last executing test programs: 1m46.578625055s ago: executing program 2 (id=2687): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m46.15517486s ago: executing program 2 (id=2690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0x0, 0x100000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x3000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="f5af24bd7009000000000e00000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r11}, 0x4) 1m45.541493442s ago: executing program 3 (id=2697): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x4f, 0x3a, 0xf6448becb87e03a6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2, [], "9f26a206417821e15efc5e939d07cf5132b591bd5fc2d053c1d443fe935769"}}}}}}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x5f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x11}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x30}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000480)="7e71b42602cfad282310883b04466e5cd7d38a0544e5fbbf5d78e3c38e3f1f2fa96cdd95bce1c432159b659130db53de0117295fe89ccdb228b306c5fc38bf89a82a032ef0", 0x45}, {&(0x7f0000000140)="0a9a1fc83227b650e44e5770e2363759efa6893e6b0a3f8e2c4b28b99a02e5cc52e29893d0d41c28f4ec6d05fa4498028bbd2313fcdc367f2239e081f3ab37732f12885314d30305b776572929fd29cf973b4c1396c12f442f4fe698f3", 0x5d}, {&(0x7f0000000280)="7d039def48bd3b35f094ce6ffc381fbf3503724516", 0x15}, {&(0x7f0000000300)="6feb36183c05e266f8ec6a2dbb844daf3cf42ca4158cbdad7172120e9a7fdda656b27861f28dc76af7c674121967e9be73e6356f2fe8f17a021ce12e20d37c74760044eae03c4cdb8fbe358d8881bc1ddd00afb647bcccea5428a6a695300f32adc137a3530c831a7b3f79ccce59a5dcc66f20d90cb7ac47788ff50cc4f179d54cd7d7cb64e3a181ade9424135248b7f18a73b0932b263171beef355af3e5df8d04ab7e316b32549e03efe241c04c6ebbc8cd1fd7d59f135efdc21d17afad9160d5b181008168021d34f125470032cbf7d2ad002a86af9805eb6ee3b266f0319d4c3cb499d4c925d4aa1e132598b", 0xee}, {&(0x7f0000000400)="f777d170ed19aebf830ab7460f477e2904fe9f91a1a7385d0b9c29c1e7b54a2126f3e13f3e47095a08ce3fb64cffc518bc298f08d57fff3b1739e6f38908e2b5d3b456bdef3107452e3a2b21f3e96ea928c10843af71881700c73966b0f3c812aab3a2b9ee2c1d60b35f3c391314a4f20a1b4ba303", 0x75}, {&(0x7f0000000540)="975aa841bcde8294f826281e8a30c3985b108d6c97ff5eb6093796b2e5864e57f5498ce310bfa75d996ce4348ebcd57a1c9879d591c3ac66df1fb224eaf6e951a8b1b037210007068cc298ea80c0b35dd7d870cd46359c8848467e1cfccaa55cf1abcff99d0b615112a1876ddfe90b2618340e13cd7c0f820b6aef3bd9c8031b7d7f2063dcbfe7672b33ae80d5a68203d3e04c3d991978e89db012d456b96b905716db8c63373b6b9709f9e42aa332f6811f9905f766d88401a7e78d76b1761ce35be313b952b63b6fe5528c31a4163a872bcfa722cd37319b6ca7a23305af0be3", 0xe1}, {&(0x7f0000000740)="5d29d9027797be41636fa68b8a45dd46ed9e62b449c3f0a89c55240acae11ac187c250991faf30d860b03221f3a5f5271f6234340c5918b6e5f4278a0d6d2af456557345eb79677ea45f896a3824695f608435a8a2844d20816a4c93b0aa20fa92aea0ad1696666ff0d54b11f84e47e04654aec83d2f15a56e9b3bf3d7a3a7ca7323fc0ba8215236c944423452fe6fc07273573828de056a0f6097f4695969329f4d94b7bd159da29ef0e4f10fd22f5fc0d490321f0f4a61a61e86c002f8fd500384d605ba9a2e6bc58ca948b22990d56579459784a8110f644c778108d58f9c31b6e40354034f52", 0xe8}, {&(0x7f0000000480)}], 0x8, &(0x7f0000000840)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts={{0x30, 0x29, 0x37, {0x62, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x48}}], 0x2, 0x88c0) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, &(0x7f00000000c0)) 1m45.391763586s ago: executing program 3 (id=2699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX, @ANYRES32=r5], 0x5c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r6) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r7, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x40}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7008fcdbdf2107000000140002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m45.166741398s ago: executing program 2 (id=2702): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f0000000180)="7685", 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x84, 0x15, 0x10, 0x70bd29, 0x25dfdbff, {0xa, 0x1, 0xee, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x9, 0x6b, 0x4}}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x800) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000340)={0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000014000000240007800c0003"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)="d6", 0x1}], 0x17}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000cc0)="02", 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0x10}}], 0x2, 0x4004804) 1m44.929409835s ago: executing program 2 (id=2707): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000358b000000000000"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r9 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r9, &(0x7f0000000400)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaa01aadf000040000008004c0000440000000000069078ac1e0001ac1414118903a2443321b7721fbce67f78fa82b410050300000000000000000000000086060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x6}], 0x1c) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 1m44.902766012s ago: executing program 3 (id=2708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000680)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000040)=0x1000442, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x3c, 0xb2, &(0x7f0000000180)="4362fcf141059e2a2f532f5d78c3ca4d8d964c78115a5dafa485c66d6654069fca6ea9b3b107ed43388d6f8735ad66ab786b334e15ba84554bda9ca7", &(0x7f00000003c0)=""/178, 0x2, 0x0, 0xd3, 0x49, &(0x7f0000000580)="abe7c92140176b6d43f327adb0c8d17501c9b5eaf455f7bbb856494f4dffb9e4a7ad9038f1cc94e96bd5ed596ebb1218d3a4767f9595a4a0b4d81eafff305a770467c9e35c7c4802a414576df715ae2e314e843b8d897f49668dc3e392613c230f4e5e65d3202a4c071f5217e6f49624e1cf3ac5ed5624e4b4442676da11ee19bbc3163279c1dc6f506c6ede1ad7f725252229251983b825dcb3c052cce03b32e480858571a2cab5cd1c9e539c52645b1362c18d0b8413615956bcd759bc2dd4eeb5a64f3675d6746ffbb4b92e507324764d59", &(0x7f00000001c0)="4eb3b8e690566cb6f04a72da061c75762a7e1a840c851929197915155cc34076b92a9f6dd9db383926c38f14f8930b8988f9d089894a98c0ba3246180a7d77787a9b508d1fca30efaa", 0x7, 0x0, 0xb}, 0x50) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) 1m44.771809297s ago: executing program 3 (id=2710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x4c, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x90004}, @nested={0x30, 0x1, 0x0, 0x1, [@typed={0x2b, 0x0, 0x0, 0x0, @str='\x94H~\x05>\xca\x1a\xbe\x99W\xc9\x16C\xaf&\xeey\x1f\xd5oaO\xbe\xe8\xa4\xa6\x94~c\x99\xbd\xc4\xc7i\xea\x9a\xc8\xb9B'}]}]}, 0x4c}}, 0x8000) 1m44.620761113s ago: executing program 3 (id=2713): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x34, 0x0, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) (async) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1m43.916845675s ago: executing program 2 (id=2719): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001a0013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10, 0x800) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) 1m43.799932525s ago: executing program 2 (id=2722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedb360bbb16000008000100", @ANYRES8=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000002800010002000000"], 0x20}}, 0x0) unshare(0x68040200) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = epoll_create1(0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1f, 0x4, 0x1) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) (async) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x5, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {}, 0xfd, 0xfd}, {0x0, 0x0, {0x0, 0x1, 0x1}, {0x0, 0x1, 0x2}, 0xfd, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x0, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x2}, 0x2, 0xff}, {0x1, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async) close(0x4) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, r4, 0xa2b85000) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) accept4(r9, 0x0, 0x0, 0x0) 1m43.707574312s ago: executing program 3 (id=2724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000000)="886e8adbec6c51654dc31d81339a83babda547dd24d6a51335bc8a0d55e704c4eae7e9bedf2253b8359612c71c384486ef75eabb31f7fa64d0fdfb", &(0x7f0000000340)=""/215}, 0x20) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x40044) (async) unshare(0x24020400) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa00690a9b8a0b505, 0x0) sendfile(r6, r6, 0x0, 0x4) (async) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e1f, 0x4, @mcast2, 0xb90}, 0x1c) (async) bind$inet6(r7, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0x9, 0x70bd2c, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040094}, 0x0) 1m43.496570354s ago: executing program 1 (id=2727): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x13, 0xffffffffffffffff, 0xe83fd000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) shutdown(r4, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xcf, &(0x7f0000000a40)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r10 = socket$kcm(0x29, 0x3, 0x0) r11 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r11, r9}) sendmmsg$inet(r10, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='J', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="7d004581084c1e0cb5d248961b5d87381043614bda172ea8f3ec5414504286f6dc66d478c94e3608c6d5fcd99528bbb2d4b4cfe4094c4d0c6b4229533bd348e11f64f3e8b3e8a787f94b2a4eeaa5c3b6dc8e715c43af70eec8cee9d946d29efe74d9602fa8ed54710e620425ed52ecd64a9cddac6c48db7b7dc0e1c37a1ef87cc2f0444aa14314711d80f354d7fd1f8a2ca0545ac5c74a80bde3ce46e90c715afada3549bfa47b02d8040ba0c1fae24b7ad3e00528271d3266c8204f947d68fc32890797468233ad0158566873a6ffca6b52347d54551b09", 0xd8}, {&(0x7f0000000580)="6ffe0d1d070abf8fe5e35bb82c97b46bd248a252b4d7896478c8254b797eea544d8618", 0x23}], 0x2, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}}}}], 0x38}}, {{&(0x7f0000000740)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000780)="69412a317ef686e589de80cbcebe67f62013013da7111d82723afabfdeb85bee5f09bb83997afb3609360a1942fa1fdf04e43a3a65439a11504adce03db72486c2a301782a4baa01d8809678cb486fc9396d4b4ea866471dc56f70596dfd31d00c70e07ba7b362dc2c75ee33c4fd54f8bf4724a1d8226f02cf83abe83ec053bf40cc95db2d34617948102ee80f55eab9622a0d793ed301f592e4cf4c61b4140990ceff29beea7c59bc89ca0180f6229fd5fbf94f69acd2c5a538bc62a8f7c55eb90f6f2eae47046013f45f576b61119a9570696b173f5f592902687391329682b2e715e082773af8794412e789", 0xed}], 0x1, &(0x7f0000000940)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0x3, 0x2b}, @ssrr={0x89, 0x23, 0x2f, [@multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xb3, [@local, @rand_addr=0x64010101, @local]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x3b, 0x1, 0x1, [{@rand_addr=0x64010102, 0x80000000}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}], 0xc0}}], 0x4, 0x4000) 1m43.419614637s ago: executing program 1 (id=2730): unshare(0xe040400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) unshare(0x8000a00) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x6000, 0x800, 0x201, 0x1}, 0x20) 1m43.310046225s ago: executing program 1 (id=2732): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) socket(0x10, 0x803, 0x0) 1m43.269722071s ago: executing program 1 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e80), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xd5, &(0x7f0000000280)=""/213, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x10, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x3, 0x2, 0x4, 0x5}, {0x2, 0x2, 0x6}, {0x1, 0x4, 0x3, 0x8}, {0x4, 0x4, 0x1, 0x5}, {0x5, 0x4, 0x10, 0x4}, {0x3, 0x1, 0xc, 0x5}, {0x4, 0x2, 0x5, 0x1}, {0x0, 0x1, 0x10}, {0x5, 0x4, 0x2, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00', r2, 0x0, 0x9a}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711015000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 1m43.235047274s ago: executing program 4 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x924, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000500)="0fe2db003d064cf6b7d09d3a8bb28c328abb91", &(0x7f0000000540)=""/95}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000000280)=0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f5900643200fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x9a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getnetconf={0x14, 0x52, 0xa3d4ba35220a95bf, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d0000000000950000000000000010ac57a21c9b5bd0cbdab038db1af03871a2d187d5844d6b004dd1c5e900503c949f92e6375a38e0ff96c7f929a6026998ca402234fbc0be1ca8fa748fc7d3c61cf45f0bd3f534b5411cd71a8bfe0c796488ada0ce6049f42e58ff40ab080000003185e1fc3606180a53966ba4b6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(r7, &(0x7f0000000380)='ns/net\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe55, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r3, 0x11c, 0x6ae6, 0xfffffff8}, 0xfed8) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x10000, 0x5, 0x6, 0x0, 0x7}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0c00fbe8ee329758f7b50fe17efbb00074f7000004004440040000000900000000000000", @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r11}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000dfffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 1m43.112767599s ago: executing program 1 (id=2735): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x4f, 0x3a, 0xf6448becb87e03a6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2, [], "9f26a206417821e15efc5e939d07cf5132b591bd5fc2d053c1d443fe935769"}}}}}}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, &(0x7f00000000c0)) 1m43.048127751s ago: executing program 1 (id=2736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async, rerun: 64) r3 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvmmsg$unix(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRESDEC=r1], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) (async) sendmsg$inet(r6, 0x0, 0x41) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) close(r6) (async, rerun: 32) r9 = socket(0x200000000000011, 0x2, 0xd) (async, rerun: 32) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, r11, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async, rerun: 64) bind$packet(r9, &(0x7f0000000180)={0x11, 0xc, r11, 0x1, 0xf9, 0x6, @local}, 0x14) 1m42.971033602s ago: executing program 4 (id=2737): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x5, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0x7fffffff, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0xea13dac1233fa6b2) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @local}, 0x14) 1m26.427839251s ago: executing program 32 (id=2722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedb360bbb16000008000100", @ANYRES8=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000002800010002000000"], 0x20}}, 0x0) unshare(0x68040200) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = epoll_create1(0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1f, 0x4, 0x1) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) (async) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x5, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {}, 0xfd, 0xfd}, {0x0, 0x0, {0x0, 0x1, 0x1}, {0x0, 0x1, 0x2}, 0xfd, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x0, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x2}, 0x2, 0xff}, {0x1, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async) close(0x4) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x10, r4, 0xa2b85000) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) (async) accept4(r9, 0x0, 0x0, 0x0) 1m24.544946346s ago: executing program 33 (id=2724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000000)="886e8adbec6c51654dc31d81339a83babda547dd24d6a51335bc8a0d55e704c4eae7e9bedf2253b8359612c71c384486ef75eabb31f7fa64d0fdfb", &(0x7f0000000340)=""/215}, 0x20) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x40044) (async) unshare(0x24020400) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa00690a9b8a0b505, 0x0) sendfile(r6, r6, 0x0, 0x4) (async) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e1f, 0x4, @mcast2, 0xb90}, 0x1c) (async) bind$inet6(r7, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0x9, 0x70bd2c, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040094}, 0x0) 1m24.213947444s ago: executing program 4 (id=2741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000009f0e376000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000f3b702000009000000b7030000001e8b6b225a48d122b50f4fb33c5ac9d10200000085000083000000bf09000000000000550901000000001f8cbf533026a04d000091000001000000b702000043e7b552"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001c00"/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x71, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf110011aaaa432e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) 1m22.614773892s ago: executing program 34 (id=2736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async, rerun: 64) r3 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvmmsg$unix(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRESDEC=r1], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) (async) sendmsg$inet(r6, 