left allmulticast mode [ 1223.039755][T24220] syztnl0: left allmulticast mode [ 1223.045903][T24220] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 1223.053731][T24220] bond1: left allmulticast mode [ 1223.058732][T24220] bridge1: left allmulticast mode [ 1223.064658][T24220] vxcan2: left allmulticast mode [ 1223.069723][T24220] vxcan3: left allmulticast mode [ 1223.075528][T24220] ip6gretap1: left allmulticast mode [ 1223.089771][T24220] bridge2: left allmulticast mode [ 1223.101584][T24220] bridge3: left allmulticast mode [ 1223.107896][T24220] bond2: left allmulticast mode [ 1223.114217][T24220] bridge4: left allmulticast mode [ 1223.119532][T24220] _ÐZ`Ô€@ÿÿ: left allmulticast mode [ 1223.128463][T24220] bond3: left allmulticast mode [ 1223.144610][T24220] bond4: left allmulticast mode [ 1223.149795][T24220] geneve2: left allmulticast mode [ 1223.164518][T24220] geneve3: left allmulticast mode [ 1223.176985][T24220] mac80211_hwsim hwsim25 wlan3: left allmulticast mode [ 1223.191651][T24220] wlan0.3: left allmulticast mode [ 1223.203866][T24220] mac80211_hwsim hwsim10 ªªªªª;: left allmulticast mode [ 1223.211896][T24220] bond5: left allmulticast mode [ 1223.216912][T24220] bridge5: left allmulticast mode [ 1223.223543][T24220] bridge6: left allmulticast mode [ 1223.228684][T24220] ip6erspan0: left allmulticast mode [ 1223.235616][T24220] bridge7: left allmulticast mode [ 1223.241894][T24220] ip6gretap2: left allmulticast mode [ 1223.247439][T24220] bridge8: left allmulticast mode [ 1223.253105][T24220] gre1: left allmulticast mode [ 1223.258640][T24220] bridge9: left allmulticast mode [ 1223.264508][T24220] veth2: left allmulticast mode [ 1223.269562][T24220] veth3: left allmulticast mode [ 1223.274759][T24220] bond6: left allmulticast mode [ 1223.279742][T24220] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 1223.287097][T24220] vxlan0: left allmulticast mode [ 1223.292523][T24220] syztnl1: left allmulticast mode [ 1223.297713][T24220] vlan0: left allmulticast mode [ 1223.303624][T24220] macvlan0: left allmulticast mode [ 1223.308951][T24220] ip6tnl1: left allmulticast mode [ 1223.314510][T24220] ave_0: left allmulticast mode [ 1223.319676][T24220] syztnl2: left allmulticast mode [ 1223.325584][T24220] vlan1: left allmulticast mode [ 1223.330484][T24220] team_slave_1: left allmulticast mode [ 1223.336647][T24220] gretap1: left allmulticast mode [ 1223.342619][T24220] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 1223.349833][T24220] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 1223.359197][T24220] veth4: left allmulticast mode [ 1223.369121][T24220] veth5: left allmulticast mode [ 1223.376761][T24220] vlan2: left allmulticast mode [ 1223.389721][T24220] macsec1: left allmulticast mode [ 1223.396784][T24220] vti0: left allmulticast mode [ 1223.411175][T24220] bond7: left allmulticast mode [ 1223.418742][T24220] vlan3: left allmulticast mode [ 1223.434066][T24220] bond0: left allmulticast mode [ 1223.439304][T24220] bond8: left allmulticast mode [ 1223.453233][T24220] macvlan1: left allmulticast mode [ 1223.458832][T24220] macvlan2: left allmulticast mode [ 1223.464971][T24220] sit1: left allmulticast mode [ 1223.470025][T24220] macvlan3: left allmulticast mode [ 1223.475687][T24220] vlan4: left allmulticast mode [ 1223.488357][T24220] batadv0: left allmulticast mode [ 1223.497783][T24220] vlan5: left allmulticast mode [ 1223.510594][T24220] geneve1: left allmulticast mode [ 1223.519188][T24220] : left allmulticast mode [ 1223.535225][T24220] ip6gre1: left allmulticast mode [ 1223.540538][T24220] bond9: left allmulticast mode [ 1223.556331][T24220] gre2: left allmulticast mode [ 1223.566537][T24220] bond10: left allmulticast mode [ 1223.572195][T24220] bridge10: left allmulticast mode [ 1223.577590][T24220] ip6gre2: left allmulticast mode [ 1223.583511][T24220] gre3: left allmulticast mode [ 1223.588583][T24220] ip6tnl2: left allmulticast mode [ 1223.594044][T24220] gre4: left allmulticast mode [ 1223.599038][T24220] ip6gre3: left allmulticast mode [ 1223.604810][T24220] bond11: left allmulticast mode [ 1223.617859][T24220] macvlan4: left allmulticast mode [ 1223.623820][T24220] @: left allmulticast mode [ 1223.628595][T24220] ip6tnl3: left allmulticast mode [ 1223.634005][T24220] bond12: left allmulticast mode [ 1223.639325][T24220] gretap2: left allmulticast mode [ 1223.647506][T24220] veth6: left allmulticast mode [ 1223.654697][T24220] veth7: left allmulticast mode [ 1223.659808][T24220] netdevsim netdevsim4 eth0: left allmulticast mode [ 1223.666996][T24220] netdevsim netdevsim4 eth1: left allmulticast mode [ 1223.673949][T24220] netdevsim netdevsim4 eth2: left allmulticast mode [ 1223.681861][T24220] netdevsim netdevsim4 eth3: left allmulticast mode [ 1223.682157][ T4386] tipc: Node number set to 682422446 [ 1223.688685][T24220] bridge11: left allmulticast mode [ 1223.699301][T24220] veth8: left allmulticast mode [ 1223.704691][T24220] veth9: left allmulticast mode [ 1223.709686][T24220] veth10: left allmulticast mode [ 1223.714932][T24220] veth11: left allmulticast mode [ 1223.719988][T24220] veth12: left allmulticast mode [ 1223.729508][T24220] veth13: left allmulticast mode [ 1223.736131][T24220] veth14: left allmulticast mode [ 1223.742016][T24220] veth15: left allmulticast mode [ 1223.747273][T24220] ip6tnl4: left allmulticast mode [ 1223.754117][T24220] bond13: left promiscuous mode [ 1223.759007][T24220] wireguard0: left promiscuous mode [ 1223.766009][T24220] vlan7: left promiscuous mode [ 1223.771361][T24220] vlan7: left allmulticast mode [ 1223.776268][T24220] hsr_slave_1: left allmulticast mode [ 1223.783913][T24218] syzkaller0: entered promiscuous mode [ 1223.789582][T24218] syzkaller0: entered allmulticast mode [ 1223.799072][ T2962] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.891606][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1223.956720][T24243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.966959][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22012'. [ 1224.333789][T24243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1224.367052][ T2962] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.398209][T24218] tipc: Resetting bearer [ 1224.437207][T24218] tipc: Disabling bearer [ 1224.454496][ T2962] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.475873][T24245] wg1 speed is unknown, defaulting to 1000 [ 1224.482946][ T2962] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.511047][T24265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22014'. [ 1224.526137][T24245] syzkaller0 speed is unknown, defaulting to 1000 [ 1224.795165][T24275] netlink: 6 bytes leftover after parsing attributes in process `syz.3.22017'. [ 1224.823093][T24275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.869826][ T1148] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.899414][ T1148] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1224.931536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1225.075975][ T1148] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.120854][ T1148] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1225.151502][ T1148] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.171225][ T1148] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1225.261638][T24288] netlink: 'syz.4.22020': attribute type 13 has an invalid length. [ 1225.301021][ T1148] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.309945][ T1148] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1225.517012][T24296] tipc: New replicast peer: 255.255.255.255 [ 1225.525751][T24296] tipc: Enabled bearer , priority 10 [ 1225.608222][T24294] netlink: 'syz.2.22022': attribute type 12 has an invalid length. [ 1225.835845][T24304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22027'. [ 1225.971006][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1226.398313][T24304] bridge0: port 1(veth3) entered blocking state [ 1226.419550][T24304] bridge0: port 1(veth3) entered disabled state [ 1226.456251][T24304] veth3: entered allmulticast mode [ 1226.473041][T24304] veth3: entered promiscuous mode [ 1226.486564][T24316] bridge0: port 2(veth0_to_bond) entered blocking state [ 1226.502858][T24316] bridge0: port 2(veth0_to_bond) entered disabled state [ 1226.510120][T24316] veth0_to_bond: entered allmulticast mode [ 1226.543899][T24316] veth0_to_bond: entered promiscuous mode [ 1226.576850][T24313] wg1 speed is unknown, defaulting to 1000 [ 1226.611716][T24313] syzkaller0 speed is unknown, defaulting to 1000 [ 1227.010881][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1227.200563][T24335] netlink: 128 bytes leftover after parsing attributes in process `syz.4.22035'. [ 1227.224306][T24337] netlink: 'syz.7.22036': attribute type 1 has an invalid length. [ 1227.306258][T24337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1227.486208][T24343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1227.495000][T24343] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1227.509210][T24343] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 1227.640513][T24346] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 1227.880643][T24358] netlink: 72 bytes leftover after parsing attributes in process `syz.3.22039'. [ 1227.893522][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22039'. [ 1227.927039][T24355] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22038'. [ 1227.982295][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22038'. [ 1228.051486][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1228.088724][T24364] xfrm0: entered promiscuous mode [ 1228.103054][T24364] xfrm0: entered allmulticast mode [ 1228.232742][T24371] netlink: 'syz.7.22043': attribute type 10 has an invalid length. [ 1228.264466][T24371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.313819][T24371] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1228.361739][T24372] netlink: 'syz.7.22043': attribute type 10 has an invalid length. [ 1228.404832][T24369] wg1 speed is unknown, defaulting to 1000 [ 1228.404985][T24372] netlink: 40 bytes leftover after parsing attributes in process `syz.7.22043'. [ 1228.433202][T24372] batadv0: entered promiscuous mode [ 1228.438801][T24372] batadv0: entered allmulticast mode [ 1228.512330][T24372] bond0: (slave batadv0): Releasing backup interface [ 1228.571389][T24372] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1228.660534][T24374] pimreg: entered allmulticast mode [ 1228.691284][T24369] syzkaller0 speed is unknown, defaulting to 1000 [ 1229.090938][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1229.188568][T24382] mac80211_hwsim hwsim28 syzkaller0: Caught tx_queue_len zero misconfig [ 1229.330597][T24383] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1229.383697][T24382] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 