0x0, 0x41) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) close(r6) (async, rerun: 32) r9 = socket(0x200000000000011, 0x2, 0xd) (async, rerun: 32) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, r11, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async, rerun: 64) bind$packet(r9, &(0x7f0000000180)={0x11, 0xc, r11, 0x1, 0xf9, 0x6, @local}, 0x14) 1m12.429015125s ago: executing program 4 (id=2745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x40000) sendto$llc(r1, &(0x7f0000000100)="8ee61cb5b585e75ad86114eed6d3476f60070114fcefae0e74dbdd3089ea8dd829bea6ffaca7352e8d14a9b53380546ce5ced08ce1d5a56ecba85a20ac6f76c30fbaddeb303f1cb0cf7994da7b8a0102d0d4974e51f4e8abe1142c91823236b5", 0x60, 0x40880, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) 1m3.15864321s ago: executing program 4 (id=2747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000206010300000000000000000a00000a050001000700000005000400020000606861734b3a69702c6d61726b000000000500050001000000090500"/77], 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000001c0)=@fragment={0xc, 0x0, 0x9, 0x1, 0x0, 0x3, 0x65}, 0x8) getsockopt$inet6_opts(r4, 0x29, 0x37, 0xfffffffffffffffe, &(0x7f0000000840)) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x4080800) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x6000}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x2, {0x0, 0x7ff}}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.508157396s ago: executing program 0 (id=2748): r0 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) 54.944202463s ago: executing program 4 (id=2749): unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @generic={0x6, 0xc, 0x1, 0x200, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x0) unshare(0x600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x864}], 0x1}}], 0x1, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x19, &(0x7f0000001fc0)=""/4096, &(0x7f0000000000)=0x1000) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc", 0x29}], 0x1}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) 53.028221995s ago: executing program 0 (id=2750): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)={0x5c, r2, 0x405, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x2}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)={0x5c, r2, 0x405, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x2}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}}, 0x0) (async) 41.972499929s ago: executing program 0 (id=2751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000001040)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000040), 0x0, 0xc8040) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090094020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x10000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 38.391709132s ago: executing program 35 (id=2749): unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @generic={0x6, 0xc, 0x1, 0x200, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x0) unshare(0x600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3", 0x864}], 0x1}}], 0x1, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x19, &(0x7f0000001fc0)=""/4096, &(0x7f0000000000)=0x1000) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc", 0x29}], 0x1}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) 32.922123634s ago: executing program 0 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000000001010400000000000000000200000400018000"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x20000005}, 0x4048010) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x30}}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) 26.660636386s ago: executing program 0 (id=2754): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="ed83906a081af7f85697a84891dc22c91b659b5e058fa4fc0e72641a46aaecd52a886cb67e6f178149605907c52ff309872bf85ac1231b7ca07b676c8c0b103a134b2b2e6ba8eb75e4b30209899ff7e97d0b0ef015c2de0bc39ae8302885a69e81b4490bcc163ec5126c4e4177b6d864654ad07b47cbcb21477b910afafe3646b570579a85f82b2617981bedc868a5d60a8c87193e65821079b286e47768c4e3ba16d74fc4160f", @ANYRES16=r0, @ANYRES64=r1, @ANYRES16], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) (async) write(r1, &(0x7f00000002c0)="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", 0xfc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x4, 0x0, 0xff, 0xf, 0xff, 0x2}, 0x20) 17.552141503s ago: executing program 0 (id=2755): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x2733, &(0x7f0000000140)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) listen(r1, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x40}}}}}}}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x3}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 0s ago: executing program 36 (id=2755): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x2733, &(0x7f0000000140)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) listen(r1, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x40}}}}}}}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x3}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) kernel console output (not intermixed with test programs): port 6081 - 0 [ 165.061264][ T9515] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.145879][ T9515] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.254331][ T9515] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.309860][ T9538] lo speed is unknown, defaulting to 1000 [ 165.484621][ T9546] bond1: entered promiscuous mode [ 165.516334][ T9546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.676518][ T9557] bridge_slave_1: left allmulticast mode [ 165.684581][ T9557] bridge_slave_1: left promiscuous mode [ 165.701894][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.736573][ T9557] bridge_slave_0: left allmulticast mode [ 165.742966][ T9557] bridge_slave_0: left promiscuous mode [ 165.753709][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.825257][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.849332][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.865162][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.885502][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.975701][ T9567] lo speed is unknown, defaulting to 1000 [ 166.451386][ T9592] syzkaller1: entered promiscuous mode [ 166.458908][ T9592] syzkaller1: entered allmulticast mode [ 166.646296][ T9602] __nla_validate_parse: 6 callbacks suppressed [ 166.646308][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 166.664265][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 166.731990][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.168527][ T9636] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.193385][ T9634] lo speed is unknown, defaulting to 1000 [ 167.804494][ T9663] syzkaller0: entered promiscuous mode [ 167.815672][ T9663] syzkaller0: entered allmulticast mode [ 167.889169][ T9684] validate_nla: 4 callbacks suppressed [ 167.889187][ T9684] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 167.904087][ T9684] netlink: 172 bytes leftover after parsing attributes in process `syz.3.950'. [ 167.960078][ T9688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.951'. [ 167.975248][ T9688] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.491914][ T9693] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 169.050407][ T9679] tipc: Started in network mode [ 169.055292][ T9679] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 169.064376][ T9679] tipc: Enabling of bearer rejected, failed to enable media [ 169.150705][ T9694] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 169.193654][ T9694] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 169.446199][ T9717] netlink: 96 bytes leftover after parsing attributes in process `syz.3.960'. [ 169.526644][ T9712] netlink: 'syz.2.959': attribute type 4 has an invalid length. [ 169.674442][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 169.717665][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.961'. [ 169.785253][ T9726] geneve3: entered promiscuous mode [ 169.799709][ T9726] geneve3: entered allmulticast mode [ 169.893664][ T9736] bond4: entered promiscuous mode [ 169.899293][ T9736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.912742][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 169.936301][ T9729] lo speed is unknown, defaulting to 1000 [ 170.385111][ T9753] lo speed is unknown, defaulting to 1000 [ 170.436127][ T9755] lo speed is unknown, defaulting to 1000 [ 170.550045][ T9764] lo speed is unknown, defaulting to 1000 [ 171.301930][ T9789] lo speed is unknown, defaulting to 1000 [ 171.354436][ T9788] lo speed is unknown, defaulting to 1000 [ 171.386425][ T9797] batadv2: entered promiscuous mode [ 171.392253][ T9797] batadv2: entered allmulticast mode [ 171.428333][ T9798] batadv2: entered promiscuous mode [ 171.433832][ T9798] batadv2: entered allmulticast mode [ 171.690870][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.157410][ T9821] lo speed is unknown, defaulting to 1000 [ 172.181497][ T9823] netlink: 52 bytes leftover after parsing attributes in process `syz.0.985'. [ 172.222856][ T9823] netlink: 52 bytes leftover after parsing attributes in process `syz.0.985'. [ 172.267668][ T9823] netlink: 52 bytes leftover after parsing attributes in process `syz.0.985'. [ 172.496926][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 172.658439][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 172.678782][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 172.964870][ T9866] tipc: Enabled bearer , priority 0 [ 172.972580][ T9866] syzkaller0: entered promiscuous mode [ 172.978223][ T9866] syzkaller0: entered allmulticast mode [ 172.998987][ T9866] tipc: Resetting bearer [ 173.030708][ T9863] tipc: Resetting bearer [ 173.073284][ T9863] tipc: Disabling bearer [ 173.440892][ T9890] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 173.491235][ T9893] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 173.508125][ T9898] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 173.521430][ T9903] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1003'. [ 173.562054][ T9896] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1003'. [ 173.586588][ T9899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.615977][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 173.632627][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 173.650387][ T9908] netlink: 'syz.3.1006': attribute type 4 has an invalid length. [ 173.673786][ T9899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.738751][ T9899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.819143][ T9899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.897236][ T9931] netlink: del zone limit has 8 unknown bytes [ 173.954565][ T9923] lo speed is unknown, defaulting to 1000 [ 174.036555][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.053389][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.102927][ T9937] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 174.158553][ T6514] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.184897][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.437428][ T9947] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 174.512851][ T9953] lo speed is unknown, defaulting to 1000 [ 174.696808][ T9965] netlink: 'syz.2.1023': attribute type 3 has an invalid length. [ 176.067022][T10013] netlink: ct family unspecified [ 176.076285][T10013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.419703][T10035] lo speed is unknown, defaulting to 1000 [ 176.573867][T10044] syzkaller1: entered promiscuous mode [ 176.580390][T10044] syzkaller1: entered allmulticast mode [ 177.330734][T10067] __nla_validate_parse: 9 callbacks suppressed [ 177.330753][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 177.346137][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1054'. [ 177.355185][T10067] netlink: 'syz.3.1054': attribute type 7 has an invalid length. [ 177.400517][T10075] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1056'. [ 177.524256][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 177.673186][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 177.694023][T10086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1058'. [ 177.714046][T10083] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 177.714322][ T6516] bond0: (slave batadv_slave_0): interface is now down [ 177.739170][ T6516] bond0: now running without any active interface! [ 177.889500][T10093] netlink: 'syz.4.1057': attribute type 3 has an invalid length. [ 177.905587][T10093] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 177.928756][T10093] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1057'. [ 177.962378][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1057'. [ 178.170144][T10111] netlink: 'syz.2.1064': attribute type 4 has an invalid length. [ 178.182198][T10114] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 178.372139][T10122] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 178.425433][T10114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.495736][T10119] bond3: (slave ip6gretap1): making interface the new active one [ 178.519691][T10119] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 178.689876][T10123] veth3: entered promiscuous mode [ 178.706257][T10130] can: request_module (can-proto-0) failed. [ 178.714167][T10123] bond3: (slave veth3): Enslaving as an active interface with a down link [ 178.726913][T10136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1070'. [ 178.741330][T10124] erspan0: entered allmulticast mode [ 178.769112][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 179.146567][T10136] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 179.163934][T10136] bond3 (unregistering): Released all slaves [ 179.214386][T10163] netlink: 'syz.2.1075': attribute type 2 has an invalid length. [ 179.528056][T10176] lo speed is unknown, defaulting to 1000 [ 179.754291][T10188] lo speed is unknown, defaulting to 1000 [ 180.300704][T10215] netlink: 'syz.1.1085': attribute type 13 has an invalid length. [ 180.481404][T10223] sch_fq: defrate 128 ignored. [ 180.503898][T10223] netlink: 'syz.1.1089': attribute type 3 has an invalid length. [ 180.592997][T10228] netlink: 'syz.0.1091': attribute type 14 has an invalid length. [ 180.622590][T10229] unsupported nla_type 52263 [ 180.805111][T10228] bond4: option xmit_hash_policy: invalid value (11) [ 180.824459][T10228] bond4 (unregistering): Released all slaves [ 181.993477][T10304] syz.1.1109: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.013395][T10304] CPU: 0 UID: 0 PID: 10304 Comm: syz.1.1109 Not tainted syzkaller #0 PREEMPT(full) [ 182.013426][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.013444][T10304] Call Trace: [ 182.013451][T10304] [ 182.013460][T10304] dump_stack_lvl+0x189/0x250 [ 182.013491][T10304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.013515][T10304] ? __pfx__printk+0x10/0x10 [ 182.013544][T10304] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.013569][T10304] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.013596][T10304] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 182.013624][T10304] warn_alloc+0x214/0x310 [ 182.013656][T10304] ? __pfx_warn_alloc+0x10/0x10 [ 182.013693][T10304] ? __get_vm_area_node+0x28f/0x300 [ 182.013718][T10304] ? nf_tables_newset+0x132b/0x2530 [ 182.013748][T10304] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 182.013801][T10304] ? alloc_pages_mpol+0x3cd/0x4a0 [ 182.013827][T10304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.013857][T10304] ? rcu_is_watching+0x15/0xb0 [ 182.013881][T10304] ? nf_tables_newset+0x132b/0x2530 [ 182.013911][T10304] ? nf_tables_newset+0x132b/0x2530 [ 182.013932][T10304] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 182.013956][T10304] ? nf_tables_newset+0x132b/0x2530 [ 182.013980][T10304] ? nft_table_lookup+0x211/0x230 [ 182.014003][T10304] ? nft_set_lookup+0x128/0x150 [ 182.014029][T10304] ? nft_hash_privsize+0xbf/0xf0 [ 182.014050][T10304] nf_tables_newset+0x132b/0x2530 [ 182.014087][T10304] ? __pfx_nf_tables_newset+0x10/0x10 [ 182.014133][T10304] ? __nla_parse+0x40/0x60 [ 182.014155][T10304] nfnetlink_rcv+0x11d9/0x2590 [ 182.014216][T10304] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 182.014292][T10304] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.014330][T10304] netlink_unicast+0x82c/0x9e0 [ 182.014367][T10304] ? __pfx_netlink_unicast+0x10/0x10 [ 182.014396][T10304] ? netlink_sendmsg+0x642/0xb30 [ 182.014411][T10304] ? skb_put+0x11b/0x210 [ 182.014434][T10304] netlink_sendmsg+0x805/0xb30 [ 182.014461][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.014484][T10304] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.014512][T10304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.014540][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.014561][T10304] __sock_sendmsg+0x21c/0x270 [ 182.014592][T10304] ____sys_sendmsg+0x505/0x830 [ 182.014619][T10304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.014651][T10304] ? import_iovec+0x74/0xa0 [ 182.014675][T10304] ___sys_sendmsg+0x21f/0x2a0 [ 182.014698][T10304] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.014758][T10304] ? __fget_files+0x2a/0x420 [ 182.014783][T10304] ? __fget_files+0x3a0/0x420 [ 182.014820][T10304] __x64_sys_sendmsg+0x19b/0x260 [ 182.014845][T10304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.014879][T10304] ? rcu_is_watching+0x15/0xb0 [ 182.014914][T10304] ? do_syscall_64+0xbe/0x3b0 [ 182.014940][T10304] do_syscall_64+0xfa/0x3b0 [ 182.014958][T10304] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.014986][T10304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.015004][T10304] ? clear_bhb_loop+0x60/0xb0 [ 182.015027][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.015046][T10304] RIP: 0033:0x7f418c58eec9 [ 182.015063][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.015080][T10304] RSP: 002b:00007f418d34b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.015099][T10304] RAX: ffffffffffffffda RBX: 00007f418c7e6090 RCX: 00007f418c58eec9 [ 182.015113][T10304] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 182.015126][T10304] RBP: 00007f418c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 182.015137][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.015148][T10304] R13: 00007f418c7e6128 R14: 00007f418c7e6090 R15: 00007ffdc3ee4e58 [ 182.015180][T10304] [ 182.027532][T10304] Mem-Info: [ 182.399560][T10304] active_anon:3906 inactive_anon:0 isolated_anon:0 [ 182.399560][T10304] active_file:3213 inactive_file:39920 isolated_file:0 [ 182.399560][T10304] unevictable:768 dirty:92 writeback:0 [ 182.399560][T10304] slab_reclaimable:11628 slab_unreclaimable:140545 [ 182.399560][T10304] mapped:29048 shmem:1355 pagetables:1027 [ 182.399560][T10304] sec_pagetables:0 bounce:0 [ 182.399560][T10304] kernel_misc_reclaimable:0 [ 182.399560][T10304] free:1279576 free_pcp:17802 free_cma:0 [ 182.445630][T10304] Node 0 active_anon:15724kB inactive_anon:0kB active_file:12852kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116192kB dirty:368kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12732kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 182.478610][T10304] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 182.510158][T10304] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.539366][T10304] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 182.545178][T10304] Node 0 DMA32 free:1211224kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15488kB inactive_anon:0kB active_file:12852kB inactive_file:159152kB unevictable:1536kB writepending:368kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:53936kB local_pcp:32524kB free_cma:0kB [ 182.578990][T10304] lowmem_reserve[]: 0 0 0 0 0 [ 182.584116][T10304] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.618409][T10328] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 182.662589][T10304] lowmem_reserve[]: 0 0 0 0 0 [ 182.668167][T10304] Node 1 Normal free:3891848kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17920kB local_pcp:11456kB free_cma:0kB [ 182.700812][T10304] lowmem_reserve[]: 0 0 0 0 0 [ 182.705557][T10304] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.735191][T10304] Node 0 DMA32: 606*4kB (ME) 84*8kB (UME) 218*16kB (ME) 23*32kB (ME) 90*64kB (UM) 46*128kB (UME) 29*256kB (UME) 4*512kB (UME) 3*1024kB (ME) 6*2048kB (M) 285*4096kB (M) = 1211160kB [ 182.785653][T10304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 182.826850][T10304] Node 1 Normal: 196*4kB (UE) 61*8kB (UME) 45*16kB (UME) 78*32kB (UME) 28*64kB (UME) 4*128kB (UM) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3891848kB [ 182.898632][T10304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.923885][T10304] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.957782][T10304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.010569][T10304] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.025852][T10304] 44719 total pagecache pages [ 183.032219][T10304] 0 pages in swap cache [ 183.045907][T10304] Free swap = 124996kB [ 183.050487][T10304] Total swap = 124996kB [ 183.054991][T10304] 2097051 pages RAM [ 183.059367][T10304] 0 pages HighMem/MovableOnly [ 183.064046][T10304] 423781 pages reserved [ 183.070516][T10304] 0 pages cma reserved [ 183.162067][T10357] __nla_validate_parse: 11 callbacks suppressed [ 183.162086][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1124'. [ 183.210429][T10357] netlink: 'syz.2.1124': attribute type 7 has an invalid length. [ 183.249520][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 183.270864][T10357] netlink: 'syz.2.1124': attribute type 8 has an invalid length. [ 183.291130][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 183.344777][T10357] ip6gretap0: entered promiscuous mode [ 183.358344][T10357] syz_tun: entered promiscuous mode [ 183.377898][T10357] ip6gretap0: left promiscuous mode [ 183.399093][T10357] syz_tun: left promiscuous mode [ 183.586580][T10372] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 183.735310][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 183.898457][T10384] raw_sendmsg: syz.3.1132 forgot to set AF_INET. Fix it! [ 184.057821][T10379] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 184.072019][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 184.399832][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 184.453251][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 184.712476][T10404] macvlan4: entered promiscuous mode [ 184.725942][T10404] macvlan4: entered allmulticast mode [ 184.732475][T10404] bond5: (slave macvlan4): Opening slave failed [ 184.805967][T10409] lo speed is unknown, defaulting to 1000 [ 184.909366][T10414] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 185.068460][T10414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.128632][T10424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1143'. [ 185.284308][T10430] tipc: Enabled bearer , priority 0 [ 185.325556][T10430] syzkaller0: entered promiscuous mode [ 185.331333][T10430] syzkaller0: entered allmulticast mode [ 185.371378][T10435] bond1: option downdelay: invalid value (18446744073709551615) [ 185.395933][T10435] bond1: option downdelay: allowed values 0 - 2147483647 [ 185.916165][T10435] bond1 (unregistering): Released all slaves [ 186.098905][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 186.149286][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 186.296998][ T7696] tipc: Node number set to 3648187510 [ 187.963779][T10456] syzkaller0: entered promiscuous mode [ 187.970090][T10456] syzkaller0: entered allmulticast mode [ 188.017560][T10430] tipc: Resetting bearer [ 188.043008][T10430] tipc: Disabling bearer [ 188.056177][T10421] lo speed is unknown, defaulting to 1000 [ 188.094775][ T6516] syzkaller0: tun_net_xmit 70 [ 188.208259][T10471] lo speed is unknown, defaulting to 1000 [ 188.238089][T10480] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1150'. [ 188.292688][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 188.341875][T10476] lo speed is unknown, defaulting to 1000 [ 188.550627][T10492] netlink: 'syz.0.1153': attribute type 23 has an invalid length. [ 188.853581][T10503] netlink: 'syz.2.1157': attribute type 5 has an invalid length. [ 188.886268][T10501] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 188.902755][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 188.951952][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 188.964345][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 189.093222][T10508] netlink: 'syz.2.1159': attribute type 7 has an invalid length. [ 189.110321][T10508] netlink: 'syz.2.1159': attribute type 8 has an invalid length. [ 189.559915][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803289c400: rx timeout, send abort [ 189.932444][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 189.942885][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 190.069010][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803289c400: abort rx timeout. Force session deactivation [ 190.998943][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 191.044930][T10597] lo speed is unknown, defaulting to 1000 [ 191.194465][T10610] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 191.239610][T10612] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1185'. [ 191.776698][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 191.787706][T10624] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 191.846505][T10624] team1: entered promiscuous mode [ 191.851818][T10624] team1: entered allmulticast mode [ 191.876658][T10616] sit0: Caught tx_queue_len zero misconfig [ 192.453301][T10656] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 192.472636][T10654] lo speed is unknown, defaulting to 1000 [ 193.366053][T10682] netlink: 'syz.1.1204': attribute type 13 has an invalid length. [ 193.374294][T10682] netlink: 'syz.1.1204': attribute type 5 has an invalid length. [ 193.605564][T10686] lo speed is unknown, defaulting to 1000 [ 194.044385][T10701] lo speed is unknown, defaulting to 1000 [ 194.221752][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.329255][T10714] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 194.356340][T10714] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 194.367827][T10719] lo speed is unknown, defaulting to 1000 [ 194.374438][T10722] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 194.383573][T10719] lo speed is unknown, defaulting to 1000 [ 194.390768][T10722] __nla_validate_parse: 4 callbacks suppressed [ 194.390784][T10722] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1211'. [ 194.413324][T10719] lo speed is unknown, defaulting to 1000 [ 194.545448][T10719] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 194.623426][T10719] lo speed is unknown, defaulting to 1000 [ 194.634872][T10719] lo speed is unknown, defaulting to 1000 [ 194.643584][T10719] lo speed is unknown, defaulting to 1000 [ 194.653538][T10719] lo speed is unknown, defaulting to 1000 [ 194.687692][T10719] lo speed is unknown, defaulting to 1000 [ 195.070801][T10762] lo speed is unknown, defaulting to 1000 [ 195.121649][T10756] geneve4: entered promiscuous mode [ 195.128719][T10756] geneve4: entered allmulticast mode [ 195.180789][T10765] lo speed is unknown, defaulting to 1000 [ 195.360041][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1230'. [ 195.371972][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 195.456570][T10784] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.1231'. [ 195.849168][T10806] netlink: 'syz.0.1239': attribute type 11 has an invalid length. [ 195.859477][T10804] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1238'. [ 195.877725][T10804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.902823][T10802] tipc: Enabled bearer , priority 0 [ 195.929546][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1237'. [ 195.972582][T10802] tipc: Resetting bearer [ 196.606871][T10799] tipc: Disabling bearer [ 196.766096][T10862] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1251'. [ 196.804762][T10862] bridge1: entered promiscuous mode [ 196.810316][T10862] bridge1: entered allmulticast mode [ 196.818753][T10862] team0: Port device bridge1 added [ 196.831099][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 196.849160][T10868] openvswitch: netlink: Key 2 has unexpected len 72 expected 4 [ 196.859934][T10867] delete_channel: no stack [ 196.927883][T10862] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 196.961640][T10862] bond6 (unregistering): Released all slaves [ 197.040557][T10883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.067401][ T7708] lo speed is unknown, defaulting to 1000 [ 197.097400][T10884] vlan2: entered allmulticast mode [ 197.102801][T10884] bridge_slave_0: entered allmulticast mode [ 197.150444][T10887] ip6erspan0: entered promiscuous mode [ 197.163144][T10871] lo speed is unknown, defaulting to 1000 [ 197.250653][T10895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1262'. [ 197.427017][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 197.512080][T10900] chnl_net:caif_netlink_parms(): no params data found [ 197.937203][T10947] lo speed is unknown, defaulting to 1000 [ 197.944921][T10940] lo speed is unknown, defaulting to 1000 [ 198.260909][T10956] lo speed is unknown, defaulting to 1000 [ 198.552905][T10974] netlink: 'syz.4.1282': attribute type 10 has an invalid length. [ 198.566718][T10974] batman_adv: batadv0: Removing interface: dummy0 [ 198.582342][T10974] netlink: 'syz.4.1282': attribute type 10 has an invalid length. [ 199.041037][T11003] netlink: 'syz.0.1288': attribute type 32 has an invalid length. [ 199.227990][T11021] netlink: 'syz.0.1288': attribute type 2 has an invalid length. [ 199.427260][T11030] __nla_validate_parse: 6 callbacks suppressed [ 199.427279][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 200.046446][T11061] netlink: 'syz.3.1299': attribute type 3 has an invalid length. [ 200.084204][T11061] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1299'. [ 200.188183][T11043] bridge0: port 3(syz_tun) entered blocking state [ 200.205572][T11043] bridge0: port 3(syz_tun) entered disabled state [ 200.220011][T11043] syz_tun: entered allmulticast mode [ 200.227946][T11043] syz_tun: entered promiscuous mode [ 200.269826][T11072] syz_tun: entered allmulticast mode [ 200.323130][T11077] dvmrp8: entered allmulticast mode [ 200.373528][T11077] syz_tun: left allmulticast mode [ 200.379445][T11077] dvmrp8: left allmulticast mode [ 200.497864][T11075] sctp: [Deprecated]: syz.0.1302 (pid 11075) Use of int in max_burst socket option deprecated. [ 200.497864][T11075] Use struct sctp_assoc_value instead [ 200.582913][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1305'. [ 200.798655][T11050] infiniband syz1: set down [ 200.804664][T11050] infiniband syz1: added syz_tun [ 200.812165][T11050] syz1: rxe_create_cq: returned err = -12 [ 200.825101][T11050] infiniband syz1: Couldn't create ib_mad CQ [ 200.859322][T11050] infiniband syz1: Couldn't open port 1 [ 200.985511][T11050] RDS/IB: syz1: added [ 201.024302][T11096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.089256][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 201.118753][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 201.161513][T11102] netlink: 'syz.0.1310': attribute type 5 has an invalid length. [ 201.187895][T11105] tunl0: Caught tx_queue_len zero misconfig [ 201.196756][T11107] can: request_module (can-proto-0) failed. [ 201.203301][T11096] netlink: 'syz.2.1306': attribute type 10 has an invalid length. [ 201.212192][T11096] bond0: (slave wlan1): refused to change device type [ 201.387098][T11123] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 201.420439][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 201.426738][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 201.426754][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 201.774111][T11138] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1320'. [ 201.970514][T11143] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1322'. [ 202.027463][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1322'. [ 202.043665][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 202.237915][T11153] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 202.398918][T11153] bond4 (unregistering): Released all slaves [ 202.659292][T11161] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1326'. [ 202.740168][T11168] netlink: 'syz.4.1328': attribute type 2 has an invalid length. [ 203.086450][T11184] netlink: 'syz.2.1330': attribute type 22 has an invalid length. [ 203.185018][T11187] lo speed is unknown, defaulting to 1000 [ 204.288162][T11204] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 204.297739][T11204] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 205.069448][T11235] __nla_validate_parse: 2 callbacks suppressed [ 205.069466][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1342'. [ 205.109740][T11238] netlink: 'syz.4.1343': attribute type 4 has an invalid length. [ 205.256753][T11248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 205.297298][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1342'. [ 206.447153][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 206.776278][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 206.961042][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 207.182137][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 207.220763][T11336] netlink: 'syz.0.1368': attribute type 10 has an invalid length. [ 207.243240][T11336] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1368'. [ 207.271230][T11336] netlink: 'syz.0.1368': attribute type 10 has an invalid length. [ 207.285605][T11336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1368'. [ 207.285687][T11332] can: request_module (can-proto-5) failed. [ 207.311352][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 207.327081][T11339] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 207.569751][T11345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1372'. [ 208.785226][T11385] pim6reg: entered allmulticast mode [ 208.821359][T11385] pim6reg: left allmulticast mode [ 210.725386][T11475] __nla_validate_parse: 