1229.411396][T24382] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 1229.545148][T24385] netlink: 72 bytes leftover after parsing attributes in process `syz.2.22057'. [ 1229.680474][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22057'. [ 1229.914304][T24391] wg1 speed is unknown, defaulting to 1000 [ 1229.978792][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22049'. [ 1229.994008][T24391] syzkaller0 speed is unknown, defaulting to 1000 [ 1230.131667][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1230.246055][T24404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22052'. [ 1230.268769][T24404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22052'. [ 1230.311958][T24406] tipc: Can't bind to reserved service type 1 [ 1230.499290][T24410] wg1 speed is unknown, defaulting to 1000 [ 1230.553073][T24410] syzkaller0 speed is unknown, defaulting to 1000 [ 1230.854971][T24429] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1230.951015][T24429] netlink: 'syz.2.22061': attribute type 10 has an invalid length. [ 1231.170992][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1231.239554][T24433] wg1 speed is unknown, defaulting to 1000 [ 1231.430450][T24433] syzkaller0 speed is unknown, defaulting to 1000 [ 1231.624404][T24459] netlink: 36 bytes leftover after parsing attributes in process `syz.6.22068'. [ 1231.686689][T24461] dvmrp0: entered allmulticast mode [ 1232.210882][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1232.553295][T24476] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 1232.584794][T24476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22073'. [ 1232.810150][T24480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22076'. [ 1232.851253][T24480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22076'. [ 1232.860419][T24480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22076'. [ 1233.250859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1233.502585][T24497] vlan1: entered promiscuous mode [ 1233.521661][T24497] batadv0: entered promiscuous mode [ 1233.727826][T24499] tipc: Enabled bearer , priority 0 [ 1233.760715][T24499] syzkaller0: entered promiscuous mode [ 1233.779840][T24499] syzkaller0: entered allmulticast mode [ 1233.895887][T24499] tipc: Resetting bearer [ 1233.937717][T24498] tipc: Resetting bearer [ 1233.978701][T24498] tipc: Disabling bearer [ 1234.290940][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1234.307175][T24517] wg1 speed is unknown, defaulting to 1000 [ 1234.362305][T24517] syzkaller0 speed is unknown, defaulting to 1000 [ 1234.401275][T24519] wg1 speed is unknown, defaulting to 1000 [ 1234.419511][T24515] wg1 speed is unknown, defaulting to 1000 [ 1234.435360][T24519] syzkaller0 speed is unknown, defaulting to 1000 [ 1234.478172][T24515] syzkaller0 speed is unknown, defaulting to 1000 [ 1234.676341][T24523] xfrm0: left promiscuous mode [ 1234.700090][T24523] xfrm0: left allmulticast mode [ 1234.715186][T24536] __nla_validate_parse: 3 callbacks suppressed [ 1234.715205][T24536] netlink: 104 bytes leftover after parsing attributes in process `syz.3.22095'. [ 1234.722494][T24523] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 1234.739538][T24523] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 1235.080490][T24555] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2882497209/2882497211 [ 1235.122752][T24555] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2882497209/2882497211 [ 1235.205678][T24547] tipc: Enabled bearer , priority 0 [ 1235.340961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1235.451549][T24550] syzkaller0: entered promiscuous mode [ 1235.457177][T24550] syzkaller0: entered allmulticast mode [ 1235.598884][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22102'. [ 1235.634712][T24537] tipc: Resetting bearer [ 1235.689124][T24537] tipc: Disabling bearer [ 1236.080507][T24584] wg1 speed is unknown, defaulting to 1000 [ 1236.117514][T24584] syzkaller0 speed is unknown, defaulting to 1000 [ 1236.276766][T24592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22104'. [ 1236.334182][T24592] netlink: 16 bytes leftover after parsing attributes in process `syz.7.22104'. [ 1236.373645][T24592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22104'. [ 1236.380995][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1236.410598][T24595] wg1 speed is unknown, defaulting to 1000 [ 1236.421411][T24592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22104'. [ 1236.455622][T24595] syzkaller0 speed is unknown, defaulting to 1000 [ 1236.762051][T24601] netlink: 'syz.3.22108': attribute type 13 has an invalid length. [ 1237.421830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1237.486977][T24610] syz_tun: entered allmulticast mode [ 1237.509146][T24613] dvmrp8: entered allmulticast mode [ 1237.531772][T17629] bond23: (slave ip6gretap2): link status up again after 0 ms [ 1237.562085][ T2962] bond23: (slave ip6gretap2): link status up again after 0 ms [ 1237.609053][T17629] bond23: (slave ip6gretap2): link status up again after 0 ms [ 1237.627173][T24608] syz_tun: left allmulticast mode [ 1237.640318][T24608] dvmrp8: left allmulticast mode [ 1237.645111][ T2962] bond23: (slave ip6gretap2): link status up again after 0 ms [ 1237.700237][ T2992] bond23: (slave ip6gretap2): link status up again after 0 ms [ 