7 callbacks suppressed [ 210.725405][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 210.915002][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1408'. [ 210.957440][T11479] can: request_module (can-proto-0) failed. [ 211.134617][T11490] vlan2: entered promiscuous mode [ 211.175913][T11490] bond0: entered promiscuous mode [ 211.205829][T11490] : entered promiscuous mode [ 211.216078][T11490] bond_slave_1: entered promiscuous mode [ 211.222008][T11490] !: entered promiscuous mode [ 211.749429][T11517] netlink: set zone limit has 8 unknown bytes [ 211.768112][T11516] tipc: Enabled bearer , priority 10 [ 211.814759][T11521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1422'. [ 211.833980][T11521] openvswitch: netlink: Flow key attr not present in new flow. [ 212.082792][T11534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1427'. [ 212.201403][T11539] lo speed is unknown, defaulting to 1000 [ 212.279037][T11538] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 212.337818][T11548] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 212.345589][T11548] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 212.379347][T11550] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 212.406115][T11550] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 212.766226][ T7708] tipc: Node number set to 2625613443 [ 212.874555][T11571] syzkaller1: entered promiscuous mode [ 212.894495][T11571] syzkaller1: entered allmulticast mode [ 213.227201][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 213.247993][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 213.481325][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 213.488481][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 213.529955][T11596] netlink: 'syz.3.1445': attribute type 10 has an invalid length. [ 213.545302][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 213.724086][T11574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 213.733379][T11574] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 213.799009][T11574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.809327][T11574] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 213.831493][T11574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.856053][T11574] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 213.889766][T11574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 213.895996][T11574] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 213.972827][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 214.367529][T11636] netlink: 'syz.4.1459': attribute type 4 has an invalid length. [ 214.380856][T11636] netlink: 'syz.4.1459': attribute type 4 has an invalid length. [ 214.440192][T11641] netlink: 'syz.1.1457': attribute type 11 has an invalid length. [ 214.504990][T11641] macvtap0: entered promiscuous mode [ 214.510818][T11641] batadv0: entered promiscuous mode [ 214.519159][T11641] macvtap0: entered allmulticast mode [ 214.538938][T11641] batadv0: entered allmulticast mode [ 214.562117][T11641] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 214.578208][T11648] netlink: 'syz.2.1462': attribute type 7 has an invalid length. [ 214.596238][T11648] netlink: 'syz.2.1462': attribute type 8 has an invalid length. [ 214.858110][T11665] bond0: (slave batadv_slave_0): Releasing backup interface [ 214.902299][T11665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.086528][T11682] : option downdelay: invalid value (18446744073709551615) [ 215.094039][T11682] : option downdelay: allowed values 0 - 2147483647 [ 215.103805][T11682]  (unregistering): Released all slaves [ 215.178699][T11688] lo speed is unknown, defaulting to 1000 [ 215.895548][T11717] __nla_validate_parse: 8 callbacks suppressed [ 215.895618][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1481'. [ 216.092793][T11722] tipc: Enabled bearer , priority 0 [ 216.104096][T11722] syzkaller0: entered promiscuous mode [ 216.115994][T11722] syzkaller0: entered allmulticast mode [ 216.425090][T11734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 216.734746][T11728] tipc: Resetting bearer [ 216.761487][T11721] tipc: Resetting bearer [ 216.803708][T11721] tipc: Disabling bearer [ 216.868348][T11740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.036411][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 217.062534][T11752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.070457][T11754] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1491'. [ 217.083857][T11752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.145435][T11763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1493'. [ 217.165593][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'. [ 217.309320][T11770] netlink: 'syz.4.1496': attribute type 3 has an invalid length. [ 217.511738][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 218.004856][T11818] lo speed is unknown, defaulting to 1000 [ 218.174136][T11826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.267603][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1512'. [ 218.439049][T11845] syzkaller0: entered promiscuous mode [ 218.470051][T11845] syzkaller0: entered allmulticast mode [ 218.612144][T11849] netlink: 'syz.2.1516': attribute type 9 has an invalid length. [ 218.749687][T11862] sctp: [Deprecated]: syz.1.1520 (pid 11862) Use of int in max_burst socket option. [ 218.749687][T11862] Use struct sctp_assoc_value instead [ 218.866298][T11865] 8021q: VLANs not supported on ip6_vti0 [ 218.926486][T11867] lo speed is unknown, defaulting to 1000 [ 218.964945][T11874] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 219.163636][T11882] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1526'. [ 219.182693][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1526'. [ 219.199358][T11884] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.853440][T11902] netlink: 'syz.1.1531': attribute type 21 has an invalid length. [ 221.141545][T11947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.173963][T11950] __nla_validate_parse: 3 callbacks suppressed [ 221.173981][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1545'. [ 221.196122][T11952] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 221.215457][T11947] netlink: 'syz.4.1542': attribute type 142 has an invalid length. [ 221.281308][T11952] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.310671][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 221.379447][T11961] bond4: (slave veth11): Enslaving as an active interface with a down link [ 221.403157][T11950] lo: Caught tx_queue_len zero misconfig [ 221.459996][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 221.470619][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1550'. [ 221.482804][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 221.491981][T11972] netlink: 'syz.3.1550': attribute type 5 has an invalid length. [ 221.623590][T11987] syzkaller0: entered promiscuous mode [ 221.633840][T11987] syzkaller0: entered allmulticast mode [ 221.735443][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 221.801482][T11996] erspan0: left allmulticast mode [ 221.822727][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.831287][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.840974][T11996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.891748][T12002] IPv6: addrconf: prefix option has invalid lifetime [ 222.092259][T12008] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 222.117573][T12008] bond5: entered promiscuous mode [ 222.122922][T12008] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.146517][T12008] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.153376][T12008] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 222.165254][T12008] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 222.189450][T12008] bond5: (slave wireguard0): making interface the new active one [ 222.194412][T12011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.204482][T12011] IPv6: NLM_F_CREATE should be set when creating new route [ 222.211783][T12011] IPv6: NLM_F_CREATE should be set when creating new route [ 222.214783][T12008] wireguard0: entered promiscuous mode [ 222.226984][T12008] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 222.238478][T12011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.272267][T12011] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 222.313695][T12011] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 222.344168][T12016] netlink: 'syz.4.1561': attribute type 3 has an invalid length. [ 222.359848][T12016] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1561'. [ 222.371976][T12014] lo speed is unknown, defaulting to 1000 [ 223.087684][T12055] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 223.102073][T12055] bond5 (unregistering): Released all slaves [ 223.158601][T12050] lo speed is unknown, defaulting to 1000 [ 223.546308][T12072] lo speed is unknown, defaulting to 1000 [ 223.905519][T12086] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 223.944291][T12086] bond6: entered promiscuous mode [ 223.950580][T12086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.017569][T12086] bond6: (slave bridge3): making interface the new active one [ 224.025198][T12086] bridge3: entered promiscuous mode [ 224.040672][T12086] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 224.823260][T12105] tipc: Enabled bearer , priority 0 [ 224.843819][T12105] syzkaller0: entered promiscuous mode [ 224.850878][T12105] syzkaller0: entered allmulticast mode [ 225.108998][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 225.185064][T12130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1589'. [ 225.355091][T12135] lo speed is unknown, defaulting to 1000 [ 225.448344][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 225.565751][T12104] tipc: Resetting bearer [ 225.612601][T12104] tipc: Disabling bearer [ 225.989363][T12166] netlink: 'syz.1.1599': attribute type 21 has an invalid length. [ 226.020527][T12171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.251165][T12182] __nla_validate_parse: 5 callbacks suppressed [ 226.251183][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 226.962396][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 227.010329][T12216] tipc: Failed to remove unknown binding: 66,1,1/0:2282781712/2282781714 [ 227.011125][T12213] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.031103][T12218] delete_channel: no stack [ 227.084148][T12213] bond2: (slave macvlan0): Releasing backup interface [ 227.124714][T12213] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 227.258117][T12231] TCP: TCP_TX_DELAY enabled [ 227.345524][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 227.398408][T12248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1623'. [ 227.408122][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1621'. [ 227.516082][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 227.648239][T12257] lo speed is unknown, defaulting to 1000 [ 227.777953][T12270] netlink: 'syz.4.1628': attribute type 13 has an invalid length. [ 227.813147][T12270] netlink: 'syz.4.1628': attribute type 17 has an invalid length. [ 227.825551][T12272] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1630'. [ 228.189444][T12284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1632'. [ 228.201774][T12270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.414251][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 228.452537][T12288] lo speed is unknown, defaulting to 1000 [ 228.829289][T12296] tipc: Enabling of bearer rejected, failed to enable media [ 228.863205][T12296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1636'. [ 229.410093][T12310] lo speed is unknown, defaulting to 1000 [ 229.931843][T12336] ip6gre3: entered allmulticast mode [ 230.056167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.494755][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.502760][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.510668][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.518570][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.526497][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.534385][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.542350][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.550259][T12351] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.846793][T12355] vlan0: entered allmulticast mode [ 230.852021][T12355] bridge_slave_0: entered allmulticast mode [ 230.988494][T12362] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 231.409060][T12380] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 231.434645][T12380] bond7 (unregistering): Released all slaves [ 231.688553][T12388] lo speed is unknown, defaulting to 1000 [ 232.036181][T12403] tun0: tun_chr_ioctl cmd 1074025673 [ 232.162308][T12416] __nla_validate_parse: 3 callbacks suppressed [ 232.162327][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 232.286637][T12400] lo speed is unknown, defaulting to 1000 [ 232.298902][T12416] bond5 (unregistering): Released all slaves [ 232.500398][T12420] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.621398][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 232.642096][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 232.677022][T12431] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 232.679632][T12426] lo speed is unknown, defaulting to 1000 [ 232.736250][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 232.758977][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 233.106699][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'. [ 233.510240][T12464] netlink: 'syz.0.1676': attribute type 10 has an invalid length. [ 233.829179][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1680'. [ 234.085964][T12488] erspan0: left allmulticast mode [ 234.103875][T12488] net_ratelimit: 46 callbacks suppressed [ 234.103889][T12488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.370193][T12496] tipc: Started in network mode [ 234.375108][T12496] tipc: Node identity dec091f14e7e, cluster identity 4711 [ 234.413965][T12496] tipc: Enabled bearer , priority 0 [ 234.439935][T12505] syzkaller0: entered promiscuous mode [ 234.447879][ T30] audit: type=1800 audit(1759557180.202:7): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1689" name="memory.events" dev="tmpfs" ino=1794 res=0 errno=0 [ 234.481984][T12505] syzkaller0: entered allmulticast mode [ 234.528085][T12496] netlink: 'syz.0.1686': attribute type 13 has an invalid length. [ 234.539080][ T30] audit: type=1804 audit(1759557180.222:8): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1689" name="/newroot/347/memory.events" dev="tmpfs" ino=1794 res=1 errno=0 [ 234.574958][T12496] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1686'. [ 234.624635][T12509] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1690'. [ 234.648280][T12495] tipc: Resetting bearer [ 234.699105][T12495] tipc: Disabling bearer [ 234.890087][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 234.916636][T12533] veth0_to_bond: entered allmulticast mode [ 234.923576][T12540] netlink: 'syz.0.1697': attribute type 2 has an invalid length. [ 235.224677][T12553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.285898][T12565] netlink: 'syz.1.1704': attribute type 83 has an invalid length. [ 235.853142][T12594] Bluetooth: MGMT ver 1.23 [ 237.027246][T12606] nftables ruleset with unbound chain [ 237.171034][T12617] hsr0: mtu greater than device maximum [ 237.364981][T12622] lo speed is unknown, defaulting to 1000 [ 237.395051][T12628] __nla_validate_parse: 10 callbacks suppressed [ 237.395077][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 237.411798][T12623] lo speed is unknown, defaulting to 1000 [ 237.436950][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 237.663285][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1722'. [ 237.819390][T12632] lo speed is unknown, defaulting to 1000 [ 237.868382][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1723'. [ 237.868382][T12636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1723'. [ 238.260204][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 238.837263][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 239.969117][T12680] 8021q: VLANs not supported on vxcan0 [ 240.169727][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1736'. [ 240.302535][T12685] netlink: 'syz.2.1737': attribute type 12 has an invalid length. [ 240.449595][T12694] tun0: tun_chr_ioctl cmd 1074025675 [ 240.457970][T12694] tun0: persist enabled [ 240.465231][T12694] tun0: tun_chr_ioctl cmd 1074025675 [ 240.474031][T12694] tun0: persist enabled [ 240.486034][T12696] tun0: tun_chr_ioctl cmd 1074025673 [ 241.175684][T12706] tipc: Can't bind to reserved service type 4 [ 241.645683][T12725] netlink: 'syz.1.1747': attribute type 4 has an invalid length. [ 241.993501][T12735] lo speed is unknown, defaulting to 1000 [ 242.175881][ T30] audit: type=1107 audit(1759557187.902:9): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 242.902295][T12769] dvmrp12: entered allmulticast mode [ 242.928260][T12768] dvmrp12: left allmulticast mode [ 243.291012][T12783] netlink: 'syz.1.1761': attribute type 6 has an invalid length. [ 243.373877][T12787] wg1 speed is unknown, defaulting to 1000 [ 243.582169][T12787] wg1 speed is unknown, defaulting to 1000 [ 243.638412][T12787] wg1 speed is unknown, defaulting to 1000 [ 243.771273][T12791] lo speed is unknown, defaulting to 1000 [ 243.802676][T12787] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 243.909963][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 243.969418][T12787] wg1 speed is unknown, defaulting to 1000 [ 244.012956][T12787] wg1 speed is unknown, defaulting to 1000 [ 244.036828][T12787] wg1 speed is unknown, defaulting to 1000 [ 244.075646][T12787] wg1 speed is unknown, defaulting to 1000 [ 244.097388][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'. [ 244.138508][T12787] wg1 speed is unknown, defaulting to 1000 [ 244.163517][T12787] wg1 speed is unknown, defaulting to 1000 [ 244.242587][T12825] lo speed is unknown, defaulting to 1000 [ 244.349044][T12833] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1769'. [ 244.378848][T12833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1769'. [ 244.395862][T12833] netlink: 245 bytes leftover after parsing attributes in process `syz.4.1769'. [ 244.957172][T12825] wg1 speed is unknown, defaulting to 1000 [ 245.406328][T12879] sctp: [Deprecated]: syz.1.1784 (pid 12879) Use of int in maxseg socket option. [ 245.406328][T12879] Use struct sctp_assoc_value instead [ 245.440495][T12879] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1784'. [ 245.521094][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'. [ 245.551236][T12882] netlink: 'syz.2.1785': attribute type 5 has an invalid length. [ 245.574555][T12882] netlink: 'syz.2.1785': attribute type 8 has an invalid length. [ 245.613110][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'. [ 245.647868][T12881] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1786'. [ 245.662261][T12882] geneve3: entered promiscuous mode [ 245.667654][T12882] geneve3: entered allmulticast mode [ 245.677307][ T3575] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 245.686052][ T3575] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 245.705234][ T3575] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 245.721296][ T3575] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 245.948473][T12896] syzkaller1: entered promiscuous mode [ 245.954287][T12896] syzkaller1: entered allmulticast mode [ 245.962013][T12896] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 246.271945][T12907] syzkaller0: entered promiscuous mode [ 246.277791][T12907] syzkaller0: entered allmulticast mode [ 246.302267][T12910] sctp: [Deprecated]: syz.0.1793 (pid 12910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.302267][T12910] Use struct sctp_sack_info instead [ 246.542520][T12927] 8021q: VLANs not supported on nlmon0 [ 246.577014][T12926] tipc: Enabling of bearer rejected, failed to enable media [ 246.842684][T12950] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1806'. [ 248.387037][T12936] wg1 speed is unknown, defaulting to 1000 [ 248.472312][T12970] syzkaller0: entered promiscuous mode [ 248.485013][T12970] syzkaller0: entered allmulticast mode [ 248.560655][T12986] netlink: 'syz.0.1813': attribute type 1 has an invalid length. [ 248.659663][T12994] bond5: (slave gretap2): making interface the new active one [ 248.668043][T12994] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 249.170628][T13023] __nla_validate_parse: 2 callbacks suppressed [ 249.170646][T13023] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1822'. [ 249.279799][T13029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1826'. [ 249.310872][T13029] vlan2: entered promiscuous mode [ 249.332074][T13029] bond0: entered promiscuous mode [ 249.347614][T13034] tipc: Enabled bearer , priority 10 [ 249.649114][T13047] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1832'. [ 249.673628][T13049] bond6: option mode: unable to set because the bond device is up [ 249.687508][T13049] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 249.695449][T13049] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1833'. [ 249.706479][T13049] rdma_rxe: rxe_newlink: failed to add syz_tun [ 249.869318][T13045] syzkaller0: entered promiscuous mode [ 249.884404][T13045] syzkaller0: entered allmulticast mode [ 250.088470][T13080] netlink: 'syz.1.1837': attribute type 9 has an invalid length. [ 250.114579][T13080] netlink: 'syz.1.1837': attribute type 7 has an invalid length. [ 250.127360][T13080] netlink: 'syz.1.1837': attribute type 8 has an invalid length. [ 250.346281][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1839'. [ 250.465944][ T7708] tipc: Node number set to 2428408305 [ 253.091545][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 253.134866][T13098] netlink: 'syz.0.1842': attribute type 11 has an invalid length. [ 253.264767][T13114] team0: Caught tx_queue_len zero misconfig [ 253.285716][T13114] vlan3: entered allmulticast mode [ 253.550620][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 253.579753][ T6512] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.589334][ T6512] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.598131][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 253.608515][ T6512] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.645730][ T6512] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.615286][T13116] wg1 speed is unknown, defaulting to 1000 [ 254.741334][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1861'. [ 255.050226][T13196] netlink: 'syz.3.1865': attribute type 21 has an invalid length. [ 255.130774][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 255.212165][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 255.226171][T13203] Unsupported xt match [ 255.226188][T13203] unable to load match [ 255.243139][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 255.252473][T13202] Unsupported xt match [ 255.252488][T13202] unable to load match [ 255.413452][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'. [ 255.451934][T13213] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 255.465718][T13213] bond8 (unregistering): Released all slaves [ 255.670305][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.933608][T13174] wg1 speed is unknown, defaulting to 1000 [ 255.941085][T13173] wg1 speed is unknown, defaulting to 1000 [ 255.962022][T13125] wg1 speed is unknown, defaulting to 1000 [ 256.015224][T13168] wg1 speed is unknown, defaulting to 1000 [ 256.394368][T13231] wg1 speed is unknown, defaulting to 1000 [ 257.789898][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 258.013530][T13270] syz_tun: left allmulticast mode [ 258.018735][T13270] syz_tun: left promiscuous mode [ 258.023998][T13270] bridge0: port 3(syz_tun) entered disabled state [ 258.092589][T13270] bond0: (slave 0!): Releasing backup interface [ 258.119609][T13270] bridge_slave_0: left allmulticast mode [ 258.147400][T13270] bridge_slave_0: left promiscuous mode [ 258.156138][T13270] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.186475][T13270] bridge_slave_1: left allmulticast mode [ 258.228704][T13270] bridge_slave_1: left promiscuous mode [ 258.243571][T13270] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.304272][T13270] bond0: (slave bond_slave_0): Releasing backup interface [ 258.331749][T13270] bond0: (slave bond_slave_1): Releasing backup interface [ 258.355094][T13270] team0: Port device team_slave_0 removed [ 258.404406][T13270] team0: Port device 52Àÿ removed [ 258.421158][T13270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.440035][T13270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.468709][T13270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.528031][T13294] batadv_slave_0: entered promiscuous mode [ 258.609640][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 259.188113][T13304] wg1 speed is unknown, defaulting to 1000 [ 259.336689][T13343] 8021q: VLANs not supported on ip_vti0 [ 259.476549][T13346] netlink: 'syz.2.1901': attribute type 1 has an invalid length. [ 259.555041][T13342] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 259.742452][T13360] tipc: Enabled bearer , priority 0 [ 259.751084][T13360] syzkaller0: entered promiscuous mode [ 259.764552][T13360] syzkaller0: entered allmulticast mode [ 259.939112][T13355] tipc: Resetting bearer [ 259.951125][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1907'. [ 259.975032][T13367] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1907'. [ 259.978376][T13355] tipc: Disabling bearer [ 260.021727][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1906'. [ 260.033990][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1907'. [ 260.048635][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1906'. [ 260.236848][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 260.345066][T13388] syzkaller0: entered promiscuous mode [ 260.368870][T13388] syzkaller0: entered allmulticast mode [ 260.450651][T13391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1913'. [ 260.758036][ T6518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.764773][T13403] IPv6: Can't replace route, no match found [ 260.785842][ T6518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.051128][T13417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1919'. [ 261.114797][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'. [ 261.225044][T13417] bond8: entered promiscuous mode [ 261.231006][T13417] bond8: entered allmulticast mode [ 261.236660][T13417] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.245444][T13425] tipc: New replicast peer: 127.0.0.1 [ 261.270867][T13425] tipc: Enabled bearer , priority 10 [ 261.311954][T13428] tipc: Enabling of bearer rejected, already enabled [ 261.573156][T13405] wg1 speed is unknown, defaulting to 1000 [ 261.997469][T13449] syzkaller1: entered promiscuous mode [ 262.003102][T13449] syzkaller1: entered allmulticast mode [ 262.013238][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1924'. [ 262.024696][T13420] wg1 speed is unknown, defaulting to 1000 [ 262.396007][ T5956] tipc: Node number set to 2722970931 [ 262.680479][T13480] netlink: 'syz.2.1932': attribute type 10 has an invalid length. [ 262.731748][T13487] netlink: 'syz.2.1932': attribute type 10 has an invalid length. [ 262.734282][T13480] team0: Failed to send options change via netlink (err -105) [ 262.750430][T13480] team0: Port device dummy0 added [ 262.770390][T13487] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 262.818101][T13487] team0: Failed to send options change via netlink (err -105) [ 262.828979][T13487] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 262.839619][T13487] team0: Port device dummy0 removed [ 262.849709][T13487] dummy0: entered promiscuous mode [ 262.859164][T13487] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 262.921942][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 263.116068][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 263.235944][ T59] bond1: (slave macvlan3): failed to get link speed/duplex [ 263.358485][ T59] bond1: (slave macvlan3): failed to get link speed/duplex [ 263.458059][T13496] wg1 speed is unknown, defaulting to 1000 [ 263.461999][T13528] netlink: 'syz.2.1945': attribute type 5 has an invalid length. [ 263.845946][ T3537] bond1: (slave macvlan3): failed to get link speed/duplex [ 263.870679][T13549] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 264.000194][T13549] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.076646][T13557] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 264.104306][T13557] bond7: (slave batadv1): making interface the new active one [ 264.113766][T13557] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 264.349206][T13560] bond7 (unregistering): (slave batadv1): Releasing active interface [ 264.369907][T13560] bond7 (unregistering): Released all slaves [ 264.447097][ T59] bond1: (slave macvlan3): failed to get link speed/duplex [ 264.566058][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 264.680314][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 264.826343][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 264.834243][T13546] wg1 speed is unknown, defaulting to 1000 [ 264.995970][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 265.226000][ T59] bond1: (slave macvlan3): failed to get link speed/duplex [ 265.294778][T13575] wg1 speed is unknown, defaulting to 1000 [ 265.333026][T13600] __nla_validate_parse: 10 callbacks suppressed [ 265.333045][T13600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1959'. [ 265.398060][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 265.500017][T13609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1962'. [ 265.606451][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 265.747047][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 268.084710][T13629] ip6erspan0: entered promiscuous mode [ 268.888758][ T6518] net_ratelimit: 17 callbacks suppressed [ 268.888779][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 269.112058][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 269.281808][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 269.502170][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 269.911354][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 270.104965][T13645] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1969'. [ 270.202940][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 270.361898][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 270.545265][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 270.761443][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 270.973070][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 272.294051][T13623] wg1 speed is unknown, defaulting to 1000 [ 273.081976][T13668] netlink: 'syz.4.1977': attribute type 21 has an invalid length. [ 273.203662][T13661] netlink: 'syz.2.1974': attribute type 10 has an invalid length. [ 273.995487][ T6512] net_ratelimit: 15 callbacks suppressed [ 273.995509][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 274.219446][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 274.391681][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 274.641300][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 274.904206][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 275.089119][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 275.280521][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 275.663098][ T6512] bond1: (slave macvlan3): failed to get link speed/duplex [ 275.822635][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 275.999867][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 276.648552][ T30] audit: type=1107 audit(1759557222.402:10): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 276.662823][T13711] xt_l2tp: wrong L2TP version: 1 [ 277.015219][T13721] netlink: 'syz.3.1992': attribute type 32 has an invalid length. [ 277.045980][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 277.118646][T13721] bond8: option coupled_control: invalid value (12) [ 277.127517][T13721] bond8 (unregistering): Released all slaves [ 277.162809][T13691] wg1 speed is unknown, defaulting to 1000 [ 277.526928][T13738] netlink: 'syz.4.1997': attribute type 32 has an invalid length. [ 277.594553][T13708] wg1 speed is unknown, defaulting to 1000 [ 277.667161][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1998'. [ 277.828287][T13752] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2000'. [ 277.837806][T13750] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2000'. [ 278.143398][T13767] syzkaller0: entered promiscuous mode [ 278.161364][T13767] syzkaller0: entered allmulticast mode [ 278.181109][T13766] tipc: Enabled bearer , priority 0 [ 278.210945][T13766] tipc: Resetting bearer [ 278.284549][T13766] tipc: Disabling bearer [ 278.667195][T13796] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2011'. [ 278.754738][T13779] wg1 speed is unknown, defaulting to 1000 [ 279.077133][ T49] net_ratelimit: 20 callbacks suppressed [ 279.077154][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 279.225926][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 279.234849][T13793] wg1 speed is unknown, defaulting to 1000 [ 279.369756][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2019'. [ 279.455931][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 279.616410][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 279.792611][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 279.915892][ T6516] bond1: (slave macvlan3): failed to get link speed/duplex [ 280.106475][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 280.266125][ T6518] bond1: (slave macvlan3): failed to get link speed/duplex [ 280.395955][ T49] bond1: (slave macvlan3): failed to get link speed/duplex [ 280.459428][T13878] tipc: Enabled bearer , priority 0 [ 280.484652][T13878] tipc: Enabling of bearer rejected, already enabled [ 280.503982][T13884] netlink: 'syz.4.2033': attribute type 8 has an invalid length. [ 280.512093][T13879] syzkaller0: entered promiscuous mode [ 280.526280][T13879] syzkaller0: entered