1237.741776][T17629] bond23: (slave ip6gretap2): link status up again after 0 ms [ 1237.761119][T17629] bond23: (slave ip6gretap2): link status up again after 0 ms [ 1238.053118][T24629] tipc: Enabled bearer , priority 0 [ 1238.071952][T24622] syzkaller0: entered promiscuous mode [ 1238.091368][T24622] syzkaller0: entered allmulticast mode [ 1238.168457][T24622] netlink: 27 bytes leftover after parsing attributes in process `syz.6.22113'. [ 1238.233638][T24622] tipc: Resetting bearer [ 1238.275192][T24621] tipc: Resetting bearer [ 1238.342488][T24621] tipc: Disabling bearer [ 1238.410091][T24638] dvmrp8: entered allmulticast mode [ 1238.605092][T24640] netlink: 'syz.6.22118': attribute type 39 has an invalid length. [ 1238.619602][T24636] wg1 speed is unknown, defaulting to 1000 [ 1238.638454][T24636] syzkaller0 speed is unknown, defaulting to 1000 [ 1238.656126][T24640] netlink: 72 bytes leftover after parsing attributes in process `syz.6.22118'. [ 1238.702607][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22118'. [ 1238.918253][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22120'. [ 1239.371609][T24655] wg1 speed is unknown, defaulting to 1000 [ 1239.391786][T24658] tipc: Enabled bearer , priority 0 [ 1239.414383][T24658] syzkaller0: entered promiscuous mode [ 1239.431606][T24658] syzkaller0: entered allmulticast mode [ 1239.452628][T24655] syzkaller0 speed is unknown, defaulting to 1000 [ 1239.539169][T24657] tipc: Resetting bearer [ 1239.586759][T24657] tipc: Disabling bearer [ 1239.597525][T24659] wg1 speed is unknown, defaulting to 1000 [ 1239.612349][T24661] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1239.638484][T24661] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 1239.651566][T24661] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 1239.669898][T24659] syzkaller0 speed is unknown, defaulting to 1000 [ 1239.873171][T24666] tipc: Enabled bearer , priority 0 [ 1239.911168][T24668] siw: device registration error -23 [ 1239.924477][T24666] tipc: Resetting bearer [ 1239.932028][T24668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22126'. [ 1240.017740][T24663] tipc: Disabling bearer [ 1240.528750][T24674] ipvlan0: entered promiscuous mode [ 1240.540871][ C1] net_ratelimit: 28 callbacks suppressed [ 1240.540911][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1240.552788][T24674] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1240.732787][ T2962] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1241.290583][T24680] wg1 speed is unknown, defaulting to 1000 [ 1241.296436][T24695] batadv_slave_1: entered promiscuous mode [ 1241.321217][ T2962] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1241.371750][T24697] wg1 speed is unknown, defaulting to 1000 [ 1241.378441][T24680] syzkaller0 speed is unknown, defaulting to 1000 [ 1241.390351][T24695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22134'. [ 1241.439460][T24697] syzkaller0 speed is unknown, defaulting to 1000 [ 1241.478639][T24694] batadv_slave_1: left promiscuous mode [ 1241.570991][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1241.721441][ T3596] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1242.128253][T24714] wg1 speed is unknown, defaulting to 1000 [ 1242.136513][ T3596] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1242.254830][T11317] IPVS: starting estimator thread 0... [ 1242.263883][T24722] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096 [ 1242.301668][T24714] syzkaller0 speed is unknown, defaulting to 1000 [ 1242.311971][T17629] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1242.361612][T24723] IPVS: using max 25 ests per chain, 60000 per kthread [ 1242.442921][T17629] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1242.538948][T24725] tipc: Enabling of bearer rejected, already enabled [ 1242.591549][ T2992] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1242.610987][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1243.039653][T24735] IPVS: Scheduler module ip_vs_sip not found [ 1243.705995][T24772] tipc: Enabled bearer , priority 0 [ 1243.757326][T24772] syzkaller0: entered promiscuous mode [ 1243.772819][T24772] syzkaller0: entered allmulticast mode [ 1243.916231][T24778] netlink: 52 bytes leftover after parsing attributes in process `syz.7.22155'. [ 1243.937053][T24772] tipc: Resetting bearer [ 1244.378107][T24783] netlink: 596 bytes leftover after parsing attributes in process `syz.7.22155'. [ 1244.494171][T24769] tipc: Resetting bearer [ 1244.534396][T24769] tipc: Disabling bearer [ 1244.660716][T24790] netlink: 'syz.2.22158': attribute type 1 has an invalid length. [ 1244.702217][T24790] bond15: entered promiscuous mode [ 1244.707916][T24790] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1244.718116][T24794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22158'. [ 1244.742000][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22158'. [ 1245.236028][ T5883] Bluetooth: hci7: link tx timeout [ 1245.243365][ T5883] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 1245.255139][ T5883] Bluetooth: hci7: link tx timeout [ 1245.260291][ T5883] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1245.404705][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1245.427773][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1245.470042][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1245.543716][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1245.607872][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1245.742961][ C1] net_ratelimit: 16 callbacks suppressed [ 1245.742986][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1245.812231][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1246.050894][T24808] Bluetooth: hci5: command 0x0406 tx timeout [ 1246.123752][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1246.133910][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1246.144485][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1246.156920][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.7.22162'. [ 1246.258809][T24805] veth3: entered promiscuous mode [ 1246.292044][T17629] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1246.404795][ T3596] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1246.673564][ T12] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1246.738916][T24835] wg1 speed is unknown, defaulting to 1000 [ 1246.768030][T24838] netlink: 'syz.4.22168': attribute type 13 has an invalid length. [ 1246.780908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1246.841229][ T2992] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1246.855204][T24835] syzkaller0 speed is unknown, defaulting to 1000 [ 1246.923547][T24838] wg1 speed is unknown, defaulting to 1000 [ 1246.952779][T24846] dummy0: left promiscuous mode [ 1246.983518][T24846] wireguard0: left promiscuous mode [ 1247.014903][T24846] wireguard0: left allmulticast mode [ 1247.062276][T24846] bond3: left promiscuous mode [ 1247.091534][T24846] gre1: left allmulticast mode [ 1247.098864][T24846] bond4: left promiscuous mode [ 1247.174600][T24846] macsec2: left promiscuous mode [ 1247.193841][T24846] macsec2: left allmulticast mode [ 1247.203231][T24846] bond7: left promiscuous mode [ 1247.208323][T24846] vxcan5: left promiscuous mode [ 1247.220711][T24846] ip6gre2: left allmulticast mode [ 1247.331755][T21658] Bluetooth: hci7: command 0x0405 tx timeout [ 1247.437138][T24846] bond11: left promiscuous mode [ 1247.443276][T24846] bond12: left promiscuous mode [ 1247.449120][T24846] bond11: left allmulticast mode [ 1247.455383][T24846] bond12: left allmulticast mode [ 1247.509052][T24846] bridge16: left allmulticast mode [ 1247.540441][T24846] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1247.566951][T24846] bond15: left promiscuous mode [ 1247.614971][T17629] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.668069][T24838] syzkaller0 speed is unknown, defaulting to 1000 [ 1247.754132][T24860] wg1 speed is unknown, defaulting to 1000 [ 1247.755689][T17629] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.810858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1247.856700][T24860] syzkaller0 speed is unknown, defaulting to 1000 [ 1247.889657][T17629] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.919818][T17629] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.942338][T24865] netlink: 'syz.7.22173': attribute type 2 has an invalid length. [ 1248.054112][T24868] netlink: 'syz.7.22173': attribute type 2 has an invalid length. [ 1248.106812][ T2962] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1248.457427][T17629] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1248.583454][ T988] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1249.351858][T24894] netlink: 'syz.6.22181': attribute type 39 has an invalid length. [ 1249.414397][T21658] Bluetooth: hci7: command 0x0405 tx timeout [ 1249.558845][T24896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.624344][T24896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.023837][T24905] wg1 speed is unknown, defaulting to 1000 [ 1250.070301][T24907] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1250.105777][T24912] netlink: 'syz.4.22185': attribute type 12 has an invalid length. [ 1250.738441][T24907] bond1: (slave macvlan2): Releasing backup interface [ 1250.767011][T24907] bond0 (unregistering): Released all slaves [ 1250.870467][T24905] syzkaller0 speed is unknown, defaulting to 1000 [ 1250.877603][ T2962] net_ratelimit: 14 callbacks suppressed [ 1250.877624][ T2962] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1250.930907][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1250.969538][T24903] wg1 speed is unknown, defaulting to 1000 [ 1251.001027][ T2962] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1251.066903][T24903] syzkaller0 speed is unknown, defaulting to 1000 [ 1251.381527][ T988] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1251.671795][ T3596] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1251.791965][ T2992] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1251.901905][ T2992] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1251.970875][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1252.032633][ T3596] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1252.161758][ T2992] bond23: (slave ip6gretap2): failed to get link speed/duplex [ 1252.373128][T24931] __nla_validate_parse: 24 callbacks suppressed [ 1252.373151][T24931] netlink: 192 bytes leftover after parsing attributes in process `syz.3.22189'. [ 1252.717886][T24938] atomic_op ffff88807c5a4998 conn xmit_atomic 0000000000000000 [ 1252.896070][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22192'. [ 1252.928296][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22192'. [ 1253.370017][T24952] netlink: 