allmulticast mode [ 280.637520][ T59] bond1: (slave macvlan3): failed to get link speed/duplex [ 280.653432][T13853] wg1 speed is unknown, defaulting to 1000 [ 280.695743][T13879] tipc: Resetting bearer [ 280.758505][T13879] tipc: Disabling bearer [ 283.686421][T13864] wg1 speed is unknown, defaulting to 1000 [ 284.095909][ T3537] net_ratelimit: 3 callbacks suppressed [ 284.095929][ T3537] bond1: (slave macvlan3): failed to get link speed/duplex [ 284.137652][T13933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2045'. [ 284.197285][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 284.320330][T13936] syz_tun: entered allmulticast mode [ 284.375980][ T3537] bond1: (slave macvlan3): failed to get link speed/duplex [ 284.496890][ T59] bond1: (slave macvlan3): failed to get link speed/duplex [ 284.607657][ T3537] bond1: (slave macvlan3): failed to get link speed/duplex [ 284.733932][ T59] bond1: (slave macvlan3): failed to get link speed/duplex [ 284.935232][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 285.009791][T13936] syz_tun: left allmulticast mode [ 285.062230][T13957] bond0: (slave dummy0): Releasing backup interface [ 285.080524][T13957] dummy0: left promiscuous mode [ 285.104617][T13957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.146056][T13939] wg1 speed is unknown, defaulting to 1000 [ 285.638242][T13984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2057'. [ 285.668450][T13956] wg1 speed is unknown, defaulting to 1000 [ 286.002968][T13991] pim6reg: entered allmulticast mode [ 286.020280][T13990] pim6reg: left allmulticast mode [ 286.256917][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 286.641676][T14022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.726718][T14025] netem: incorrect ge model size [ 286.830474][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2064'. [ 286.929295][T14038] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 287.064215][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 287.076673][T14050] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 287.654003][T14026] wg1 speed is unknown, defaulting to 1000 [ 288.188208][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 288.242971][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 288.778893][T14102] pim6reg1: entered promiscuous mode [ 288.811312][T14102] pim6reg1: entered allmulticast mode [ 288.852620][T14052] wg1 speed is unknown, defaulting to 1000 [ 288.958359][T14070] wg1 speed is unknown, defaulting to 1000 [ 292.122254][T14135] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2095'. [ 292.231406][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 292.258558][ T7711] IPVS: starting estimator thread 0... [ 292.288471][T14152] openvswitch: netlink: Tunnel attr 214 out of range max 16 [ 292.365994][T14148] IPVS: using max 27 ests per chain, 64800 per kthread [ 292.551159][T14142] wg1 speed is unknown, defaulting to 1000 [ 292.617682][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 292.701658][T14160] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 292.711711][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 292.764333][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2107'. [ 293.039481][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 293.425049][T14207] netlink: 'syz.1.2116': attribute type 10 has an invalid length. [ 293.452170][T14207] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 293.481493][ T7705] syz1: Port: 1 Link ACTIVE [ 293.489183][T14207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.564871][T14209] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2117'. [ 293.600289][T14209] batadv_slave_0: Caught tx_queue_len zero misconfig [ 293.629639][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 293.665509][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 293.797537][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2120'. [ 293.884354][T14226] bond6: entered promiscuous mode [ 293.890696][T14226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.987435][T14219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.026426][T14219] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 294.062297][T14219] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 294.107765][T14242] hsr_slave_0: left promiscuous mode [ 294.114138][T14242] hsr_slave_1: left promiscuous mode [ 294.181760][T14224] wg1 speed is unknown, defaulting to 1000 [ 294.970539][T14273] netlink: zone id is out of range [ 294.983949][T14273] netlink: zone id is out of range [ 294.998432][T14273] netlink: zone id is out of range [ 295.013980][T14273] netlink: del zone limit has 8 unknown bytes [ 295.148776][T14283] : renamed from bond_slave_0 [ 296.633950][T14272] wg1 speed is unknown, defaulting to 1000 [ 296.962896][T14294] tipc: Enabled bearer , priority 0 [ 296.973978][T14294] syzkaller0: entered promiscuous mode [ 296.992031][T14294] syzkaller0: entered allmulticast mode [ 297.100802][T14269] wg1 speed is unknown, defaulting to 1000 [ 297.107515][T14293] tipc: Resetting bearer [ 297.134665][T14293] tipc: Disabling bearer [ 297.399300][T14309] __nla_validate_parse: 3 callbacks suppressed [ 297.399319][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 297.966681][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2145'. [ 298.003741][T14331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2146'. [ 298.054481][T14336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2147'. [ 298.606167][T14363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2152'. [ 298.651765][T14363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2152'. [ 298.672971][T14367] sctp: [Deprecated]: syz.4.2151 (pid 14367) Use of int in max_burst socket option. [ 298.672971][T14367] Use struct sctp_assoc_value instead [ 299.151325][T14389] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2159'. [ 299.323474][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 299.681457][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'. [ 299.839746][T14385] wg1 speed is unknown, defaulting to 1000 [ 300.092142][T14407] tipc: Enabled bearer , priority 0 [ 300.101768][T14407] syzkaller0: entered promiscuous mode [ 300.122438][T14407] syzkaller0: entered allmulticast mode [ 300.152628][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2166'. [ 300.203193][T14407] tipc: Resetting bearer [ 300.353407][T14406] tipc: Resetting bearer [ 300.478804][T14406] tipc: Disabling bearer [ 300.546582][T14429] tipc: Enabled bearer , priority 0 [ 300.572384][T14429] syzkaller0: entered promiscuous mode [ 300.596294][T14429] syzkaller0: entered allmulticast mode [ 300.816092][T14445] netlink: 'syz.4.2175': attribute type 13 has an invalid length. [ 300.839824][T14445] netlink: 'syz.4.2175': attribute type 17 has an invalid length. [ 300.879368][T14440] xfrm0: entered promiscuous mode [ 300.884440][T14440] xfrm0: entered allmulticast mode [ 301.000308][T14445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.057284][T14426] tipc: Resetting bearer [ 301.077900][T14457] netlink: 'syz.3.2179': attribute type 21 has an invalid length. [ 301.098710][T14426] tipc: Disabling bearer [ 301.602849][T14478] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 301.629284][T14450] wg1 speed is unknown, defaulting to 1000 [ 301.836619][T14486] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 301.920428][T14458] wg1 speed is unknown, defaulting to 1000 [ 303.387148][T14516] __nla_validate_parse: 13 callbacks suppressed [ 303.387166][T14516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2195'. [ 303.573868][T14520] netlink: 'syz.4.2196': attribute type 7 has an invalid length. [ 303.605979][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2196'. [ 303.726216][T14523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2197'. [ 303.746908][T14523] team_slave_1: entered allmulticast mode [ 304.027734][T14535] siw: device registration error -23 [ 304.359248][T14544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2205'. [ 304.530168][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2206'. [ 304.738540][T14555] netlink: 'syz.3.2208': attribute type 11 has an invalid length. [ 304.806280][T14557] netlink: 'syz.3.2208': attribute type 11 has an invalid length. [ 305.623266][T14568] wg1 speed is unknown, defaulting to 1000 [ 305.857478][T14563] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2210'. [ 306.213774][T14597] nicvf0: entered promiscuous mode [ 306.282970][T14599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2215'. [ 306.392647][T14598] vlan0: entered allmulticast mode [ 306.500864][T14607] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 306.531042][T14607] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2217'. [ 306.579478][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 306.698513][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2218'. [ 306.825764][T14616] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 307.028298][T14625] netlink: 'syz.0.2222': attribute type 21 has an invalid length. [ 307.084985][T14625] netlink: 'syz.0.2222': attribute type 4 has an invalid length. [ 307.466277][T14624] wg1 speed is unknown, defaulting to 1000 [ 308.060684][T14643] netlink: 'syz.3.2227': attribute type 7 has an invalid length. [ 308.087568][T14642] delete_channel: no stack [ 308.440014][T14654] __nla_validate_parse: 8 callbacks suppressed [ 308.440032][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 308.556588][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 308.587210][T14658] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 308.682336][T14658] bond7: entered promiscuous mode [ 308.709848][T14658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.826870][T14663] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.846797][T14663] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 308.863915][T14663] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 308.880712][T14663] bond7: (slave wireguard0): making interface the new active one [ 308.888956][T14663] wireguard0: entered promiscuous mode [ 308.896389][T14663] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 309.086164][T14667] syzkaller0: entered promiscuous mode [ 309.091668][T14667] syzkaller0: entered allmulticast mode [ 309.575037][T14683] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.606566][T14684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 310.079097][T14693] bond8: entered promiscuous mode [ 310.098212][T14693] bond8: entered allmulticast mode [ 310.119825][T14693] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.350255][T14707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2247'. [ 310.850750][T14717] vlan0: entered allmulticast mode [ 310.973402][T14729] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2254'. [ 311.153328][T14739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.973564][T14790] bond8: option updelay: invalid value (18446744072065443590) [ 311.991971][T14790] bond8: option updelay: allowed values 0 - 2147483647 [ 312.008205][T14790] bond8 (unregistering): Released all slaves [ 312.108501][T14800] macsec3: entered promiscuous mode [ 312.113891][T14800] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 312.124613][T14800] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 312.192649][T14771] wg1 speed is unknown, defaulting to 1000 [ 312.268854][T14814] openvswitch: netlink: Message has 5436 unknown bytes. [ 312.289196][T14814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.315486][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 312.326361][T14814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2273'. [ 312.648582][T14782] wg1 speed is unknown, defaulting to 1000 [ 312.766096][T14832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2279'. [ 312.846916][T14837] netlink: 'syz.4.2281': attribute type 2 has an invalid length. [ 312.854680][T14837] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2281'. [ 312.886758][T14837] netlink: 'syz.4.2281': attribute type 2 has an invalid length. [ 312.894515][T14837] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2281'. [ 313.027706][T14848] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 313.445330][T14852] wg1 speed is unknown, defaulting to 1000 [ 314.095619][T14894] netlink: 'syz.4.2293': attribute type 21 has an invalid length. [ 314.117834][T14894] __nla_validate_parse: 3 callbacks suppressed [ 314.117854][T14894] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2293'. [ 314.233609][T14894] netlink: 'syz.4.2293': attribute type 5 has an invalid length. [ 314.244069][T14894] netlink: 'syz.4.2293': attribute type 6 has an invalid length. [ 314.271820][T14894] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2293'. [ 314.380682][T14902] netlink: 'syz.3.2296': attribute type 11 has an invalid length. [ 314.400216][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 314.412289][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 314.422468][T14905] netlink: 'syz.0.2297': attribute type 18 has an invalid length. [ 314.542595][T14908] netlink: 'syz.4.2298': attribute type 10 has an invalid length. [ 314.644313][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 314.675581][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 315.007756][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 315.057135][T14935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 315.818038][T14961] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 315.847712][T14961] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2315'. [ 315.897050][T14918] wg1 speed is unknown, defaulting to 1000 [ 315.918885][T14969] netlink: 'syz.2.2317': attribute type 25 has an invalid length. [ 316.409865][T14934] wg1 speed is unknown, defaulting to 1000 [ 316.569546][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2321'. [ 316.973565][T14991] geneve2: left promiscuous mode [ 316.981888][T14991] ip6gre1: left promiscuous mode [ 317.012696][T14991] bond4: left promiscuous mode [ 317.018738][T14991] team1: left promiscuous mode [ 317.023506][T14991] team1: left allmulticast mode [ 317.029072][T14991] bridge1: left promiscuous mode [ 317.034126][T14991] bridge1: left allmulticast mode [ 317.050833][T14991] geneve3: left promiscuous mode [ 317.056230][T14991] geneve3: left allmulticast mode [ 317.065076][T14991] bond8: left promiscuous mode [ 317.070044][T14991] bond8: left allmulticast mode [ 317.095388][T14976] wg1 speed is unknown, defaulting to 1000 [ 317.111576][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223832][ T3575] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.256120][ T3575] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.278434][ T3575] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 317.306012][ T3575] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.320696][ T3575] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.329762][ T3575] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 317.506196][ T3575] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.525889][ T3575] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.537602][ T3575] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 317.608405][ T3575] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.625989][ T3575] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.635719][ T3575] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 318.263212][T15037] : entered promiscuous mode [ 318.348021][T15048] C: renamed from lo (while UP) [ 318.365587][T15048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 318.687950][T15059] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 319.079057][T15078] netlink: 'syz.4.2344': attribute type 12 has an invalid length. [ 319.479563][T15107] 8021q: VLANs not supported on ip6_vti0 [ 319.575438][T15113] __nla_validate_parse: 15 callbacks suppressed [ 319.575459][T15113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2349'. [ 319.593907][T15114] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2352'. [ 319.678022][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 319.999906][T15130] syzkaller1: entered promiscuous mode [ 320.005528][T15130] syzkaller1: entered allmulticast mode [ 320.018307][T15135] netlink: 'syz.1.2360': attribute type 13 has an invalid length. [ 320.027261][T15135] netlink: 'syz.1.2360': attribute type 17 has an invalid length. [ 320.158027][T15135] erspan0: entered promiscuous mode [ 320.224683][T15135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.264075][T15153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2365'. [ 320.343706][T15135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.487828][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 320.530451][T15161] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 320.554022][T15161] bridge0: entered allmulticast mode [ 320.622260][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 320.731558][T15178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2372'. [ 321.240515][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 321.454710][T15189] wg1 speed is unknown, defaulting to 1000 [ 322.468316][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'. [ 322.498150][T15260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2391'. [ 322.505552][T15250] bond6: option mode: unable to set because the bond device is up [ 322.531651][T15214] wg1 speed is unknown, defaulting to 1000 [ 322.577478][T15263] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 322.637320][T15263] team0: Port device dummy0 added [ 322.912396][ T6516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.926177][ T6516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.245875][T15281] syzkaller0: entered promiscuous mode [ 323.251576][T15281] syzkaller0: entered allmulticast mode [ 323.743019][T15317] netlink: 'syz.0.2408': attribute type 83 has an invalid length. [ 324.746008][T15295] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 325.026799][T15328] __nla_validate_parse: 7 callbacks suppressed [ 325.026817][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 325.070093][T15333] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2414'. [ 325.470084][T15336] wg1 speed is unknown, defaulting to 1000 [ 325.499175][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 325.832152][T15362] netlink: 'syz.4.2422': attribute type 3 has an invalid length. [ 325.842513][T15362] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2422'. [ 326.020785][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 326.039973][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 326.336885][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 326.683980][T15373] wg1 speed is unknown, defaulting to 1000 [ 326.772544][T15398] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 326.783775][T15398] netlink: 'syz.0.2432': attribute type 4 has an invalid length. [ 326.795059][T15398] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2432'. [ 326.849806][T15401] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 326.869230][T15401] netlink: 'syz.0.2432': attribute type 4 has an invalid length. [ 326.901561][T15401] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2432'. [ 327.112898][T15404] bond9: option downdelay: invalid value (18446744073709551615) [ 327.121266][T15404] bond9: option downdelay: allowed values 0 - 2147483647 [ 327.138369][T15404] bond9 (unregistering): Released all slaves [ 328.008898][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 328.178383][T15434] openvswitch: netlink: Missing valid actions attribute. [ 328.190995][T15390] wg1 speed is unknown, defaulting to 1000 [ 328.192868][T15434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.198556][T15372] wg1 speed is unknown, defaulting to 1000 [ 328.338546][T15400] wg1 speed is unknown, defaulting to 1000 [ 329.686568][T15467] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 329.704506][T15467] bond0: (slave 0!): Enslaving as an active interface with an up link [ 329.948056][T15486] netlink: 'syz.2.2456': attribute type 1 has an invalid length. [ 329.957335][T15486] netlink: 'syz.2.2456': attribute type 1 has an invalid length. [ 330.022733][T15492] netlink: 'syz.0.2457': attribute type 49 has an invalid length. [ 330.034382][T15492] netlink: 'syz.0.2457': attribute type 49 has an invalid length. [ 330.089176][T15496] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 330.106588][T15498] __nla_validate_parse: 5 callbacks suppressed [ 330.106607][T15498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2460'. [ 330.107815][T15496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2459'. [ 330.140203][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 330.280024][T15503] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 330.363267][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 330.682270][T15519] Can't find ip_set type  [ 330.967262][T15532] sctp: [Deprecated]: syz.4.2466 (pid 15532) Use of int in maxseg socket option. [ 330.967262][T15532] Use struct sctp_assoc_value instead [ 331.005294][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 331.044246][T15540] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 331.046543][T15531] 8021q: VLANs not supported on caif0 [ 331.115044][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 331.192033][T15540] bond9: entered promiscuous mode [ 331.204101][T15540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.310712][T15552] 8021q: adding VLAN 0 to HW filter on device bond10 [ 331.322824][T15552] bond9: (slave bond10): making interface the new active one [ 331.331677][T15552] bond10: entered promiscuous mode [ 331.340940][T15552] bond9: (slave bond10): Enslaving as an active interface with an up link [ 331.360104][T15551] vlan0: entered promiscuous mode [ 331.365732][T15551] macvtap0: entered promiscuous mode [ 331.437413][T15557] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2474'. [ 331.603242][T15581] netlink: 'syz.3.2476': attribute type 10 has an invalid length. [ 331.694395][T15584] veth7: entered promiscuous mode [ 331.835475][T15587] lo: entered promiscuous mode [ 331.859430][T15587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.167069][T15617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2486'. [ 332.545682][T15647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2494'. [ 332.576891][T15647] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 332.698586][T15606] wg1 speed is unknown, defaulting to 1000 [ 332.797686][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 333.353060][T15640] wg1 speed is unknown, defaulting to 1000 [ 334.012735][T15692] syzkaller1: entered promiscuous mode [ 334.024431][T15692] syzkaller1: entered allmulticast mode [ 334.117786][T15674] wg1 speed is unknown, defaulting to 1000 [ 335.132099][T15737] batadv0: entered promiscuous mode [ 335.142826][T15737] batadv0: entered allmulticast mode [ 335.152139][T15722] __nla_validate_parse: 8 callbacks suppressed [ 335.152157][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'. [ 335.223537][T15739] veth0_to_bond: left allmulticast mode [ 335.235316][T15739] bridge1: left promiscuous mode [ 335.241837][T15739] ip6gre2: left promiscuous mode [ 335.259163][T15739] macsec1: left promiscuous mode [ 335.264263][T15739] macsec1: left allmulticast mode [ 335.272323][T15739] ip6erspan0: left promiscuous mode [ 335.285490][T15739] bond5: left promiscuous mode [ 335.290812][T15739] wireguard0: left promiscuous mode [ 335.308603][T15739] bond6: left promiscuous mode [ 335.313626][T15739] bridge3: left promiscuous mode [ 335.324912][T15739] ip6gre3: left allmulticast mode [ 335.372147][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.392913][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.600039][T15763] bond0: option arp_validate: invalid value (18446744073491447809) [ 335.619990][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 335.672199][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 336.385150][T15799] netlink: 'syz.0.2530': attribute type 23 has an invalid length. [ 336.641408][T15812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2534'. [ 337.443525][T15822] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2537'. [ 337.583602][T15826] sit0: entered promiscuous mode [ 337.588965][T15826] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 337.596801][T15826] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2538'. [ 337.679465][T15830] bond7: option miimon: invalid value (18446744073709551607) [ 337.714782][T15830] bond7: option miimon: allowed values 0 - 2147483647 [ 337.727838][T15830] bond7 (unregistering): Released all slaves [ 338.337103][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2552'. [ 338.439768][T15892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2554'. [ 338.578027][T15892] nbd: socks must be embedded in a SOCK_ITEM attr [ 338.745348][T15894] wg1 speed is unknown, defaulting to 1000 [ 338.825976][T15902] syzkaller0: entered promiscuous mode [ 338.831689][T15902] syzkaller0: entered allmulticast mode [ 339.455657][T15912] netlink: 'syz.1.2559': attribute type 3 has an invalid length. [ 339.463927][T15912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2559'. [ 339.481837][T15905] wg1 speed is unknown, defaulting to 1000 [ 339.678896][T15925] netlink: 'syz.3.2562': attribute type 8 has an invalid length. [ 339.850245][T15941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2561'. [ 340.408898][T15967] __nla_validate_parse: 1 callbacks suppressed [ 340.408916][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2570'. [ 340.425565][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2570'. [ 340.438605][T15967] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2570'. [ 340.681555][T15961] wg1 speed is unknown, defaulting to 1000 [ 340.967580][T15971] wg1 speed is unknown, defaulting to 1000 [ 341.194441][T15999] netlink: 'syz.1.2576': attribute type 1 has an invalid length. [ 341.295726][T15999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.347215][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 341.441838][T16018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.494640][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 341.551822][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 341.566618][T16013] veth3: entered promiscuous mode [ 341.641645][T16012] macvlan1: entered promiscuous mode [ 341.658027][T16014] vlan2: entered promiscuous mode [ 341.930707][T16034] netlink: 'syz.1.2584': attribute type 10 has an invalid length. [ 341.957806][T16032] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2582'. [ 341.979221][T16034] bond0: (slave 0!): Releasing backup interface [ 341.987441][T16030] netlink: 'syz.1.2584': attribute type 10 has an invalid length. [ 342.002771][T16034] team0: Port device 0! added [ 342.017214][T16025] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2582'. [ 342.037763][T16030] team0: Port device 0! removed [ 342.082548][T16030] bond0: (slave 0!): Enslaving as an active interface with an up link [ 342.340265][T16049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 342.354598][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 343.020815][T16101] tipc: Failed to remove unknown binding: 66,1,1/2428408305:3680147926/3680147928 [ 343.031899][T16101] tipc: Failed to remove unknown binding: 66,1,1/2428408305:3680147926/3680147928 [ 343.158058][T16110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.272277][T16118] veth0: entered promiscuous mode [ 343.294225][T16118] veth0: left promiscuous mode [ 343.759084][T16127] wg1 speed is unknown, defaulting to 1000 [ 343.817853][ T59] wlan0: Trigger new scan to find an IBSS to join [ 344.422237][T16157] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 344.437736][T16157] bond9 (unregistering): Released all slaves [ 344.769111][T16177] tipc: Enabling of bearer rejected, failed to enable media [ 344.824171][T16180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.869023][T16180] bond0: (slave rose0): Enslaving as an active interface with an up link [ 345.002429][T16188] sctp: [Deprecated]: syz.2.2625 (pid 16188) Use of int in max_burst socket option. [ 345.002429][T16188] Use struct sctp_assoc_value instead [ 345.072030][T16171] wg1 speed is unknown, defaulting to 1000 [ 345.387087][T16189] wg1 speed is unknown, defaulting to 1000 [ 345.753222][T16206] __nla_validate_parse: 18 callbacks suppressed [ 345.753241][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2630'. [ 346.042724][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 346.301359][T16234] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 346.545422][T16251] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 346.692504][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2646'. [ 346.814292][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2649'. [ 346.857017][ T59] wlan0: Trigger new scan to find an IBSS to join [ 346.873552][T16248] wg1 speed is unknown, defaulting to 1000 [ 346.887265][T16271] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 347.120155][T16289] netlink: 'syz.4.2651': attribute type 6 has an invalid length. [ 347.348130][T16295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2654'. [ 349.590751][T16321] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2663'. [ 349.600586][T16325] netlink: 'syz.1.2663': attribute type 3 has an invalid length. [ 349.619182][T16336] syz_tun: entered allmulticast mode [ 349.626732][T16339] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.2665'. [ 349.810829][T16336] syz_tun: left allmulticast mode [ 349.834417][ T36] wlan0: Trigger new scan to find an IBSS to join [ 349.853103][T16355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2670'. [ 350.023771][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 350.033438][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 350.289964][T16378] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 350.451954][T16378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.600557][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 350.611979][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 350.623122][T16385] tipc: Enabled bearer , priority 0 [ 350.631398][ T7705] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 350.658032][T16385] syzkaller0: MTU too low for tipc bearer [ 350.667254][T16385] tipc: Disabling bearer [ 350.781018][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.879715][T16397] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 351.009005][T16397] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.127724][T16398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.147867][T16398] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 351.167335][T16398] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 351.196354][ T7705] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 351.296407][T16381] wg1 speed is unknown, defaulting to 1000 [ 351.310043][T16409] __nla_validate_parse: 2 callbacks suppressed [ 351.310063][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 351.357406][T16409] xfrm1: entered promiscuous mode [ 351.362757][T16409] xfrm1: entered allmulticast mode [ 351.369044][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 351.480825][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 351.486984][T16426] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2689'. [ 351.499213][ T5956] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 351.508115][T16424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 351.793244][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2689'. [ 351.832429][T16445] vxcan7: entered allmulticast mode [ 351.865426][T16446] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2694'. [ 352.398975][T16463] netlink: 'syz.3.2699': attribute type 1 has an invalid length. [ 352.495336][T16456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2699'. [ 352.496447][T16465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'. [ 352.514643][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 352.545981][T16465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'. [ 352.873666][T16481] vlan2: entered allmulticast mode [ 352.877535][T16482] xt_socket: unknown flags 0xd0 [ 352.879084][T16481] bridge_slave_0: entered allmulticast mode [ 352.982987][T16494] netlink: 'syz.3.2710': attribute type 1 has an invalid length. [ 353.816845][T16529] netlink: 'syz.2.2719': attribute type 1 has an invalid length. [ 354.156283][T16553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.557236][T16539] wg1 speed is unknown, defaulting to 1000 [ 354.951564][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 357.845592][T16582] __nla_validate_parse: 14 callbacks suppressed [ 357.845613][T16582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 363.822443][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.672403][T16585] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2738'. [ 378.563906][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.741234][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.051492][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.394507][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.454599][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.673290][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.104071][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 390.654797][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.904542][T16602] 8021q: adding VLAN 0 to HW filter on device bond8 [ 392.165599][T16578] wg1 speed is unknown, defaulting to 1000 [ 393.345627][ T5843] Bluetooth: hci5: command tx timeout [ 394.024446][T16542] wg1 speed is unknown, defaulting to 1000 [ 395.434108][ T5843] Bluetooth: hci5: command tx timeout [ 397.529762][ T51] Bluetooth: hci5: command tx timeout [ 397.702404][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 397.812861][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 397.969443][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 398.363960][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 398.555505][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 398.713675][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 398.733550][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 399.154102][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 399.584027][ T5851] Bluetooth: hci5: command tx timeout [ 399.604212][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 399.893661][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.313203][ T5856] Bluetooth: hci7: command tx timeout [ 402.705750][ T5856] Bluetooth: hci6: command tx timeout [ 404.393442][ T5856] Bluetooth: hci7: command tx timeout [ 404.792849][ T5856] Bluetooth: hci6: command tx timeout [ 406.465259][ T5856] Bluetooth: hci7: command tx timeout [ 406.863107][ T5856] Bluetooth: hci6: command tx timeout [ 408.565187][ T5856] Bluetooth: hci7: command tx timeout [ 408.750799][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 408.943491][ T5856] Bluetooth: hci6: command tx timeout [ 413.133259][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 415.670032][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 416.373191][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 427.714987][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'. [ 437.094258][T16640] netlink: 'syz.0.2754': attribute type 12 has an invalid length. [ 437.834206][T16642] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 438.733661][T16638] netlink: 'syz.0.2754': attribute type 12 has an invalid length. [ 439.103325][T16614] wg1 speed is unknown, defaulting to 1000 [ 439.293845][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.392920][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.554114][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.003358][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.084296][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.435197][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.304250][ T51] Bluetooth: hci1: command tx timeout [ 445.353986][ T51] Bluetooth: hci1: command tx timeout [ 447.499544][ T51] Bluetooth: hci1: command tx timeout [ 448.954584][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.603278][ T51] Bluetooth: hci1: command tx timeout [ 452.454670][T16606] wg1 speed is unknown, defaulting to 1000 [ 454.224633][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.294985][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.375233][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.615217][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.845359][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.213421][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 455.373643][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 455.873220][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 456.402437][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 456.582788][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 457.342866][ T5856] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 457.365439][ T51] Bluetooth: hci0: command tx timeout [ 457.682797][ T5856] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 457.845673][ T5856] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 458.073139][ T5856] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 458.474140][ T5856] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 459.264123][ T5843] Bluetooth: hci8: command tx timeout [ 459.448726][ T5856] Bluetooth: hci0: command tx timeout [ 461.344536][ T51] Bluetooth: hci8: command tx timeout [ 461.503919][ T51] Bluetooth: hci9: command tx timeout [ 461.521607][ T51] Bluetooth: hci0: command tx timeout [ 463.423900][ T51] Bluetooth: hci8: command tx timeout [ 463.593659][ T51] Bluetooth: hci0: command tx timeout [ 463.594883][ T5843] Bluetooth: hci9: command tx timeout [ 465.511806][ T5843] Bluetooth: hci8: command tx timeout [ 465.663345][ T5843] Bluetooth: hci9: command tx timeout [ 467.743297][ T5843] Bluetooth: hci9: command tx timeout [ 470.405083][T16613] wg1 speed is unknown, defaulting to 1000 [ 475.234052][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.333459][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.493745][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 475.692648][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 475.953084][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.983417][ T51] Bluetooth: hci3: command tx timeout [ 482.093790][ T51] Bluetooth: hci3: command tx timeout [ 482.884332][ T3537] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.163355][ T51] Bluetooth: hci3: command tx timeout [ 486.062824][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 486.245569][ T51] Bluetooth: hci3: command tx timeout [ 499.604651][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.854331][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.194985][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.593714][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.854083][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.435319][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.673327][ T5843] Bluetooth: hci2: command tx timeout [ 505.744601][ T5843] Bluetooth: hci2: command tx timeout [ 507.824210][ T5843] Bluetooth: hci2: command tx timeout [ 509.921705][ T5843] Bluetooth: hci2: command tx timeout [ 513.694484][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.814375][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.894280][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.330499][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.523778][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 516.009411][ T5856] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 516.123679][ T5856] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 516.243718][ T5856] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 516.284225][ T6518] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.364649][ T5856] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 516.504542][ T5856] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 516.593761][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 516.953597][ T5856] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 517.044926][ T5856] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 517.232584][ T5856] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 517.424675][ T5856] Bluetooth: hci4: command tx timeout [ 517.804048][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 519.502388][ T5851] Bluetooth: hci4: command tx timeout [ 520.225488][ T5851] Bluetooth: hci11: command tx timeout [ 520.464682][ T5851] Bluetooth: hci10: command tx timeout [ 521.593628][ T5851] Bluetooth: hci4: command tx timeout [ 522.304351][ T5856] Bluetooth: hci11: command tx timeout [ 522.544097][ T5856] Bluetooth: hci10: command tx timeout [ 522.845715][ T6512] team0: Port device geneve0 removed [ 523.663742][ T5856] Bluetooth: hci4: command tx timeout [ 524.173787][ T5856] Bluetooth: hci7: command 0x0406 tx timeout [ 524.193772][ T5856] Bluetooth: hci6: command 0x0406 tx timeout [ 524.213889][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 524.415765][ T5856] Bluetooth: hci11: command tx timeout [ 524.645656][T16673] Bluetooth: hci10: command tx timeout [ 526.475079][ T5843] Bluetooth: hci11: command tx timeout [ 526.715760][ T5843] Bluetooth: hci10: command tx timeout [ 526.954103][ T6512] team0: Port device bridge1 removed [ 535.672445][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 535.963845][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 536.032946][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 536.323841][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 536.513875][ T51] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 537.324217][ T6512] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 538.295416][ T6512] bond0 (unregistering): Released all slaves [ 539.203277][ T51] Bluetooth: hci12: command tx timeout [ 541.274218][ T51] Bluetooth: hci12: command tx timeout [ 543.353541][ T51] Bluetooth: hci12: command tx timeout [ 545.423499][ T51] Bluetooth: hci12: command tx timeout [ 546.062288][ T6512] bond1 (unregistering): Released all slaves [ 550.112274][ T1090] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.679846][ T6512] bond2 (unregistering): Released all slaves [ 554.461051][ T6512] bond3 (unregistering): Released all slaves [ 559.795210][ T5843] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 559.933772][ T5843] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 560.205542][ T5843] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 560.514805][ T5843] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 560.672378][ T5843] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 562.475316][ T6512] bond4 (unregistering): Released all slaves [ 562.902794][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.642412][ T6512] bond5 (unregistering): Released all slaves [ 563.824981][ T51] Bluetooth: hci13: command tx timeout [ 564.953205][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 565.913160][ T5843] Bluetooth: hci13: command tx timeout [ 567.995044][ T5843] Bluetooth: hci13: command tx timeout [ 570.072683][ T5843] Bluetooth: hci13: command tx timeout [ 570.553923][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 570.634197][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 570.733742][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 571.085649][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 571.384052][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 571.833022][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 572.055114][ T5851] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 572.203560][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 572.732989][ T6512] bond6 (unregistering): (slave macvlan0): Releasing backup interface [ 572.762734][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 572.945036][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 573.434452][ T6512] bond6 (unregistering): Released all slaves [ 573.984104][ T51] Bluetooth: hci14: command tx timeout [ 575.344808][ T51] Bluetooth: hci15: command tx timeout [ 575.534970][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 575.592895][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 575.684771][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 575.923884][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 576.043501][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 576.065209][ T5843] Bluetooth: hci14: command tx timeout [ 577.442917][ T5851] Bluetooth: hci15: command tx timeout [ 578.154004][ T5851] Bluetooth: hci14: command tx timeout [ 578.704387][T16673] Bluetooth: hci16: command tx timeout [ 579.502614][T16673] Bluetooth: hci15: command tx timeout [ 580.223459][T16673] Bluetooth: hci14: command tx timeout [ 580.318617][T16673] Bluetooth: hci8: command 0x0406 tx timeout [ 580.324676][T16673] Bluetooth: hci0: command 0x0406 tx timeout [ 580.784435][T16673] Bluetooth: hci16: command tx timeout [ 581.584497][ T5843] Bluetooth: hci15: command tx timeout [ 582.475207][ T6512] bond7 (unregistering): Released all slaves [ 582.873354][ T5843] Bluetooth: hci16: command tx timeout [ 583.375051][ T6518] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.952592][ T51] Bluetooth: hci16: command tx timeout [ 585.513266][ T51] Bluetooth: hci9: command 0x0406 tx timeout [ 589.924348][ T6512] bond8 (unregistering): Released all slaves [ 597.042594][ T6512] bond9 (unregistering): (slave bond10): Releasing backup interface [ 597.185500][ T6512] bond10 (unregistering): left promiscuous mode [ 597.474126][ T6512] bond9 (unregistering): Released all slaves [ 598.654194][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 599.053965][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 599.103224][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 599.315607][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 599.595676][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 600.789923][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 602.145175][T16673] Bluetooth: hci17: command tx timeout [ 604.223175][T16673] Bluetooth: hci17: command tx timeout [ 604.821242][ T6512] bond10 (unregistering): Released all slaves [ 606.322467][T16673] Bluetooth: hci17: command tx timeout [ 608.384315][T16673] Bluetooth: hci17: command tx timeout [ 610.684026][T16578] bond0: (slave syz_tun): Releasing backup interface [ 610.794330][T16578] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 615.983848][ T3575] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 620.132254][ T6512] tipc: Left network mode [ 624.344429][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.644308][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.825369][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 626.084240][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 626.343189][ T31] INFO: task syz-executor:16614 blocked for more than 143 seconds. [ 626.454356][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 626.554314][ T31] Not tainted syzkaller #0 [ 626.783718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.833754][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 627.045701][ T31] task:syz-executor state:D stack:21696 pid:16614 tgid:16614 ppid:1 task_flags:0x400140 flags:0x00080003 [ 627.332840][ T31] Call Trace: [ 627.634901][ T31] [ 627.723738][ T31] __schedule+0x1798/0x4cc0 [ 627.903220][ T31] ? __lock_acquire+0xab9/0xd20 [ 628.163198][ T31] ? __lock_acquire+0xab9/0xd20 [ 628.312955][ T31] ? __pfx___schedule+0x10/0x10 [ 628.453749][ T31] ? schedule+0x91/0x360 [ 628.654532][ T31] schedule+0x165/0x360 [ 628.784829][ T31] schedule_preempt_disabled+0x13/0x30 [ 628.983638][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 629.133819][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 629.363978][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 629.434656][ T51] Bluetooth: hci2: command tx timeout [ 629.513571][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 629.713840][ T31] ? __lock_acquire+0xab9/0xd20 [ 629.882416][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 630.034342][ T31] down_write+0x1ab/0x1f0 [ 630.142770][ T31] ? __pfx_down_write+0x10/0x10 [ 630.283530][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 630.412531][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 630.563426][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 630.683206][ T31] rdma_dev_exit_net+0x8c/0x340 [ 630.803304][ T31] ? __pfx___might_resched+0x10/0x10 [ 630.944566][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 631.064544][ T31] ? net_generic+0x1e/0x240 [ 631.174720][ T31] ? mutex_is_locked+0x17/0x50 [ 631.272764][ T31] ? rtnl_is_locked+0x15/0x20 [ 631.333404][ T31] ops_undo_list+0x49a/0x990 [ 631.412063][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 631.505712][ T51] Bluetooth: hci2: command tx timeout [ 631.551980][ T31] ? ops_init+0x469/0x5c0 [ 631.814983][ T31] setup_net+0x2d6/0x320 [ 631.862871][ T31] ? __pfx_setup_net+0x10/0x10 [ 631.963534][ T31] ? copy_net_ns+0x337/0x4e0 [ 632.174696][ T31] ? down_read_killable+0x1d1/0x350 [ 632.333327][ T31] ? preinit_net+0x47d/0x740 [ 632.464662][ T31] copy_net_ns+0x34e/0x4e0 [ 632.612753][ T31] create_new_namespaces+0x3f3/0x720 [ 632.692031][ T31] ? security_capable+0x7e/0x2e0 [ 632.824324][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 632.983890][ T31] ksys_unshare+0x4c8/0x8c0 [ 633.113382][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 633.172948][ T31] __x64_sys_unshare+0x38/0x50 [ 633.254156][ T31] do_syscall_64+0xfa/0x3b0 [ 633.352756][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.503382][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.583559][ T51] Bluetooth: hci2: command tx timeout [ 633.645115][ T31] ? clear_bhb_loop+0x60/0xb0 [ 633.720826][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.775384][ T31] RIP: 0033:0x7febc65906c7 [ 633.804299][ T31] RSP: 002b:00007ffd91f3e9e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 634.064109][ T31] RAX: ffffffffffffffda RBX: 00007febc67e5f40 RCX: 00007febc65906c7 [ 634.115110][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 634.202133][ T31] RBP: 00007febc67e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 634.384613][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 634.524485][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 634.643048][ T31] [ 634.694963][ T31] [ 634.694963][ T31] Showing all locks held in the system: [ 634.763846][ T31] 1 lock held by rcu_preempt/16: [ 634.895185][ T31] 1 lock held by khungtaskd/31: [ 634.983946][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 635.132076][ T31] 4 locks held by kworker/u8:2/36: [ 635.245393][ T31] #0: ffff888145295948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.405418][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.664939][ T51] Bluetooth: hci2: command tx timeout [ 635.694481][ T31] #2: ffff888054a60700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 635.782559][ T31] #3: ffffffff8ee19810 (devices_rwsem){++++}-{4:4}, at: disable_device+0xb7/0x320 [ 635.832196][ T31] 3 locks held by kworker/u8:4/59: [ 635.925420][ T31] #0: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 636.083012][ T31] #1: ffffc9000210fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 636.292481][ T31] #2: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30