20 bytes leftover after parsing attributes in process `syz.7.22196'. [ 1253.963487][T24976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22201'. [ 1253.999617][T24965] wg1 speed is unknown, defaulting to 1000 [ 1254.039566][T24970] wg1 speed is unknown, defaulting to 1000 [ 1254.047875][T24965] syzkaller0 speed is unknown, defaulting to 1000 [ 1254.084101][T24970] syzkaller0 speed is unknown, defaulting to 1000 [ 1255.651455][T21658] Bluetooth: hci7: command 0x0405 tx timeout [ 1255.956707][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22209'. [ 1256.130872][ C1] net_ratelimit: 4 callbacks suppressed [ 1256.130891][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1256.420183][T25027] wg1 speed is unknown, defaulting to 1000 [ 1256.430366][T25027] syzkaller0 speed is unknown, defaulting to 1000 [ 1256.495103][T25025] wg1 speed is unknown, defaulting to 1000 [ 1256.579606][T25034] wg1 speed is unknown, defaulting to 1000 [ 1256.587304][T25025] syzkaller0 speed is unknown, defaulting to 1000 [ 1256.627052][T25034] syzkaller0 speed is unknown, defaulting to 1000 [ 1256.813649][T25046] netlink: 'syz.6.22219': attribute type 39 has an invalid length. [ 1256.830404][T25042] wg1 speed is unknown, defaulting to 1000 [ 1256.839749][T25040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22217'. [ 1256.869148][T25048] netlink: 72 bytes leftover after parsing attributes in process `syz.6.22219'. [ 1256.916635][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22219'. [ 1256.922677][T25042] syzkaller0 speed is unknown, defaulting to 1000 [ 1256.959428][T25049] wg1 speed is unknown, defaulting to 1000 [ 1257.014256][T25049] syzkaller0 speed is unknown, defaulting to 1000 [ 1257.150720][T25056] tipc: Failed to remove unknown binding: 66,1,1/0:2955014793/2955014795 [ 1257.170891][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1257.186151][T25056] tipc: Failed to remove unknown binding: 66,1,1/0:2955014793/2955014795 [ 1257.460126][T25062] wg1 speed is unknown, defaulting to 1000 [ 1257.492553][T25062] syzkaller0 speed is unknown, defaulting to 1000 [ 1257.548586][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 1257.640179][T25065] wg1 speed is unknown, defaulting to 1000 [ 1257.995154][T25087] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1258.009111][T25065] syzkaller0 speed is unknown, defaulting to 1000 [ 1258.104010][T25072] wg1 speed is unknown, defaulting to 1000 [ 1258.148696][T25076] wg1 speed is unknown, defaulting to 1000 [ 1258.217013][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1258.218054][T25076] syzkaller0 speed is unknown, defaulting to 1000 [ 1258.292183][T25072] syzkaller0 speed is unknown, defaulting to 1000 [ 1258.842545][T25096] netlink: 'syz.3.22228': attribute type 4 has an invalid length. [ 1259.250884][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1259.922669][T25111] netlink: 'syz.3.22230': attribute type 16 has an invalid length. [ 1259.931529][T25111] netlink: 'syz.3.22230': attribute type 17 has an invalid length. [ 1260.058531][T25111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.135550][T25111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1260.174465][T25108] wg1 speed is unknown, defaulting to 1000 [ 1260.229839][T25108] syzkaller0 speed is unknown, defaulting to 1000 [ 1260.290858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1260.482429][T25115] netlink: 'syz.7.22233': attribute type 4 has an invalid length. [ 1260.611331][ T31] INFO: task syz.5.21291:21910 blocked for more than 143 seconds. [ 1260.619178][ T31] Not tainted syzkaller #0 [ 1260.678734][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1260.725889][ T31] task:syz.5.21291 state:D stack:26792 pid:21910 tgid:21909 ppid:21656 task_flags:0x400140 flags:0x00004004 [ 1260.769816][ T31] Call Trace: [ 1260.773640][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22235'. [ 1260.791072][ T31] [ 1260.794192][ T31] __schedule+0x1798/0x4cc0 [ 1260.807905][ T31] ? __lock_acquire+0xab9/0xd20 [ 1260.818834][ T31] ? __lock_acquire+0xab9/0xd20 [ 1260.828336][ T31] ? __pfx___schedule+0x10/0x10 [ 1260.837947][ T31] ? schedule+0x91/0x360 [ 1260.845729][ T31] schedule+0x165/0x360 [ 1260.855665][ T31] schedule_preempt_disabled+0x13/0x30 [ 1260.871668][ T31] __mutex_lock+0x7e6/0x1350 [ 1260.881023][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1260.890392][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1260.904286][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1260.917122][ T31] ? net_generic+0x1e/0x240 [ 1260.927642][ T31] ? net_generic+0x1e/0x240 [ 1260.938119][ T31] ? net_generic+0x1e/0x240 [ 1260.949552][ T31] ? net_generic+0x1e/0x240 [ 1260.959895][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1260.967156][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 1260.973077][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1260.979404][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1260.984392][ T31] ? security_capable+0x7e/0x2e0 [ 1260.989558][ T31] genl_rcv_msg+0x60e/0x790 [ 1260.994426][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1260.999696][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1261.006060][ T31] netlink_rcv_skb+0x208/0x470 [ 1261.011434][ T31] ? __lock_acquire+0xab9/0xd20 [ 1261.016496][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1261.021909][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1261.027377][ T31] ? down_read+0x1ad/0x2e0 [ 1261.033907][ T31] genl_rcv+0x28/0x40 [ 1261.038072][ T31] netlink_unicast+0x82c/0x9e0 [ 1261.046470][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1261.057717][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1261.067620][ T31] ? skb_put+0x11b/0x210 [ 1261.077665][ T31] netlink_sendmsg+0x805/0xb30 [ 1261.087569][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1261.099854][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1261.105198][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1261.111104][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1261.116560][ T31] __sock_sendmsg+0x219/0x270 [ 1261.121670][ T31] ____sys_sendmsg+0x505/0x830 [ 1261.126601][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1261.132370][ T31] ? import_iovec+0x74/0xa0 [ 1261.137020][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1261.142049][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1261.147589][ T31] ? __fget_files+0x2a/0x420 [ 1261.152501][ T31] ? __fget_files+0x3a0/0x420 [ 1261.157335][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1261.162685][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1261.168358][ T31] ? rcu_is_watching+0x15/0xb0 [ 1261.173938][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1261.178879][ T31] do_syscall_64+0xfa/0x3b0 [ 1261.183617][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1261.189140][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.195775][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1261.200760][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.207134][ T31] RIP: 0033:0x7f393d38eba9 [ 1261.212049][ T31] RSP: 002b:00007f393e2b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1261.220686][ T31] RAX: ffffffffffffffda RBX: 00007f393d5d5fa0 RCX: 00007f393d38eba9 [ 1261.229035][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008 [ 1261.237430][ T31] RBP: 00007f393d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1261.245835][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.254658][ T31] R13: 00007f393d5d6038 R14: 00007f393d5d5fa0 R15: 00007ffe2231fcf8 [ 1261.263024][ T31] [ 1261.266291][ T31] [ 1261.266291][ T31] Showing all locks held in the system: [ 1261.302696][ T31] 1 lock held by khungtaskd/31: [ 1261.313376][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1261.326811][ T31] 5 locks held by kworker/u8:7/2992: [ 1261.332621][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1261.340894][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1261.344253][ T31] #1: ffffc9000c4b7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1261.362205][ T31] #2: ffffffff8f52d370 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1261.372346][ T31] #3: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1261.381665][ T31] #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1261.393086][ T31] 2 locks held by getty/5625: [ 1261.397954][ T31] #0: ffff88814cb520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1261.408140][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1261.419242][ T31] 3 locks held by kworker/u8:1/988: [ 1261.424714][ T31] 3 locks held by kworker/0:10/11327: [ 1261.430281][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1261.442550][ T31] #1: ffffc9000c4c7bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1261.462234][ T31] #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1261.472832][ T31] 2 locks held by syz.0.21223/21451: [ 1261.478290][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1261.487227][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1261.497943][ T31] 2 locks held by syz.5.21291/21910: [ 1261.503777][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1261.513181][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1261.524071][ T31] 2 locks held by syz.1.21491/22303: [ 1261.529556][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1261.549240][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 1261.571354][ T31] 3 locks held by syz.4.22227/25094: [ 1261.583619][ T31] [ 1261.588324][ T31] ============================================= [ 1261.588324][ T31] [ 1261.611433][ T31] NMI backtrace for cpu 0 [ 1261.611456][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1261.611476][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1261.611488][ T31] Call Trace: [ 1261.611494][ T31] [ 1261.611502][ T31] dump_stack_lvl+0x189/0x250 [ 1261.611535][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1261.611556][ T31] ? __pfx__printk+0x10/0x10 [ 1261.611602][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1261.611632][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1261.611663][ T31] ? __pfx__printk+0x10/0x10 [ 1261.611695][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1261.611729][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1261.611764][ T31] watchdog+0xf93/0xfe0 [ 1261.611797][ T31] ? watchdog+0x1de/0xfe0 [ 1261.611831][ T31] kthread+0x70e/0x8a0 [ 1261.611859][ T31] ? __pfx_watchdog+0x10/0x10 [ 1261.611885][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.611912][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1261.611933][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1261.611953][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.611979][ T31] ret_from_fork+0x436/0x7d0 [ 1261.612002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.612030][ T31] ? __switch_to_asm+0x39/0x70 [ 1261.612053][ T31] ? __switch_to_asm+0x33/0x70 [ 1261.612078][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.612103][ T31] ret_from_fork_asm+0x1a/0x30 [ 1261.612146][ T31] [ 1261.612179][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1261.759520][ C1] NMI backtrace for cpu 1 [ 1261.759542][ C1] CPU: 1 UID: 0 PID: 2992 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1261.759563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1261.759576][ C1] Workqueue: netns cleanup_net [ 1261.759603][ C1] RIP: 0010:__lock_acquire+0x0/0xd20 [ 1261.759632][ C1] Code: 66 37 00 00 5b e9 10 5b e0 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 30 48 89 fb 65 48 8b 3c 25 [ 1261.759649][ C1] RSP: 0018:ffffc9000c4b74e0 EFLAGS: 00000006 [ 1261.759663][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 1261.759675][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13a0e0 [ 1261.759687][ C1] RBP: ffffffff825d607c R08: 0000000000000000 R09: 0000000000000000 [ 1261.759699][ C1] R10: dffffc0000000000 R11: ffffed100365ff24 R12: 0000000000000002 [ 1261.759712][ C1] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000246 [ 1261.759724][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 1261.759739][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1261.759752][ C1] CR2: 0000200000a01030 CR3: 000000005a5b6000 CR4: 00000000003526f0 [ 1261.759769][ C1] Call Trace: [ 1261.759776][ C1] [ 1261.759783][ C1] lock_acquire+0x120/0x360 [ 1261.759810][ C1] ? kernfs_root+0x1c/0x230 [ 1261.759834][ C1] ? kernfs_root+0x1c/0x230 [ 1261.759854][ C1] kernfs_root+0x38/0x230 [ 1261.759871][ C1] ? kernfs_root+0x1c/0x230 [ 1261.759891][ C1] kernfs_remove_by_name_ns+0x2b/0x130 [ 1261.759916][ C1] sysfs_unmerge_group+0xd4/0x140 [ 1261.759937][ C1] dpm_sysfs_remove+0x85/0xd0 [ 1261.759962][ C1] device_del+0x251/0x8e0 [ 1261.759986][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1261.760004][ C1] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 1261.760026][ C1] ? __pfx_device_del+0x10/0x10 [ 1261.760047][ C1] ? netdev_unregister_kobject+0x344/0x450 [ 1261.760077][ C1] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 1261.760102][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1261.760141][ C1] ? net_generic+0x1e/0x240 [ 1261.760165][ C1] ? net_generic+0x1e/0x240 [ 1261.760190][ C1] ops_undo_list+0x3dc/0x990 [ 1261.760213][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 1261.760235][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1261.760259][ C1] cleanup_net+0x4c5/0x800 [ 1261.760280][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1261.760302][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1261.760319][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1261.760337][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1261.760355][ C1] process_scheduled_works+0xae1/0x17b0 [ 1261.760386][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1261.760411][ C1] worker_thread+0x8a0/0xda0 [ 1261.760442][ C1] kthread+0x70e/0x8a0 [ 1261.760465][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1261.760488][ C1] ? __pfx_kthread+0x10/0x10 [ 1261.760510][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1261.760528][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1261.760547][ C1] ? __pfx_kthread+0x10/0x10 [ 1261.760568][ C1] ret_from_fork+0x436/0x7d0 [ 1261.760588][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.760608][ C1] ? __switch_to_asm+0x39/0x70 [ 1261.760631][ C1] ? __switch_to_asm+0x33/0x70 [ 1261.760652][ C1] ? __pfx_kthread+0x10/0x10 [ 1261.760674][ C1] ret_from_fork_asm+0x1a/0x30 [ 1261.760704][ C1] [ 1261.851048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1261.851072][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1261.851095][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1261.851109][ T31] Call Trace: [ 1261.851118][ T31] [ 1261.851127][ T31] dump_stack_lvl+0x99/0x250 [ 1261.851156][ T31] ? __asan_memcpy+0x40/0x70 [ 1261.851180][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1261.851204][ T31] ? __pfx__printk+0x10/0x10 [ 1261.851251][ T31] vpanic+0x281/0x750 [ 1261.851277][ T31] ? __pfx_vpanic+0x10/0x10 [ 1261.851299][ T31] ? preempt_schedule+0xae/0xc0 [ 1261.851324][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1261.851352][ T31] panic+0xb9/0xc0 [ 1261.851374][ T31] ? __pfx_panic+0x10/0x10 [ 1261.851398][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1261.851423][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1261.851457][ T31] watchdog+0xfd2/0xfe0 [ 1261.851489][ T31] ? watchdog+0x1de/0xfe0 [ 1261.851523][ T31] kthread+0x70e/0x8a0 [ 1261.851552][ T31] ? __pfx_watchdog+0x10/0x10 [ 1261.851578][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.851605][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1261.851625][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1261.851646][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.851672][ T31] ret_from_fork+0x436/0x7d0 [ 1261.851697][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1261.851723][ T31] ? __switch_to_asm+0x39/0x70 [ 1261.851747][ T31] ? __switch_to_asm+0x33/0x70 [ 1261.851771][ T31] ? __pfx_kthread+0x10/0x10 [ 1261.851797][ T31] ret_from_fork_asm+0x1a/0x30 [ 1261.851838][ T31] [ 1262.249644][ T31] Kernel Offset: disabled [ 1262.253957][ T31] Rebooting in 86400 seconds..